Chinese Products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVeCi-00000000IXr-3xXs

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 17:43:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 17:43:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m93200.xmail.ntesmail.com ([103.126.93.200]:26938)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVZRv-00000000GVy-2GXA

for sales@nk.ca;

Fri, 05 Jun 2026 12:39:32 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_473202_1691044296.1780684702952"

To: sales

Subject: =?UTF-8?B?RXhwbG9yZSBvdXIgUHVyZSBCZWF1dHkgUHJvZHVjdCA=?=

X-Priority: 3

MIME-Version: 1.0

Received: from qywhsbeauty@hanshabeauty.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 6 Jun 2026 02:38:22 +0800 (GMT+08:00)

From: Kathy

Date: Sat, 6 Jun 2026 02:38:22 +0800 (GMT+08:00)

X-WM-Tid: 0a9e991444dad0c2kusy363da071989c1

DKIM-Signature: a=rsa-sha256;

b=Euz4kG6WJ6SHaxdiwJIkMyRDktaSi8bs2NBEFnRbe+FaEXppn0BJnut/ThFs4yyCWtrnizZSxeB/A//j6uXe5gAhj878dmqYktNbm+nJs8ikey0ku5LyWlyTU+Hle/oqWetQm6COUSyz/qOjtRlPDnmqT3o57vjy09rRCaYeXX2zLVOV9E7vx5w2GJMYz7Kqedrg/MoecKFPNGh/2CR9v6SNplirL9OrF3VKw7njQSklCX23h3UFSpWVnsdaA7de7FuyRRcuQRBNohgCMyZbaS3sria0W+EsPzMdpJb8y3D7g0Co7rltQYWCvnvJCU7yDMlanPyh0engUZ9GrNh12w==; s=default; c=relaxed/relaxed; d=hanshabeauty.com; v=1;

bh=I1CSMjhaNkIZBBF6aCdBc9iGX+V9t51tb7HRTymtkTI=;

h=date:mime-version:subject:message-id:from;

Message-ID:









Continue to discover our newest features by using . Maintain Updates



Ready to silence these messages? Entry Personalize Delivery.

Greetings,





Zhuhai Onward Beauty Cosmetics CO., Ltd is a cosmetics company . It was founded in 1992. lt is located in the beautiful Zhuhai city of GuangdongProvince. lt is very close to.Hongkong,merely about 45 minutes of bus.And Macau is just on the boarder of it.

We are the most famous fragrance polypeptide skin care products manufacture in China,with the reputation of"The kingdom of Aromatherapy in China".As one of the earliest enterprises that promote aromatherapy beauty service and enlighten consumers in China,it is always committed to applying the most appropriate proportion of plant extracts in beauty and health products.



Kathy



Warmly,



qywhsbeauty@hanshabeauty.com



Website: http://www.hanshabeauty.com/





Address: Jinshuo Garden, No. 45, Qinshi Road, Sanzao Town, Jinwan District, Zhuhai City, Guangdong Province, China

























Chinese Products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVeCN-00000000IXD-2Cea

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 17:43:35 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 17:43:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8185.xmail.ntesmail.com ([156.224.81.85]:34354)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVZC8-00000000G4I-0Jhr

for sales@nk.ca;

Fri, 05 Jun 2026 12:23:09 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_450853_932890400.1780683722179"

To: sales

Subject: =?UTF-8?B?TGFzdCBDaGFuY2U6IEV4Y2x1c2l2ZSBPdXRkb29yIEdlYXIgU2FtcGxlcyBCZWZvcmUgRGVjLiAzMHRo?=

X-Priority: 3

MIME-Version: 1.0

Received: from carson@ysr.cn( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 6 Jun 2026 02:22:02 +0800 (GMT+08:00)

From: carson

Date: Sat, 6 Jun 2026 02:22:02 +0800 (GMT+08:00)

X-WM-Tid: 0a9e99054d49d0c0kusy76e318e59159d

Message-ID:





I noticed you haven opened my previous email about Primitive Outdoor’s premium outdoor solutions—and I completely understand how busy things get!



But just in case you missed it: We’re offering FREE samples of our top-selling tents and carts to select partners this month. These products are engineered for durability (3000mm+ waterproof rating) and designed to stand out in crowded markets.



Why respond now?



Only 3 sample kits left for new partners this quarter.

Our automated factory can fast-track your order if confirmed by Dec 30th.



No pressure—just a quick heads-up before slots fill up!





Carson

Sales Manager

ZHEJIANG PRIMITIVE LEISURE PRODUCTS CO.,LTD

EMAIL:Carson@ysr.cn

TEL:+86 18757825476

ADD:Building 4-2, Yongkang Industrial Investment New Materials Industrial Park, No. 309 Huajin Road, Huajie Town, Yongkang, Zhejiang,China





在2026-06-04,carson 写道:



-----原始邮件-----

发件人: carson

发件时间: 2026年06月04日 周四

收件人: [sales ]

主题: Elevate Your Outdoor Business with Primitive Outdoor’s Premium Solutions



Dear Sales,



I hope this email finds you well. My name is Carson from Primitive Outdoor, a leading manufacturer of high-performance outdoor furniture, tents, and wagons. We specialize in delivering durable, innovative products designed to enhance any outdoor experience—from family camping to commercial events.



Why Partner with Us?

✅ Advanced Manufacturing: Fully automated production lines with laser cutting and robotic arms ensure precision and efficiency.

✅ Certified Quality: BSCI and ISO 9001 compliance guarantee rigorous quality control at every stage.

✅ Market Leadership: As a top-tier brand in China, we consistently lead in sales and customer satisfaction.

✅ Custom Solutions: Flexible OEM/ODM services tailored to your brand’s unique needs.



Our Product Highlights

Outdoor Furniture: Lightweight, weather-resistant designs for all terrains.

Tents: All-scenario models with 3000mm+ waterproof ratings.

Carts: Heavy-duty, foldable carts for effortless transport over rough terrain.

Next Steps

Interested in exploring collaboration? We’d be happy to share catalogs, samples, or a customized quote. Reply directly or contact me at carson@ysr.cn to discuss how we can support your business growth.

Looking forward to connecting!





Carson

Sales Manager

ZHEJIANG PRIMITIVE LEISURE PRODUCTS CO.,LTD

EMAIL:Carson@ysr.cn

TEL:+86 18757825476

ADD:Building 4-2, Yongkang Industrial Investment New Materials Industrial Park, No. 309 Huajin Road, Huajie Town, Yongkang, Zhejiang,China





Maxsecure Phish from Google Gmail Part 2



Adelstein Zisner has invited you to Service Invoice Receipt

Title: Service Invoice Receipt

When: Friday, June 5, 2026 at 22:26

Organizer:

Adelstein Zisner

Description:



Confirmation Slip Date: Friday, 05 June 2026 23:26:58

Confirmation Slip Num#: E8LYETJOUFDL12G

Help Contact Number: { 530 941-4573 }



Good day,



We are pleased to confirm that your annual membership has been renewed successfully.



Invoice Summary:



Membership Plan: MaxSecure Protection

Renewal Period: 4yr Warranty

Amount Paid: $401.33 USD

Activation Key: e0195038-5f14-44be-9deb-9c91f037bab7

Client Number: CD7LLBMEJ



Your account remains active and eligible for all membership benefits during the renewal period.



If you would like to make changes to your subscription or discuss cancellation options, please contact our support team.



Thank You Always



Norton Life Lock PC protection



Support Contact Number: +1 (865) 306-8272



Finance Head: Hans Chon

Attendees:



doctor@nl2k.ab.ca



Service Invoice Receipt

Confirmation Slip Date: Friday, 05 June 2026 23:26:58Confirmation Slip Num#: E8LYETJOUFDL12GHelp Contact Number: { 530 941-4573 } Good day, We are pleased to confirm that your annual membership has b





Confirmation Slip Date: Friday, 05 June 2026 23:26:58

Confirmation Slip Num#: E8LYETJOUFDL12G

Help Contact Number: { 530 941-4573 }



Good day,



We are pleased to confirm that your annual membership has been renewed successfully.



Invoice Summary:



Membership Plan: MaxSecure Protection

Renewal Period: 4yr Warranty

Amount Paid: $401.33 USD

Activation Key: e0195038-5f14-44be-9deb-9c91f037bab7

Client Number: CD7LLBMEJ



Your account remains active and eligible for all membership benefits during the renewal period.



If you would like to make changes to your subscription or discuss cancellation options, please contact our support team.



Thank You Always



Norton Life Lock PC protection



Support Contact Number: +1 (865) 306-8272



Finance Head: Hans Chon

When

Saturday Jun 6, 2026 ⋅ 12:26am (Eastern Time - New York)

Organizer

Adelstein Zisner

adelsteinzisner@sgzxcy.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Maxsecure Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6g-000000009yN-0Sle

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:09:14 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:09:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f69.google.com ([209.85.222.69]:56343)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWT6-000000001Jx-30s5

for doctor@nl2k.ab.ca;

Fri, 05 Jun 2026 09:28:29 -0600

Received: by mail-ua1-f69.google.com with SMTP id a1e0cc1a2514c-963d24c3886so1887019241.0

for ; Fri, 05 Jun 2026 08:27:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1780673248; x=1781278048; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=JNawglzjyLUQ7bBIwxcSydbEMhs2tE85khYkiLiJHxQ=;

b=gARcYhGMYoHPxO+jheCWE1fLiCQVnJWzFZR2kTFpOQcTD0o4RldA8EEFY3FyeYImgK

Pv43rwEJ5Pd+aGFBGthqhD9pFRY/5Y36OAL+OyWycKwUPhVbCQOfDO38PZZl6Y2TCueI

4UE5rZ8h3AvQgeeYatsJdPfFrYPeVnbvgqhhvpyicqok/PhvAVmIB5HYRfXzx3qK7HEm

6gO6ecK5DjdHuvoFX6OSz0wzrIneCfR9h4nCzd1iRPPwfZEYCq/T5nSqh0BDPJfYd3Dm

d6IOZ0tprk+ntR+SXa4e7I3TN5PeN7SVuKN2VLAyNO/7Rti6QsGmMxgzdAtFabqnaABZ

Q9qA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sgzxcy-com.20251104.gappssmtp.com; s=20251104; t=1780673248; x=1781278048; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=JNawglzjyLUQ7bBIwxcSydbEMhs2tE85khYkiLiJHxQ=;

b=imvjCULbRwFggU6E4u5bUJblKJbzsnyTnxOyDVhOuqolT+zZN83mAXiYNUiqDVykC7

s68btGuShnRNFO8idWp83dupOhR1Yy5sWhI4QTQjfBAkkQfshv/dEu/I7ZI2icO+rWAI

qhjOI9BC3UnfY4G1VL9HluJcnLHLtZQ4mBspiV1urbJmVwEvqZKC6VOXpq62fztfxG2W

AWR07zfdiJdBEWY7Ha2T+qRLSe317xUv0Ytc5lNa2/8RTa3Snkc7qGmrJFN+0V9IUN/b

8IezOT6vwC8EuJPRijr8HLE/4VFFfx72mkI0FE8NrjcWZ/6CM7bm7nE2odNjKxjkEqWD

4TUw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780673248; x=1781278048;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=JNawglzjyLUQ7bBIwxcSydbEMhs2tE85khYkiLiJHxQ=;

b=sWysD0HLtZgt1pPb0LNGrM21lY3PIsAPVPJBe4im3VXqhgxMTXsKMGEkxWNbOaxUHc

xlTIULgUBpK09fg8yWX6uUBOrifknBLE0nHwum0brquYmD6UOHcYy589iCG5lOlFKEG5

LTphI20r08pbVTqY7ALYAWngww4MlOA8bSlF05KaT4Y4ougZYpI53BR2OpFj63PFTsrt

FI+OFWE9pMlKHFo+7X4ukPBuPlYcRCKPiGOLtfPciEWEoScOt73QGBxsROeZwEvecdxg

1fmZ2dDhggzBRZ8bWA0kL42PZwgHDXNFMCr0d9m/9kIweQ0TJPcSyM9zB7YrDZh1gMc6

VcTw==

X-Gm-Message-State: AOJu0YwxU7ZMhHBBWcoS4ubDlkE1d5E/+LW0E2V2Oe3zuva70TU8AxEC

Nn1HNU0fcxqrNtwlM/xg/6+p7JoNzlvcMR2WedEjcWw73pDzHByWZu4K/+0DGFDWpc9TXjY5YDA

YXwM1ICNUdbi5Dq/52P0G6LrFTVsueBGP9yK9jdrcOAdCnTC5gCitzJDl

MIME-Version: 1.0

X-Received: by 2002:a05:620a:1985:b0:915:a34e:cb68 with SMTP id

af79cd13be357-915a9d58eedmr765509885a.34.1780673237725; Fri, 05 Jun 2026

08:27:17 -0700 (PDT)

Reply-To: Adelstein Zisner

Sender: Google Calendar

Message-ID:

Date: Fri, 05 Jun 2026 15:27:17 +0000

Subject: Invitation: Service Invoice Receipt @ Sat Jun 6, 2026 12:26am (GMT-4) (doctor@nl2k.ab.ca)

From: Adelstein Zisner

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="000000000000cbc3300653834b24"

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Service Invoice Receipt Saturday Jun 6, 2026 â‹… 12:26am Eastern

Time - New York Confirmation Slip Date: Friday, 05 June 2026 23:26:58Confirmation

Slip Num#: E8LYETJOUFDL12GHelp Contact Number: { 530 941-4573 } Good day,

We are pleased to confirm that your annual membership has be [...]



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

[209.85.222.69 listed in dnsbl.ahbl.org]

[209.85.222.69 listed in dnsbl.ahbl.org]

[209.85.222.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.69 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.6 J_CHICKENPOX_26 BODY: 2alpha-pock-6alpha

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.69 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.69 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Invitation: Service Invoice Receipt @ Sat Jun 6, 2026 12:26am (GMT-4) (doctor@nl2k.ab.ca)

Maxsecure Phish from Google Gmail Part 2



Adelstein Zisner has invited you to Service Invoice Receipt

Title: Service Invoice Receipt

When: Friday, June 5, 2026 at 22:26

Organizer:

Adelstein Zisner

Description:



Confirmation Slip Date: Friday, 05 June 2026 23:26:58

Confirmation Slip Num#: E8LYETJOUFDL12G

Help Contact Number: { 530 941-4573 }



Good day,



We are pleased to confirm that your annual membership has been renewed successfully.



Invoice Summary:



Membership Plan: MaxSecure Protection

Renewal Period: 4yr Warranty

Amount Paid: $401.33 USD

Activation Key: e0195038-5f14-44be-9deb-9c91f037bab7

Client Number: CD7LLBMEJ



Your account remains active and eligible for all membership benefits during the renewal period.



If you would like to make changes to your subscription or discuss cancellation options, please contact our support team.



Thank You Always



Norton Life Lock PC protection



Support Contact Number: +1 (865) 306-8272



Finance Head: Hans Chon

Attendees:



doctor@nl2k.ab.ca



Service Invoice Receipt

Confirmation Slip Date: Friday, 05 June 2026 23:26:58Confirmation Slip Num#: E8LYETJOUFDL12GHelp Contact Number: { 530 941-4573 } Good day, We are pleased to confirm that your annual membership has b





Confirmation Slip Date: Friday, 05 June 2026 23:26:58

Confirmation Slip Num#: E8LYETJOUFDL12G

Help Contact Number: { 530 941-4573 }



Good day,



We are pleased to confirm that your annual membership has been renewed successfully.



Invoice Summary:



Membership Plan: MaxSecure Protection

Renewal Period: 4yr Warranty

Amount Paid: $401.33 USD

Activation Key: e0195038-5f14-44be-9deb-9c91f037bab7

Client Number: CD7LLBMEJ



Your account remains active and eligible for all membership benefits during the renewal period.



If you would like to make changes to your subscription or discuss cancellation options, please contact our support team.



Thank You Always



Norton Life Lock PC protection



Support Contact Number: +1 (865) 306-8272



Finance Head: Hans Chon

When

Saturday Jun 6, 2026 ⋅ 12:26am (Eastern Time - New York)

Organizer

Adelstein Zisner

adelsteinzisner@sgzxcy.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Maxsecure Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6m-000000009yY-2jnL

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:09:20 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:09:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f198.google.com ([209.85.222.198]:56646)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWSw-000000001Bb-3zRS

for doctor@nl2k.ab.ca;

Fri, 05 Jun 2026 09:28:21 -0600

Received: by mail-qk1-f198.google.com with SMTP id af79cd13be357-91579011fd1so234902085a.1

for ; Fri, 05 Jun 2026 08:27:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1780673238; x=1781278038; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=JNawglzjyLUQ7bBIwxcSydbEMhs2tE85khYkiLiJHxQ=;

b=Wil2WLDzSbYY3DvNFfGdWhep8OVpWdS3KBi94VS7oIOMpYSrTjhVGWwQ3Tb76JPxcQ

4zIKEKojMXoVaw31/dooqeCcSc3kLJeQAulUKuOCmRTQLbPtUu60wHgG5LP8MXQQIyYx

Z+qzBNCIAvK44kCGa0aVB0zEKliGi7XZDSe5iuNBKKUmowkVJXO3AzYJ/HFdR/taDrFK

wluUft/3azhjIOWWwol86SRbebcJ2PY+ePlg55sKhDhwEBX/FhrglitneYvTK9N5ffdN

MoWrSH0cULA8XHgNJ3krPeLGdZehL6DZHuHuQ+84VmfUVhUoza/PfUNnmqBWU6D2crdF

x77Q==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sgzxcy-com.20251104.gappssmtp.com; s=20251104; t=1780673238; x=1781278038; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=JNawglzjyLUQ7bBIwxcSydbEMhs2tE85khYkiLiJHxQ=;

b=qPwcsw5RxWzavD+83wVoMmXW1WyqogfUVk233yYjp+Mhfo342gadHWNxi4LUi+3kqt

RhOCFXUK0uYZUWKEp+T3jlU/wtWF4rkdiI4r5EF6BqbSfuqsWXV/KAQLfP1Z/Kwz8miX

+AZWSHbGINEFcMpepvn658Hn/x3EP65ltopYApCLzhGyK8FrVvrIcyrhk9aVu9hV5AFA

861mvnU3K5O+w8opHQg2IfSYOo1w4szE+6PMW6mLEZp8/60XFDwIoVA0AmqBLDEvqM51

AnMzrPbKc23JgVq0shLfiYxFP1yWMCo090tsL04uMmMUcSXlPUvkNbdiFI4eiLbu30Bz

MR+w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780673238; x=1781278038;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=JNawglzjyLUQ7bBIwxcSydbEMhs2tE85khYkiLiJHxQ=;

b=F+6edfHmk4V2MSpnyy0+8I5AC+e2p4vSzh/1rUnZoa4Tzi4Bjp4ILUZkiatGZOBXwN

j9lw+qOzdTeXI+2u4d9NWO+hKaJNYLbKopCnAvBRZ3pg8y6U51qSiTf6xYIYrLQ/uB1y

R7BQXuaIzfOjOLJja+J7orXdA4XskGWi68Aw3aHtplWXiF8fHW65xkOkKRlgOm8AfApb

gSc4NkM2v3xIXfTMBWCbeQe88ZCIRM0N1gXVUcoTX/KUGxoRJkQaw5pamh1y8LVhjhXD

4t//m485vvAkhM9wN5BarZoJLg64743Wn3tfQbfHXQPvgpe+pcCm2s6eegbFRctZT9em

ggyw==

X-Gm-Message-State: AOJu0YymMk/HozOzgPzH1ka9U44yC450zlXPBBmnE/7w8+iYF/o0xbXM

3DLIhqjoj51NNPGBWwj/WSv1NHPdNCKq2mmEzdPdmL0fSGxL64VtlTW2/LmGRl3tonZSrqk8xfK

dfymDad2MAZEHfUp8GVRKPyE6wB37wiaSlzWD8rJkcxYYDtGnfUYgNpfa

MIME-Version: 1.0

X-Received: by 2002:a05:620a:1985:b0:915:a34e:cb68 with SMTP id

af79cd13be357-915a9d58eedmr765509885a.34.1780673237725; Fri, 05 Jun 2026

08:27:17 -0700 (PDT)

Reply-To: Adelstein Zisner

Sender: Google Calendar

Message-ID:

Date: Fri, 05 Jun 2026 15:27:17 +0000

Subject: Invitation: Service Invoice Receipt @ Sat Jun 6, 2026 12:26am (GMT-4) (doctor@nl2k.ab.ca)

From: Adelstein Zisner

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="000000000000cbc3300653834b24"

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Service Invoice Receipt Saturday Jun 6, 2026 â‹… 12:26am Eastern

Time - New York Confirmation Slip Date: Friday, 05 June 2026 23:26:58Confirmation

Slip Num#: E8LYETJOUFDL12GHelp Contact Number: { 530 941-4573 } Good day,

We are pleased to confirm that your annual membership has be [...]



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.198 listed in dnsbl.ahbl.org]

[209.85.222.198 listed in dnsbl.ahbl.org]

[209.85.222.198 listed in dnsbl.ahbl.org]

[209.85.222.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.198 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

[209.85.222.198 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.198 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.6 J_CHICKENPOX_26 BODY: 2alpha-pock-6alpha

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.198 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Service Invoice Receipt @ Sat Jun 6, 2026 12:26am (GMT-4) (doctor@nl2k.ab.ca)

Netflix Phish from DigitalOcean Part 3

3D""
base64,iVBORw0KGgoAAAANSUhEUgAAADAAAABYCAYAAAHEokQmAAAABGdBTUEAALGPC/xhBQAA=

DT1JREFUeAG9W22MXFUZvvfO7MzubHeXbXfa3dmlaQCx8qEFCkkRQSMEUdpUkxohiiIxhtQfmhg=

SSDREE/jhD020McTYH0SKyjeIsaKxSlpCMWkURZquoaXd2e1ui+12v2fmXp/n3Dl3zpx77sfMtD=

3JzjnnPe/Hec/7nvd83bX/0z00329bBQtpdPGU/XL+Eo9l5++1igCyoiZnwLHVelB2WNpfrQjAR=

M+QYMOKaJgTYP/nhOu3iYYhhV255goM0cDS7srKm8wfzOeZ+axYWGtbPirKC57XaChlMmwXiXIC=

VoRQQeb3dOWaGwiUyZZ9l9jBkEiMyUuGN8gyc+e5yoqou8vV95oaxjJN8oM2JxsULQvyfiSrAv0=

3dXYAfrcC5ZhEg8quaRC7BY7/s7WrSxQCyVKPvOUbLmhQiKxZdRDZYFv235h/KtNl2buy/d52DJ=

qaJFvC5BDJdoc9PeIGJhJwOa4SSc2FExx1aypMlCd7ijtCQACEEqtB9kxjsASea3m/ZYEKqSnQe=

sxxrBcqvptKBHbt/brzSVhAkMOw5Q0+f0c2Z52uuzKJAgJW1qFreyorb7AsUwmw48qgNBEQaczJ=

BD4qiR7I5a2pOlGIYJWE2NYZScD8c+gak2wWFfVndOHUoFpnuaxPFx1BtTjbtmbhGrpVdaSQa+h=

cy4XiH3SYWnee1Yzled6dKoJedgp2s+l1BL3u9Nlh86JbJ3VEWYcEYV1ZFzm6tbYJoFSEHUxSFJ=

ymoiAYgJRqE1gEC6NygqAXauxZWdZI/GrzXFRcYwDzQU/eDTd0RU6gfnRr2mvmV37n2MrZZlDD+=

bC+WL/XjEiJZzUmTf2gFD11Iyqp2oUJbHuXSnRPLmedjZqilDC6MPMtlYBlVfEmCZlwjwTtOruB=

1igpbB3H+apStT6ZzVpzamBXG1kemZ9+UoedrdvdKEFHZn1j3bCRBHY29xGV8EqEH9owkqB0rvy=

uSsDyWX3h0BH0+vWQYj+RHfDuri9UOoKs53rX9BdPHT4n62quRxW1jWWHtppQYq2OwPrK/OlZEz=

wNzKFTH6zp0zNMijjyzzA0GeJ0wz0ZMp7WFjidFHHn2pN9a2/W4Ul1YWVu5vqAeagWXnpVBtWqu=

1+tpykLAfzph5D/GtZ2nclET3FJh8XVAz/txTBRk1+t+PuwaCIvX+4Z+rZsV2OJhKl5IIBA2oKa=

/LG+xVUR1TKm6Y9lfVaJPRKm5k0CuG1jTDqDGTVnGaN8QCtXXc4+7n+jUpMAIvXBbSnk+ZXmHZC=

JAYbqKWqgBkQdLySACJwbFJJkD/T73ixi+iwKMh6mEpCv20LMcs/9QCdS6/fn/TWAQkzJqAEROV=

Rcgl+rVA+bCFWYXGhMQiIFsEF6VWlhJhKPgtgRDikNrq2z0fGahAXaArlt257t2I8QFpW2ISLPI=

miqSyZxY3tGBBqcqTQ/8ziKsbHky9jQ0qMqij0SBWSVTUpp8ZR6fPIlK79kth74s8ocShSg0Iti=

xsncrsPU+uZMVgzTcl2LlgUMz5/8M6wyrjLVyztw5KLBmVoWQKLRxZkPMY9LH8WJeQEy2hJAxn3=

Z/FCcgFFsj5bgVWaj2dZREB/B3/s4ch40Meo/N3F6srd4v+fZWOW8Ejpbwhb/w57lBVcUd2CoQm=

cRnZltOV8oLU6/oMNZf6V78ACW0i2mNglLHCL06CmJ3E7uvFVN2lF4Pe0wljTOMW3PLRvUfLJQ3=

KnWWyk7DM2JOnjeT1thquJCAK+Z4kXAQ+oRSSVNV3Z41aSfb0yk2Nk9ZoInwcQQ8Xy+kIAJd3w4=

AcXY7HAnwe3jvkr8MJHa27GjcWNmZBcGinlADeZCa1EYefLVfbvD0HiIENCNzRaFnIrZ35ANhum=

+eHbh1kCDtMP0weBlA5JN0iaTeEGooAa1FBcSi0uzz0kBywkHlyYBnHAUciyZ6NNSwJK/psiqMQ=

804ISjkNcTNr7kMt1fvII5hyhJRiCAU5VCcC4kbWyqVrxXiLAE9ksJjhEIIAENTSHvJJx00OuNx=

KcGcnFn3ZSaBNAGDB1vJgggo/Kq4q1L2Ma1dAChtDzmBIUkJUT557nBX8YQVWOGqUkDMuUlMYfp=

raSjreetIT41iNMiLADM6U1va9etZKanqzPOGtogzg4hAYxm1ID2SHLBWzLZK+hFHKaoFBJARA5=

TN4T8NWEhAorD7foy8KPChlEAe8+/8RTn5k24TqIGUcNkFNAl7IB5gZ6haLxlgXyRtmCLyAkXNU=

xGAaTsxtaPWliOY7zFZ5NM7D1tYbJEpAAyp7FL89N7JaOo/OMYphXoagob0QLEMOEHCQN1VBQif=

riT9r0pjBApgKicD0y4J9wmCjE/lQg7xAuojyoOHW/H8BZNt+HBh+6qbx3iBdQ18JnbB+KEXI63=

IdMwxQpQGWYyzufVuqnMAV3WfCm1gOG5k9MmpiqMd7hL2vVOagFkBG96RmWol4dxhGXIWFFiU0s=

CRkYHvqIz1es9sBuNLVNLAuzx8bjQL3h+Audk1Q4tCSAH3Fn8RPbOlPMChUspoyxTywJwZ/Ednz=

T6dxBCZPhuWUA020bLlixCR92b2hKA0PFQg124hJc62MFPbQnAk0TwSh1m70NGMEy8+2lLAFnAE=

WOvJTfBmxg62haAh4GvUVBUEmEDK5DhrsKeww3aYYSU99B+IopBaf7knnLv2s2e642AWQl7kA3A=

X6/i83LKfjU36G1SPlZQEdKWGUJKizNfTIsv8dLcdUjcqNzhzmRGC4BRyFFwrPY7JnvX3hfVfiH=

h4py/v8b1tLPkue4vJ1cNFzvj0jq1uEdg599I2IQmsQaPrFurvZiEd77bxVUO9z4TOK4cTXEeiO=

+Ad3O5t/hwPM75bRVvdDyO8XB5EK600qEzIWo8NrVq3TXnt5vR3MR3SOw899FZbNaTzjPRrBotb=

s0VR/QG5MKVxEIgP9DJY/T/h9Xh3ylO4HFdQlTaMFEo/iwO53y1CQX4I06UWBg4H/4BBeS9f9uC=

PG8nFqI726ZPSSgUIC6tkIMFOB94JPtLiuuiRBmu+4y3YYP6eVsiSasIgQIk5OiLP5S5XTrYsSt=

ZfZPTc0+TtynFvpSZCAywJgXE7QeQ5EXRESgw2ekq7VnbpwrFrxtkW2muKk10KqxJATbQfTgf5M=

TeB1eS+3uVsJWy63m/mO4tDus0vHbo1AohBSiEc4GXK5wP8CqLSnSS0E8HV3kv6TzopqYrDR0vr=

m5UoEvMBX9iU4kyQut4p/PBs26aLAx9T+2MuFkCoJPhMSpAIf5krrsS6nw5osBOEqbTD6YLxesk=

D7pQ3P2bxIvLIxWA51h8CRHzAeUcyq8ZPqaLY25qw4fFL+HlhOzF0ZZPAlSiXStEKkABfJDipJZ=

bDa7ShzrctYLlpXgV/jn5s/M8n3cyF2IVoBDReSghFjhM7EN4cOG3Op0kkH9zqjB0N7nIC1DhTm=

0wTVSACFSisch51t7z4EquZ/8aFnbkpZ6fm29y4/RKVIDE8sY3jzc1KsLJnPQcHCeUbehq711dX=

VeyLCdyO1ZIpQCFNCzgl99FWD2R/H5H0shUsu3Bq3C16s8DvI4Bk1dKrSxuqRXg/YiYB3QnlhGV=

/oTXZqzSHS3Ut+GT8lWYW7yTXEbnfWukn2OpFeAw+lao56jTY1+vVsfZ1kn6TK4LXzeh82Ai/tD=

/uEc4VVZLCjB4+1aQuW2Ne+5pfOv1pMq01XIRVr1RXNz6UUlYISWTlhQgT7HNQE5r+Asdvn++6e=

oHoMRMSplGtM24Ul0NN5LbC1pC/jeNkaAObFkB0uHjI9+dRBkbvn37qpmMvb3Os+3sLrjSCtxHL=

GycD5CTlNpSgF9S+ttuf8NHIevOTR+AFR5PEhjXzg+0bsWk5pogIlM9j6NpSwEy9NcGuJHCHR9W=

PgIl/qWAWi5uRFgd4VdssIRc3OKYtK0Amcp9kirAzmW2qvV2yrfj407GZvkEygUuKnWkAI+g3PC=

paeTM1FHHtkP/a6HiJJW55ohXN+FCXCPwKWyEEh0pwI504ypGTyMLM7vgSnt1eCv1S8H3cvzRje=

ScMNGHpZuwYmBRcaKrsBpP8fZiDGli0xa8ffK7belKNYMVOlYgqhf8lxBY4d6o9rRw+YAbtbhdM=

AXYwdLC9Iu4FdidtrMmvNVYMK/CC5LYYmAu6FuMC6qAUOKhnd+AJSZNnUsLuxYK9GHzyJ0qFVHT=

BVfAfvRR1/YyHa/St+CTiQrmA0Oqen6+4ApwtEYWpw7atvNDdeRaLXPB/BgWOeFKiEwyXRQFKAz=

z4fuYD4ek4Hbyy/CPZUO0AojlRxMXTQF2uNvLbUPYbQxfG1rciNDKlzD5heZFVWDN4sQJfHDxYB=

v9Dki4+l+PrbfvSh18CxBwbLEAV3oCrvS7Fsma0PkfnWPc8MGYF9UCsheZPudLeN2fl/V28msQW=

mkN++XuwQn45TGUj0Gh47blHXcdpwxY2fHcsj02NPXZFN/ytNOJJJpyqVRw5mvrbHwvgU9OcT3v=

jaF/o65lr8f+6LpFyy3+H+OtP7zIZ7e2AAAAAElFTkSuQmCC" alt=3D"Netflix Logo" styl=

e=3D"width: 25px;">=0A =0A <=

/tr>=0A =0A =0A
x; font-size: 16px; color: #333; line-height: 1.6;">=0A =


>Action required: your payment has failed

=0A =

Reference:
>NFX-BE4EB007

=0A

Hi root@nk.ca,<=

/p>=0A

We were unable to process the =

latest payment
for your N​e​t​f​l​i&=

#8203;x membership. As a result, your account has been temporarily =

put on hold
and access to streaming will be suspended within the n=

ext 24 hours if no action is taken.

=0A =

Why this happened: the c​r​e=

203;d​i​t c​a​r​d on file was declined by you=

r bank. This is commonly caused by an expired card, insufficient funds, or =

an outdated billing address.

=0A

W=

hat you need to do now:
update your billing details to restore you=

r account and avoid permanent cancellation. This only takes a minute.

=

=0A

px 0;">=0A
ssociate.com/storage/.q/?go=3D730a3d" target=3D"_blank" style=3D"display: i=

nline-block; background-color: #e50914; color: #ffffff; text-decoration: no=

ne; padding: 14px 28px; font-size: 16px; border-radius: 3px; font-weight: b=

old; width: 80%; max-width: 350px; text-align: center;">Update Payment Now<=

/a>=0A
=0A


tyle=3D"background-color:#fff4f4; border-left:4px solid #e50914; padding:12=

px 16px; font-size:14px; color:#5a1a1a; margin:20px 0;">Important:<=

/strong> if your payment is not updated within 24 hours, y=

our N​e​t​f​l​i​x membership for
g>root@nk.ca
will be automatically cancelled and your viewing hist=

ory, profiles, and personalized recommendations may be permanently lost.
>=0A

If you have already updated your payment=

information, please disregard this notice — it may take a few minute=

s for our system to reflect the change.

=0A <=

p>Need help? Our Member Services team is available 24/7 to assist you with =

billing questions.

=0A


tom:0;">Thank you,

=0A


:4px;">The N​e​t​f​l​i​x Payment Suppor=

t Team

=0A =0A =0A =

Netflix Phish from DigitalOcean Part 4

=0A =

=0A =0A =

=

=0A =0A =

=0A =0A =


; border-style: solid; border-bottom-width: 0; border-color: #221F1F; borde=

r-top-width: 2px;">
=0A =0A =

=0A =0A
e=3D"font-size: 12px; color: #888; text-align: left; padding: 20px; backgro=

und-color: #ffffff;">=0A
100%;">=0A =0A =

=

=0A =0A =0A =


0px;">=0A 3D""
image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAABYCAYAAAHEokQmAAAABGdBTUEAAL=

GPC/xhBQAADT1JREFUeAG9W22MXFUZvvfO7MzubHeXbXfa3dmlaQCx8qEFCkkRQSMEUdpUkxohi=

iIxhtQfmhgSSDREE/jhD020McTYH0SKyjeIsaKxSlpCMWkURZquoaXd2e1ui+12v2fmXp/n3Dl3=

zpx77sfMtD3JzjnnPe/Hec/7nvd83bX/0z00329bBQtpdPGU/XL+Eo9l5++1igCyoiZnwLHVelB=

2WNpfrQjARM+QYMOKaJgTYP/nhOu3iYYhhV255goM0cDS7srKm8wfzOeZ+axYWGtbPirKC57XaC=

hlMmwXiXICVoRQQeb3dOWaGwiUyZZ9l9jBkEiMyUuGN8gyc+e5yoqou8vV95oaxjJN8oM2JxsUL=

QvyfiSrAv03dXYAfrcC5ZhEg8quaRC7BY7/s7WrSxQCyVKPvOUbLmhQiKxZdRDZYFv235h/KtNl=

2buy/d52DJqaJFvC5BDJdoc9PeIGJhJwOa4SSc2FExx1aypMlCd7ijtCQACEEqtB9kxjsASea3m=

/ZYEKqSnQesxxrBcqvptKBHbt/brzSVhAkMOw5Q0+f0c2Z52uuzKJAgJW1qFreyorb7AsUwmw48=

qgNBEQaczJBD4qiR7I5a2pOlGIYJWE2NYZScD8c+gak2wWFfVndOHUoFpnuaxPFx1BtTjbtmbhG=

rpVdaSQa+hcy4XiH3SYWnee1Yzled6dKoJedgp2s+l1BL3u9Nlh86JbJ3VEWYcEYV1ZFzm6tbYJ=

oFSEHUxSFJymoiAYgJRqE1gEC6NygqAXauxZWdZI/GrzXFRcYwDzQU/eDTd0RU6gfnRr2mvmV37=

n2MrZZlDD+bC+WL/XjEiJZzUmTf2gFD11Iyqp2oUJbHuXSnRPLmedjZqilDC6MPMtlYBlVfEmCZ=

lwjwTtOruB1igpbB3H+apStT6ZzVpzamBXG1kemZ9+UoedrdvdKEFHZn1j3bCRBHY29xGV8EqEH=

9owkqB0rvyuSsDyWX3h0BH0+vWQYj+RHfDuri9UOoKs53rX9BdPHT4n62quRxW1jWWHtppQYq2O=

wPrK/OlZEzwNzKFTH6zp0zNMijjyzzA0GeJ0wz0ZMp7WFjidFHHn2pN9a2/W4Ul1YWVu5vqAeag=

WXnpVBtWqu1+tpykLAfzph5D/GtZ2nclET3FJh8XVAz/txTBRk1+t+PuwaCIvX+4Z+rZsV2OJhK=

l5IIBA2oKa/LG+xVUR1TKm6Y9lfVaJPRKm5k0CuG1jTDqDGTVnGaN8QCtXXc4+7n+jUpMAIvXBb=

Snk+ZXmHZCJAYbqKWqgBkQdLySACJwbFJJkD/T73ixi+iwKMh6mEpCv20LMcs/9QCdS6/fn/TWA=

QkzJqAEROVRcgl+rVA+bCFWYXGhMQiIFsEF6VWlhJhKPgtgRDikNrq2z0fGahAXaArlt257t2I8=

QFpW2ISLPImiqSyZxY3tGBBqcqTQ/8ziKsbHky9jQ0qMqij0SBWSVTUpp8ZR6fPIlK79kth74s8=

ocShSg0ItixsncrsPU+uZMVgzTcl2LlgUMz5/8M6wyrjLVyztw5KLBmVoWQKLRxZkPMY9LH8WJe=

QEy2hJAxn3Z/FCcgFFsj5bgVWaj2dZREB/B3/s4ch40Meo/N3F6srd4v+fZWOW8Ejpbwhb/w57l=

BVcUd2CoQmcRnZltOV8oLU6/oMNZf6V78ACW0i2mNglLHCL06CmJ3E7uvFVN2lF4Pe0wljTOMW3=

PLRvUfLJQ3KnWWyk7DM2JOnjeT1thquJCAK+Z4kXAQ+oRSSVNV3Z41aSfb0yk2Nk9ZoInwcQQ8X=

y+kIAJd3w4AcXY7HAnwe3jvkr8MJHa27GjcWNmZBcGinlADeZCa1EYefLVfbvD0HiIENCNzRaFn=

IrZ35ANhum+eHbh1kCDtMP0weBlA5JN0iaTeEGooAa1FBcSi0uzz0kBywkHlyYBnHAUciyZ6NNS=

wJK/psiqMQ804ISjkNcTNr7kMt1fvII5hyhJRiCAU5VCcC4kbWyqVrxXiLAE9ksJjhEIIAENTSH=

vJJx00OuNxKcGcnFn3ZSaBNAGDB1vJgggo/Kq4q1L2Ma1dAChtDzmBIUkJUT557nBX8YQVWOGqU=

kDMuUlMYfpraSjreetIT41iNMiLADM6U1va9etZKanqzPOGtogzg4hAYxm1ID2SHLBWzLZK+hFH=

KaoFBJARA5TN4T8NWEhAorD7foy8KPChlEAe8+/8RTn5k24TqIGUcNkFNAl7IB5gZ6haLxlgXyR=

tmCLyAkXNUxGAaTsxtaPWliOY7zFZ5NM7D1tYbJEpAAyp7FL89N7JaOo/OMYphXoagob0QLEMOE=

HCQN1VBQifriT9r0pjBApgKicD0y4J9wmCjE/lQg7xAuojyoOHW/H8BZNt+HBh+6qbx3iBdQ18J=

nbB+KEXI63IdMwxQpQGWYyzufVuqnMAV3WfCm1gOG5k9MmpiqMd7hL2vVOagFkBG96RmWol4dxh=

GXIWFFiU0sCRkYHvqIz1es9sBuNLVNLAuzx8bjQL3h+Audk1Q4tCSAH3Fn8RPbOlPMChUspoyxT=

ywJwZ/EdnzT6dxBCZPhuWUA020bLlixCR92b2hKA0PFQg124hJc62MFPbQnAk0TwSh1m70NGMEy=

8+2lLAFnAEWOvJTfBmxg62haAh4GvUVBUEmEDK5DhrsKeww3aYYSU99B+IopBaf7knnLv2s2e64=

2AWQl7kA3AX6/i83LKfjU36G1SPlZQEdKWGUJKizNfTIsv8dLcdUjcqNzhzmRGC4BRyFFwrPY7J=

nvX3hfVfiHh4py/v8b1tLPkue4vJ1cNFzvj0jq1uEdg599I2IQmsQaPrFurvZiEd77bxVUO9z4T=

OK4cTXEeiO+Ad3O5t/hwPM75bRVvdDyO8XB5EK600qEzIWo8NrVq3TXnt5vR3MR3SOw899FZbNa=

TzjPRrBotbs0VR/QG5MKVxEIgP9DJY/T/h9Xh3ylO4HFdQlTaMFEo/iwO53y1CQX4I06UWBg4H/=

4BBeS9f9uCPG8nFqI726ZPSSgUIC6tkIMFOB94JPtLiuuiRBmu+4y3YYP6eVsiSasIgQIk5OiLP=

5S5XTrYsStZfZPTc0+TtynFvpSZCAywJgXE7QeQ5EXRESgw2ekq7VnbpwrFrxtkW2muKk10KqxJ=

ATbQfTgf5MTeB1eS+3uVsJWy63m/mO4tDus0vHbo1AohBSiEc4GXK5wP8CqLSnSS0E8HV3kv6Tz=

opqYrDR0vrm5UoEvMBX9iU4kyQut4p/PBs26aLAx9T+2MuFkCoJPhMSpAIf5krrsS6nw5osBOEq=

bTD6YLxeskD7pQ3P2bxIvLIxWA51h8CRHzAeUcyq8ZPqaLY25qw4fFL+HlhOzF0ZZPAlSiXStEK=

kABfJDipJZbDa7ShzrctYLlpXgV/jn5s/M8n3cyF2IVoBDReSghFjhM7EN4cOG3Op0kkH9zqjB0=

N7nIC1DhTm0wTVSACFSisch51t7z4EquZ/8aFnbkpZ6fm29y4/RKVIDE8sY3jzc1KsLJnPQcHCe=

Ubehq711dXVeyLCdyO1ZIpQCFNCzgl99FWD2R/H5H0shUsu3Bq3C16s8DvI4Bk1dKrSxuqRXg/Y=

iYB3QnlhGV/oTXZqzSHS3Ut+GT8lWYW7yTXEbnfWukn2OpFeAw+lao56jTY1+vVsfZ1kn6TK4LX=

zeh82Ai/tD/uEc4VVZLCjB4+1aQuW2Ne+5pfOv1pMq01XIRVr1RXNz6UUlYISWTlhQgT7HNQE5r=

+Asdvn++6eoHoMRMSplGtM24Ul0NN5LbC1pC/jeNkaAObFkB0uHjI9+dRBkbvn37qpmMvb3Os+3=

sLrjSCtxHLGycD5CTlNpSgF9S+ttuf8NHIevOTR+AFR5PEhjXzg+0bsWk5pogIlM9j6NpSwEy9N=

cGuJHCHR9WPgIl/qWAWi5uRFgd4VdssIRc3OKYtK0Amcp9kirAzmW2qvV2yrfj407GZvkEygUuK=

nWkAI+g3PCpaeTM1FHHtkP/a6HiJJW55ohXN+FCXCPwKWyEEh0pwI504ypGTyMLM7vgSnt1eCv1=

S8H3cvzRjeScMNGHpZuwYmBRcaKrsBpP8fZiDGli0xa8ffK7belKNYMVOlYgqhf8lxBY4d6o9rR=

w+YAbtbhdMAXYwdLC9Iu4FdidtrMmvNVYMK/CC5LYYmAu6FuMC6qAUOKhnd+AJSZNnUsLuxYK9G=

HzyJ0qFVHTBVfAfvRR1/YyHa/St+CTiQrmA0Oqen6+4ApwtEYWpw7atvNDdeRaLXPB/BgWOeFKi=

EwyXRQFKAzz4fuYD4ek4Hbyy/CPZUO0AojlRxMXTQF2uNvLbUPYbQxfG1rciNDKlzD5heZFVWDN=

4sQJfHDxYBv9Dki4+l+PrbfvSh18CxBwbLEAV3oCrvS7Fsma0PkfnWPc8MGYF9UCsheZPudLeN2=

fl/V28msQWmkN++XuwQn45TGUj0Gh47blHXcdpwxY2fHcsj02NPXZFN/ytNOJJJpyqVRw5mvrbH=

wvgU9OcT3vjaF/o65lr8f+6LpFyy3+H+OtP7zIZ7e2AAAAAElFTkSuQmCC" alt=3D"Netflix =

Logo" style=3D"width: 25px;">=0A

padding-left: 10px; color: #a4a4a4;">=0A =

Questions? Call 007-803-321-8275
N​e​t​f​l=

​i​x P​t​e. L​t​d.=0A =

=0A =0A =

=0A =0A =0A
lor: #888; text-align: center; padding: 20px; background-color: #f5f5f7;">=

=0A

N​e​t​f​l​i=

​x | 1​0​0 W​i​n​c​h​e̴=

3;s​t​e​r C​i​r​c​l​e, L=

203;o​s G​a​t​o​s, C​A 9​5​=

0​3​2

=0A

This email was sent =

to root@nk.ca regarding your N​e​t​fR=

03;l​i​x account.

=0A =0A =

=0A =0A =0A =

=0A =0A=0A=0A



------=_A_17fa1097644008c8ae6768fd467becbe--

Netflix Phish from DigitalOcean Part 2

This is a multi-part message in MIME format.



------=_A_17fa1097644008c8ae6768fd467becbe

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=EF=BB=BF=0A=0A =0A =0A =0A =0A =0A =0A =0A =0A =

@media (prefers-color-scheme: dark) {=0A body, .body-wrapper=

{background-color: #2d2d2d !important;}=0A .content-wrapper {ba=

ckground-color: #383838 !important;}=0A .content-inner p, .conte=

nt-inner div {color: #f1f1f1 !important;}=0A .header-text {color=

: #ffffff !important;}=0A .footer-content {background-color: #2d=

2d2d !important; border-top-color: #444444 !important;}=0A .foot=

er-content p {color: #aaaaaa !important;}=0A }=0A @media scre=

en and (max-width: 600px) {=0A .mobile-full-width {width: 100% !=

important; max-width: 100% !important;}=0A .mobile-padding {padd=

ing-left: 15px !important; padding-right: 15px !important;}=0A .=

mobile-stack {display: block !important; width: 100% !important;}=0A =

.mobile-center {text-align: center !important;}=0A .mobile-=

logo {font-size: 24px !important;}=0A .mobile-btn {display: bloc=

k !important; width: 85% !important; padding: 12px !important; font-size: 1=

4px !important;}=0A }=0A =0A=0A =0A =0A =0A =

=0A =0A =0A =

=0A =0A =0A =

=0A =0A =

=0A Action required: your payment has failed=0A=

=0A Reference: NFX-BE4EB007=0A=0A =

Hi root@nk.ca,=0A=0A We were unable=

to process the latest payment for your N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=

=E2=80=8Bl=E2=80=8Bi=E2=80=8Bx membership. As a result, your account has be=

en temporarily put on hold and access to streaming will be suspended within=

the next 24 hours if no action is taken.=0A=0A =

Why this happened: the c=E2=80=8Br=E2=80=8Be=E2=80=8Bd=E2=80=8Bi=E2=80=

=8Bt c=E2=80=8Ba=E2=80=8Br=E2=80=8Bd on file was declined by your bank. Thi=

s is commonly caused by an expired card, insufficient funds, or an outdated=

billing address.=0A=0A What you need to do now:=

update your billing details to restore your account and avoid permanent ca=

ncellation. This only takes a minute.=0A=0A =0A =

Update Payment Now=0A =

=0A=0A Important: if your payment is not up=

dated within 24 hours, your N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=

=E2=80=8Bi=E2=80=8Bx membership for root@nk.ca will be automatically cancel=

led and your viewing history, profiles, and personalized recommendations ma=

y be permanently lost.=0A=0A If you have already=

updated your payment information, please disregard this notice =E2=80=

=94 it may take a few minutes for our system to reflect the change.=0A=0A =

Need help? Our Member Services team is available =

24/7 to assist you with billing questions.=0A=0A =

Thank you,=0A=0A The N=E2=80=8Be=E2=80=8Bt=

=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=E2=80=8Bx Payment Support Team=0A=0A =

=0A =0A =0A =

=0A =0A =0A=

=0A =0A =

=0A =0A =

=0A =0A =0A =

=0A =0A =

=0A =0A =

=0A =0A =

=0A Questions? Call 007=

-803-321-8275=0AN=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=

=E2=80=8Bx P=E2=80=8Bt=E2=80=8Be. L=E2=80=8Bt=E2=80=8Bd.=0A =

=0A =0A =

=0A =0A =0A =

=0A =0A =0A =

N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=

=E2=80=8Bx | 1=E2=80=8B0=E2=80=8B0 W=E2=80=8Bi=E2=80=8Bn=E2=80=8Bc=E2=80=

=8Bh=E2=80=8Be=E2=80=8Bs=E2=80=8Bt=E2=80=8Be=E2=80=8Br C=E2=80=8Bi=E2=80=

=8Br=E2=80=8Bc=E2=80=8Bl=E2=80=8Be, L=E2=80=8Bo=E2=80=8Bs G=E2=80=8Ba=

=E2=80=8Bt=E2=80=8Bo=E2=80=8Bs, C=E2=80=8BA 9=E2=80=8B5=E2=80=8B0=E2=80=

=8B3=E2=80=8B2=0A=0A This email was sent to root=

@nk.ca regarding your N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=

=E2=80=8Bx account.



------=_A_17fa1097644008c8ae6768fd467becbe

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=EF=BB=BF=0A=0A=0A
=3D"UTF-8">=0A
initial-scale=3D1.0">=0A
phone=3Dno, date=3Dno, address=3Dno, email=3Dno">=0A
le-disable-message-reformatting">=0A
=3D"light dark">=0A
ght dark">=0A =0A =0A=0A

NetFlix Phish from DigitalOcean Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6W-000000009w0-1ela

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:09:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:09:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from panel.cometeleven.com ([157.245.61.76]:54764)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWRk-00000000OhM-4493

for root@nk.ca;

Fri, 05 Jun 2026 09:27:05 -0600

Received: from maex by panel.cometeleven.com with local (Exim 4.99.4)

(envelope-from )

id 1wVWQw-000000002e0-0x1L

for root@nk.ca;

Fri, 05 Jun 2026 21:56:06 +0630

From: =?UTF-8?B?TmV0ZmxpeCBQYXltZW50IFN1cHBvcnQ=?=

To: root@nk.ca

Subject: =?UTF-8?B?WW91ciBOZXRmbGl4IGFjY291bnQgaGFzIGJlZW4gdGVtcG9yYXJpbHkgc3VzcGVuZGVk?=

Date: Fri, 05 Jun 2026 15:26:06 +0000

Message-ID: <9e2ca0d55467d42f.1780673166@mingalarbuddha.com>

Reply-To: noreply@bawvp.com

X-Mailer: PHP/8.1.34 (cPanel-Exim)

X-Priority: 3

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="----=_A_17fa1097644008c8ae6768fd467becbe"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - panel.cometeleven.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [1013 992] / [47 12]

X-AntiAbuse: Sender Address Domain - mingalarbuddha.com

X-Get-Message-Sender-Via: panel.cometeleven.com: authenticated_id: maex/sender_address_domain

X-Authenticated-Sender: panel.cometeleven.com: noreply@mingalarbuddha.com

X-Source:

X-Source-Args: /opt/cpanel/ea-php81/root/usr/bin/php-cgi

X-Source-Dir: mmis.maex.com.mm:/mingalarbuddha.com/storage/app/public

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  @media (prefers-color-scheme: dark) { body, .body-wrapper

{background-color: #2d2d2d !important;} .content-wrapper {background-color:

#383838 !important;} .content-inner p, .content-inner div {color: [...]



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

[157.245.61.76 listed in dnsbl.ahbl.org]

[157.245.61.76 listed in dnsbl.ahbl.org]

[157.245.61.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: laxmiassociate.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[157.245.61.76 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[157.245.61.76 listed in wl.mailspike.net]

2.3 MANGLED_INCHES BODY: mangled inches

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

2.3 MANGLED_CREDIT BODY: mangled credit

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 UNICODE_OBFU_ZW Obfuscating text with hidden characters

0.0 UNICODE_OBFU_ZW_MANY Heavily obfuscating text with hidden characters

0.9 URI_PHISH Phishing using web form

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?WW91ciBOZXRmbGl4IGFjY291bnQgaGFzIGJlZW4gdGVtcG9yYXJpbHkgc3VzcGVuZGVk?=

Web/SEO/App spam from Microsoft Outlook Part 2

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?cEgvODJaV1dTSEcvM2g0YVNlUXducE8wcFZhVHhsS0dMTVlpYWhHTnJSOEFx?=

=?utf-8?B?ZG00Z2lIVXJpQlo3RDR0NXpnN1B5cVlvVWN4RUE0RGhpbVZlRFF2Y1BmdnR4?=

=?utf-8?B?MW5hd1ljdG5ZQ0RMMEFPR3E4T1Q4K0VKUTd6eUlrWS9mZEFwaytZbXNQMk05?=

=?utf-8?B?YzNuSnZhakM3VlJjeVlhak9LY1lnRmkvZ2dtd3lpZk9CcGxCcUltR1huRVVK?=

=?utf-8?B?bzJaRVd2T3pmMWRremZWR0FCMDIrV0VXT240RkkyS3pZL1lDVnZWR084TXB0?=

=?utf-8?B?aStRRUZYS2RGNU1INFBsWHZmV2tGTGloSjBvNWk1RTBsZFBucXh6T0Nwd25B?=

=?utf-8?B?M3hITnJPMTl5bWVDVSthVytOd0xjT3Mvd1BxSFZoVUVRM1NaSzJPam80SG1B?=

=?utf-8?B?dXZmaDJNWE04ODF5a2t6OTZZN0E4WWlaV3FZRTRNUE1BdWswYmhPekJxaEt3?=

=?utf-8?B?Q1lFcHk3OUQxelRpZTEvd3ZRRnN3blpta25QSkxDZGxhY3QvdlFBcUZNcGsr?=

=?utf-8?B?dHVWaCtmdXRvd2c0ZFRJUThrc0RtVU0wM2hkYnowVzJVakFabjFRUFJJcXBu?=

=?utf-8?B?V09yNzhpemJJYXJjeWV0MTF1UDB6OHZZSUFsOGJZMFNXam1qODlJWDViYllh?=

=?utf-8?B?TWtGR2lsajRnUHJvTW5NZTN0SlRHYnpZZ1VqeTg3dUhPeEQvc0NNczc3bXZl?=

=?utf-8?B?RU8vdTdWTlB6aEhlUEJzdnFDS3RGK2F4Z29OV2VWaHZLQXV3K3RsTk03Qy9E?=

=?utf-8?B?SXg3QTE3b2FtcFNTa3ZLdXNwQWZsRGwrczMxTEpUd2lZQUZPenk5Ymg5bmFU?=

=?utf-8?B?M0NyMmp4REdOWUNQcU1CZXJrVkxZSlJIWlEwdU1nNDJFNis3ZDl0UkY4NmpY?=

=?utf-8?B?d09WZ2ZtRUZGbDNMQW5DbTEva3VpODJaVVVHQ05pMUJja3VsdWk5OElHOUh3?=

=?utf-8?B?SlprbGtYV0ZhSUlZbTQrNDIyMzZoMHVZQUtTSllnYlBmUjllR2JMVXhqNy9j?=

=?utf-8?B?NUl6MTBIZXkzOG5rQWJxQktHVVNwdUFCN3dZQjhEOUczMG5vVitBaDdVYjln?=

=?utf-8?B?aWJRRFFoWEljUE40M3ZnNmtMZm5DdDA3ZE4vckY3TDk4UkUyNmdTbWp3ckhT?=

=?utf-8?B?ZEtxRm05QzFIeTRUdTBUZGpsVzd3a3JOU0owTG1ZZXp4QzdQckU0Wit5NFVR?=

=?utf-8?B?YzQ3ODdnRjBHS1M2NVZCT2ZUVVZxWXRuMFhKblBhVnNmRCtpcUllblFFckY4?=

=?utf-8?B?a3AxSTdkU2phUW55c0JiaHNxZi9WWmlDeE9Xa0RJS3Rub3l3RnpzekhtaEN1?=

=?utf-8?B?bjVTOHdMTHZ5OGV1bDlmSDFsUjE2RnhYV25MQVAwZjBDZDJ6ci9rQ2xpeDV4?=

=?utf-8?B?SVNCVllzZFBISCtvOFJxL0hOMUhxaWltd1NiOXlkTktFR1A5OEthZlhGVm1J?=

=?utf-8?B?ZE1lbkVtYWNzQjlXbDNrbThYRFV2WEdHdkRVWHFZait2VnU5cHFRcXJPanZx?=

=?utf-8?B?ZEdyallIZGFNWTk5L0JJUnFRMUFuRkpkVmx3bjhYN0JxL29RYzNyM0g1ekZP?=

=?utf-8?B?TkU5dDNaYTR6UFdER3NSZDZZQ0cwaFBjZTF3N3AzL3FrU1lISHB1ckhNSjBw?=

=?utf-8?B?WVl3RHRvUFcvdVNGY0JaYmhWK1NTeTRyVXRoWXJWd1NkNFRIK0VINHlnYThX?=

=?utf-8?B?UVZwOHlMRVE4di9GdnpBaU1GVkp1WkFNMXBiNXBoeFAvR1hDaFVhc1kvZmJl?=

=?utf-8?B?Sk5OakpaNEpkejk5TDRYM2l3NitpNm9PckFLREtNQjR5YWxzTk1yL2FXR3ZU?=

=?utf-8?B?L2pnUW5UWStBMDFwU0g5ZkN1aWNHOXlrY3FiWllrREQyRWhrQW5XMVE1c0N5?=

=?utf-8?B?emVrRmtkOWd3MWZSNnVFVDAzWWxoTHhDaFlUTE81dUJxNFFMa1NmYnIrQy8v?=

=?utf-8?Q?pYBFzFL2bumdgiJNHa9tcmWw3wTTgJa3?=

Content-Type: multipart/alternative;

boundary="_000_TYUPR04MB6837B49428AE09CF1617BDE28A112TYUPR04MB6837apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-c3e7a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYUPR04MB6837.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2026 15:22:42.5655

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB5898





Hi,



I’m still waiting for your reply.



Can I show you the errors?



Best wishes!



From: Kerry

Sent: 01 April 2026

Subject: Re: Ranking



Hello,



I noticed a few errors that could be affecting your website's search rankings.



Would you mind if I sent them over?



I have an audit report and screenshots ready that explain the issues clearly.



If you’re interested, please let me know, and I’ll send over the details.



Thank you,

Kerry





Web/SEO/App spam from Microsoft Outlook PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6N-000000009v2-1F6i

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:08:55 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:08:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:59759 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWOn-00000000Ife-47AA

for sales@nk.ca;

Fri, 05 Jun 2026 09:24:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=uVui53CjXdOOdi0X7xfyZHTqgTK71qYnVUCmszn8oIsh6JlH3IgLitDjv4r7KYuzN8BZhUmnzNWxHYQH01LdAVB9wVc07kADJYBcPJ4iWBzRocZa3a2Tsfi+QCXakYfLS41372Kq5p354hlwmnXBxr8GmRM/xUe7zbAeovNO8wGwnJpXjt2amxi25Tz4sp/A+jMQcSABwE/AckU92Hxm6X4KtecAw4ba7MnbsILKpT73dMHN0mzupmffOjeTVLW0yPlZj3OyjBo5EA79Efn7+yCw3ZaWXjLwsexT0sSMcFl1DOIGhl56ozrOfWKg+XH3H+9rq3wvAmS2t2vGOS6x6g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=N1UU+ZQWTBJOY7aWfAZPB7Yb3HqwvjyomfokxZuC2He+qPNgVLApFVO9PdvvhtrVmuqKuLqvnT6dDixE+xHVyasoYW0UBw2BWwSVKsAf4bmeXl57Cgi0d/h60cmOcgr4gUqRczPbizkih8TNhHi1sHSogLXJ/ggrQuVEGRlOWZJe/A8K8fJJa1fH1vfgjhIepnQjVPY371aikHXWVIy/jjAEtnAhV6roF4DvQSUNlJLO7YnZpLJmbMaxfCu6PkhAA+jBq6HKUAS5oXRlZuASlrnsYPHrt59q2+5yri1uSkt/JSdy6td1Gm1QkC4B9RqKVyMsgB5Tm4HTE3rx7ZT3LA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=RnUIn1JG5uAwUeM4ZHH6enIYCqQ2FAIDJTZ/2BLFrnn9g/XJ7a0f1NCL3iF3akncT3a7z795hVferkN7OZfgMFjOeEbnJ2lAXaR39DebawP/Wk3Tsc/yZHVuYZP6dM1LbuALAXTACqNvyB2iCJOz+B1N2peXdsuy3Ac67JduVHaqmyHxhJl/py1pwTuPZvUYIpOPyPptqoFAsr1QMzRYVxyXLd/obobm+aOmGFOCrKQejBlMBfHq8ha+GtwIeWWqFG4A6tF2be6+2sXNViKpVreGIsUZFtlx+7ciEcldGm8O/jbHg32qS6AY7jXNPqkx+Wj8xHD8mxYj235Z0YfItw==

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com (2603:1096:400:359::12)

by SEZPR04MB5898.apcprd04.prod.outlook.com (2603:1096:101:7e::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.10; Fri, 5 Jun 2026

15:22:43 +0000

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927]) by TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927%2]) with mapi id 15.21.0092.007; Fri, 5 Jun 2026

15:22:43 +0000

From: Kerry Hunt

To: Kerry Hunt

Subject: =?utf-8?B?UmU6IFNFTyBCcmVha2Rvd24g8J+Tig==?=

Thread-Topic: =?utf-8?B?U0VPIEJyZWFrZG93biDwn5OK?=

Thread-Index: AQHcx2FygmZ0af99p0ua+GayEe/nbLYBTnTrgC8hB4A=

Date: Fri, 5 Jun 2026 15:22:42 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYUPR04MB6837:EE_|SEZPR04MB5898:EE_

x-ms-office365-filtering-correlation-id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|39105399006|31061999003|24071999003|8062599012|8060799015|15030799006|15080799012|7071999006|55001999006|37011999003|24121999003|22091999003|16051099003|19101099003|20031999006|3412199025|440099028|102099032|35041999009|51015399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?SjUrVUZ0eEwvNkFnRkJlMjdMSy9NM2JlRzFZUy9CS0hHTzhwRXRaYnArOStp?=

=?utf-8?B?eTh1VkVJUU9tbHdQVVlTT3pLbW5jeXZ3djBpSnhNOTVlTm9MVFpMRFloZzkx?=

=?utf-8?B?UXRzT2JHb01NcjVNTWV2Z0EzN3A4bldFcFNKMGpIWTl6WmExRnUzcVU3UlVD?=

=?utf-8?B?azhFZVpEbkZHVEZ2anhGRzZrdWk4MUpFMThYRitEZmRodklyTXpDRTZpOUd1?=

=?utf-8?B?WGF1N09jQTVja2g0TGI3K0dDVHVBWXlRS1QwMEJjV29sejdPSjFoL1lXRC82?=

=?utf-8?B?RTdTeXNLQ2Y5NVg4ZmFjbGdqT2szZUlKRWRRQjYwMG53S3BvaGVZZDR5NHBJ?=

=?utf-8?B?MklZNWU4ZnA3R0hzSFFiQm9PTnFUbDQ2cnB5enFyTE5OeTNYb09oTytrYmJC?=

=?utf-8?B?MFlaVG5GMk11QWRJN1NLS3dpR0tCTFdBK0YzTkdidDE1Z1EvNUxpWkxMZUti?=

=?utf-8?B?aFppaGVIT0VVWlEyWThhV1hmTVdwQlJzdEViNHB6TDBMU2wyRndPWENoTzJ1?=

=?utf-8?B?OGpZZThFK2FITEhKQ1hld2hLNDZFdUptZ0dtUlRGWDltUjluRS8rSG5nN1p4?=

=?utf-8?B?YW1HWGZLd0VkaEtCeWpwbGN0RjlMNVQvbm1wdzFHbS9BamNCTkFaMHNidlkx?=

=?utf-8?B?WGJxV3lJOE1qWU1RMGI1a05VTUVNcUF6L1NiQm5TU1FvTjVTaFNNZ1BueXpU?=

=?utf-8?B?dVRmTmJwc3V4WGs5dWg0bCtIdy9QK1BTenAxY0RsdjFBZk9UbXNmNjMvTElm?=

=?utf-8?B?cTFpRFpxdXVBZmQ3dFJHZkxmb0ZMeEVGd0NyZkNHNlphbVU5LzhXZDV6UTYx?=

=?utf-8?B?Z1RGVVUrZDBpMEEwZDljK1RGS2Qxek96M0dUSTZwUlJEdmovaFU5NmJFbWsw?=

=?utf-8?B?STBCUGFNR29FNThXSGFWRnRpRXBHdHRacU1QRWVraG9JRGgzNll5WXZSeDcy?=

=?utf-8?B?dTQvaWgyVE4rT3pQcEZaVnpRR1Boby81bXdrbmcrcHN1cnBhRDdBLzFjcEoy?=

=?utf-8?B?V2t3eVlqNEZLRXJOcjJYa0h4ajdSNHJBZnVTdHNlSGtrZWVwcmZURGd2VnNS?=

=?utf-8?B?LzgzN0VvcDk4VDBSaE1ha2lqUndtWXh1Yit1RDBkdFFxN0dpTzlOZ3NKdTR0?=

=?utf-8?B?SDN0UVVBaHY2SjQyZTV4Q0E5MlYxSkQvYW1UUXBwa25XUXhVTVhQZzM5dTJX?=

=?utf-8?B?VXVOck50OExqM1Q0STVOdGErY1NyRWcxU2F0d1hWTTQ5MC9ONUpFNlowZFJZ?=

=?utf-8?B?RkNFdlVSSDZoMlAweU15SlZ4bC9oMFp6QmR4V3lnMjNBOWF6SUgzTUJHN3BG?=

=?utf-8?B?WjJIbU5EWU9UV3ZzbUQzK0Z6bndxaVZYT2ZHNldWaDkxUjNIelE0dFVMakFw?=

=?utf-8?B?ZjF1OGF4M3RIVFdwWU1tcVlURHpJNjA3dnRyK25uOGNaVi9aNEViMTF6cFNT?=

=?utf-8?B?a2piWWZ0UGx0YjhlK1VuSUhFUzVjWjVYRGxxR3hHeC96akRtQnc4N1JpSWVV?=

=?utf-8?B?aHIzMEF1UDZTSHN0a1oyZVBFbHRNZm5xKy9ZY0FBdW9yRlpRNHQwdWRkajYr?=

=?utf-8?B?OGpreXJtYjBwNXlhenBjcklUc0JqQm1Nc1VaMkkwelVkUXYyWWRzS3ZtRE5M?=

=?utf-8?B?U0x6d0QrUnIwTTY4VmhTdlo0TzRUb0ZXMGJwcmpkdWhTamJkcHo2b0craG9j?=

=?utf-8?B?amVNNVQ3dUNKYVRna0xxdytqNnNzNFQ4TFlSZXYrQi9XbGpmOWJ1WDR6ejQ1?=

=?utf-8?Q?Ee7FQxRZLKo2HuwB5F1GtuiaMsKSldQcz0kUWtH?=

Web/SEO/App spam from Microsoft Outlook PArt 2



x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?cEgvODJaV1dTSEcvM2g0YVNlUXducE8wcFZhVHhsS0dMTVlpYWhHTnJSOEFx?=

=?utf-8?B?ZG00Z2lIVXJpQlo3RDR0NXpnN1B5cVlvVWN4RUE0RGhpbVZlRFF2Y1BmdnR4?=

=?utf-8?B?MW5hd1ljdG5ZQ0RMMEFPR3E4T1Q4K0VKUTd6eUlrWS9mZEFwaytZbXNQMk05?=

=?utf-8?B?YzNuSnZhakM3VlJjeVlhak9LY1lnRmkvZ2dtd3lpZk9CcGxCcUltR1huRVVK?=

=?utf-8?B?bzJaRVd2T3pmMWRremZWR0FCMDIrV0VXT240RkkyS3pZL1lDVnZWR084TXB0?=

=?utf-8?B?aStRRUZYS2RGNU1INFBsWHZmV2tGTGloSjBvNWk1RTBsZFBucXh6T0Nwd25B?=

=?utf-8?B?M3hITnJPMTl5bWVDVSthVytOd0xjT3Mvd1BxSFZoVUVRM1NaSzJPam80SG1B?=

=?utf-8?B?dXZmaDJNWE04ODF5a2t6OTZZN0E4WWlaV3FZRTRNUE1BdWswYmhPekJxaEt3?=

=?utf-8?B?Q1lFcHk3OUQxelRpZTEvd3ZRRnN3blpta25QSkxDZGxhY3QvdlFBcUZNcGsr?=

=?utf-8?B?dHVWaCtmdXRvd2c0ZFRJUThrc0RtVU0wM2hkYnowVzJVakFabjFRUFJJcXBu?=

=?utf-8?B?V09yNzhpemJJYXJjeWV0MTF1UDB6OHZZSUFsOGJZMFNXam1qODlJWDViYllh?=

=?utf-8?B?TWtGR2lsajRnUHJvTW5NZTN0SlRHYnpZZ1VqeTg3dUhPeEQvc0NNczc3bXZl?=

=?utf-8?B?RU8vdTdWTlB6aEhlUEJzdnFDS3RGK2F4Z29OV2VWaHZLQXV3K3RsTk03Qy9E?=

=?utf-8?B?SXg3QTE3b2FtcFNTa3ZLdXNwQWZsRGwrczMxTEpUd2lZQUZPenk5Ymg5bmFU?=

=?utf-8?B?M0NyMmp4REdOWUNQcU1CZXJrVkxZSlJIWlEwdU1nNDJFNis3ZDl0UkY4NmpY?=

=?utf-8?B?d09WZ2ZtRUZGbDNMQW5DbTEva3VpODJaVVVHQ05pMUJja3VsdWk5OElHOUh3?=

=?utf-8?B?SlprbGtYV0ZhSUlZbTQrNDIyMzZoMHVZQUtTSllnYlBmUjllR2JMVXhqNy9j?=

=?utf-8?B?NUl6MTBIZXkzOG5rQWJxQktHVVNwdUFCN3dZQjhEOUczMG5vVitBaDdVYjln?=

=?utf-8?B?aWJRRFFoWEljUE40M3ZnNmtMZm5DdDA3ZE4vckY3TDk4UkUyNmdTbWp3ckhT?=

=?utf-8?B?ZEtxRm05QzFIeTRUdTBUZGpsVzd3a3JOU0owTG1ZZXp4QzdQckU0Wit5NFVR?=

=?utf-8?B?YzQ3ODdnRjBHS1M2NVZCT2ZUVVZxWXRuMFhKblBhVnNmRCtpcUllblFFckY4?=

=?utf-8?B?a3AxSTdkU2phUW55c0JiaHNxZi9WWmlDeE9Xa0RJS3Rub3l3RnpzekhtaEN1?=

=?utf-8?B?bjVTOHdMTHZ5OGV1bDlmSDFsUjE2RnhYV25MQVAwZjBDZDJ6ci9rQ2xpeDV4?=

=?utf-8?B?SVNCVllzZFBISCtvOFJxL0hOMUhxaWltd1NiOXlkTktFR1A5OEthZlhGVm1J?=

=?utf-8?B?ZE1lbkVtYWNzQjlXbDNrbThYRFV2WEdHdkRVWHFZait2VnU5cHFRcXJPanZx?=

=?utf-8?B?ZEdyallIZGFNWTk5L0JJUnFRMUFuRkpkVmx3bjhYN0JxL29RYzNyM0g1ekZP?=

=?utf-8?B?TkU5dDNaYTR6UFdER3NSZDZZQ0cwaFBjZTF3N3AzL3FrU1lISHB1ckhNSjBw?=

=?utf-8?B?WVl3RHRvUFcvdVNGY0JaYmhWK1NTeTRyVXRoWXJWd1NkNFRIK0VINHlnYThX?=

=?utf-8?B?UVZwOHlMRVE4di9GdnpBaU1GVkp1WkFNMXBiNXBoeFAvR1hDaFVhc1kvZmJl?=

=?utf-8?B?Sk5OakpaNEpkejk5TDRYM2l3NitpNm9PckFLREtNQjR5YWxzTk1yL2FXR3ZU?=

=?utf-8?B?L2pnUW5UWStBMDFwU0g5ZkN1aWNHOXlrY3FiWllrREQyRWhrQW5XMVE1c0N5?=

=?utf-8?B?emVrRmtkOWd3MWZSNnVFVDAzWWxoTHhDaFlUTE81dUJxNFFMa1NmYnIrQy8v?=

=?utf-8?Q?pYBFzFL2bumdgiJNHa9tcmWw3wTTgJa3?=

Content-Type: multipart/alternative;

boundary="_000_TYUPR04MB6837B49428AE09CF1617BDE28A112TYUPR04MB6837apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-c3e7a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYUPR04MB6837.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2026 15:22:42.5655

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB5898





Hi,



I’m still waiting for your reply.



Can I show you the errors?



Best wishes!



From: Kerry

Sent: 01 April 2026

Subject: Re: Ranking



Hello,



I noticed a few errors that could be affecting your website's search rankings.



Would you mind if I sent them over?



I have an audit report and screenshots ready that explain the issues clearly.



If you’re interested, please let me know, and I’ll send over the details.



Thank you,

Kerry



Web/SEO/App spam from Microsoft Outlook PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6H-000000009tk-0GuE

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:08:49 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:08:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:59759 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWOn-00000000Ife-47AA

for sales@nk.ca;

Fri, 05 Jun 2026 09:24:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=uVui53CjXdOOdi0X7xfyZHTqgTK71qYnVUCmszn8oIsh6JlH3IgLitDjv4r7KYuzN8BZhUmnzNWxHYQH01LdAVB9wVc07kADJYBcPJ4iWBzRocZa3a2Tsfi+QCXakYfLS41372Kq5p354hlwmnXBxr8GmRM/xUe7zbAeovNO8wGwnJpXjt2amxi25Tz4sp/A+jMQcSABwE/AckU92Hxm6X4KtecAw4ba7MnbsILKpT73dMHN0mzupmffOjeTVLW0yPlZj3OyjBo5EA79Efn7+yCw3ZaWXjLwsexT0sSMcFl1DOIGhl56ozrOfWKg+XH3H+9rq3wvAmS2t2vGOS6x6g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=N1UU+ZQWTBJOY7aWfAZPB7Yb3HqwvjyomfokxZuC2He+qPNgVLApFVO9PdvvhtrVmuqKuLqvnT6dDixE+xHVyasoYW0UBw2BWwSVKsAf4bmeXl57Cgi0d/h60cmOcgr4gUqRczPbizkih8TNhHi1sHSogLXJ/ggrQuVEGRlOWZJe/A8K8fJJa1fH1vfgjhIepnQjVPY371aikHXWVIy/jjAEtnAhV6roF4DvQSUNlJLO7YnZpLJmbMaxfCu6PkhAA+jBq6HKUAS5oXRlZuASlrnsYPHrt59q2+5yri1uSkt/JSdy6td1Gm1QkC4B9RqKVyMsgB5Tm4HTE3rx7ZT3LA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=RnUIn1JG5uAwUeM4ZHH6enIYCqQ2FAIDJTZ/2BLFrnn9g/XJ7a0f1NCL3iF3akncT3a7z795hVferkN7OZfgMFjOeEbnJ2lAXaR39DebawP/Wk3Tsc/yZHVuYZP6dM1LbuALAXTACqNvyB2iCJOz+B1N2peXdsuy3Ac67JduVHaqmyHxhJl/py1pwTuPZvUYIpOPyPptqoFAsr1QMzRYVxyXLd/obobm+aOmGFOCrKQejBlMBfHq8ha+GtwIeWWqFG4A6tF2be6+2sXNViKpVreGIsUZFtlx+7ciEcldGm8O/jbHg32qS6AY7jXNPqkx+Wj8xHD8mxYj235Z0YfItw==

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com (2603:1096:400:359::12)

by SEZPR04MB5898.apcprd04.prod.outlook.com (2603:1096:101:7e::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.10; Fri, 5 Jun 2026

15:22:43 +0000

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927]) by TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927%2]) with mapi id 15.21.0092.007; Fri, 5 Jun 2026

15:22:43 +0000

From: Kerry Hunt

To: Kerry Hunt

Subject: =?utf-8?B?UmU6IFNFTyBCcmVha2Rvd24g8J+Tig==?=

Thread-Topic: =?utf-8?B?U0VPIEJyZWFrZG93biDwn5OK?=

Thread-Index: AQHcx2FygmZ0af99p0ua+GayEe/nbLYBTnTrgC8hB4A=

Date: Fri, 5 Jun 2026 15:22:42 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYUPR04MB6837:EE_|SEZPR04MB5898:EE_

x-ms-office365-filtering-correlation-id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|39105399006|31061999003|24071999003|8062599012|8060799015|15030799006|15080799012|7071999006|55001999006|37011999003|24121999003|22091999003|16051099003|19101099003|20031999006|3412199025|440099028|102099032|35041999009|51015399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?SjUrVUZ0eEwvNkFnRkJlMjdMSy9NM2JlRzFZUy9CS0hHTzhwRXRaYnArOStp?=

=?utf-8?B?eTh1VkVJUU9tbHdQVVlTT3pLbW5jeXZ3djBpSnhNOTVlTm9MVFpMRFloZzkx?=

=?utf-8?B?UXRzT2JHb01NcjVNTWV2Z0EzN3A4bldFcFNKMGpIWTl6WmExRnUzcVU3UlVD?=

=?utf-8?B?azhFZVpEbkZHVEZ2anhGRzZrdWk4MUpFMThYRitEZmRodklyTXpDRTZpOUd1?=

=?utf-8?B?WGF1N09jQTVja2g0TGI3K0dDVHVBWXlRS1QwMEJjV29sejdPSjFoL1lXRC82?=

=?utf-8?B?RTdTeXNLQ2Y5NVg4ZmFjbGdqT2szZUlKRWRRQjYwMG53S3BvaGVZZDR5NHBJ?=

=?utf-8?B?MklZNWU4ZnA3R0hzSFFiQm9PTnFUbDQ2cnB5enFyTE5OeTNYb09oTytrYmJC?=

=?utf-8?B?MFlaVG5GMk11QWRJN1NLS3dpR0tCTFdBK0YzTkdidDE1Z1EvNUxpWkxMZUti?=

=?utf-8?B?aFppaGVIT0VVWlEyWThhV1hmTVdwQlJzdEViNHB6TDBMU2wyRndPWENoTzJ1?=

=?utf-8?B?OGpZZThFK2FITEhKQ1hld2hLNDZFdUptZ0dtUlRGWDltUjluRS8rSG5nN1p4?=

=?utf-8?B?YW1HWGZLd0VkaEtCeWpwbGN0RjlMNVQvbm1wdzFHbS9BamNCTkFaMHNidlkx?=

=?utf-8?B?WGJxV3lJOE1qWU1RMGI1a05VTUVNcUF6L1NiQm5TU1FvTjVTaFNNZ1BueXpU?=

=?utf-8?B?dVRmTmJwc3V4WGs5dWg0bCtIdy9QK1BTenAxY0RsdjFBZk9UbXNmNjMvTElm?=

=?utf-8?B?cTFpRFpxdXVBZmQ3dFJHZkxmb0ZMeEVGd0NyZkNHNlphbVU5LzhXZDV6UTYx?=

=?utf-8?B?Z1RGVVUrZDBpMEEwZDljK1RGS2Qxek96M0dUSTZwUlJEdmovaFU5NmJFbWsw?=

=?utf-8?B?STBCUGFNR29FNThXSGFWRnRpRXBHdHRacU1QRWVraG9JRGgzNll5WXZSeDcy?=

=?utf-8?B?dTQvaWgyVE4rT3pQcEZaVnpRR1Boby81bXdrbmcrcHN1cnBhRDdBLzFjcEoy?=

=?utf-8?B?V2t3eVlqNEZLRXJOcjJYa0h4ajdSNHJBZnVTdHNlSGtrZWVwcmZURGd2VnNS?=

=?utf-8?B?LzgzN0VvcDk4VDBSaE1ha2lqUndtWXh1Yit1RDBkdFFxN0dpTzlOZ3NKdTR0?=

=?utf-8?B?SDN0UVVBaHY2SjQyZTV4Q0E5MlYxSkQvYW1UUXBwa25XUXhVTVhQZzM5dTJX?=

=?utf-8?B?VXVOck50OExqM1Q0STVOdGErY1NyRWcxU2F0d1hWTTQ5MC9ONUpFNlowZFJZ?=

=?utf-8?B?RkNFdlVSSDZoMlAweU15SlZ4bC9oMFp6QmR4V3lnMjNBOWF6SUgzTUJHN3BG?=

=?utf-8?B?WjJIbU5EWU9UV3ZzbUQzK0Z6bndxaVZYT2ZHNldWaDkxUjNIelE0dFVMakFw?=

=?utf-8?B?ZjF1OGF4M3RIVFdwWU1tcVlURHpJNjA3dnRyK25uOGNaVi9aNEViMTF6cFNT?=

=?utf-8?B?a2piWWZ0UGx0YjhlK1VuSUhFUzVjWjVYRGxxR3hHeC96akRtQnc4N1JpSWVV?=

=?utf-8?B?aHIzMEF1UDZTSHN0a1oyZVBFbHRNZm5xKy9ZY0FBdW9yRlpRNHQwdWRkajYr?=

=?utf-8?B?OGpreXJtYjBwNXlhenBjcklUc0JqQm1Nc1VaMkkwelVkUXYyWWRzS3ZtRE5M?=

=?utf-8?B?U0x6d0QrUnIwTTY4VmhTdlo0TzRUb0ZXMGJwcmpkdWhTamJkcHo2b0craG9j?=

=?utf-8?B?amVNNVQ3dUNKYVRna0xxdytqNnNzNFQ4TFlSZXYrQi9XbGpmOWJ1WDR6ejQ1?=

=?utf-8?Q?Ee7FQxRZLKo2HuwB5F1GtuiaMsKSldQcz0kUWtH?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Product catalogue request spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 09:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWLt-00000000Gge-2eRo

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 09:20:53 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 09:20:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vzded219.smartservers.com.au ([203.98.83.103]:35844)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVV96-00000000J2b-3Coe

for root@nk.ca;

Fri, 05 Jun 2026 08:03:46 -0600

Received: from [155.103.70.103] (port=53463 helo=menbakasal262)

by vzded219.smartservers.com.au with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1wVV8J-0000000DUqi-3jZS

for root@nk.ca;

Fri, 05 Jun 2026 22:02:47 +0800

From: "Hans Edstrom"

Subject: Re: Purchase.

To:

Content-Type: multipart/alternative; boundary="Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B"

MIME-Version: 1.0

Reply-To:

Date: Fri, 5 Jun 2026 07:02:46 -0700

Message-Id: <0545202606020713DA988C2C$75C4B666D2@hualeonggroup.sg>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vzded219.smartservers.com.au

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - hualeonggroup.sg

X-Get-Message-Sender-Via: vzded219.smartservers.com.au: authenticated_id: ehs@hualeonggroup.sg

X-Authenticated-Sender: vzded219.smartservers.com.au: ehs@hualeonggroup.sg

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir, I am reaching out regarding our interest in your

products. Kindly provide your product price list along with catalogs for

our review. Additionally, please include any relevant information that may

ass [...]



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

[155.103.70.103 listed in dnsbl.ahbl.org]

[155.103.70.103 listed in dnsbl.ahbl.org]

[155.103.70.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[edstromh00(at)gmail.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[155.103.70.103 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[203.98.83.103 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re: Purchase.



This is a multi-part message in MIME format



--Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Dear Sir,



I am reaching out regarding our interest in your products. Kindly prov=

ide your product price list along with catalogs for our review. Additi=

onally, please include any relevant information that may assist us in =

conducting due diligence about your company.



Thank you for your attention to this matter. We are optimistic about t=

he potential for a long-term business partnership and look forward to =

your response.



Regards

Mr. Hans Edstrom

CEO

Company Name: INWATER AB

Address: Lovangsvagen 12 194 45 Upplands V=E4sby

Stockholms,

Tel: +46739303676



--Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>Re: Purchase.



Dear =

Sir,

I am reaching out regarding our interest in your products. =

Kindly provide your product price list along with catalogs for our rev=

iew. Additionally, please include any relevant information that may as=

sist us in conducting due diligence about your company.

Thank yo=

u for your attention to this matter. We are optimistic about the poten=

tial for a long-term business partnership and look forward to your res=

ponse.

Regards
Mr. Hans Edstrom
CEO
Company Name: INWAT=

ER AB
Address: Lovangsvagen 12 194 45 Upplands V=E4sby
Stockholm=

s,
Tel: +46739303676







--Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B--