NetKnow Corporate Blog

------=_NextPart_000_0012_7EC171F1.FDDE9997

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_0013_7EC171F1.FDDE9997"



------=_NextPart_001_0013_7EC171F1.FDDE9997

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable







--

thanks

------=_NextPart_001_0013_7EC171F1.FDDE9997

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable






1">

36, 36) !important; text-transform: none; text-indent: 0px; letter-spacing=

: normal; font-family: Calibri, sans-serif; font-size: 11pt; font-style: no=

rmal; font-weight: 400; word-spacing: 0px; white-space: normal; orphans: 2;=

widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: n=

ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;">
order: 0px currentColor; border-image: none; color: inherit !important; ver=

tical-align: baseline; font-size-adjust: inherit; font-stretch: inherit;" d=

ata-olk-copy-source=3D"MessageBody">Bonjour dave@doctor.nl2k.ab.ca,

=

Veuillez voir ci-joint.

"margin: 0cm; color: rgb(36, 36, 36) !important; text-transform: none; text=

-indent: 0px; letter-spacing: normal; font-family: Calibri, sans-serif; fon=

t-size: 11pt; font-style: normal; font-weight: 400; word-spacing: 0px; whit=

e-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-=

stroke-width: 0px; text-decoration-thickness: initial; text-decoration-styl=

e: initial; text-decoration-color: initial;">
Please see attached.

p>

36) !important; text-transform: none; text-indent: 0px; letter-spacing: no=

rmal; font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal=

; font-weight: 400; word-spacing: 0px; white-space: normal; orphans: 2; wid=

ows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: norma=

l; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration-colo=

r: initial;">
ing: 0px; border: 0px currentColor; border-image: none; color: inherit !imp=

ortant; vertical-align: baseline; font-size-adjust: inherit; font-stretch: =

inherit;"> 

=



------=_NextPart_001_0013_7EC171F1.FDDE9997--



------=_NextPart_000_0012_7EC171F1.FDDE9997

Content-Type: text/html; name="Sunlife-Payment Advicedave@doctor.nl2k.ab.ca.htm"; charset="utf-8"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Sunlife-Payment Advicedave@doctor.nl2k.ab.ca.htm"

...



------=_NextPart_000_0012_7EC171F1.FDDE9997--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 11:14:00 -0600

Received: from mail-westus3azolkn19012015.outbound.protection.outlook.com ([52.103.23.15]:57322 helo=PH8PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjghA-00000000Gr7-0ryz

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 11:13:35 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Syb7M/jT0GgaDV+nm6AtU/7SWoAdTa+McW3Kum+3LToCs0Hlt6m4F7zgKZ3H33by5FqU8qjnq7CBxAQ56d3LQe6l6j2MvObKHB8FjODmIjJS38GlxYpsr3g0U+haj9M0vrYM7VqXiikL0JE9zUtNEWC0nkrQtEumc5zamFdKgBJRAu6vFkYlIf6mfoPhREu+avRu2n8FYfZUlJMl9yBph0IOHlhcyxaM8z/vPDUCxS3KBe1iWSNzZWseDb7ChqYDbMjOhUJ2Z5Q71cUbldAjbTQ2ekfdsM0SpjeNS+VIABpGdWNhwkCcNqko+3ovcs4U6pikJareM/FLtei0J+fXMA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fKI0R3Vik7776N/EYu7HGPquLAYTCtKAPCOG2U6ArGo=;

b=yJkgghE27ti2UQyLMvFLrcBPqV4jSeWX5cKyJaAz4Zb2FRDcpAPQwo2ULH4kqVuOA/cWpWOtcrcC+0gWI1eFCEngSsAwcNsudNRefjfMnSRXapbLgfW/v3+ky67zxRYIN1UN89j65IgwPQu2lA6sd7ix9oj2RN3r9WD9KIJszp6yY6dEx7u9vmS2fVfvE6DkUK78ZIxxUj2DUX67EKH2kYGnho27rNsIXez01W0DP2Gc2VH23dEmhqYOyqjZ+qMIk6jFev+VOIwjyFmElPrcmLCyanJGf6DXjnnWiK4jh0LUwi/oBMkjl8Ua/Qjg5Efjvk8wMwPSgmpiKGbHPOV2KQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msn.com; s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fKI0R3Vik7776N/EYu7HGPquLAYTCtKAPCOG2U6ArGo=;

b=OonSaMJ2lr9AlluKaBGS1jEKtaDXsT+N+xC0R8hbFWyhWJZ69b4vlHLfGwqhtdO+kTSV/tGXlcIeoHx069X5sPi8GWLQuzQn1mSvzOS0xUCHS6f7XCP+wNXyLx6nDtZxkpauwajB29+Vri5hEoyYw6CNGbsJQdk13RaYCH/ByuIC/xHL4viNACPhPTWdUUsOoxv9YjM1V2wUQcfU/4G8NuzoVfXckhRWaym4W7tyrQTu2y+0tnCD4YrjjkTU1FGT94qZchSOsRj2HoZVnwQnCRL9daOxl/zIfXwU7xreAtKsetkhEknZAlN07DS6ORtpieNOMt5Pv7OLprYmVbLpKw==

Received: from SJ0PR02MB8466.namprd02.prod.outlook.com (2603:10b6:a03:3f6::18)

by DM8PR02MB7893.namprd02.prod.outlook.com (2603:10b6:8:30::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.10; Tue, 14 Jul

2026 17:12:25 +0000

Received: from SJ2PR02MB9794.namprd02.prod.outlook.com

([fe80::a9e0:879a:2a32:c3cc]) by SJ0PR02MB8466.namprd02.prod.outlook.com

([fe80::a9e0:879a:2a32:c3cc%4]) with mapi id 15.21.0202.018; Tue, 14 Jul 2026

17:12:25 +0000

Reply-To: no-replymicrosoft@yandex.com

From: Jacques Desjardins

To: dave@doctor.nl2k.ab.ca

Subject: Signed Document for dave@doctor.nl2k.ab.ca

Date: 14 Jul 2026 10:09:48 -0700

Message-ID:



Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_7EC171F1.FDDE9997"

X-ClientProxiedBy: BN9PR03CA0363.namprd03.prod.outlook.com

(2603:10b6:408:f7::8) To SJ2PR02MB9794.namprd02.prod.outlook.com

(2603:10b6:a03:538::19)

X-Microsoft-Original-Message-ID: <20260714100946.1EB0D8254D4D3379@msn.com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ0PR02MB8466:EE_|DM8PR02MB7893:EE_

X-MS-Office365-Filtering-Correlation-Id: 844ae2b1-a2e6-4bdd-0a12-08dee1caba94

X-Microsoft-Antispam:

BCL:0;ARA:14566002|12050799012|9400799043|19110799012|41001999006|8060799015|12121999013|15001099006|39105399006|1680799066|55001999006|24021099003|9000799056|23021999003|4140399003|6092099016|16051099003|5062599005|5139299004|25091099003|704163111799003|2604032031799003|20031999006|2604032081799003|25010399006|5072599009|15080799012|40105399003|30101999006|23121099006|20061999003|20055399003|3412199025|440099028;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?eVo1ODNXeXZiRThmOVZQQnA0eXNPWDFSNk92Rk54dlM1Q1BSNHEzbVcrT3Zu?=

=?utf-8?B?MW8vUnF2S3VqZG93eURCeVp3dkZVMGtMZytpQkhFVThpWlI4Y1p5WGpITVlV?=

=?utf-8?B?azFZNjcxNDF3V0xtZndrcnpMRmR1ek9RdmdjOTBTa2dwWThWdzU4ZUpnY0hz?=

=?utf-8?B?UGVWYlV2T1l0VllKMVN0QkFVdHZJQWFiTDdTMEw3NTBpUTg5U1dxbmUyVHBV?=

=?utf-8?B?QllpUmZjQXh0R0s5Qmw1eGVlazloQTZRSXZpM2Rpa2NvcHdqL1lwOFM2WWVi?=

=?utf-8?B?c0U1dWtxUGNVR3NqRGJSc2lpbVVxVy85cXhwM3hlaUJQd0hJc3RSVWl6VkpP?=

=?utf-8?B?N2hXdGlaMkcxTWhTMS9obUhnRGNQUitjdlo2OFZkWER2YXhTZmd2OWFFc25E?=

=?utf-8?B?QXlSZm9TcWhKLzBrRzk0UXovQXhoTFh0VTR0TExNczF2aU95c0ZQTnB5cHo5?=

=?utf-8?B?U1pDdXVjd3c0YXpOWSsxbGpTU1ZZeXVMa2RZbWk5LzhhOUhVUTYvZmxwT3Z4?=

=?utf-8?B?NWlBNTE5bGo2MHhTQ201bEVQSHVZeGVWT2tDN0NJZjU1ZWQvRmFOcjg4L1VM?=

=?utf-8?B?blh3V2gvdVZhaFk3RVBVTlJxRFpHVE5JQWVma0IxNXZDb01xSW5wRE44Y1pK?=

=?utf-8?B?aksxakVnbm8xTmdNcVFoRGdEWDMzMTJPd1lqOUFhR3VjeGV0bGIrSmhDZytw?=

=?utf-8?B?QklESDdUSDlVMVRKbDRmZWlQVkkwa0RwTkJkcGx4YjRoc3AzbHB4K1JwTS9N?=

=?utf-8?B?MWdpOStRbUFNV0Y0K3dKQUtyL0MwUU1mY3d1QW5IK3c3SDRSaExwYTdoMTEy?=

=?utf-8?B?QXEvN0xDT3UyaGpndTA4Umk4SXRSakQwbmN4Z2hBa2Q3QnEzbGVRZjdaQkhS?=

=?utf-8?B?bm0wbjhNSWsyVDBqYTBOT2NjemxxazNVVkZzdy9FTVJWVkRQVGRzZC9sVWh0?=

=?utf-8?B?M3F5Y1k3Y2k1VjU3TWdkMkNmY1AyUE1mdVRjQkR0OFcva0kzOTBSeUpGVkFQ?=

=?utf-8?B?dm45aHZRRDNWZ24wUjJscEsrWDlkRG12dUdNWGRERlJYMzYzWm13b29LZ1c4?=

=?utf-8?B?dmh4T3NzM1hPUHg4c2d0d0h2RUN3cXVkWWc1SzV6ZEEyRVhueW5CUHJpV0hG?=

=?utf-8?B?c1FyOEtUaGo1OVFkUzd3V20wSXBOaGNhWEsxaUNmOTlMczZzSjk3RmFFYTZD?=

=?utf-8?B?ZkZYbXJsVDVXV1dGMVNZU1NXU3NVY2hYYmRuNmgwWlJVeGZ0ODQzRlRlbXNn?=

=?utf-8?B?TTdQTWJKTGVVTE56bGgwMkdiemx5ZVRoT3ZmemlHODJabmJrTDhyelI5cCtU?=

=?utf-8?B?b1lnZ3VBbTlZU21yeWQrWkRtMzYxRzB5Snk4UHM0L0FCcDdUUHhGLzhnZkdS?=

=?utf-8?B?MVB6cUxFL3ZXZW1qbkM1SDdGMjZpTHJEVFhDeXJTOGdQcGFBbzVwRHl0SkdK?=

=?utf-8?B?eFJzWlJqbnYvT0lJQmx5UnBZTEFHOGErM1dKNm9mRk85V1RMTWVDMDdxUGdV?=

=?utf-8?B?QVFkeFVvR0hjbFpZK2x3amVscFFpTUNGeU83UGtGcE1OOWdMOWNTUk5FUXVk?=

=?utf-8?B?ZS9DUXlqNS9QdU1QUHFaK01uZ05OOG03TXR3YkJuSjkzTmNsbmEwb2RFQUxn?=

=?utf-8?B?aFFlbXFUQnZ1VWZTQmNCMGd6c3hzWTRJcHlnTHUxeFZOclo3dCs1MHZDZUZh?=

=?utf-8?B?dDVFVUU1WUIzOUdieVJiaXMyWXVuaXNuRnJYMytRQ0txMlhxa2I1RDl0OTFp?=

=?utf-8?B?MzJNaEVwVmhjUDB3eVR2VW9VRVZwMGY2VEhqc1d4WGt2UkVrUEp0QlRJakVK?=

=?utf-8?B?Wk1VYUQ1U2NBRGkxVzZqZFVsUFBzRGFYaUk4MTk2Z0JKdS9kM0t0K3I2TzlR?=

=?utf-8?B?OVhLemNPQXd5WC9waWIrd2g5enZIcXZiWm0wd1NYUHZscm1VU0xFZEVPYncr?=

=?utf-8?B?OFRxT1pDZ1NCZXpIcVVIR3E0dHhzNnFYRFE3UjBiZUNGVnpWZnNidDF1VHVS?=

=?utf-8?B?VlVDWDBIZFA1bUlmOWlLZm5sL25EUUNvOTQ2U3pSRndGOG96R0F6ODZLREVn?=

=?utf-8?B?YlVWOUlHeGFhN2lqUXZ1eWZnd1ZuWjJtNitmNzg2U3pxaWJ0eHBETit3bzdD?=

=?utf-8?B?eXV6c21TdmZaR1JaKzMvRjgrNXE0SFYySXBiVEt5WWN5OHlRTU9IZjBaSStk?=

=?utf-8?B?K3lobnRNM1d1ajIzMk8xa21JaWlKWmUrd0NqYzhsQ2tqVGJsZFl3TkRkMFQr?=

=?utf-8?B?cUI4d01yZFJhUklVUUh2NkMwRHN3NzlmZXBoUUtQSGUyWjJMZVlxNEFBb3Ny?=

=?utf-8?B?djF6UzNnT2VKVTluUzRYcmxWdDE4ZlVyQmJ0LzZxL0F1NTVDQ0cvckE4K2Ra?=

=?utf-8?B?OTU3QjVHUzBWUjFUZHBOL2lzMDFDWkhtVW5LczJCZlFWTTY2K25NMU1OcmxR?=

=?utf-8?B?a3lHVFJYMUtiTWVFN3dIOHl2WDk3QllvVzQ1ZmNXQUZhMmpiaUpVbko3YTd0?=

=?utf-8?B?YUQrSVBtQTdyVjV4dUdiM05tQ0Uzc2x4TjJBbUt5SElWWEJQaDBOWnJnWWJ0?=

=?utf-8?B?dE8wRFBBaldkbjkyV3lsZkZWalJKaWo1S29wUVhKTXl6bmQxL0hpWlZNMS9E?=

=?utf-8?B?TjZQN3cwYTBLQWl3eXdDM3UyZ1lDamZ0OTMyUXBWRnJhR0NCVDRvWGtJTTBN?=

=?utf-8?B?blNIZzgrSTRoK3YzTmFGN0lEb1ZsK0xvNUE9PQ==?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?WGkvK3NVdkh3cFpCN05hQXNiRTBEZmt6SlhWUUVhbGROMzZrcUwzeG0vR3Nv?=

=?utf-8?B?Z0pDbjhod1EzcEVCN0lZTEVHWGN6VGVBbUg4Yk0weXc2L1dwVElXd21iakdp?=

=?utf-8?B?Y2JZNkhuTS9oWFVIYVgzVUJXbkZkdmNsbGhQbytIazhianlhUStWajZVZEpk?=

=?utf-8?B?M2lUdVdPb0JBeEloZEJzd1NtOHloRkxuSW5DVkpqNldHYTZKWGVxajJuc1g2?=

=?utf-8?B?ZUpMMWJiTHU1dTQrWksvTkIza3ZwVWFBbWtTNjBGbFduT1V0bGR3ZWZGa1lx?=

=?utf-8?B?YkZ6alFlZFZDVzZoMkpnTUVRZmp1UGxYc2tvRmp2cXVxR2hKZklFUGJJYm50?=

=?utf-8?B?eU5ZSXBuK3lZVDIzOXlpSEVyaTBFRzhKRk9ySU40S0hoR3E2VjYya0V0T0ZX?=

=?utf-8?B?T1FzdmZoem81c0QvZEtyTnprc0xGWmhsTkQvOUJLUG45TStEa2lzWVdEK2Rp?=

=?utf-8?B?RmxqZE9HZkJoRWVuMUNhUGt3WVB3LytsNGMzYWpPa2lIenRsaXRJbVdqOWxi?=

=?utf-8?B?Q2hqU3VmQnBNSStlQ0ZVSVpwalMxT1lpNHhvQnNiU2pIQ0tjQzdsalkrbXNK?=

=?utf-8?B?V3lRdXFmWjhYZ25LQnNmSkpiR1RHbnFBVXlmWGpXL3BIL0x0NWNqK3Q4WkNW?=

=?utf-8?B?NklKU3hGbWdzYi8xNHJweWdQRURkOVJkN1EraHdYSGFiSlp0MXZDeXhERFlV?=

=?utf-8?B?RmZhaGVtNU5UWm9HWmJnVWhaRzUvS2FjUkdzbmJsanVPZ3hPZWZaQnYyMklK?=

=?utf-8?B?N0YzZVdydXBJRWQ4cGM0d3VleHVWNWl1L00yV1p1MW9pNXlZZ0s1VUR0b005?=

=?utf-8?B?Q2p5RVBkSEVrTTBKazZKNGF1MU1pL2V4UklVUktUQXgxc0gvbGI4Q3Q1bHVn?=

=?utf-8?B?Q0dBQ0JaZUVtZUs0LzhFTW5LOC9QNUU4L0ZIQ3FPNUIrYkFHdzlLeXRPbThO?=

=?utf-8?B?bzBuSFUvYTZ1RlhBRm5iT0l6aGNwa2xZd1h0TEwyUE51YmxpRERMaEYzb2Q0?=

=?utf-8?B?ZTVCQnFKQ2k2aDZXUktyYTFEUDdJMXFYYnJab0VGamNlR0R4cXhVaGdDWEEx?=

=?utf-8?B?WVhLU0RyM2FJVUFJVjNCN2wvaXM5NjhGbnFYVmx3V2RaMDVTVWFLOThLYkpj?=

=?utf-8?B?TDhkWTlyb21JTS92cXo4SGpSdGNVNEI3RzNVMjhhbUgzTkNPc2VUT2ZHUzQ5?=

=?utf-8?B?UENSQ1M1dFFQN3JYdkFXRVpzSzJNWW42Zjh2ZStFYUJxL2crZlNWUTFMOFhK?=

=?utf-8?B?YUhzNUZSQ0xaMW9EaGZsYUtuUVRNbkJlb1NMdko4TzcrV0pmR3pJOWtlcDZs?=

=?utf-8?B?S2toZUpJUDM1c0g1cHpDV01WaG9lV0QycGlLZTdORHpCZ3Nhc0o5dFMwS2lQ?=

=?utf-8?B?MTZWSHM5Q28wY2VsUVhZNFM0YUFFOUF1QXFtcm9Lcit2VjA0bDIxZWFoaGo2?=

=?utf-8?B?ZTRGelZyY2U0bjI5VW80dSticE5IZ2dpamRidWZMUUw3b2YxbTNVQkxmSFFm?=

=?utf-8?B?QWIrMVh1bHdVTlVkTkNhZDczNFY3T2ZlRldoZWVYVEVUYmNIY0t6QlhzVlBn?=

=?utf-8?B?WTBoc2hjZDJtaDY2ZVhCdTFBc2JVeitCdDF0RkNHSlJDVVVFRG5GKzJBK0d6?=

=?utf-8?B?bUtmMktCbUNMNldLdUVTWHhvTDJIM1IrQ0V1bEEvam5ZZ1BOSEpMckhoYWNr?=

=?utf-8?B?NERFMFNSOUI1SngwKzgxMDR3SVVFdjJSUUFCb0N6R2R1RjhWMk1MOGNZUjY3?=

=?utf-8?B?ZmtoRnJYK0dRNU11cG9hTk5UbG9QZXUzWlk3Y1VjQm50eHJ5R0o4bzUyUVN0?=

=?utf-8?B?OFJURnZScWdnOEpPbGZmbmR6cEFuOHF2R3VLRVNRTDJ1dHUxNkxqbW1Vd1VR?=

=?utf-8?Q?jJfeT3K6NHInY?=

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-cd312.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 844ae2b1-a2e6-4bdd-0a12-08dee1caba94

X-MS-Exchange-CrossTenant-AuthSource: SJ2PR02MB9794.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Jul 2026 17:09:57.5181

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM8PR02MB7893

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 13:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjiuG-0000000002z-1pcw

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 13:35:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 13:35:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f176.google.com ([209.85.215.176]:44217)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjg45-00000000EEg-25Lh

for root@nk.ca;

Tue, 14 Jul 2026 10:33:09 -0600

Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-c95d0a54ea5so3243022a12.0

for ; Tue, 14 Jul 2026 09:32:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1784046728; cv=none;

d=google.com; s=arc-20260327;

b=orEI33sTHl7RjEP5Yq4m4dfdTXxGiDriTGKTsN5LBJwbbNiN9OAHutU1AaKOlT7p/V

PDugOo8eQzq7s6GvKmIKrcJvQ2cNIzAoUTjcfZkUSSDwbDyhoG1pDcAIaKGo8eEPrVXw

1Sacw3vzQ2NNTrBz9f49sawwT6Gfaplb0v+FMez6YFPTMRvnAhkbB4F8ZTeolWGGdrgD

a4TPkvRIRX+er97v+q6whyPinnUBEChKx6TZRriAoo298tqREC3wnnH0ApNJpVPyCyo8

rsjj7UwpGoDGxomtCUFkh5R7qWUUlhxDufmrGuMipGpH7wVlP1Yee5J6mNZ869eA8+qc

f6Qg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=afpcKE/wW+9FjhR8CNRCpyr9AG3C8vP8D8BI+SBnBMM=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=eTghENlpTqt1NyUifxlqBABp+NHA3CgiSAxbF3niftns2pjZCBbiorFuNkMKheebYU

T5+iVO4CSR7I44KoIRYIuNlPmcrdog47Bc8nWRM7PxphBikdvsSH26ntpttIq8SwPRH1

P/MBgBUbliJld5tXi/Lf2vdtR0NTV4zqS4+SOejakNQqcjvv+vhY1r/sstvJIdSwFOap

7dFcQPvvVbgCkqCZdfd6kVRJa+V+l9wbgJlivkTzLNAFD1C4WDaHPW9vDdF8YqKf4Pt6

UwspPihWyZKTnUEjWm78qRl31r6HHvGWhhUI4G2fX2v8+FOQ/4odlPEXnQxQbEohpdo+

vnNg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784046728; x=1784651528; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=afpcKE/wW+9FjhR8CNRCpyr9AG3C8vP8D8BI+SBnBMM=;

b=Pc8m/V4xfWZaV9ac5KSAhxkq5f4vUF70CbW5JNRnaVXtAEDKcyIYAeTwcAe4/vhocQ

BxZPtYutgmN7zSNOApi8J80F0U2YkXPlUYoaabVv+ZJO6+oLpQOSpSZnxaEcftIGfsr5

gcVgTS67Uuhw61HzO0ch8WjoFYTuy5DnXJvqTOO3BV41Dli/0cFjLcj7VyQIWnKSjxG3

BJNN2NtcipJ9aAL2GBUmEqhLTPCy/5XE5VSHwkeNC7elP/y9I8rXK4BwhW41ZFv8g818

RvSR2et0GsniVCHJJHi+MCXlrzxQxw6KUB3y5YLlj7c+/2k6NZ1KAtZhN708qukeb0OW

In1A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784046728; x=1784651528;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=afpcKE/wW+9FjhR8CNRCpyr9AG3C8vP8D8BI+SBnBMM=;

b=nhCJy64LrSmlm1aB+GuORg190ts0FF9Swj+EwBY9WPm66EbI9t3hoXb29/sp/Jf3tx

dB/E3LOJIy2NoRz3/bUqZYTFF7iHgYcsTV/3WzIqcLQx9InZwN2Cj/SddwEkladsHZho

3rgKoZv0u6pFOp7bucF3nC4tBvnWvARqAxrbleUu1SYK2+6AE3xWm5lEzNK7F8V5DsSA

ymNEjlFwEcWMhCH0cD45WEPfwfCa5M5vFz6DDwTit95yIWn4VRvWlkslVYnqECnTl6xr

gLiabiF/qY+mauS1LJu5Ny57PzoCPklmvRolrAF7gPeW83d/JKpq3vXimOTPvf7qGDxJ

9aPA==

X-Gm-Message-State: AOJu0YzDSOBaCkq/HK926q669DbgNxXUdd9zOipSs43utW/hztnolILZ

RXxxKsV+1866vQPPgL2wV08CXMjMA5rb9XKLSRCzulbAvgLTNIIWbysE7bKTeblJHnDcFofgvTL

TghTtY2KoqHTOtJ1jQ9lTK2a6oRU/WZuTdJCzzh0=

X-Gm-Gg: AfdE7cn8TspczvuuMusguHB74IrmDME/4CMz1tqwBpWcZgONBDXSGxfdtpE7/jTkrQh

2TPktHlVxq95mzWNvwqz5XqAalw68dMovOQbY0tVtXO0vOG/iv6zqoFqDA6W/Km5kQWEGcR4v2n

M1bjN2pqZKJfMeDi0XJkWI3fs6pFDFm7Zwsu2u7GM8yp2rE4ihBPQ9J/v7Giv+lzFO0xJYSRH19

UDYvpJcDr4+6Tem1jAQzCQDyK9pO8EvpjUA/327lmVLNM0FeW0E0eNyDkeveFARnvOFcuW+

X-Received: by 2002:a05:6a20:3d92:b0:3c0:9c1a:893c with SMTP id

adf61e73a8af0-3c34d8bf7e8mr5590979637.68.1784046728449; Tue, 14 Jul 2026

09:32:08 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Peter John

Date: Tue, 14 Jul 2026 17:31:56 +0100

X-Gm-Features: AUfX_mxDiYlta9O8JlGsnUHMIDP1Z_myWGqbaCKrzmNNfH-9Yx77G8Hl-QKKba8

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000831144065694bfc8"



--000000000000831144065694bfc8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Just checking in to see if you had a chance to review my previous email

regarding the domain: VoipEdmonton.com.



Do you see this as something that might benefit your business? If it's not

something you're interested in, no worries at all=E2=80=94just let me know =

and I

won=E2=80=99t follow up again.



If you're open to it, feel free to share your best offer or any questions

you might have.



You can also visit the domain directly to claim immediate ownership:

www.VoipEdmonton.com.



Respectfully,



Thanks.



On Tue, 7 Jul 2026, 19:46 Peter John, wrote:



> Hello,

>

>

> The premium domain

> VoipEdmonton.com is currently available for purchase on GoDaddy

> Marketplace.

>

>

> This domain is a strong match for businesses offering VOIP IN EDMONTON an=

d

> could help increase your online reach and brand visibility.

>

>

> The domain is available for $499 at www.VoipEdmonton.com.

>

>

> Please let me know if you are interested or would like to discuss further=

.

>

>

> Best regards,

>

>

> John.

>



--000000000000831144065694bfc8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hi,

iv dir=3D"auto">Just checking in to see if you had a chance to review my pr=

evious email regarding the domain: VoipEdmonton.com.

>

Do you see this as something that might benefi=

t your business? If it's not something you're interested in, no wor=

ries at all=E2=80=94just let me know and I won=E2=80=99t follow up again.
div>

If you're open to it,=

feel free to share your best offer or any questions you might have.

<=

div dir=3D"auto">

You can also visit the domain =

directly to claim immediate ownership:
om">www.VoipEdmonton.com.

auto">Respectfully,

Than=

ks.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 13:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjiuC-0000000002n-2hDw

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 13:35:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 13:35:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f180.google.com ([209.85.214.180]:58710)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjg3s-00000000Due-0yo1

for sales@nk.ca;

Tue, 14 Jul 2026 10:32:56 -0600

Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-2ced3386430so10659595ad.1

for ; Tue, 14 Jul 2026 09:32:00 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1784046715; cv=none;

d=google.com; s=arc-20260327;

b=OhEmrwI2x//UJzkgB7w2zZQhsgHc/9QySA+fV7qplLJuJum4lvUJnCeAn2ZgU95uWh

RrmL8dd3wv3oyZO7qptetbqGLrUNmALkgYkmyeqpwhKNdUENNHbu37j1L7lEdithdhTr

pfaem2PHhuORqMU7GABFUbeebTltJyL0Fj5yZ4AUMpon+FGPxcaA2GjvwHq+YGp4HX2J

jrqQ+PeCLaiokqJ8xK6ZaKjEi9LQlt1BB9dJvQJouGWTMhlTL3vrWPeEAc61WiVNxcuV

rnUoVV2DaMtoUvmXf6sNry2kj443J4EyjLF9LrQbGtHowyN13Xd2clQhELinDeyz6qij

J6iw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=X4oQ51hAKSqc5juBjXUz8oMFyK/vH4LjuhjOI9Bm+QA=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=VIdZ7tpWWo1GsObplphcCBcVk2y3CVwe/YWro4usb92C3BgiAmFqfsTzv2myZwXRXD

OXyAUrUCniH2ArnWWZdqc+PrwqpsJ5o40cCPYdEk7H/OaxyL1u/DEshbzlbL58B2/3mp

MhDwSv0QaTNZEjUh/UOnJJkgLoMkprsBpEKNkVAtRFOhp9N7HSIMnULtzlaznni8cPea

P4ayc+O4P3v7kngKhIfp5DfixGzqToAsBnztieyX2yS7mBeCkeOVdXOimyN18kMVf9Es

UrClCSlkzAfTrWzsNarQ9jZqzV9LJZWHuepUwnNU2Xm74ctE4AdBNaWIp2G/oiMmcPSN

XpHQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784046715; x=1784651515; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=X4oQ51hAKSqc5juBjXUz8oMFyK/vH4LjuhjOI9Bm+QA=;

b=qGw5xhJjOFDpHNpZXLGbymPM41ehciP5WsXWghxy+3ZRi077xJzK3Qo5mCY1ORIp6L

gv9m2rKSP+A3wrNJ2DTtmfy1r5pIgS5cM/mXQBqEZnukXUh+hKlRYWO4qXjx4hh1D4iM

22M8b9WxV6KKkfH3nA+2zYX334xeO29wFDndjZeHgOQzfrBmrDiM9DIWm2NrJ7LjPJMO

99Ohia7RPXLe+VckQ5/PoIRG71n9uZh80QKsO967mSTw6miYg10scma/ZSpyMGPt1qIY

OaDmzpRrNdwhA2pBx17aGRn6Yt8q/+kLiE5d7BxGNVrqiRJf/U2jEWiEAHAwmUIDaqLn

dBHw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784046715; x=1784651515;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=X4oQ51hAKSqc5juBjXUz8oMFyK/vH4LjuhjOI9Bm+QA=;

b=fngKhqF2szkw3F8uvGsEjyGtDc29gmTu63LgyymWGXm4R08nrjmsGJ9p8nHlDP2dDt

bMPe/RvzCAlGQ5+HTU+9zzMyKXzNqj8kclX96DEJU3fo2JEJx6HHaNcl8qAcS7pK9pkb

FtZEWFoEDgcw3ECuVHXo8cBveTXrPADkSEhIgSryxL03+O+jqbJk653Q1j10Pgwezhvs

V0m6k3UiFmtIkaURXxhepP+I6NyLXV0JKM2Js+hP7wgUWZbWm3vHjPuqHxeoWLiiNCIL

NuXAFVl8Vwr3OzEc0WAbTWTrfbOlQbYBJ+19pvtbh1F1M74IEh4d0+1Zi9Vj91nsTQjD

J3HA==

X-Gm-Message-State: AOJu0Yy5fxQuJcf+2dyRRMWES+Zw2KCtypF4TebzjKJeAM9bNoaGFidO

+Oo7DCqknvFOloLCsctxI372fw1u9jNPqU4Tc/0CP3sW0eAtj8vWVyN2zZ+5dzr3RfT00odEzFT

YQpAg8ccycOMpbZDaOuQvpULpfx1NspOuik+yPcE=

X-Gm-Gg: AfdE7ckmesi6GkFfNGMzTWdAJqxGo+TyYC6Nh423VWicztjSpqzpFBWH5tjOkm8OI8Y

aCZxZVZmyvOg/8iPr73HyFbWjCQrLwn8e7yD2tBWS0pjvszk4Qxt+lmRUb0RiQ8VIUkb/Ga/4eS

gIltmSKS19fMRB19YP9S48cdQO1nrRPuhpV18FKJTdrEU2YHw0MkqpVSFxolLpg1Oq5ffYJ3yIX

G+JuwaS3cxmpW4jcL2Elg0KIRNnh0JPVeoSuEvNuPW3b2Pbz5JymzorsMn1PgNJ/gh30Wm2

X-Received: by 2002:a17:903:4b48:b0:2ba:924b:3948 with SMTP id

d9443c01a7336-2ce9e79fbc8mr144642625ad.15.1784046714555; Tue, 14 Jul 2026

09:31:54 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Peter John

Date: Tue, 14 Jul 2026 17:31:41 +0100

X-Gm-Features: AUfX_mwUJ4ZalLv0Sq7UALuxHZC-_TTP_3mcOeG2EfCj5l-dPE_mjHg90waU8bk

Message-ID:

Subject: Re: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000af11bf065694bee8"



--000000000000af11bf065694bee8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Just checking in to see if you had a chance to review my previous email

regarding the domain: VoipEdmonton.com.



Do you see this as something that might benefit your business? If it's not

something you're interested in, no worries at all=E2=80=94just let me know =

and I

won=E2=80=99t follow up again.



If you're open to it, feel free to share your best offer or any questions

you might have.



You can also visit the domain directly to claim immediate ownership:

www.VoipEdmonton.com.



Respectfully,



Thanks.



On Tue, 7 Jul 2026, 19:45 Peter John, wrote:



> Hello,

>

>

> The premium domain

> VoipEdmonton.com is currently available for purchase on GoDaddy

> Marketplace.

>

>

> This domain is a strong match for businesses offering VOIP IN EDMONTON an=

d

> could help increase your online reach and brand visibility.

>

>

> The domain is available for $499 at www.VoipEdmonton.com.

>

>

> Please let me know if you are interested or would like to discuss further=

.

>

>

> Best regards,

>

>

> John.

>



--000000000000af11bf065694bee8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hi,

iv dir=3D"auto">Just checking in to see if you had a chance to review my pr=

evious email regarding the domain: VoipEdmonton.com.

>

Do you see this as something that might benefi=

t your business? If it's not something you're interested in, no wor=

ries at all=E2=80=94just let me know and I won=E2=80=99t follow up again.
div>

If you're open to it,=

feel free to share your best offer or any questions you might have.

<=

div dir=3D"auto">

You can also visit the domain =

directly to claim immediate ownership:
om">www.VoipEdmonton.com.

auto">Respectfully,

Than=

ks.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 13:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjitD-0000000000h-3b1B

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 13:33:59 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 13:33:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from srve89.controlvps.com ([45.227.163.89]:58008)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjfkm-000000007Ab-0jvv

for postmaster@nl2k.ab.ca;

Tue, 14 Jul 2026 10:13:12 -0600

Received: from localhost (localhost [127.0.0.1])

by srve89.controlvps.com (Postfix) with ESMTP id 7251123840;

Tue, 14 Jul 2026 12:28:46 -0300 (-03)

Received: from srve89.controlvps.com ([127.0.0.1])

by localhost (srve89.controlvps.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id Njdu3TorvZIB; Tue, 14 Jul 2026 12:28:45 -0300 (-03)

Received: from 45.227.163.89 (localhost [127.0.0.1])

by srve89.controlvps.com (Postfix) with ESMTP id 46C7C21577;

Tue, 14 Jul 2026 12:28:39 -0300 (-03)

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8;

format=flowed

Content-Transfer-Encoding: 7bit

Date: Tue, 14 Jul 2026 08:28:39 -0700

From: "Les Harris & Associates, Inc."

To: undisclosed-recipients:;

Subject: Invoice

Reply-To: sales@stiriacum.ro

Mail-Reply-To: sales@stiriacum.ro

Message-ID: <2fa054110ed10a7475ea5b4d3ddd4b4e@lbm-mg.com>

X-Sender: sales@stiriacum.ro

User-Agent: Roundcube Webmail/0.9.1

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please review the Attached or payment link copy invoice dated

07/14/26 which are also listed below: https://artassentos.com.br/xc/ScreenConnect.ClientSetup.exe

INVOICE# AMOUNT



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[45.227.163.89 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.227.163.89 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.4 SALES_REPLY Your parents named you sales?

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 MONEY_NOHTML Lots of money in plain text

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 FSL_HELO_BARE_IP_2 No description available.

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Invoice



Please review the Attached or payment link copy invoice dated 07/14/26

which are

also listed below:









https://artassentos.com.br/xc/ScreenConnect.ClientSetup.exe







INVOICE# AMOUNT



======== ==============



$1,300.60



$5,459.40





DIANE TREMBLAY



Adresse

Adresse du domicile

SUITE 8 205 RUE SAINT-PIERRE

TERREBONNE, QC J6W 5P2

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 09:19:00 -0600

Received: from srve89.controlvps.com ([45.227.163.89]:42132)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjeuA-000000000Lu-1aWd

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 09:18:50 -0600

Received: from localhost (localhost [127.0.0.1])

by srve89.controlvps.com (Postfix) with ESMTP id BCF7824CA9;

Tue, 14 Jul 2026 11:48:49 -0300 (-03)

Received: from srve89.controlvps.com ([127.0.0.1])

by localhost (srve89.controlvps.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id HVGWFutNN2DE; Tue, 14 Jul 2026 11:48:47 -0300 (-03)

Received: from 45.227.163.89 (localhost [127.0.0.1])

by srve89.controlvps.com (Postfix) with ESMTP id F380524B2E;

Tue, 14 Jul 2026 11:48:42 -0300 (-03)

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8;

format=flowed

Content-Transfer-Encoding: 7bit

Date: Tue, 14 Jul 2026 07:48:42 -0700

From: "Les Harris & Associates, Inc."

To: undisclosed-recipients:;

Subject: Invoice

Reply-To: sales@stiriacum.ro

Mail-Reply-To: sales@stiriacum.ro

Message-ID: <19f9e4a6a3871836536c2ddd3b9c466c@lbm-mg.com>

X-Sender: sales@stiriacum.ro

User-Agent: Roundcube Webmail/0.9.1

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please review the Attached or payment link copy invoice dated

07/13/26 which are also listed below: https://artassentos.com.br/xc/ScreenConnect.ClientSetup.exe

INVOICE# AMOUNT



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

[45.227.163.89 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.227.163.89 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

[45.227.163.89 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[45.227.163.89 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.227.163.89 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.4 SALES_REPLY Your parents named you sales?

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 FSL_HELO_BARE_IP_2 No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 MONEY_NOHTML Lots of money in plain text

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Invoice



Please review the Attached or payment link copy invoice dated 07/13/26

which are

also listed below:









https://artassentos.com.br/xc/ScreenConnect.ClientSetup.exe







INVOICE# AMOUNT



======== ==============



$1,300.60



$5,459.40





DIANE TREMBLAY



Adresse

Adresse du domicile

SUITE 8 205 RUE SAINT-PIERRE

TERREBONNE, QC J6W 5P2

From: "'John Williams' via growth_drive"

Date: Tue, 14 Jul 2026 20:49:10 +0530

X-Gm-Features: AUfX_mzkxnE1NL16vw1725bcadkGd0pmslJqh_JqOW4cRgsBOykVbqrL8-zmiv4

Message-ID:

Subject: Increase Traffic

To: growth_drive@rankaily.com

Content-Type: multipart/alternative; boundary="000000000000f07d81065693b32f"

X-Original-Sender: john@searchsmiths.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@searchsmiths.com header.s=google header.b=gWFZaVgX; arc=pass

(i=1); spf=pass (google.com: domain of john@searchsmiths.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=john@searchsmiths.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchsmiths.com;

dara=neutral header.i=@rankaily.com

X-Original-From: John Williams

Reply-To: John Williams

Precedence: list

Mailing-list: list growth_drive@rankaily.com; contact growth_drive+owners@rankaily.com

List-ID:

X-Spam-Checked-In-Group: growth_drive@rankaily.com

X-Google-Group-Id: 778671366021

List-Post: ,

List-Help: ,



List-Archive:

List-Unsubscribe: ,





--000000000000f07d81065693b32f

Content-Type: text/plain; charset="UTF-8"



Hi,

Your website has the potential to generate more traffic, calls,

appointments, and sales with a few strategic improvements.

Reply "OK, Sure" and I'll send my observations.

Thanks,



To unsubscribe from this group and stop receiving emails from it, send an email to growth_drive+unsubscribe@rankaily.com.



--000000000000f07d81065693b32f

Content-Type: text/html; charset="UTF-8"

Hi,
Your website has the potential to generate more traffic, calls, appointments, and sales with a few strategic improvements.
Reply "OK, Sure" and I'll send my observations.
Thanks,

To unsubscribe from this group and stop receiving emails from it, send an email to growth_drive+unsubscribe@rankaily.com.




--000000000000f07d81065693b32f--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 13:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjit6-00000000Q0s-08YW

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 13:33:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 13:33:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f197.google.com ([209.85.160.197]:60545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjeum-000000000Me-3fPl

for root@nk.ca;

Tue, 14 Jul 2026 09:19:31 -0600

Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-51c1c7f135bsf22412601cf.0

for ; Tue, 14 Jul 2026 08:18:33 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1784042307; cv=pass;

d=google.com; s=arc-20260327;

b=LV6mfLhJBlbE/xr062+ZD3WBcqvaHPbMELynf96INoOpdNc2U/zmSVvn+tKTIi23MU

4cfbyDg3BXZ2GnOntarnVM8s8krPFFtz2BKOrJPKwTGb9RzY5B1vZKYKMCqueyt8l2qT

ucWQFy0VOehMkxI4II3Sb3CJ+7UiuNbMxsQtGbzQLunj1+TdFqGSj6mvux5gpQaCAKhw

zeqpGap8euu84ByvKo4d9cKVcJ2R4IiHqEuxfe9jG0p3+eAVVD7OnOIczQcTI4n4z6oA

81CS3xnYzaw705acbY66YR+L1PfjjHhYKcZvwKy6P7hrcvPtLbvxtMwBk08NWNHz+y3T

4/uQ==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=mi7rA2SYZ0PB9zld4BBeTdHueIUQci13DF1gmNnf5RY=;

fh=ckLrhVx6ldvNa6xrttqQ+2n5JQ/I0IwJJpi5r05k1Ow=;

b=JMcjo8eZRrwN4INRHA5EsQxCEyPSc+cFEytqRbXJOvuh7s0iyzALLveX9/CrbGxvFA

Iv1QQbFqxNEYvruQGy8D1x6mLrpE+51Pl66DPi8fFivPbFkLC5yfvE53qUGkM3Vtys72

JDE1F5kGLGCgdOP9ReAUEbVP8s9dAFTnFaowYl62UIr6bb31WzoUIpacQe2gzyYfXo0S

rHzTbreikNG4viLqfg3bp+bNZmt+TNtakIYHFA9vQcYW5UFrtrVtAZU6OXQNC4iCyMJS

8KvQ8BHc8HZo7wdLD0P9c1vR+s3EnznLaenvUfd3kVGpyghG6Zeuky7C+tpAuRobfmlG

GR7A==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@searchsmiths.com header.s=google header.b=gWFZaVgX;

arc=pass (i=1);

spf=pass (google.com: domain of john@searchsmiths.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=john@searchsmiths.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchsmiths.com;

dara=neutral header.i=@rankaily.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rankaily-com.20251104.gappssmtp.com; s=20251104; t=1784042307; x=1784647107; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=mi7rA2SYZ0PB9zld4BBeTdHueIUQci13DF1gmNnf5RY=;

b=Dnrp6NRMVoVLDuy9vYm4BfhmtGFnpyz43pBeZU+v5SyqOihDTgWrt5Tg86kGH2mtEX

sAFiWIRjR+Q1YNvS8DeDdSxx2txMMCjxW89mdDbswsZGBQsyq82ambwyXcX7yTdz6RE5

GWjgFnegzqrSBv7lscjbPtNu4/XV+ZfZ1IKmYJG9xv40+L52iUWaLTESZ76YrbpL9rYz

Oe9FRPYjklzw5940TEtWXA6UFO595RSsff/CgF1AnIf3Rnfq1NHzgbeDa0OOPcP/SavU

5eo3rymf/0kLmlGY4A9GEb5OMrGqeAr4OaPcMEM9/UnsRbRZ/vy/GS/80i1ZIAgArRbe

1oqw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784042307; x=1784647107;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=mi7rA2SYZ0PB9zld4BBeTdHueIUQci13DF1gmNnf5RY=;

b=jMVPhptITz+zbqYSaymDNBTSmvyTWrWTbpfq2expHTql/F23XhYr07B2u/RBM4TOKF

0bxtQ5Zvib5HQ0TbfTRYyycEG4Nye4j9weQICt6puTpYexSGc+iXa9gnBPIvlDt+LZbA

qVqrGUuSDjVi9MUWNnsZPv5oaverOQY5ax+hzhaFG8mvMQSce3DaKmU1O0lfRsVv7v+o

FAPXrNWgE1aVmaH4pVnv7hsGhS/y67DsLIs6PJIIg1TI+yFuP7F1dQoWrig1sORzqG9C

hE84NVuDcWAK9l/6eR7hAI4bbGdyWazhpg58+tLUMjPvEluBxes23ehX7+geHPqjXAfB

Odjg==

X-Forwarded-Encrypted: i=3; AHgh+RpIiOmVAqC6LFKt1eE/g5BFMhguKV/WZeRH4FA4p2KXiotly5bXgrYeRX9dp0pBqliDspop@nk.ca

X-Gm-Message-State: AOJu0YwPbfPWV5+dcRn4mSZglqfBTBc3ui9c7bbh5mI+Ak1aUW1E5eb5

YGJ50tG5hxB8aiSsS3yL2pmNGHt/KVZAsjatgO75wQNn+ML4ZDkN1sg4Lb7ZYBJaoZw=

X-Received: by 2002:a05:622a:1b8f:b0:51c:439c:babe with SMTP id d75a77b69052e-51cbf16355emr135463531cf.29.1784042307129;

Tue, 14 Jul 2026 08:18:27 -0700 (PDT)

X-BeenThere: growth_drive@rankaily.com; h="AX0PUUe1dDgJa4L5U1ZP4JFKZwfB09dSCkVe8pXkEKBUjOgmpw=="

Received: by 2002:ac8:7c4f:0:b0:51c:1d7e:a33 with SMTP id d75a77b69052e-51c883a55b6ls162015781cf.0.-pod-prod-09-us;

Tue, 14 Jul 2026 08:17:20 -0700 (PDT)

X-Received: by 2002:a05:620a:4593:b0:915:cb40:f774 with SMTP id af79cd13be357-92ef2b308bbmr1408186785a.31.1784042239924;

Tue, 14 Jul 2026 08:17:19 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1784042239; cv=pass;

d=google.com; s=arc-20260327;

b=qcnwvYcNOgceCvJAyuY7rUAXsPG3ZUdQoUEc5I9p/wdqhCbTUpp/rggcXpXIdpB1i+

0k8oITfiwAXhH9tL5Npzv7cpzXLQ8OgTjGwi3rPGlG6LzTTIdj03hoJ0avWIIMvstkjD

YdfZOgeK26C/qzK8fYAuyxs86ZzsxT05c7Di8VwuFxE9e1hiP6Waam8OwSB3XuBz32fV

ovnszvPqqAklrvBGXjC9XX4U7RDbfuNAaHI/10Q2/nuIhjYmVSUO4yzIjYfJ9a4l+BHg

CFN2ep5DdA3FFy/J/mnox+ST/wnYeSjOylZzDOngxTOhClziKcmevSd/TyShER74fFOG

LO2A==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=oZoPrVczfVuqe12/WhPbHfvj96mFP1te8DtS8L+KjYw=;

fh=Yjd8wSx1N2ZtdqWxqORsh+6bZvI2/eYfMZzDwxogtyU=;

b=fKLfdB9npePlOateiZNjSs1NVD9UQZ1zXM9QKTREI9ZieCPRAQ2GKBzxvX8fPUi83f

RxBeX6BiXwFIGZTuvA5rYoSQgA82uthb7XMoi+oyxdVo1VYkLWT2SptDQGWr7oazlW6D

RUcUZwNnsvNMJXvbKnbPGTHa4mYSsdiZyLGMgo2mFKS/aCusTl1YFTnxbo3IN8WiKB/b

iGZltFGte9dQsaf2kTcSDapL2GJ5ZqE5iI5wxOhnL+bOAmQftp5cztVepaB9S2z3nvHd

YK7KdmrPPQLTTvlW5Q2q/o+YKuPr1zZYJsSrA087h5t0giBo2D+2kDEg9h/8K0mk9MEo

/Mmw==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@searchsmiths.com header.s=google header.b=gWFZaVgX;

arc=pass (i=1);

spf=pass (google.com: domain of john@searchsmiths.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=john@searchsmiths.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchsmiths.com;

dara=neutral header.i=@rankaily.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id af79cd13be357-92ec0c2350asor2309947685a.1.2026.07.14.08.17.19

for

(Google Transport Security);

Tue, 14 Jul 2026 08:17:19 -0700 (PDT)

Received-SPF: pass (google.com: domain of john@searchsmiths.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1784042239; cv=none;

d=google.com; s=arc-20260327;

b=W04pnLINmsf52WVHZh+wcVgK7xWpBqxaX3fbq3Ix6KRUxpG9fOZLIf8C2Jbr2onMvM

xK6Sts2ov0LRPwXdKfYZnUJASb3NqOrKMJDglAh7lBsccwMK1QzeAX6RWH28eHRV+NUA

6eYNdHvjn4G64/RysOY312eirL2+Gajjn9ZdmQMOshl079NVDVby4l31sSBbRODBqILL

amttGy6QNuGaj1Hpvb24R8bFi80PbI+4fAQKRTLd2aXnAi0ANeKB0PN2vmSkezrXD9/U

O7Kfq9tpSMKhqmhPASmCx/4yWsK/rautE5ObTxv5jTOpYsbeJQFCP5yuiQfQduePQ6MW

5WFA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=oZoPrVczfVuqe12/WhPbHfvj96mFP1te8DtS8L+KjYw=;

fh=Yjd8wSx1N2ZtdqWxqORsh+6bZvI2/eYfMZzDwxogtyU=;

b=FNbVGDkJb1xDTbfUHaZtVLGprjFAxZMB0QRkeSZxxh500Y17T7ECgdkU38yXV8zagN

5dEIcIfHasWofNoSGzv8ZhiQmQjlIR4jNLLUpN74glY1vlx4wGH2eVCyLAij04Wwhfjy

yVqS7r5QpSv3TPiqaB/YzXMk650Sw3wwVsQzQ/v+XTthZljadPc4dkHFxTvYq+dvdsWf

hV9N8blYIsR0O37BfyXp7d2Cvaj4b30WT1GM/+3dGNdYE5prbt06h2+ZUnUZAXN+t07F

tvCxknj0hTXreYveNA0LTUKiAAliuwh09+1cwJ/2ZNTDHWdGEjxzjLg2haqODdp7oNpA

3Amw==;

darn=rankaily.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AfdE7cmcWDzn1UKjH3mcdrbGIZec6ykA0/EU9hOSNlO+0IKui0R3Hv14SblBi/UW2ev

kzol7GhZuqgSkvC4OvGWURHSYCKLohzJgkA2gyTDJ4ug5wRKE6YQqHt+kfkNXKMD9y1Ne1j1MnN

rQuXFawv51S0/wvPkfetlFtcte7lL2rZT0UBzP4PoFZLFtQRKvMv2w9OiFkdHi6RKnMFXx7FH3+

c4KqHUMD0LhJd1bWRyk9uXXXNs+nQrmQX+cvlLMz1vF7rwdbBl1ySrSwVYE5p5vzYKNgAWCylCT

T9EK7OhyoIX7SfBXNkPPFELkIg1ouCRyJlPKTid4H1Nfc1BlDnKGsJJtQLmG/fI4SNMosxI7

X-Received: by 2002:ac8:5f0a:0:b0:51c:7b12:1217 with SMTP id

d75a77b69052e-51cbf372a51mr128662321cf.85.1784042239322; Tue, 14 Jul 2026

08:17:19 -0700 (PDT)

MIME-Version: 1.0

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 08:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wje6Y-00000000LWx-1p8o

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 08:27:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 08:27:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wap-lite-haixing.com ([35.219.161.115]:58173 helo=campaigns.wap-lite-haixing.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjdlj-00000000HJI-3Ucx

for root@nk.ca;

Tue, 14 Jul 2026 08:06:04 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default;

d=campaigns.wap-lite-haixing.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=finance@brzwci.campaigns.wap-lite-haixing.com;

bh=LplRm6CuLvidNPTg2tPSG7Yu4qAJ69y113UxkIaUtng=;

b=GBGV5aDCGgCxI6wo30Emh9MSI+BWrsu0PQo2NAOwj+ckjHRSbSt9cPZLzmOqpEd4ElNhfVs9z0W+

5C/sFjF6W/Ak3qedT5FLI2lcmN4xHu1+tU4qlZ6YDgWDH1yOYNPZgx7y8tNPllSK53IQ80wVftyK

6m99CHLQgoTxsraD/u3VEnRPGbYOJxWJwmQFlTRchzfWpXUDZ+ScWG2kehtyeUZxUyUD7ihBE/Xh

pySF4wPvAFstHdPJx6WbzmHFvf6z1tOY94xUZX4m8y1kKa+0pWVjcEtroAz9mDzAge0qhuJpdpnQ

x5J95d4Locn/sMqKfgEN57LP77MH7aaI8Mc/fA==

Content-Type: multipart/alternative;

boundary="===============6817175869246814039=="

MIME-Version: 1.0

From: IBKR Security

To: root@nk.ca

Subject: Security Upgrade - Two-Factor Authentication Now Mandatory

Date: Tue, 14 Jul 2026 23:05:07 +0900

Message-ID:

<178403790730.3567.12778854735615802399@brzwci.campaigns.wap-lite-haixing.com>

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Subject: Security Upgrade: Two-Factor Authentication Now Mandatory

root, As part of our ongoing commitment to safeguarding client assets and

personal information, Interactive Brokers Canada Inc. is now requiring Two-Factor

Authentication (2FA) for all account access. This [...]



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.219.161.115 listed in dnsbl.ahbl.org]

[35.219.161.115 listed in dnsbl.ahbl.org]

[35.219.161.115 listed in dnsbl.ahbl.org]

[35.219.161.115 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.219.161.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.219.161.115 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.219.161.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.219.161.115 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

[35.219.161.115 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: laewz.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_EMAIL BODY: mangled email

2.3 MANGLED_ACTION BODY: mangled action

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.219.161.115 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Security Upgrade - Two-Factor Authentication Now Mandatory



--===============6817175869246814039==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Subject: Security Upgrade: Two-Factor Authentication Now Mandatory



root,



As part of our ongoing commitment to safeguarding client assets and personal information, Interactive Brokers Canada Inc. is now requiring Two-Factor Authentication (2FA) for all account access. This enhanced security measure aligns with guidance from the Canadian Investment Regulatory Organization (CIRO) and industry best practices for protecting online trading accounts.



Once enabled, 2FA adds an additional layer of protection by requiring a one-time verification code -- delivered via SMS or an authenticator application -- in addition to your existing credentials each time you log in. This significantly reduces the risk of unauthorised access, even if your password has been compromised.



--- SETUP INSTRUCTIONS ---

Step 1: Log in to your account via the link below using your current credentials.

Step 2: Navigate to Settings > Security > Two-Factor Authentication.

Step 3: Select your preferred 2FA method (SMS or authenticator app).

Step 4: Confirm your setup by entering the verification code sent to your chosen device.

---------------------------



Enabling 2FA takes less than two minutes and provides continuous protection for your account and assets.



LOG IN TO ENABLE 2FA:

https://www.laewz.com/?3ckvmzQ2yPepvA8ksxerC8l0



Please note: Interactive Brokers Canada Inc. will never contact you by phone, email, or SMS to request your password, verification codes, or other sensitive credentials. Always log in through the official website or mobile application.



Interactive Brokers Canada Inc. -- Information Security Team



---

Interactive Brokers Canada Inc. | Member of CIRO & CIPF

This is an automated security notification sent to the registered email address of root.

If you have already enabled 2FA, please disregard this message.



--===============6817175869246814039==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



...



--===============6817175869246814039==--

=EF=BB=BF

 

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 14/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$2,358.= 00 = width=3D"24">  =   =   =   =   Invoice phish from Google Gmail PArt 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://seriouslysucculents.com.= au/ll.php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 08:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wje6J-00000000LWa-1Z4q

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 08:27:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 08:27:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f103.google.com ([209.85.222.103]:53358)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjdbA-00000000Gqn-3ZL0

for games@nl2k.ab.ca;

Tue, 14 Jul 2026 07:55:14 -0600

Received: by mail-ua1-f103.google.com with SMTP id a1e0cc1a2514c-9673385b1efso1485536241.2

for ; Tue, 14 Jul 2026 06:54:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1784037247; x=1784642047; darn=nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=zkXEJGXAxAwAzn2vr21QpEDzcBaY0mSPrUtBn1jJAIs=;

b=cbh50+MhN02hDNtUo5Koae3ISAO/bNaOz71c1ABeyKjG5WK4Cgr5co9twV6nI9fDWM

Db0aO04HPMMfzCe8W8RNGcX0C4OmMg9D5HlW1f6r/2GUcGJLXmR1GhnrbztzYXkG6pFz

WCxJfBf1KY1COuuchzC43lpmsIycSus22pz20=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784037247; x=1784642047;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=zkXEJGXAxAwAzn2vr21QpEDzcBaY0mSPrUtBn1jJAIs=;

b=egPHk+d4+V35T3Gsr0C4pAtmr4WS9zlzwGFRV7XFM8RSRf/Rkl865ZjWHEwY4jf0hM

bQhwFHzo4e7u0zm88SmX9YglPHV6fwU5hFBCQybnYdDxIH7kT1u1KpCVgiAD1W02HEeM

9BwkVBQX2tBSpyWqk11mOvhZwIb4GNZkyMOkc68ELxJehnRhvDr57pt/bDVieZ4PN1yf

GtEEx5sl9jH+QW/owkuGWcMDGGq+5P9K+TDhglplekH7kD+uT4s82BwW8B6U5x0GJudb

wjHWVkBV/SPE4uVC+FZU22ZX1skN0VH+L2MjOuTbL/J8kl4X5rF6eHKyGOTwOSGZham7

8iNQ==

X-Gm-Message-State: AOJu0YysKFC+uEBLvOAGPock/7MgKpzZ/+IRoU4SwIxbBmVWHSIqvTkj

+FjxVB76SLx8PuB2T6p+bFT5j4r0sng8vGj3AWsNH4T6RckNUkaNqB7v2tG4rySnnKrR8bbIjIP

XUte5rAlMKPKgqHS2vLpio8nGyG06rkNpfRE5r8qvCJXhg0g=

X-Gm-Gg: AfdE7cmO5qxjqVKC0X3ayqdu61QEcCEvQOgQwjBrYitGSsWxMfRUHg8R0R2oFGsDoYM

9+Bt+RFBfyzvfYCek7Yz95wUyj9ZNYA5TMgAeWAqOFHTSbpGo1dJprsDZj3mDsvYtLGpU7Jf0dP

nzQfnWZnr7mX82r58ZQWn1PyZrtCGDA9/yOcDdVHId9L1U3RH7ZEV1f+juFjPDbL9iU/esjOnLn

OhQKF9Q7553fE+okJZdC+Nf5zJLOxWH8H8zvk9JhHtHg+y+04gjXdgqCEZG/07JDbvjurxfoHMo

ZGcS5htkqEmE3WDCXFYo2XjFvvH3hnzcL5E1po+OVzeLePWuahmTJQPufNNkUqvSI4BmW3U7pyR

byvTcdZOuDR96XphByGgapXM=

X-Received: by 2002:a05:6102:c4d:b0:6d8:89a0:4ae4 with SMTP id ada2fe7eead31-74533d577edmr7210549137.18.1784037246770;

Tue, 14 Jul 2026 06:54:06 -0700 (PDT)

Received: from sabprogetti.com ([192.210.236.148])

by smtp-relay.gmail.com with ESMTPS id ada2fe7eead31-744d6e8de24sm1526872137.21.2026.07.14.06.54.06

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 14 Jul 2026 06:54:06 -0700 (PDT)

X-Relaying-Domain: sabeng.it

From: "Payroll@remittance.com|Schedule| Sign_Online/OU=EXCHANGE

ADMINISTRATIVE GROUP

(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-18279"



To: games@nl2k.ab.ca

Subject: =?UTF-8?Q?ACH_Payment_Activity_Report_=EF=BF=BD_Fr?=

=?UTF-8?Q?i=2C_July_10=2C_2026_=EF=BF=BD_07/14/202?=

=?UTF-8?Q?6_=EF=BF=BD_games=40nl2k=2Eab=2Eca?=

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 14 Jul 2026 13:54:05 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Payment Due: 14/07/2026 033747 Amount Paid: $2,358.00



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.103 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.103 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.103 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.103 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} =?UTF-8?Q?ACH_Payment_Activity_Report_=EF=BF=BD_Fr?=

=?UTF-8?Q?i=2C_July_10=2C_2026_=EF=BF=BD_07/14/202?=

=?UTF-8?Q?6_=EF=BF=BD_games=40nl2k=2Eab=2Eca?=

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.130 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.130 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Some Thoughts #



This is a multipart message in MIME format.



------=_NextPart_000_8076_01DD13C7.639F0B10

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I noticed a few improvements that could help your website www.nk.ca rank

better and generate more leads.



I'd love to share a few suggestions. Let me know if you're interested.



Thank you!

Aria Rivera









------=_NextPart_000_8076_01DD13C7.639F0B10

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)"><=

/body>

------=_NextPart_000_8076_01DD13C7.639F0B10--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jul 2026 08:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wje68-00000000LVK-0jjM

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jul 2026 08:27:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jul 2026 08:27:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f2.google.com ([74.125.227.130]:32792)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjdiV-00000000HC5-0qI8

for sales@nk.ca;

Tue, 14 Jul 2026 08:02:43 -0600

Received: by mail-pj2-f2.google.com with SMTP id 98e67ed59e1d1-37fb1883fbfso379425a91.0

for ; Tue, 14 Jul 2026 07:01:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextdigitalgrowth.com; s=google; t=1784037701; x=1784642501; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:reply-to:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=75XQfYml3y/FM5ge6fi7bD9jygo1CaLsGfwvUZkdjdI=;

b=WnWjm+N9JvnyUzN/2DMPQBaGJWhXm4opr/mVZwrewAWNuKZtBGyAL0azMpyd2kLeYN

7hEy6xbMzL/tulKTnAev+Q2rYg7/ZmOjzhWd5Aur6WbtbD/YRtpn84ARH3MI6rmHly+g

mCK5YP6CZ516tsNI9A7Vjw0gJYG6Z0eHke12pulVU5YFbcGLFIQHj9bzcbRtjaEb/RBJ

U+48jhAJFJE6+mQO96JIxj8Al1iuwPOje834AxRqBw6dkp+ZjBBlSD2DsgkGqe7Lr54K

YPBqMy8cZyd8HzE/EDSNmplXzaVCwX4G8py23uOgIBgjpeKcALiRlfJdwLFm8aGSiYLJ

L7FQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784037701; x=1784642501;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=75XQfYml3y/FM5ge6fi7bD9jygo1CaLsGfwvUZkdjdI=;

b=OP88KQxH3p9mmQp1VFbsMxyTMFITeN94CXCNZPNDxbhAnY7/6P5tDxndjXb5mr4au9

/7N5pt0XIc0mnBsGY9i+Fj06JOu9n/YAGURsV+tQrZIVswHd2KCyWPeyHxTbYrkz0DgT

JQtYGeNHwJlr7wFInxQHwC1RnCzKrVPFPQtaYVitqmmNcfoYUgLJUqn3JkvWxQWzOBmx

3Yd9uDP+MKaekYh9T0g4sVE44unCrKcRgW+qghU9sl/h4sOnYJ/ziZi8INCE1gZm3Q5P

d4ZoNsu4QM78mp3IwxTLEGh1b/RG2SnqiYukcfzhLQirTbXNpSYY4TZNsxm6ZJuk4Dxl

Vrjw==

X-Gm-Message-State: AOJu0YzvZ8U4N2RmzdS2drHe1Gh2TT8RG3u9l/ojEivaQya7hNjQ8dAx

ul+IyZL2um53bP/oHTLn8sZozu/MCMa0A7ruvFa3VxGEgVFIivTjpDKI7ziEBcRcpaTD9XJk8Sh

1JbVAqiDoCw==

X-Gm-Gg: AfdE7clzYhBQBfyW5yVVwWgF92RiRYXnRKqhJc5C8GpUOupw/ztNCiMTeBJw2Z+61mu

CeDHTJr9sPo0WXAp0skvVTni2yn69QRnMbi1DkoO00dHsIoqW6myKi7XyD8/6j9utFP6AxBCyI1

7iLf0099KWexG2F4MXI1Uvp1kz49h0A/Lm+XPgFU2njl4ZZO+VtFsYaH/R9hTop04f/SUqurj79

PW0eImhp7o763MrsgYPhQ6h3zYeneAzoZ/tBTNVrhUs4OwbFdF+6SJxlMSaX3k4LxsviPfjCa7Y

8K7iGU9nM0v8o+eI611wzXzNI5DA/A+uH1qmDEJX8qbHHRVtOFKbCElYeqCZsTuz2mPgAU5I14R

3FfXcy13VWWXlGkgm1CVKM9HvSRM2Is3u7f1L/AO7D61Pscns+xceGu+SNVsGvOEjruljAo+umI

ommgJod/UH+H9t8Z4A1hDGLBxrk2gyQwkAsv4=

X-Received: by 2002:a17:90b:4d05:b0:380:f389:447b with SMTP id 98e67ed59e1d1-38dc75e0768mr12251770a91.11.1784037700119;

Tue, 14 Jul 2026 07:01:40 -0700 (PDT)

Received: from DELL ([203.122.31.30])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-31174a583bcsm87450968eec.19.2026.07.14.07.01.38

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 14 Jul 2026 07:01:39 -0700 (PDT)

Reply-To:

From: "Aria Rivera"

To:

Subject: Re: Some Thoughts #

Date: Tue, 14 Jul 2026 19:17:53 +0530

Message-ID: <807501dd1399$49e6cf10$ddb46d30$@nextdigitalgrowth.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_8076_01DD13C7.639F0B10"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0TgOySL4Andb9rSSal0OhIhnKkcQ==

Content-Language: en-us

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I noticed a few improvements that could help your website

www.nk.ca rank better and generate more leads. I'd love to share a few suggestions.

Let me know if you're interested.



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.130 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.122.31.30 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: nextdigitalgrowth.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nextdigitalgrowth.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: nextdigitalgrowth.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: nextdigitalgrowth.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 14 Jul 2026 07:40:00 -0600

Received: from out28-134.mail.aliyun.com ([115.124.28.134]:51419)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wjdM7-00000000GG5-3gEd

for dave@nk.ca;

Tue, 14 Jul 2026 07:39:39 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.9071251|0.1319333;BR=01201311R511S00rulernew998_84748_2000303;CH=blue;DM=|AD|false|;DS=CONTINUE|ham_regular_dialog|0.220886-0.0394896-0.739625;FP=15270390881434247894|69|1|25|0|-1|-1|-1;HT=maildocker-contentspam033032023038;MF=jojo.d@win-marketreport.com;NM=1;PH=DS;RN=1;RT=1;SR=0;TI=SMTPD_---.iL8mhHi_1784036305;

Received: from localhost(mailfrom:Jojo.d@win-marketreport.com fp:SMTPD_---.iL8mhHi_1784036305 cluster:ay29)

by smtp.aliyun-inc.com;

Tue, 14 Jul 2026 21:38:25 +0800

Mime-Version: 1.0

Date: Tue, 14 Jul 2026 21:38:25 +0800

From: JOJO Zhang

To: dave@nk.ca

Subject: =?UTF-8?q?2026_Semiconductor_Inspection_Equipment_Market_Report_|_Industr?=

=?UTF-8?q?y_Trends_&_Competitive_Analysis_=E5=8D=8A=E5=AF=BC=E4=BD=93?=

=?UTF-8?q?=E6=A3=80=E6=B5=8B=E8=AE=BE=E5=A4=87=E6=95=B0=E6=8D=AE?=

X-Mailer: winmarketresearch/Win_Fendi3.3.3.JOJO

Zhang[Jojo.d@win-marketreport]

X-Sender-ID: 239

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there, Hope this email finds you well.



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.28.134 listed in dnsbl.ahbl.org]

[115.124.28.134 listed in dnsbl.ahbl.org]

[115.124.28.134 listed in dnsbl.ahbl.org]

[115.124.28.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.28.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.28.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.28.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.28.134 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

[115.124.28.134 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.28.134 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[115.124.28.134 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.28.134 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

4.1 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

Subject: {SPAM?} =?UTF-8?q?2026_Semiconductor_Inspection_Equipment_Market_Report_|_Industr?=

=?UTF-8?q?y_Trends_&_Competitive_Analysis_=E5=8D=8A=E5=AF=BC=E4=BD=93?=

=?UTF-8?q?=E6=A3=80=E6=B5=8B=E8=AE=BE=E5=A4=87=E6=95=B0=E6=8D=AE?=

Hi there,

Hope this email finds you well.

We are writing to =

share our newly released 2026 Global and Regional Semiconductor Ins=

pection Equipment Market Report, a comprehensive industry researc=

h document tailored for chemical industry practitioners, market decision-ma=

kers, and business development teams.

If you have further interest in=

this report or related reports, we would be happy to share the Sam=

ple Report and Official Quotation for your reference at any time.<=

/p>

Key manufacturers covered: KLA Corporation, Applied Materials, Hitach=

i High-Technologies, ASML, Onto Innovation, Lasertec, SCREEN Semiconductor =

Solutions, ZEISS, Camtek, Skyverse, Toray Engineering, RSIC, Precision Meas=

urement, Microtronic, Unity=C2=A0Semiconductor=C2=A0SAS, SMEE, TZTEKMuetec,=

DJEL, MZSemi, GOVION, VPTek, YUWEITEK......

This report will =

walk you through the Semiconductor Inspection Equipment market from the fol=

lowing aspects in: Consumption, Sales, Revenue, Price, Cost, Gross Margin, =

Market size, Market share, Growth Rate, Trends, etc. In addition, It contai=

n the impact of the latest Geopolitical risks, Trade protectionism and US t=

ariff policy on global supply chain.

If you are not the right person =

to evaluate market intelligence, we would appreciate it if you could pass t=

his email to your Marketing or Business Development team, or the relevant d=

ecision maker.

Thank you very much for your assistance.

-------=

---------------------------
Best Regards / Cordiali saluti / =E8=B0=A8=

=E8=87=B4=E9=97=AE=E5=80=99
JOJO Zhang | Global Sales Manager
E-mail:=

Jojo@winmarketresearch.com
Phone/WeChat/WhatsApp: +86-15812413698 (7*24=

)
'Top Market Research And Consulting Company 2025' by Business Manageme=

nt Review.