Questtrade phish from Google gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 12 Aug 2026 10:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuBUU-00000000NS5-1YGC

for dave@doctor.nl2k.ab.ca;

Wed, 12 Aug 2026 10:07:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 12 Aug 2026 10:07:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from qtmail05.mbfrgmb.com ([35.217.120.232]:46397)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuAyw-00000000LKF-2Car

for doctor@nk.ca;

Wed, 12 Aug 2026 09:35:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qtmail05.mbfrgmb.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=ADRXUJ@qtmail05.mbfrgmb.com;

bh=3X3YaoxpAoyHRcgfb6eo1avh+YLN51Y7Bt+GoKHBYpM=;

b=gVgNQQbTbj9BslSgWIHT460g18rIEap3LF+KklwusK5tClSug/Fsqw4kT0inWZlsuz30JAFLYaQm

1Y/783RMYPXxN0RiY8o9gmBd3XbeWNCagaL8rcF54wrCVz9XnvD/EfVZhkcGbMabInFkkJ65/cOS

s/it5DV7jlq0Mdm1ZucnmYJ5PXB0/MKZe4/WWsdsnAiWXzTVxLPllWZJSSHUdRz58+lld7jXqG2S

PU53gtWWl9G5gHVzVq22XYuz/vt3ivrZDy4cgCqtmM35VS8fuvoE6PH4s61UKribqkAmH3fKAwM2

WvZl4cFKOf/xonk1UGnNuhEFWfJOEazcs7dTRA==

Content-Type: multipart/alternative;

boundary="===============1194225154559682835=="

MIME-Version: 1.0

From: Questrade Reserve Team

To: doctor@nk.ca

Subject: Confirm Your Details for Your T5 Tax Slip - Confirmez vos

renseignements pour votre feuillet T5

Date: Wed, 12 Aug 2026 11:34:18 -0400

Message-ID: <178654885850.4021.6938034204957569759@qtmail05.mbfrgmb.com>

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TAX SEASON UPDATE — T5 SLIP VERIFICATION NEEDED Confirm

Your Details for Your T5 Tax Slip ================================================================





Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

[35.217.120.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.217.120.232 listed in dnsbl.ahbl.org]

[35.217.120.232 listed in dnsbl.ahbl.org]

[35.217.120.232 listed in dnsbl.ahbl.org]

[35.217.120.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.217.120.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.217.120.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.217.120.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.217.120.232 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: login.npgmw.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: npgmw.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.217.120.232 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 URI_PHISH Phishing using web form

1.0 ACCT_PHISHING Possible phishing for account information

Subject: {SPAM?} Confirm Your Details for Your T5 Tax Slip - Confirmez vos

renseignements pour votre feuillet T5





Questrade

TAX SEASON UPDATE

Your T5 Statement of Investment Income is being prepared. Before we can issue it, we need you to confirm that your personal information on file is accurate.

doctor, please verify your details for your upcoming T5 tax slip



Your T5 reports investment income — dividends, interest, and other earnings from your non-registered accounts — directly to the Canada Revenue Agency. If the personal information attached to your slip is incorrect, the CRA may flag your return for review, delay your assessment, or disallow income reporting.



This is not a penalty and there is nothing wrong with your account. It is a standard pre-issuance check to make sure your T5 reaches the CRA with the right details attached. Most issues are simple — an outdated address, a middle name that does not match your SIN record, or a mailing address that changed during the year.

PLEASE CONFIRM THESE DETAILS

Your full legal name exactly as it appears on your CRA notice of assessment

Your Social Insurance Number (SIN) — must match CRA records

Your current mailing address on file with the CRA

Your date of birth as registered with Service Canada

WHY THIS MATTERS



An incorrect T5 can result in a CRA reassessment, delayed refunds, or additional documentation requests. Verifying now takes under 2 minutes and ensures your tax filing goes smoothly — no follow-ups, no corrections, no surprises.

Verify my details



Log in to confirm your information. Takes under 2 minutes.



Over two million Canadians invest with Questrade. Your personal data is encrypted and handled in strict compliance with Canadian privacy law. If your details are already up to date, no further action is needed — you are all set.

SECTION FRANÇAISE

Questrade

MISE À JOUR — SAISON DES IMPÔTS

Votre feuillet T5 (État des revenus de placement) est en cours de préparation. Avant que nous puissions le délivrer, nous avons besoin que vous confirmiez que vos renseignements personnels au dossier sont exacts.

doctor, veuillez vérifier vos renseignements pour votre prochain feuillet T5



Votre T5 déclare les revenus de placement — dividendes, intérêts et autres gains de vos comptes non enregistrés — directement à l’Agence du revenu du Canada. Si les renseignements personnels liés à votre feuillet sont incorrects, l’ARC pourrait signaler votre déclaration pour examen, retarder votre cotisation ou refuser la déclaration de vos revenus.



Il ne s’agit pas d’une pénalité et il n’y a rien d’anormal avec votre compte. C’est une vérification standard avant l’émission pour s’assurer que votre T5 parvient à l’ARC avec les bons renseignements. La plupart des problèmes sont simples — une adresse périmée, un deuxième prénom qui ne correspond pas à votre dossier de NAS, ou une adresse postale qui a changé en cours d’année.

VEUILLEZ CONFIRMER CES RENSEIGNEMENTS

Votre nom légal complet tel qu’il apparaît sur votre avis de cotisation de l’ARC

Votre numéro d’assurance sociale (NAS) — doit correspondre aux dossiers de l’ARC

Votre adresse postale actuelle au dossier de l’ARC

Votre date de naissance telle qu’enregistrée auprès de Service Canada

POURQUOI C’EST IMPORTANT



Un T5 incorrect peut entraîner une nouvelle cotisation de l’ARC, des retards de remboursement ou des demandes de documents supplémentaires. Vérifier maintenant prend moins de 2 minutes et garantit que votre déclaration de revenus se déroule sans accroc — aucun suivi, aucune correction, aucune surprise.

Vérifier mes renseignements



Connectez-vous pour confirmer vos informations. Prend moins de 2 minutes.



Plus de deux millions de Canadiens investissent avec Questrade. Vos données personnelles sont chiffrées et traitées en stricte conformité avec les lois canadiennes sur la protection des renseignements personnels. Si vos renseignements sont déjà à jour, aucune autre action n’est requise — tout est en règle.

Questrade · Questrade Wealth Management Inc. · Member of CIPF

This is an automated tax season notification sent to doctor.

© 2026 Questrade. All rights reserved.

Wealthsimple phish from Google

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 12 Aug 2026 10:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wuBTo-00000000NL7-2Yfa

for dave@doctor.nl2k.ab.ca;

Wed, 12 Aug 2026 10:07:00 -0600

Resent-From: The Doctor

Resent-Date: Wed, 12 Aug 2026 10:07:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from weal08.ktbbfd.com ([35.207.118.211]:56459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wu9DO-000000008En-2F2H

for doctor@nk.ca;

Wed, 12 Aug 2026 07:42:02 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=weal08.ktbbfd.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=VGQZQH@weal08.ktbbfd.com;

bh=XwTEOw7XrE7YaOXm7GjUTXsA2xD0TPYHeUS2mFPVt5I=;

b=F3HyPudBGCfP458i76Q+Xt3Ty4RqK37e7KpqJWIsv3AowcdtqcM5AfedGwkGua2UxCF3HgIXNZUn

oZCKZJuapRTJI2wpX2NtB1gkk3y4HywBo9Pit0pVvXncCQYQ3R0vduRd16kXmIAOkQxeOfG60kkH

c8TuKNdrywfz+eODPv1zjSZCmbgk+bAHNMZwdVUl8kKovEufAyjCT1sPND9kJsaE0lyK9wfJkqwJ

nVg8bak0UkLptYOJngPj+844vBltN//sEFiciKeEad6I+6G5JBqoT4A74F2nwNSKVhy7eZTawqYT

SnLLZ0X6wCzeLw36pjFGeC+1Fz0KfLZ8VND+vg==

Content-Type: multipart/alternative;

boundary="===============0325390231036235215=="

MIME-Version: 1.0

From: Wealthsimple Client Support

To: doctor@nk.ca

Subject: =?utf-8?q?Unrecognized_Access_Detected_=E2=80=94_Confirm_Within_48_?=

=?utf-8?q?Hours_-_Acces_non_reconnu_detecte_=E2=80=94_Confirmez_dans_les_48?=

=?utf-8?q?_heures?=

Date: Wed, 12 Aug 2026 09:41:00 -0400

Message-ID: <178654206044.3799.5254954895808657818@weal08.ktbbfd.com>

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SECURITY ALERT — RESPONSE NEEDED WITHIN 48 HOURS Unrecognized

Access Detected — Confirm Within 48 Hours ================================================================





Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

[35.207.118.211 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.207.118.211 listed in dnsbl.ahbl.org]

[35.207.118.211 listed in dnsbl.ahbl.org]

[35.207.118.211 listed in dnsbl.ahbl.org]

[35.207.118.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.207.118.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.207.118.211 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.207.118.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.207.118.211 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.207.118.211 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Unrecognized_Access_Detected_=E2=80=94_Confirm_Within_48_?=

=?utf-8?q?Hours_-_Acces_non_reconnu_detecte_=E2=80=94_Confirmez_dans_les_48?=

=?utf-8?q?_heures?=



Wealthsimple

doctor, we detected an access attempt we don’t recognize



Our systems flagged a sign-in to your Wealthsimple account from a device or location outside your usual pattern. If you do not confirm this activity within 48 hours, your account will be temporarily locked to prevent any possibility of unauthorized access to your investments.

WHAT WE DETECTED

●Sign-in from a browser or device not previously associated with your account

●Geographic location that does not match your typical access pattern

●Network address outside your known range



No changes have been made to your account, and your funds are fully secure. This is a precautionary measure — part of the continuous monitoring that protects every Wealthsimple account.

If you don’t confirm

Your account will be locked within 48 hours. You will need to contact support to regain access, which may take 1–2 business days.

If you confirm now

Your device is trusted, your account stays open, and you can enable stronger security in one tap. Takes under 30 seconds.

Confirm this was me



Log in to confirm the activity and keep your account open.



Over two million Canadians trust Wealthsimple to protect their financial future. Our security systems monitor accounts around the clock, and alerts like this are how we keep your money safe. If this wasn’t you, logging in now lets you reset your credentials and review recent activity immediately.

SECTION FRANÇAISE

Wealthsimple

doctor, nous avons détecté une tentative d’accès non reconnue



Nos systèmes ont signalé une connexion à votre compte Wealthsimple depuis un appareil ou un emplacement qui ne correspond pas à vos habitudes. Si vous ne confirmez pas cette activité dans les 48 heures, votre compte sera temporairement verrouillé afin d’éviter toute possibilité d’accès non autorisé à vos placements.

CE QUE NOUS AVONS DÉTECTÉ

●Connexion depuis un navigateur ou appareil non associé précédemment à votre compte

●Emplacement géographique qui ne correspond pas à vos habitudes d’accès

●Adresse réseau en dehors de votre plage connue



Aucune modification n’a été apportée à votre compte, et vos fonds sont entièrement en sécurité. Il s’agit d’une mesure de précaution — qui fait partie de la surveillance continue protégeant chaque compte Wealthsimple.

Si vous ne confirmez pas

Votre compte sera verrouillé dans les 48 heures. Vous devrez contacter l’assistance pour récupérer l’accès, ce qui peut prendre 1 à 2 jours ouvrables.

Si vous confirmez maintenant

Votre appareil est reconnu comme fiable, votre compte reste ouvert, et vous pouvez activer une sécurité renforcée en un seul geste. Prend moins de 30 secondes.

Confirmer que c’était moi



Connectez-vous pour confirmer l’activité et garder votre compte ouvert.



Plus de deux millions de Canadiens font confiance à Wealthsimple pour protéger leur avenir financier. Nos systèmes de sécurité surveillent les comptes en tout temps, et des alertes comme celle-ci sont notre façon de protéger votre argent. Si ce n’était pas vous, connectez-vous maintenant pour réinitialiser vos identifiants et examiner l’activité récente immédiatement.

Wealthsimple · Wealthsimple Investments Inc. · Member of CIPF

This is an automated security notification sent to doctor.

© 2026 Wealthsimple. All rights reserved.

Nigerian Business Proposal spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv66-000000003bw-3RjB

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:37:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:37:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ukwestazolkn19011029.outbound.protection.outlook.com ([52.103.38.29]:36112 helo=CWXP265CU009.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtruG-00000000E5M-1d4q

for doctor@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 13:13:09 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=WSUaXWHCDsIz6JMItB06rOoM/ZHd+0CTkxD6N0H9S8bwrRk1JmAoc3HNxxCo94ePttK+BDRio+aQWCufB3lnou74xM8JXs7y4wcIg3cPFa4vN3v/J6a5GAgNNjgBabczLErkJvBVkOURrYfSLt1ZWa10/v4ScjYQvumiPTLu0ezDE0t9Kn+hy358GiBHVbQmqp75QStn7N5OXapQnxbWWrHvNY+A0uZTFY1ogfW7RktD5zAgeFVxUwCzZTZEG519MidlNcLCsLRPgKo9v3aNpIihHCScst9q27O4u9TWwn/Wedkej4KQeY7mWY6WLqz/wdMGub3S8YH1BPfUZn9ilw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pJuUr/KvbCotuu4ozsSzWcPiVHRs3lzIEGmxgiZqZNo=;

b=Evl4tbmnooPXcXv1quuz+gEfkcf02GKZ004bFzEDSUJmamd5yXHU6u59hvxD6E9O0h+dshe6b1dRPveq8a7axwB+1fQseu5B3+ORdEULnP2lv8eqRm7GhlP3OLi0aDoc3Lq3Y37l3ecncblKi7aCYA1thYNPNYYIrU6D42ODMBZAhuNlw4ezkeBJ2LhmkRHRkUkhkV9vHgz74BieZXoLQNr12RMLpX55hrIb9GHAnDo4NpyPTTEikB9xEvC4VKLa+zMRrjvTYQT2oB9FHqBcEslA6q4wEeM53ODnGvbcBjXVsQBHqCMyItM+hCRSejTVJGIEySjlZ8dcKAuz4cnUlw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pJuUr/KvbCotuu4ozsSzWcPiVHRs3lzIEGmxgiZqZNo=;

b=KUvrJUst/PB0cmUoLMiCGesqsKFIIF8pze8VTRlK2tWYvqhnVGP7q9t8iRV2BFwEVbUFoZIwvBNl98xWaKmXpjqntBJx93nQDorIb/x/01MvYv4JcEjaXKlvb/IAjSHu9xpDQblJ8QV50FIWqYwRgNRugYvL2j2Gqu6hXX8ouDI+vWx8HUEG7WulhnYvvKK9zcPQ57PPPSXCYLXm/f1X6BYTYkIy1pfIge8muWyhHV3YkpSn74U8Iw7KWuFow5mxqJ3WQvjEaJfBEVS9VF5CleiIy2Pk9llLRUrMQHM11+Ogvcb9JVMv4r9bl0IhLQpuGonkY6zClojgP1OMxRFYkA==

Received: from LOBP302MB2291.GBRP302.PROD.OUTLOOK.COM (2603:10a6:600:447::14)

by CWLP302MB0054.GBRP302.PROD.OUTLOOK.COM (2603:10a6:400:224::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Tue, 11 Aug

2026 19:11:39 +0000

Received: from LOBP302MB2291.GBRP302.PROD.OUTLOOK.COM

([fe80::404f:b5ed:5fe9:9a75]) by LOBP302MB2291.GBRP302.PROD.OUTLOOK.COM

([fe80::404f:b5ed:5fe9:9a75%5]) with mapi id 15.21.0292.025; Tue, 11 Aug 2026

19:11:38 +0000

From: Mansour Mohamed

Subject: CEO MANSOUR GROUP

Thread-Topic: CEO MANSOUR GROUP

Thread-Index: AQHdKcU6eYW8Uc/AMUGep340Z75c1g==

Date: Tue, 11 Aug 2026 19:11:38 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: LOBP302MB2291:EE_|CWLP302MB0054:EE_

x-ms-office365-filtering-correlation-id: bc255f6e-a910-4fec-b27c-08def7dc5ebf

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|31061999003|41001999006|37011999003|8060799015|19110799012|22091999003|24121999003|8062599012|39105399006|19101099003|55001999006|25010399006|4140399003|10035399007|39145399003|41105399003|40105399003|260806224601699006|18071099003|2607281247196008|56899033|34005399003|102099032|3412199025|440099028|2406899039;

x-microsoft-antispam-message-info:

=?utf-8?B?SEw4RURpNGE5OE5JWkVKbUt2NDQ0WkpQbmJDRnJVb3ZxNmhGOTVaWWE3OEpp?=

=?utf-8?B?OWs3YjFXek1PMjI3bWp3WG4rTGNadXp2azBOQWxkcjg3WTcxWWpvbHQ1cGpz?=

=?utf-8?B?R0h5Skw0dHRMMUl0N2JNd2tRU09FaTVVWFBCOEhhVGV2WE93RWVxZGM1cHY0?=

=?utf-8?B?ZWwzMERma29HaWRPb0NtTHFKTEpDdmV3S0o3c05PdDJvRExSMDAvOWtkcVc1?=

=?utf-8?B?Uk9RaTNoZ1I3YzJvMnQ4NkoxZXluc2YxaGlCT3NKQTBKektjc2tneVE2VTA4?=

=?utf-8?B?VUduc2VQRkJxNFF6YlF2S3ZLOW1IT2VLQjlaN0R6MTVGWGNwTHBieFA5Q0kz?=

=?utf-8?B?SldRcEI5b1RVd09HOTU5ZFBpNEhOKzNWZlZHbTA4dGtmZ29aVVp1ZEZTdFpa?=

=?utf-8?B?OHBIdHp5Wk91TWV1UjdocURsZXh4eWxXQ3NQUFRqUC9DL3NhNVNvc2ZCU1h3?=

=?utf-8?B?eE5rUEs0RmE2cG5MZnRUVTR0VXJrTEhYVGk2b0ZQYzRxaWFZODlDZEM3VVox?=

=?utf-8?B?cGRXQitPaU0vZzVnUGlyekMvcmhmNzltR20zSEcvYTNId0Q4cUFKdXFHZUsy?=

=?utf-8?B?L243WVhzQXRMcENPS1ZYWG1pY1ZJdjJBS2dnNjl0aWllMktKODltR2thN3I5?=

=?utf-8?B?V3pkR2pxcXhDNWRneXR4ZmdYQUFHUDkzem9aMG84aDhGejJFcWdGem0zbmRk?=

=?utf-8?B?Uy9TMnJXdVp2MGVtTUtBaWRGOGdBbktpMWJ2NU1nRE90ZUFmWHR3aHMxeWI4?=

=?utf-8?B?VUU5Yjh5OEJUTC9mTEhWMk1HS3l3V0RoSy9VWDBSdG1vZlJIWTJYYTJqODIz?=

=?utf-8?B?bDlIV3hsTU5wTGpOTHE1empEWjN6RlRoWEdhTCszN1pXaWxHemVlTitONnRQ?=

=?utf-8?B?azEyNUoxazJwZFR4U1NxM1J5a3RyKy8wWkFFa1V4YWZ1Q0VhWTFCTDAxRDZY?=

=?utf-8?B?UXk0UzNkRm9oYmVkZEswNkVjTHEwQUlwVDQ0Q2VRS3pxMUJtd2J2TmpwSEtP?=

=?utf-8?B?dzdjbFRZeVZ0UWVYQ3cyUlpmYUtBZ1dHdW9DWDJBZXllUmNkY2VOUjQ0TFV6?=

=?utf-8?B?cWxwRWViT2gvZmhHcGdMdlovUGttRXExMXhwektnOW00ZHlwcTE3TkNIbll2?=

=?utf-8?B?aEgvbmxNaWlBZjNrTy94aEJRWXJuSkFvMnkydngyaWNiU0VPY1YrTUdLVHlB?=

=?utf-8?B?ZFl1UW9JazZjN2p0SktQVVB3UnJ5ZzgwOFJzeUo4WHQvbFdNTnpTOWw4eVlN?=

=?utf-8?B?NC8veHBGTFU4S2I5M3V3NktZV1RUb2FQWjNMSTBwRnJvcUpwZjVjWUFvTzBn?=

=?utf-8?B?SFhwdko0dUttcUVSRm0xY1QzbEszbTMxMzJTb2JVOGdFOFZmbTFsTVArcFp5?=

=?utf-8?B?V1dudmhMdGdXdkFzWFl2bmZucVpib0I4Wm5OeHdNQ2lzOGNVSVQrSUJBZ3Q2?=

=?utf-8?B?cER6TFNlNUQ1dWJrb3o0WUNXckFTY3BLUWcvMkdxTjRxSVlYQmN4V092Z2I3?=

=?utf-8?B?UytwWkxicXQzR0NqMUVEenFYeTZOOHl2VFpwQTRCU0FpN3FzL0tEdmFlT2Fw?=

=?utf-8?B?Mmo3R2hkSHFVSU1NTGJXRkJTTStRS0ZEQzVnVjM3a2JuR01rVkRSYTROalZl?=

=?utf-8?B?Qm9RaU84OWhGb3pqc0lqTGRoQzZZTjUrVVRVcXpaQ0U4Ukt6bFUrV0VaWktX?=

=?utf-8?B?cWZJM3R5MWRUdmZsdXhtVmtKQ2RnenRtYVlZL2xWZDQ2NkpWMzdQZC9BPT0=?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?VzkzMkRzN1ZCNDBpNWR4czkxaG5ja0h5enNOS3RKSVFKR2dOSFVhcEZURTFw?=

=?utf-8?B?UjVOVUpENjUvYnMvWDJUbVg3Qmw1T3hXUVFjUlVaRjhBT3Y2YlZJcCtONEZq?=

=?utf-8?B?dTN3MFlhWEh1Q25Lc2E5MDUyTUhRRS8vUmdnbEFWdEdvYTRyUWVrYThYR21E?=

=?utf-8?B?Qk5SbjRHQlM4WUc4NHVYZnZrSStsL1Vkdmh0NGNHVmQrOTJsZ3RtLzM3bjBU?=

=?utf-8?B?bmhlbEdybWxydVJEcUZlSUMyM05waHBINUhOOEpUaFdsS3Z0Mm1jVWo5T0RZ?=

=?utf-8?B?NDFSN2cyRzdDck1vM1ZuNDIycHRQVllDdjh4Y3BKdldiUSsrNDY4NERTNzV4?=

=?utf-8?B?YmRrSS9laWRoNWhBc3hTOXBXdW0rd2xrVVdrT1loQ0RqRlBId1RseDRqdU5q?=

=?utf-8?B?Q0N5KzRoVUt2eWhiMXJBeENiOUFJYW1WUjBjZ0xiR2h1SzVFMzc4d2twaWE3?=

=?utf-8?B?K0g4MGpHdXo5SEk1WGJYQ0srR1hMZ29pMnNGVnFOUS9JUmFvclNWRmNzNVZs?=

=?utf-8?B?QmU1WFVvejRZajU0S2Y5cTBzb0RsZFlkamJDNU9TUDNGellUbG95MVQyRjBq?=

=?utf-8?B?SWZlK0pERXEwOEJLRXFPK2YyM256SnlEMWR2UkJtMVgrd3BGcHhQTjBrQXlJ?=

=?utf-8?B?K1FPOElhZmRTQWMrbE11UUx0M2JTcXloQ2JHUWpTWHZFOGpwY1NRd1ZHRXpv?=

=?utf-8?B?T2doTjJmNVJZc2N3aDNCYzVJeGU5REhqSjRaMHVCb2RSaGlZOGN6WmxlODNB?=

=?utf-8?B?Q2kyVWt4czhISlhkcGowS0loWUhrcUhTdWkzVVlHMHNnckozM1R4eWtFWE1L?=

=?utf-8?B?YWdqR3NEcWtpUGVRY1M4WW1ZUjFsOXloU25wT0s0aFcrUzc0Z0Q4SGdmd2NP?=

=?utf-8?B?Ykx6TUFaVzk1UXFMSk9XOVBqS1Zhbkp0VmRnZFlzNWZHUkFUbFlZRzdua29O?=

=?utf-8?B?Z2c5Wm4va1I0VG1vTWU3RUhzUm92em1adklzWTNoQmIwOXNhU0pEaW1hNXA4?=

=?utf-8?B?TTJpWW44YzBUdVRxM1BJd1BReTN4QWlESWJyYW1WNFVGRlFkS1BndE8zT3pZ?=

=?utf-8?B?TmkraUV5ZThjSERlbHJhM0s1UHVLVWxLL2NnendFeFJZYmg1TUtUNFlCQWlP?=

=?utf-8?B?ZzdmVXdoM05INUI5bHgwaytYVUU5WVF0dVdoWkN4OGo1alBLanlrSlh5d2t0?=

=?utf-8?B?RkJoV1UzV2ZxNGh5VDRGU1BwZGkrY2pjdE13dmVKcVgxMGp0VTYxcjVmNnB4?=

=?utf-8?B?djhSTDV1ckEzYUErUXJ3N1EyeEl1QmNJeVZ2dDJZamt1NTdmQnh0R2t0N0ZT?=

=?utf-8?B?RGQ2ZEpXNG44MGQ0WEE0OG0xT1pjY0E1WE05bHJSWG1GR1JqWmxoTkJpVE8x?=

=?utf-8?B?eE1zZTVMeExwNWI4dWllUS84a0tVODNSQW9SOUZrYjdqK0M0dExrVFFDZldO?=

=?utf-8?B?R0hIL1JxSFE1SlgvVnVVdGpsM1p4RkNBUDZ4SUh3VzNFTkhKYXJqWndMTThz?=

=?utf-8?B?ZzhSMEswMVA3STlHRWVnUFhTY0RjNG1aZEloRWNDb2VDSGpSYnlHbWZVQ3Zz?=

=?utf-8?B?YVFBNmMxdnBPNHhZNWE0L2x5Rm50bEhPZmdGd3ROOHhSbWRrbUV2QjVoVVhu?=

=?utf-8?B?ZlV0dXBXUm1iUXRmay8ycHMrNHRIU05ZMnlleXpZU3prUFV0N3NveExtbmpN?=

=?utf-8?B?VmJCbGpEOUJOV040NXN3a1pEMXlXVEx1MUJiWkQ1UDlqa1pkSWRieHlkZTVx?=

=?utf-8?B?aklaTVFWeU1KQkVMNmhqV3VOZXd6Z0ZiUGtoaVFkRkNJSS9DbDVRazd0alFz?=

=?utf-8?B?Ly9GVmUwVzlFVmJMZUhRNzEzaXZPdVRHTlZjaDhJOHJzN2VDODNzUGY2L1BW?=

=?utf-8?B?aVNvR24wSmh0a3VjdzNjVnZ5b0VKeGdFbGxHOUJ2MTFSOUE9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_LOBP302MB2291950B0B5BF2DA05D2DF36C9DD2LOBP302MB2291GBRP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: LOBP302MB2291.GBRP302.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: bc255f6e-a910-4fec-b27c-08def7dc5ebf

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Aug 2026 19:11:38.6785

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP302MB0054

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings! My name is Mohamed Mansour (CEO Mansour Group),

I got your contact from my LinkedIn contact. I have a business project worth

the sum of Usd$15,600,000 which I wish to discuss with you and I [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

[52.103.38.29 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.38.29 listed in dnsbl.ahbl.org]

[52.103.38.29 listed in dnsbl.ahbl.org]

[52.103.38.29 listed in dnsbl.ahbl.org]

[52.103.38.29 listed in dnsbl.ahbl.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:600:447:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.38.29 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.38.29 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.38.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.38.29 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.38.29 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mansourgroupchairman(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.38.29 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.38.29 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} CEO MANSOUR GROUP











Greetings!

My name is Mohamed Mansour (CEO Mansour Group), I got your contact from my LinkedIn contact. I have a business project worth the sum of Usd$15,600,000 which I wish to discuss with you and I need your kind response to discuss further.



Kindly reach out at your earliest convenience.



While I wait your response, please accept the assurances of my highest regards.





Best,



Mohamed Mansour



Founder & CEO: Mansour Group



Address: No.17, Ummam Center Salah Eddeen Road, Malaz Riyadh, Kingdom of Saudi Arabia

      

Website: www.mansourgroup.com



The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future. Unsubscribe from email or ignore





Loan spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv5l-000000003XQ-3eK2

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:37:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:37:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f47.google.com ([209.85.216.47]:44066)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtrcI-000000001Pf-46Ju

for sales@nk.ca;

Tue, 11 Aug 2026 12:54:29 -0600

Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-38d489b6b71so273304a91.0

for ; Tue, 11 Aug 2026 11:53:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1786474413; x=1787079213; darn=nk.ca;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:content-type:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=vQV3PY/M7PkQwTUHm/rajiqVNItQbR9e4he4jNjR/Pc=;

b=CoZI/SfC3YZFRWN8F9XafZUuNR4XEzH1G0OEbmV/btjr/pyc4oizZ+FZO422pTa9z8

14S+aKVQFgx/7G7fdOQiPom0EcMghPz1XUHzSU5A4lQP4kr28gvg++EmwD2bNwlb0EkQ

Aj0RsCDWZK5lNsbck2FotRk8/bmp1fng5g+eIg4SC30PB98myZKNlf5EQlNyAAq3GaR3

ni7YQQL44/AgF+b4aHyW6ihPT+PU5FBtBo+lMjrDBNeyysqHVe6UvtQvVpdTIAQwOQ+J

3h8h3BpAZV8a473WfgNLFiT0zCzFiXX64Hyx5ZsZqsXwQGNvVEGEYimJen+rOy3BkNaH

+LaA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786474413; x=1787079213;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=vQV3PY/M7PkQwTUHm/rajiqVNItQbR9e4he4jNjR/Pc=;

b=s9HpI6Wy82PQPHo8RpIL0Cl4ITb9oZLN6GrGCaB+yDG87oBl8ld6S4OND9zNR6XNua

BrmzrFIMqEC92yfU5Nej6SABfnEAxm1q+nDKfEF2y2h5jlerue4G5FwUM1e7tpi8WaTF

8EyJTobsEmZQkpiWHQtRxHJdWIpXWOqlOny8pRmW1TDHbPACjSYn5rREk83BVRT8yE2n

sm+kx2lDc6YkB5/TnPLNSZs+rRJvMSNIsg99qrz7uprrl4RrkYEgxTU+YAxh9TZ7ujcc

USDnBQaXFvdkUe3Bz7b4nqvMDjGDItzU+P9e2hkwZPjlIPxVvJ3NYzKqRLpBXtKq/0jc

gGdg==

X-Gm-Message-State: AOJu0YxEko+TSRLwrT9LoflX9On32mXGcPxG0cBkZsAtdUVwU3eldHii

/nQKcSjo3QXo+zGQ6uilFdfPk0pbhF/UbUv+s/SR/0CJrj01hK7k1zreDMRCFivVkH2Xb68NlUr

eDOZV

X-Gm-Gg: AR+sD12qp+4ysf3krwrCfqCzVJjWOTFhQZdlQ5UgeheHCzUh+9/YRLBr/QZF2RWCe1Q

guxAsUCHK/e1GKA14dXZwMQh4zAS3rk6bowA/TlulszwmhjcqNTtEFxim7xA4Z+HLds+WJcc6Dh

8U9LNw3zeSykPSpdL26KTawG3twuqcKoVNTJyoFu+stw2YqhmvT/4TjwX3znkgchYaWftPeTO4p

JBc/+vEpVabC3XXZKaeeLkC3EQgWulgL6j0sfKjccTkNUhgH7NQX00S1bshII7C1QA0/npM7uWt

X1pVrDF8G1ljWmFhjfDLpHEeNwIEefMg0MCGK/Ke+3bkYIcKwon7GJPsoE3Mj9pi6uEvhxRS1Pz

cBYV/u2wsUME6RotctsRCxmAcctyZ7wRhdetCLzTw2FgpzOGyGgYxUBU1ZEkerlCruq8PkzUs9x

ZFUkO/RdlJ0Dni9rPB++BQJeBhmyb6MtUdlkh2xm4uTvMg0VMWBd51/c6hfRwyUfme3+zJn/Y3e

wG+SkwBIfWPy6CcRRxLuejr7ysf

X-Received: by 2002:a17:90b:5443:b0:37c:6130:7a5b with SMTP id 98e67ed59e1d1-392f46d17a5mr2372890a91.8.1786474412937;

Tue, 11 Aug 2026 11:53:32 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-b0.close.com. [54.186.6.46])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-392f94add3asm527171a91.12.2026.08.11.11.53.32

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 11 Aug 2026 11:53:32 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============2816051746494269302=="

MIME-Version: 1.0

Subject: Fast Capital Option for Your Business

From: =?utf-8?q?Lilian_Llanillo?=

To: sales@nk.ca

Date: Tue, 11 Aug 2026 18:53:32 +0000

Message-ID: <178647441175.7.488087535726553235@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_YhwDK8b2tyEbUFWxrnxNv2WuB35FVbMzY5e4eFQpWxV

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

References: <178647441175.7.7550506905009199379@smtpgw.close.com>



--===============2816051746494269302==

Content-Type: multipart/alternative; boundary="===============2182699059810350290=="

MIME-Version: 1.0



--===============2182699059810350290==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat Wirring ,



=20



I tried reaching you briefly by phone earlier but wasn=E2=80=99t able to co=

nnect.



=20



My name is Lilian Llanillo from Kesef Marketing. I=E2=80=99m reaching out b=

ecause we

work with business owners who are looking for faster access to working capi=

tal

to support growth, expansion, or improve cash flow.



=20



Unlike traditional banks, our process is much simpler. We typically don=E2=

=80=99t

require tax returns or collateral, and approvals are usually based on the

business=E2=80=99s recent cash flow. In many cases, funding can be arranged=

within 24

to 48 hours once everything is reviewed.



=20



Even if you=E2=80=99re not actively looking right now, many owners like to =

keep an

option like this available for when the right opportunity comes up.



=20



If you have a few minutes later this week, I=E2=80=99d be happy to introduc=

e myself

and see if this could be helpful for your business.



=20



=20



=F0=9F=91=89 **Complete Your Application Here:**[**Click Here To Start Your

Application**](https://form.jotform.com/260672364104452?lead_id=3D)



Wishing you continued success, and I look forward to connecting.



=20



Best regards,



=20



=20



**Lilian Llanillo**



**FUNDING ADVISOR**



=20



![email \(16px\).png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)



![phone-call \(16px\).png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**



**____________________________**



![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)



=20



To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

--===============2182699059810350290==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat Wirring ,

I tried reaching you br=

iefly by phone earlier but wasn=E2=80=99t able to connect.


div>
My name is Lilian Llanillo from Kesef Marketing. I=E2=80=99m reach=

ing out because we work with business owners who are looking for faster acc=

ess to working capital to support growth, expansion, or improve cash flow.<=

/div>

Unlike traditional banks, our process is much simp=

ler. We typically don=E2=80=99t require tax returns or collateral, and appr=

ovals are usually based on the business=E2=80=99s recent cash flow. In many=

cases, funding can be arranged within 24 to 48 hours once everything is re=

viewed.

Even if you=E2=80=99re not actively lookin=

g right now, many owners like to keep an option like this available for whe=

n the right opportunity comes up.

If you have a fe=

w minutes later this week, I=E2=80=99d be happy to introduce myself and see=

if this could be helpful for your business.


<=

/div>
Wishing you continued success, and I look forward =

to connecting.

Best regards,

<=

span data-system-generated=3D"signature">

nt-weight: 700;">Lilian Llanillo

yle=3D"font-weight: 700; color: rgb(57, 208, 150);">FUNDING ADVISOR
<=

/strong>


.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774039066-email+%2=

816px%29.png" alt=3D"email (16px).png">
700;">

t=3D"_blank" rel=3D"noopener noreferrer nofollow">
nt-weight: 700;">lilian@kesefmarketing.com

mg src=3D"https://closeio-filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgm=

o8WoImXFkS0Dtk%2F1778774137354-phone-call+%2816px%29.png" alt=3D"phone-call=

(16px).png"> +1 (873) 771-7630
span>
________=

____________________

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg" alt=3D"IMG_5340.jpg" style=3D"width: 159px; height: 64.1=

129px;">


ibe-footer">


/YhwDK8b2tyEbUFWxrnxNv2WuB35FVbMzY5e4eFQpWxV/1TRpq4kUQd.png" alt=3D"" width=

=3D"1" height=3D"1" />

--===============2182699059810350290==--



--===============2816051746494269302==--

chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv4x-000000003MV-3ubE

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:36:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:36:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m478512586.xmail.ntesmail.com ([47.85.125.86]:52468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtqrJ-00000000Jc8-41m7

for sales@nk.ca;

Tue, 11 Aug 2026 12:06:04 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1051104_1418863448.1786471495171"

To: sales

Subject: =?UTF-8?B?UmU6IFN0aWxsIGxvb2tpbmcgZm9yIGEgcmVsaWFibGUgZnJlaWdodCBwYXJ0bmVyIGluIENoaW5hPyA=?=

X-Priority: 3

MIME-Version: 1.0

Received: from sales03_szx@bnclogistics.com( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 12 Aug 2026 02:04:55 +0800 (GMT+08:00)

From: Sunny

Date: Wed, 12 Aug 2026 02:04:55 +0800 (GMT+08:00)

X-WM-Tid: 0a9ff1ffb5f9d096kusy06a5572a14b8b2

Message-ID:

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: B&C International Logistics offers reliable shipping solutions

from China to the US, addressing challenges like rising freight costs and

delayed shipments to streamline your supply chain management. H [...]



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

[47.85.125.86 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.85.125.86 listed in dnsbl.ahbl.org]

[47.85.125.86 listed in dnsbl.ahbl.org]

[47.85.125.86 listed in dnsbl.ahbl.org]

[47.85.125.86 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.85.125.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.85.125.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.85.125.86 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.85.125.86 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.85.125.86 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?B?UmU6IFN0aWxsIGxvb2tpbmcgZm9yIGEgcmVsaWFibGUgZnJlaWdodCBwYXJ0bmVyIGluIENoaW5hPyA=?=



Hi partner,



I came across your company while researching businesses importing products from China, and I wanted to reach out.



Many US importers tell us they're facing similar challenges—



l rising freight costs,



l delayed sailings,



l limited vessel space during peak seasons,



l slow communication when shipments run into problems.



That's where we help.



At B&C International Logistics, we support US importers with dependable shipping solutions from China, backed by local teams in both China and the US to keep cargo moving and issues resolved quickly.



Rather than simply moving containers, we focus on making your supply chain more predictable and easier to manage.



Would you be open to a quick conversation to see if there's an opportunity to support your business?





Don’t miss out on our latest impro vements: hit . Receive Ongoing Info



To halt receiving emails, head to Adjust Inbox Choices.









Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv4a-000000003Hl-1wi7

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:35:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:35:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m81247.netease.com ([47.88.81.247]:59530)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtqL5-00000000DtH-0Hwp

for sales@nk.ca;

Tue, 11 Aug 2026 11:33:00 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_1042012_1444395078.1786469495750"

To: sales

Subject: =?UTF-8?B?UmU6IEV4Y2x1c2l2ZSBEaXN0cmlidXRvciBCZW5lZml0cyBmb3IgT1VSRUxBIG91dGRvb3IgR1BTIHdhdGNoZXMg?=

X-Priority: 3

MIME-Version: 1.0

Received: from lilian@ourela.com( [10.139.1.59] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 12 Aug 2026 01:31:35 +0800 (GMT+08:00)

From: Lilian

Date: Wed, 12 Aug 2026 01:31:35 +0800 (GMT+08:00)

X-WM-Tid: 0a9ff1e1330d069dkunmaba1ac9f148cf9

DKIM-Signature: a=rsa-sha256;

b=HYi0GRNzBeLjh0lj51l2o87OAT8Y9zjzrprfpa2HBf8MyObaYH2dqe2aMEwsz3xiIpLDKLezazO/HJTNfShVUklCg/cQMrakFM4+yMGRFEXDHTRjZFlQ2F+x3T4elWgwN4OVTFCmeXxY8v8yduk3cCcfthroB94+RotCikJJsRs=; s=default; c=relaxed/relaxed; d=ourela.com; v=1;

bh=v3T6ZZGiKqvJSMZDVzuBQR8z+jhKrtupPKW+YNtl88c=;

h=date:mime-version:subject:message-id:from;

Message-ID:



--=_Part_1042012_1444395078.1786469495750

Content-Type: multipart/alternative; BOUNDARY="=_Part_1042013_1449787921.1786469495750"





Dear Sales,



I’m reaching out again to share extra market & partnership highlights about OURELA’s GPS smartwatch series that I didn’t fully cover last time, which I believe will bring stable high margins to your business.



Why OURELA Mid-Range Outdoor GPS Watches Stand Out in Market

Most outdoor GPS watches on the market are either ultra-expensive brands like Garmin or fitbit or low-end basic smartwatches without accurate satellite navigation. OURELA perfectly fills this blank: professional full outdoor functions at mid-range price, so your channel can attract both budget-focused adventurers and quality-sensitive urban sports users.



Exclusive Benefits for New Authorized Distributors:

1. First-order exclusive discount for new partners to lower your trial cost

2. Free customized marketing posters, short video ads for your online & offline store

3. Priority stock allocation during peak hiking/camping seasons

4. Streamlined return & warranty service to cut your after-sales workload



Our 4-model lineup allows you to create tiered product pricing in your store: rugged high-end models for hardcore hikers, slim lightweight models for city consumers, maximizing your customer coverage. The built-in compass, altitude pressure monitor and offline trail maps are strong selling points to beat competitors.

Would you mind replying with a quick yes/no if you’re interested in receiving our full distributor proposal?

If outdoor wearable expansion is not your current priority, simply let me know and I won’t disturb you repeatedly.



Sincerely,









Lilian



lilian@ourela.com

www.ourela.com

Whatsapp: +8615914183886





在2026-07-22,Lilian 写道:



-----原始邮件-----

发件人: Lilian

发件时间: 2026年07月22日 周三

收件人: [sales ]

主题: New UK-inspired Outdoor GPS Smartwatch brand OURELA Distribution Oppotunity



Dear Sales ,



Hope this email finds you well.

I’m Lilian from OURELA, a UK-rooted outdoor smartwatch brand, writing to introduce our brand-new full series of professional Outdoor GPS Sports Watches, and explore exclusive distributor partnership with your company.



About OURELA

Founded by British designers & outdoor enthusiasts, we fill the market gap: premium rugged outdoor watch performance at mid-range accessible prices. Our core values are high durability, multi-satellite precise positioning, and timeless dual-scenario design (wild adventure + daily urban wear).



We own ISO9001 automated manufacturing factory and independent R&D labs in Shenzhen, and a complete supply chain to guarantee stable quality & healthy profit margins for global partners.



Distributor Exclusive Support

- Ready stock with 3-5 days fast global shipment

- 15-month industry-leading product warranty

- flexible MOQ



The global outdoor wearable market is booming, while mid-range professional GPS watches remain underserved.

OURELA’s “accessible premium” positioning will help you capture adventure enthusiasts segment users easily.

I’ve attached our brand catalog & product spec sheet for your reference. if you are interested for sample testing, pls fell free to let me know.



Best regards,





Lilian



lilian@ourela.com

www.ourela.com

Whatsapp: +8615914183886





Neo phish from nxcli

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dae@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv45-000000003B3-2wJQ

for dae@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:35:21 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:35:21 -0600

Resent-Message-ID:

Resent-To: dae@doctor.nl2k.ab.ca

Received: from cloudhost-3090806.us-midwest-1.nxcli.net ([209.87.149.148]:33570)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtpVZ-000000005EJ-3ri2

for sales@nk.ca;

Tue, 11 Aug 2026 10:39:29 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=2fd4e89872.nxcli.io;

b=gwGJG1u4IJOAQ17tJ9IslNpHEjDnsTgS2rH/u+gxXQyIrRQIG08OK752D1Cog1vzDXeHs7Q1EXqIi7Rt04/tuoj7lVACes0RIa2gR/oj4CWPbV4i9lcVcJBZIFFwNevF3G+I5DtLIjjWe8sHx1vNm/hMdZg6JtbeiGIuD+gRguqhRB5RqlGSrIjpns0rwJfvilReQZPN7A3qpnwwdoaducjY5Th3kFkWeblRlIx7lIKQm6BBuH2vl1H6UV73xp+7WGJWcdrwQ5sXfIEWPz1drXH1sdU+d2DscV7BrBSnCEPLIRu9D+RxUYfEAdQlyllpWTBX1ZXqpaKdF+TH5xXbNQ==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=2fd4e89872.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=2SS/kNgj1ZAvMcVdpUquqA6KXnhgx27WYkJMtIF

9zWA=; b=n6ksSsaI3Ztn6DgfXE3bgfVx7YsgfRrUjpSsQlEq2qcdIpw37xA0fTp

va+gVKV6ZnSbImLXgCyfQCYf8RnZkq1LobyVqdjUQEfoNkD1Nj5vXuOINfNkgCT5

NdekdMdhi6dT9tkdDhoR9rJQeMo2b5x+NfIAIG8ZUvzi3Ctab59fUyrbE7FuO39z

8CaMi9ATrEKG0PBUlZ+xk5qhgNC+oM8IHCID4yIyZsWh/TlM3+j58UimI9+U/eDe

eQrtpg4qCBH2RfnmFsNKl1k5hYA1G9/KOd6F7/KacfBbABcMhd7bjD8Jk7yDfUjP

48s5T9TxoWia4CTYKtnIQ5PfyL+LlqQ==

Received: (qmail 4227 invoked by uid 10222); 11 Aug 2026 16:38:27 +0000

Date: 11 Aug 2026 16:38:27 +0000

Message-ID: <20260811163827.4215.qmail@cloudhost-3090806.us-midwest-1.nxcli.net>

To: sales@nk.ca

Subject: Security Update For Enhanced Protection

X-PHP-Originating-Script: 10222:mdm.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: Neo Financial

Reply-To: postmaster@2fd4e89872.nxcli.io















Security Update - Neo Financial













🔒 Security








Security Update For Enhanced Protection





August 11, 2026 | Subject: Continuous Security Improvement




Dear Neo Member,





At Neo, the security of your finances is our top priority. That's why we're rolling out a major security update to our infrastructure today. This enhancement, designed to deliver unwavering reliability, reflects our commitment to providing you with superior protection.









🛡️ Next Gen Security





Advanced security isn't an add-on; it's the foundation. Every Neo account and card is now fortified with next-generation technology designed to stop unauthorized movement before it starts.













✓






Real-time Alerts





Get instant notifications for every purchase or money movement. Full transparency means you can spot any irregularities quickly.











✓






Mastercard Zero Liability Protection





You're not responsible for unauthorized purchases made with your card. Enjoy peace of mind with every transaction.











✓






Enhanced Authentication





Our multi-factor authentication system has been upgraded for even more robust identity verification.











This update requires action on your part. We've also strengthened our encryption protocols and proactive monitoring to ensure optimal reliability for your transactions and data.



Log In to Your Account



Need help? Contact us

















Web/SEO/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv3r-0000000038D-4Bcj

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:35:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:35:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northcentralusazolkn19010021.outbound.protection.outlook.com ([52.103.20.21]:11133 helo=CH1PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtpW2-000000005JD-2uLn

for sales@nk.ca;

Tue, 11 Aug 2026 10:40:01 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ra1/awIKBhfRPP7cTK/1V/CrNXlpXEoFGV3eRt/xQ1S290pEtUNy7htLGqt18aJxvUkvIJatUdbvJQlPVEatKnsXgdnvKBUw7CMq4J8UGHOLUEj3gr1WgGMtTnQEAgGa2CFlNe9caX+N99hSTMmzSoYB9Z8yO/wfiWK1/iAXd50l6e7He3pCbNN5lTkQi82fLq/3lTusf9yL5zfdQpnTKKc4UcrF/CRSgUsX+6cERttDkGRyjF5HrvZ7LdgNFw+cxHbiWFfS8Lr1mETibEqDjOoPg5owwfi+uJL1WE57OzYwDnZE3guYWthqYjtaCBjRUr5/6om+Kj5k/3Z/UIzl8A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=76Wcix/enr+v4Q7jo0aYCFCrASRiqSrRzQBknL0sjF8=;

b=JjMfXVk7CsiKM+Yth3N4ezKbcYc7WZTOmYtYRvb3qVKO+ybe7DDZKaA7sd4pA3uZWlF5eVYTlwR6/F7vFmhISBsDP3X1YXxg5XIOd+CgSUTDzK7tD6rnUD2EWmpuIeKhITKRaQ8b1avZNtgh28lMIKA5mRxVylHVWwFz7XYNjSkEu7ZWyeiUzWeQJ/pAGvaqgLTo/VQIQfpmL59Ti8e6GhNSHDmZMcqwD03vCHsc2hmRCG5XwIe1lNbHLcMJytqdAxeQYhClJFq6X0w6BB14i4rskY0oRfa1WXCUqnrKbi5iK4odAnpOr1yqSdHQACGEbOMC3dhv6i8ZdnyVcb4+0Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=76Wcix/enr+v4Q7jo0aYCFCrASRiqSrRzQBknL0sjF8=;

b=KkkHffOC4cNyTRrMLAWSvEtji2acXUKWWEkTzDHA3cHGU69JZYe7SqUyp7cOO1mUaAc+LWCrTfqcVF3+u1AWwuLUJe5XsjeCgnBoxnWZVfVo5OFTcHRenb+N2E9pkm2kFM0NVYx6dSWE61tKbvi8PtKcvBsyo1W476/RVMQUe5qwRPcVqIA8/a7kxgrNbt9iXpNTP1iPZ662Iozm+jMlFkrC9nERY2/dOH13wFxF7aJ8aEozMTc9KVFTXHc9Mc4QdqRYYdoVEFZPbTY4/clj+7g7S5hpcorNM6Fe7BKeGSPqyKzManyE3R4K2n82WHxFqruf+Gr6sOwDl6OGaskOOg==

Received: from BLAPR17MB4099.namprd17.prod.outlook.com (2603:10b6:208:270::16)

by SN7PR17MB6484.namprd17.prod.outlook.com (2603:10b6:806:355::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.11; Tue, 11 Aug

2026 16:38:42 +0000

Received: from BLAPR17MB4099.namprd17.prod.outlook.com

([fe80::7484:83ef:77f1:a2fc]) by BLAPR17MB4099.namprd17.prod.outlook.com

([fe80::7484:83ef:77f1:a2fc%5]) with mapi id 15.21.0292.024; Tue, 11 Aug 2026

16:38:42 +0000

From: Aden Clark

To: Aden Clark

Subject: Re: Share

Thread-Topic: Share

Thread-Index: AQHdKBmH1OJ3zXZV4k+y6J9mJiJePLaZD13u

Date: Tue, 11 Aug 2026 16:38:15 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: BLAPR17MB4099:EE_|SN7PR17MB6484:EE_

x-ms-office365-filtering-correlation-id: dac3bea4-4cda-4150-fe0e-08def7c700de

x-microsoft-antispam:

BCL:0;ARA:14566002|48001999003|8062599012|8060799015|704163111799003|19110799012|2604032031799003|31061999003|45011099003|16051099003|15001099006|55001999006|15080799012|15030799006|51005399006|37102599003|4140399003|25010399006|37011999003|22091999003|24121999003|40105399003|26121999007|260806224601699006|2607281247196008|11120399003|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?qn2a/Doa50MDZzQpFEW6bbaGhN5J2grBgHwzDcMjIawMoNyUCkTyu3gRo3gO?=

=?us-ascii?Q?RZculU4UsvHxbpWzAT2GKaLg31+WJ4+mQeKOJfqt1fk/fXmExduKg6Qqpkxj?=

=?us-ascii?Q?2TVFPzoQXlEJYA6m6jYwoKfpBUu4nHn3BaGpF1IZz3pUuDS8oYlo0aYP1JH7?=

=?us-ascii?Q?bUVyNxoWyQ5tJJXmKueNrVzfN9f2JcjrQDhMlFx5+7KzzSAklGePUPJ9cZC5?=

=?us-ascii?Q?VRIgPvAT3LUTNPzlajYxuIrvyKh8hLxn5nyjTybiF+KcwU55NGjbOM4Pwh+Y?=

=?us-ascii?Q?wa7HlHVpAG19msPxgw8FCCWkTDkMJrqk3iJQKDztq7PFDDCkw+7ruUMX6Dsr?=

=?us-ascii?Q?a3lteaLzHeAfx0MldD27U0cEZHO+irIgcD0d7hDIpNUm4IfITH/tQbW3HBXy?=

=?us-ascii?Q?yaZAOGY0B1CpndZbtdahmkge4RulYlgyKoltZvz4taAnOR5hEFjiI2hOIyDt?=

=?us-ascii?Q?3t18UjR30YluvQBT+FySHMVxMqSTWxk/YFkh8b7XUUrpGSR3Bhrb3kELobHv?=

=?us-ascii?Q?0C3iAvVvbxPBHb9/wIUqQcrbTcdjp8AsF5ts2hpZ87FYsTsN3DvPlOj5IA/u?=

=?us-ascii?Q?RaMOILQigU7thDqJ+tn9heSmWak+kFdp2MIKt3M/TM5f0/ciXlLLw+K1/EhA?=

=?us-ascii?Q?LLUI9iFXaUGemLxIlDNevw34qjDX9YSszMjG/xTgBJ6DSbwOPmzhzzoxrqZD?=

=?us-ascii?Q?9IT/gup6n+wrSo80yOeMIew2PIPzDkC9FUPqJ5+BD9HEdE2EH039ISexQ5mD?=

=?us-ascii?Q?ZEjVF7YE5owKaNMK2z0xHr3gXvIpIfjrag7R3sDpHR8/jlhEJaqAX5gL/yoq?=

=?us-ascii?Q?fHN7Dn+XfLVLMt+OpX2i2SfGnBRok7LpCGQ2/vbmAv0CwnFEMof7dtfp3/EE?=

=?us-ascii?Q?GZn5TIuuTAwCNLW2s8xRZS8sCuBkmb9lGzDw5apP8figbtUGpS/652JeiPAN?=

=?us-ascii?Q?TmSbRntZsgmKAWXJA3HL45qeU8gMh0otti1lSN9p/LRL1M/vg110eFJzyZlD?=

=?us-ascii?Q?tZQDEEKiXjoaFZkOUU4yAwhYwrBqcXqjkK+doEhyVpisVFYhyWMJwDn+ZwWW?=

=?us-ascii?Q?FzYmHAubOCIaUUydyTkqjJpPiQVjgfCOhQbLWIwCSlqYRjVZ6R/2eQ4wBgpS?=

=?us-ascii?Q?DS7RcbGqX+Dd3OJoL4GVOuxKRO2vw+sbOuBze1nR9eWWsyzcvpF14vYf2pPU?=

=?us-ascii?Q?AcHcr1xuRlBGQYUE64IN7iIUm9eKzChmZbXco9ECa7UceGH/GkIIrwllzVbp?=

=?us-ascii?Q?Bqxs2BdPmzQanl8keOaVP4md1D/+YwwzJ2eF96Ucb4isANjux3IHO+Ss+enq?=

=?us-ascii?Q?U2O+4emOCUypXmHYC8PqikgDQ24f8+a5ZghH9eOZKIFB30l8NkhoUxr66K6d?=

=?us-ascii?Q?7jn/5hAeEs5Vs6bfw/mUvXMRmXkuW/oDwdykWpqYhwfShfbcxidwrUjUpXHq?=

=?us-ascii?Q?30e5AZ0x1Xs=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?4lNMkU1Ue1M2AM3oyIrpUaqYv0OVl9D2NejDU9ZZE4W1bIy2G+BKcft/7PZt?=

=?us-ascii?Q?HVsZfCg+KK57m+aszOz4Rdg0+tCVJul3NFGrxTaNZLOr2w/aERhJtV4cVsOr?=

=?us-ascii?Q?d3lUCfXxbDFw0LifgjttdZawnHAimD8vtXeYGT3mrO/fDlKEOocddJU6UWkq?=

=?us-ascii?Q?e11B2s6uwHicNMGgy++uOuYk9hl879E2HsEV46bJUTutNzQ2IXYHfGdTbvzs?=

=?us-ascii?Q?jef6vqoSfh+rnUj9QhunK/6Gyej7y/BEO/2cJTXiphgVDTfbejV1/Jr/agBZ?=

=?us-ascii?Q?lbf0EqAc5v4fnP8m7AYvAqp3U8OH8StZHKH7/Wtc1DuyXFxtE165szCp5FuA?=

=?us-ascii?Q?l+ckKjMkJuG3YFhkOGuwtJB8H3jN60/PGCLrGRzFGxXQ2CZpqPXR0t0EV52Z?=

=?us-ascii?Q?JRM8pEZRMx4Kqd+w3CSTI3ORzdxmbE3hSnd1zYSdDGkjQ9XlMB1lCI9rnRMX?=

=?us-ascii?Q?GAuOLA2WWm11xyFGxcw0ISu6+0juLb0BezzQSDlYNc+vnMo8zJ7kl6NbK3kW?=

=?us-ascii?Q?qp4ktqin6xCE3oru79mi0ohqFs0C1kb84gol4DhqsfAFntMQ8wje5VcpfsQg?=

=?us-ascii?Q?xRkoN5deK4FhTqYPAj125sYCvAFMGTW2f+Pntn8fBPAeLFgsIEXUx7FABFTM?=

=?us-ascii?Q?wnnjH9kEddk2y8LhQdhnCXnN9n+CKNz4atMV+B+PtmbFPnPqLFRN4oiMf0/g?=

=?us-ascii?Q?AXO3BTEcuypr3JGdHgNBa9+3XeK4vfVBgK1c+4Dj3fvHkJpSzHWEzrqBifeJ?=

=?us-ascii?Q?gQkL1DXyNuln1wvid5uBRmahXK05dMQTp4/oyyQAvDNjMm79Pw5wZDjMuWBJ?=

=?us-ascii?Q?m/g0lCUiIADGIk2VvpfqqZR/fiqdQEq5ZveZuMrn0upFFnZDBIlkNVFqICV2?=

=?us-ascii?Q?fm0sydXDjepkEds/s3fdUWPcB1sBRId5q/v6HSEbGa0jZnz+abr4/GeaAOBC?=

=?us-ascii?Q?DfB/AytQ/xMMSGTQk7wdY75NVz9L5MQk6riWsY4a3tIpE0URpaKC0MmkV1J2?=

=?us-ascii?Q?rNsGdidG0D0R/hCpRjogFhfgHxeLoZrMt/K61lusbpPPH67BO13iZoEbdnKI?=

=?us-ascii?Q?aFu8QhrguifyIMvsG9teZcd8cRAkm8SWimy8tHuadG1tjaDZ+Bcj/rTznqNA?=

=?us-ascii?Q?odqJmKHIiQFs+xnh6PKc6AwP4ah30qN9vA4tllBMwQedOBKBqZy/HafTlSAZ?=

=?us-ascii?Q?ZMJOl4p1m9lLymaKVc0bRJcb1gCYH6rSSrAw1mlJapweW0EkDubpFW3/b5bJ?=

=?us-ascii?Q?oDjmirfGQmnZefjQ6HzS9xiZ6oI6Yh3PyEVZ+mhlPqrdoD+/8qRN5Mgh5HT/?=

=?us-ascii?Q?R9qpiOw2fz+dYwSGdcL5N+sfPuLi9zHtmlowE5gGsfUSXUrA2YqdBw10erIy?=

=?us-ascii?Q?gQZwv2FeZxZRzr3AsRMcLbJXBr7qIFHU6MTevOXvZ1bwnRLXAH5EyXeQuluh?=

=?us-ascii?Q?VDZM2Ed6sJmTEUt9HZfl1wDUqfH3e47j?=

Content-Type: multipart/alternative;

boundary="_000_BLAPR17MB4099C28E159C39B6CC76A98AE8DD2BLAPR17MB4099namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: BLAPR17MB4099.namprd17.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: dac3bea4-4cda-4150-fe0e-08def7c700de

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Aug 2026 16:38:15.3682

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR17MB6484



--_000_BLAPR17MB4099C28E159C39B6CC76A98AE8DD2BLAPR17MB4099namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,

I am still waiting for your reply.

Please let me know, if you are interested! Send you a pricing?

Thank you.



________________________________

From: Aden Clark

Sent: Sunday, August 9, 2026 9:40 PM

To: Aden Clark

Subject: Share









Hi,



I found that your website isn't doing well and has customers in Google sea=

rch results.



We can place your website on Google's first page.



May I send an SEO proposal and price?



Thank you.









--_000_BLAPR17MB4099C28E159C39B6CC76A98AE8DD2BLAPR17MB4099namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 I am still waiting for your reply.



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 Please let me know, if you are interested! Send you a pricing?=




8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












yle=3D"font-size:11pt" color=3D"#000000">From: Aden Clark


Sent: Sunday, August 9, 2026 9:40 PM


To: Aden Clark <aden5298.webb@outlook.com>


Subject: Share


 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">







t">
t; color:rgb(0,0,0)">Hi,




t">
t; color:rgb(0,0,0)"> I found that your website isn't doing well and h=

as customers in Google search results.




t">
t; color:rgb(0,0,0)"> We can place your website on Google's first page=

.




t">
t; color:rgb(0,0,0)"> 

style=3D"font-family:Calibri,"sans-serif"; font-size:11pt; color=

:rgb(0,0,0); background-color:yellow">May

I send an SEO proposal and price?




t">
t; color:rgb(0,0,0)"> Thank you.




t">
t; color:rgb(0,0,0)"> 




nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">
















--_000_BLAPR17MB4099C28E159C39B6CC76A98AE8DD2BLAPR17MB4099namp_--

Domain for sale spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv3W-0000000033c-0I5G

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:34:46 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:34:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f181.google.com ([209.85.215.181]:61528)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtpAy-000000001ca-3AGD

for root@nk.ca;

Tue, 11 Aug 2026 10:18:12 -0600

Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-c9e607d81fcso2005190a12.2

for ; Tue, 11 Aug 2026 09:17:18 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1786465032; cv=none;

d=google.com; s=arc-20260327;

b=RYriLEMvdBtZpHDkggX/PjsEFZqe1JTxs9KMlC/BV2icbkdGPRSh6A4/BrRnDQM4dS

1uCp+uDeq+4IYeCPPIxh1w8mmeR1C9p/MiGalwuK8CRCwLEpapyT1lucJeiS0FA7PJWG

0wZ6Jtpb5/36QSSn2YDNpNzAunv3DEE522/G6lEZcKMzN50P8JHW5zF6bWoy8aFWGzn2

kMUulVzF31qDohv00zip/+7zsPsisADHDPKUthqOZ9vwcFWWsiLZmhqhH6NXCd9hmrIe

mLF4wbF6XJH6obQn+GS/7x5mgOW5eWPmEdDpgFj1e498MkpOqD4YtFq3uvkpviUUFx+D

Xqbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=QKZ6nRbk4zyBnHM0qobsvXrfC+O1Web7jAjMtK1pZJc=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=mvkAMExa6I6dVlUvGCAdz1ucVzSxPIVbOQpNvaFvCMgwpgsGScuWV1osa/5TvFmzeY

ortpj5mYcvA2XLZdgnk0f3o0pIrVKPfNauXt8gQ9L27Nq0KKD5I13QRwqBB0biPZ4bbB

xeAD4Lq3duOREmwtq8qv+uImZHbKxfacMMSayarJSZ04OZfsPRiRpoDA3ab2ziX04ams

oejXUAt6Y45F7UITEc0G3KGgW1JJiiyOJN1jScwVAE1k31W3M7IsNuc8vG9D2YuuZAV+

yyfIZ56q/QOJUZSf9DuR96B8oekw4NY6AAujvFR+VbehmvtA8yfhJhjZXCMU4UOWBxZo

UwVQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1786465032; x=1787069832; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=QKZ6nRbk4zyBnHM0qobsvXrfC+O1Web7jAjMtK1pZJc=;

b=jLZZjEEMfgL8vp491EoL0vB8a0G+kvCHP6mnAVJYhoSJdraOsHAmSjhw0kzEBVw4f3

rnN1jvF+9zrLASZw9n32s3lvRYLPErUXqoPnLleNCJMY48CcKu+zBN/ikmAW7sLjx61w

xrTyGoYMN0qxeBj+SpeKh+nmxEaXYB5I4ZMV0ytAWlBESxMeSdFzQMWC3ohcpn5YRmuy

vihYmc6J5sCY3rKDzTNP/afqwAvb8Fk0ZYtnwu4Jdxc/QJ7Mo1LBlyLGTTGtua1sSoDM

EoKFV2pDQPzJs+ZDcQxUJLWhM7DIOKZuEqfkT+pe6JplTOEVhg6euU35vSzv7TZMpRE7

kuZQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786465032; x=1787069832;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=QKZ6nRbk4zyBnHM0qobsvXrfC+O1Web7jAjMtK1pZJc=;

b=mn4wZJql4tv5NV5Q3L4MH+3/+GmZOJTlTu8l4DBYHrwCAxLkWn9uhcgaa+u2IkY1qp

59jhCEs4CLLwGSlZAO8vteZ7vLzZjHiVO0tkfI/6pRCaB4SfX60u5kkFNHDMiIwVYfK4

OtFYWq6Fhl8iuug9heKXBILBawuuaHnrcm+5ob8/EGcIoEJkDkPBSq8Kxnbrt/oyN3HB

9Vvo36bZb8Dej9f6l755Jn57/KfSHCsAAEE6uRjFLZEu87AusVKV77wtD+DnzFOLGkls

Ii5GOxFUzsGsJh8//d0WXMLOGCZ05kbH7suwqtipsQqzWv9wM4j2lDQghoedfHenBEnK

/nJg==

X-Gm-Message-State: AOJu0Yz3Cd+e4pbL0BInxiNMMEDIX1q4VJiTxBCfXpUti99D8fZNiCN0

CPZ0PRwp5TEzMdt+uRUmJW3DiThMStrhBiLDGQhU7vUu0HgCRzI3MECrgqM4nIMxoEO54Y/BigF

aoFy4Mnr4Y/SJiTisKUKf3peoKUnoDGQC8/PO8n4=

X-Gm-Gg: AR+sD12N0GpUp9BJfYMivopB9EBdpjFOOnMXuc9OuMVyv6nk8PRkRoEfylEiFatM3nR

njlCcw2sjWNfpw7AqSofl3IwAhwh4RdpVJVW9NNfQC+pLuXoJqvwrms7RjBMm8xSVb1enweSDY5

Sq5jtQbmgUQ0w6ULnB14k0shpIVYTQY90SvjnamaGgjIRy7TGAUKl3MSO0raQyoXypOs2SzpNOu

ZEXVaYn4t2gLxohsMqxxYNCdUxrkym2cZ/JB1UZEuDcTobJEaYbLhs9WqvYbNb6WvF29f/0vnIR

e5+qP9fDv06i4Ov6gpJNKIfCzRTNKopONFubcyth9ys=

X-Received: by 2002:a05:6a20:2d27:b0:3cb:b3ea:858a with SMTP id

adf61e73a8af0-3cc2b9ffb3emr6037886637.20.1786465031389; Tue, 11 Aug 2026

09:17:11 -0700 (PDT)

MIME-Version: 1.0

References:



In-Reply-To:

From: Peter John

Date: Tue, 11 Aug 2026 17:16:58 +0100

X-Gm-Features: AUfX_myrXphJz00bx-cPLP-DY7oKZg687DTQdWL8oxqAHwbUVRCNv10I9N8yJbs

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009984720658c7cd5c"



--0000000000009984720658c7cd5c

Content-Type: text/plain; charset="UTF-8"



Hello,





We have decided to do another follow-up and might be the last follow-up for

the availability of the domain name

VoipEdmonton.com and we have also decided to reduce the price one more time

to $200.





To acquire it now visit

www.VoipEdmonton.com to take immediate ownership.





Don't let your competitors get it before you do.





With Best Wishes.



On Wed, 5 Aug 2026, 16:12 Peter John, wrote:



> Hello,

>

> We are yet to get a response from you.

>

> We understand that you might be busy, and we appreciate how valuable your

> time is.

>

> The Premium Domain VoipEdmonton.com is still available and is for sale at

> a discounted price of $299

>

> We made a discount on it, perhaps your service is interested but not OK

> with the former price.

>

> Visit www.VoipEdmonton.com to purchase now or make an offer.

>

> Are you interested? If not let us know so we can contact other businesses

> and stop contacting you.

>

> Warm Regards.

>

> On Thu, 30 Jul 2026, 16:06 Peter John, wrote:

>

>> Hello,

>>

>>

>> Despite the fact that I haven't heard from you, I am confident that

>> purchasing the website domain VoipEdmonton.com could produce wonderful

>> benefits.

>>

>>

>> Your business is among those with the most potential suitors, according

>> to my review of your main website. While keeping your brand identification,

>> you can either establish another sizable website on this domain name or

>> reroute it to your current website.

>>

>>

>> Visit www.VoipEdmonton.com to purchase it now for just $350 and you can

>> also respond with your best offer or make an offer.

>>

>>

>> If you have any queries or worries, don't hesitate to get in touch with

>> me.

>>

>>

>> Thank you,

>>

>> On Tue, 7 Jul 2026, 19:46 Peter John, wrote:

>>

>>> Hello,

>>>

>>>

>>> The premium domain

>>> VoipEdmonton.com is currently available for purchase on GoDaddy

>>> Marketplace.

>>>

>>>

>>> This domain is a strong match for businesses offering VOIP IN EDMONTON

>>> and could help increase your online reach and brand visibility.

>>>

>>>

>>> The domain is available for $499 at www.VoipEdmonton.com.

>>>

>>>

>>> Please let me know if you are interested or would like to discuss

>>> further.

>>>

>>>

>>> Best regards,

>>>

>>>

>>> John.

>>>

>>



--0000000000009984720658c7cd5c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

We have decided to do anothe=

r follow-up and might be the last follow-up for the availability of=C2=A0 t=

he domain name=C2=A0
VoipEdmonton.com and we have al=

so decided to reduce the price one more time to $200.

">

To acquire it now=

visit
=C2=A0
>www.VoipEdmonton.com
to take immediate ownership.=C2=A0

=3D"auto">

Don't=

let your competitors get it before you do.=C2=A0

r>

With Best Wishes.
v>


r" class=3D"gmail_attr">On Wed, 5 Aug 2026, 16:12 Peter John, <
=3D"mailto:peterjohndomain@gmail.com">peterjohndomain@gmail.com
> wro=

te:

order-left:1px #ccc solid;padding-left:1ex">

uto">Hello,

We are yet t=

o get a response from you.


o">We understand that you might be busy, and we appreciate how valuable you=

r time is.

The Premium D=

omain VoipEdmonton.com is still available and is for sale at a discounted p=

rice of $299

We made a d=

iscount on it, perhaps your service is interested but not OK with the forme=

r price.


">
Are you interested? If not let us know so we =

can contact other businesses and stop contacting you.

">
Warm Regards.


ail_quote">
On Thu, 30 Jul 2026, 16:06=

Peter John, <
ank" rel=3D"noreferrer">peterjohndomain@gmail.com
> wrote:
<=

blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=

#ccc solid;padding-left:1ex">
Hello,
iv>



">Despite the fact that I haven't heard from you, I am confident that p=

urchasing the website domain VoipEdmonton.com could produce wonderful benef=

its.



=3D"auto">Your business is among those with the most potential suitors, acc=

ording to my review of your main website. While keeping your brand identifi=

cation, you can either establish another sizable website on this domain nam=

e or reroute it to your current website.

<=

div dir=3D"auto">
Visit
ipEdmonton.com" rel=3D"noreferrer noreferrer" target=3D"_blank">www.VoipEdm=

onton.com
to purchase it now for just $350 and you can also respond wit=

h your best offer or make an offer.


ir=3D"auto">
If you have any queries or worries,=

don't hesitate to get in touch with me.


iv>

Thank you,

=


0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<=

div dir=3D"auto">Hello,

=


The premium domain=C2=A0

>VoipEdmonton.com is currently available for purchase on GoDaddy Marketplac=

e.



"auto">This domain is a strong match for businesses offering VOIP IN EDMONT=

ON and could help increase your online reach and brand visibility.

v dir=3D"auto">




r=3D"auto">Please let me know if you are interested or would like to discus=

s further.



v dir=3D"auto">Best regards,


uto">
John.










--0000000000009984720658c7cd5c--

Domain for sale from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv3K-0000000030J-0Tmv

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:34:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:34:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f182.google.com ([209.85.214.182]:60621)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtpAe-000000001Yo-07uM

for sales@nk.ca;

Tue, 11 Aug 2026 10:17:52 -0600

Received: by mail-pl1-f182.google.com with SMTP id d9443c01a7336-2d049069377so1282995ad.0

for ; Tue, 11 Aug 2026 09:16:57 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1786465011; cv=none;

d=google.com; s=arc-20260327;

b=S6xAuGKNZ9oH/gXEJTw3SF1G+hyJp5Ucl+XReKUj08GUXzMPeXjHnhU08qkSltspJX

cNxQyBaMUSw1tGDXP1cVAv5eInkfhQuubCCvkJIs0vDMcnNsK8e0smIEPJryDB+Hanr1

5jUIrJJ+O05aq5g5aHY2NZBePXhEOkzkJRFdOwzVJoMTMdZeRfpdj3Wrj6oAsElgTm2p

dk1C6z519tOpcCW14dq2S940sL/O3oYSvvc84/jaCcSNIoGAlX8U6OB8+4UDMv0BByN5

cZgbNS7oXIBm2cvuGa3bOEZFueSlO/cNp4vjC+bqYO0ZAN0vWZALZEEi+/6vfpoPaqQW

no5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=/FiXxPaGxUFD8g/oYgJjTGOFo1R1pAl5TbVCO5tB5y4=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=HEfRT41bSjJxdunSRDecKr1ZSmX9zJYH07vpc20V+3kudFl1xy/aNXhmMqvMi+AJR3

7gYM35qhHY+e08r7JTEOZed4F89pn8hh2jEtUG4fCRJpNqU4lhAscwfC/bq3A7GpjzOi

NRnLl36XYkJC+YcGpCVNFPcDhEJtmlOdDYKC7uMKRlNa7sroikHQSzeDYJJWFHcMc9Hh

UlVX+3MSE9B9qlkzOEq6/HBWR+UpHDJ82Z/sI9hGoAGqBVlowQgjvt/rJn2Omd3IO67f

oQLLT9MEvq/rw1uFdrsgX1Nhh6lWSKpDeFMw1F4NCM9OsvGnfLSZWaS7EspxSW9eWWeQ

MTbQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1786465011; x=1787069811; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=/FiXxPaGxUFD8g/oYgJjTGOFo1R1pAl5TbVCO5tB5y4=;

b=qRx2JLAytleolsdpyl2Ep0KhrNXb1D0uGUwUgZBdpzau6UyZGs/DwDH4IwvGtK4pVA

tnhY0EVN/tpowBf97bfmA7ABrjSKeuMTdRmnr4R1597QpU6JYPPzySoQczg+zEwGxkWs

bmoGZVUkSsECom38BDMtZIQ4FHnNl2yABcMc8Utjsmwd6xJCEqNusqjTe+okH3aQ/4hf

1IbbsTVaVgMVisa7JkRvXhGPMPWylFE+WPyROPNvMU72Pz0J8RK9NoAdzGejBfAq79YY

YczGuNlhH0V/EsXiMzAR6BODo/t1H/IvJZ34aMrDFZaBh472+hCRz8FM4wSpmuQgGgYU

LxkA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786465011; x=1787069811;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=/FiXxPaGxUFD8g/oYgJjTGOFo1R1pAl5TbVCO5tB5y4=;

b=NR/VjfgjkLdwmRBl49gmkgFALi1Ft+egxYFeGT4lZcDszK9ycqLEHL33pYRKeNX/Cl

RK91Ydexom0XnxQKbtQysWs5g1m/ZfNC/+LjvCSoDrNgz2Mh04gKN7yjW7dOHUsLJUCI

CHg/iTemClDVQjqv4U54NFHoT/YUvId+iA2+YehfW2QGZsGH9dZj1V4PmXWMMBbJHv4W

OO33hQdYag1DOm98gc8XaGzo7xiUCEWwOjNMWiWiOqgsOVTu3WqQtH8wmu5k5Xtm+lRD

KasQFm9AVXJZcWsQKpA8oCbjVpCTKSWgaNjDm3cRqzB5b6RPcQ80wfiovBglDw6OmzDB

BTSw==

X-Gm-Message-State: AOJu0YxPnGYU7vcqzhbaOv8V3uSOyQdUmsIB5XCJOThYGgqqSxdEFwyI

UZjPyuSIgXjAfzxm+Xph8bJyZDNhjBoOflGNkSk0eHyi22QdYoYGgvectD/LsacVh0oz6Rbjjqw

fTVpvzOpnUyqNkv0GRm8/rr+NiV7WW5J1hJ2ClOM=

X-Gm-Gg: AR+sD13A6hYAbLewBL9OBqtEOfJAvtaB9HhtDxXgBvuQA8DEBL2x/v9+ftIC1TxdZYQ

+9lp7DvM3r9a+mzaoteWXi8sjpZdFngbifQcrFQFVMqusenEr8tHEuXbBwe6CLNDA6wROfjaxZ6

HbIirlXsbmNGU9TbEYyICbYtdw5AL4OiKJoQZthNv+jmIMFmmmHJsNyZc64bsfkUqR3CnPZaJAe

HvZLFXv5x55v9fQDDHlnxm5nVAb8yyRJaiIcWBAg5bWfy/UjpuiwZiMHNhSp/ECStwOpIzFNgbu

K9O1CqkQMQWbvDZHPZPoQmBxCfY+aZ9y+z+hMbIvP1c=

X-Received: by 2002:a17:90b:4cca:b0:38e:ad9d:1151 with SMTP id

98e67ed59e1d1-392ec39335amr5031089a91.4.1786465010840; Tue, 11 Aug 2026

09:16:50 -0700 (PDT)

MIME-Version: 1.0

References:





In-Reply-To:

From: Peter John

Date: Tue, 11 Aug 2026 17:16:38 +0100

X-Gm-Features: AUfX_mzf44UBWvRdijfJl3DqN9Wv9I6fDipq6IinT625-Mn-LdoM21vDVBCXDgA

Message-ID:

Subject: Re: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000005ffae00658c7cc4c"



--0000000000005ffae00658c7cc4c

Content-Type: text/plain; charset="UTF-8"



Hello,





We have decided to do another follow-up and might be the last follow-up for

the availability of the domain name

VoipEdmonton.com and we have also decided to reduce the price one more time

to $200.





To acquire it now visit

www.VoipEdmonton.com to take immediate ownership.





Don't let your competitors get it before you do.





With Best Wishes.



On Wed, 5 Aug 2026, 16:11 Peter John, wrote:



> Hello,

>

> We are yet to get a response from you.

>

> We understand that you might be busy, and we appreciate how valuable your

> time is.

>

> The Premium Domain VoipEdmonton.com is still available and is for sale at

> a discounted price of $299

>

> We made a discount on it, perhaps your service is interested but not OK

> with the former price.

>

> Visit www.VoipEdmonton.com to purchase now or make an offer.

>

> Are you interested? If not let us know so we can contact other businesses

> and stop contacting you.

>

> Warm Regards.

>

> On Thu, 30 Jul 2026, 16:06 Peter John, wrote:

>

>> Hello,

>>

>>

>> Despite the fact that I haven't heard from you, I am confident that

>> purchasing the website domain VoipEdmonton.com could produce wonderful

>> benefits.

>>

>>

>> Your business is among those with the most potential suitors, according

>> to my review of your main website. While keeping your brand identification,

>> you can either establish another sizable website on this domain name or

>> reroute it to your current website.

>>

>>

>> Visit www.VoipEdmonton.com to purchase it now for just $350 and you can

>> also respond with your best offer or make an offer.

>>

>>

>> If you have any queries or worries, don't hesitate to get in touch with

>> me.

>>

>>

>> Thank you,

>>

>> On Thu, 23 Jul 2026, 17:45 Peter John, wrote:

>>

>>> Hi,

>>>

>>> I noticed your business specializes in VOIP IN EDMONTON

>>>

>>> The domain name

>>> VoipEdmonton.com is currently available and could strengthen your online

>>> presence, whether as a standalone website or by redirecting it to your

>>> existing site.

>>>

>>> Asking price: USD 400 or best offer.

>>>

>>> Visit www.VoipEdmonton.com to purchase, or reply to this email if you

>>> have any questions.

>>>

>>> Best regards,

>>>

>>> John

>>>

>>> On Tue, 7 Jul 2026, 19:45 Peter John, wrote:

>>>

>>>> Hello,

>>>>

>>>>

>>>> The premium domain

>>>> VoipEdmonton.com is currently available for purchase on GoDaddy

>>>> Marketplace.

>>>>

>>>>

>>>> This domain is a strong match for businesses offering VOIP IN EDMONTON

>>>> and could help increase your online reach and brand visibility.

>>>>

>>>>

>>>> The domain is available for $499 at www.VoipEdmonton.com.

>>>>

>>>>

>>>> Please let me know if you are interested or would like to discuss

>>>> further.

>>>>

>>>>

>>>> Best regards,

>>>>

>>>>

>>>> John.

>>>>

>>>



--0000000000005ffae00658c7cc4c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

We have decided to do anothe=

r follow-up and might be the last follow-up for the availability of=C2=A0 t=

he domain name=C2=A0
VoipEdmonton.com and we have al=

so decided to reduce the price one more time to $200.

">

To acquire it now=

visit
=C2=A0
>www.VoipEdmonton.com
to take immediate ownership.=C2=A0

=3D"auto">

Don't=

let your competitors get it before you do.=C2=A0

r>

With Best Wishes.
v>


r" class=3D"gmail_attr">On Wed, 5 Aug 2026, 16:11 Peter John, <
=3D"mailto:peterjohndomain@gmail.com">peterjohndomain@gmail.com
> wro=

te:

order-left:1px #ccc solid;padding-left:1ex">

uto">Hello,

We are yet t=

o get a response from you.


o">We understand that you might be busy, and we appreciate how valuable you=

r time is.

The Premium D=

omain VoipEdmonton.com is still available and is for sale at a discounted p=

rice of $299

We made a d=

iscount on it, perhaps your service is interested but not OK with the forme=

r price.


">
Are you interested? If not let us know so we =

can contact other businesses and stop contacting you.

">
Warm Regards.


ail_quote">
On Thu, 30 Jul 2026, 16:06=

Peter John, <
ank" rel=3D"noreferrer">peterjohndomain@gmail.com
> wrote:
<=

blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=

#ccc solid;padding-left:1ex">
Hello,
iv>



">Despite the fact that I haven't heard from you, I am confident that p=

urchasing the website domain VoipEdmonton.com could produce wonderful benef=

its.



=3D"auto">Your business is among those with the most potential suitors, acc=

ording to my review of your main website. While keeping your brand identifi=

cation, you can either establish another sizable website on this domain nam=

e or reroute it to your current website.

<=

div dir=3D"auto">
Visit
ipEdmonton.com" rel=3D"noreferrer noreferrer" target=3D"_blank">www.VoipEdm=

onton.com
to purchase it now for just $350 and you can also respond wit=

h your best offer or make an offer.


ir=3D"auto">
If you have any queries or worries,=

don't hesitate to get in touch with me.


iv>

Thank you,

=


:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
=

Hi,

I =

noticed your business specializes in VOIP IN EDMONTON=C2=A0

=3D"auto">
The domain name=C2=A0

=3D"auto">VoipEdmonton.com is currently available and could strengthen your=

online presence, whether as a standalone website or by redirecting it to y=

our existing site.

Askin=

g price: USD 400 or best offer.


=3D"auto">Visit
oreferrer noreferrer" target=3D"_blank">www.VoipEdmonton.com
to purchas=

e, or reply to this email if you have any questions.

>
Best regards,


>
John


=3D"ltr" class=3D"gmail_attr">On Tue, 7 Jul 2026, 19:45 Peter John, <
href=3D"mailto:peterjohndomain@gmail.com" rel=3D"noreferrer noreferrer nore=

ferrer" target=3D"_blank">peterjohndomain@gmail.com
> wrote:

>

px #ccc solid;padding-left:1ex">
Hello,<=

/div>



to">The premium domain=C2=A0
VoipEdmonton.com is cur=

rently available for purchase on GoDaddy Marketplace.

">

This domain is a =

strong match for businesses offering VOIP IN EDMONTON and could help increa=

se your online reach and brand visibility.


>

<=

div dir=3D"auto">

Pl=

ease let me know if you are interested or would like to discuss further.
iv>



">Best regards,



v>
John.












--0000000000005ffae00658c7cc4c--

Loan spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 16:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtv2F-000000002VN-3MPM

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 16:33:27 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 16:33:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:44060)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtokH-00000000KBl-3cBo

for sales@nk.ca;

Tue, 11 Aug 2026 09:50:37 -0600

Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-2cf50c6f235so1304355ad.0

for ; Tue, 11 Aug 2026 08:49:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1786463376; x=1787068176; darn=nk.ca;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:content-type:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=2Sa5nByVf2L43kFds0qE3iPirwysWlEdfKrPU9C1xKY=;

b=yLa0ghXfVTVwDxtwJtIyjFlovrg3bCgwO0PEsPu06CkZFEppmWNIr0w2c9STBjZncp

JGDviMNLiRoXKLULbkRUDQc3yxm9YxyU4P0z+UY0J5LzTEFhdqaLXZSDDCWY4xQ0/kHL

tJ/a6vs75TqJE3kQb4VxUqdB9Lxqa+p/ar657eyRKR81XKPwY+pNq0o/fWj/jG5iErhZ

Dlk0vDEedh4dWNKqisTImSZm8oOMco7ppObS8KNztXAIf+OOmqPwksjp70oRxhB+TVq/

oFY69ztKONg+1kB6JUYgazn7sJw5hfTm39dF6n0S+hZbAj/Ns4J0vGA1M4hlyq26Yrjc

V/6Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1786463376; x=1787068176;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=2Sa5nByVf2L43kFds0qE3iPirwysWlEdfKrPU9C1xKY=;

b=hSGFc7vo1CSdq2mjuPuwq3pc1icQlQNDbS/btV0ddldJDXtD8a/1fjpBggAzTxTVDv

A+YulAPityWs0tIF9jbUlM8e/IOyIe0eoorMdpiOGA5BVJfjlQWQEo6tP1Y7Y/SWoIAB

v/BeRsKLgA8UwD3ZH7Ln98GtwVeEdFBuGd3k49ynG48K2HQklraNT9Te2qHCmQ/fj57I

z96XK3LbreM15IBH3r1/rMlo70kqAYCc4UzyyizcbUgWxVBW8TKOWQprTneZIjpoRjDn

HWi130ulyitxsa+HRiBn5+/K5EH+dPQa2sin0xrqaBATvk2aRne/XssQYcYkFFDDYxWj

Qm3w==

X-Gm-Message-State: AOJu0YyEfYhfY+zU2wF11cGWxDlHxJVL4WC3WcFI+rYLp7U5zmjMXu85

/3o7RLqU2mkkV6PXZn1z0I+D/cv/gLjkNz5wZXUwSMm2TPCM2k1SP4PFP7ZI4ea4U+7NRtYUuoC

VYW1H

X-Gm-Gg: AR+sD104bl/VZymirYm9VP9/443p8Pm+dtxnuR8UGcicPLjU2SVXD1sB4MehOq2zJ+m

XKWNWqDxz85WEUcuHxQOxQdUonTSq0W3nvZLY7KXpuVCARxpNBip7uwMArdDcb+mdEqi8ufjULX

G1fHeL2KMgJFnDDNtkJfRYXLWy6DMM3kCZiQ3/RktOecRrs8VLOfzYnN+ydJU1OHhwRKaA3/3m5

ORSq1TyawwyOdAvdxfMStv7nM6KGyX+AyucTRQ71MMemJH+IWs31bKfwlHLmUhENYQZjwJNLK98

rxPqyk680ySrmKNu+fQLtLeBmfJWuuQvlI0IGDxYzFwgC/wEIwr7VPpFicBCFabhaC+9ewhgFMx

xhIqtHfYRLUEaEvicTIRDU+BAq1fTnhs68vE8mQ5xNDXOGnLREXC5l3h471/ePRJTljRHbpLydd

HqR3u+oPJ160LX4fUy2Eui5dzw2T4va9FxZoLEhDABr6WJTE/+4n3xSdFrChHm6VJfX5+V9iBeZ

5ly0OB3kneqGlo9cD2ZnnpuM32+rwY=

X-Received: by 2002:a17:902:fc8e:b0:2b7:975c:dacc with SMTP id d9443c01a7336-2d32bde999fmr22205225ad.1.1786463375813;

Tue, 11 Aug 2026 08:49:35 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-a0.close.com. [52.11.177.187])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2d3160f5992sm10051335ad.67.2026.08.11.08.49.35

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 11 Aug 2026 08:49:35 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============9156386266596146097=="

MIME-Version: 1.0

Subject: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Lilian_Llanillo?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Tue, 11 Aug 2026 15:49:35 +0000

Message-ID: <178646337461.7.8575171778634196756@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_DOR5M5sTDHrIEQ2NeQmkRgJjKxojGr2vAMLYK4mzAe3

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

References: <178646337461.7.1240611996543057914@smtpgw.close.com>



--===============9156386266596146097==

Content-Type: multipart/alternative; boundary="===============0279343870214774825=="

MIME-Version: 1.0



--===============0279343870214774825==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



**Hi Gurkirat,**



=20



**This is Lilian Llanillo from Kesef Marketing.**



=20



**Welcome! I wanted to personally reach out and thank you for your interest=

in

business funding. We work with lenders across Canada to provide reliable

funding solutions that support growth, manage cash flow, and cover upcoming

expenses=E2=80=94while helping you access competitive interest rates.**



=20



**If you=E2=80=99re open to exploring your options, you can get started her=

e: =20

**[**Click Here To Start Your

Application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVG=

GnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)



**Once submitted, our team will review your information and present the best

available funding options tailored to your needs.**



=20



**If you have any questions or would prefer to speak directly, feel free to

call me at +1-866-216-5475 or 873-771-7630**



=20



**Looking forward to connecting.**



=20



**Best regards, =20

**



=20



**Lilian Llanillo**



**FUNDING ADVISOR**



=20



![email \(16px\).png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png)****[**lilian@kesefmarketing.com**](https://lilia=

n@kesefmarketing.com)



![phone-call \(16px\).png](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877413=

7354-phone-

call+%2816px%29.png)**+1 (873) 771-7630**



**____________________________**



![IMG_5340.jpg](https://closeio-

filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877416=

5068-IMG_5340.jpg)



=20



To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/).

--===============0279343870214774825==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Hi Gurkirat,

This is=

Lilian Llanillo from Kesef Marketing.


trong>Welcome! I wanted to personally reach out and thank you for your inte=

rest in business funding. We work with lenders across Canada to provide rel=

iable funding solutions that support growth, manage cash flow, and cover up=

coming expenses=E2=80=94while helping you access competitive interest rates=

.

If you=E2=80=99re open to explo=

ring your options, you can get started here:

/form.jotform.com/260672364104452?lead_id=3Dlead_1MVGGnNXqVx8dbGrHgSfKaWzWu=

BT6yMLDjaGHIpxaD3&legalBusiness=3DN K MAINTENANCE&fullName[first]=

=3DGurkirat&fullName[last]=3DWirring&leadType=3DAutomation" rel=3D"=

noopener noreferrer nofollow">Click Here To Start Your Application<=

/strong>
Once submitted, our team will review your in=

formation and present the best available funding options tailored to your n=

eeds.

If you have any questions o=

r would prefer to speak directly, feel free to call me at +1-866-216-5475 o=

r 873-771-7630

Looking forward to=

connecting.

Best regards,

trong>


n style=3D"font-weight: 700;">Lilian Llanillo

rong>FUNDING AD=

VISOR


filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0Dtk%2F177877403=

9066-email+%2816px%29.png" alt=3D"email (16px).png">
font-weight: 700;">

ng.com" target=3D"_blank" rel=3D"noopener noreferrer nofollow">
n style=3D"font-weight: 700;">lilian@kesefmarketing.com
=


14%2F1RDDVOgmo8WoImXFkS0Dtk%2F1778774137354-phone-call+%2816px%29.png" alt=

=3D"phone-call (16px).png"> +1 (8=

73) 771-7630

700;">____________________________

tps://closeio-filepicker.s3.amazonaws.com/2026-05-14%2F1RDDVOgmo8WoImXFkS0D=

tk%2F1778774165068-IMG_5340.jpg" alt=3D"IMG_5340.jpg" style=3D"width: 159px=

; height: 64.1129px;">


ed=3D"unsubscribe-footer">


.closeml.com/t/DOR5M5sTDHrIEQ2NeQmkRgJjKxojGr2vAMLYK4mzAe3/YVFsbTnwSw.png" =

alt=3D"" width=3D"1" height=3D"1" />

--===============0279343870214774825==--



--===============9156386266596146097==--

WealthSimple phish from Google

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 09:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wto9M-000000008HP-2Nlm

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 09:12:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 09:12:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from weal09.941xiuche.com ([35.212.151.26]:43729)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtn8N-00000000Png-3NWe

for doctor@nl2k.ab.ca;

Tue, 11 Aug 2026 08:07:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=weal09.941xiuche.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=QUDNLF@20hcigh.weal09.941xiuche.com;

bh=o404TJBbJ0u8IDyV4R/YF7eJ8eIsVugJhOng5yrXJZs=;

b=oV06MUASVA+EQ1vJhVjzw37+58gkNG7V+t0vH8LAvYg9U7wuR710QQAqz/WQdn0thY6qRNmaj7Fv

DNR/PydhzV/RiU5wc7KF3SOfpaTySP7ieG1G6juGEhVm5RCOxfM7QrvtgA46EiOkw5nXiJLesm80

QW8ZoJSFq0KJVoPHQlFr+HbcOjcE81FrWoY84HkFce4gFNhmgl9tW44HH4/T4De1vKuuKMKh7g//

H9EnyLSb6KrkL8oPHfTHfRkRb+xxTEYFiY3IuLRe5MswCEoCbBuvrKVuWirSUeidghOIUs9BnLog

t3pXfrgU7eUKuLpNKoWs5ZdtBfnQOw0ae6XLLg==

Content-Type: multipart/alternative;

boundary="===============2474379640349356620=="

MIME-Version: 1.0

From: Wealthsimple Team

To: doctor@nl2k.ab.ca

Subject: =?utf-8?q?=5BWealthsimple=5D_Your_1=25_cash_match_is_waiting_?=

=?utf-8?q?=E2=80=94_activate_now_=EF=81=BC_Votre_contrepartie_en_esp=C3=A8c?=

=?utf-8?q?es_de_1_=25_vous_attend_=E2=80=94_activez-la_maintenant?=

Date: Tue, 11 Aug 2026 10:06:26 -0400

Message-ID:

<178645718626.3435.11175704182578667119@20hcigh.weal09.941xiuche.com>

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ================================================================================

ENGLISH ================================================================================

Hi doctor, ██ 1% ██ CASH MATCH



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

[35.212.151.26 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.151.26 listed in dnsbl.ahbl.org]

[35.212.151.26 listed in dnsbl.ahbl.org]

[35.212.151.26 listed in dnsbl.ahbl.org]

[35.212.151.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.151.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.151.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.151.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.151.26 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cdhc2019.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: login.cdhc2019.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.151.26 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} =?utf-8?q?=5BWealthsimple=5D_Your_1=25_cash_match_is_waiting_?=

=?utf-8?q?=E2=80=94_activate_now_=EF=81=BC_Votre_contrepartie_en_esp=C3=A8c?=

=?utf-8?q?es_de_1_=25_vous_attend_=E2=80=94_activez-la_maintenant?=







Wealthsimple



Hi doctor,

1% Cash Match



An exclusive cash match is waiting in your account — but it has not been activated yet.



You are eligible to receive a 1% cash match on qualifying transfers to your Wealthsimple account. This is real cash deposited directly into your account — not points, not credits, not promotional value that expires.



For example, a $50,000 transfer would earn you $500 in cash. A $100,000 transfer would earn $1,000. The match applies to eligible transfers from another Canadian financial institution.

+ Real cash, deposited directly into your account

+ No complicated tiers or points to track

+ Your investments continue to grow alongside your match



Millions of Canadians have chosen Wealthsimple to grow their money with low fees and transparent pricing.



This match is available for a limited window. Once it expires, it cannot be reinstated. Activate yours today to secure the full value.

Claim my match



Activation takes under 2 minutes. There is no obligation — you stay in full control of your transfers.

Wealthsimple



Bonjour doctor,

1 % Contrepartie en espèces



Une contrepartie en espèces exclusive vous attend dans votre compte — mais elle n'a pas encore été activée.



Vous êtes admissible à recevoir une contrepartie en espèces de 1 % sur les transferts admissibles vers votre compte Wealthsimple. Il s'agit d'argent réel déposé directement dans votre compte — pas de points, pas de crédits, pas de valeur promotionnelle qui expire.



Par exemple, un transfert de 50 000 $ vous rapporterait 500 $ en espèces. Un transfert de 100 000 $ vous rapporterait 1 000 $. La contrepartie s'applique aux transferts admissibles provenant d'une autre institution financière canadienne.

+ Argent réel, déposé directement dans votre compte

+ Pas de paliers compliqués ni de points à suivre

+ Vos investissements continuent de croître avec votre contrepartie



Des millions de Canadiens ont choisi Wealthsimple pour faire croître leur argent avec des frais réduits et une tarification transparente.



Cette contrepartie est disponible pour une durée limitée. Une fois expirée, elle ne peut pas être rétablie. Activez la vôtre dès aujourd'hui pour en garantir la valeur totale.

Réclamer ma contrepartie



L'activation prend moins de 2 minutes. Aucune obligation — vous gardez le contrôle total de vos transferts.



Wealthsimple · Modern investing for Canadians

Wealthsimple · Investir moderne pour les Canadiens

WealthSimple Phish from Google cloud

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 09:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wto8n-000000008B1-0AUO

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 09:11:45 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 09:11:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from weal10.9000era.com ([35.209.181.76]:43983)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtlyq-000000000VH-1NLf

for doctor@nl2k.ab.ca;

Tue, 11 Aug 2026 06:53:27 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=weal10.9000era.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=SAYXNP@42k1zi32.weal10.9000era.com;

bh=PfiX1ucseCUYE6/HETcGdUWyMio13u9GTbxK+5xsylg=;

b=KHBOnVpfQlQrr6aCZePRN2cW2qYusya5eNAwlnMS4LHbCDxgcWiJDCjs4xUp2inCdJldOhiQEe8S

NsZIx3oDsYt/tP6aYn8h4hUyPff5YgAg54KeLL8gTsw9PuSEOGcsunPj7Kem5wYk9xwwhcHJtZ2e

BDj+Du+yeFbRYPVkMvKQJk4j81VKG9M8awtMowgX+tVF2yBvtss7NS2VejiLD5yoFlSMQFr3hSdI

RlmMYd/48+q54bnTKiUE8L3Um7/qrsLBzmePTxjWiCqK93MD0WfeQy9OgNvS2RiyiCLeR9xFgcs6

yevINK2GhMp7r4ZKtIvtQ7VxhWkoBrtyIEsk4A==

Content-Type: multipart/alternative;

boundary="===============8548060513716679334=="

MIME-Version: 1.0

From: Wealthsimple

To: doctor@nl2k.ab.ca

Subject: =?utf-8?q?=5BWealthsimple=5D_Your_1=25_cash_match_is_waiting_?=

=?utf-8?q?=E2=80=94_activate_now_=EF=81=BC_Votre_contrepartie_en_esp=C3=A8c?=

=?utf-8?q?es_de_1_=25_vous_attend_=E2=80=94_activez-la_maintenant?=

Date: Tue, 11 Aug 2026 08:52:32 -0400

Message-ID:

<178645275239.4698.2303020925410157341@42k1zi32.weal10.9000era.com>

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ================================================================================

ENGLISH ================================================================================

Hi doctor, ██ 1% ██ CASH MATCH



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

[35.209.181.76 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.209.181.76 listed in dnsbl.ahbl.org]

[35.209.181.76 listed in dnsbl.ahbl.org]

[35.209.181.76 listed in dnsbl.ahbl.org]

[35.209.181.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.209.181.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.209.181.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.209.181.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.209.181.76 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.cdhc2019.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cdhc2019.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.209.181.76 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} =?utf-8?q?=5BWealthsimple=5D_Your_1=25_cash_match_is_waiting_?=

=?utf-8?q?=E2=80=94_activate_now_=EF=81=BC_Votre_contrepartie_en_esp=C3=A8c?=

=?utf-8?q?es_de_1_=25_vous_attend_=E2=80=94_activez-la_maintenant?=





Wealthsimple



Hi doctor,

1% Cash Match



An exclusive cash match is waiting in your account — but it has not been activated yet.



You are eligible to receive a 1% cash match on qualifying transfers to your Wealthsimple account. This is real cash deposited directly into your account — not points, not credits, not promotional value that expires.



For example, a $50,000 transfer would earn you $500 in cash. A $100,000 transfer would earn $1,000. The match applies to eligible transfers from another Canadian financial institution.

+ Real cash, deposited directly into your account

+ No complicated tiers or points to track

+ Your investments continue to grow alongside your match



Millions of Canadians have chosen Wealthsimple to grow their money with low fees and transparent pricing.



This match is available for a limited window. Once it expires, it cannot be reinstated. Activate yours today to secure the full value.

Claim my match



Activation takes under 2 minutes. There is no obligation — you stay in full control of your transfers.

Wealthsimple



Bonjour doctor,

1 % Contrepartie en espèces



Une contrepartie en espèces exclusive vous attend dans votre compte — mais elle n'a pas encore été activée.



Vous êtes admissible à recevoir une contrepartie en espèces de 1 % sur les transferts admissibles vers votre compte Wealthsimple. Il s'agit d'argent réel déposé directement dans votre compte — pas de points, pas de crédits, pas de valeur promotionnelle qui expire.



Par exemple, un transfert de 50 000 $ vous rapporterait 500 $ en espèces. Un transfert de 100 000 $ vous rapporterait 1 000 $. La contrepartie s'applique aux transferts admissibles provenant d'une autre institution financière canadienne.

+ Argent réel, déposé directement dans votre compte

+ Pas de paliers compliqués ni de points à suivre

+ Vos investissements continuent de croître avec votre contrepartie



Des millions de Canadiens ont choisi Wealthsimple pour faire croître leur argent avec des frais réduits et une tarification transparente.



Cette contrepartie est disponible pour une durée limitée. Une fois expirée, elle ne peut pas être rétablie. Activez la vôtre dès aujourd'hui pour en garantir la valeur totale.

Réclamer ma contrepartie



L'activation prend moins de 2 minutes. Aucune obligation — vous gardez le contrôle total de vos transferts.



Wealthsimple · Modern investing for Canadians

Wealthsimple · Investir moderne pour les Canadiens



--===============8548060513716679334==--

Web/SEO/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 06:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtlPH-00000000Kma-2Bhj

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 06:16:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 06:16:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazolkn19012015.outbound.protection.outlook.com ([52.103.14.15]:8373 helo=SN4PR2101CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtjia-000000003ku-34rd

for root@nk.ca;

Tue, 11 Aug 2026 04:28:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ctL4DsM1gDmdBOj8NFh0G5TshJAU6xTGvdLqeP/wnvMblDBbA4OaY7z9wW1+snYa2a13RSGU3PR6WT0ixoPWtf5JyA7bV+4XoYBZAfSi8v8LdUNsYa37sStD6dP18YgpnHi/7oVcbxUddrVHjQ7BsW7yscJLodyTRmasp7K4RIAdGMi2/8RLndN9OcIvhjVYorYcIBtyseEkt+BwK07s0THPHNWRjmzH+LdyRhJgZlyTy4wR0uDEYdYWTVieiwJENwKKGfUd4dUXYkgkvQyC7Offa7UG5NRbhJBjW3LAyX4rimCDnnUOZT/w8/rEJkiDXwHGJxSKn0b2j435gKsUIA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pnsGzt97RPRJkRETyrghVD+O7z0H6mcnSV5pQiT12kI=;

b=BNexuF65XKK/vZ6DSeCpPo7uq8nM5mnO00kL+t0Mro/ziaumEmb7QsJiBpj17NJ+pHMlJWgN5psDYARJTKFP2gUBkEc3Z0seWy75CNJ06nQ54/ay+42YEzpzYlvI+KSPbppsgBJ0VUCxHv/alWyPSnphwYjQvB/fIG8fodMv1nyTPHrUQ8lmVVpWj/LCDIcxFfnrvR38+iFN2CwgFbq9YDVyVW2KgjW1lKegT2+e3nsnrk1fFhU9JPAI/HXiWyIUJ0Wrm6yaxPIYH3yWWhmzuNSXmsY4zsgSX4kw1iTgsYfTruL8/vDXDUHpS17QbMuzk75pQavzq0EPTKjFnYrLSA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pnsGzt97RPRJkRETyrghVD+O7z0H6mcnSV5pQiT12kI=;

b=uuKeUGCoSsEFmMTByqhYAJfEND5XBqq2AEbSB2kyWJL3+UIOHaGArtAsA2TY1n2WCuCRnvnmm+8nUfe42yeB8SZMgCzKeM6MCn9VGT1Q9luDkBtMdypUuGkS2HuDsT6SAy+QnLI3KccZ0Hxedxn2VkofG89cshqGGkhy/KF+XL725YV1ha1m5SPpWaP+UsX+6QBUz97IvLczBwjmHuU58ECMWZmqKJLT2A1T4DzxMLdRRDrFLphkgYlwjjclrkkqpGXjgMWsQBbLano520yzSM5PWbNEyxQp/X40luuyRdYcj6KSZu22a4YdGLXWlnxjZcWcs3EIHfo3NUt8Lyid0g==

Received: from SA1P222MB1050.NAMP222.PROD.OUTLOOK.COM (2603:10b6:806:3a4::16)

by PH0P222MB0438.NAMP222.PROD.OUTLOOK.COM (2603:10b6:510:10b::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.11; Tue, 11 Aug

2026 10:27:18 +0000

Received: from SA1P222MB1050.NAMP222.PROD.OUTLOOK.COM

([fe80::9418:6f20:d232:b6d0]) by SA1P222MB1050.NAMP222.PROD.OUTLOOK.COM

([fe80::9418:6f20:d232:b6d0%5]) with mapi id 15.21.0292.024; Tue, 11 Aug 2026

10:27:18 +0000

From: Aman Jaiswal

Subject: Re: SEO Ranking!!

Thread-Topic: SEO Ranking!!

Thread-Index: AQHdJ9U5JlVfwuHSyEufVQR5x1dfqbaVW0XxgANM7IE=

Date: Tue, 11 Aug 2026 10:27:00 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1P222MB1050:EE_|PH0P222MB0438:EE_

x-ms-office365-filtering-correlation-id: e994a993-6972-4602-53bd-08def7931ea3

x-microsoft-antispam:

BCL:0;ARA:14566002|16051099003|55001999006|24021099003|37011999003|25010399006|8060799015|31061999003|8062599012|19110799012|51005399006|15030799006|15080799012|18010799003|24121999003|22091999003|704163111799003|15001099006|2604032031799003|440099028|3412199025|102099032|40105399003|260806224601699006|2607281247196008|26121999007;

x-microsoft-antispam-message-info:

=?us-ascii?Q?EnDuN00Y1jiEXmeIvrryDAoxz4pgRtMlGyWUWcuXLeQ644a/scUNHCTYKEad?=

=?us-ascii?Q?g7xyTmEO8w/b7qr/6Uan0mLnWDxX20RAlJ4SQXYybYAJ8tEgYTkC/105T5Qb?=

=?us-ascii?Q?636fV50AA3lvjr1C1/FA0CZMfx0EKZDFkA+5dXnKWCr98+Zp39mEic6McRsd?=

=?us-ascii?Q?ZLMA4Wzb0/Y9JbJVMeCy/5UJsBHrvR33Z/h9qtrCVsa42J/h8irCgyKdBGIQ?=

=?us-ascii?Q?82lJUcv9s9cd8uQe5wjRmXS5l/IbGmE62Uq7Zcdjncx3iyw28/kJBBQBXDzS?=

=?us-ascii?Q?qRJXEKuvnXYg5sQDtNk3QpB3mrRQBI1EQdpqBDGy37Kjpgk+c7UydpkLa3ss?=

=?us-ascii?Q?d/lztufvfFaoI4oLJ2LyamhXmRwNAbG3YFeQHMXMJ9p/LUOKNlaWoWKW+Jn9?=

=?us-ascii?Q?de6AlS0xDI2ytEzU0TRPeCbk568t5eaZ8xTUa9ibu+8pKAVKQ77UexGH4HYK?=

=?us-ascii?Q?uDX1f2sLYw5fOv5xikNOLnP/0A6+A7bCQ2/J1Bzl6P4CM4AgP+TL9jLdP9Ky?=

=?us-ascii?Q?/TH/AIhGfguFCAJEtBdlBgTZOymrQbpw3Iq1wljzFqwDbhEE+zAV0buUINcU?=

=?us-ascii?Q?PcxOmh3Txvlyp7KvFlxV2TOcZa9cjoA+xydYoCiMijZwzgB+UD3y940uo8Zm?=

=?us-ascii?Q?PDCoU7yBSBiZYW68HDTkoUTpOXsih3NQCUExS0Yvyz4H+zpAVlm+tHlho9cd?=

=?us-ascii?Q?vF7EoMfVIKdiVGr7j6/LNTpfqzbOsX8ZaA1+57wUMytuvMYx6RldHjJaV68L?=

=?us-ascii?Q?dlhWM/wHeEIHtek99ZyQuB0xobD6tqs2kX+GZ9Q1Aqk3K5uQJA+QVnBhv0cE?=

=?us-ascii?Q?o95YnT8FURbLwnb+v3TNXBzTfdnf5iT8f1GV2fkoLOdZY8ir+TiWC/80dyps?=

=?us-ascii?Q?BZGBMx7tAldAl/vunJNKs2pkS/VMYwSsw11fvvfz4g/hb7xp3vW3Ygg5FRN0?=

=?us-ascii?Q?Sec/6vwWjTEl20VymwJGPfcNu9S1/Gl+s8XxGJ2Cm0A5XseNme5nW2vmVH7q?=

=?us-ascii?Q?I31Awe6iVK3B0vqymRMhzmzNJjOWCi/+W6KKm1vTobAtOTSuUu1Qh3ePYaOs?=

=?us-ascii?Q?DNrFcuB0Wx8s0yXbxev5FNH3n/NoGpjTpQcZTSaYUV7cKZJmNnub+OBRhxPK?=

=?us-ascii?Q?vbrRF+ShUdmQhkf33YGH/2IKEgFn4y6aJ81kVMybJREUWkmSsHiQNYKJAdoU?=

=?us-ascii?Q?xcZGwY0qP1uWE74SIgDy3aD1fpBwtXodEFBfznZj/qcYVWNEA/cSdr0dBhMr?=

=?us-ascii?Q?lZepM5AwDh7tY5exfyaYa0iSN9JjkkE4LP9zPrFTurw9We8bKgmcTu3vKt0F?=

=?us-ascii?Q?9MQiCTjGKOV3IHsRlJ7k0mnuW3Cvefzsqw2YCqU9o67A9584n+hQF+9XxjBN?=

=?us-ascii?Q?Sz1nWh8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?1Ufm9SDdv3EORktQN6w/nHss17UoOoLGIeJR4VMl8mZw9VMN4Z9TnRcyK2Ho?=

=?us-ascii?Q?s9HznJWqzGcv9W/fhqYjnaxIAys5WRLL7Q0dAv5a/5+vbWmS7udtS/8KRkhv?=

=?us-ascii?Q?PJMTOw7ADr8xWWcfde2527/6jlems89XUs30qCYCcMYVOnfe9LeVhiesgFkW?=

=?us-ascii?Q?fEhwL2Pk6dmgRLSaIl7M71X7E/qkpF/hQwGddu9KHdiwgYjuypmecenyJS7O?=

=?us-ascii?Q?mgWZqZ8lKgAKaT+tXjh/2I0OvWEeqdxp/Jjn/2qhfOw4cna7X6pqE/e/JBY6?=

=?us-ascii?Q?zGTiBFiSF7i4O2cbrMT1Es6/d1ANZypPYdubmG+Wnghy6UUrsGCZNzzRVE3j?=

=?us-ascii?Q?2bPI7WEHX+Jdo++p13i1prPgo01mrOpr1Gm4MnDrTpyCBzkzwvxqUERpVP7N?=

=?us-ascii?Q?84dA4/SLmM1j/GdJ4vMExNc4syRB3ZSMKmgGYpxe5bS8SploFNfIR6hUr/EK?=

=?us-ascii?Q?uHtPSYB2wspqYJtCpeP8Fp5RNLF3h7xKRztmqdwOwEfoqAl2X0Zh5FDBYcj6?=

=?us-ascii?Q?mLd8rEaknBpJZcjYEKXO0LvD3ozRXcjWb21bcMNKGQZ58G/hsDEayGyiW3qr?=

=?us-ascii?Q?EU2UE2wbTrpBkJjaQSzr2KRiiHxRhGpxrjhFPydqZriiBSVogeuODWB7JYiS?=

=?us-ascii?Q?dMJp95XaveX1pxZ2EyV6ttXZpl170u6RjmPvjWZYp/r272elEM8uy1ZawF/a?=

=?us-ascii?Q?YEV558vqrftM1cHggmk2e/k6Y/LqgeRAfHmjQ7CUonhkRk0aNhayXIVPM7uq?=

=?us-ascii?Q?AD5SO7aaZ+/5u2DbnSjR2psGlGwirehUPD1Iu0ZaqlXaVfEJtAjgxRyhKznC?=

=?us-ascii?Q?Ht4okU/tcB2Byn5KIkY+D/xvuwRVriLg5WKWjXwAnzP+dSqK5iyMlQ64Bi66?=

=?us-ascii?Q?W3nZcCA2zpySdA29PCEhu3AfCq4QuL2xXdkCoMr+hcv6S3R3nHH/dF3QZO4J?=

=?us-ascii?Q?VlyMIjQqPotypBDbY2MkG+p0we45vTPafwrALUwXyhv2PEL2UC4Ub2B2PgJP?=

=?us-ascii?Q?pv/n9l8K8xAa69paVWlkfVa0gX1FSVJEbjCQLt/cF2GGJ82n92tjMNQtP1Pg?=

=?us-ascii?Q?D7ljnTGqsydHJLEcA8wFoBbYYVwZ57yuyfkx2Z4lpB7y4DD2u/0d3Umn7dwi?=

=?us-ascii?Q?rRwtZzr21ZGjqG+sxFmEIEb7Jwd3sV1I2iHhW8SuAzPRCFkiJqYCO9Guu2bu?=

=?us-ascii?Q?jYBroBEa+y6/jqFXIs3pjuqy1pO3+RFuQtqHtGrPHr8ubUgIGe7nK10f0XAx?=

=?us-ascii?Q?iz4nyjU1+JR32vcHqAFuoP/Za0kGOTOG+lIbtJefmkKMC+jAFwvtqU8L+rck?=

=?us-ascii?Q?36SQf/Deabm5yqmTCvnPsDVy3LAOAO8Xj0iPAFqcky6a5jb52frkHG+++W+G?=

=?us-ascii?Q?518im6VfiEHhP4mCXx47zeAIbl1twNjveO8Op0TPEvdXQOymS9E/tjunQyId?=

=?us-ascii?Q?2iL4DjOuXO3+amvhx3jYrkYkbZMopA70?=

Content-Type: multipart/alternative;

boundary="_000_SA1P222MB1050E8F832F6D1722E54E404C4DD2SA1P222MB1050NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1P222MB1050.NAMP222.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e994a993-6972-4602-53bd-08def7931ea3

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Aug 2026 10:27:00.6397

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0P222MB0438



--_000_SA1P222MB1050E8F832F6D1722E54E404C4DD2SA1P222MB1050NAMP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,

I sent you an email a few days ago about my SEO services, but it may have g=

one to your spam folder.

May I send you a SEO Packages and pricing details?

Regards,

Aman



________________________________

From: Aman Jaiswal

Sent: Sunday, August 9, 2026 1:33 PM

Subject: Re: SEO Ranking!!



Hi,

Need better Google rankings or more website traffic? I can help improve you=

r SEO and online visibility.

Happy to share my strategy and pricing.

Best,

Aman





--_000_SA1P222MB1050E8F832F6D1722E54E404C4DD2SA1P222MB1050NAMP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I sent you an email a few days ago about my SEO services, but it may have g=

one to your spam folder.



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a SEO Packages and pricing details?



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Regards,



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Aman



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












yle=3D"font-size:11pt" color=3D"#000000">From: Aman Jaiswal <Aman=

jaiswalweb@outlook.com>


Sent: Sunday, August 9, 2026 1:33 PM


Subject: Re: SEO Ranking!!


 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Hi,



t-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,san=

s-serif; font-size:12pt; color:rgb(0,0,0)">

Need better Google rankings or more website traffic? I can help improve you=

r SEO and online visibility.



t-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,san=

s-serif; font-size:12pt; color:rgb(0,0,0)">

Happy to share my strategy and pricing.



t-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,san=

s-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



t-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,san=

s-serif; font-size:12pt; color:rgb(0,0,0)">

Aman



ontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">














--_000_SA1P222MB1050E8F832F6D1722E54E404C4DD2SA1P222MB1050NAMP_--

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Aug 2026 06:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtlNu-00000000KXq-2dkg

for dave@doctor.nl2k.ab.ca;

Tue, 11 Aug 2026 06:15:10 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Aug 2026 06:15:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta43-24.mmglsmd.net ([103.37.43.24]:47639)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wtgUl-00000000LRg-3VlM

for root@nk.ca;

Tue, 11 Aug 2026 01:02:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1786431631; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=zWfkipuHQzkGTzgmDInlgqntyvXM/8FeSlLFjHySTt8=;

b=nUAzvSxyw7I0uNtMJQSkTfxQB0cjsgJwiDK+R+n1zLrWROA2yP79b9KC

8ZgOoHEWHM/htEf0ctQIoIAmdDjZYuiWWRFRwryCswojIzZ7xaKpFb9e+M

ctovcbkunPNRIR7IKy7Kqo3wlGharyPy5Lpc65xCrJmkjq8oEy1ZWZziE=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id FsReAbOaXzEW

for ; Tue, 11 Aug 2026 15:00:31 +0800

Content-Type: multipart/mixed; boundary="===============6981661286402716048=="

MIME-Version: 1.0

Message-Id: <20260811150031.01243-{13456:20260811135818-13456-66}-0006283@hn.threeway-pipe.com>

Reply-to: tina@threewaysteel.com

Subject: =?utf-8?q?Re=3A_Steel_pipes_and_fitting_supply_from_Threeway_Steel?=

From: Tina Han -Threeway Steel

To: root

Date: Tue, 11 Aug 2026 15:00:31 +0800

Mail-ID: 6a7aba12e1382308accce25d

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello there, Greetings from Tina of Threeway Steel Co., Ltd

China, professional supplier of steel pipes and fittings. I am writing to

seek chances to cooperate. Pls kindly find below productions we provide:

Pipe: Seamless & welded pipes, material API 5L, ASTM A53, ASTM A312 etc. Fitting:

Flange, elbows, valves, material ASTM A234 WPB, A105N, etc. Steel plates

[...]



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

[103.37.43.24 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.37.43.24 listed in dnsbl.ahbl.org]

[103.37.43.24 listed in dnsbl.ahbl.org]

[103.37.43.24 listed in dnsbl.ahbl.org]

[103.37.43.24 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.37.43.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.37.43.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.37.43.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.37.43.24 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.threeway-pipe.com]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns18.xincache.com/112.80.181.111]

[URI: ns17.xincache.com/112.80.181.45]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.37.43.24 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3A_Steel_pipes_and_fitting_supply_from_Threeway_Steel?=



Hello there,

Greetings from Tina of Threeway Steel Co., Ltd China, professional supplier of steel pipes and fittings.

I am writing to seek chances to cooperate.



Pls kindly find below productions we provide:

Pipe: Seamless & welded pipes, material API 5L, ASTM A53, ASTM A312 etc.

Fitting: Flange, elbows, valves, material ASTM A234 WPB, A105N, etc.

Steel plates, angles, channels, etc.



Fast delivery, flexible payment terms are our promises.

If you want to know more about our product, by the way, free samples are available.

Warmly welcome your inquiry.



Tina Han

Threeway Steel Co., Ltd.

+8615873191359

www.threewaysteel.com