WEb/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on
------=_NextPart_000_34E0_01DCFDDF.718E2E70

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'>Hi,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'>I am waiting for your reply,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'>
1.0pt;padding:0cm;background:yellow;mso-highlight:yellow'>Please let me =

know! May I send you a quote? SEO Packages and Price list and Monthly =

Offer (low Cost) more information?


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal;verti=

cal-align:baseline'>Thanks,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>Ava<=

/p>


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>From: Ava


class=3DMsoNormal =

style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>To: “root@nk.ca”


class=3DMsoNormal =

style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>Sent: 16 June 2025 10:55


class=3DMsoNormal =

style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>Subject: quotation.?


class=3DMsoNormal =

style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>Hello,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>I was checking your website. It looks great, =

but it’s not ranking on Google's 1st page.


class=3DMsoNormal =

style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>With your permission I would like to send you a =

Price List of your website?


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'><=

span style=3D'color:black'>We can place your website on Google's 1st =

page (Yahoo, etc.)


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'><=

span style=3D'color:black;background:yellow'>May I send you a =

quotation.?


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>Thanks,


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'color:black'>Ava



------=_NextPart_000_34E0_01DCFDDF.718E2E70--



WEb/SEO/App spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jun 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZYkp-00000000IGS-0TXs

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jun 2026 12:43:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Jun 2026 12:43:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f169.google.com ([209.85.214.169]:56736)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZX88-000000006oL-0HdN

for root@nk.ca;

Tue, 16 Jun 2026 10:59:26 -0600

Received: by mail-pl1-f169.google.com with SMTP id d9443c01a7336-2c0c2d792c8so31321135ad.1

for ; Tue, 16 Jun 2026 09:58:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=newedgetoyourbusiness-com.20251104.gappssmtp.com; s=20251104; t=1781629105; x=1782233905; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=9LabbkvRhDMuELieDlKnbWTvcmAlPCCXVnerMO9pCjw=;

b=FlV8WdShXpUaHdRBrlKTNKMaPS6EAwOvsXIE6wOunSdtV6/M9C5pNrKCHD2IOnSfd7

NelWUwFUxy5TImvFweQF13aZo7JPrB8zeAU3K/rzvVZU6aFfJzLEsOZKlGtkeABiWf9Q

p2Jv2qGu7IptviPUCMG+wjCltAR+a2kfVCZVLZIHggzWboTS0ZuESyOZzMB2TgY1+Yi7

45yysPQy3wxALlyTj10Zo76jlmTWcsquD70ANh6uRyZSNraFl3sY1JyOQ9tJL6JGaLfW

LIaQaRzJ5lF+9KPivQ6J+V99niG/QPdO4EkyzHC7qi8ipFGVjkglXjM1m5nj38goQ+kS

9L4Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781629105; x=1782233905;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=9LabbkvRhDMuELieDlKnbWTvcmAlPCCXVnerMO9pCjw=;

b=CjZUh+RH4pmACkEgwVBbOw+KN0y0QSb5MKX9vU4bQAutCilXfuc4iBEkDtKz/QEVLV

RkcpZBQHbtosaprBGmB5CJRYwNJE4naA5MuevceZVjDzxk3qjJjNIaofvQKaly52djEx

F0Vc9tozE0x9mXWcspzGH0KvFPlyMNNe3H+rITacRJLF0MaVWs3hygzmNkKIvmsAbTK5

p3AqPNukGA/PZSHzYFYyOP7D9W6vCLaczq7UK6ruzp3GelZ2N3lTYHI4s498E3Bt3siw

KVPhnBe1U0q3yee0VeBkS0GZPxrwFxWEHo4I8eSgeS91mjC30P+lG8LgYotRfN6h4wF4

zhAg==

X-Gm-Message-State: AOJu0YyyeY+xjPBRaV8nILyW/g9bNpwCuxkE25zafMnlFFrtZfpannOt

/CP1FCbcucQSAqm4z4HViahntKOF4RdSmbu3lNuHN53b0TWw+WQYyY7pHNdXK2sSdpYrA8pBBV8

kBpCK

X-Gm-Gg: AfdE7cnxjGKdcgn9CwYW5jD1tsAJnZCeUn/Od6ZKnbx9YhzqifoitdsOxra0xqUZEnx

gJt8PwEfj67h3PrqV7YS3Jf64Eja1aYaqF2VYGduw8KI1uSE5Btw4mL6kc7o/goKXUvBXf9zhA1

JH/EJ74As/O8JukUA0l/nXhB50jHDWZ/r43keFoZ6N2glcvYaQ+ehNH5QBCsGAq5y+pTd8wY3Ue

fu9zN4UczaFiwakc+0buavIhYgd1Z8/cZMm5OwvsZb6TjKdn03fZKhM/4Jwy+sSsAtuAQspkYU0

gNj2STO7Lln6q/PVHgmducd0vabroO/yv1vRWIjgyrMjAdj6Jb/3uqQNiR8N4XBBlCR6fzcOfVC

zJKAr3N/8T9jnA27wn4rAA+pTNyHNiCZ/ldI0rTxK1Pnc/2u0xGo5mLnmk+lEFdz/0AiTTAUDPs

evnKF1F946Zg9RQv5fvQPsQNHJSBXiQyfMaMdx+cwxq6riRPrPxULD

X-Received: by 2002:a17:902:d583:b0:2c2:bd05:dac5 with SMTP id d9443c01a7336-2c69a1679admr46607005ad.19.1781629104866;

Tue, 16 Jun 2026 09:58:24 -0700 (PDT)

Received: from DESKTOP3QQRH3B ([103.69.244.41])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2c433460a60sm166990825ad.76.2026.06.16.09.58.23

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 16 Jun 2026 09:58:24 -0700 (PDT)

From: "Ava"

To:

Subject: Re: SEO Monthly Offer .....

Date: Tue, 16 Jun 2026 22:27:05 +0530

Message-ID: <34df01dcfdb1$57d5f270$0781d750$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_34E0_01DCFDDF.718E2E70"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adz9q2oM675PF0vqQ4GwTPt2hRfSkg==

Content-Language: en-in



This is a multi-part message in MIME format.



------=_NextPart_000_34E0_01DCFDDF.718E2E70

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I am waiting for your reply,







Please let me know! May I send you a quote? SEO Packages and Price list and

Monthly Offer (low Cost) more information?







Thanks,



Ava







From: Ava



To: "root@nk.ca"



Sent: 16 June 2025 10:55



Subject: quotation.?







Hello,







I was checking your website. It looks great, but it's not ranking on

Google's 1st page.







With your permission I would like to send you a Price List of your website?







We can place your website on Google's 1st page (Yahoo, etc.)







May I send you a quotation.?







Thanks,



Ava

Web/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
--_000_PUWP216MB2577EA4345650E9D9F2BCDA3F7E52PUWP216MB2577KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,





I hope you're doing well.





I=92m writing to introduce our affordable professional services that can he=

lp your business stay ahead of the competition. Whether you need to improve=

your online visibility or enhance your brand image, we have the right solu=

tions for you.





We focus on providing high return on investment (ROI) strategies that fit b=

usinesses of all sizes.





Can I send you a quick overview of our services and special packages?





Best regards,



Jack Smith



Business Development Executive



--_000_PUWP216MB2577EA4345650E9D9F2BCDA3F7E52PUWP216MB2577KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">





Hello,








I hope you're doing well.








I=92m writing to introduce our affordable professional services that can=

help your business stay ahead of the competition. Whether you need to impr=

ove your online visibility or enhance your brand image, we have the right s=

olutions for you.








We focus on providing high return on investment (ROI) strategies that fi=

t businesses of all sizes.








Can I send you a quick overview of our services and special packages?
>






Best regards,



Jack Smith



Business Development Executive









--_000_PUWP216MB2577EA4345650E9D9F2BCDA3F7E52PUWP216MB2577KORP_--

Web/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jun 2026 10:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZX06-000000006CA-2rxr

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jun 2026 10:50:58 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Jun 2026 10:50:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011024.outbound.protection.outlook.com ([52.103.74.24]:10414 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZWOS-00000000Op9-1Cpk

for sales@nk.ca;

Tue, 16 Jun 2026 10:12:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=fDHm5kDoknYks+3LDcom4Hg3/ik+iSwaLrSvBKL2JKNY524HrhQiCxQMoe93WdUT9t6een4uLYFY7dTbg4bmvzPJt1otBxvPJ1UuONn8uInigcKnKgm2DpX9ZFQ6QZk6K7pXpg3G8/7w4plbi72Sz188/33XtL14a3Qh1KMioAcEjScl0zdxA3x5cwsW8TRjQ1Np2uAVtGT5UTvrwo9S6/Wt3YYfbNWD8+z5GpA1dZxYHRcRV4w/KJQ9XLM8FdWI/4tIjiKcms/uej/RZeQlk0vED3U7GfqFfMxWu0ap42XGiIiZVeNyNqUaWQYveQAzcaQfy+HQMcBs+yTPk9OCOw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=S3OifsEDTQr8MSulouM7+G5byte9AqD+xnydPdKPTL4=;

b=u33TX1GHuQETi9u2U+abjBK4kHQ/0uWf0TAfLVU7tFj/If/6qtwoUvJba8Dhci2jbDn55W/HUCTHABKfdFN+qHLjcZ+1L4C0BJHUM+R4Qk0iRcvkAo1blZGY0Y5yqazCO7HrCfNjOBJmN/lqQrV/R14aNOMcfLX6FyKI7vxbdHLmWaU8aXXvOr+Dn07DmxZ+obL1RS8+AoZ6mbbIltQLPGU85ady5ofKT2qQLfY6H+eagLo058/YCf3nlzHJYmHJjBN2yx7S8H7U1IwgL8bzidda/LCsMb9fL5qzUrQ1+bf5y3iTIQ3SCgtNQJMwFacPTTfoWkp3B1iHDKkwmIS//A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=S3OifsEDTQr8MSulouM7+G5byte9AqD+xnydPdKPTL4=;

b=owwpJLjs/9yKmKNe3uGnlCwN/p7b74tmdwQiGyocVjZtQ2Nai2vltH67aEaZpaA7dTYsHkwK8d1Qayn6tqEy8bDhAFZ2OzB++zBzVfgDNEM9SMftZIuVJv5GTOq1Tt44CSc48BwxlU041lPpCe54rVfK1u/uPntM4RMkkdWdxWxvUy6f/EjjtRiyN/wbKcLipZ5bSXlzh7yYSouEScY2lKRLPYmfP2FahERmZnpUb0mzn+M3pp26tTZOTcKDR3jEFWICKH28g/qL7c54qrB3JCUE5dKU2MdEBuCgITKm0Iog8p7RXF0QueHzkGweD0rFoXEVx8jb+GX0AGUv2NrvCA==

Received: from PUWP216MB2577.KORP216.PROD.OUTLOOK.COM (2603:1096:301:13a::14)

by SE2P216MB3478.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2f8::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.18; Tue, 16 Jun

2026 16:11:07 +0000

Received: from PUWP216MB2577.KORP216.PROD.OUTLOOK.COM

([fe80::7503:ac5f:adae:31bd]) by PUWP216MB2577.KORP216.PROD.OUTLOOK.COM

([fe80::7503:ac5f:adae:31bd%7]) with mapi id 15.21.0113.015; Tue, 16 Jun 2026

16:11:07 +0000

From: Jack Smith

To: "sales@nk.ca"

Subject: Jack - Reach High Value Prospects

Thread-Topic: Jack - Reach High Value Prospects

Thread-Index: AQHc/aq9PEGTvNR1dkWVUU3FNG8L8Q==

Date: Tue, 16 Jun 2026 16:11:07 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUWP216MB2577:EE_|SE2P216MB3478:EE_

x-ms-office365-filtering-correlation-id: ad482a10-f9c8-43c1-9c62-08decbc1df98

x-microsoft-antispam:

BCL:0;ARA:14566002|704163111799003|37011999003|2604032031799003|41001999006|20031999006|15001099006|24121999003|39105399006|22091999003|25031999004|31061999003|12121999013|24071999003|19110799012|15080799012|8062599012|8060799015|16051099003|38102599003|55001999006|19101099003|40105399003|440099028|3412199025|102099032|25131999003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?8lxNCiJ8kWTYsObjboxL3EUp5bHNX7LYEwMtysstW0+zbXWwGFdMUH3a?=

=?Windows-1252?Q?3b1ObtwEOj6dhjZ4Q4R7uhzcQsflmx2jYBurgR6e07ZwiRaHHkHDJqFN?=

=?Windows-1252?Q?4uTWV23CdpzCvTxG9H1LzX0X525F2DlAPF9bVJnpjzDkViJ4+rNxIZXv?=

=?Windows-1252?Q?/9NBVOJAq50cyujR+RgCd8dnMTYH/wjHE0OyL3tu4qbAe07h3qNe6WrN?=

=?Windows-1252?Q?x1hpN8ZJ3RHWDLbaopi2XQzxeKasMS+Svzo/VOVUyNkU9HaOYzifNhyI?=

=?Windows-1252?Q?/+HClB6znkvEH/YPPEmRQsjVVDLYucQ4b4LoMnp1HcFjO23cjfhdV7/P?=

=?Windows-1252?Q?MoQhTnB+l6LIIAT0CCwqj3kEUUfULNcfL+ds2astDdVtAMmUSQO8E1wg?=

=?Windows-1252?Q?VaO9IAFWWXYyLxopIPQsi00MDQTslrt6gLt5QaZjVQUWoDCrze1ME02Y?=

=?Windows-1252?Q?G7C62gYQzS4jZ2wuhaHfBuh0eLR9OTNsRc/DfOMpXxmNorgg+LYx4uXu?=

=?Windows-1252?Q?bulvrUmDebiYq+MkVtbbvp3CCngZI6fgdq7pPppPR+c+5pzrCLm1EXDl?=

=?Windows-1252?Q?c1LEJoIB/MErDGq/lsMEGG1yxJfMsyhiK73kKMpY+BSycZmfCjmIb/uF?=

=?Windows-1252?Q?vNztW2NPrCdXFlCpfA0mMd5TZ0CCKVnlxU1/MyewT1T3Wukx1KTQmC5a?=

=?Windows-1252?Q?C2VhprDlMX6s1tNHykQCencbhDq1Fvwxyu6iH8YX5rXctFd8SL0S/RHR?=

=?Windows-1252?Q?mIgDJLFThmQbz3X624ThgvKElCLhNQFa7oBgieuZg5sIRDnaxTqQELmC?=

=?Windows-1252?Q?IV93KI57tS84uufYNCBvryqvr24/nKUQWBX2T9OLH1DV6t+jSWhPYo0Q?=

=?Windows-1252?Q?HuI4OcIL7qto6HOu/eS5Aub4bRX/bMKlOZfSb42FMcF2fKNCSQw7RtXk?=

=?Windows-1252?Q?mgkwxV0fait4WM+auYeJg0eTEY/lhGUISS/plsHhZD6PeRdQJIlDfeQl?=

=?Windows-1252?Q?0TFliHBW/x6Of0ZdkB8REG1uiDdMcE/9hK/nhKj8LNGK3Yzec7AayBxk?=

=?Windows-1252?Q?cHxDz3iAyCoCMtEhDcM81y8/qYnnqQScLFW3MijgedBAlY3HQFNGZLWA?=

=?Windows-1252?Q?PHVmzJDGZq6z7m5gotZ6NAAZN0tzGIHrcL7EKHeFwsx8RYjXiUGTcoIo?=

=?Windows-1252?Q?83haPv8iVlvghs/ckzFtu56Ys0VfOIAjzFssjoONaELuGvEzizPr9QT/?=

=?Windows-1252?Q?XUDEmPqWEkPSJF2STvWSVBjQN+rwef8KuBfWPJ1ZxDp1Fe0t42YDcxVW?=

=?Windows-1252?Q?b6HR/Aet4ueENYlpDwM0fU9ujHy/nkFnFIcGZk71YLCEKm3+D5QXSSUf?=

=?Windows-1252?Q?lgCH4Gosd1dOq0wOhD27Eh/em8mnCvCekVgLbRJpe5oqKvsQnA9b8T17?=

=?Windows-1252?Q?kOVe2JXqT1Frw6AQ0szIV7/g4c/Sb5VKwlHvyIVXPIiMtso7/yFIxmtP?=

=?Windows-1252?Q?Rk7W8I82VJijspU8DHQdukfS+YMAMY1mIRKCuCTjpT7H8OlI6XKF+ljn?=

=?Windows-1252?Q?F3CKxZmH+ltIrd8r?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?36tplEQqqzcBFUXz7MYJhzW4eY0vCB+N+3CXEoSHDBmh88XCNSIYtC1o?=

=?Windows-1252?Q?XsbjMg49bLbiKW9/mrtX80ROqocGj//WZMY5oNiY4bLozIZ4EuCGqaFP?=

=?Windows-1252?Q?14x3vshIfgs+DAvbrRzBW0VumJD6EOAIUEAgi/H/CQjfB7BUzHLm9ejo?=

=?Windows-1252?Q?Np1tXy6Kdc4Hxj5O3qWkhVzeb2ctOetARQKWNZ0kaBPEjbmqhHn2H3sS?=

=?Windows-1252?Q?k/QrILycNlFRSq3lLU2lia33XH72/tBFL4JrjpTL7B8zq5/w+dJy6Gkf?=

=?Windows-1252?Q?SnnLzT70hablBBC6tQidsqfLdb8B6dBft1lQ9wOkuW9hFASmI/Kk2TDW?=

=?Windows-1252?Q?CQbtzLnPidZV1XhkEGZVODsCDsI8exMGJKKxEVA95sPMP2yh5IpmvlS2?=

=?Windows-1252?Q?E47T7r+Hqf9RfgXPbDm+/h2Zs9fpIorvFHXawG7yM9fTrAHbN8CgsYcq?=

=?Windows-1252?Q?yb5KfMA0/7ZICGfYh+sc+4kZijwI2W+PReH5a0zFC3bQPjk8Q9sj299H?=

=?Windows-1252?Q?cwN3Plb+8w60zFXmVgtIdBZJwKM/sj78rVCLcvp+i44EN2z9zsrJQLwq?=

=?Windows-1252?Q?lbFKwkeC4kGgjstM8hMIWSDqXa8bEf5FEuOzm6OAMMnSDydISJDHrv9C?=

=?Windows-1252?Q?ADZ0HgwFewonjc5AcxdgceCf6Owtrwww750i6Y20RQq54cdluW+PO9Ex?=

=?Windows-1252?Q?UUIEpzMRQD3KHg8yHI4WnhENSjlJ1ot0XE4lcMnpp9x1yWthd/CEvZQD?=

=?Windows-1252?Q?g4qZtxXGWIwnUGtSuVh+b8CCvQvYjWNp9Syq5OrOIpzuXZ37++LIllyA?=

=?Windows-1252?Q?c55tYFYfgLZsxWAB2i4x/SWvSVNllD3c7eLtqaCRc+sP1+dUdPAYbJjY?=

=?Windows-1252?Q?MikkTZ/iBqg4cS1mp4PWuCV7PrdWZazsfGy1Sr8FJBKaniyT9YwuDchj?=

=?Windows-1252?Q?AAozRapL/Y/wJR8bogisovsWFNtNTidYg8I/6zEmikNiiXy3n2bJyMqD?=

=?Windows-1252?Q?rMVc4SwykXX43dMSyp4lKtYH+gVDJv2oaOE/PzehHDDq2DssSa/bDA+Z?=

=?Windows-1252?Q?QqDHQ6/WMMBZ1AO5GGsg0vgmtvhj4+14UKJK7O7UHuiMrUFu2vfrlH09?=

=?Windows-1252?Q?R3VUS4XjRveU1CojRyTQrS6uS6PcWPlDeLtuI+/Ag788YSYDXQENiNtR?=

=?Windows-1252?Q?Q1lgauFGCLpzedcr9Hi73/aWONGBlMgxYITaNVOWH6/lhwgtIYSCk4vE?=

=?Windows-1252?Q?knQ5oXfU/ahjcJ5rDI7eMCBFxh1MaOITr4cRk2NyLI/U/hvrTi34CTKr?=

=?Windows-1252?Q?Im9VBVb/LqNgA8zXec9ffSjIJueMFW5RHY/PPhCc3UYqNcku7FbO4DCE?=

=?Windows-1252?Q?p6EOQGpvfFvBxqg9wEjho/cACFSTAN7/tBgRJlNicXDjcR9vknvjFVA3?=

=?Windows-1252?Q?YnMxCHPwHyjd0/p13v9/3D9hfBXtvuQFivUFRKZ3QEDyHgMPIUly9gdC?=

=?Windows-1252?Q?ZnBXq2vK9XNo/z5O3TeBFDk1+S/7mA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PUWP216MB2577EA4345650E9D9F2BCDA3F7E52PUWP216MB2577KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUWP216MB2577.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ad482a10-f9c8-43c1-9c62-08decbc1df98

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2026 16:11:07.3116

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE2P216MB3478

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jun 2026 06:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZTNU-00000000FvE-16jx

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jun 2026 06:58:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Jun 2026 06:58:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-123.dm.aliyun.com ([140.205.208.123]:55868)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZQdg-00000000NN1-281J

for root@nk.ca;

Tue, 16 Jun 2026 04:03:33 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.ikinginsulation.ltd:vip_edm_WebBatch:410132

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.ikinginsulation.ltd; s=aliyun-cn-hangzhou;

t=1781604148; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=h1KTnsVehmofLzNl3cKpzRpmtLli0iro9EaOYcblZQo=;

b=I/gu0qfDkaIbQDTEdi+nMftysJtOD1cYIKrjki7XvAwcZMxIlirVmQl6MitIgfqtL1HxhbloPWDoxonAkwPz7rKie8vesGrXLgJfnl3LTm/1fJtZWj4uNJQbf2Fx2jJ6XaPaeiCVtmawu6KRfYkdF7S1MsiRofTwk243B2UHHz4=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1781604148; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=h1KTnsVehmofLzNl3cKpzRpmtLli0iro9EaOYcblZQo=;

b=1idqRio039ghLDjXMaVNwlN+ljFy6gM+sQaKBQFLLF+vlXN2eInHV0hDh6h3YLwG8zAF8CxZXP3zoVjlxAENjGL3hDNTEAwem8uVZzkkodh0IQ3Py/ZDr2GxSegmuWHJWLdDkVPQSFQYk3AaaeFDVHRKdVdA7YOpO0DT+Kflojk=

Received: from chitu-hsf(mailfrom:vip@vip.ikinginsulation.ltd fp:ma_600000319028314422 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 16 Jun 2026 17:58:35 +0800

Date: Tue, 16 Jun 2026 17:58:35 +0800

From: "Nancy Yang"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?Q3VzdG9tIFJvY2sgV29vbCBQYW5lbHMgJiBBbGwgQWNjZXNzb3JpZXM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000319028314425

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi dear, Buying rock wool panels and matching accessories

from different sources often causes installation delays or mismatched sizes.





Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.123 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

[140.205.208.123 listed in dnsbl.ahbl.org]

[140.205.208.123 listed in dnsbl.ahbl.org]

[140.205.208.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.123 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?Q3VzdG9tIFJvY2sgV29vbCBQYW5lbHMgJiBBbGwgQWNjZXNzb3JpZXM=?=



Hi dear,

=



"font-size:12px">Buying rock wool panels and matching accessories from differe=

nt sources often causes installation delays or mismatched sizes.


data-path-to-node=3D"11">


a-path-to-node=3D"12">We, IKING GROUP =E2=80=94=

=E2=80=94 provide the custom sandwich panel=

s
ex-in-node=3D"66">and pack all required flashings and =

screws into the exact same container according to your project drawings=

.



span>

Your team =

can start installation immediately upon arrival=E2=80=94no local sourcing, no =

downtime.


>

If=

you have an upcoming steel structure project, simply share your drawings with=

us. We will verify the matching specs and send the complete details back to y=

ou within 1 day.



TSky2/Sandwich-panel-and-Accessaries.jpg" _src=3D"https://i.postimg.cc/QChTSky=

2/Sandwich-panel-and-Accessaries.jpg" referrerpolicy=3D"no-referrer"/>

<=

br/>


nv=3D600000319028314425&mac=3D410132&mf=3Dvip%40vip.ikinginsulation.ltd&msgid=3D=

d11b1bac-1c78-4ab8-953b-625b3afde3da%40alibaba.com&sac=3D0&tag=3DRockwoolSandw=

ichpanel&tid=3D2527540&to=3Droot%40nk.ca&tpl=3D&ts=3D1781603915&type=3D1&url=3D=

&v=3D1.0&sign=3D3ce4c5cffcb05941000032fdcef19b33&urlts=3D1781604148" alt=3D"" =

style=3D"display: none; width: 1px; height: 1px;" />

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jun 2026 06:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZTMx-00000000Fsc-2CBn

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jun 2026 06:58:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Jun 2026 06:58:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8246.xmail.ntesmail.com ([156.224.82.46]:19422)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZPUY-00000000KOg-3akx

for sales@nk.ca;

Tue, 16 Jun 2026 02:50:05 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_269597_2103876792.1781599735618"

To: sales

Subject: =?UTF-8?B?SG9tZSBUZXh0aWxlIEZhY3RvcnkgZnJvbSBDaGluYTogU2luY2VyZWx5IEludml0ZSBZb3UgdG8gVmlzaXQgVXMg?=

X-Priority: 3

MIME-Version: 1.0

Received: from nidonghui@aimaylai.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 16 Jun 2026 16:48:55 +0800 (GMT+08:00)

From: nidonghui

Date: Tue, 16 Jun 2026 16:48:55 +0800 (GMT+08:00)

X-WM-Tid: 0a9ecf9e8f350693kunm45b415805739a

DKIM-Signature: a=rsa-sha256;

b=aSKSOX84Oh382wXkNXiN2a01RwgTRpkSSgacpvBMYB6joj9Y30y7/sO++8hmfDPVHsOby3ZOB1q92wZCKRid0Wa0N0ca47Kg0LjeFjJnYcVC9nSIxoPn/QxImBlSPYQ+cl5OkbjnSjzPowu4uYvbLgnMymSbp8jvi7oezrUWvtG/Q6h0+N4Ip9obQnluUJVmTv384gov++bYlTU5XOEKw292xuKAECNis9f7+8t2E3BXWkcU16k+SSFqIlIpwl4SS/FPRY5FSUR9xWumk58BjKDfxNn8OOg5CHD+trNETD13TOBLVqI28RSax3W0X3pAnr4aOvyr8YDxQ3LTUvVgZQ==; c=relaxed/relaxed; s=default; d=aimaylai.com; v=1;

bh=KR3AUW3LL+ssALyl/LNq1O7OX98ZIlBMWDkK05MjPiM=;

h=date:mime-version:subject:message-id:from;

Message-ID:





We are a bedding manufacturer with 20 years of experience, offering high-quality silk, Tencel, and cotton products, customizable options, and competitive prices. Contact us for samples or inquiries.

Home Textile Factory from China: We cordially invite you to visit our facilities. We are a professional manufacturer with over 20 years of experience specializing in high-quality bedding, serving clients globally. Our primary offerings encompass silk, Tencel, and 100% cotton bedding sets, specialized hotel bedding, as well as silk comforters. We maintain stringent quality control standards and utilize high-quality raw materials to guarantee the softness, breathability, and durability of our products, making them suitable for hotels, home textile brands, and distributors. We offer flexible customization services, including size, color, logo printing, and packaging, to meet your specific business needs. With competitive factory prices and reliable delivery, we aim to build long-term cooperative partnerships. Enclosed is our product catalog for your reference. We would appreciate the opportunity to discuss how we can support your business. Please feel free to contact us for samples or further inquiries. Best regards,







Ni DH

International Trade Executive

Zhejiang Aimilai Silk Home Textiles Co., Ltd.

nidonghui@maylai.group

13123876583

NetKnow Now in Netcraft's Top 19250 part 2

Posted by Dave Yadallee on

Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow Now in Netcraft's Top 19250 part 1

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 19205 from 17328 at Netcraft and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


    3. and
  3. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 3480 from 3477 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 6167 from 5961 and are hosted in Europe.



Government of Alberta



The Government of Alberta Website

ranks 14786 from 14740 by Netcraft and seems to hosted on Cloudfare.



Netknow again





We at Netknow are at 19205 from 18857 since the start of 2026.



City of Edmonton







The City of Edmonton ranks 35758 from 36255 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta ranks 49932 from 49071 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 319800 from 320343 who are the owners of

US Based Netzero at Netcraft Rank 83899 from 81648 .





NAIT / Northern Alberta Institute of Technology





NAIT ranks 123436 from 122518 hosted by Microsoft .





Grant MacEwen University





MacEwan ranks 142431 from 142431 .



TekSavvy



TekSavvy ranks 194322 from 206913 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 305249 from 305878 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Internet Centre / CCINet



Internet Centre

rank 348711 from 349367 . Their partner Rack Nine ranks > 2000000.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 480959 from 482206 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Distributel / 3Web / CIA



Cybersurf

is ranked 940078 from 943163 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .

invoice phish from Godaddy Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jun 2026 18:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZI14-000000001M0-1X89

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jun 2026 18:50:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jun 2026 18:50:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sxb1nlsmtp02-02.prod.sxb1.secureserver.net ([92.204.71.165]:50789)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZHjw-00000000P97-3ui5

for sales@nk.ca;

Mon, 15 Jun 2026 18:33:28 -0600

Received: from 137.234.205.92.host.secureserver.net ([92.205.234.137])

by : HOSTING RELAY : with ESMTPS

id ZHi5w7IOThneyZHi5wLSAy; Tue, 16 Jun 2026 00:31:22 +0000

X-SECURESERVER-ACCT: 92.205.234.137

x-originating-ip: 92.205.234.137

X-CMAE-Analysis: v=2.4 cv=ZrtH7d7G c=1 sm=1 tr=0 ts=6a30995a

a=VBm27xasOtl1gAzrVLFkWA==:117 a=VBm27xasOtl1gAzrVLFkWA==:17

a=FelO9ux0wxsA:10 a=jseCez7vAAAA:8 a=bKwsm-_m6Sv_gZNB7q4A:9 a=CjuIK1q_8ugA:10

a=6La71ksEAAAA:8 a=WI1oPIdb8qdMH19wSkwA:9 a=_W_S_7VecoQA:10

a=KGnS7LbA55y5AxEHsPEA:9 a=n3BslyFRqc0A:10 a=TVSDGDhtDLUA:10

a=Cuw82jQfYdcA:10 a=ALcC6MeIz8quGovx1V-V:22 a=ypTHgtvWjkVDeDvyh4Hh:22

Received: from ec2-18-216-200-48.us-east-2.compute.amazonaws.com ([18.216.200.48]:57031 helo=EC2AMAZ-ERKHFID.us-east-2.compute.internal)

by 137.234.205.92.host.secureserver.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.2)

(envelope-from )

id 1wZHi4-000000003fw-1bzs

for sales@nk.ca;

Tue, 16 Jun 2026 00:31:21 +0000

Content-Type: multipart/mixed; boundary="===============3286535678535461225=="

MIME-Version: 1.0

From: Manny

To: sales@nk.ca

Subject: New Order & Statement - Attached Nk

Date: Tue, 16 Jun 2026 00:31:19 +0000

Message-ID: <178156987907.2840.8566574863270536816@EC2AMAZ-ERKHFID.us-east-2.compute.internal>

Precedence: bulk

X-Mailer: =?utf-8?b?VmlraW5nIE1haWxlciDimpTvuI8=?=

X-CMAE-Envelope: MS4xfIWB6c9wGTJmljA5OiGInJs70/pN9FBRjkvQmkcL88d8mGW30IxbiMaU/cXJbW/xbTm3VNzQ/0PAcFQjn/E9OoAi2UaIAQpf+L8RxqSTsOot4ieCNDWq

HYSP9R2ILe3PTmwMrYbZHTxeOcBwC9ksEYaUH/SVYDYHBTopmeN0mqCPwrTSHZTD4FsjfpxOQvPWJ3U4GeY2uXuVMUlS+FtYazw=

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Morning,

Pl­ease f­ind att­ached the new ord­er and sta­te­ment

for your ref­er­ence. The [...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[18.216.200.48 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.205.234.137 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

[92.204.71.165 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[92.204.71.165 listed in dnsbl.ahbl.org]

[92.204.71.165 listed in dnsbl.ahbl.org]

[92.204.71.165 listed in dnsbl.ahbl.org]

[92.204.71.165 listed in dnsbl.ahbl.org]

[92.205.234.137 listed in dnsbl.ahbl.org]

[92.205.234.137 listed in dnsbl.ahbl.org]

[92.205.234.137 listed in dnsbl.ahbl.org]

[92.205.234.137 listed in dnsbl.ahbl.org]

[18.216.200.48 listed in dnsbl.ahbl.org]

[18.216.200.48 listed in dnsbl.ahbl.org]

[18.216.200.48 listed in dnsbl.ahbl.org]

[18.216.200.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[92.204.71.165 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[92.204.71.165 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[92.204.71.165 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[92.204.71.165 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[92.204.71.165 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.3 MANGLED_BEST BODY: mangled best

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_ACTION BODY: mangled action

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[92.204.71.165 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

1.0 J_BACKHAIR_32 RAW: 3 alpha-tag-2 alpha

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} New Order & Statement - Attached Nk

Invoice phish from Godaddy PArt 2

Posted by Dave Yadallee on
--===============3286535678535461225==

Content-Type: multipart/alternative; boundary="===============4551356073169753329=="

MIME-Version: 1.0



--===============4551356073169753329==

Content-Type: text/plain; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Good Morning, Pl­ease f­ind att­ached the new ord­er and sta­te­ment for your ref­er­ence. The doc­ument inc­lud­es the upd­ated ord­er det­ails alo­ng with the cur­rent sta­te­ment. Kin­dly rev­iew and let m­e kno­w if you hav­e any qu­estions or req­uire any cla­ri­fi­ca­tion. If ev­ery­thing look­s cor­rect, no fur­ther act­ion is nee­ded. Th­ank you for your con­tin­ued busi­ness. Bes­t reg­ards, Manny Accounts Department Twe Technology Inc. man@twe jam ca.org

--===============4551356073169753329==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Good Morning,





Pl­ease f­ind att­ached the new ord­er and sta­te­ment for your ref­er­ence.





The doc­ument inc­lud­es the upd­ated ord­er det­ails alo­ng with the cur­rent sta­te­ment. Kin­dly rev­iew and let m­e kno­w if you hav­e any qu­estions or req­uire any cla­ri­fi­ca­tion.





If ev­ery­thing look­s cor­rect, no fur­ther act­ion is nee­ded.





Th­ank you for your con­tin­ued busi­ness.





Bes­t reg­ards,





Manny


Accounts Department


Twe Technology Inc.


man@twejamca.org







--===============4551356073169753329==--



--===============3286535678535461225==

Content-Type: application/octet-stream

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="P0-081526-statement.pdf"



--===============3286535678535461225==--

Proposal spam from google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jun 2026 17:41:00 -0600

Received: from mail-qt1-f174.google.com ([209.85.160.174]:56752)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZGvA-00000000K3n-2nUa

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jun 2026 17:40:57 -0600

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-51778077b28so44069861cf.1

for ; Mon, 15 Jun 2026 16:40:00 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1781566794; cv=none;

d=google.com; s=arc-20240605;

b=VR351NQsW2PMSPO2fkB+XnYtZUHYcGyD3VBLC53O/vhfvGRPSjTrYCjVjUJ2ItpOQW

kOKnIDBnG8fUmXwEz6qGmQ2Ex8RGksthNgNQzY2ll3xvQmpxB/ztHnVtZsXTkR4AOFRX

o4jq9pk87JvBk3vpHc91DTtoVDfJ/oE/SR3nXE2COPElgcmP33hi93tEKMs4julK7SkX

rUXS0o7G63WHdE9Z00q4Jpq7etOHE4o+rFy/D1WL9DvyJmvzh2xdzBCRULYMSBVMmzgr

Tx+7O7TGMfMjx4u9+sedjD1BCZjk/ERkinOGU91WnvgtMnfTFPHUunBeU8BXAAvRwgRY

gPHw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=C/1kIW9ns3B17ta46jlESGdj6edwnpeQszzbXG3GB9w=;

fh=lqvQpHO4rvGCv/s+0rUIeAJK43i+pwpfjNq4yZVvCXQ=;

b=YUUA/h1HNMUFaHWy5jb8m6PhzSjDIFP1+qALZmpejKvj3n0/Gj+Qv0mMs3csbcEWEd

wGuoDTzge0hhK/4a8duv8B5cZeyUB8m6bcpBiPwSrxVS0l3cVqck0g3pw2a9KJsTx0kh

tYkRQNpfF5tDgy0M/3k/wy5ODh4Z+N3olIqDWbEisU/aVhCT+EFD3Mr45DPaAYvnDMK6

CwCtaWSAMf/1N5vIcKSbtJWdAEwpvXhH6WL4jX2rIwbo3HTOBUyx2KD9JTREB+cuig4i

Gl9JMCcsjY8c+RLyQE1U4kmglg9VQJ2QZts3YmDY8Ed1I9IGxsWvTTGtHDS85zIURpA6

KGTA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781566794; x=1782171594; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=C/1kIW9ns3B17ta46jlESGdj6edwnpeQszzbXG3GB9w=;

b=hfzmcn3nFDRcvq4bfDFixbxX8WqehvbM6M9eXPB2vZfPkl5XGULKwtUdiydFRvlmUh

Da1Js7wv01sVrEU4StUKMO1W3XnnV6lmYG2dNasmyTrGas7m2vJM00bDEf+G2Qgmn5r7

quREMS0HELATFlNeESlvBPVgHph6+ttvCr40D8+f0kg24SlwkqFLXUo/mB6nQJt4yXNW

Wo1OiSFXzNJCe07Cxsq8o50cw3z2tcJaX1gFklJjZMf4nLvwwIIH8zwp7ssGjSi44Xfc

VdNVaO2ESCllQUKlm8pqTR0g8lC86KhSzIuzAtSglH9iWky3SmR5gzTRGfYTqboRiHjU

waHg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781566794; x=1782171594;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=C/1kIW9ns3B17ta46jlESGdj6edwnpeQszzbXG3GB9w=;

b=C5/9Xi6aChtrmQd9Ty2fqNQBdM4xVBMQBvARuW1Wt2oh7zCS+c6ggzeK6ViqaQUMNM

QFmCbqeY2JoU/rNbQAgDds1QKULBPRtUxVjyvW56OnV+8EX7yVrUJtj0mDWoq/QH+H/S

rXtEyZF09NCQZzIQdmXS1e1X7U/5v7Z3n7jRo3ySnprCCG+bDAJDBSe244a1DbwYnI+L

TkSBW3X04Y/+eyMOhE2+jUald/ErLDpqq8jSU5kzQNkEulYElf2hhMNVI3xv3Dsx87Nz

UPz+Ljd++NYMkVANB4iGzknwwZYx1NxgPnA5IekSb+tio5wr8ngV6lXhA8S0gjzFDyjO

BKnA==

X-Gm-Message-State: AOJu0YwyCjGlIwvTahAhghI0Ir9ze6QHONjIQ61PsxOajpq5Yh+MfExi

YPBakr4MynU3LmUOlc4gVfmHWh7JKFqQ77GifuQ034+4LIxw2z35Lax92ylqa5Qsv586JVGTPfv

MolDhGUwd2Gicm/WtOfebSmERbAVItFAG1ZNzVqM=

X-Gm-Gg: Acq92OFrc5YD/x+xlkX48xYNgFOmLuV0xohNUFbcc3sSSTIU4mRPXtU1ABfAkZ8d/eS

oyyllheI0AcGQKS56OCW075xD1clZ7YEGhVhTPFDmET4a+d6jxiDZV9o7ae20mGAhc2geRlSj8W

lDJq1e4oA2dl3cvFevZOD2qQCe4VBfGW1whH7atUlRusat8BznQAjrilduOEp/n75Ypmsj/O7l6

wXViP9EKzXoDQmKDBgOp60bmWmOF82w9s29nHrnojqfYPXylGy5ImEbjXo6mTH6fKC0EAZIv7hW

v/gEm8Tfng==

X-Received: by 2002:ac8:6542:0:b0:517:8069:8b06 with SMTP id

d75a77b69052e-51991a8e1fdmr18416591cf.35.1781566794044; Mon, 15 Jun 2026

16:39:54 -0700 (PDT)

MIME-Version: 1.0

From: Farhan Faruqui

Date: Tue, 16 Jun 2026 01:39:42 +0200

X-Gm-Features: AVVi8CdQJNPzq6eWPmbd40bGQbx14y0EcSYYe4RYPxTXC-2zzOW30YUmZCyTMBY

Message-ID:

Subject:

To: dave@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000e717650654535796"



--000000000000e717650654535796

Content-Type: text/plain; charset="UTF-8"



Good day



Please let me know if you had a chance to review my previous email about

the proposal.



Best regards.

Farhan



--000000000000e717650654535796

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

style=3D"margin:0px 0px 1em;color:rgb(0,0,0)">
">Good day

Please let me know if you had a chance to review my prev=

ious email about the proposal.

Best regards.
Farhan


iv>




--000000000000e717650654535796--

CRA Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jun 2026 18:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZI0V-00000000PCr-0xm6

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jun 2026 18:50:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jun 2026 18:50:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.voicemailvoip.online ([92.113.145.149]:57982)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZDrK-00000000DVO-2NH4

for root@nk.ca;

Mon, 15 Jun 2026 14:24:46 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=voicemailvoip.online;

s=default; t=1781555023;

bh=frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=;

h=List-Unsubscribe:From:To:Subject:Date;

b=Uj5Nb6yBKDOctdQ9uMOqC9UH47iXJP9UV1rQbVnPCqxRqjIGLXL/jbihgsukS02n2

OCMkGCGs4yr92wI417osJ0SnNm2Xx2xGcEuwKifPmtib58RJjfCzd/70Eloe3PyC3g

kV/sjUTLVplm1UzFgxyOALuukpeVt3maJdqgzxyPtj5jLPth1fFWPQoOKXNbxCJlTH

N8FCPA3ww1MHlS1gc1WOTPDoqNElSv3ViFBdkNPDyUAfsIntjfq34D7ojfyFlqVtth

fhwPwoEgD2zwf6UhIr2b9nFLqBKLp5QQcmOjoK+OKI4a9SgVn81tmJPVlnwUPRWaDY

7/ZqbHesszgdw==

Received: from [127.0.0.1] (vmi3373381.contaboserver.net [212.47.79.9])

by mail.voicemailvoip.online (Postfix) with ESMTPSA id 45135426EA

for ; Mon, 15 Jun 2026 20:23:43 +0000 (UTC)

Message-ID:

List-Unsubscribe:

From: Canada Revenue Agency

To: root@nk.ca

Subject: Canada Revenue Agency (CRA) shared a

Date: Mon, 15 Jun 2026 20:23:43 +0000

MIME-Version: 1.0

Content-Type: text/plain

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.47.79.9 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.47.79.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.47.79.9 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.47.79.9 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: voicemailvoip.online (online)]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.47.79.9 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.47.79.9 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

1.3 BODY_EMPTY Empty message body !

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[92.113.145.149 listed in bl.score.senderscore.com]

Subject: {SPAM?} Canada Revenue Agency (CRA) shared a



Canada Revenue agency phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jun 2026 18:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZI0O-00000000Ogs-3UHt

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jun 2026 18:50:16 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jun 2026 18:50:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [92.113.145.149] (port=35502 helo=mail.voicemailvoip.online)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZDfm-00000000D7g-43U9

for sales@nk.ca;

Mon, 15 Jun 2026 14:12:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=voicemailvoip.online;

s=default; t=1781554308;

bh=frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=;

h=List-Unsubscribe:From:To:Subject:Date;

b=KhpTTKZFStBwP3yyODI+2/eRoV/kgkLTS2E5mBa7m/5DKS4Nx6MDntFP3scJtAZ2r

/SMpCJ0eGy9t9M5ZI+1SA3kUrS4Mu5AF/o7BKrLr+KF+C6VFchmEZei9+H+JFd/puL

W/b3DqKPo6ZgfRgqissNd8z5C+k+5cKyeE+C39Bjc+wWaKjWSlX+Wc3orQLds2NMRf

5CxL47PxaBAYRWuEVNWe+xa+MljZ0EFPMQthqP+6zu1Jwua7Rfaw8Jbf5GrxVft2/c

OyLWNqVnYdcVkH5TZ/AT9utDXR3cAJlDVjGQ454pplTQ40poMZJbK7AGxmIZ+7+fiW

JaQcYML9Qummw==

Received: from [127.0.0.1] (vmi3373381.contaboserver.net [212.47.79.9])

by mail.voicemailvoip.online (Postfix) with ESMTPSA id 9B56C4223C

for ; Mon, 15 Jun 2026 20:11:48 +0000 (UTC)

Message-ID: <13c03ca1-4d67-452b-8309-27cac4ac581d@voicemailvoip.online>

List-Unsubscribe:

From: Canada Revenue Agency

To: sales@nk.ca

Subject: Canada Revenue Agency (CRA) shared a file

Date: Mon, 15 Jun 2026 20:11:48 +0000

MIME-Version: 1.0

Content-Type: text/plain

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.47.79.9 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.47.79.9 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: voicemailvoip.online (online)]

1.3 BODY_EMPTY Empty message body !

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[92.113.145.149 listed in bl.score.senderscore.com]

Subject: {SPAM?} Canada Revenue Agency (CRA) shared a file



Canada Revenue agency phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jun 2026 18:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZI0O-00000000Ogs-3UHt

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jun 2026 18:50:16 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jun 2026 18:50:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [92.113.145.149] (port=35502 helo=mail.voicemailvoip.online)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wZDfm-00000000D7g-43U9

for sales@nk.ca;

Mon, 15 Jun 2026 14:12:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=voicemailvoip.online;

s=default; t=1781554308;

bh=frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=;

h=List-Unsubscribe:From:To:Subject:Date;

b=KhpTTKZFStBwP3yyODI+2/eRoV/kgkLTS2E5mBa7m/5DKS4Nx6MDntFP3scJtAZ2r

/SMpCJ0eGy9t9M5ZI+1SA3kUrS4Mu5AF/o7BKrLr+KF+C6VFchmEZei9+H+JFd/puL

W/b3DqKPo6ZgfRgqissNd8z5C+k+5cKyeE+C39Bjc+wWaKjWSlX+Wc3orQLds2NMRf

5CxL47PxaBAYRWuEVNWe+xa+MljZ0EFPMQthqP+6zu1Jwua7Rfaw8Jbf5GrxVft2/c

OyLWNqVnYdcVkH5TZ/AT9utDXR3cAJlDVjGQ454pplTQ40poMZJbK7AGxmIZ+7+fiW

JaQcYML9Qummw==

Received: from [127.0.0.1] (vmi3373381.contaboserver.net [212.47.79.9])

by mail.voicemailvoip.online (Postfix) with ESMTPSA id 9B56C4223C

for ; Mon, 15 Jun 2026 20:11:48 +0000 (UTC)

Message-ID: <13c03ca1-4d67-452b-8309-27cac4ac581d@voicemailvoip.online>

List-Unsubscribe:

From: Canada Revenue Agency

To: sales@nk.ca

Subject: Canada Revenue Agency (CRA) shared a file

Date: Mon, 15 Jun 2026 20:11:48 +0000

MIME-Version: 1.0

Content-Type: text/plain

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[212.47.79.9 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

[92.113.145.149 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[92.113.145.149 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

[212.47.79.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[92.113.145.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[212.47.79.9 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.47.79.9 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: voicemailvoip.online (online)]

1.3 BODY_EMPTY Empty message body !

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[92.113.145.149 listed in bl.score.senderscore.com]

Subject: {SPAM?} Canada Revenue Agency (CRA) shared a file



Bitcon PAypal phish from Microsoft Outlook PArt 3

Posted by Dave Yadallee on
Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

[40.93.23.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.23.99 listed in dnsbl.ahbl.org]

[40.93.23.99 listed in dnsbl.ahbl.org]

[40.93.23.99 listed in dnsbl.ahbl.org]

[40.93.23.99 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:cafe:0:0:a5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:89:0:0:0:25 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.23.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.23.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.23.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.23.99 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.23.99 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.23.99 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_REPLYTO Reply-To username looks random