Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxly-000000007JL-2fry

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:29:30 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:29:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:45416)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyvKU-00000000HDg-2QgP

for root@nk.ca;

Tue, 25 Aug 2026 11:53:08 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-5174a236220sf1180361cf.3

for ; Tue, 25 Aug 2026 10:52:11 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1787680325; cv=pass;

d=google.com; s=arc-20260327;

b=ODkja0DtP6uU4lwLhWondakNir6+fntSIO3h30u2EjCK5SxquGUgapM5R3iPMUbx79

KcPq1kQ/JrhFgvGCC72Ov4Jx74XzBlYtGJr8qQIZ0m5Qb4ynTT+eXsOEKf8Wez7kYFdK

ml8+tUlilzB0LszJZC1+gpYG7pbyjWvPJBh9fFEVot7WA+uOMnMPb0Tp8CbNRxqXaPkj

mSK3AHhzcoAVMWfVjfA/AQrFZbxNeaVX2rK6KnAuZrFPQx09KNku18/HuRBhGcTMQABn

wlEERB0XW2l8PKkL0C2Ws8mZYKczq+ZdMTM8Z89pZDC7eZZlTtx5zNesIUAOMOZQDL6f

8cxg==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=6FaD9rHEOP2UdkYOFiR7wbPJwC4oH12Z1sWk74K5rJ4=;

fh=k2dTm5csHfmo3QccBZjSTWjMaaZ7LWHum2s8uupvz3c=;

b=D2+jV+XHCOtmT8tVkvNh3aV73j8520xtuIF6H1L5Kx1r7Dbl6ziUPDp+fkQkGwePYI

sJxQUxkx/uw9PbUonAKEHXdFFtXbDJLjMkrOLL75P6taV4FSyRQVQ2m/AtiaEuh3Rw/y

AS9mo5rFQCfreMvVmxtXjvBTd320Lz0n1sZ393gaPXOg4ZNnRWiZFLfXjd1VCD4/TIT0

z0i7bOwxsTASTq7mNKv0PGT2YaGhfq/b2kW+c+41Cs9mvsjcrWosJnvD0zj0Th1fbzfp

hNZbVOtoGxxvtWUrXzl+pN8a/yTIiOuHHDl6qsHeUEEIR7Ba1GNbLKhRZNz1WshJJoXZ

BtqQ==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@seorino.com header.s=google header.b=ZbqSuPlV;

arc=pass (i=1);

spf=pass (google.com: domain of kavita@seorino.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=kavita@seorino.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=seorino.com;

dara=neutral header.i=@wildppcagency.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wildppcagency-com.20251104.gappssmtp.com; s=20251104; t=1787680325; x=1788285125; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6FaD9rHEOP2UdkYOFiR7wbPJwC4oH12Z1sWk74K5rJ4=;

b=J2DwGBeJ3ZrIxW34Q0uVgYOTOj0txiIiq8kGCb3o0r4n9tNy5ZFQj4M+QcG/fE8nB0

F7QXqOlfou0M50dsZtTxDhdJIrY+ObmoYmQYbPwwYmmOoAApsOG9QMKoR1JYBECMpNqh

hkMiQxYQ/6BE29eI506VKriw5lqJMsceHQ0yfG1GH2AO8WTeodYw42WDIdyLH9MSEq4L

mh5TXtX5C1mH2F3dM2FXdHFIze94PQSzCxwrc3wsf9LAFPe2SbrSfa+GM1lag/1p9hqz

XGyWvSGcj9OBZhiI65i/O5cXZF/sQ/ZNUhb6gk+dIssRe6A0/Urya0jEww7sbiJX5W7t

7l2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787680325; x=1788285125;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6FaD9rHEOP2UdkYOFiR7wbPJwC4oH12Z1sWk74K5rJ4=;

b=fwEcQOKbDHiIMbWhCBZM0L+q+862+M33kaoBcHeJGmrXeCmmyRB8VOFjfHJmXzV+Hh

TALNGz6hCaBYJ8WINVNdC7Jobw9RXO//1zRYJfpT/KFAuA23fBGaCV5t6hpIKlnrXaXV

+cy2NnyADi/QTlPoY8CJZGYW4NTtgeuOvQwUQhvsd0ca8mMU73u9flxw1J01CmPyXM+D

G658VD3j2ZRrDAdz6SuGGAFMYaN1B1Hfih5e3glM37+jYjR9HhmlRV/pIW7e+Xiu671s

MdBJ+pugClvAwA8HbFPoR6WSTPk77WaGbwUJxilbGBh5zTFCf8smGR9N9V/Kpb3ppRoJ

Hhhw==

X-Forwarded-Encrypted: i=3; AHgh+RrI/a/xNxs7iSUPZZLcsXih6Vpw8zc/9AgtpG8NzoHCRb6Yu5trjumlptP0lqZSuJlARQ3D@nk.ca

X-Gm-Message-State: AFuF++lrNp9+TZq9KkRc+6SwID/k2Cy6TbFck/Q3Tqf2pUlC/vf5Z9Fs

N8zi7TvCQr30zqSE8KOdGs0DuvdIuTNkdicxuSJ1+sIRM/x5udOOPTqBcmwV7MZBQnQ=

X-Received: by 2002:a05:622a:1823:b0:51c:84f0:d903 with SMTP id d75a77b69052e-52e4229ca1cmr6813421cf.17.1787680324889;

Tue, 25 Aug 2026 10:52:04 -0700 (PDT)

X-BeenThere: crawl_perspective@wildppcagency.com; h="ATskLdfzEVJyp15BC+3qmx7SR014Nb5HYOwB1cwAh10F1t3XtQ=="

Received: by 2002:a05:622a:58cd:b0:51c:1d25:ea56 with SMTP id

d75a77b69052e-52e24ad67c7ls41955171cf.1.-pod-prod-01-us; Tue, 25 Aug 2026

10:50:25 -0700 (PDT)

X-Received: by 2002:a05:622a:c5:b0:52d:d08e:d43d with SMTP id d75a77b69052e-52e4221336dmr6974171cf.4.1787680225324;

Tue, 25 Aug 2026 10:50:25 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1787680225; cv=pass;

d=google.com; s=arc-20260327;

b=mGcFm8xxyor9n2z6rhi64ebt9G432w0OtrAlricYImbjS7P8E7ni+EglCYF4nKWkw1

r9/hKmtmw6k8ilt3LNAnYI0kyt3hkrV7PX9YAee9TSg3z5K/PGdQ7OmDL1uL5bIiHbKa

CeLt6z7ir4hNJikIK+9Rlqic3HpOxexZCc203JTsBYaMGWoEZLRq1Bowk3AV3+I74heU

xuHVka4g+x0fXF0NMXxgGX22ahrbzxx5W6h6xLv2epnsdRpBuGz9QSNhP6xhTc9BTLvp

N4Z8vsEfiopKyQK6tW9GTF2e8/oDeteWDg0fBG/RE5tWouPp8GYaLTWaTqFwdM62Ex+H

9jNg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=KvE5mPaGHwhsFAYNKY/TaqtG+LwzlMBRyNieMJdIl3I=;

fh=2eRdNqCapn+s/i9z08JIFgTSbmsiEBfvf6XEwA4D/cE=;

b=Ixrbg4aI7EOGKHug9US/gpF977kBIngbKuw4TlF1NiNMqDcJ9fLfHKzZriy29qauB/

C9ScdRm0czNsRC57he8DyWwPfM8XBLpG23xIV4Lhmsqsmsqmz/nNznAPylpA/61c8+w2

CnqhLu468wrKKJ845T6Eb3JAoFXdWFPsHG0SgHvjS8T/fOobUg2kMTv/KbAaRZ0y53B0

aCDZxNzgs3AIU+e7JIcgXd2nlioFtyZ2xrjCecRO7UCPgLNtTUrxMhZgp2IfHHcHKV5Z

Bb4DLmJ6zLQULdbXI72QdyejVIvQeBNzgZLMAeYkj6tp48i9+cN6sxccDuDJBRpi2r7f

QiRQ==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@seorino.com header.s=google header.b=ZbqSuPlV;

arc=pass (i=1);

spf=pass (google.com: domain of kavita@seorino.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=kavita@seorino.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=seorino.com;

dara=neutral header.i=@wildppcagency.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id d75a77b69052e-52e427bec7asor524261cf.7.2026.08.25.10.50.25

for

(Google Transport Security);

Tue, 25 Aug 2026 10:50:25 -0700 (PDT)

Received-SPF: pass (google.com: domain of kavita@seorino.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1787680225; cv=none;

d=google.com; s=arc-20260327;

b=IzfHqCO4EhX/9KnnrGVQt1+3c9h2/DIyMKaqVTQawHTUigpaTJ6hTtTobnDWcq0y1l

8X8Qefsnl6AqHtCwmjTVr4hJqt8dR14XmECv695Di0yY+D+e0MeLVOSDiXux1Q3IxJ9V

Y5SLcQ9rX9tF0rpD6MFkDgGIZaYE4vOm5dWF2wGLOos9Zb2bikU+5bzQs1vu6xG5qpHa

R5NJDxj9hzadX3dITazitOlZlT/V8S7G7zrapadzJv97SpcwZl0fcI/uO0FSjSGqbcoL

spWFG8Eme2UhfWfLfvpal++z+tf9jV5WkAi0L3u1qu7+bmsI+XybmDK+9ZCg9WOy3dyj

zqxA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=KvE5mPaGHwhsFAYNKY/TaqtG+LwzlMBRyNieMJdIl3I=;

fh=2eRdNqCapn+s/i9z08JIFgTSbmsiEBfvf6XEwA4D/cE=;

b=AX+KAEEdHnOUTQ+wg3VbH+3hDsh3yD1NVyF9+Dt05P3TRH6OYf4s4PNj6771Xw13bJ

nSFYrYJ9Rgc9ZcD48qpGVSROUWTjlGSy+lFypV86h5NSmV8EU1mKGPjEKZZ/bl+yLncx

sixnMTTUfjgwwKtKPY3ZxbOITTNGkGsG4vjpcn/JcdmP6R/yHxrzU3EyJ/TQomhEFmbU

oXVZAH5HRysbJW/6F4AYPoYX1qgUKJdNyO8SOanHU2Udhc7q+oVydYARKWW4F0t0aF+9

LXVG8UcYmTuAIs/5M7w0P++uBJb7/S327G4u99jPoXnVLWorwMJVzfdONvfvvk2cyvwJ

Cklg==;

darn=wildppcagency.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD13ELLCK3eqHJ4akYlAk5F6pJviMDWp4IdVPURKtjAzO7ThyyxwBYNmBmM8LvIA

IGZt0HetQk7xtivJVt+K+Jh8MLzIrmffPhwzDHU0P6oqsc9Ri18xL4IrfFE912rVLssdpmRwzlO

O80ErNmn7rD3FFboutUpg0IuE1bS95apBomlB7Xt0brcVQgE8ezJUUW1/wWlQ6G7ihEDp10z9zI

qPbGx+kQqn/m9BGNPH/GBKgYAf6gw20lr8PHCccdAezj6xuUyaOpN362I4u0yAkNkAwFxifVEW7

UTHbdbXQDDAp45JTOXVR0cO0FyvrgW/poQXc1/fzetFMJElnr7sexxQ13RSSbBCjEEzRZvkHl9I

1V8gYWXEm2P/yIs6R7Y6ci/EGCcxuJlek58J/1cHZ8iIgh0Ajx23S3WE76sZ6JdkqIqM=

X-Received: by 2002:ac8:5f8a:0:b0:51f:20e1:137f with SMTP id

d75a77b69052e-52e422b1898mr5888421cf.19.1787680224668; Tue, 25 Aug 2026

10:50:24 -0700 (PDT)

MIME-Version: 1.0

From: "'Kavita Arya' via crawl_perspective"

Date: Tue, 25 Aug 2026 23:22:18 +0530

X-Gm-Features: AcwNN1U-ZnGsZ3wkIOlgwOe0K25tI3RzalILFJtANLb6O647OWUZdfSJXFP6bq0

Message-ID:

Subject: More Leads...

To: crawl_perspective@wildppcagency.com

Content-Type: multipart/alternative; boundary="000000000000c3bc450659e2bce3"

X-Original-Sender: kavita@seorino.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@seorino.com header.s=google header.b=ZbqSuPlV; arc=pass

(i=1); spf=pass (google.com: domain of kavita@seorino.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=kavita@seorino.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=seorino.com;

dara=neutral header.i=@wildppcagency.com

X-Original-From: Kavita Arya

Reply-To: Kavita Arya

Precedence: list

Mailing-list: list crawl_perspective@wildppcagency.com; contact crawl_perspective+owners@wildppcagency.com

List-ID:

X-Spam-Checked-In-Group: crawl_perspective@wildppcagency.com

X-Google-Group-Id: 799647509001

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,





--000000000000c3bc450659e2bce3

Content-Type: text/plain; charset="UTF-8"



I *came across your website *and noticed a few SEO issues. Reply with "OK",

and I'll send our pricing and portfolio.



Thanks,



To unsubscribe from this group and stop receiving emails from it, send an email to crawl_perspective+unsubscribe@wildppcagency.com.



--000000000000c3bc450659e2bce3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



I=C2=A0came across your website=C2=A0and noticed a=

=C2=A0few SEO issues.=C2=A0Reply with=C2=A0"OK", and
>=C2=A0I'll=C2=A0send our pricing and portfolio.

=

Thanks,








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to =

crawl_perspective+unsubscribe@wildppcagency.com.




--000000000000c3bc450659e2bce3--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxli-000000007G3-0hSs

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:29:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:29:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m254126.xmail.netease.com ([103.129.254.126]:34176)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyv69-00000000E7g-46rJ

for sales@nk.ca;

Tue, 25 Aug 2026 11:38:24 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1057498_493787064.1787679432670"

To: sales

Reply-To: sales23@abiscircuits.com

Subject: =?UTF-8?B?UmU6LlJlbGlhYmxlIFBDQkEgZm9yICB5b3VyIHByb2R1Y3QgUENCQSBTYWxlcw==?=

X-Priority: 3

MIME-Version: 1.0

Received: from diana@abiscircuits.cn( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 26 Aug 2026 01:37:12 +0800 (GMT+08:00)

From: Diana

Date: Wed, 26 Aug 2026 01:37:12 +0800 (GMT+08:00)

X-WM-Tid: 0aa039ff5fb509b1kunm7d6b55b5152b81

DKIM-Signature: a=rsa-sha256;

b=TnT1a6K1SZvLGgAPYhAFmKnf5iSt0Rfla45c9GzeINeEwJZ1O2HwwHJIBUwSh7F8BRWLM32TLCQolVdgWjmFugjbpTJcL+Xe8/3PsQkgyJRJbBFF+9hjiIGKvtTjRDOMO+74+voo/oF/II2NnacvB13ALVPPDbqQ+kTbchVe7CI=; s=default; c=relaxed/relaxed; d=abisassembly.net; v=1;

bh=T86rAKO8KiMry25e0AvWogcoTcWtl00Qgo4842oMn3w=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Hi sales,

I hope this email finds you well.



I notices you recently viewed my last email.And want to reach out to see if you have any questions or needs future information .



Abis have been makeing OEM circuit boards since 2006



I'm confident with our quality and attractive cost .



Would you mind open a door to add one more good supplier pls ?









Diana Dai

Project Representative | ABIS Circuits Co., Ltd



Rigid PCB, Flex PCB, Rigid-Flex 1~32 Layer PCB, Metal PCB, HDI PCB, PCBA

Mobile / Whatsapp / Wechat: +86 13510754753

Email: sales23@abiscircuits.com / diana@abiscircuits.cn

Website: abiscircuits.com











Wiza based spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxkt-0000000071X-1JV3

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:28:23 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:28:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f46.google.com ([209.85.218.46]:51701)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wytmB-00000000Jny-3dY5

for root@mail.nl2k.ab.ca;

Tue, 25 Aug 2026 10:13:37 -0600

Received: by mail-ej1-f46.google.com with SMTP id a640c23a62f3a-c2020421077so851881966b.3

for ; Tue, 25 Aug 2026 09:12:39 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787674353; cv=none;

d=google.com; s=arc-20260327;

b=Gw1w2P0IWHKTDNfSbfP1sQVMxO4Ez4v8+nUBjEUAh0qrA7VDuOgp9ZkRVpWVJfIABZ

49212Y1QcTDz2ExfRw8KzxzbxWGp7wwQyN5iYX7JM0j72snRVOqh3PBWHgegkEWx6ACJ

E1VqSyIcXikWajlh5xktz1GcuqFLZ8vBeBdUlxRXvQ2/3P4in3l0R+lu9Wyqh4DJ/6/r

El+T/An0ZImTPNcdbyjkYQkQRmhXisFuh2yN44adIj4XSTLLUtiqxYTrHRgrkfDabmtq

Vg7M04D0UgdR9nwD5dd7akNnzVaALHhH++D6G2SOT4TPGC9j5G4aYV7sUWYSmmBBwjUI

wIkg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=FcEv2IHUhVJLHQ7kzwngakt7xwqfWvv6gc1nskpNTeU=;

fh=rPE8HmmRslpnJ38twkY7eZHm3135VDPjK68lsL+IGwo=;

b=ZjbfuY3QVmATdV/YI1q1zqIY1V2dr26tW35J70i5VgZz5MiPolFT6yr10pjG4hMq3A

x+I6c+WKlNSjhyV7L71x1+zp9YaUyirgqUFxwNS4i0q1PGGa+4e1HSVqQ8FqtMIH3jD8

cvA+YPAZA9vhNiKZSwepCnHD+yIcht0A7t1n/uVoAY1e4czHQcVRbcygQ/7Sj47hFqS7

EhS834Ppekvla9IPSw/KZZ0aaGIrK6RQzMgUpF+WA3aUYOcJ0+e/96tvvC6pORqLSPDn

Sow4iNSagN7tGwSaD76m9AkR0fDzTmIj9qWAqkt4Eh6RIOaxAGnJx8uZsxZm349dBuK6

hr9A==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787674353; x=1788279153; darn=mail.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=FcEv2IHUhVJLHQ7kzwngakt7xwqfWvv6gc1nskpNTeU=;

b=fyxY3yTpJFn+7i1qTxZNO2DIECgdfs8B0rtp/MUtuG6f0x3u3mZhS8kK9+dTlrkh5J

RqoR6+gBCWLXDfP8481mmiugbU7XVhmTn2+FMt8AIEhyeoHbpSzioA/khIwg1cZJyrv0

psT9Cy1sEcwJGCpIx89GWIhbQjD+wx7SEjlGLgV3agIp8Ek7QNBuf6t9stmkvJxkE47g

HRl9TDtNQvuDpurdLERpg8JCxg6IZRAtbxtpJj6JZrwCRCo7Wem3Hl/hCMbhC9sncP1h

jLjxFY2/9CfRtDeU+TxpRPwH+uew9sgTpZRqmKo5h+pTS6Do2g4hSFXsKtxxEFkBZzNL

OVzg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787674353; x=1788279153;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=FcEv2IHUhVJLHQ7kzwngakt7xwqfWvv6gc1nskpNTeU=;

b=kmDBn0QI8/1BFGoeRogT4kU3/YSyXSLsVtbvOU+Kl/USjk3xkkLf5ePvmmUQgaYGlR

z789vs+gLKQM2cknwUuxTNsytKyY7MRh+mBAW0EXW6c/I3oE8FQjuMevLxOmU2jrV3Oj

0324QaPv//6J2f20UAJh5h35m00Z0rzE5WOH0kIGHWJRDeEUX3QoKM8X3W2sNIRi2sNz

l3yYtyXqdWmF2UvAfM2/3T381F/z7H4nQtDtKpetxnF9FUZfNNEFEstcRlgJLDHrU2OU

upO36zkG2YGtSaMqXPUycLCRgIuQxoyus5bEX8JUwbwLxnF05+Ar/iq5NUbccTCXJn8T

fHpg==

X-Gm-Message-State: AFuF++khsT3MCF/PQcj/YjrU26JD7sXUqwmMoH2LoM8Efr1FJ7JnyG/D

+5+X4x5gcO/VUEEKcRpZNzQ7So63A01/AGCgbWje/EIfxcab6yLXrVpo4gW2HZoA3if95Fx42Gs

+YQ4khZHOjcY6APY+oFX9w6C6cc6SuCE9gZSb4vdejg==

X-Gm-Gg: AR+sD10CAzwK2AtspdoxArTIVHZFk/hxsFYk6xWyUkJ5GBUJCtyMUUK1KmtN20MbB44

wXixGytwVvog1a4yi1Of+vzxDIxjCx5OOcY1kGCnkL0LwidwYEd7eRpNQevyuO3AQPGcwTTwk+v

OThOSvH3zKcwi93ZTZMzXN7FMyAOea1T2cEDQ2058mqpAfjzz9AkfUlWVogl2tLVHMM7VvzrH2V

CYwLFDUGWxDrSLhFwvNuVt8+VQWkwbFutRoMNlUGr5k3jSa+25QOtrJPmfEfJHfC+ee8KSIoDi6

dLK/FBSvVLT5o0I2dC1qPiOy1rFaWqQGcUr535a7o8FPo65zgi8hj+TC+U+jnOTYtxtTcJkwBtf

f+ewWCK8mXDu0zBS+HsgVe05x/RWXyugolPpIW4Tk4HvBfzc/OJa2D6MfuRkGb2LqgKRg7kMSZT

jkLV46QnysiCVrRnElKg8fZQugHbNjmYNavFAR+sUSn+IdhZMD4Zp4Ivea0vaMYQf1MEyAO3ZHX

A9nbnftFBLR2TA8q0QmRkTpB7Xc6+/D6WkppLnq49tRoHeWwnWAD28hs0Q=

X-Received: by 2002:a17:907:c8c7:b0:c24:680a:1c42 with SMTP id

a640c23a62f3a-c2491c9a6eamr3249945666b.7.1787674352660; Tue, 25 Aug 2026

09:12:32 -0700 (PDT)

MIME-Version: 1.0

From: Kumi Yang

Date: Tue, 25 Aug 2026 23:12:19 +0700

X-Gm-Features: AcwNN1VuTRtxezQAmLpIbD35QMpbA9wOfVTTvTPm7DcDWICyteU885v-wZLB_Vo

Message-ID:

Subject: Seeking Your Insights on Technology and Retirement-Friendly Cities

To: root@mail.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000c3b4a60659e15e57"



--000000000000c3b4a60659e15e57

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Dave,



My name is Kumi. I found your contact information through Wiza, and I

apologize for reaching out unexpectedly.



I was impressed by your experience as the Owner of NetKnow. Your knowledge

of computer networking and technology entrepreneurship is truly valuable,

and I would appreciate any insights you could share about the IT industry.



I am also planning for my parents=E2=80=99 retirement and looking for a saf=

e,

convenient city with good healthcare. Based on your experience in Canada, I

would be grateful for any recommendations for senior-friendly cities.



Thank you for your time, and I look forward to hearing from you.



Sincerely,

Kumi



--000000000000c3b4a60659e15e57

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Dave,

My name is Kumi. I found your contact =

information through Wiza, and I apologize for reaching out unexpectedly.
>

I was impressed by your experience as the Owner of NetKnow. Your knowle=

dge of computer networking and technology entrepreneurship is truly valuabl=

e, and I would appreciate any insights you could share about the IT industr=

y.

I am also planning for my parents=E2=80=99 retirement and looking =

for a safe, convenient city with good healthcare. Based on your experience =

in Canada, I would be grateful for any recommendations for senior-friendly =

cities.

Thank you for your time, and I look forward to hearing from y=

ou.

Sincerely,
Kumi





--000000000000c3b4a60659e15e57--

German language spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxke-000000006ui-379t

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:28:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:28:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.delmax.rs ([176.221.75.149]:47000)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wytt7-00000000Lk6-0l2x

for doctor@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 10:20:46 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.delmax.rs (Postfix) with ESMTP id 4FBBA124BF16;

Tue, 25 Aug 2026 17:39:29 +0200 (CEST)

Received: from mail.delmax.rs ([127.0.0.1])

by localhost (mail.delmax.rs [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id 9M9InczkOJOA; Tue, 25 Aug 2026 17:39:29 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by mail.delmax.rs (Postfix) with ESMTP id 01AAC124D68B;

Tue, 25 Aug 2026 17:39:29 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.delmax.rs 01AAC124D68B

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delmax.rs;

s=6F4CA0E4-7939-11F1-A3B0-7C217CCAB3F3; t=1787672369;

bh=lPWJiTfHmKOf3NTIItvgFcZ6ss/Q9fiCIUAZAqYaixk=;

h=MIME-Version:To:From:Date:Message-Id;

b=nrQ0QlrkO2gBB7nka5bjXnY3h+5+zT1o9/Sq/39QMSB+VTWkqQ+QnnIs7rhFPWcBK

5oopw3MMLIwGTNjBC7B9zRDmnbEeUYOqL9WKlxZ2LqCvGbVIYAIHklbCM3i7Hq4w5u

05/nwBxV0PFSugzl2dPQ2U5JjS3SKHnkVTldQ1mGhl2hQ1ezB+7YOeaVeajDpCfKI5

z+SbEIqNE0OWIHloq0B7R0UXLzT+N1uOnedch3Gyd7sDC/3FvteWjNcXbVuIoNij8o

xW3LRNudQyaoT1vIJ7HJ3AaTToRWVOsCCzRS82Odpd8yrhvginwfLxPz/m22gZ0f5q

U2QWq9QTsxBtg==

X-Virus-Scanned: amavisd-new at mail.delmax.rs

Received: from mail.delmax.rs ([127.0.0.1])

by localhost (mail.delmax.rs [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id WO6Es2Xbg5hP; Tue, 25 Aug 2026 17:39:28 +0200 (CEST)

Received: from DESKTOP-3UAD085.lan (unknown [41.56.251.53])

by mail.delmax.rs (Postfix) with ESMTPSA id 425B8124D65E;

Tue, 25 Aug 2026 17:39:24 +0200 (CEST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: =?utf-8?q?Zusch=C3=BCsse?=

To: Recipients

From: ROBERT BOSCH STIFTUNG

Date: Tue, 25 Aug 2026 17:39:17 +0200

Reply-To: robertboschdonations@gmail.com

Message-Id: <20260825153924.425B8124D65E@mail.delmax.rs>

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Die Stiftung Roberta Boscha ist eine ehemalige Stiftung unter

der Schirmherrschaft der Firma Bosch, die in der Gemeinde arbeitet. Zwei

E-Mail-Adressen für Google Inc. und Microsoft Bing. Zostales los [...]



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

[176.221.75.149 listed in dnsbl.ahbl.org]

[176.221.75.149 listed in dnsbl.ahbl.org]

[176.221.75.149 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[41.56.251.53 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[176.221.75.149 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} =?utf-8?q?Zusch=C3=BCsse?=



Die Stiftung Roberta Boscha ist eine ehemalige Stiftung unter der Schirmher=

rschaft der Firma Bosch, die in der Gemeinde arbeitet. Zwei E-Mail-Adressen=

f=FCr Google Inc. und Microsoft Bing. Zostales losowo wybrany do otrzymani=

a grantu w wysokosci miliona euro. Mozesz wykorzystac ten grant, aby wesprz=

ec innych czlonk=F3w swojej spolecznosci.



Zainteresowany? Kontaktieren Sie mich unter folgender E-Mail-Adresse:founda=

tionrobertbosch@gmail.com

Fundacja Roberta Boscha w Niemczech

RBC Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxkE-000000006YK-0gdg

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:27:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:27:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f46.google.com ([209.85.208.46]:52706)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wysma-000000003gW-1EJM

for doctor@nl2k.ab.ca;

Tue, 25 Aug 2026 09:09:57 -0600

Received: by mail-ed1-f46.google.com with SMTP id 4fb4d7f45d1cf-6a0a4aa99bdso8206012a12.1

for ; Tue, 25 Aug 2026 08:09:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787670534; x=1788275334; darn=nl2k.ab.ca;

h=message-id:date:subject:to:from:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=lv3uQQBbmovjw9DIdEEeYSAvV/gb5/ADF9A0Xbp5eyY=;

b=rAauSex+2LvN1UGJbl+iwAziLyi3O+p76AGxOQTgfYdPaYkf0CNVPriV5pcqlDoiAo

laB2tAKJ6h7qcJ9Q2HDx0a07bGWm75YA7ObbP32Q/kPhQZsNLoogsZz8w66sMWkfYe92

Hd273uh57cC/NhRQu1a2LIPTKdJRiRYh1Gs0oQnDjTfmqiyj5R2Pj4R2LNpdvD52R4iO

ohNTJGDFYk2eWgszQ7q/lzp3P9R/5c46XhLjZfRWeSsNtNEiL8FOQ1k8aZuEzwtDLrrg

uXcxjqa9JmMqM+jSOh8dQQMRkX1hzF+ilQ52UcKPhzdKSRf9UzlfzKSDmajuAQMPvPbu

Tm6Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787670534; x=1788275334;

h=message-id:date:subject:to:from:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=lv3uQQBbmovjw9DIdEEeYSAvV/gb5/ADF9A0Xbp5eyY=;

b=NyBOLJxsWJ7LPL0fzYaVVRK+6Qxfe2fBm/a8oD5CiOvls4zAeBKB4sToBP9luUeyS8

oG+JfKhwtCS2efrOHyg4x2rl0oiOYkjeYysVSbX3/hXM8PfVVkuOVkMyzvi+0sHeOz7Z

orZ7j76AWD0D/qpUMw04Vvp1gvNVIJzj9jD7KDqxK/kI6pHNHc9Aji34QgeRIxyWeSsm

wSM4GUi1eCz0im+Iw7h/wZbVzjdUY12JnsdnlpYjU1Nubn6hBPoBVMGnE8rZL86FkWyv

KqHZVl8nkkQKNEPpHzI1mM0dRFfHyztGv74RnxIyoXXiuwnLPTtdKEtIvb9iUY4Fg5Dx

A/PA==

X-Gm-Message-State: AFuF++l7ARW//lGMNOXGLOiIz3L9KpMrK12p7oDK1rA+PiPFfe3nBA6X

CXRdyvqj6AllUGRnbJU6VumepBwypl3MZaTc8GUqqwEj8ff+jarffauvLJmPiRSedDPbHA==

X-Gm-Gg: AR+sD13pPfTUbvuE8e6FaV0RiT4Z9Y4+uOLU8UkFmc53R6Teiln6BG8Xsykt+PVjrp7

tkHkj3Pv38+nHUpIe2Onxc2VNTJypGlkfuCp2dEh0HvIJqMad7UQiIIjoVbUuLix6Md7GK2bqIJ

KH545/c5JDGzLT5BvwWC3qo6vWhcYOIYQ6grdFf31AUnx1oYwnd0eOteGmy3aJmd9X1nAg4nzoE

Va4EayNN7EbAYfPfdmrJDT90xnVg0wJhSlgIlsT6kS2f5oh/oPaIGb5LQi18+0IQ7gzsKPuzhRk

oi0CMQv9PHxMgzkbSFGPYb+ndwbW9az229xxaAQdlIVKxY8GCZh02qgISQoICu5teOM467HOSCE

ng9jsipl4UN6QFkXQ8AKmsFJ7WQnlvUU4Xxtl6dMJoL872BQW9xDgjRUprPq2j8XEnTr6QQUupM

diDf8Kg6Fi90u0GwrEo+nSEGgZ6T/xfNuCB45C9ZhrWqwBY+dbhIGCJ0rm4xHGX2f/FCFR/gjgb

l3ZdoGV

X-Received: by 2002:a05:6402:1ecc:b0:6a3:74c2:3cf3 with SMTP id 4fb4d7f45d1cf-6a582b0c826mr30768149a12.6.1787670534469;

Tue, 25 Aug 2026 08:08:54 -0700 (PDT)

Received: from [10.5.0.2] ([193.124.21.43])

by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-6a5dea83a25sm115033a12.18.2026.08.25.08.08.52

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 08:08:53 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============8185156476161207957=="

MIME-Version: 1.0

From: RBC-Support

To: doctor@nl2k.ab.ca

Subject: New secure message in your online center

Date: Tue, 25 Aug 2026 17:08:53 +0200

Message-ID: <178767053359.1940.1532261181250774573@gmail.com>





RBC Bank Information Security Dept.

Date: August 22, 2026 Ref: EB-849-224 Subject: Important Account Info



Dear Customer,



For your security and peace of mind, we deliver sensitive documents and notices exclusively through your personal, secured online message center.



A new secure message is currently waiting for you. Please sign in to your online banking account using your credentials to view and manage your documents.

View Secure Message



Sincerely,



RBC Royal Bank

Security Notice:

RBC Royal Bank employees will never ask you for your passwords, PINs, or online banking credentials via email. If you receive a suspicious email, please report it immediately.



© 2026 Royal Bank of Canada • 200 Bay Street • Toronto, ON M5J 2J5

Web/SEO/App spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyscv-00000000O9N-25Dl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 08:59:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 08:59:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012050.outbound.protection.outlook.com ([52.103.43.50]:40527 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrlR-00000000HxF-1fqj

for sales@nk.ca;

Tue, 25 Aug 2026 08:04:44 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nJ++kecxxUV0lGQVkkT8nx4OlRCbFjxHbt/25z0wXe4kMOhaG3zQrZ46I5Esy5JHRFx976VDF42GzSfAgd+9J8ttrpBRp8PVtvpk2djFiLJSXn26zUTqcR1NIX+0hp7h7uPD1oISpIFEzoE9mRn30c8+GsLK/tjsOeaikFLQma/Mzzmq2kt5qCUXHi1u+QPyk+y2jZMrrz4Aie7GndBPdKtjlR8Cl7RSM03dmmzyJ0PoTlK6Q7EOTBIyE3pmaGBK9Ph50dADxJa8v+qT7r9mcrrt1cPT9BPhC1iD3IhNoiCjh6dhE5w4QJYQvpZP5bBiOi12Yt7HgsnHdROb5djOzA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6eXN8ACm1jLOJq+oj6oogRRQ4BOYX4UHUFpMj1n9LN4=;

b=wPpkJZ8ZL/2D7gHZP8a685t/VQmfS1cZki1vZvPj0NlfVloC9Yo2V7aJqB/xd0i7hHMDNmHfQq0uoCxgFoihg6wy3Bw7epu6Zh+p/PtsAbcUPQwASmsPncMVFkBkP34wxY9qIJA0UjyGnI5XhJk0Vykl2JK4UAQveZB+gezStf3yrUJAo5+1fQvH3/ZP5cXbGimauL7PuqnkFKTusv0nzwkFZuGzSI7ygCUt0fslgQnf+whYQcnsz8aekdCsgBOPI1Fltw6c9Q+9OW3MyX+uQcS7xb+w3y7LOeceEC2CENHd7+V95puD3ibKYN1UFzZuxHiLWri4YAS9rTntoA571w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6eXN8ACm1jLOJq+oj6oogRRQ4BOYX4UHUFpMj1n9LN4=;

b=btmMfsl5dsN5vFIzHD9p+o7PThAHxeXvEz+NNF8gLdIiwsRFJGmR91Q2WRfxpbMGDlR1pldeqDBOn2A0DAeiSyNdJil0Vhh0zyUbaxYGpmHHpSRA4vlBQvtR80KcABdIVmHI/nwC5tngB9DW3RAxhtWq9ZRrKD4aF0yifV7NK3RYNNlF6BvgZphHsuKXpScZ58EgWG0JQGsKavTGkJiAxRUqPgsAIC5rbQfU+VcXdD7oRD93+MtZZk/2yhVLDWmedNJ6kTVZFtJOsS+Cx/9MbSdNHqL9eeF5UNsEIbC99YI1zP/LX6+jzM1+7ONhoOVTqzmeymx4lSBI5wqREsWwNQ==

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com (2603:1096:405:397::22)

by KL1PR03MB7173.apcprd03.prod.outlook.com (2603:1096:820:de::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.6; Tue, 25 Aug

2026 14:03:23 +0000

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd]) by TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd%4]) with mapi id 15.21.0339.012; Tue, 25 Aug 2026

14:03:23 +0000

From: Tony Hooper

To: Tony Hooper

Subject: Re: pricing?

Thread-Topic: pricing?

Thread-Index: AQHdMw+QSWBTdBOym0eB/AIOmi+XFrauznuW

Date: Tue, 25 Aug 2026 14:03:23 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYPPR03MB9723:EE_|KL1PR03MB7173:EE_

x-ms-office365-filtering-correlation-id: 5f40f453-bbfb-4e34-0c7c-08df02b1a05f

x-ms-exchange-slblob-mailprops:

lKmFK9UkC1O1lwmcPpTlqNOWm6nAASt/KWCwjT6n5Mp6/ZByJOJ+/tFy8LomVn7Tr5azI9mlOLERfhE45dXvusOAXtKaatIrZkbKQbFTlfDAPCr3lhDDVDVkAlWLhISTSWsf4jjFaaMOBBl2GXgvS3tkPnJW+2UvvAtAf4LqFXaoHp4vTGxW9a97mpBbRfxA0qcOlMwgLsXGVHyMvP39hGbjVBuqzPjFx0ULa08DZEHzds2wNcfOyOO8Kg8lMr4g/SYl6tk9G3H/xH6tOa+jus0pLCUMUsTi5/rx3JduLoebywWL4Fj6VsOIbllKilzooD0KwzCqN9XJKXLYtlufmZOgJ/9Ef40edrT8pnmTZgnE/68RInZ0oLEFOIneZOiOwlh3hhM+QzhdcOHkS10+CKQXarTsX3xxQfksWM7ydOTkwYhVNPsg+gz0azZKCWWiWrF6rFdkgb8ONbPi3Z7GoXHUBoYhS5LOCifkLCbtBDrqq3Hk2IxvGMQRKpxW+funtVz5lXSAnYttc7VaDS5uKQ/Xo4ML8kVNR6l+YlF2k/CMkMwzqtSr1I1Mbo+m5g/Fjq3GE77Vvzo=

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|24121999003|51005399006|31061999003|55001999006|16051099003|15080799012|15030799006|9112599006|22091999003|4140399003|25010399006|2604031031799003|40105399003|26121999007|11120399003|2607281247196008|3420499032|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?oIRoYB1tyiP9w/qExaY3gRMUu34tgImL3frN/2d2BDxXmzFGBOvUj3nD?=

=?Windows-1252?Q?Cp6IzyBO/xi21SN3zEcV+d5ZjyjZkTfkrS3jEND6+MGRK9rzMCQFxaor?=

=?Windows-1252?Q?3PXpdKeJeqDc1P3M7yPJgZI26GckjXQ33XlmDrB+qv+237NMw+ay5TGQ?=

=?Windows-1252?Q?aqb/3KZePRi+j0NuQpPDZGu8gZbQzZoJx+S1x4K5qdt9lJz8IM6FgXtl?=

=?Windows-1252?Q?+dGOXX/NTrBIWmtVQa9Z2yBs5wk+E1tdahvXwV3hDXmNlL8nFJsW+Q8l?=

=?Windows-1252?Q?HnAdpB7FUZpnqkUYkO5avDPYRAmZKn2ZgkHvHx4xtAksDEqDndi7NUZP?=

=?Windows-1252?Q?V3QZovkdkDq+CmxlZAoROPK5yVQon51TvC/Js7/VFbupyICrIFAQx2SK?=

=?Windows-1252?Q?OXWX93opIVt134LRbTID4sVMGgQ91l6Oe/Qfx+iP2lr4GZz/dFhlkt7k?=

=?Windows-1252?Q?9f/oztgdW3He+wynY+fmp+Shl5AteH5ukHAAvLQGV6Mv1OzS7SibV2jQ?=

=?Windows-1252?Q?S8S/guf2rYAAWtIO6kp4r/FKot+LX2RQ+xxGMx8KM3DIjlqxA92Fj5j0?=

=?Windows-1252?Q?+K4pV0T1U631H2TnyYxPQQ8zR4GW3zsCy/YRJ6xdRIoiuPYz8wTofM9d?=

=?Windows-1252?Q?BxceXHGtyaldLuDo9ph07O5hB2DARSOTHeVrxMhAyoqVvE/tZ82XJ9+t?=

=?Windows-1252?Q?S3p/jnaKPLtiR+dgxhMCAeQYLr6nuMG3Xe+YKy9FLanM5Gv+90JQuwbE?=

=?Windows-1252?Q?ELMZW9gwXB4KEXa8+jEXmGRyoHCU/XB1BiGk/M8CrNQ8kMo3vmYKfX3m?=

=?Windows-1252?Q?41huTKhP/NgzM+eteNi6MY6/JFs2eEGxaqKr48h7dieBxhGIoaCRkgJF?=

=?Windows-1252?Q?/H6i0bfbGS0ytHospJZzqNzQyn092e/gZn4j4Rm7uctjj/Gm3B0c3QGI?=

=?Windows-1252?Q?Kz6UPllVIU/PM4j8b6JN3e8vufEbmmYyr4R8zYZLBhyY226Rj+w1a7EJ?=

=?Windows-1252?Q?koC7UbGF2XTCM1xnEpOD4ljiUApeLS0gsXs2qwpMX57N4V198mlzO6YI?=

=?Windows-1252?Q?A8ZQRY0BupvbZ73V6ZxSr0Dkq9xEoJMxUPVMVoPSps4IrNjK4YfBP6Kp?=

=?Windows-1252?Q?Rr03SauoZilUGNxU2hj0dO6+DmY1ipdKGakXlsnXfJOk8PkwJCXgV/2E?=

=?Windows-1252?Q?eZRLUsFnjcd640/d1lR5Ok/rJu9m6WnxtGBHc9pf3k5L4vHlOT3yFslK?=

=?Windows-1252?Q?PraBF3/CHm5Fl6NYXdNiWkj58T0kCFl2HiVd8WQ/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?0NxDsK/JP+MhB5rgOJCvCOl/tlskcfDcE4akCOmMeoLfhgp9hQZpzd7Z?=

=?Windows-1252?Q?ekU2BwpZoZG08W0IQIDKIPE7fvfZ/34O1coLj8HA8tMv/g1FkuLXnH2x?=

=?Windows-1252?Q?arZXs+4xcFCwAhIsm6puYUu34Z7vBdvC3NaJogQjgEqPAMfXo6uHc3xh?=

=?Windows-1252?Q?ezL0V4MjnbkfnS16cG2gftaeR+TMAheDiRRS+/Tqviijuew0CGecKZPs?=

=?Windows-1252?Q?SptktMLw4oxvFu8abWe4B2+LAYdGCU21CwgxwO+ap3z9dSK3IkTGRLWk?=

=?Windows-1252?Q?a9hqNdo614FcYMOBWt/tHcwSpA/sjuNn1lP48dhAPf+LSZk0FBqLrxWC?=

=?Windows-1252?Q?BBvoKrX3k81mIsNB4GDM8oqkgTZsMsnDH0mUBVNUr1/lYdF4XOAY2J1M?=

=?Windows-1252?Q?xaXaSxOCWzRSQhhCWtPfcHMBwMhOgdIyngygwK/5D0CpvUcpncDiY/Xt?=

=?Windows-1252?Q?/9jvw4cnNDeZgWBYQ1TiPbMkyXzggIw5XEEuNycr93WrU80IorsiDxxn?=

=?Windows-1252?Q?vk7KVCXYmU1X+ukBJcts3Znc0vAFSzta/zN2xVhXzrdcqencGLAUIRRA?=

=?Windows-1252?Q?5c5CB5p6vUnqibUL11YKnwZnRCOlJrtl8Y8GBOEKDGgDd3JArupYhf4a?=

=?Windows-1252?Q?ffsc9GNfnQ0iRCNmAf8mKu+luvEV+Zl96kqZc6Hx9xGCibBOHBrDnBEF?=

=?Windows-1252?Q?rPkDfOpNTmHXYEBoP9tFcs7/WtvMoBnXMXcKIYcXg/V9Wz0Ab/6b2Inb?=

=?Windows-1252?Q?O+SV+yDnFcBQeCcdPvlxN8p6PJO+VodDFzP+Zcu7VsRKXReOGQkIPNmW?=

=?Windows-1252?Q?ieMKzCXwzHDFsIl5PNXJbSBZKJt7wJIR7tO9ANtiu7pmXP758pN+yvMW?=

=?Windows-1252?Q?if4b8HgxII0YMGkFEQI9McxkDlnNaUbtxvoYbyjTQC5IZ/Blhb8G4pxi?=

=?Windows-1252?Q?d4UlEZxcWpTXxh4UoAErl3JTi1NVKNyI+bhwAvTaRhDPXsRvxjvwJ/Fl?=

=?Windows-1252?Q?+LKE2Vc6nfQEnqJtBQPoA7tbwPF88kHjT6GeD5HocVox6ztvF4RdhIYj?=

=?Windows-1252?Q?pbZ0JxSdgNTdGXJ53jDDL2m46Ugb/O+f3apgOww/BSzNZewrcBwYyGZv?=

=?Windows-1252?Q?0/WLoEErHZVoeJbV+9AgnhVw8dQPATIgDJsVtHYa8DEZPBvGHqEF+fQ3?=

=?Windows-1252?Q?LeiLv1FJe/73idgpdnPpETHAh/lhBZ+jYSC4u2vDvvOT4XCEfqWONATV?=

=?Windows-1252?Q?BtfMNawX9Wnagz9Qf0xWvlzfaQbk4z7d+KKjeH69TNHD4KB1fpVBUD1J?=

=?Windows-1252?Q?W2XNOmEWetVgI9XNSGb7+VDqRretRBTaaKhX44KhSQGACnKb53Rs+rKH?=

=?Windows-1252?Q?5pQgJawLy4UtjLSobaZVpYZImS+3Lj8+BZZHQWt26T6kSLRj+172VRPt?=

=?Windows-1252?Q?dVXpScQn+IjUqd8XutoZhWm7WV+jkLDeI1KWLqnw7/60DHuITcAQTcHB?=

=?Windows-1252?Q?AbCMyPQr3er2wTYPkdvDywMtXML3ADI7wEAfIyxpepLpo8FBFfgdM48/?=

=?Windows-1252?Q?RgzWjJ87kUhKawc4?=

Content-Type: multipart/alternative;

boundary="_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYPPR03MB9723.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 5f40f453-bbfb-4e34-0c7c-08df02b1a05f

X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2026 14:03:23.2815

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR03MB7173



--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I am still waiting for your reply.



Please let me know, if you are interested! Send you a pricing?



Thank you.

________________________________

From: Tony Hooper

Sent: 23 August 2026 14:57

To: Tony Hooper

Subject: pricing?







Hi,



Your site looks good, but it=92s not ranking.



I can improve this and place it on Google=92s 1st page.



Can I send proposal and pricing?



Best,

Tony



--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I am still waiting for your reply.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Please let me know, if you are interested! Send you a pricing?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thank you.







yle=3D"font-size:11pt" color=3D"#000000">From: Tony Hooper


Sent: 23 August 2026 14:57


To: Tony Hooper <tonyhooper49@outlook.com>


Subject: pricing?

 









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Your site looks good, but it=92s not ranking.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I can improve this and place it on Google=92s 1st page.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Can I send proposal and pricing?



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Tony 












--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 08:00:01 -0600

Received: from mail-pg1-f232.google.com ([209.85.215.232]:55330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrfy-00000000GvZ-0o9X

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:59:03 -0600

Received: by mail-pg1-f232.google.com with SMTP id 41be03b00d2f7-c9b373d5af0so3778882a12.2

for ; Tue, 25 Aug 2026 06:58:07 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787666282; x=1788271082;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=muSCQrlmQAlJDrRDwI3z2JUm44/M82T+BIc+NPQEQOQ=;

b=Kt0cKs00KSykBUpC5/eVH+bHjVRN+jiwV3DX7ghkMby6JJ8gxIs5xyVWv3yrQQ+oSz

OuhOYsu/D09sBxCcpNsWOPYnff9XssKroRJK/ob/52RtnAFFeBp7UJTW0zfaSsWL4M4Q

XxSvNprYY0eFYRQd8bfd9ztny3d2aXflBklEYqYOxqNkhwV0+pAN5R9nzo+5Klkt1Nz3

RXHXaYg9/n/NUfArVXotGHtUElvQ9sAOpElX1fxGZaywYbeAfhgytwo4fTFln/6fa0eq

wyfMvLclWxWlApDpNdNtuHGMNVTJCS0zYZ6dnkh2ld/3hWszA2EGBpl+2j7BsRPWj5Dx

zpjQ==

X-Gm-Message-State: AFuF++lCVc+rDL7aeQ7/hA2nuWzvNjHRIYs4rNN6nagKp38leTkza3W8

ULNeC7ianTHPQ4+1dvfOj9X96H1fYhmZMKU4Y35WQpMgjoLw+OOIy5FUVRC0plKQDWELKY/JWoj

a1zbzF2MAiVyDzxjOBJJcmfViHDfImOrQ9AveAJV+ZcdQQ1Y=

X-Gm-Gg: AR+sD11Eqt4Cb/ShxX+t9xlfQ5zl1Q5Cs/dWrRGpAvEZ8wL/WdlFO5x6T/EDO1Gu+He

WHAOfOWTR5Ta55MiNkMGzVJ6qU1nF/OkMvBI9Odfn3xwI0yM23RsNaGNCEk9DSlB/9PCbNL3zzA

5JRykHZRTY1UpXojzxEE6gKk5O2UkQxZ71Gy0sDFXBZMpuyJUm91RKF5dig+Hk5YSY3kKfLH3iN

Q0wsWurEPuH4vjyTxV7HYqeTANhRujDMzJZa6R9nW055laNZZhMWgLwJKxeYcwYz/XxBGHyylZc

w0RGSSOyK9npy/XX8vjEa/WQVuE9lO8f2sxP6/6Pxn6JCc/WvEYD09Xfl/oDgsj1zX2TM4h5pbn

sj7lNGnLu7VRlt3h69NNOCi8LcO3rRmTok0WuT9I=

X-Received: by 2002:a17:90b:1d50:b0:38f:dec8:f7e9 with SMTP id 98e67ed59e1d1-395df29b3c5mr54941422a91.12.1787666281292;

Tue, 25 Aug 2026 06:58:01 -0700 (PDT)

Received: from libero.it (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645b43d8asm1372291a91.13.2026.08.25.06.58.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:58:01 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: dave@doctor.nl2k.ab.ca

To: dave@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:58:00 +0000

Message-ID: <890CF246C27805110097ADC198C349E5@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: VHc7sfJASaKBvNWwB7Z5p9fQWUr7KA==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=12v2udxw3yeda8ypf0p3k27q6fy8hu"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Doctor has shared a confidential

document and requested your review.



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.232 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.232 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.232 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 URI_PHP_REDIR PHP redirect to different URL (link obfuscation)

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: multipart/alternative;

boundary="----=yuqh6mv8rpykc0inqwttxl3kdug2wi"



------=yuqh6mv8rpykc0inqwttxl3kdug2wi

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=yuqh6mv8rpykc0inqwttxl3kdug2wi

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2FM094bIMR-801g=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23ZGF2ZUBkb2N0b3Iubmwyay5hYi5j=

YQ%3D%3D" target=3D"_blank" shape=3D"rect">







------=yuqh6mv8rpykc0inqwttxl3kdug2wi--



------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=12v2udxw3yeda8ypf0p3k27q6fy8hu--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyscn-00000000O1y-1CxW

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 08:59:41 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 08:59:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f230.google.com ([209.85.215.230]:48597)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <7b2P5345sT@visionsurveysqld.com.au>)

id 1wyrfx-00000000GvS-3Ctr

for root@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:59:03 -0600

Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1469c1b83so6362599a12.1

for ; Tue, 25 Aug 2026 06:58:06 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787666281; x=1788271081;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rulKTnkXPB1TOQb9xPcfZ8nZ8QtMl3H+5lQTAe7nw+I=;

b=US0ymhhSDEuhA8prM1dZecM1Qs+YVeJxcaWFdKE3qP22W7pVsZCYJ4ywCHkHTmd7X1

j+9G7mL93Y2PV1hSDDjGvR017EdAmU8w5ujezZIgxGsad0qlbuKrz0sDUmDDAzw2XCGa

p7qVu5TWixHGwD3G5rzmzmudInVGA7SwO6ILZeVuwOf9EmzsqZcV4fBlIrN5TU2p11Xn

3WQGTTHNrRr90PR3SBFcmj2v6+/Pj3t+AzUcOMBOOZftE9WBFGR5JYBA7oZv1yS82HRL

I1BgHl1W1txBCrxhBJHyJBrShxUY4WQ5HQQRc6nA6O+/y/iOLFf7aWmXd4z7913RwL/T

HFxQ==

X-Gm-Message-State: AFuF++mA7dgJSxB4HXTU37/o3b0yRM3YHnXeBfvD51o3YARxbGNCZzbF

3rBpNvbbOcHxQm4f+sGj6uKaHaW3iEVxTOr04rsW2h6vshHR6Y23zVJXmF+6STYWr2ID+VNASaj

3z5amgJD7YCUxyzD8S6NNGS3jCmYI4XKU/NXTlPoRnC+Js/o=

X-Gm-Gg: AR+sD113LRPy4XctUs1tPrHc5SBTVTU/v2lAemQ2UWVvKqJepDFJLHZ+F2lqJsVd0oQ

Y913WdcGFQZOx5g6bIRK7vHKQPDa8A2tkWqL6tlCtEXf9h++1IhzkJl3O47q6KDCSy1SIlqhqIe

Cgg6kgF6uMCzX98gndsyhbxjhBS2e3E6z0/spnAtfqtdgQMhiSmJcDeogXMhPFUHaCrxFovpLce

73upCzAOFWoA/5wTr9SQRidpY6XwnH2Zi6pTj9IvwtCiqapMbEb74E9wa/Y9OPVVWTLvTx6Muos

6NI393iQ6ppSYVUoj+hkmyK7twWYN6oI0R/8GOFZq2OXGtH/eCB5DZhK5qAvx1s/dZNj2fFhgVR

xTHAJDDxjZWPgfFn088qA+a8vf8VcqplpuSMEuKd28M0=

X-Received: by 2002:a05:6a00:4c98:b0:84f:dc19:b77d with SMTP id d2e1a72fcca58-851fa011e87mr63961307b3a.12.1787666280376;

Tue, 25 Aug 2026 06:58:00 -0700 (PDT)

Received: from sympatico.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-852102693cdsm4925203b3a.2.2026.08.25.06.58.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:58:00 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: root@doctor.nl2k.ab.ca

To: root@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:57:59 +0000

Message-ID:

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: 5tmxpB2UIF3mU7tutdorh+v+JArcYQ==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=k2f8so7nb9oa4cybskvnpnof9fkgy1"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Doctor has shared a confidential

document and requested your review.



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.230 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.230 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.230 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 URI_PHP_REDIR PHP redirect to different URL (link obfuscation)

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: multipart/alternative;

boundary="----=50sfwru1lgipvhr1jh8ox4od94tjxd"



------=50sfwru1lgipvhr1jh8ox4od94tjxd

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=50sfwru1lgipvhr1jh8ox4od94tjxd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2F39NGOVJk-oryk=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23cm9vdEBkb2N0b3Iubmwyay5hYi5j=

YQ%3D%3D" target=3D"_blank" shape=3D"rect">







------=50sfwru1lgipvhr1jh8ox4od94tjxd--



------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=k2f8so7nb9oa4cybskvnpnof9fkgy1--

NDA phish from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrWv-00000000FDU-2MXd

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:49:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:49:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f230.google.com ([209.85.215.230]:45496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <3AUEyApnHm@visionsurveysqld.com.au>)

id 1wyrVk-00000000EpP-0xAy

for root@nk.ca;

Tue, 25 Aug 2026 07:48:29 -0600

Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1b838f9b6so77767a12.3

for ; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787665647; x=1788270447;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=WYu0DfxZZ8ydIS0KpMPiMODLRRYoAxZubAPXFk9FG5w=;

b=k9T8KRryHvKPtO57kCcACrJgIkNftwA9gAVs3/nj38CZ8RazG2Ed8KMcDD//sGAq3D

RDcyBWl/E46Ug/PJCly+q7Z0TdPZKW1+wO7BYwJZaTe68+cPl8AmWrNmPxja5plGxXTv

tJ/yp4TXjC1LMSR/v848MB7uxG4oovapzoVPbSAPuVicGJmXxCdFcSBEmkW1RhTfsZNA

GR2jmHUAhAuAE6x/gVD4o0ARDRfPd6PlPnf/8BG+OLScEVV4A8qg/8mOqcx/u8AAPlip

tgU2s5k9qHCBnSJAfHml5ruXwuXv9rxXwTA0c5N1sdN0Ps/7WycLes7l7zHQKi/pkub6

mUWw==

X-Gm-Message-State: AFuF++muq4Z9dwg/nKXSCt4hSLsAiXxBn8bt1vnhXpJJ1HEUQFRJ9Lb/

30urXPsoej9U3+eWJIC7yG6ZGCyaXKZ3//6SlJhX92psRDqZJI4wUSth1cnKRQohmrXK03TaVYE

RwdSIFejTMIGHllfr4YuCyqPUg3yVh9n27lozPNEq8KeFkTo=

X-Gm-Gg: AR+sD13RYfqdw2MiS3lXO+9ebBlKHcTqinXskJYMw+lKWPG9kRfQb+phQgCX9iujwHu

9XRC7Oa0lG6wqUuE6uku7parSUpnfQq+nv7v+Mids4V/fr7tnlFg4CmfE5eXSu8QZr3dpH+7NXK

YFY9l3Q7kYlu/XkuyD6l5UF6CS0+mbx19Pr7l4Urnb8shzTEBbBs2x4lWVBdVEKGjYuvKpfmSn2

KTWqI4YKhgmnWpONgKz63xSNLIzMk0qeij4Snax8MPEGBKPlyXwN3nyfCUY1VJw3R4Guc6W9Ps+

1OM7Gew+ttiSx5fORna8g9Dxu280w4lSPR/AqLCTQLXBMUIBlKxUYATDiEMDkiOqNi0+odMBOdr

lX45rxWfVImEWQpgtL+orshtfYhb3+NewB+mwEjzJFA==

X-Received: by 2002:a05:6a21:7482:b0:3c3:b57b:6291 with SMTP id adf61e73a8af0-3cd301b5175mr73552227637.18.1787665647266;

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

Received: from cs.yorku.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc199db38eesm1177634a12.1.2026.08.25.06.47.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: root@nk.ca

To: root@nk.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:47:26 +0000

Message-ID: <2BE989CF30C071E94815BCA1349986E5@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: cB7tpJN3kDXSH+mh7KufTEt/9HFCvg==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=5qfc87p6g6xf8g4p5zun64ub1ub0ui"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Nagindas Khandwala College has

shared a confidential document and requested your review.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.230 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.230 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: multipart/alternative;

boundary="----=eitmqmpltrrolajlvt22jvqouvv141"



------=eitmqmpltrrolajlvt22jvqouvv141

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=eitmqmpltrrolajlvt22jvqouvv141

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nagindas Khandwala College"

title=3D"Nagindas Khandwala College"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nagindas Khandwala College has shared a confidential document=

and requested your review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nagindas Khandwala College File"

title=3D"Nagindas Khandwala College File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nagindas Khandwala College NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=

=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=

=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







s/index.php?thememode=3Dfull;redirect=3Dhttps%3A%2F%2FUHKWcY2M-JAq6--.sitef=

irm.help%2Fr%2Fbcaf2f%23cm9vdEBuay5jYQ%3D%3D&ownerId=3D86595&entryId=3D426&=

ec=3D1&iu=3D1&gb=3Dusr" target=3D"_blank" shape=3D"rect">







------=eitmqmpltrrolajlvt22jvqouvv141--



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui--

NDA phish from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrX0-00000000FEU-0jiV

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:49:38 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:49:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f229.google.com ([209.85.215.229]:60507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrVk-00000000EpQ-0x7X

for sales@nk.ca;

Tue, 25 Aug 2026 07:48:29 -0600

Received: by mail-pg1-f229.google.com with SMTP id 41be03b00d2f7-cbedf318752so3713942a12.0

for ; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787665648; x=1788270448;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6F8waL3bytOBt5nmohB+QfpyghOyUyaRoY2kXiqYAmk=;

b=VGhfjL7qY5qmwgSFEsyLnL7g3O4s8ui6//nYEPfBiZVVhiInuTYnuaGYbhFxh7yv2t

Mo58+CsuX2GAg+TFHTA3PILNzvJhLg6x1CgatVrMm+F5xLmgpwsGA7kGuvOXaI8TEaKB

ifhCThK3ZsGJN+dmAisjVVUgaQP9xJN96EY8tFEjO5UeTqxicvZrlc47edCYOBdGO6Qw

XcuWA1lxlx5Z2qYd97uO5JdcIh7JaDUp5ycuWN1dhhEVARrIUht4wB3vsFiaSDMx42Ph

/iP8rAW7o7U1KcBATaZliPebRu1itDnL2Oiceo0MBxAplwElm49UqKEIn3JeIq5x10jK

SLUQ==

X-Gm-Message-State: AFuF++ljcAxWMb9m422Jg3xkm1lIfV79sVC6JF3qGo+a9YVc6csRvR+l

UWGe60SBSb/fmmSgtuvNjPoz1xgPlLwcdVsVz51ErheXSMfKm0CB0NIJGlbLeFQzLXA5QtjyKq1

bsF27VjpJPr+0ODMgH/VX/RhLNYJYF5SjgH/krVcm3n0Rv4c=

X-Gm-Gg: AR+sD11Xftd7WSLPzK3eowKOMXKY5i4oZDczOTMc2XcEMwf/xO2rRx/ldWJu4p2qe2y

ZFSlNuNQiCiySpEBPqd1Cj1bMnJ8Pkva2dHK3SOK4wuyJ/urvpk3/+GAf2KOnfHJ/dv8AoABdzb

GDSNOtva1HSOaeuUeAdi2bGSYRgTHd7u+J/qPzppy6QwblIbBZ9UegGbHfTlpGivfXXg1DEpIT/

07N3FRylovGpLpmCbj0UsywPHeCxpTjttevGipyGrJ/HxxrhVdv1i7x6yZnSUyCYM0bYIrzS9gz

Pfeb+cKo4cQf5L4ck/Emais6XQHfsu2V9+DZd8WmX5HWtfWENiHEGMJV+Ng+c7xk/cHJHWtJQNX

p1yaps0KXLGBeGZniMp2KHQxoDq90gwMGwff6

X-Received: by 2002:a17:90a:c10f:b0:392:7f74:58c9 with SMTP id 98e67ed59e1d1-396465b298amr15080530a91.15.1787665647069;

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

Received: from shaw.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645cadcfesm1384298a91.11.2026.08.25.06.47.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: sales@nk.ca

To: sales@nk.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:47:26 +0000

Message-ID: <6462DEEDE23FC0CEE394DA35FE7E3BB0@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: NRlrmibyXW78qD1y6O33d+TK850KKw==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=kjilznr9iqaanpykw61q9xkzacmnkz"

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Nagindas Khandwala College has

shared a confidential document and requested your review.



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.229 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.229 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.229 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: multipart/alternative;

boundary="----=f7zgh7evx4kqzelxy6gsxts3x3ujcx"



------=f7zgh7evx4kqzelxy6gsxts3x3ujcx

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=f7zgh7evx4kqzelxy6gsxts3x3ujcx

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nagindas Khandwala College"

title=3D"Nagindas Khandwala College"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nagindas Khandwala College has shared a confidential document=

and requested your review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nagindas Khandwala College File"

title=3D"Nagindas Khandwala College File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nagindas Khandwala College NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=

=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=

=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







ouch_switch=3Ddesktop&redirect=3Dhttps%3A%2F%2FTkZBC16B-APbP--.sitefirm.hel=

p%2Fr%2Fbcaf2f%23c2FsZXNAbmsuY2E%3D" target=3D"_blank" shape=3D"rect">







------=f7zgh7evx4kqzelxy6gsxts3x3ujcx--



------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=kjilznr9iqaanpykw61q9xkzacmnkz--

Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUy-00000000Eq7-28Ff

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f181.google.com ([209.85.128.181]:42459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypjn-00000000BWD-0C35

for doctor@nl2k.ab.ca;

Tue, 25 Aug 2026 05:54:53 -0600

Received: by mail-yw1-f181.google.com with SMTP id 00721157ae682-836f34a0ceaso11463817b3.1

for ; Tue, 25 Aug 2026 04:53:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787658828; x=1788263628; darn=nl2k.ab.ca;

h=content-type:mime-version:subject:to:from:date:message-id:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=CbOWNBMl0OSnQ+eDFsBvVP2tgo9xMecuQSAxFEG+j+w=;

b=RHOnTz47Qe4JxwJZsK3d6wHk29oSYvpU/MRuM9hWLNtroHVhOAQcSlx1a/nli90q6W

lsvCiMMiGGQigEvdH93jkR/udk36Nm81rdC9i/Z/iOKTwGESFhKHnNGtM8E1sT+Sr0m7

zqd1OJM10EkbOCFcqrJHv+yfbp9LvViSVdVUVPw9NfhkZHMOvlHMnHmTYIe/2n4YiU6B

ZbgpfQKn/uEB9kBcgiVFxsGgARDxwy7MWWv9rhqJaDfZDA9X+D+ERAuWMRfNprKdwIW4

gN3mBbp00mKZBmSOY7DcYML2qPJpM0bqk/hd2k/Di++ngsTLKTN8JlelX3E2d62dBuV0

Db/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658828; x=1788263628;

h=content-type:mime-version:subject:to:from:date:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=CbOWNBMl0OSnQ+eDFsBvVP2tgo9xMecuQSAxFEG+j+w=;

b=pEvYk6RXCWYuAC6jwTWvUtUYTLSLn/sBV4JXs8Ib8s0NSOrXybsRV+/1vGUt4kWCk2

z4+4D6M1SZTF5+QOSLXgIOOiimMih4XKid5PPF5DQUTsC3ejrXqyAPrqeXL/NBBzJQVJ

PpyaqvNgQU8KaKNMoV6VvM6/WZ2jAhUFriGkw0UD+wAgT/WE/raUfhAtmuptI1ziutpP

fTha/WySTlORl0w+QXl8ucPm0RcXoaDhMb9/kJoJdqMtGHG6lsItjXjSU7bgi1a6ZRVO

vctxFwhfKlgwrjdoSz7Pu7XyfXDZzrBOGd+FUBdTuNJjNM4xeuz8uYIpuJDkDWjr+UQU

boxA==

X-Gm-Message-State: AFuF++n3Mb6uETM67lslPQmuSGPLXk/YMY8rXXnFKJk4Stw1aeD0HXzi

a8Vk+v/5dJRothewziLnOIUjirTBIPG8jMsUF0s33Dkmb4/ix36OdJGS8YmWXpjdtiAI/oVfSOR

vpg==

X-Gm-Gg: AR+sD12roRxccTIRGiFrBunenWVIXW6RbScCVTymCJSgiaoSEtaNavGe1NOaPTDfess

u3SvXUHguno6hLmIOfwjxZjB111QPen7kIxfrhT1f49BHPt0YQxira60chz2LE1EcC4XCpulDmr

f6kHOCNH18RrOdBAEcfPlBeja5xN8jJoTDcwLfy/Fs+d/Ze2IRx7DOznCcAOQZ/1C1Gh4KQbLu5

ad7dIApmiGdDyOLmNGy3lNkq/4IGjy5dTzZbeVh8HWpYevaFX59h5yPs0xbnQeb8vcazmiKleyb

+mcOaHU7EdGMVrDv3N4B1AqBAnqYgQFs6y9zP+rJnM0ih8DXoOLjYnrMBgw5Gj2xssgSMeYR5xo

OwSjSTwz0P1gVcodt1xOb+ceGh0xvLtHAs1kULHbojTZ+0qyAZrW3W/lCjY6WU2LiwSFhyjMG+a

dLEker/4c+j7Wq2Kd/Asx+3yrepYhU9BIBR3LH5/QjBeSNb+e1RwcBO0UgGPos9u27ikGliOvoC

gKNGadWxZEF4g8=

X-Received: by 2002:a05:690c:e3ce:b0:7dc:1c56:2901 with SMTP id 00721157ae682-8546f6829d5mr26670497b3.1.1787658828332;

Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

Received: from localhost ([43.135.217.167])

by smtp.gmail.com with UTF8SMTPSA id 00721157ae682-84cac201719sm47778997b3.43.2026.08.25.04.53.47

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

Message-ID: <6a8d824c.ff170ad7.1230e3.e75a@mx.google.com>

Date: Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

From: PayPal Service

X-Google-Original-From: PayPal Service

To: doctor@nl2k.ab.ca

Subject: Service Renewed | $494.21 | Ref: I-DUFITU9C5EQ1HA

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary=boundary123



--boundary123

Content-Type: text/html; charset="utf-8"













PayPal Receipt

















Thank you for your payment to



UID445650 BTC Trade Desk LLC





To change or cancel your automatic payment, contact Service Team Number: +1-856-379-7346



Here are the details about your automatic payment for 1 Week Dai...









About your payment


Transaction ID


63K79805KF9658361E





Payment amount $494.21 USD



Total amount of this transaction $494.21 USD



You paid with PayPal /Bank Card



Payment to recipient $494.21 USD



Amount you'll pay $494.21 USD





Your next payment





Next payment due


Next Week same day





Next payment amount


$494.21 USD







Your automatic payment profile


Profile ID


I-DUFITU9C5EQ1HA









To change or cancel your automatic payment, contact at +1-856-379-7346





















Help & Contact|Security|Apps





PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name or email. Learn to identify phishing



Please don't reply to this email. To get in touch with us, Help & Contact.



PayPal Customer Service can be reached at +1-856-379-7346.



PayPal, Inc. NMLS ID #: 910457



Not sure why you received this email? Learn more



Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 6780 Marsh Creek Rd Clayton Ca 94517 United States.



PayPal RT001423:en_US(en-US):1.2.1:c9c0783293d3a













--boundary123

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUq-00000000Eol-2mwl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:54318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypYk-000000009Hm-2nYB

for sales@nk.ca;

Tue, 25 Aug 2026 05:43:27 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so4000251b3a.0

for ; Tue, 25 Aug 2026 04:42:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787658145; x=1788262945; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=M3nHtXX9F4GBGvU99qY5C3Nadi6JbGGNtjcGq0uoWAEqSG3HsFUAsRXPfFYQ5D3WPe

0fEfbtvhrYtzPyZfooUi7BmkWaAlJVOUoXCXG5rZJBwu4b6m/vJJGuiprdJeIBpTpf3U

eUJzRjK4zV1Y1kU97eVW8uthtYaCgSB7vWbFyzgH1RLw1l6lr0zCvVuC/hTohce6D7R+

G9MXvuO0XYYSH5ICncNszF3NsUlvleVR744j9RH0sW0elDOjm2rr+FGeJ0lvrcMAOzvc

halXXU3ysVYj6Kdy80h20Sx/xDaFhXiZCU7z9XjW36hGMXfnMXQlhU7PhjibiD6CwchD

v4yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658145; x=1788262945;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=VL9HCDfFvozbxrvdSd+vNTy+V21uzNrPqLsnL6R6F3PU8U76GR8fcUnMV+NRslvBlU

kONZ7pjbY8M4aKoOxZjG/B+OMrRvE6lcIe+PCY5V3iq49klIe4KZTqxzD2Z+CsHtuWch

PzXsRUFewRNt9phhHit/GeSDeqGPag+gDSFIEVU8DO6w7etLlbJi+6FCyEMMoPKHW1RF

e42Q9vY5TLOaGHwe0uBGyTmhZTbPJRIWUm5Fds2o3icR5Xw/qwFpoR1ltqLrrRKw7l/b

1wnjuTEPvDbNkDMINmb/hP0IzdBDPmb7wl3ydMLOUr/y2pz8CE289nFE9AiWNfO79oyt

DlEQ==

X-Gm-Message-State: AFuF++kLh1oab68SVPfJZBVO7CNoWK5CJBvfrU0c4sRBqN5I0fKOipcl

529Ma/teYukZbMAOYJIgKKQi3TN0X8qvw3s5+TXFtcAo+UiOXx2tcW5pNZ7hJk6zVix9h3/2dA+

pP7+fyN8g1SfxuRy7F7IHL359L54zJQuzWoSgBUB/ObGLT9k=

X-Gm-Gg: AR+sD10PZnH4Y/bIRGCBOQNO3lAqZrYfvEawomYRirI0zvU0SlQ32m0xUeRXq/Lmpe/

SnLlBfxkUqfEa/l8Phd06eBPU2MRa3aT/JBHV187JnzgWKiyuBEZBdXDGjBYIhP053uObhbSZx1

ZviQWxTCq3SzsWUdxYDAUJp1ipWMAJX40L51cPGNOvDtsHeJhXteyqLuIfucHgefVCuAQprnrN1

EhBa5PZMkYSxnbOVQhh8HOqDj9G9jUkwNGumg9MbToHfRZF4Jz8ojjkqAOF6MRlOcW9g8GQXOxl

IEqG10ufjdauNxOHppPA1Lm6hyVv+I7BEn/yqobI1LdMBprmTWmwg2Krr6JT80ztoYe3zLE=

X-Received: by 2002:a05:6a00:1312:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-8520be8f580mr41854347b3a.13.1787658145221;

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-85210950706sm4859016b3a.4.2026.08.25.04.42.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: sales@nk.ca

Subject: DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412

Message-ID: <9b1bc5f2-0a36-12ed-7456-7f3075099b19@sasinm.com>

Date: Tue, 25 Aug 2026 11:42:23 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-c6defda7513583a9-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.230 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.230 listed in bl.score.senderscore.com]

Subject: {SPAM?} DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412



----_NmP-c6defda7513583a9-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-c6defda7513583a9-Part_2"



----_NmP-c6defda7513583a9-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Dsales@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-c6defda7513583a9-Part_2--



----_NmP-c6defda7513583a9-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_373585

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_373585





----_NmP-c6defda7513583a9-Part_1--

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUq-00000000Eol-2mwl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:54318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypYk-000000009Hm-2nYB

for sales@nk.ca;

Tue, 25 Aug 2026 05:43:27 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so4000251b3a.0

for ; Tue, 25 Aug 2026 04:42:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787658145; x=1788262945; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=M3nHtXX9F4GBGvU99qY5C3Nadi6JbGGNtjcGq0uoWAEqSG3HsFUAsRXPfFYQ5D3WPe

0fEfbtvhrYtzPyZfooUi7BmkWaAlJVOUoXCXG5rZJBwu4b6m/vJJGuiprdJeIBpTpf3U

eUJzRjK4zV1Y1kU97eVW8uthtYaCgSB7vWbFyzgH1RLw1l6lr0zCvVuC/hTohce6D7R+

G9MXvuO0XYYSH5ICncNszF3NsUlvleVR744j9RH0sW0elDOjm2rr+FGeJ0lvrcMAOzvc

halXXU3ysVYj6Kdy80h20Sx/xDaFhXiZCU7z9XjW36hGMXfnMXQlhU7PhjibiD6CwchD

v4yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658145; x=1788262945;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=VL9HCDfFvozbxrvdSd+vNTy+V21uzNrPqLsnL6R6F3PU8U76GR8fcUnMV+NRslvBlU

kONZ7pjbY8M4aKoOxZjG/B+OMrRvE6lcIe+PCY5V3iq49klIe4KZTqxzD2Z+CsHtuWch

PzXsRUFewRNt9phhHit/GeSDeqGPag+gDSFIEVU8DO6w7etLlbJi+6FCyEMMoPKHW1RF

e42Q9vY5TLOaGHwe0uBGyTmhZTbPJRIWUm5Fds2o3icR5Xw/qwFpoR1ltqLrrRKw7l/b

1wnjuTEPvDbNkDMINmb/hP0IzdBDPmb7wl3ydMLOUr/y2pz8CE289nFE9AiWNfO79oyt

DlEQ==

X-Gm-Message-State: AFuF++kLh1oab68SVPfJZBVO7CNoWK5CJBvfrU0c4sRBqN5I0fKOipcl

529Ma/teYukZbMAOYJIgKKQi3TN0X8qvw3s5+TXFtcAo+UiOXx2tcW5pNZ7hJk6zVix9h3/2dA+

pP7+fyN8g1SfxuRy7F7IHL359L54zJQuzWoSgBUB/ObGLT9k=

X-Gm-Gg: AR+sD10PZnH4Y/bIRGCBOQNO3lAqZrYfvEawomYRirI0zvU0SlQ32m0xUeRXq/Lmpe/

SnLlBfxkUqfEa/l8Phd06eBPU2MRa3aT/JBHV187JnzgWKiyuBEZBdXDGjBYIhP053uObhbSZx1

ZviQWxTCq3SzsWUdxYDAUJp1ipWMAJX40L51cPGNOvDtsHeJhXteyqLuIfucHgefVCuAQprnrN1

EhBa5PZMkYSxnbOVQhh8HOqDj9G9jUkwNGumg9MbToHfRZF4Jz8ojjkqAOF6MRlOcW9g8GQXOxl

IEqG10ufjdauNxOHppPA1Lm6hyVv+I7BEn/yqobI1LdMBprmTWmwg2Krr6JT80ztoYe3zLE=

X-Received: by 2002:a05:6a00:1312:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-8520be8f580mr41854347b3a.13.1787658145221;

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-85210950706sm4859016b3a.4.2026.08.25.04.42.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: sales@nk.ca

Subject: DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412

Message-ID: <9b1bc5f2-0a36-12ed-7456-7f3075099b19@sasinm.com>

Date: Tue, 25 Aug 2026 11:42:23 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-c6defda7513583a9-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.230 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.230 listed in bl.score.senderscore.com]

Subject: {SPAM?} DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412



----_NmP-c6defda7513583a9-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-c6defda7513583a9-Part_2"



----_NmP-c6defda7513583a9-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Dsales@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-c6defda7513583a9-Part_2--



----_NmP-c6defda7513583a9-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_373585

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_373585





----_NmP-c6defda7513583a9-Part_1--

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUl-00000000Enb-0Rp6

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f103.google.com ([209.85.219.103]:59726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypMw-000000007Ev-04L1

for root@nk.ca;

Tue, 25 Aug 2026 05:31:14 -0600

Received: by mail-qv1-f103.google.com with SMTP id 6a1803df08f44-8eeadbc5e21so25433906d6.3

for ; Tue, 25 Aug 2026 04:30:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787657413; x=1788262213; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=f0+RkFzcecWFFLyJXmiCRSmVZkqjUAFC0UnKiJr1oNU=;

b=RDFR6X4Pfc0yBtzpsmTyPnRc0kpReWnaKWOdSuvKrYRHrjRUAoT5g2KGIxn8wB+Tje

70GWW5HzaZwre4BA/OIW91qcOJJ3qGBWuEMYIKkhyU7RVlwro02k85aLgOn05ZGTqYa5

ZP/RJeRyB02p8PrfNw4487rR6NN/ACfcK8EWioATwNtZS//cMt0mO6hOZDL0g9soyO4q

I//FAGMk95sOoO9ODLBUxlJPB+14sg1f6Ye22MpVgqTgYDSlD773uNqbEZBKw8qc01I0

eW91nFzAEowx+DUCkE7eJCOtulf3W3906BTyUiQ6KXbnIOda/qZu6WWpAYF9wYPgGdEl

5lWg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787657413; x=1788262213;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=f0+RkFzcecWFFLyJXmiCRSmVZkqjUAFC0UnKiJr1oNU=;

b=VYzqMVTedkAZE/kv4jjf56AbJPyOXcbkT9mcTGpDTdw1VZTwNIPITiezxl+kd1rw48

wOppfaqNC2k28/qf3RQt6PrL6NOQc2vu4qB+2MG5R0FJ0bqX7tKbYZtUeV4PlpE2ugTm

Zu/Wd2aGc5hCd2/UblDbr/iUnM7D6e+Qe1F/TDB9Pxas9SyPin0RmuUVdtUzTYAlnbC+

S6y99gR3NsmW/1oVpvVRMf78T7BmceRyrEjm2unMX0JiZKO0GUSvqbKCqEyDoh/H//rx

Y01OkqFO8ZC+hdnedZbXWhiVDDjiJD2eSkT53lS8xcNWDU+X2ntDStpdj8iZVtsnUVMc

Pf4w==

X-Gm-Message-State: AFuF++l9/oSMwRy5UJhnTsbCLsn17XawmQchk6Vu5vgngz2pC7bWgLMD

E96gJMgCKiITi/WgHXa1J+2jMSA22iUMHd0Vq+oZVvlwh6qbZpvqBOIvWc3UZ0rwmCYGVSlzaSO

TwfU/VyxiwBA+PFtZ1MDXXG8oSfKHnmydjNMn/L3EkVYmwAw=

X-Gm-Gg: AR+sD12lYU4yGEdvKO2ODMJ9gfc/Idw0Oo3DVGj6dwXq3pXpH660aw56uIciZP4ew7n

8FfXTK8C5OSrZCn4tZTf+u9pJzofl6eQRCE7AKZvRv+qRdVYPkSV4ntFLiF4lv2chajF2uBwtwm

4wfLOvPwBwBVVupElCeljpdpRIsIPP/X7Z8wMbZFBQVkagnF+daPZQe2IUmHx2A7SYmmRpCGkdj

IyRJGwQ5xitaHkLhK+aXmd7ptZTC8cGImPdRIYIL6PUhCCqAk7Qejx4uKhnALQzEAR4/5rseoH6

bL+b7DClmvTZ4wKLCx8D2jX3dQBl8K7s18qxEKimgfJ45nc3e9jX/8dwiB7fmIg3nGcjkf4=

X-Received: by 2002:a05:6214:5005:b0:907:b32f:9b7e with SMTP id 6a1803df08f44-90cb7859d03mr52446216d6.11.1787657412651;

Tue, 25 Aug 2026 04:30:12 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id 6a1803df08f44-90cc290776csm20686d6.8.2026.08.25.04.30.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:30:12 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: root@nk.ca

Subject: DocuSign Payment agreement - contract for root@nk.ca Document

Review. #059412

Message-ID:

Date: Tue, 25 Aug 2026 11:30:11 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-666d51dd9f585c14-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.103 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.103 listed in wl.mailspike.net]

Subject: {SPAM?} DocuSign Payment agreement - contract for root@nk.ca Document

Review. #059412



----_NmP-666d51dd9f585c14-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-666d51dd9f585c14-Part_2"



----_NmP-666d51dd9f585c14-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Droot@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-666d51dd9f585c14-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-666d51dd9f585c14-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-666d51dd9f585c14-Part_2--



----_NmP-666d51dd9f585c14-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_727945

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_727945





----_NmP-666d51dd9f585c14-Part_1--

Loblaw Bread Settlement Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUa-00000000Ely-2d4n

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ak116.secure.ne.jp ([150.60.159.115]:51549 helo=mta.ak116.secure.ne.jp)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyonk-000000000cY-0s98

for root@nk.ca;

Tue, 25 Aug 2026 04:54:54 -0600

Received: from ak116.secure.ne.jp (localhost [127.0.0.1])

by mta.ak116.secure.ne.jp (Postfix) with SMTP id A5C5D2E8F08

for ; Tue, 25 Aug 2026 19:53:54 +0900 (JST)

Received: (qmail 67167 invoked from network); 25 Aug 2026 19:53:54 +0900

Received: from unknown (HELO EC2AMAZ-DC6VTIU) (webmaster@itns.co.jp@15.152.53.28)

by 0 with SMTP; 25 Aug 2026 19:53:54 +0900

MIME-Version: 1.0

From: "Settlement Purchase Information"

To: root@nk.ca

Date: 25 Aug 2026 10:53:54 +0000

Subject: =?utf-8?B?Q2FuYWRpYW4gUGFja2FnZWQgQnJlYWQg4oCUIFNldHRsZW1l?=

=?utf-8?B?bnQgTm90aWNlIDogUmVmIE5vwrogMzgxNjgyNDUxNCAvIDgvMjUvMjAy?=

=?utf-8?B?NiAxMDo1Mzo1NCBBTQ==?=

Content-Type: multipart/alternative;

boundary=--boundary_9533_07120958-0afe-4bb3-b342-29acb8b9cf26

Message-Id: <20260825105354.A5C5D2E8F08@mta.ak116.secure.ne.jp>

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">




Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[150.60.159.115 listed in list.dnswl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[150.60.159.115 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?Q2FuYWRpYW4gUGFja2FnZWQgQnJlYWQg4oCUIFNldHRsZW1l?=

=?utf-8?B?bnQgTm90aWNlIDogUmVmIE5vwrogMzgxNjgyNDUxNCAvIDgvMjUvMjAy?=

=?utf-8?B?NiAxMDo1Mzo1NCBBTQ==?=



FILE NO. LOBLAW–WESTON / 2008–2026 ONT. S.C.J. · QC S.C.

SC





Notice of Settlement



Loblaw/Weston Packaged Bread



You are receiving this notice as a party identified to have claimed a $100–$200 Loblaw Card under the Packaged Bread Loblaw Card Program (2008–2026), and/or as a registrant with counsel of record in this matter.



Authorized by the Superior Court of Justice for Ontario



Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.



The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.



Settlement Ledger

Total settlement fund $500,000,000

Already paid to date $96,000,000

Eligible purchase window Jan 1, 2008 – Dec 31, 2025



If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.



Canadian Settlement Class Members’ Options



If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread within the eligible window above, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

Apply Now



For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca



A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.



Class Counsel of Record

Strosberg Wingfield Sasso LLP — www.swslitigation.com

Orr Taylor LLP — www.orrtaylor.com



Verita Global, LLC · Claims Administrator



P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com



Unsubscribe from these notices



-