NDA phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 15:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wybnF-000000009R1-2Oan

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 15:01:21 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 15:01:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f101.google.com ([209.85.216.101]:49340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyb48-000000000U7-0uk0

for doctor@netknow.ca;

Mon, 24 Aug 2026 14:14:53 -0600

Received: by mail-pj1-f101.google.com with SMTP id 98e67ed59e1d1-38511175ad3so3762725a91.2

for ; Mon, 24 Aug 2026 13:13:56 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787602430; x=1788207230;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Al92AdaYBMfM+nosCFZEoKu33kpGcZddOldLXCZE92g=;

b=IyyFr29cXXCcE1pw8VFyD+pmNSnfaq4cbprT+vB+LjX+UflvsPrd8gRXGGyYYesC4r

tAF7zuqF7Ej2ws6YOCXEF5mydpwTsjPELgIG+7C1mLemv+DAwFz3J2NABXo6vBWQNcP5

cKJwla/rQx1kcS6tdpMSifA7JemPrEGYtXDPo2ahAYfRVjf+5qu+QpOMBrlp2DJ5p322

esGgBV9Eb+ixuZXYNvokCBJ3YTbLHGLEkdSv5HcQYzx0tRHVgONLGUs/8+e0QV+v2Nyi

gK+vGdcFFZ31GoqNtbMlqRjjm+IQP2BT8KhBpZpbvfqzJtn3xBNwp0X18FYRbg1IeaeR

CMow==

X-Gm-Message-State: AFuF++nsoFJGfTlo1S2ZMYVJICZlbkxOyZAWykNuib+ildrdbsU3dwNZ

hLf38BNmuBymSkOZv8IniAs3JxQZzkMkENtJGBdSmc2SBREH2ijD9NqTWf/uGF/UYBhd+X0NqcO

HQpfXMds5Jp8DTRLQz1bCB7WDh37LZ/GOUbWtmNtLqDn3jYA=

X-Gm-Gg: AR+sD10TxiWMJF1ULGn7G5VZSkGtzi3w/qHFbUDFNgJDUhMOaMCIFQGml8R1fY83PvB

o9xp7SQ+xAzXqUmgc1omI3jSXGE2NgISWgImTdtFCTKCxGgl1jDi130n/ZipVuEd6NwtF1tgsma

pdey5tdf2sXtyw/E2u+93YKYDZTCGLB8y+RUPSqD+73seTi/pQxgzsGOKjOspp9Xz/f/dIl9irC

7n47C/Tv/1506hGZkvBFySgqB+a8suNciUnhfR58s7Hs2+yqKo2SAGh/1iDDEAOxiWeyePj8LqH

aJ2SLCtu4zepwv0fSvVV07xhUu++/UfNOGvuUGobvoL7t+/Lj7IeWQjBSPo7fFuZhFZ8GqtUdQS

9cu2EDaUj/1pokxlLKZlerBEW5rX6y/cTtCwHt6YQOfIw8/I=

X-Received: by 2002:a17:90b:3142:b0:37f:e177:f58 with SMTP id 98e67ed59e1d1-395c35e27c2mr50403769a91.9.1787602430053;

Mon, 24 Aug 2026 13:13:50 -0700 (PDT)

Received: from cgitoronto.ca (216.238.26.34.bc.googleusercontent.com. [34.26.238.216])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645b1a52esm251058a91.11.2026.08.24.13.13.49

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 24 Aug 2026 13:13:50 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: doctor@netknow.ca

To: doctor@netknow.ca

Subject: [Review] NDA Agreement.docx - Monday, 24 August 2026

Date: Mon, 24 Aug 2026 20:13:49 +0000

Message-ID:

Thread-Topic: [Review] NDA Agreement.docx - Monday, 24 August 2026

Thread-Index: iBU/3KErHcJb9QurNuruIFP7sIPtlA==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=dnxu2ig74b1cec2gijp39drgupj46z"



------=dnxu2ig74b1cec2gijp39drgupj46z

Content-Type: multipart/alternative;

boundary="----=4dgs9cad824x41qsws91f68hf0j0mv"



------=4dgs9cad824x41qsws91f68hf0j0mv

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=4dgs9cad824x41qsws91f68hf0j0mv

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Netknow"

title=3D"Netknow"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Netknow has shared a confidential document and requested your=

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Netknow File"

title=3D"Netknow File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Netknow NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Netknow Quarterly Proposal v3.docx" alt=3D"Download Netknow =

Quarterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







.com/api/external-link?target=3Dhttps%3A%2F%2FDtd72QfD-KoBP--.sitefirm.help=

%2Fr%2Fbcaf2f%23ZG9jdG9yQG5ldGtub3cuY2E%3D&sourceType=3DMATERIAL&sourceId=

=3Dcmfd9nq35015wyswofrtj0pye" target=3D"_blank" shape=3D"rect">







------=4dgs9cad824x41qsws91f68hf0j0mv--



------=dnxu2ig74b1cec2gijp39drgupj46z

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=dnxu2ig74b1cec2gijp39drgupj46z

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC





------=dnxu2ig74b1cec2gijp39drgupj46z

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==



------=dnxu2ig74b1cec2gijp39drgupj46z--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 15:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wybn9-000000009Pz-1imA

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 15:01:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 15:01:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f229.google.com ([209.85.221.229]:43165)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyb48-000000000U2-0tM5

for doctor@nl2k.ab.ca;

Mon, 24 Aug 2026 14:14:53 -0600

Received: by mail-vk1-f229.google.com with SMTP id 71dfb90a1353d-5bfa99f8ef8so95757e0c.0

for ; Mon, 24 Aug 2026 13:13:56 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787602430; x=1788207230;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=vwjXxyBiLvc9y+fit+0fVZC4l5g13VoYGKiGkQ6aIT4=;

b=DYdGHnKwJ7FQmTYSLyYhwuWZcZm6ON0uTkoLB37N6r1w5rlCbkPx8lI+XppjridqqR

HAMF/fyGslWTHFzFOeHtMs+4N3/xjuulPlL6qUBg1NRsNaProF5g5QLFbOWtG9b0Y076

s9UmNFts1JUrF2kTn7+t2ydJsSKnLkQ56n5okcM7bd0Yqw2VpPAP09zV4C/mM0ULhTVZ

MPFx2gYH9zOA1T4F4cSWghnpP1KcI4liUbS0lsEjbcEn6Tpd7GQOzH0Ab1rfjiIgCclt

ll75oHWzlcUunO2CvouEj4BmNTeSh85iwAC5wFbSMbX9dxqt2VL3YvQDo8gNt7r/RCvi

P3PA==

X-Gm-Message-State: AFuF++kLFwapoDrJ+rS+dipA7QfnzU9B+PNcI2DsIv10d8m6h8iqfv3p

lRtZpIoN8IE/3QPC1gog8s7MWOJi/k1bTX8/NDldnL7ZayI2DHI9iHjJcTsWDu2J5WnhxWPsDdy

Fohebhx3PcGQr52v33EMoTNGQGPVRpiBgSQ+/W3VMuHTo6/I=

X-Gm-Gg: AR+sD12Kbohfpujnc6n6bMIM31wl33sHXphsD8AabPtP/w0PeN6l34ud+Etu+Hnq9EN

uzlGEmu9DGP5Yibw9nUfZ6uwc82X0lRB8ksS8ZPfYPHlepmciJAuSDG3eYvqW6znQ/fUEHlANQO

iPgji1brDeALtUoddEunk0mDbIuAaoyJq+tL17g7RThucDt4Gs5wkHIsbHkTJDGRGV0LvTHEirJ

XZ5emMa8oSEBEK3RJoRduGV/LmyOC96dRQh6uL4AdaH8mstsmX+63igMlLarKnFVApMdRct4+8P

DniJuB/6zI0LamZFBPjwP/eLJ/eruvDZm6Gob/+oXRRcXXCG4tefYmSt8FZCs/7VLkNEfTZVRNI

iNZIWykLemGlGVfLKatwyHw4jAa3jCicHCqXZhHkk

X-Received: by 2002:ac5:c939:0:b0:5c2:a30a:1a08 with SMTP id 71dfb90a1353d-5c64183fa2amr460049e0c.2.1787602429588;

Mon, 24 Aug 2026 13:13:49 -0700 (PDT)

Received: from magma.ca (216.238.26.34.bc.googleusercontent.com. [34.26.238.216])

by smtp-relay.gmail.com with ESMTPS id 71dfb90a1353d-5c623e2e6b0sm1273137e0c.8.2026.08.24.13.13.49

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 24 Aug 2026 13:13:49 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: doctor@nl2k.ab.ca

To: doctor@nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Monday, 24 August 2026

Date: Mon, 24 Aug 2026 20:13:49 +0000

Message-ID: <908176D6D5AB74C76CF800B59944BE08@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Monday, 24 August 2026

Thread-Index: NP4nVEcZVU0dMIzcmjharpf7FV0ZBA==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=evwpp9vh88ac7my7zy1uavagh0iq4n"



------=evwpp9vh88ac7my7zy1uavagh0iq4n

Content-Type: multipart/alternative;

boundary="----=xomieaa156w9d1jhlymw89m8pwojt7"



------=xomieaa156w9d1jhlymw89m8pwojt7

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=xomieaa156w9d1jhlymw89m8pwojt7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nl2k"

title=3D"Nl2k"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nl2k has shared a confidential document and requested your re=

view.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nl2k File"

title=3D"Nl2k File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nl2k NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nl2k Quarterly Proposal v3.docx" alt=3D"Download Nl2k Quarte=

rly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







ouch_switch=3Ddesktop&redirect=3Dhttps%3A%2F%2F2S4fgDgD-EcL4--.sitefirm.hel=

p%2Fr%2Fbcaf2f%23ZG9jdG9yQG5sMmsuYWIuY2E%3D" target=3D"_blank" shape=3D"rec=

t">







------=xomieaa156w9d1jhlymw89m8pwojt7--



------=evwpp9vh88ac7my7zy1uavagh0iq4n

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=evwpp9vh88ac7my7zy1uavagh0iq4n

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC





------=evwpp9vh88ac7my7zy1uavagh0iq4n

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==



------=evwpp9vh88ac7my7zy1uavagh0iq4n--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 15:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wybmx-000000009Nu-0pGR

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 15:01:03 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 15:01:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f104.google.com ([209.85.216.104]:44174)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <8GeWC1jxn1@visionsurveysqld.com.au>)

id 1wyb0b-00000000Pqp-2Rz6

for doctor@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 14:11:15 -0600

Received: by mail-pj1-f104.google.com with SMTP id 98e67ed59e1d1-38d489b6b71so4615142a91.0

for ; Mon, 24 Aug 2026 13:10:18 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787602213; x=1788207013;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=JzGPw8db+qjpa16DMBqoHLncSSQCIGrwZjuBU+QJrhI=;

b=D2KfZw+MKnp7emdwexG/sud9FpQFEH3UQC/UUIAkMyQAbciWoQJsZNaahX9ch+tht3

SDp3DyOwvv8lAjJk7+0jU3mQt6MvpuH1Ju0NbJFryufGP/1OJNZEIx5LtyVT4LeA4fwL

4Sq9ahUIx/uMvAcVcj8dicxi5MhXW5G7mVPjvqc6qaJ+RQexHsjHqF82NgrKr8/mLjZw

x4NHtK2O8O/SpEGMso+lyUGCDKQADfxmmtJHjwNkLiYBp24EJVSZgI6jEP8Tp2mSa7sq

C3Gl06Ge4igT/pZJJxqJrZIpJuqH6OCEv11zeHPU24kUPD60SHFf6aDmiSqRbPBO1VPr

CJXg==

X-Gm-Message-State: AFuF++nD5gJ7E88/BkSYTZk2WqSl/2Q+MgvSERgdGUyCX+oWz0186Egb

FIjCxTdaJg0uHtlhqDvxcARK0zMh70HsG/pnnAUN33hzwt1JL4sF2h3oTh4kjOImIq0t481CQXs

xpxkOrOtwhw8ANH3opfY4YcTkAWDj74oycht73XxfxJa/Xu0=

X-Gm-Gg: AR+sD11LWQ2kAFhb6bQrYu/u5gMdPuYaXZvaFrr6Bw37NRLC35XC7YiffSc72hzFAGl

geCeq4g/LsS3gQjhAVrTWnRF/AERBx0MyHoHPaSOOjhO7vzqGC66aV6bDtMtt//2nZlKXH7fZSn

rQHODoaMzME4lPJv0xG58WdYgvjQZ6nw/UJl39WYe6+LZhXuIyWLV4Mzd3RyFbWVnjyaJnGkSeJ

ztvnl7GjmBA8tFZKSp00czS2AO87JoMtctfRR9oa9EO0KZdAivuHjDif3nXvDEOrXEbpnrYVS4o

IAxfJXbNeNwmWBugFVPraYSIdH+EHLC9QLBuh35j2IC5Sj17LfZTpvmnrRaMJscQWCPY1QJBKrg

UxuAU2L6TSCxtCdTugy/gJ25BEWReFZW5O6qg6LYqfgjni6Ce

X-Received: by 2002:a17:90b:4c8e:b0:38d:fda6:4873 with SMTP id 98e67ed59e1d1-395c352aee9mr50907430a91.10.1787602212611;

Mon, 24 Aug 2026 13:10:12 -0700 (PDT)

Received: from rediffmail.com (216.238.26.34.bc.googleusercontent.com. [34.26.238.216])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645b43d8asm215321a91.13.2026.08.24.13.10.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 24 Aug 2026 13:10:12 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: doctor@doctor.nl2k.ab.ca

To: doctor@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Monday, 24 August 2026

Date: Mon, 24 Aug 2026 20:10:12 +0000

Message-ID:

Thread-Topic: [Review] NDA Agreement.docx - Monday, 24 August 2026

Thread-Index: 2PuJsQzc9CFYq5426JbvDyAB6oJWZA==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=lfltjravf1f49ph0bgqszo406twz7t"



------=lfltjravf1f49ph0bgqszo406twz7t

Content-Type: multipart/alternative;

boundary="----=wa82hg3nzvi1nj8ny3kugow1mmeniq"



------=wa82hg3nzvi1nj8ny3kugow1mmeniq

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=wa82hg3nzvi1nj8ny3kugow1mmeniq

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2FNE3OITue-DzMY=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23ZG9jdG9yQGRvY3Rvci5ubDJrLmFi=

LmNh" target=3D"_blank" shape=3D"rect">







------=wa82hg3nzvi1nj8ny3kugow1mmeniq--



------=lfltjravf1f49ph0bgqszo406twz7t

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=lfltjravf1f49ph0bgqszo406twz7t

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC





------=lfltjravf1f49ph0bgqszo406twz7t

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==



------=lfltjravf1f49ph0bgqszo406twz7t--

Payment phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 13:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyaPs-00000000H4e-0uRg

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 13:33:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 13:33:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f102.google.com ([209.85.216.102]:49505)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyaHF-00000000FIT-3850

for sales@nk.ca;

Mon, 24 Aug 2026 13:24:21 -0600

Received: by mail-pj1-f102.google.com with SMTP id 98e67ed59e1d1-3811f512167so5369933a91.3

for ; Mon, 24 Aug 2026 12:23:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=soldinfla-com.20251104.gappssmtp.com; s=20251104; t=1787599400; x=1788204200; darn=nk.ca;

h=message-id:date:mime-version:content-type:to:subject:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=i6jR4cZjOBYWJYCVVRBjVXFWP6phQInDecef1ucM1Nc=;

b=LKpJF4N7Xdo64dsRsNk5sUB1KK0ZC6p3byGR4MMtJd0V0gPseV0IkWgygwSPzVklG8

SBWP1rZgEU8lhjzfUi2gAWd+sW/khQE0dDV2X5xtZvCA8zyeVQB2fGfoJsNm+hPZzMIN

AiT3DdL+09X34gMIITs+mylzxvmBARgxIBaPXKDjE1AzDpp21elWc+xZLWd1J9jYDnz4

lHB/SZM5MQ3LnIDW/UR+UnqYf0/4tCzUZAEI396CaNxKLMJB0EFjLbT3U8Z66I5+jHHQ

163JlquhTB4pnOkl36EKffsE2py7+pv1jHhQxI1MFvajI5xa2DmRtxZ1wymDQJ6hvQyJ

fZEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787599400; x=1788204200;

h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=i6jR4cZjOBYWJYCVVRBjVXFWP6phQInDecef1ucM1Nc=;

b=FZY6o8jRmUSPwv0EsrR7JfF7jZdkM8hsJHd1F6TiLWNAXDQTjj3y74d9rHh9zMvL//

xVc4oxdgcZKWCaRk+d6FY+/86xNfESgIC2zhpsRXUUEaRrktSTuE3yCAufIN8xjSicWd

eZsx8Ok/3kVC673uerLmqxOvhaDS9rDrF6hjfGqDUTnkBWXvnhCjZzMVJhipdBivmwlw

D4dsC400H/FGphPiDUQIqonfQaqEc9kVgsyAP8ojL4inXz0GtM50QViiWjz8J4h2PPl8

QFhZBc9PzMNZRw0yS+/ISN8PEYEMGV5ujX46JqI3iPGc06Rfgn6cgo2XR7a52OiCcqJv

VWCw==

X-Gm-Message-State: AFuF++kcBJ8nW4QEnwIM38A832AUmBkMgmjN+evxJ4Dd87WvD0UZFuZa

VpyZL848/+clyui/dKwAsEKqW/otASOcAv36O3oRv6Or3Iw/mBDnhKlxw6eSnGUwjr7lArCX23L

k+oFNrrWA4V7Gq+Q/ZatK4lcaq5T/Ob00Ch2ZWHiCqwuZfmk=

X-Gm-Gg: AR+sD10zBMO9f9zYdR74NxsdLQsAfFgZiTv1tTT8A8a71OglWJa/xQQynvhQxy2i/vT

duo8oZjZyU6zYhsOIRw3fGv/S3gcpybzxV/g7zM49ZCQu65x8HReMU0ao0rODomi4f8CBDjTti0

4uIJyFnqaTDJexOebM6gRn6fkCXrHP5jCtFhZ3QvdAicjiVJczwjzC4v3oHkyGwZ8xxgubcMqIl

71kCV8Ecc8+uWbxo0nxkhATUz2GSp8KmlTNRZC4WVJJ5qw4jCPUM7HaXMP1nHam2SYrBCf1SfMg

7XnQbMHn4C3U8jKSaG5egwYc3/CzPG0FRzaRSFZZRssmmTg7tD2DOplgZf3A1vc9

X-Received: by 2002:a17:90b:1b41:b0:383:5a16:bd70 with SMTP id 98e67ed59e1d1-395c39f97e8mr46621792a91.16.1787599400379;

Mon, 24 Aug 2026 12:23:20 -0700 (PDT)

Received: from AUG24 ([130.131.56.63])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645cadcfesm158901a91.11.2026.08.24.12.23.20

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 24 Aug 2026 12:23:20 -0700 (PDT)

X-Relaying-Domain: buyinfla.com

From: "Nk SharePoint"

Subject: RM01 PAYMNT_Authorization IBA5493391 Summary 08/2026 PKQN

To:

Content-Type: multipart/alternative; boundary="Ls7RWST3Wl9VXMh=_kq4LpOfYl6tgkbtoC"

MIME-Version: 1.0

Date: Mon, 24 Aug 2026 19:23:20 +0000

Message-Id: <2419202608231908C7974E4D$1CDB7FAA24@buyinfla.com>



This is a multi-part message in MIME format



--Ls7RWST3Wl9VXMh=_kq4LpOfYl6tgkbtoC

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





=A0



Nk Management



Payment Authorization — RM01



IBA5493391 =B7 Summary 8/24/2026 =B7 PKQN



Authorization_Summary_IBA5493391.pdf Reference PKQN =B7 generated Mond=

ay, August 24, 2026



Review → https://ad.doubleclick.net/ddm/trackclk/N4892.5020.47742=

91382421/B23999293.271539123;dc_trk_aid=3D466016770;dc_trk_cid=3D13110=

1292;dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatment=3D;tfua=3D?=

https://regalsozius.de/c/c2FsZXNAbmsuY2E=3D



Secured =A0=B7=A0 This link is valid for 7 days =A0=B7=A0 For authori=

zed recipient only



=A0



=A9 2026 Nk Management =B7

Privacy Policy =B7

Support



--Ls7RWST3Wl9VXMh=_kq4LpOfYl6tgkbtoC

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable






a, sans-serif; margin: 0; background-color: #f4f6f9; padding: 32px 16p=

x;">
llapse; background-color: #ffffff; border-radius: 16px; box-shadow: 0 =

8px 24px rgba(0,0,0,0.06); border: 1px solid #eaedf2;" cellspacing=3D"=

0" cellpadding=3D"0" align=3D"center">
d style=3D"text-align: center; padding: 4px 36px 18px 36px;">


=3D"font-size: 15px; color: #4a5568; margin: 0; line-height: 1.5;">
an style=3D"background: #eef3f9; padding: 2px 14px; border-radius: 20p=

x; font-weight: 600; color: #0b5e8a;">IBA5493391
"margin: 0 6px;">· Summary 8/24/2026
in: 0 6px;">·
b2a3a;">PKQN


6px; background: transparent; line-height: 0; border-radius: 16px 16px=

0 0;"> 

36px 36px 8px 36px;">
; color: #0b1e2e; letter-spacing: -0.5px;">Nk
nt-size: 28px; font-weight: 300; color: #2b8cbe;">Management
d>

x;">


rgin: 0; line-height: 1.3;">Payment Authorization —
"font-weight: bold; color: #0b5e8a;">RM01
=

<=

/td>

=3D"width: 100%; border-collapse: collapse; background-color: #f8fafc;=

border-radius: 10px; border: 1px solid #e2e8f0;" cellspacing=3D"0" ce=

llpadding=3D"0">

iddle; padding: 14px 0 14px 20px;">
span>
ng: 14px 8px;">
: #1b2a3a; display: block;">Authorization_Summary_IBA5493391.pdf
> Reference PKQN &mid=

dot; generated Monday, August 24, 2026
l-align: middle; text-align: right; padding: 14px 20px 14px 8px;">
tyle=3D"font-size: 14px; font-weight: 600; text-decoration: none; colo=

r: #ffffff; display: inline-block; background-color: #0b5e8a; border-r=

adius: 6px; padding: 10px 24px; box-shadow: 0 2px 6px rgba(11,94,138,0=

=2E25); letter-spacing: 0.3px;" href=3D"https://ad.doubleclick.net/ddm=

/trackclk/N4892.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D46=

6016770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_dire=

cted_treatment=3D;tfua=3D?https://regalsozius.de/c/c2FsZXNAbmsuY2E=3D"=

>Review →

le=3D"text-align: center; padding: 0 36px 16px 36px;">


t-size: 13px; color: #718096; margin: 0; line-height: 1.5;"> Secured &=

nbsp;·  This link is valid for 7 days  · =

For authorized recipient only

-bottom: 28px;"> 

-width: 600px; width: 100%; margin-top: 18px; border-collapse: collaps=

e;" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">
d style=3D"font-size: 12px; color: #8a94a6; text-align: center; paddin=

g: 8px 16px;">© 2026 Nk Management
">·
href=3D"#v1">Privacy Policy &middo=

t;
#v1">Support




--Ls7RWST3Wl9VXMh=_kq4LpOfYl6tgkbtoC--



Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 13:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyaPX-00000000Gzt-18Jc

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 13:32:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 13:32:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:52236)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyZf1-000000007gC-3qIp

for root@nk.ca;

Mon, 24 Aug 2026 12:44:53 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-51c26012cd0sf39511701cf.0

for ; Mon, 24 Aug 2026 11:43:57 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1787597031; cv=pass;

d=google.com; s=arc-20260327;

b=bA6YgvUPDGMjjuExZSxG4hC02KpZqv2DKEUs69EVrd2FpF1sn70mgfLHr8dvGhuKAQ

5Dm7A+Ad6b8gRUI1XHIfxHCAOxLPxo7dxys2mxhAHGvHuPXx+r8dQbsH78J72ExoqVl8

XSFzKJJJwJYvmEkoZ34/LjUuFZbpuFS1ipjJWI6SctRva6lPPLIeo7v0vS6H6Ed3i2cc

BVp1mnYjnAWty6v47I3F3+EHNxT7YgjnnDgOPW66m/6eFcK1wlotoGPAcUrP8T8ULaUj

m7lzUA9EK3Pt2roRZZnz6MkmvEXR+yDXyqdDQiyn2BSB1HAYbWr+/ukIjIiTR2KM3wfh

n1Ow==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:to:subject:message-id:date:from

:in-reply-to:references:mime-version:dkim-signature;

bh=qCm5zFQSD7g/qeFBG18jLW6GvQi3rPRtupp279FWXbI=;

fh=8kEmGbKt2EZAfWLQLc+4KZQhXw3ywFSkbtihaZoURr8=;

b=kp5DNYPl20YqPxSuYCCcOvG7s3ogUvMza/aa4/BxV3vQQfcK0pV73WSx7QehW3lUpn

Bw5D5y3ockWQRNW/T7+RoCKVbQdZwOsx8Pp0mfZba2RaoPvyIJza8ClvJ4OZ2Z1h4tay

GnJLDTZQAtaPZ+pxjx3EqfSa4P4JLEFPiuDgYIHoypQD4q2MO5LQNd4pIFj6VVRwvc9Q

84N6XQhzhFIBZd/aKkoY3mG+0cksksdSxWieJ8df31Y1A7b1+HTNSu2Xp6aGejfLoTyD

bZQ8cJxnO1fkbof758N57PxIBlsjCMdd2vgP68LmjVRRl09EVdKSiC3YKbW9c/ByULrk

4uUg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@searchifyx.com header.s=google header.b="Wb8N3A/R";

arc=pass (i=1);

spf=pass (google.com: domain of amelia@searchifyx.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=amelia@searchifyx.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchifyx.com;

dara=neutral header.i=@topseoagency.co

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=topseoagency.co; s=google; t=1787597031; x=1788201831; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:in-reply-to:references:mime-version:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=qCm5zFQSD7g/qeFBG18jLW6GvQi3rPRtupp279FWXbI=;

b=FXow0lg7LubtawjgPvMu3VS0y4S2UKn9undVH6MeMxXXPWOs/4g+aSNKVYzKmOlgsy

lJc3pWdcAn/kc6E23bg24QFXvCwZOTSFbC35C6zV09Q8WOn291m3dEkzQo8rKJrnh1nb

FFU99SvjuUfVu1wMUcgSkziYnblQk10au3Jp7eUY+Y9z4cRYQq1zx4O3X+pOLLtIr+iG

OWbkgFv2nhZ0PlAJEHOKYdNQEKd0yUmuB/jsJyBdE8IphNjtFwnQT/B2f+9LmXnx0+Vr

0aX/GlLrj76dnYsRby6Ge1OWccJnF8zYf2R/FEMlakSvYIYjKjhrtfI1L4fV7EhnKVpi

MJ6w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787597031; x=1788201831;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-beenthere:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=qCm5zFQSD7g/qeFBG18jLW6GvQi3rPRtupp279FWXbI=;

b=gHiLqgRGEsxhZvc5ofNBlvhY9Zn/kvGVyUq2vMWX5LWvIpEJrRfGHaIvDsH6XjNKRn

Gd+s2fRBC8TKneUTnO3r3tq1nfWevVW0V3ZomeasMauYs9mW6nDuXSI7Mbv7I9OD414N

sAGlYng/A4QDB1cVXpTDC/sVuOAnLT6llMqsGVBuD8C1HoS4VxDtf7KxmKzr7l7LWpbL

Pk+8S9yesdyU2LnnE+zLTxC6PELGHcUSbq0RC3Q5EUFhmzEKJHgk9DnNbzT1sxD7rnUc

xEyCu7+9Di4oE+0mR1DelVL9B1ZavINlUIRSDQFC9I44SqjzBGl8GuN52BPNGjEcoGHy

Bywg==

X-Forwarded-Encrypted: i=3; AHgh+RpnRodcrT0xF7JIVzkZM3R4k7HKip4BgCzatJOlW8aOBmpz/o4WHnxwbqh6V14sPjQbwyYd@nk.ca

X-Gm-Message-State: AFuF++l47vC+9NQfPYa+EijF0Zzt1QW5Ca5kUHMHxAbqahCViF6Lzixh

TXewOLraXgTiPkSgHrdkk79GP8oXDGWoasfopxbNYhcpB3wDooVC+UyTX2zQzLiTae0=

X-Received: by 2002:ac8:5f87:0:b0:51b:f25c:2896 with SMTP id d75a77b69052e-52e09b9dbbamr186962351cf.11.1787597030855;

Mon, 24 Aug 2026 11:43:50 -0700 (PDT)

X-BeenThere: rank_tracker@topseoagency.co; h="ATskLdd3ffBZ9LB99JCKbq2WLMsafq2T5iHYubezgM0E4hxQWg=="

Received: by 2002:a05:622a:650:b0:51a:7f01:f5a4 with SMTP id

d75a77b69052e-52e2479ffc0ls26707251cf.0.-pod-prod-05-us; Mon, 24 Aug 2026

11:43:05 -0700 (PDT)

X-Received: by 2002:a05:622a:5143:b0:517:6550:2a0 with SMTP id d75a77b69052e-52e09bcc661mr208829751cf.19.1787596985034;

Mon, 24 Aug 2026 11:43:05 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1787596985; cv=pass;

d=google.com; s=arc-20260327;

b=f18IZw9a3eCM/uyA/JSnywP2OH1vNLkMPtQC8A9+y6w9VhpD5kpXl59nnfOZFtSdGS

gleA60yH41gsmnyU8+/Q3R/8quNWo33+n+B09NO5w6h0Ip9esUeXtH8VCn/Tjv9TG5az

qu0BK7UQmQpg48P+QQ5mufZ3Dh1KN9O9es+5CdBjdXqrDP0ItWEEWPhZAUMoeqzJ1xTv

x2JdKqFH56L32eApxulJjjhm/t7CVwia/maC1zPtEbsvvuc2CrgrY4k3vhOvJDKIX9Jr

Nzak4P7++OYCjswtRiKNXUY9HECznwfJMJe67y2AwUivwgSwkpdYbWQWS3wyUOSbjCqT

s2tA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=VDSOWs3PzdPU2+ARudYGNm+2Q9W1gB1rzx4LV2B06w4=;

fh=vPznp8BH371sXV+BQ5l9/ReS32HbwK3d6zZyAxHm9kQ=;

b=Y5T/M2ORRKED2/E9wX9aAdDtGh6P2wYFbxOQljsLBuew0Ah4UsnhZ4GiBlnZKIL65B

XZcaeUTUaZCdOW/M6cXaqvFET5Tozls96eg8Yu/AndxtbbhLYL6mhiKXHmhTOUKhh2vc

cNAaXbO1CqxGYVKt3V1LZYPm4S6zAlaB1Xa8639qpT90o4ZDvF6zUw3r9c8VcWk0D0XY

4klSXX6aDQTp8xi68+h8+i42iYBPqEaHY08RX/W1WaQLjNcHPkZIsdRV+gz152H1ogeP

CLWnTBIbRaoSbn95V6+TKoQFJYtfJsA95seOSHA/fmtrsksp0UvNr0eFC6WjkeExKXmB

12RA==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@searchifyx.com header.s=google header.b="Wb8N3A/R";

arc=pass (i=1);

spf=pass (google.com: domain of amelia@searchifyx.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=amelia@searchifyx.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchifyx.com;

dara=neutral header.i=@topseoagency.co

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 6a1803df08f44-90c936b7eb9sor15789346d6.7.2026.08.24.11.43.04

for

(Google Transport Security);

Mon, 24 Aug 2026 11:43:05 -0700 (PDT)

Received-SPF: pass (google.com: domain of amelia@searchifyx.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1787596984; cv=none;

d=google.com; s=arc-20260327;

b=FaBq9iCl4x+nUjVeOH883Ua0c68aKdXOy8lFGUMmHTMo7qovFENG5zqqiwqYNum2LU

+sBJpXLeqtBoB8em24ci/0eSSKy1GKK3p8bs7rBK71ibw1MTqxTyKmrQw4GMKXUf21s1

sOkuJAxG2nqlIsm4J2+kGMshdjvq0tbnYvPClqU+kRmnKrAB0neupn2OF9vJcixDJ8WE

Mex2AW9LmVgrR2GXW3dR0CFhyKY+mq/D7hfd9hEwf6zjul9p3r2jrRNk0OVYyEDma+7G

UjTNd20iyaQMqXpz1d6F14xcH0Tc7tCEhY8DwIZN8yLD14Ga6IXyFFOSazen4mAieIBE

y64w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=VDSOWs3PzdPU2+ARudYGNm+2Q9W1gB1rzx4LV2B06w4=;

fh=vPznp8BH371sXV+BQ5l9/ReS32HbwK3d6zZyAxHm9kQ=;

b=J09KWdTYkhLCNJmBAhW5F6YTMAIECV05w0zQqu/sMtFgQiGbVpnKGpZs98gi0/NVDE

HbdAKdwsv90jPexItqor31JlNpsig/EDFxXtdABONT0gaHoNyXvHUsjiAwHlQg8sV0AF

xhLjZrvWrUnbIqNss3OutSDkWWI3IrpooGXVWsnlt6xyUCbubS2x2HuyRw8JE+QS4C56

xjhh4htZHSI5XMNUAUcN53dR0brvs3MM3S4IBCjQvCfKOOXKCcMIEzrNlSoXbPR8zV4b

BqikDh1RX26zmpgQ2UGE8A+yY0U8PbQwSOBsEOmt6evdAtT2w7yz5Rhg613VV1X6R0rG

3fdQ==;

darn=topseoagency.co

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD12XHLFvyykPHOdQTI1Ozk7nDlkQH6yRT4ywVLwMngx6V4mXWQVrNnp0IdgirBZ

j9+HPVrrc2er9nI23N3MbtPETvFRAFiLeqTljr7zVxc34AVRx+Jz1WX5JVAJWnWSZ+C90P7taRj

tRliYXzssxjLVqQfwu3noPcsvOPVDfU+6peLXNeEjSbmc0fZ2yt08oBTunPSLer7u6C0lZfuS2Y

lj0MUvEgoIn68SxrMn5xvNxkUcrRZ/FZ/842RabqiG4gyMY1h81meq6fbJ6Txrbii6LS4fgUv8p

Dstv8jL4Cn5I22Xv5JGHeAhXyvQk65Ze7i/WRAtnJnZ2k0jGcBZ8VXhWMocfLO/43HlJDgHi629

KH9Fp0mSMYCMZTGOQ+ZoSMRt3G6c+SGL9mOdr+JBwZvpEl20IbypTntvjkx37IaEekcBpocwTD5

xZA0yfi+iGQkr+8CUq

X-Received: by 2002:ad4:5c89:0:b0:908:3e1c:647f with SMTP id

6a1803df08f44-90c8fa9093emr242459556d6.32.1787596984255; Mon, 24 Aug 2026

11:43:04 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: "'Amelia Smith' via rank_tracker"

Date: Tue, 25 Aug 2026 00:12:53 +0530

X-Gm-Features: AcwNN1UAYoUZYDAi80ABIPE-EFw5sYTVy26pupsmUHkIRsf-sjqvBX_vWRVujqU

Message-ID:

Subject: Re: Would you be interested ...??

To: Rank_Tracker@topseoagency.co

Content-Type: multipart/alternative; boundary="0000000000003fb5780659cf5bb6"

X-Original-Sender: amelia@searchifyx.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@searchifyx.com header.s=google header.b="Wb8N3A/R"; arc=pass

(i=1); spf=pass (google.com: domain of amelia@searchifyx.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=amelia@searchifyx.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=searchifyx.com;

dara=neutral header.i=@topseoagency.co

X-Original-From: Amelia Smith

Reply-To: Amelia Smith

Precedence: list

Mailing-list: list rank_tracker@topseoagency.co; contact rank_tracker+owners@topseoagency.co

List-ID:

X-Spam-Checked-In-Group: rank_tracker@topseoagency.co

X-Google-Group-Id: 127044280204

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,





--0000000000003fb5780659cf5bb6

Content-Type: text/plain; charset="UTF-8"



Hi,



I noticed a few SEO fixes worth considering.



Want the quick notes?



Thanks.



On Sat, 1 Aug 2026 at 22:27, Amelia Smith wrote:



> I analyzed your website and found a few SEO gaps. Would you be

> interested in our pricing and portfolio?

>



To unsubscribe from this group and stop receiving emails from it, send an email to rank_tracker+unsubscribe@topseoagency.co.



--0000000000003fb5780659cf5bb6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,


isSelectedEnd">I noticed a few=C2=A0SEO fixes=C2=A0worth considering.
>

Want the quick notes?

Th=

anks.



r=3D"ltr" class=3D"gmail_attr">On Sat, 1 Aug 2026 at 22:27, Amelia Smith &l=

t;amelia@searchifyx.com> wr=

ote:

0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">

"ltr">I=C2=A0analyzed your website=C2=A0and found a=C2=A0f=

ew SEO=C2=A0gaps.=C2=A0Would you be interested=C2=A0in ou=

r pricing and portfolio?










To unsubscribe from this group and stop receiving emails from it, send an e=

mail to rank_tr=

acker+unsubscribe@topseoagency.co.




--0000000000003fb5780659cf5bb6--

Chinese freight shipping spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 13:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyaOy-00000000GuL-3YS8

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 13:32:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 13:32:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8375.xmail.ntesmail.com ([156.224.83.75]:51942)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyYI0-00000000HVe-45QO

for sales@nk.ca;

Mon, 24 Aug 2026 11:17:05 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_93806_2076366145.1787591756287"

To: sales

Subject: =?UTF-8?B?UmU6UmU6UmU6UmU6IFN0aWxsIGxvb2tpbmcgZm9yIGEgcmVsaWFibGUgZnJlaWdodCBwYXJ0bmVyIGluIENoaW5hPyA=?=

X-Priority: 3

MIME-Version: 1.0

Received: from sales03_szx@bnclogistics.com( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 25 Aug 2026 01:15:56 +0800 (GMT+08:00)

From: Sunny

Date: Tue, 25 Aug 2026 01:15:56 +0800 (GMT+08:00)

X-WM-Tid: 0aa034c589b00735kunmc458fa401ec73

Message-ID:

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi sales, I hope everything is going well for you. We value

your interest and look forward to connecting with you. Welcome aboard, and

thank you again for subscribing! Please let us know your required quantities

and any specific needs.We will provide the best possible discounts. Your

swift feedback will ensure we meet your needs effectively.



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

[156.224.83.75 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[156.224.83.75 listed in dnsbl.ahbl.org]

[156.224.83.75 listed in dnsbl.ahbl.org]

[156.224.83.75 listed in dnsbl.ahbl.org]

[156.224.83.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[156.224.83.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[156.224.83.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[156.224.83.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[156.224.83.75 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[156.224.83.75 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[156.224.83.75 listed in bl.score.senderscore.com]

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: hkdd5498.hk.yjz.top (top)]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} =?UTF-8?B?UmU6UmU6UmU6UmU6IFN0aWxsIGxvb2tpbmcgZm9yIGEgcmVsaWFibGUgZnJlaWdodCBwYXJ0bmVyIGluIENoaW5hPyA=?=





Hi sales,

I hope everything is going well for you.

We value your interest and look forward to connecting with you. Welcome aboard, and thank you again for subscribing!

Please let us know your required quantities and any specific needs.We will provide the best possible discounts.

Your swift feedback will ensure we meet your needs effectively.

Thank you for giving this your attention. I look forward to your response soon.

Best regards,







Do not miss a product highlight: hit . Stay Engaged



Whenever you’d like fewer emails, use Edit Email Choices.















在2026-08-21，Sunny 写道:



-----原始邮件-----

发件人： Sunny

发件时间: 2026年08月21日 周五

收件人： [sales ]

主题： Re:Re:Re: Still looking for a reliable freight partner in China?



Hi sales,

I hope everything is going well for you.

Your interest in our updates means a lot to us. We look forward to keeping you informed with our latest news and offers.

We are interested in learning more about your purchasing needs and the types of products you are seeking. Please let us know, and we can provide you with our comprehensive product catalog..

Your swift feedback will ensure we meet your needs effectively.

Thank you for taking the time to review this. I look forward to your prompt reply.

Best regards,







Unlock continuous updates and new feature announcements at . Enable Alerts



Prefer an empty inbox? Adjust settings at Email Preferences.















在2026-08-18，Sunny 写道:



-----原始邮件-----

发件人： Sunny

发件时间: 2026年08月18日 周二

收件人： [sales ]

主题： Re:Re: Still looking for a reliable freight partner in China?



Hi sales,

I hope this email finds you well.

Thank you for subscribing to our newsletter. We're thrilled to have you on board!

I am excited to inform you that we are currently offering a special promotion on our products.If you have any needs, please let me know as soon as possible so I can secure a discounted spot for you.

Thank you for your attention, and I look forward to hearing from you soon.

Best regards,







Do not miss a product highlight: hit . Stay Engaged



Whenever you’d like fewer emails, use Edit Email Choices.





















Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 13:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyaNO-00000000Gbt-1Mxh

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 13:30:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 13:30:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [216.213.188.26] (port=55362 helo=mail.declansoper.xyz)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyWxz-00000000MWB-2nUC

for doctor@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 09:52:17 -0600

Received-SPF: Softfail (mailfrom) identity=mailfrom; client-ip=172.94.9.70; helo=[172.94.9.70]; envelope-from=postmaster@gigaclear.net; receiver=doctor.nl2k.ab.ca

Received: from [172.94.9.70] (unknown [172.94.9.70])

by mail.declansoper.xyz (Postfix) with ESMTP id 9D12A1490B9F

for ; Mon, 24 Aug 2026 15:38:03 +0100 (BST)

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: This is good for us...

To: doctor@doctor.nl2k.ab.ca

From: "Ahmed Mustazafin"

Date: Mon, 24 Aug 2026 07:38:03 -0700

Reply-To: mariacarmgutie@onet.eu

X-Spam_score: 19.9

X-Spam_score_int: 199

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I got your contact from a staff in our embassy

in Germany. I do not mean to intrude into your life, but to present an opportunity

for both of us to benefit. I am sorry if this may offend you, but it i [...]





Content analysis details: (19.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[172.94.9.70 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

[216.213.188.26 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[216.213.188.26 listed in dnsbl.ahbl.org]

[216.213.188.26 listed in dnsbl.ahbl.org]

[216.213.188.26 listed in dnsbl.ahbl.org]

[216.213.188.26 listed in dnsbl.ahbl.org]

[172.94.9.70 listed in dnsbl.ahbl.org]

[172.94.9.70 listed in dnsbl.ahbl.org]

[172.94.9.70 listed in dnsbl.ahbl.org]

[172.94.9.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[216.213.188.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[216.213.188.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[216.213.188.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[216.213.188.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[172.94.9.70 listed in sbl-xbl.spamhaus.org]

[172.94.9.70 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[172.94.9.70 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[216.213.188.26 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 MONEY_NOHTML Lots of money in plain text

0.2 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} This is good for us...



Dear Friend,



I got your contact from a staff in our embassy in Germany. I do not mean to=

intrude into your life, but to present an opportunity for both of us to be=

nefit. I am sorry if this may offend you, but it is not intended to do so.=

I am the personal assistant to Mohammad Bagher Zolghadr, Iran=E2=80=99s ne=

w top security official, after Larijani=E2=80=99s assassination. My name is=

Ahmad Mustazafin. As it is known, there is a war raging in Iran with the U=

S and Israel. Iran is currently decimated, most officials and defecting, wh=

ile many have fled Iran. The fall of the regime is a matter of time. Hence,=

I am writing you this message.



The proposition I have in mind to discuss with you has to do with finance. =

With a diplomatic contact, I was able to move out the sum of USD950,000,000=

.00 using a diplomatic channel. The good news is that the funds successfull=

y arrived in a Chinese bank, and deposited in an escrow bank account awaiti=

ng further instruction from me.



Please this is highly confidential and should not be discussed with anyone =

for security reasons. I need your consent in order to lay claim to the fund=

s and then transfer the funds to Europe or to any bank account of your choi=

ce. All I need is your trust.. With your consent, I will direct you to the =

Chinese bank for the process of transferring the funds in your name to a ba=

nk account bearing your name. If you agree, I will forward your name to the=

bank as the beneficiary.



I will offer you 30% of the total sum for your participation, we will use 1=

0% to offset any cost incurred in the course of the transaction; while 60% =

belongs to me.



Currently, I am in Iran and can only communicate only through email. Howeve=

r, after we have agreed, I will direct you to the Chinese bank in order to =

commence the deal.



I guarantee you that this will be executed under a legitimate arrangement t=

hat will protect you from any breach of Law and is 100% Risk Free Venture. =

Please, keep these offers safe, secret and confidential.



I urgently, wait for your reply in ahmedmustazafin@onet.eu.



Regards



Ahmad Mustazafin

Rental demand phish from Micrsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 09:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyW9g-000000008eF-44Rq

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 09:00:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 09:00:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazon11022090.outbound.protection.outlook.com ([52.101.66.90]:29823 helo=DUZPR83CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyVRf-000000000h8-1fvk

for doctor@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 08:14:52 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nVD9AhbKZzZl9AqmP4Rzzo+dm++33UIMlaB6nbdKIu9c/e+fTr0XlzpWIolyoebnEaHNZRO5zWcPOxPU1PAH4D1Uh/ZSbnrgDbd72Q/2LZ3Vf3Fg0dq/xrbaTg4QVsYU4tm6xAdYh7tHe4MIucB9ZBgGQvDj2j9I05mMKAWedBEUAC9fBKOLOPlJwxMN70ZJKcnyoSAnN/4NpDWZwaatyGaQkh4Ud90S1W9kJsGhG8Wiv85KgvOk7cQU74cua+7J+wmDIvIZiDh8BzsFIXpxMIwNq2EnZNzoDshvnM97boO1WsLl56eGZyNAvqdodpwJxBHvuUFk+1uEuP/tApIyGA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=V75xGpz6mz9Ami3amkJ2GCjU5dSDUUfox8BOnVhXfIY=;

b=AkUc2uZ94yRFqsz6YYWN58kq45Hgw1QbPVQWW28woXDMFVkgUBgkOnxFE/MYA9gDCqzLCVe/h62nz4sbXl9qotVm3dliAIdojemIzc1VSq8qRPUy6nL29NjPwg9beXnBgY61mpTo0jeYGLiwb7RTFu4/1AC1MMGav2DrbK6+B3m7rK0RPKFIompaFJv1Jxriwu7aRTeuQJpZPhZ1aTmdNvmXTOOx6ZdgC0orstp+ksiIznvdpvfQfgm3Vmm9Vxw3s689uLRV3GP6+ctxMm7sWqQTtxAtcw52exmN1ycaj1G868d310UMdqUD8wekupDgK825E+CCXFp8RsYo6Xxq+w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=uadec.edu.mx; dmarc=pass action=none header.from=uadec.edu.mx;

dkim=pass header.d=uadec.edu.mx; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uadec.edu.mx;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=V75xGpz6mz9Ami3amkJ2GCjU5dSDUUfox8BOnVhXfIY=;

b=Wrb5PsyrwMt/GGK00/ImXwWKFE9qKABmWMiaE0bCnu1aGfRUvAbxokuXbyWozRP6HEBhqMmFiQ6CduZGRhpe1U4q2t12qdvQf5oScMIJYBr7ak68Bh+Dle/DPCuoGtU4V/dG3g5K6pYO5CjUuNPOvMEgkYaXvnGDItB1WtwsFxg=

Received: from PR3PR01MB6892.eurprd01.prod.exchangelabs.com

(2603:10a6:102:5e::21) by AS8PR01MB7271.eurprd01.prod.exchangelabs.com

(2603:10a6:20b:25d::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.12; Mon, 24 Aug

2026 14:13:44 +0000

Received: from PR3PR01MB6892.eurprd01.prod.exchangelabs.com

([fe80::6532:3aca:3aef:952]) by PR3PR01MB6892.eurprd01.prod.exchangelabs.com

([fe80::6532:3aca:3aef:952%4]) with mapi id 15.21.0339.012; Mon, 24 Aug 2026

14:13:44 +0000

From: Karen Cecilia De La Cruz Garcia

To: "noreplay@locataire.mx"

Subject:

=?utf-8?B?VFI6IEdvb2QgZXZlbmluZ+KAlHBsZWFzZSBmaW5kIGF0dGFjaGVkIHlvdXIg?=

=?utf-8?B?bW9udGhseSBwYXltZW50IG5vdGljZfCfmqjwn5qoLg==?=

Thread-Topic:

=?utf-8?B?R29vZCBldmVuaW5n4oCUcGxlYXNlIGZpbmQgYXR0YWNoZWQgeW91ciBtb250?=

=?utf-8?B?aGx5IHBheW1lbnQgbm90aWNl8J+aqPCfmqgu?=

Thread-Index: AQHdM8wTtpqz3IGYTEqcsm7WFao+bLas2UEW

Date: Mon, 24 Aug 2026 14:13:44 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: es-ES, en-US

Content-Language: es-ES

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=uadec.edu.mx;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PR3PR01MB6892:EE_|AS8PR01MB7271:EE_

x-ms-office365-filtering-correlation-id: 8d81e45e-7635-4b54-91c3-08df01e9e7ff

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|42112799006|6049299003|23010399003|366016|41320700013|1800799024|7416014|10070799003|786006|376014|56012099006|10067099003|3023799007|8096899003|18002099003|22082099003|4143699003|38070700021|4053099003|3613699012;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PR3PR01MB6892.eurprd01.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(42112799006)(6049299003)(23010399003)(366016)(41320700013)(1800799024)(7416014)(10070799003)(786006)(376014)(56012099006)(10067099003)(3023799007)(8096899003)(18002099003)(22082099003)(4143699003)(38070700021)(4053099003)(3613699012);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 2

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?eU11MkZyeHdlWTlBamFQTm5nNHRoRjJyeXUvTFNsK1JOWkZ1SWhUbUg2OFFS?=

=?utf-8?B?OHF3MENUdHFINHZVZjVtRmdqRllHS1UybGl3dkszMkpCNjdkZmYvZFUrR3B3?=

=?utf-8?B?cWJKcms0bjNVN1ltcVAwQXIrQjYxNnRzNTE2KytPOE9rRXVXMEdIT3MxVmg2?=

=?utf-8?B?YTluQUpsV25zV2liQlJWYlZZMWJFOE9EVGI3YjJQRTlhQWpQdHlFa2ZUNExK?=

=?utf-8?B?NE1FZVZPUldXNTFCSXVqWndOaHdXNjJPY3hhblR1VmxzdTNtbjluU3RXMVo1?=

=?utf-8?B?V2xKS2hkcnNxNXRpZkMrUVBETTgwWkdKbXVpZ1FaVFRsZ2JHZTBLL1l3RjRQ?=

=?utf-8?B?SThtMUc0TmIrU2s2VjFiMVg4MHQ0c2Y4d2kyV01oN0RxSElmVTYzcVVBMHRK?=

=?utf-8?B?L1FWa1RSOEd6ZXFlQ3lXUFIyM2dIUWFDMlA3WU1lMlgzOEloTktQUzRILzZY?=

=?utf-8?B?MXZ0US9jSFZNN1pJdGg2aGNrMGV3amhGamRNTTBnTXJuVkEyMzFGbHE3TGhr?=

=?utf-8?B?aVRWS0J2TUJlQURDVUdpZ2J5Vzhtb3NjZTErRGkyaDZtTi91d1pRZ1RMcXBT?=

=?utf-8?B?Z3hDSnFXSmlZNnVLeXBiTlh4N3VUdXZ1TStOcDhjYk11ZklvY0lpOFRtQkg3?=

=?utf-8?B?Z2sxTmIvWkREYjA2bXJELzdNby9CaEg1KytPS0tWOERzN3BlSUpJYW41eWRW?=

=?utf-8?B?eHQ0b2llNFJLL1JoY1pTZEVuRERrUGVDRTdhOHRxTnRQZ05kT253SjQ3c0tq?=

=?utf-8?B?d1d2b1F6ZWt0NHpBK2JrTWZSbnk4UmdqUWU4TldGSi9rMHc0TDAyUWZad3Nj?=

=?utf-8?B?SU9WTURJcmUwamhJMXZYVkZMa0tGLzJTMVZ5d2dyYVpKQmlUd1BuUlV0UWFy?=

=?utf-8?B?UUYxbVhiK1pRSk5xRUd0NjNQTTlSS3ZCTkFZUkhpSUphQzA1b2pEWGxRWnha?=

=?utf-8?B?TlZFbUNRWHlpSHRrY05HcFM2M3IwQ0FzbmEvZERQN1JHb1BQdTI5MFUwNDJk?=

=?utf-8?B?T0xYaXpBd3pCejRYY3ZEMmlRWjkyR21pQkprK01ZVEUzZWNWZ2ZiSlhjMjhq?=

=?utf-8?B?TE0xMkEzTTdnc3g3M3VxTUVOTXJRb0JWTHZCcjAzZjNyWGlNWkt6Z1hRdDdH?=

=?utf-8?B?QW1OdDJleERlYW4rRm93Tkl6dVdMeUNSVFNJRERubjRVamRZd0drMkFkZk1H?=

=?utf-8?B?MnVoTEd4ckh4dXZwU1VJWXU2M2lGNTFLMVZLSnRaMm5KdWw5TVpuTmgyTWlJ?=

=?utf-8?B?b0RMMnc4VzU4LzNmUGVXMDFaQXNsOFhWYzQ4cEdiUjBJemUrQmJNWTkvZTBC?=

=?utf-8?B?bjVWLzE1dHkzZkFvTlBZOFFycmQvZWhxVCt3Q0I4YWNPVjY1SFZvbGxvZC9i?=

=?utf-8?B?QU5tRW9ha3hVR3lTYmZpYmxHWE51OUhQTGZ1OXZrZ243WFlOWS9UaHZHODRS?=

=?utf-8?B?cGNPeVltRjBGalFTYUlUQU1wMU5vSVoweFRFREcvY1ZLWlgzeTRRbTBsbk15?=

=?utf-8?B?WmJKS2hoeFRWWTZ3TkR6SnkrdllmcFB4MTg3QzdMYk5zY1E3WDRYWDhSTW90?=

=?utf-8?B?V2I4YnVQOExKck1PRHp5TFA1UkR1ZTlKanYrem53VUJKUlAxQ040aGJyK3hY?=

=?utf-8?B?VUF6ekZyVkN0clZDSzRWNHZueDlCaG5qVU03bk04UWNKYWVKMG5JbDVlWXMz?=

=?utf-8?B?UVhlSGJVRjh2QytQNHI3b2ZBbmo4NnNGd0NTZ1o4TURJMWNMUytOS3dMOEU2?=

=?utf-8?B?U2krNncwUVNxU0FURkh1MjRQQUtVUllBNlg4R2w1WHFhSkZjZ3oxUm9tTHI1?=

=?utf-8?B?WmM2c20xTG9uTW5SRFl2MFY0R2U0YjIxVU1RUGRWNjNSZTJ0a3lBSlFKRjlB?=

=?utf-8?B?amZzeTJ1YWRxSTk4ZElIRlpVdzd4dzJVSjNpdytMaElXdzJpYi9wRDdkMFV3?=

=?utf-8?B?dUowWEJLMFFNK0NMTG5jVFJwTEZiMWxEeEc2a1Jjc2d3dnhzSzR6K051U1dw?=

=?utf-8?B?bUFOWEpub3ZyYzNzSEh0aHBlbnVISEVwRVFhWDRRRUZweW1mVUk4V2NYRGFR?=

=?utf-8?B?Mnp2d3FvMU1SczJLWjNSdGdkRHd3aEZMUTd3WTdCUGZlUm5rUXlsTVdCUVJn?=

=?utf-8?B?V3hYcmUrYVpLbVhFWU5hMHYxU2ZGMmtycHQ5OGhjTFA3NlFTZXRlRE8vZ3Rn?=

=?utf-8?B?cTY3UTI3WEtnTTJURjFOVzZpWm9PRnQ0Yks2aDVWRmtzTXRDQTdYa0VvZWdO?=

=?utf-8?B?cmtlS1lZaFMzS1JLWXR5RkpiZFd2V3RDbTRGU09UUmVHbGdkbWRwQjhWdFd4?=

=?utf-8?B?ejlEL0FkNE40ZUE3aGRBTXJ2ZTBvMWZmRWUxSmRmRXBYbHRQMWt2Zk9qVkQ1?=

=?utf-8?Q?A1pzacvi6aThLNIJTGJAeVWeS/C3F9x8pLf1xnBO4vpmu?=

x-ms-exchange-antispam-messagedata-1: p7X1icQ2r0UPzg==

Content-Type: multipart/related;

boundary="_004_PR3PR01MB6892D2CCDAF739A1732BA627DEA02PR3PR01MB6892eurp_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: uadec.edu.mx

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PR3PR01MB6892.eurprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 8d81e45e-7635-4b54-91c3-08df01e9e7ff

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Aug 2026 14:13:44.0353

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 7240c382-77f3-42ea-9576-37097db362d0

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: 7u3yZmfUm3crBWF8gBdnUsMhWi5p8YooZ7bQ4RCXsbl4Zaw2f6ingYurNQAGOF41jCX7H5V7AOsF5B1LvBZCqcNv0XePbJZlJjtGq97wy/I=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR01MB7271



Payment notice - Rent pending



Dear Sir or Madam,



After checking with our accounting department, we note that payment for the current month's rent has not yet been received. We kindly ask you to settle this as soon as possible.



As a reminder, rent is due at the end or beginning of each month, in accordance with your lease agreement.



Email address : sevice.gestion.locataire03@gmail.com

Secret question : Compliment

Answer : Intelligent

Pay



If your payment has already been made or is being processed, please ignore this message or send us the corresponding confirmation.



For any questions or proof of payment, please write to:



sevice.gestion.locataire03@gmail.com



We thank you for your cooperation and remain at your disposal for any further information.



Sincerely,





interac.png





Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV3g-00000000GTi-0G28

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:49:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:49:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f51.google.com ([209.85.208.51]:54621)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyUKa-000000009TL-1TJ8

for doctor@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:03:25 -0600

Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-6a18e24ad25so4707990a12.1

for ; Mon, 24 Aug 2026 06:02:29 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787576543; cv=none;

d=google.com; s=arc-20260327;

b=NIInqdtoEvVFMK0fNTgIW3jYgm7MPQLWlaHZdtSB+x/Ey524XwnFMhB1/kH9sSd2yp

S7XbKW7VG6yllgSzuSsB9v9xslhi0iL1ZkjsGOu3grb2sZlh4GCIS3K6bGSFSR3mD/WM

dFqQf3oVHm3yBmdtfyl4KkmEEC28cWF32FBDxWdBehrMw6Y2VAvQh4PtQ+RE/VP/vrim

gCcmCKdqf+gneNM1PmKLc1OYZCO0hcmCW21utvOuEaVho+ffLTPQ40ONhk4zy9uEw3Ok

Q5uQSuEIAIYCSY7S/KqM5uzkQSuno50l7sF5B1Fyyr08XqUh7gI7mR+b5ZwJWQrZ95Hl

KwoQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=z3WTTFMqTPUV5hi4q4WB/MzInwjpIC5h9fnIcuFGo1M=;

fh=FImovTVC5mOOooDSiAK90e6ZiR6RghNwDLK/nfGIQbo=;

b=ZHshqw1E6pq8k2ARuXxLIItoBKc6RkFbNnVz6l+WDT1cDRKasguKksgCA23tFtXdvB

s51JSwNrXQX3o7e3e5LLUivc/NWw49JRhqJpj7wyZfL9XmHbHCxzOSNDPZZj6mqRPSNl

iDNLx+ojt9m6Pp9W7ZfR1ohIFP2KFFqF7EkclFvfy/WyNIP2vVb/e9c7J7taXJVCxsKF

qq0hCmFK0d/6frLTdyIgl1O5mCLGvV2X1tQd7qUawx2nOnwIOkQUTVLcEvoXRAQHqagN

TmutGQe2JFrV7fmYVD14DI4LK/0JwzJ9d03Q+pbyl0KprjWzPPoHgzS36zH+yG2XDHoB

fGAQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787576543; x=1788181343; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=z3WTTFMqTPUV5hi4q4WB/MzInwjpIC5h9fnIcuFGo1M=;

b=SmOQ4emb3v6RRM/NbNaKstMzNF+5NBMCIxjFMbPSTTHBRqnYtjvrjnd4Q88ndTLD/d

5v3rVq6fZmEZCDVH0NLBtQjv5bgVGfg9uq25kZ/CySx6xj/hkfq/0O4QU3AqwRPHeX3w

fM2IIj7AESqgSsQCW3z1EnTsPz/4jCrOR5Rvs6g8Nh+hD1ewqvJbx3eHeoNsnHhB34HE

Zv2QcMbOF2DrW5U1s/cy5SMfRF658doWCBlODIxMvj/EincaDHK8LDdlA+D/8Qxxwk+d

2m8GUjH0w/4XaHzgEf1snND7y2oI8ClZkWqNhJm+RZ3iro3Kr3x512lL2gMzFwXiel6n

ik0A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787576543; x=1788181343;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=z3WTTFMqTPUV5hi4q4WB/MzInwjpIC5h9fnIcuFGo1M=;

b=FvDe99xmeLXGtcZoEGPEDUQjuISS7G+Ataub8bLpum0cmKJHEV6SwFVKJIi7konlfX

IZAKEug8X9xDBv0q7yXafm0b2KadlgPPxM6Ip5eLjnQ1zr08/KF3uh71hx9Z5I1YJo6m

4vYk2humdghq5PDKYX7Nag0zAwRZqaxd/6adpQ4EeQufovJh/dQgSsNQkfkX49vEn+AS

NE5MIW+Ug0YW7xcUO1CTP20B8LrSIXqq+1r7XEXO2/jC1PaTEy7eOWKLcMyFnVdVrFsU

p12K8mveRyRLHH9AIU1FbcKXE54jFO6bhnGSMsJ0qnjhtWbBOl4ITQ1lHYhF0bA/PwRD

baVQ==

X-Forwarded-Encrypted: i=1; AHgh+Rpeg4YS1EtkeqSwOv4V3el6M4XNtbD2PqDDfX4cyHlCXmq227oLK2Lk+Yaj5OUUcRAt6+9Z0tg=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++lmaR0F9LaQTzN6CA5+9uG3JxVO31jOK6eJ91nTkfiVaMatSkFm

Uq1QweERfUWeFeprF+kL4+cUHFbdRnwCZKT0KbGIK0lUtI6yi9Tt1LQcw6sEKla0PuH+NRCZJ/2

LnuXpKZCr40QiQCcbURbLWzrExVsJmOg=

X-Gm-Gg: AR+sD12UNs3m3/iQRFXth8sboLyOesvcRJm7exceV1vihCuQd+wHyy+Gl7Fumn1PCfa

CtijHTrUYL0g9C+33Ic+dckD686C14ITQGUrgHGOpf/6JoCBIIE2fOvRsIGzAmoVU95cI5MQTGa

uyW2pxbiQC1F7luidTAHuEMMA60/+M9M720sviznxijxInfKNoiv7/RHkoSoddEuCb++77sN0g0

LfoVb4LrZMS6Ah6sCrOSsoj7lbO6AKithumlMPz0Zpj5UFiK6TmyuesjyFSYH8AlQPoArOLDDOf

2+T4N8GME85o1ECDYqBbEe61D5wygClbT2NZ6SZzasEOj5oR3izbIXY2PN03HMInQtiAvI7lISZ

BCWO/4P6zuRHGguCQ10VrZjKe6ca4dfPy9Q5xD2FV

X-Received: by 2002:a05:6402:24a1:b0:69c:76c6:9bef with SMTP id

4fb4d7f45d1cf-6a582b6278emr20255453a12.10.1787576541913; Mon, 24 Aug 2026

06:02:21 -0700 (PDT)

MIME-Version: 1.0

Reply-To: rossi01martina1@gmail.com

From: Mrs Rossi Martina

Date: Mon, 24 Aug 2026 13:02:23 +0000

X-Gm-Features: AcwNN1XRs1_xnwHla1zo-sc1JSRjFH_jVE3gdAJH-Ga0oyixChFrUiYgNAt9OHs

Message-ID:

Subject: Dear Cherished Friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ca2c790659ca9899"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Dear Cherished Friend, I hope this message finds you well.

My name is Mrs. Rossi Martina, and I am reaching out to share something very

close to my heart. Following the passing of my beloved husband, I have been

blessed wit [...]



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.51 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rossi01martina1(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[carolineduke2(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carolineduke2(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.51 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.51 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dear Cherished Friend,



--000000000000ca2c790659ca9899

Content-Type: text/plain; charset="UTF-8"



--

Dear Cherished Friend,



I hope this message finds you well. My name is Mrs. Rossi Martina, and I am

reaching out to share something very close to my heart. Following the

passing of my beloved husband, I have been blessed with an inheritance of

2,900,000.00 Euros, and I feel a profound calling to use these funds for a

purpose that truly matters.



I would like to offer this money to you, with a heartfelt request that you

utilize 70% of it to establish an orphanage and create charitable

organizations to uplift those in need. It is my fervent hope that these

contributions can give hope and support to the most vulnerable among us.

The remaining 30% can be your just reward for your efforts in making this

dream a reality.



Once I hear from you, I would be grateful to share more details on how we

can bring this humanitarian project to life and facilitate the transfer of

these funds to your bank account.



Thank you for considering this opportunity. I am eager to hear from you

soon and to embark on this meaningful journey together.



Wishing you a beautiful day!

Please reply me on this my email address ( rossi01martina1@gmail.com ).



With warmth and hope,



Your Sister

Rossi Martina



--000000000000ca2c790659ca9899

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--

-smartmail=3D"gmail_signature">
Dear Cherished Friend,
<=

br>I hope this message finds you well. My name is Mrs. Rossi Martina, and I=

am reaching out to share something very close to my heart. Following the p=

assing of my beloved husband, I have been blessed with an inheritance of 2,=

900,000.00 Euros, and I feel a profound calling to use these funds for a pu=

rpose that truly matters.

I would like to offer this money to you, w=

ith a heartfelt request that you utilize 70% of it to establish an orphanag=

e and create charitable organizations to uplift those in need. It is my fer=

vent hope that these contributions can give hope and support to the most vu=

lnerable among us. The remaining 30% can be your just reward for your effor=

ts in making this dream a reality.

Once I hear from you, I would be =

grateful to share more details on how we can bring this humanitarian projec=

t to life and facilitate the transfer of these funds to your bank account.<=

br>
Thank you for considering this opportunity. I am eager to hear from =

you soon and to embark on this meaningful journey together.

Wishing=

you a beautiful day!
Please reply me on this my email address (
=3D"mailto:rossi01martina1@gmail.com" target=3D"_blank">rossi01martina1@gma=

il.com =C2=A0).

With warmth and hope,

Your Sister
Ross=

i Martina




--000000000000ca2c790659ca9899--

Funding Opportunities spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:01:01 -0600

Received: from mail-yw1-f173.google.com ([209.85.128.173]:48174)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyUI8-0000000091W-0mdZ

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:00:53 -0600

Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-836c5b01e82so45782657b3.0

for ; Mon, 24 Aug 2026 05:59:56 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787576390; cv=none;

d=google.com; s=arc-20260327;

b=Rwj99taXnljunIATKdXnVPUZBldFkr54pF5Yo13OeobldRq0w0z7tNWYQMJzooV8mr

Y/omTvxYPc+fGKuFYBmwKuwYZkRUkFPVI28Fscnt/SJfJJ793dWiJaZs6wRkxzo/8p86

1Tbxuom+kBIx1SwO/IFYCZhn9R7+LXqVqKy2wl94Utbm7ATaC22507YwWvAWJtN8kKle

TmFtqmaK+kGK+BOpOkMKrNJUiW0JEfIbzkTEyw+t6qgYvvFUMSPLAhplkUo+V+f22amf

Pr52guO04qeGLAwILMGPR2FYRPlJk4byrwzWVPWWGx09p3WYG5AHvK2Ss6oeAYHW1EaK

IKyg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=djQH6HF3dvY0zDlRFx0quElIqP1wXx9eLyHJqOUxchs=;

fh=NMW7hXxACmUUcXSiMHj9d9Jo5anNUUpokzWbdmGUphE=;

b=AndIpqoQXe7xNrxKdfjGm1RWGTPiit8+YXaTsfMnj1xkWtlUu3KP8jzyA6YkuP9yFb

SzNMPBqSQq1gSFnt1nC21OFu8RE29eSxMi85sdBhs91tQIk4kZdO646MM3i1Gk9U6ejD

wZFRW1mCEEK8jgbfZAz8EyzJLyWwqWz7sg/+W7s774FwMcBE5NEd4w80vUMLZeCHwmNT

sqD3pwG7mHo54TjT32czNUWQvcAzLWTr5T2kPFuRi2KLrwVROeTTeBEi3v2aIlNs9Bu4

/3J5l9M37eN4ihLoQzZ/pZLJXuC81TQ3qFG9XVIGwLhSNt8SUpw47O9AfJFS56cczh1u

RoZg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787576390; x=1788181190; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=djQH6HF3dvY0zDlRFx0quElIqP1wXx9eLyHJqOUxchs=;

b=XyncaIyXEq9DusjWaVJhL6G/uml3wrvIYJRIgVDODbzw9yojpk4XhaGsrqVu5CiiHu

nLAL3xYO60OgXBr52taFSDQGCJWCyH/L86VqXhbD+wrbRJLKYST1oLngYg/9sOBncjo0

G9F+Vb2m/iYTEXRIYaaVr3jBzSqXbOuerQ5hkPHkch32digxoROZLE3LGIs+9YNu3Yxf

2tecMh5OtXf6ULxMhllVGfW445bXenzVyqMz9Om9WTSQ7FkjIN52HMLceNzO3psPozeg

ESDwG4ox82Gn31C5zXD1NKJWKgJwhp2Z0lRqHS8x8z65Dj2iBPRAsAIU4XCEB/mwGe5a

Gcdw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787576390; x=1788181190;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=djQH6HF3dvY0zDlRFx0quElIqP1wXx9eLyHJqOUxchs=;

b=tXe5IjpAQ51WJbcWDsGpQWle4YltVeioxaD6NHeugGi4BHMRBXvMpxMUl3Z8CujKWE

61D6hUGjcefOPi6ujA36bPSfjutiK4bzB/LithEyYzAJ6R8cU8tdGXYDqydfpwEfDjrv

Qg6uHNNbZ2iDHt9IqYjAPELGEjjSY+vTpkMTjJNQjPy0EOdDBah5pDuTmWM2/ImNF7jX

iaOZpStDGWve8kQ2eydZLPWHdVamFuYjeK1gnmGI//QtQDycLQsSKNNCxZ5hqMERP1To

n1qTtxb6Ki7n+bFXvt6dGGXsqJTm5SeJ7Ibwt9kQ0u2sMRMxXuUz3ZkeKCKCARHleMcn

zAeg==

X-Forwarded-Encrypted: i=1; AHgh+RptRHfW7QD5TBVoqUHiQG+W+IYK7WhszxpoNkc0Kn1EfdLG2FT/B0Ik9C17ZEIKhHCGbGnS@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++nVEToWsDDkpIpb5kr0TolJcpi2dOzyC6o+VRCkaa3yXy8tPbMO

wDMD/a80+nAWxXrYVyp2kby/d/cOBLBICEFIBYXTiFF5/0rCRBze9S++DmICnv1NElXTdixUxmg

eL6NMc9zbxtTdIk/4sRmp46JGw6BHGvc=

X-Gm-Gg: AR+sD11qkzXIfhMB3XK8uZe0EWjvkVy8lQ1XwLfefBn7Ud2x+iadHHDHfHt6uS4Bfkr

eL50Z/g8UGdOcWEYI8ih0Q2czwEnfE47qq/Nq7IzGzPx2CM689lyiRtdEk/fF5EIVqM/OAvMhj/

NlBVyH3JmtLlCc4zXvEadInd5S3kToArlENHhKgezNcVfmn9gmiwhrlS2Iad3+2wcImuwkNSk7g

1Uz2N1i8yba4EYHi8EJakLt8dClke0igVPH5QBnwMjLIIhAFnbKBRPwfghaKEFG866LQ92iKCaz

645h28m9dmFqAUHRENEbs8xKgo5d8TLlO5Ve6Xo+wgN8mlnMa4BIZUzvlgtb3itKPAbMzPj8V5S

+BpAh

X-Received: by 2002:a05:690c:a94:b0:820:de0:6264 with SMTP id

00721157ae682-849e9e27aabmr122091777b3.0.1787576390361; Mon, 24 Aug 2026

05:59:50 -0700 (PDT)

MIME-Version: 1.0

From: "Dr. Mohammed Abba Bin Khalid"

Date: Mon, 24 Aug 2026 05:59:45 -0700

X-Gm-Features: AcwNN1WFZBJoMnY33SVQd4U_CNRkRgfpnCDdjRm8t_J-bDfkBwBiCCQoXckMefU

Message-ID:

Subject: Subject: Funding Opportunities We are reaching out to establish

connections with individuals, entrepreneurs, corporations, and investors,

including start-up owners, who are in search of financing for their projects.

Our company is ready to invest in viable projects and would be happy to

provide our terms and conditions after reviewing your project plan and

executive summary. If you are genuinely interested in this opportunity,

please contact us with your project plan and executive summary for our

evaluation. Best regards, Dr. Mohammed Abba Bin Khalid.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c1a5680659ca8f80"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.173 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[khalidmohammedabba(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.173 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.173 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_HK_NAME_FM_DR No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Subject: Funding Opportunities We are reaching out to establish

connections with individuals, entrepreneurs, corporations, and investors,

including start-up owners, who are in search of financing for their projects.

Our company is ready to invest in viable projects and would be happy to

provide our terms and conditions after reviewing your project plan and

executive summary. If you are genuinely interested in this opportunity,

please contact us with your project plan and executive summary for our

evaluation. Best regards, Dr. Mohammed Abba Bin Khalid.



--000000000000c1a5680659ca8f80

Content-Type: text/plain; charset="UTF-8"







--000000000000c1a5680659ca8f80

Content-Type: text/html; charset="UTF-8"








--000000000000c1a5680659ca8f80--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV3Z-00000000GRf-2OWy

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:49:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:49:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.74.119] (port=50083 helo=smtp74-119.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyUHA-000000008rH-2Nyz

for root@nk.ca;

Mon, 24 Aug 2026 06:59:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.shinestarsteel.com; i=@hn.shinestarsteel.com;

q=dns/txt; s=umail; t=1787576331; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=6fo5KluLkxOCQrP0CoTv4dYIpTzNi7msXmY+3uCROys=;

b=iRtbuhVtyBg8RENEVA1bT/IhwZkTCWuNNrOLP6EPs0q1kylDGo9NlQ0y

xesCJnC+m9CK/8+PjMK8VRvyBWYap+x08f5FVN/C5F6Bw/qmqEOEqQge8h

NCmKqc7owsetbxWnAPDmpUf6wM4hbSAoQHTfTWi8mrSeSnIopvVMvPXPo=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.shinestarsteel.com (Postfix) with ESMTP id pDYXHzoSVLAx

for ; Mon, 24 Aug 2026 20:58:51 +0800

Content-Type: multipart/mixed; boundary="===============0273579675216256839=="

MIME-Version: 1.0

Message-Id: <20260824205851.38086-{13453:20260824205659-13453-81}-0085253@hn.shinestarsteel.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Mon, 24 Aug 2026 20:58:51 +0800

Mail-ID: 6a8c3ff7e1382308ac1c5b03

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

[160.124.74.119 listed in dnsbl.ahbl.org]

[160.124.74.119 listed in dnsbl.ahbl.org]

[160.124.74.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.shinestarsteel.com]

[URI: count.threeway-pipe.com]

[URI: hn.shinestarsteel.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns18.xincache.com/112.80.181.111]

[URI: ns17.xincache.com/112.80.181.45]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.74.119 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=









Dear Purchasing Manager,



Good day !



This is Sophia from Threeway steel .



We understand Canadian buyers are facing steel import quota restrictions (only 20%-50% of 2024 levels).



To help you navigate this, we offer specialty steel pipes that are less commonly produced in North America:



High-strength alloy: P620 / P690 / 10CrMo9-10



Sour service: API 5L X65/X70 with NACE/HIC/SSC



Marine grade pipes (ABS/DNV/Lloyd's certified)



Our products are not subject to standard TRQ competition. We can provide EN 10204 3.2 and work with your EPC requirements.



Do you have any upcoming projects requiring non-standard grades? A brief call might be valuable.



Best regards,





















If you have any inquiry, pls keep me posted. Thank you.



Wish you have a nice day.



Best regards,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China

Virtual assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV3D-00000000GCI-0a6O

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:49:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:49:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f174.google.com ([209.85.214.174]:53745)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wySJv-00000000C1M-2dja

for root@nk.ca;

Mon, 24 Aug 2026 04:54:37 -0600

Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-2cee9b74ee1so26111075ad.3

for ; Mon, 24 Aug 2026 03:53:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787568814; x=1788173614; darn=nk.ca;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=yai13WCIESXRbd5Emg3y52vH/RYsVlvurxqq0G4X1TY=;

b=kmkFfiYmJHaHq5LCH7BfuEa176bfb/NK0lTwW3eDnamqp++syOrOK3GXYntnoTnQ9Q

CAYH0oECFWo8eP/HI8RDalYN10YXokP1q0R6DWTV773tH5bGLXS/lhEdy9YlgddXtSdM

jASwbSkOJYq5Aa0buO+NLF7Sb3D6nNm43B6Q0r5wvgj7YxcLDW/PX8Sx7y+r191k0zfk

6w7xeVA4YjlSFU6kMT/3iFi8y11W+6LxNVsKViU857mswgiiUOLNLo+k/RMxsRj4Nw6q

t1g4pfgq3nfr8BVPyBETUk1wyW/382lPnxarqlH2w15BwJ7ykirc4Km6lg99/1Ufsvos

UzAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787568814; x=1788173614;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=yai13WCIESXRbd5Emg3y52vH/RYsVlvurxqq0G4X1TY=;

b=rjCxwgSdyF+xsTJhs9Vn8jPzYeAzeesh0wEcTnK4saT334pQuWf/p2ySzZqxXQDuMJ

+mP+lCE27OwXJCjUCv29trDIa6Wy57kj6fD6JGaeYFA+Xmg1NF4Bu6VCAh5xMrBZx3x/

NV8joLzSuz8LplUOsW3PaMtRuTLuuKLz3EcVvAO8fZuIhy46YVSeI4vsRfDGUojxEen0

UKPdG3CqmC8DmOv8eV/Ygn0q9hjMzJg9PGBRK9Jh/ciotHupCrL5f7SmE82skhZU/4Gx

f5etX9CfEBe8Tgg82SgAY7ZchzEZ/gebv2ORsNIQhdKTJ8+gGWGIwi405TCciyUmvUYJ

XLBw==

X-Gm-Message-State: AFuF++m8LiTTLi0CZPj+pvRNLq7sv/LzbN1NPtSCrlMhHI7fnXEsx55d

rXWZSODy+ytCMHIVq6vYG42lYYcXQian/c0R1eccEjsrFhWK8EIpb9Zl0Zy59Q==

X-Gm-Gg: AR+sD12ZZokEXwN9VZFPsRK4sH6fjTKlz4SozP0hr+kWdKSOn6UUac9RouFUDlvdzK5

6w9Xf7pkivb3BjQyT2mg4L8QWGN+G7Ym0sEewjB6rNQ9l1pJLwWTpgqfjFWPAHi0tKaqpSDQZcM

3mWCbdqHhYMZ3rOijOxD6rnoD18Ijop8FaeOOrfEAOpIH8BoJ9UNczAff3/aFFA7io3T1i1n5lT

LjNz4wLEZgoE+IdgtPf14OB+naSnuOeKeJdufo2IYcBLW/kJIGh8MKZcQf1NQvstf0tT9INWrBW

kkWzNTsxGfGXabjQbkH8UQVwJxMJ5vlaLk42TKcfn2V+fVfHfXOoJFevgwx/gJzdAgS1WFE2Ai4

4LUFFbGjMOn+1sBkpjYGJ8YtzKL0lFPN43W/BiNw+nns4SjxoA/6+Ov5sJQm5AgMNkDReMM8aSv

j66xNwGJcW5HYu9v02L8BnHQMXNMttPNYwlKjndjBKo74y5i/RRqtuE/GXdDzsawwMeJ8XoEWm9

JnBcQ==

X-Received: by 2002:a17:902:cec7:b0:2d6:702e:b1ba with SMTP id d9443c01a7336-2d670b7f140mr299832355ad.3.1787568814177;

Mon, 24 Aug 2026 03:53:34 -0700 (PDT)

Received: from gmail.com ([122.160.196.13])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-327f923f2c0sm38421535eec.30.2026.08.24.03.53.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 24 Aug 2026 03:53:32 -0700 (PDT)

Message-ID: <6a8c22ac.5ba28bc9.1064e9.ec30@mx.google.com>

From: "Alvarez"

Subject: Hi Good Morning, Reminder ## root@nk.ca My Name is Alvarez

To: "root"

Content-Type: multipart/alternative; boundary="qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5"

MIME-Version: 1.0

Organization: Headfield Solutions Pvt Ltd

Date: Mon, 24 Aug 2026 16:23:32 +0530



This is a multi-part message in MIME format



--qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi Good Morning, =20



Any Update.?



Let me know if you=E2=80=99d like quick support or more details.



I would love to know if you are interested (like Cold Callers, Appoint=

ment setters, Marketing associates, social media managers, administrat=

ive executives, digital marketing, lead generation, data entry, etc...=

) work at a reasonable cost?



Thank you!



Alvarez



VA Team!



=20



On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Alvarez < alvarezdkuhn7@gmai=

l.com> wrote:



=20



Hi, root@nk.ca



Please, could you let me know whether you are interested in hiring a r=

emote Virtual Assistant at a reasonable cost?



We specialize:- Admin Support, Data Entry, Social Media, Email Managem=

ent, Cold Calling, Lead Generation, Customer Support, Online Research,=

CRM Management, Bookkeeping, Appointment Setting, Document Preparatio=

n, Real Estate Support, 3D Rendering, SEO & Digital Marketing, Web & A=

pp Development, LPO/RPO, and Video Editing.



We provide reliable, affordable, and results-driven remote support tai=

lored to your business needs.



Would you be open to a quick call this week?



Sincerely,



Alvarez



VA Team



Note: If this isn=E2=80=99t relevant, feel free to reply =E2=80=9COpt-=

out=E2=80=9D





--qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline







Hi Good Morni=

ng, 





An=

y Update.?


alibri" size=3D"4">Let me know if you=E2=80=99d like quick support or =

more details.


"Calibri" size=3D"4">I would love to know if you are interested (
color=3D"#ff0000">like Cold Callers, Appointment setters, Marketin=

g associates, social media managers, administrative executives, digita=

l marketing, lead generation, data entry, etc...) work at a=

reasonable cost?


ce=3D"Calibri" size=3D"4">



Thank you!





Alvarez
>





VA Team!
t>





 =





On Fri, Jun 1=

9, 2026, at 10:45=E2=80=AFAM Alvarez < alvarezdkuhn7@gmail.com> =

wrote:





 =





Hi, root@nk.c=

a






"Calibri">Please, could you let me know whether you are interested in

hiring a remote Virtual Assistant at a reasonable cost?<=

/p>




"Calibri">We specialize:- Admin Support, Data E=

ntry, Social Media, Email Management,

Cold Calling, Lead Generation, Customer Support, Online Research, CRM

Management, Bookkeeping, Appointment Setting, Document Preparation, Re=

al Estate

Support, 3D Rendering, SEO & Digital Marketing, Web & App Deve=

lopment,

LPO/RPO, and Video Editing.





We provide re=

liable, affordable, and results-driven remote

support tailored to your business needs.






"background: aqua; mso-highlight: aqua;">Would =

you

be open to a quick call this week?





Sincerely,
ont>


face=3D"Calibri">Alvarez





VA Team
>






"Calibri">Note: If this isn=E2=80=99t relevant, feel free to reply =E2=

=80=9COpt-out=E2=80=9D











--qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5--



Dating phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <3ELOLagoRBAEgbhvjmbsmpvdwwjsuvbm.fev.qfebwfom3l.bc.db@maestro.bounces.google.com>

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 21:05:00 -0600

Received: from mail-yw1-f197.google.com ([209.85.128.197]:49640)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <3ELOLagoRBAEgbhvjmbsmpvdwwjsuvbm.fev.qfebwfom3l.bc.db@maestro.bounces.google.com>)

id 1wyKyZ-000000000dI-2on6

for dave@nl2k.ab.ca;

Sun, 23 Aug 2026 21:04:04 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-81ea59b5979so124765357b3.3

for ; Sun, 23 Aug 2026 20:03:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucvvirtual-edu-pe.20251104.gappssmtp.com; s=20251104; t=1787540583; x=1788145383; darn=nl2k.ab.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=omvyw1RzvDJ2wbJNgGLbbrVMayroBxN+YR5ovQY1Z+s=;

b=T48yXpNPIhSnIc2lO0UV9pqOTQhwPikKVntWTSr3YnX/zUY6yVGhvT099fL8WvImIO

CMNSqY74SHxkojh5V/3FhiJ4sTOgSTOis1IKjBJKdgL4XQ+lhIBAXu8GYQYC+vbxr4oI

afaFaFwDxgJMTEbVx1ptDw+mML7EiopD8b91WqY/im9UZr9aK/LOP8O44bBKpFiZI81v

uZgR3r/59QmeBMhUQ7OEnxmVW3P7qtM4VDLU1OcLicbSCSmEpumSKfGETpsDXIUPBsDY

oCebu6ePEoJQQICcfMfT5gVGF8j1FQDiMIZeaFqJZ5UeZ+sO9qqzzoHKebAPVB+BJXxe

ps9g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787540583; x=1788145383;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=omvyw1RzvDJ2wbJNgGLbbrVMayroBxN+YR5ovQY1Z+s=;

b=FJ2QbXqLW9ckCBlqB90f5GW7mu6WN1E7MnL9f5HbW+d/p8ixuAd+bwahyOYvazJ3Zm

kO6Dclv/eXZGN+oB2liwLc2WTywTGjya8ND+nCffSY/JBP4ONuPe8QP6pPmxXnFrV8UO

Ee/3xoa6w5zDa07m0wm4CR3ZRNYaNpHcpORFlG6uXGz2Ia1WpPIoL0QPmMr+/y2k47tS

XB1wf9xdtMeRT3v1tRghU3ylTugQLY1dmvtfxEB+JbTi+Gb3a6xhDWO7AmYMPTZRIR+w

hsi/1U5EW31ppNsrOpz+CzBCXCE3U4kRuCoindkLTvT5YDPSzHqjDfkvgC68M01Sicjv

gG9A==

X-Gm-Message-State: AFuF++kLakDzktVyMCX13z3WPj19xsigCOcqI6sQnOz56pNOExH3rUkU

RuyauhYTywoGnhxcaw4eio5cHGlKuYjoPvDe7KELWndK/tKz5bBo1ou4ZCIZTtuX+2hJ0fKyBbh

lWX4ksDZQi1NB9tOOAHXEqg==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4106:b0:66d:830:8131 with SMTP id

956f58d0204a3-66d08308170mr1236670d50.29.1787540240711; Sun, 23 Aug 2026

19:57:20 -0700 (PDT)

Message-ID:

Date: Mon, 24 Aug 2026 02:57:20 +0000

Subject: did you

From: Anna

To: dave@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="00000000000011d33c0659c22513"

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} did you



--00000000000011d33c0659c22513

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--00000000000011d33c0659c22513

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--00000000000011d33c0659c22513--

Dating phish from google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 22:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyMIx-00000000H0V-48Hg

for dave@doctor.nl2k.ab.ca;

Sun, 23 Aug 2026 22:29:03 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Aug 2026 22:29:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f198.google.com ([209.85.221.198]:57650)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyL0u-0000000015O-1lJa

for root@nk.ca;

Sun, 23 Aug 2026 21:06:29 -0600

Received: by mail-vk1-f198.google.com with SMTP id 71dfb90a1353d-5c0fc9b4f43so3542759e0c.3

for ; Sun, 23 Aug 2026 20:05:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=colegiosba-cl.20251104.gappssmtp.com; s=20251104; t=1787540727; x=1788145527; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Sp7zUbn7glq7akKCB224tE9fdAcHLGGWaFk+3CNxJPc=;

b=cYkJ0XIzkHrHjD9JmLd38eXLRJ+akhD9vRB7NY/d2I710BXpuqBWccjRyHOT4L42fm

n55vVhjN8aWnHDyhV/glxcfH7A5EaEFY7T7RFW0TMi9CoTCBsntiFaAzmqDpW838Sc0P

NNeBKw84pDO9mP7n3bqQCrrwO6yDoOQmllMvq/YW/sheMmxNkwwjIHs8ItvTDEHmKPUR

lwnLDAV2Xy2HCzK98dm0QwDNYEA+Jqh2a4VCacHU3sbYtUmshR5iZ7H0KDV1e+/zGTm9

EO6oTHNyvpNW3uD3TKXIcIP2i52yLwbpsLlupZfc/J05oSpaiQiF4PehFlpDaV81hASu

qMRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787540727; x=1788145527;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Sp7zUbn7glq7akKCB224tE9fdAcHLGGWaFk+3CNxJPc=;

b=BC+NRBc4dMgBLo5pISeqAzr5e9WoYgo+GxLiSHtR673jFwma6nvH3Kx99Z/31Fs5CN

Z9AndJRq/pRG2VMe4bP/kd15tqGncsfIdW5tJk3/BV+iSg3RJ+LK11j0wpjgtOR8a1ZD

5aaiJorIxGYZwTNgEPf5zs+pwZZA5KFDOTSK0kom/G/qStKoOwT7+XSr9Kb7S/5tpO0G

dB5jBghijICjuFhwHyRL8ljd7HnvNcEStyNzcRZfC+msuZBhT9aJFz3j5DegiELhBuIp

NJLXv+T7/HaOhzAaiRoXpHlXHphdJ6ZcAWSGTi6SasVD44HW0Bb0xIRjPxnlxSfo7ju0

3cRA==

X-Gm-Message-State: AFuF++nCc5SEguPU+k5vnKHanXfaPGxOwHvjY2NZWovAFC7/Wv6NIhvR

yHbEntNvBrpk+0m2CY8Lv+eG1JpR+3DhvJfn0sAeU7q+eX/z0aJP1nq7XJl57Eskhr59akO2HUz

8WlWYPT49zRPBEaPQOPsurA==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:138c:b0:66d:c2c:c959 with SMTP id

956f58d0204a3-66d0c2cd563mr35555d50.25.1787540204135; Sun, 23 Aug 2026

19:56:44 -0700 (PDT)

Message-ID:

Date: Mon, 24 Aug 2026 02:56:44 +0000

Subject: did you

From: Anna

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e3b6b10659c2221c"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

[209.85.221.198 listed in dnsbl.ahbl.org]

[209.85.221.198 listed in dnsbl.ahbl.org]

[209.85.221.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.198 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.198 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.198 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} did you



--000000000000e3b6b10659c2221c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--000000000000e3b6b10659c2221c

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--000000000000e3b6b10659c2221c--

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV17-00000000ES4-36ap

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:47:13 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:47:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-proxy49142.mail.163.com ([45.254.49.142]:6602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyQfK-00000000Jbj-0HXa

for doctor@nl2k.ab.ca;

Mon, 24 Aug 2026 03:08:35 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com;

s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version:

Message-ID; bh=ZWi6BjVwpaom8APC1UP/ypVzbpxskOHToZO0wEWeGhw=; b=N

4yhVctjjm1RWdZotakqWIhae5QSaJxXL8MZfdcW6exyao5lZ1iPlrluWicozuV3+

RIBjA9hfi1Wl//1H8wd00HKr8qezUS45c2/D8JX66q4cvtKIBwKhxeAgzOh1IR++

1fWQLvpnpfiYLuZVJ3np/ZLsdQzjJ1Zm3smIZcq0ZI=

Received: from custommadeclothing$163.com (

[240e:388:9939:4301:71bc:49a8:ae2:5b04] ) by ajax-webmail-wmsvr-40-129

(Coremail) ; Mon, 24 Aug 2026 10:26:39 +0800 (CST)

X-Originating-IP: [240e:388:9939:4301:71bc:49a8:ae2:5b04]

Date: Mon, 24 Aug 2026 10:26:39 +0800 (CST)

From: Hi

To: doctor@nl2k.ab.ca

Subject: Custom Garment Co-Develop

X-Priority: 3

X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build

20260511(2e539873) Copyright (c) 2002-2026 www.mailtech.cn 163com

Disposition-Notification-To: custommadeclothing@163.com

X-CM-CTRLMSGS: y7NpUHBsdXM9MTc4NzUzODM5OTM0OV85ZjlkNWQwMTIzYWNhNTk1ZjA5NjM1O

GE4MzhkNjMzMiZtYWlsVHJhY2tpbmc9MSZ0cmFjZUtleT00NmUyZDVmYTNiYzQ2MDk0ZmE4OTNk

NjQ4OTg3YTBkNA==

X-NTES-MT-INF: 46e2d5fa3bc46094fa893d648987a0d4

X-NTES-SC: AL_Qu2TBfmYt0si7yCRYOkdm0oVhO0+Wsa3s/0h34VUc8EEqA3v5zIqRVtDPFfN8+K3ISeGjz62VgFkyspRe5NB5AAi4X+Cfyj3COmuv49OFg==

Content-Type: multipart/alternative;

boundary="----=_Part_31294_110514078.1787538399105"

MIME-Version: 1.0

Message-ID: <34365dd2.2079.1a031975f81.Coremail.custommadeclothing@163.com>

X-Coremail-Locale: zh_CN

X-CM-TRANSID:gSgvCgDnry_fq4tq2so2AA--.1320W

X-CM-SenderInfo: xfxv30xppdvvhfor3xxlqjqiywtou0bp/xtbC2x+f9GqLq9+Z0AAA

3z

X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, We are a Chinese garment Manufacturer and trader integrated

company. We supply one-stop service from fabric sourcing to shipment. We

handle everything for you here. We focus more on high-quality custom made

garments production and can meet all your personalized require [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

[45.254.49.142 listed in dnsbl.ahbl.org]

[45.254.49.142 listed in dnsbl.ahbl.org]

[45.254.49.142 listed in dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[zen.spamhaus.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[45.254.49.142 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.254.49.142 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[custommadeclothing(at)163.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} Custom Garment Co-Develop





Hello,



We are a Chinese garment Manufacturer and trader integrated company.



We supply one-stop service from fabric sourcing to shipment. We handle everything for you here.

We focus more on high-quality custom made garments production and can meet all your personalized

requirements perfectly. We guarantee stable quality and super low defect rate.



Please feel free to reach out to us if this is the service you are looking for.



Thank you very much for reading,



Lee