Wealthsimple phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Sep 2026 09:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x52pm-000000006yB-1BJK

for dave@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 09:06:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Sep 2026 09:06:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fteku.ljfbxd.com ([135.225.72.192]:38417)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x51K8-000000008wV-3hUS

for doctor@nl2k.ab.ca;

Fri, 11 Sep 2026 07:29:56 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=fteku.ljfbxd.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=fhltmfu@fteku.ljfbxd.com;

bh=zpM1JqCBQFozUd38RnxhGbWfWcW+qf95D4hC/FDXn3g=;

b=EeVxdq6JhitDlJD3fs/FAGpHcfps6+7H7EHQq1AW+KLa4zC00/zoxywJEDgmtURHXDfAWmGi4vGr

STeoQlAKry4v7jtMjuuWiZe6CWuBRPcKUmjpUc6WGazQXWJcR35mtYxN/C+6b+q5+S3nKfASjSj4

b8AWqnVoGDF1tq9E2Hk3Bml1XskQQpoNzl1gzsP8ZKnI87ItOO4Gn7yAvaf6IJT8pKMrcD8plcM2

WIrnL6bnOvKT1VCKuiokj/j4eMguDU7LQaF9XbnPgjlshKwJVH6eCDWsupHsFAk5Rdh9tLLAcIvV

THtgGe7L1Ur/Ahx5fqum1tLxSZMap8+WN4qFHQ==

Content-Type: multipart/alternative;

boundary="===============3748045746668200902=="

MIME-Version: 1.0

From: Wealthsimple | Smart investing

To: doctor@nl2k.ab.ca

Subject: Your Wealthsimple account details are expiring

Date: Fri, 11 Sep 2026 18:58:58 +0530

Message-ID: <178913333833.29892.4033685749884825696@fteku.ljfbxd.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 34.2

X-Spam_score_int: 342

X-Spam_bar: ++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello doctor, A note from Wealthsimple Your account details

need a quick update



Content analysis details: (34.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

[135.225.72.192 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[135.225.72.192 listed in dnsbl.ahbl.org]

[135.225.72.192 listed in dnsbl.ahbl.org]

[135.225.72.192 listed in dnsbl.ahbl.org]

[135.225.72.192 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[135.225.72.192 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[135.225.72.192 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[135.225.72.192 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[135.225.72.192 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ljfbxd.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_DOCTOR BODY: mangled doctor

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[135.225.72.192 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[135.225.72.192 listed in wl.mailspike.net]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Wealthsimple account details are expiring



--===============3748045746668200902==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello doctor,



A note from Wealthsimple



Your account details need a quick update



Some of the details on your account are missing or have expired. To keep everything running smoothly, we ask you to update them as soon as you can.



It only takes a minute or two - and it helps us keep your account safe.



ACCOUNT

doctor@nl2k.ab.ca



REFERENCE

58796008



STATUS

Update required



Update your details:

https://www.hqzlzs.com/?uid=chYNC0JVV0TvhkTmPpSMgOKO



Warm regards,

The Wealthsimple team



----------------------------------------------------------------



This email was sent automatically to doctor@nl2k.ab.ca.

If this message was not meant for you, you can safely ignore it.



Help: https://www.hqzlzs.com/?uid=HoL5ubjSf88HmhJ6aI5MQXNj

Privacy: https://www.hqzlzs.com/?uid=doSgRedeL7eaBha2EXchoA8M

Terms: https://www.hqzlzs.com/?uid=EQdCFLtybW0etENSUTrad5BE



Wealthsimple. All rights reserved.



--===============3748045746668200902==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Your Wealthsimple account details are expiring































































































Wealthsimple


A note from Wealthsimp​le


Your account details
need a quick update


Hello doctor,



Some of the details on yo‍ur account are missing‍ or have expired. To keep everything running smo‍othly, we ask you to upd​ate them as soon as you c‌an.












Update your details




It only takes a minute‌ or two - and it helps us k‌eep your account safe.
























Account


doctor@nl2k.ab.ca


Reference


01251506


Status


Update required




Warm regards,



The Wealthsimple team




This email was sen​t automatically to doc‍tor@nl2k.ab.ca.


If this message was not‍ meant for you, you can sa‍fely ignore it.





Help

 · 

Privacy

 · 

Terms



Wealthsimple. All righ​ts reserved.














--===============3748045746668200902==--

Wealthsimple phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Sep 2026 07:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x510x-0000000079h-40zV

for dave@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 07:09:59 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Sep 2026 07:09:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xgwxo.tjfcds.com ([20.240.235.95]:38329)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x50dL-000000004Kr-2X2u

for root@nk.ca;

Fri, 11 Sep 2026 06:45:43 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=xgwxo.tjfcds.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=eaimhyh@xgwxo.tjfcds.com;

bh=hKmCmjXB8onSoovB9SXnP3n3h+TkMqq4LmZEk/HcRvE=;

b=KOpbR5uXVHxYthruttU54Ajy7VmR/whpVscryszV77Iz7+byuHKP97Ai7RtiCIBw2+zNJbcByLWs

EsjihOR07v0h+CnpctxUkJnjnhiYFEcbjEO748UQZfXHubLfLS2cuND9QEfaUdiSmhTsCqzZLXs/

V3sELSqgI4RcDdFs8PvADHX2qJWKexUi5GPO39Ic4YCzX7FGcQa7d2X18l/eA6jDQnHdDeSp7+X+

0gD+4UxFalBcXlY7e1qkfc2MEZU3Fp7e9N8I6Dv29hT8YJjVJiFuS/d0G82sclax1I04sKALdZxS

9XUf8We6DWyW9AIhWIXc0NKSLbaNoe0THYeI0w==

Content-Type: multipart/alternative;

boundary="===============0029105791495699741=="

MIME-Version: 1.0

From: Wealthsimple | Smart investing

To: root@nk.ca

Subject: Trading paused - complete your details to restore access

Date: Fri, 11 Sep 2026 08:44:45 -0400

Message-ID: <178913068525.25890.17010212580102790745@xgwxo.tjfcds.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 35.1

X-Spam_score_int: 351

X-Spam_bar: +++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Wealthsimple Trading paused - complete your details to restore

access Hello root,



Content analysis details: (35.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

[20.240.235.95 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.240.235.95 listed in dnsbl.ahbl.org]

[20.240.235.95 listed in dnsbl.ahbl.org]

[20.240.235.95 listed in dnsbl.ahbl.org]

[20.240.235.95 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.240.235.95 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.240.235.95 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.240.235.95 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.240.235.95 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: thedogpb.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_YOUR BODY: mangled your

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.240.235.95 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

Subject: {SPAM?} Trading paused - complete your details to restore access



--===============0029105791495699741==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Wealthsimple



Trading paused - complete your details to restore access



Hello root,



Your account information has not been updated for a long time. To keep your account secure, trading is paused until your details are confirmed.



What's paused: buying and selling.

What still works: deposits, withdrawals and transfers.

How to lift the pause: complete your account details.



Restore access: https://www.thedogpb.com/?uid=31xU3WeYJdIxrClhwYjSNKJn



This email was sent to root@nk.ca. This is an automated message from Wealthsimple. Please do not reply.



---



FRANAIS



Bonjour root,



Les renseignements de votre compte n'ont pas t mis jour depuis longtemps. Afin d'assurer la scurit de votre compte, la ngociation est en pause jusqu' la confirmation de vos renseignements.



Ce qui est en pause : l'achat et la vente.

Ce qui fonctionne toujours : les dpts, les retraits et les virements.

Comment lever la pause : complter les renseignements de votre compte.



Rtablir l'accs : https://www.thedogpb.com/?uid=HzF3C2ltQtxCHrwkNYeFWa3L



Ce courriel a t envoy root@nk.ca. Ceci est un message automatis de Wealthsimple. Veuillez ne pas y rpondre.



--===============0029105791495699741==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Trading paused - complete your details to restore access























































































Wealthsimple Important




Your trading is pa‌used until your details a​re confirmed


Hello root,



Your account informati​on has not been updated f​or a long time. To keep yo‍ur account secure, trading is paused until your​ details are confirmed.






































What's paused Buying and selling
What still works Deposits, withdrawals‌ and transfers
How to lift the pause Complete your account‍ details






Restore access


Takes only a few minutes​. If the button above d‍oesn't work, sign in to Wealthsimple​ and review your account.


This email was sent to r​oot@nk.ca.



This is an automated me‌ssage from Wealthsimpl‌e. Please do not reply.‌



Questions? Visit our Help Centre.












--===============0029105791495699741==--

Wealthsimple phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Sep 2026 07:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x510u-0000000079H-0CIc

for dave@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 07:09:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Sep 2026 07:09:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hihec.jxddsy.com ([20.240.94.55]:33193)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x50ch-000000004GF-3WXP

for doctor@nk.ca;

Fri, 11 Sep 2026 06:45:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=hihec.jxddsy.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=bfgrpgn@hihec.jxddsy.com;

bh=KXkxgT9866/RRjOVwtai6nUFv5dyrxvQkq1BEUAddIs=;

b=e1DYBh6dR+FWxJddpxTrAx9thsHuPSzXFYyCRQUu6Np/IVg3L+Z3cdhi85oxDGgmKbD45NmWLNkq

uyghxI02NmHS1rIKGg7EsO3KPe+EKswMsJCBmAnz1T6qB6b5bj/lvuUndq0oJ7EXOfX75Rt27VGN

ITqA1j87GPZTamo/NMfSzzo1H2eBRwDlRwpZTB/BhfzNXnOWK2+o5MPbIGxoIlthaOQB/TiFoqNZ

Ht1rAwYa6Um19OkfOZoUCwt8jPEGeCjQMBm7Svg5L0WZga1jXLyiH+2Lw4GlKT9NfYxMKbfOoI0B

k/t/Sw8TFTc6uEtgLCtbJ1nIyzjInem0Sin06A==

Content-Type: multipart/alternative;

boundary="===============5038080623298228269=="

MIME-Version: 1.0

From: Wealthsimple | Smart investing

To: doctor@nk.ca

Subject: Trading paused - complete your details to restore access

Date: Fri, 11 Sep 2026 08:44:06 -0400

Message-ID: <178913064641.28642.2958063619782514502@hihec.jxddsy.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 44.0

X-Spam_score_int: 440

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Wealthsimple Trading paused - complete your details to restore

access Hello doctor,



Content analysis details: (44.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

[20.240.94.55 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.240.94.55 listed in dnsbl.ahbl.org]

[20.240.94.55 listed in dnsbl.ahbl.org]

[20.240.94.55 listed in dnsbl.ahbl.org]

[20.240.94.55 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.240.94.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.240.94.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.240.94.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.240.94.55 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: jxddsy.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: johnraya.com]

[URI: thedogpb.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.240.94.55 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_DOCTOR BODY: mangled doctor

2.3 MANGLED_YOUR BODY: mangled your

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} Trading paused - complete your details to restore access



--===============5038080623298228269==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Wealthsimple



Trading paused - complete your details to restore access



Hello doctor,



Your account information has not been updated for a long time. To keep your account secure, trading is paused until your details are confirmed.



What's paused: buying and selling.

What still works: deposits, withdrawals and transfers.

How to lift the pause: complete your account details.



Restore access: https://www.thedogpb.com/?uid=JiZeT6s2SDyWeSqjRru8Uqhk



This email was sent to doctor@nk.ca. This is an automated message from Wealthsimple. Please do not reply.



---



FRANAIS



Bonjour doctor,



Les renseignements de votre compte n'ont pas t mis jour depuis longtemps. Afin d'assurer la scurit de votre compte, la ngociation est en pause jusqu' la confirmation de vos renseignements.



Ce qui est en pause : l'achat et la vente.

Ce qui fonctionne toujours : les dpts, les retraits et les virements.

Comment lever la pause : complter les renseignements de votre compte.



Rtablir l'accs : https://www.thedogpb.com/?uid=JSDZGSLFmFqwmBs5W3JMtKHN



Ce courriel a t envoy doctor@nk.ca. Ceci est un message automatis de Wealthsimple. Veuillez ne pas y rpondre.



--===============5038080623298228269==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Trading paused - complete your details to restore access























































































Wealthsimple Important




Your trading is paused until your details are​ confirmed


Hello doctor,



Your account informatio​n has not been updated fo‌r a long time. To keep your account secure, trading is paused until yo‌ur details are confirmed.






































What's paused Buying and selling
What still works Deposits, withdrawals and transfers
How to lift the pause Complete your account details






Restore access


Takes only a few minutes‌. If the button above doe​sn't work, sign in to Wealthsimple and review your accoun‍t.


This email was sent to d‌octor@nk.ca.



This is an automated mess‍age from Wealthsimple​. Please do not reply.



Questions? Visit our Help Centre.












--===============5038080623298228269==--

Purchase from Apple for Geek squad phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Sep 2026 07:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x510c-0000000077l-2LI1

for dave@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 07:09:38 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Sep 2026 07:09:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f200.google.com ([209.85.222.200]:54737)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x50Ug-000000003TJ-0SdD

for doctor@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 06:36:46 -0600

Received: by mail-qk1-f200.google.com with SMTP id af79cd13be357-9399b66e0e7so172831985a.1

for ; Fri, 11 Sep 2026 05:35:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1789130144; x=1789734944; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=ThLTcJ8pX1z/jRcxROIr8yGzyX3Mj0alDVTAKIM5fc4=;

b=PN3DnXaadHNXQFWyftzdE5ljYfoZq+OOg9FWkAypJPioWAYmtJDQssJ6JghpiyzZ7D

Zj+JF2DQ4M4apLPXrMnByh1RpVkeFiG1AUO7TFXiZsVEgNvooaA5rswOcf2keLKEWl0b

ztYUsinIrNItXsin8Jgsr2cwb/VQM2uOly4jhFNYAHkdV5dpwfvJQmHYGItTFBrWo5ez

bb0qj+Xb5FpfCvDomal/qV2aUKLu60yWoCcaVxWNr2GIneL5p+D7XOZLQEG6B0S7k2ga

q+1dwNnwKayiVka6YkhVXWv/8ZfV2xX3TxXVeeiK26TmVA4DjVcH+3yRGdb1N/INLRbx

ZHqQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ilcscpa-org.20251104.gappssmtp.com; s=20251104; t=1789130144; x=1789734944; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=ThLTcJ8pX1z/jRcxROIr8yGzyX3Mj0alDVTAKIM5fc4=;

b=fMIgVNIG8ZLUHrH3a25GePD8Hmb731owRrW9vnmVOohg2dw9kOjM0nwk/wDUTsG9L6

QoghnOlRpm+op0MlGYx2RPm6K/wDHULkb9XiJ8XNZAMPgBktWo1CTKpwvLdqgpippbQr

f04e9EcMxshQ4YtDA4RI/BpWUd3BLyCHHFj4CuUSsZZKl3+ID/juFSmG+0xuI6xMN6/A

Ivzc9S17yYwRODNJ0Y0fGbtdqNIrd1D08T1yurGarSywksYT8mkO9iFWEbiE4bc6gtXt

oFU4MojaYFB2Tp7pFP8SLCevEWvPAJ20EiGOX1qK6jhPjCWHpwPToaSKMQkAFZXq6tUq

zMKA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789130144; x=1789734944;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=ThLTcJ8pX1z/jRcxROIr8yGzyX3Mj0alDVTAKIM5fc4=;

b=mUM/GW1v50+O2AI3QXqxujij8CZglbKBspbsvcSKMcq8tU8U32exzfWsud14cFKYWi

h21obdIt4Qs7kExQPBxi7+XvYqdTIDAKCx/ZXku4aFz5zqxxeThsBNkGVMjHureSe8Jj

FJNgckvtgNk8u2oRh+cFb6NjukgdEbdPXbSxsgN63+lZGkoDdof3Yk9QSZVh4zWHqIrD

aIAvj+N0gGEJxE9wF1pMfO/eVyoiHD5tuj+9jtczrpkjeLWkyTWczTQSUbKdKf31PdHP

FHl4zN5UB8Ny6Xa8Kf3In4M5sjSHQkDfeRgMbXxDtWZjU12Umxg/oeyXmh+Ak97MpMpU

ixqg==

X-Forwarded-Encrypted: i=1; AKwUvBzRvZRGKdQWgNnOkwz7g2YhSH+Tms1Uc8I3c4rSjLS48Lj+104SNJEpDEDqw+WhbGBgxAJAXf4=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++k6z9+mO88lPQyrg24FQOiWOf6JwYsTxUnRSHju/sBJ1OY9KBHw

wNRd+IWIjOanqkq3Q3jmKp4L12og4oQ+hCmcYUUz3DaUIqZA/ncsCqzGl0lT4CH9iXEzhGvrvOk

qQG6/Dfata6NDI8H/fAxVz9eIH2uZeCmMEkPF2jBlXJ165A==

MIME-Version: 1.0

X-Received: by 2002:a05:620a:2812:b0:939:761d:f948 with SMTP id

af79cd13be357-939ea14e172mt595623985a.34.1789130143665; Fri, 11 Sep 2026

05:35:43 -0700 (PDT)

Reply-To: Chanel Riley

Sender: Google Calendar

Message-ID:

Date: Fri, 11 Sep 2026 12:35:44 +0000

Subject: Information you requested

From: Chanel Riley

Content-Type: multipart/alternative; boundary="000000000000b1ec01065b3452a3"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Notice – Suspicious Activity Detected on Your Apple Account

Dear Customer, We have identified a $298.99 transaction on your Apple ID

that appears abnormal. Transaction Details: Purchase attempted th [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

[209.85.222.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.200 listed in dnsbl.ahbl.org]

[209.85.222.200 listed in dnsbl.ahbl.org]

[209.85.222.200 listed in dnsbl.ahbl.org]

[209.85.222.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.200 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.200 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.200 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Information you requested



--000000000000b1ec01065b3452a3

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



Tm90aWNlIOKAkyBTdXNwaWNpb3VzIEFjdGl2aXR5IERldGVjdGVkIG9uIFlvdXIgQXBwbGUgQWNj

b3VudCBEZWFyIEN1c3RvbWVyLCAgDQpXZSBoYXZlIGlkZW50aWZpZWQgYSAkMjk4Ljk5IHRyYW5z

YWN0aW9uIG9uIHlvdXIgQXBwbGUgSUQgdGhhdCBhcHBlYXJzICANCmFibm9ybWFsLiBUcmFuc2Fj

dGlvbiBEZXRhaWxzOiBQdXJjaGFzZSBhdHRlbXB0ZWQgdGhyb3VnaCBnZWVrc3F1YWQuY29tICAN

Cihub3QgeW91ciB1c3VhbCBhY3Rpdml0eSkgQXMgYSBwcmVjYXV0aW9uLCB0aGlzIHRyYW5zYWN0

aW9uIGhhcyBiZWVuICANCnRlbXBvcmFyaWx5IHBsYWNlZCBvbiBob2xkLiBXZSBhbHNvIGRldGVj

dGVkIGEgbG9naW4gYXR0ZW1wdCBmcm9tIGFuICANCnVuZmFtaWxpYXIgZGV2aWNlIGFuZCBsb2Nh

dGlvbi4gSWYgeW91IHJlY29nbml6ZSB0aGlzIHRyYW5zYWN0aW9uIOKAkyBubyAgDQpmdXJ0aGVy

IGFjdGlvbiBpcyByZXF1aXJlZC4gSWYgbm90IHJlY29nbml6ZWQg4oCTIHlvdXIgYWNjb3VudCB3

aWxsIGJlICANCmNoYXJnZWQgd2l0aGluIHRoZSBuZXh0IGhvdXIuIFBsZWFzZSBjb250YWN0IEFw

cGxlIFN1cHBvcnQgaW1tZWRpYXRlbHkgYXQgIA0KKzEgODQzLTMwMS05Mzg0IHRvIGNhbmNlbCBv

ciBkaXNwdXRlIHRoZSB0cmFuc2FjdGlvbi4gQXBwbGUgU2VjdXJpdHkgJiAgDQpCaWxsaW5nIFRl

YW06ICsxIDg0My0zMDEtOTM4NCDCqe+4jyAyMDI2IEFwcGxlIEluYw0KDQpJbmZvcm1hdGlvbiB5

b3UgcmVxdWVzdGVkDQpXZWRuZXNkYXkgU2VwIDksIDIwMjYg4ouFIDExYW0g4oCTIDEycG0NCkVh

c3Rlcm4gVGltZSAtIE5ldyBZb3JrDQoNCg0KDQpPcmdhbml6ZXINCkNoYW5lbCBSaWxleQ0KY3Jp

bGV5QGlsY3NjcGEub3JnDQoNCg==

--000000000000b1ec01065b3452a3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Chanel Riley: Notice =E2=80=93 Suspicious Activity Detected on You=

r Apple Account Dear Customer, We have identified a $298.99 transaction on =

your Apple ID that appears abnormal. Transaction Details: Purchase attempte=

d through geeksquad.com (not your usual activity) As a precaution, this tra=

nsaction has been temporarily placed on hold. We also detected a login atte=

mpt from an unfamiliar device and location. If you recognize this transacti=

on =E2=80=93 no further action is required. If not recognized =E2=80=93 you=

r account will be charged within the next hour. Please contact Apple Suppor=

t immediately at +1 843-301-9384 to cancel or dispute the transaction. Appl=

e Security & Billing Team: +1 843-301-9384 =C2=A9=EF=B8=8F 2026 Apple I=

nc"/>
rg/Event">
Scheduled"/>
a.org/Organization">
span>
ofikbhg4a"/>
-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0;=

overflow: hidden;" itemprop=3D"name">Information you requested
aria-hidden=3D"true">
esentation" align=3D"center" style=3D"width:100%;" class=3D"body-container"=

>

t:16px;" aria-hidden=3D"true">  

le=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">
y>

http://schema.org/EmailMessage">

Notice =E2=80=

=93 Suspicious Activity Detected on Your Apple Account

Dear Customer,

W=

e have identified a $298.99 transaction on your Apple ID that appears abnor=

mal.

Transaction Details:
Purchase attempted through
/geeksquad.com">geeksquad.com (not your usual activity)

As a precauti=

on, this transaction has been temporarily placed on hold.
We also detect=

ed a login attempt from an unfamiliar device and location.

If you recogni=

ze this transaction =E2=80=93 no further action is required.
If not reco=

gnized =E2=80=93 your account will be charged within the next hour.
Plea=

se contact Apple Support immediately at +1 843-301-9384
to cancel or dis=

pute the transaction.

Apple Security & Billing Team: +1 843-301-9384<=

br>©=EF=B8=8F 2026 Apple Inc


e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" al=

ign=3D"center" style=3D"width:100%;" class=3D"">

der: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-size: 0; p=

adding: 24px 32px; text-align: left; vertical-align: top;" class=3D"main-co=

ntainer-inner">

=3D"font-size: 13px; text-align: left; direction: ltr; display: inline-bloc=

k; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break-word=

;">
tion" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-right=

: 32px; padding-left: 0;;table-layout: fixed;">
ble>
ble>

-column-td" style=3D"padding:0; vertical-align:top;">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" styl=

e=3D"table-layout: fixed;"><=

/tr>

align: left; word-break: break-word;;padding-bottom:2px;">

t-family: 'Google Sans', Roboto, sans-serif;font-weight: 400; font-=

size: 22px; line-height: 28px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">Information=

you requested

: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">

tyle=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 40=

0; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043=

; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
n aria-hidden=3D"true">

ding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">
iv style=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight=

: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c=

4043; text-decoration: none;" class=3D"primary-text" role=3D"presentation">=


n" style=3D"padding-bottom: 4px;">


=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;=

-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organizer

<=

/td>
=


: break-word;;padding-bottom:24px;">

-serif;font-style: normal; font-weight: 400; font-size: 14px; line-height: =

20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">
0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;"><=

tr>


text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;=

margin: 0; padding: 0;">Guests

(Guest list has been h=

idden at organizer's request)


--000000000000b1ec01065b3452a3--

WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Sep 2026 07:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x50yi-000000006vm-31Dd

for dave@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 07:07:40 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Sep 2026 07:07:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013081.outbound.protection.outlook.com ([52.103.74.81]:8496 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4usz-00000000IDy-0Efn

for sales@nk.ca;

Fri, 11 Sep 2026 00:37:31 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=eatWP74/1Mif4zM4iLMz2x92YFv27+UmCNiRpcICBtAIo5pxu5+vswpCXosp1W98p00sYcLKWZHQuBcOcfEelMHkjmdTg7elYXRhjY4B6YJAZJi0LqNCTYNw7qAJeekDc+fOuTXspJvCAMCNVK3YJ+xk+e1TbXdWl97ZLJbVxsVfOS6lDESTdG1jFqr75t+XwDbN93hvPYVRrGYao1loxZJpN+A05Zf7WcZeW8P+U1xB8Oi7iLx86sLMSv+dUqNEb99Iig8QPGewIDb9RvUnCy/nNn1XdFSBaN7v+FlEgylX6O8iP1StHCwMqlsfc9kMPgX2tHMe2UJqIIx/Su74kQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ObysxteGh+7+8XJ5EcuV2XnyxId0IOp/aW3CgaSxKWg=;

b=HDOwQi38MSuTz8GoAwlCuQ6Ua/mBBKyePLAklFdjGweo4ieV5H2pNtzIT0SsdbahF0Ar+bwrMsHnuCO9Nk+8fZrXyzm8T0oY5eGCx5+604ARDkhQWWl4KGXdcfPaeKYayJTcpoCePeFTGOrKeMwnTqe3if/WpnPvQTpKuVFMtmmZcV5qOwAtN9HLX+ahBook/1zkk5OB6gtZxjx8Wd17DD5tO4ZQQ9v9McPcTvNhofFj8OrMbwaFYxFfBcvEGftgstolihvihJgzS4ASr298ZKUERNMaO7JrFFvDv3WeegDZHJUSeXJIUM2AtGt/jtKeWd1atJgG30eA0W0HGug8og==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ObysxteGh+7+8XJ5EcuV2XnyxId0IOp/aW3CgaSxKWg=;

b=O5uEragw4wB7JtoUERdBYfGoKt/L5d1vy+3yNzBqWwihdH1bwFNaEshAt08AKmDIIdtX43nHqeDQJAmR4NBm3dQwKDdfChNTAIGbnZOO4qowLZDWvhPiBfXYPxJJN8VU5zw6FI7NAkT8HzcBRygcJmeyYELbu8t7p1sfL/OUQ8kFVc5Auv7TvWgzOfz15SPjlwipA16xRNVYzrFqf/GCWTi4cqFKYiKgxPiNpfGm8pgU/1ghiXareXjxoFLBNDGPp0WweKOmQmdX35b2Dz4Wr32Led0NlOYeC0EWNUEo+fhJETbSUHQO98dBn7fvGItnKeqrmGzBDby2A9+TaTND3w==

Received: from TYSPR04MB8165.apcprd04.prod.outlook.com (2603:1096:405:9b::7)

by KUZPR04MB9635.apcprd04.prod.outlook.com (2603:1096:d10:85::24) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Fri, 11 Sep

2026 06:34:56 +0000

Received: from TYSPR04MB8165.apcprd04.prod.outlook.com

([fe80::7622:da4a:293a:b3b1]) by TYSPR04MB8165.apcprd04.prod.outlook.com

([fe80::7622:da4a:293a:b3b1%4]) with mapi id 15.21.0406.007; Fri, 11 Sep 2026

06:34:56 +0000

From: Vikram Kumar

Subject: Re: SEO Growth.?

Thread-Topic: SEO Growth.?

Thread-Index: AQHdQPgtRlwXK+NBHk+oxnqJmxGDzLbI7Sgb

Date: Fri, 11 Sep 2026 06:34:55 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR04MB8165:EE_|KUZPR04MB9635:EE_

x-ms-office365-filtering-correlation-id: 624f1bdc-8d96-4473-37f2-08df0fcecb4e

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|24021099003|55001999006|16051099003|51005399006|31061999003|2604032031799003|15030799006|15080799012|22091999003|24121999003|8060799015|19110799012|8062599012|25010399006|40105399003|26121999007|11120399003|2607281247196008|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?tvPyogblxnszdb8GaKrou/eeKT88rDrWiRyOoO+fYfKF8znQrr/147wo?=

=?Windows-1252?Q?5YFi/GyVpyqOX5csry3Cb65fb/twS07vRUXCWUaMtBHglElzPwuy3hMg?=

=?Windows-1252?Q?UnJCekCxIbUHWK4K+CnOM4e1NBBQyWvpvASQmUShg6xecuW4tx7HQbRK?=

=?Windows-1252?Q?/EL7nFdco+CgMW9VBr2WqlMSfDb9qcavTQBSXujBWYZnPVtRadsT0W4J?=

=?Windows-1252?Q?SXwQThrJhuWfy7RyBfaWzcHoVK11AUiOAAgp0SEVYV92/zzJxt4fpxfZ?=

=?Windows-1252?Q?iZ7HXvRzV0xL8v7y4PjdOExpe3a61G3we52l6vml7/x/cSHkzWVOjhs3?=

=?Windows-1252?Q?gua+zc4k8pO6YOq8ybbqFAIf9j45m74WdoiDdWgV4JYyDjRcUUVAFVfs?=

=?Windows-1252?Q?j/8PUcdtobdzcNeC678XjP5hz/bN+15ryHNKrLAJE2xGpmCouB1OXcE/?=

=?Windows-1252?Q?SqiFE656vJvuxEXTWG9MUl74ubKtk09AtJpu+Lb4xQ27lG4SB0ueTL7G?=

=?Windows-1252?Q?WSKcILwjLKrfuOr22TF2u+B5YLhkX93b8XBYf5EB8OQCm518rA5yvKLU?=

=?Windows-1252?Q?B+ns0Yh4bgQgXlwVJldvg+BlaOIQ666Run5ycEKKsDUn7SVTnZzkJs9x?=

=?Windows-1252?Q?XoXVPFzp5fyR5LBUE+KjXeasovr9NPuBY/3sQvLmF4tXCORufh5zkA4V?=

=?Windows-1252?Q?PTBtEiO1X1qqq0fVxWWGTOTudeuJ02+zH3n17EQKdfEsiJapKx4nrnu8?=

=?Windows-1252?Q?9BPFBF7RSmEPT09d4dYIiRCUAogUaTMbhDLGOaoCo1WdH6fCdEvh+SqP?=

=?Windows-1252?Q?gxryeooRjK/2QT6U7zg8/wQKfN4H+I87tgQ3UuDHC82TmzPqusNrqdT+?=

=?Windows-1252?Q?g+s/08c4ORBRrfX4DvHCZdj2HGcdK0FLbVuCoYEf/l3HUQZDfh0tPSto?=

=?Windows-1252?Q?NcCSgIoP5/c/9kc5sNbRjiPpP5mRMmsTaSGDpRHBoJiQMzsy9BEwU28L?=

=?Windows-1252?Q?HYXNZSh+TKwN9PHDgCCEMTqHVcRLAM9yMpEKOZJLZ1znqkdr77hH9wL0?=

=?Windows-1252?Q?UO/djSAAHp6nW/6VREEGaxIqE76AKNBlsFFYSSvMBxzTOKKN19nGwvLB?=

=?Windows-1252?Q?84pJGLTmFBpk4B68RSmT6uYxYZanXXBrv4oj5gXVIMpASvOLe3OLqDGI?=

=?Windows-1252?Q?mvJTkbURWLxP5kn2foKsu5CateG+KYjl7FXv/GsP7UM0bTGpxs20I9W0?=

=?Windows-1252?Q?2uzS9+sOtDXAbYhgQmE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?kCfU0qdfRkm8sAJKrS49FFHA2u/THiE5KB3jHhHxnbaZmB3gkl+tqMPK?=

=?Windows-1252?Q?OATlebEQaxxcLz7vk1l5TmM84qPVsfDrL144tFm+tmScmi102eIXZjwn?=

=?Windows-1252?Q?cwxU1idRPrOTlfMRNKn/BSGVYpHvXZ2Stuj1SJI+PcmaTim+zj0xsJd8?=

=?Windows-1252?Q?lCLIZczHBjDSoSe2tgFubo2JLpabxowJFQvT2QIpi+fjh/rxAoZvfx+/?=

=?Windows-1252?Q?IUN0i+fpTlRNhWDFhlZ//YwCwAz8JhQu1J24A5EX++kqTVmTMUr1/2V+?=

=?Windows-1252?Q?U7gbxx259fbdtyUaMuTM09un/jzHHRFh8wrU9TFUdPhNPFJvHKJ8qkla?=

=?Windows-1252?Q?Qmw3Ul6HEAjRz1Y4CftdIeK79v+orQP7+ONb3RuAUf2nsy1wbyP+lqv8?=

=?Windows-1252?Q?sn6goLewwuYFk6BsLE916oUiJB/UgaRW+w1+aUIm5sQJsFBAbJxSwTe6?=

=?Windows-1252?Q?n9TM31YMoB5Z9Yy0/zTWKMmftnoKn8FYV7EQirECNYQ0Wba4eYS1Oa++?=

=?Windows-1252?Q?DU6ugXf6bczxMnewKclC6Vl4v51A0BSH+lngcF2pbUFAWGEAhSpuYRQK?=

=?Windows-1252?Q?NGKA/5FcUAoIo7NLySKIGbQS6hpo/oFrvgbCxg6w1hJxEubcbinOUJdR?=

=?Windows-1252?Q?LdIow6jJU46tPzDV1Fqihql7Y6TdTIGd0m3EoUheGKNXoFoDVf2qucV4?=

=?Windows-1252?Q?7c17AEtAAplxw/TU9iuiIC84co+UR4267p6O9XJ+867BFEmlwhHe4Emq?=

=?Windows-1252?Q?EdOnGRWh7Kk56DnkwD9cwLCOa1Q/VeHid0WmnVWYa8xlhkfIkw9kS8+K?=

=?Windows-1252?Q?fK43SCPqVaP/ijkIETAG8Jk9bn6FUq5dOxjayoFNAseT6EbFQ72CmvOE?=

=?Windows-1252?Q?jUgAReAE1xNtVCOyprfKRL3guE905sacjYyT4Fs768CXw/9rrZx1l8lD?=

=?Windows-1252?Q?YBTobWQFmDPAoUqgt3bt3tkX6hC8axpzqFwfRX2vDmbCmu+cafFlA0Hx?=

=?Windows-1252?Q?MzjA7Dl8Z6SgpmnJCj166/8y/E4rBvIP22BmSGVIGL7EyYCpsdiMC8v1?=

=?Windows-1252?Q?Hk9q3wqiktGjmDBC1XjUGMFoDtWl+9TpRYI7y2yxhhgsnLSy0REP28PS?=

=?Windows-1252?Q?rqYYLX5JLXvRPGPOHC60o7zaW7n3Y38ZjaE2b2bMxucRV1aG6wsITEAs?=

=?Windows-1252?Q?6fe4nqmGsiC8lhfScgX8H6EA2/aF8ZZ1itCXMTrTY2LNwYAvG/adArkr?=

=?Windows-1252?Q?qgoj5eFnYZrpdifOu5pSI4E/TiRWLAGfmx4yqTx/Ai02N6lNULilD3yu?=

=?Windows-1252?Q?iuGUlu18FOdz9mXPxYbKLMUynU7vZVG6c4IB1g5co7UK3DKsYbcYBziR?=

=?Windows-1252?Q?QfET+xCMtnHKwAHgZFsArYy9rbFPZ6wfR/p0O8mTskW9Rhy//11uAOWo?=

=?Windows-1252?Q?9mwdk07AByivyYoAcZpnQDybHRVPqf9jt5PkIVT3SCqMGW/RiB9JdEd8?=

=?Windows-1252?Q?qygVtS58eKH7Sz5vXpbIICxd1k/0QIH5DB8lmSvHle4YxOhPeq643Jav?=

=?Windows-1252?Q?exCGFlSRqCau9uA4?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR04MB8165EF2C556074EE9135D982CFBE2TYSPR04MB8165apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR04MB8165.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 624f1bdc-8d96-4473-37f2-08df0fcecb4e

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Sep 2026 06:34:55.7382

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KUZPR04MB9635



--_000_TYSPR04MB8165EF2C556074EE9135D982CFBE2TYSPR04MB8165apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

Just following up =97 I=92ve prepared a high-value SEO proposal wit

Our best pricing that I think you=92ll really like.

Want me to send it over?

Thanks,

Vikram

________________________________

From: Vikram Kumar

Sent: Thursday, September 10, 2026 1:15 PM

Subject: SEO Growth.?



Hi,

We can get your Website on the 1st page of Google.

Let me know if you are interested, I will send you our cost list.

Warm Regards

Vikram



--_000_TYSPR04MB8165EF2C556074EE9135D982CFBE2TYSPR04MB8165apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Just following up =97 I=92ve prepared a high-value SEO proposal wit



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Our best pricing that I think you=92ll really like.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Want me to send it over?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Vikram







yle=3D"font-size:11pt" color=3D"#000000">From: Vikram Kumar


Sent: Thursday, September 10, 2026 1:15 PM


Subject: SEO Growth.?

 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Hi,



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

We can get your Website on the 1st page of Google.



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Let me know if you are interested, I will send you our cost list.



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Warm Regards



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Vikram










--_000_TYSPR04MB8165EF2C556074EE9135D982CFBE2TYSPR04MB8165apcp_--

DHL PHish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Sep 2026 07:06:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x50xA-000000006nD-0PwH

for dave@doctor.nl2k.ab.ca;

Fri, 11 Sep 2026 07:06:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Sep 2026 07:06:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f103.google.com ([209.85.210.103]:51297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4s2Y-00000000MXV-1MJw

for root@nl2k.ab.ca;

Thu, 10 Sep 2026 21:35:11 -0600

Received: by mail-ot1-f103.google.com with SMTP id 46e09a7af769-7f18c0e03e3so300213a34.2

for ; Thu, 10 Sep 2026 20:34:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=brushme.com.ua; s=google; t=1789097651; x=1789702451; darn=nl2k.ab.ca;

h=content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=QC9pKvHUrrvhw23vrGBaE0wsi9rljJops5JJ+qVfc+k=;

b=YhYcZLt5jhCvEcNsYLlrHya/9MphOjl+iJqQJamnAt1s+afA82vEtgXgTv3Wm9v8UG

RKroBQlpOLM4VakgzAxNu8ILKOmld6MvxZUZ6yhOwh9TP6lzowev0EE5EegEa7bdYcJd

yLRu7K4uo4QjIZFUag04minAdIv/6GnSyikVtS0EtDOoV2buoHpRVQlf57q7iN0LPcrw

tNZwOArkIx0pC0dbd6pGCJyOXht4OY2tIVHtupvO9bWSHqkfFLgAjcHoEkqBtb7v1Tlp

wbWuylwn9UhP83KWyf8ECaouKiI/HDIjxh12MBegdxomzTk9BEOHqSkNhKoZXON6wRrM

pEHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789097651; x=1789702451;

h=content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=QC9pKvHUrrvhw23vrGBaE0wsi9rljJops5JJ+qVfc+k=;

b=WUerf7wvilwXHsfUjnUzG+vAIjiPKAOYEn2B2uktmxogaYdOgkfSwZy4Xa22zWuud5

1JtLnuQvm9RUWIRRjZd5RqkdKfXeyTixF/6s9ZhmcDeZlQCBaOkr84v3nXAfCZs7pK7I

etShp/XKEtmzVnsvCJkWgICDl3Dl5tIjaY3eA4GSAkIYkqnwUhtppXKsPo55l2Qqz23+

7302c6N7gFwrCgvDue7M4OIzgxkUUP52nhg+Gq+ubwZV1fnfWQ/b/G8Lt04jsdlo7tmk

nNcRorqCsDTWo5u0ivg3glFVyV1oJEoe0//beroD3ZY6V2v9Pr+C9O9wgOKO3Qm9+SWD

ZKtA==

X-Gm-Message-State: AFuF++lf8ExKrCiMFP+VK0eIBuPmDjcFrRHBkfZ3D6xwcW1MEe0cPpev

ibYYs723eEOwBQGk9Lwp535zXjG1PwBZjrh4Oo2PSExV0snbCCzbZCjitjLpmBYJsBvQWDMHS3W

Claohz5bQ+Cz0uouf6OKUaTyJVimdRsdHPWOfFvZWTx9GpHY=

X-Gm-Gg: AYBFou1H6qTCWVZCvV8jJeJ/+67ixFtZ4mKBnwZ7DX4lyN9fWoDxDVpgzFQQ7Kf6g5/

JsR4+bw1I1VMHPHrKFVBy9agj4+jbnnnGV/LXKRMi3VO3HvL7LDMLN94fPORiyNtjAfHa80T4qp

rH/lnl1tjElPHIHBKbI13Q5oNfsEywd5Ds0zI2G8fjxGBIPCJpPHwl19oui4wkhkTSAlkOwgqUd

c87SjNKNT7zsDYYw1V0x4n9YGnccCg1GmDen7VjS7p3c3cY+lrpDL2ZiCgsFLBhGXewfuTUeqm2

kaylD4FfgUVIwyJMnq52nJDRpOJe1W3xFsukLWKCVIH1zartytuJRZqUNfpdSU2QhwEF5HBxzkk

cgWOezxbQ+wr85W1QC/kg

X-Received: by 2002:a05:6830:7310:b0:7f4:eaa0:1d14 with SMTP id 46e09a7af769-803ffd9e011mr1275409a34.9.1789097650881;

Thu, 10 Sep 2026 20:34:10 -0700 (PDT)

Received: from brushme.com.ua ([45.59.104.23])

by smtp-relay.gmail.com with ESMTP id 46e09a7af769-803f640163asm664513a34.7.2026.09.10.20.34.10

for ;

Thu, 10 Sep 2026 20:34:10 -0700 (PDT)

X-Relaying-Domain: brushme.com.ua

From: DHL Group

To: root@nl2k.ab.ca

Subject: Important: Your Shipment Requires Attention

Date: 10 Sep 2026 20:34:10 -0700

Message-ID: <20260910203410.8ED695C26620A484@brushme.com.ua>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_E76775BB.612E9BC5"

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear root@nl2k.ab.ca, We would like to inform you that your

shipment is currently on hold.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

[209.85.210.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.103 listed in dnsbl.ahbl.org]

[209.85.210.103 listed in dnsbl.ahbl.org]

[209.85.210.103 listed in dnsbl.ahbl.org]

[209.85.210.103 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.103 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: brushme.com.ua]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.103 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.5 DEAR_EMAIL BODY: Message contains Dear email address

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.103 listed in wl.mailspike.net]

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.103 listed in bl.score.senderscore.com]

Subject: {SPAM?} Important: Your Shipment Requires Attention





------=_NextPart_000_0012_E76775BB.612E9BC5

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








0">






d-color: rgb(244, 244, 244);" cellspacing=3D"0" cellpadding=3D"0">














255, 255); margin: 40px auto; border-radius: 8px; overflow: hidden;" cells=

pacing=3D"0" cellpadding=3D"0">











































































   3D"DHL
=3D"cid:photo2026-09-0707-53-52.jpg" border=3D"0" hspace=3D"0">


 


Dear root@nl2k.ab.ca,
>

1); line-height: 1.6; font-size: 15px;">

We would like to inform you that your shipm=

ent is currently on hold.





Kindly update your delivery information below and track your shipm=

ent.

px 25px; border-radius: 5px; color: rgb(0, 0, 0); font-weight: bold; text-d=

ecoration: none; display: inline-block; background-color: rgb(241, 196, 15)=

;" href=3D"https://cmv-tr.cam/zmade/nip/DHL.HTML#root@nl2k.ab.ca" target=3D=

"_blank">Update Your Information

5); font-size: 13px;">

Important Notice: If the d=

elivery attempt is unsuccessful, the shipment may be returned to the sender=

=2E

font-size: 14px; font-weight: bold;">

Sincerely,


DHL Express Team






------=_NextPart_000_0012_E76775BB.612E9BC5

Content-Type: image/jpeg; name="photo2026-09-0707-53-52.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAkACQAAD/4gHbSUNDX1BST0ZJTEUAAQEAAAHLAAAAAAJAAABtbnRy

UkdCIFhZWiAAAAAAAAAAAAAAAABhY3NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAA

9tYAAQAAAADTLVF0BQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAlyWFlaAAAA8AAAABRnWFlaAAABBAAAABRiWFlaAAABGAAAABR3dHB0AAABLAAA

ABRjcHJ0AAABQAAAAAxyVFJDAAABTAAAACBnVFJDAAABTAAAACBiVFJDAAABTAAAACBkZXNj

AAABbAAAAF9YWVogAAAAAAAAb58AADj0AAADkVhZWiAAAAAAAABilgAAt4cAABjcWFlaIAAA

AAAAACShAAAPhQAAttNYWVogAAAAAAAA808AAQAAAAEWwnRleHQAAAAATi9BAHBhcmEAAAAA

AAMAAAACZmYAAPKnAAANWQAAE9AAAApbZGVzYwAAAAAAAAAFc1JHQgAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAD/2wBDAAQDAwQDAwQEAwQFBAQFBgoHBgYGBg0JCggKDw0QEA8NDw4RExgU

ERIXEg4PFRwVFxkZGxsbEBQdHx0aHxgaGxr/2wBDAQQFBQYFBgwHBwwaEQ8RGhoaGhoaGhoa

GhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhr/wgARCABPAY8DASIA

AhEBAxEB/8QAGwABAAIDAQEAAAAAAAAAAAAAAAEFBAYHAwL/xAAbAQEAAgMBAQAAAAAAAAAA

AAAAAwUBAgQGB//aAAwDAQACEAMQAAAB6IPiHqgAAAAAAAAAAAAAAAAAAAAAAAAAADAruiXY

Gvtttga+NgVlnBEKLbN61/Ik3uHnR6a7A1/P2zYqrEznYGv3emvqIYwAAAAAAAAAAAAHh7su

K1vceY+09PrjYNx6JuW/HTuY9E09k5J1Wr4MHl3r5WfdPXeR5Wmm16QdE+V1Pw5/TVld5LK+

t7nqvh7+A8eHBygAAAAAAAAAAK6xqJ5KpXrq1sMyksI4tO1vZHpLzW9q8fnGPf4yt1reH10e

+0+CLIvtb6jtmv0SzpJJMjb9U6jy8+jUdjTWHZke2CnmtFXdwQ7RgeOLU19gr0km7e2PkUNO

GmAAAAAAAACBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKB/8QAJRAAAgIC

AgEEAgMAAAAAAAAAAwQAAgEFFBUSEBETQAYWMWBw/9oACAEBAAEFAv8AHGXAqY7tGd2jO7Rn

dozu0YDYLM59LbhKlu7RgNmqyS98Dr3aM7tGLOgbjGyVVv3aM7tGUvglPulLUI3mCvH8LTwt

PC08LemM+2dUzZpLd7LjDmMe+dTr+EHe7L5LRcF2TXsLSoEJYxJpdbyiffZYoqG2+czbvXZp

2G2sbzYfAOLguyYpBaZApbGJMZzXPLP6fzNYlXWrbB6zx4inZ04RUAL7ThCiHzH5zH5zH4ud

0l9vseab0Hv2BDvvSkzXbEvZeuFwH32S37maw+dgR3iJA7mdzNVnlU2W7+M3czuZTfEFP2Ri

fsjEoyfh8x+cx+cx+Czaw/qbAVih4RpwjTCJfd9Q2FuidnROzonZnRvQP46zeJasKM3InWp0

j0ro3c2VWooHZp7B8/SPRXRM2PWuKVe0Jsm6R6dI9OkenSPTW6UtDHE0xfhGnCNOEaAx4h/u

/wD/xAAxEQACAQMBBQUGBwAAAAAAAAABAgMABBESITEyYZETFEBBoQUiI1LS4TBQUXGB0fD/

2gAIAQMBAT8B8YsMjjKqa7vN8h6V3eb5D0plZThhSo78IzRglAyVPSkjeThGaaGVRkqaEMrD

IU9KeN4+IY8Ba3Ekq4jTYOf2qaeWBNbKOv2q2madNZGK9pYcLGOKra3FvHpq6ge4XSpwKhiW

BNC0xN/LpHAvrRKxrk7hVzcG4k1eX4seNYzWmHl6fVTCIkKMbf8AfrUcttEoVWFSPay7HYH+

alms4h7oyatI4CO0mYZPOruS3jTEe0nnVslusfxXBP71eyQKNMW+oRZdmNo60Vsj5jrTrYIu

dnWkSMb8en91ph5en1Ud/wCR/wD/xAAyEQABAwIBCAkEAwAAAAAAAAABAgMEABESBRMhMUFh

kaEUMDJRU2KB0uEiIzNAUHGi/9oACAECAQE/Af3Ex3nBdKCfSuiSfDPA10ST4Z4GloU2bKFq

bacd7AvRivpFyg8KQy672Ek0qM8gXUggf1QjPqF0oPClsOt9tJHXjXpqFLdfRZpsADf8U/Kf

jt41pHH4qI+uS3nFJtWV8LgQ0nSs1DipiNYRr21OjOSkYEqsKjsIjNhtNLJym/gH4086UpLS

LnQBU2UqW7i2bOtYtnBesMfy8vdSksEhAwi+3u/0aZfhsICELFhvp12C/ocUD60/IyewmyBc

7qgtRSM6+oXO/VU9yI03ZnSo76htRUtfeWCT5vmsouxkJwMa++9R05OzQ+ocbUUZOOsjj804

jJbaCrQfWkNsjSrDy91YY/l5e6l6/wCD/8QAOBAAAQIDBAcGBQIHAAAAAAAAAQACAwQREiEy

MxATIzFRkqIiNDVBYZMFFEBCoVJiUGBwcYKR0f/aAAgBAQAGPwL+jgMw+xXdcs/ocs/ocs/o

cs/ocs/ocqQYzXHhu0lro94uwlZ/Q5CHAiW3nyslFzzRovJWf0OWf0OR+Xfbs7+yVYjxbLuF

CVn9Dln9DkHN3G8fXOiPwtvKMR7TT7RwCwlYSsJW46KhQ3xMQuJ4rUQTtX7zwGigVXjbPxen

ovloJ7DcZ4nQ2FCHacgG3u8v3FOfENXOvJ0a2KNiz8n+AOixTQN/KJa4NHkLIuWYOQJ0WZcN

Vub2d6+XhZjx2vQaGwoQ7TkGi8gUaP1FOiRDVzrydALbiFnxec6Lk6NMXRCKu9BwRebmC5o4

aBDZu+48Amw4Yo1u76sGXEO1X7zRYZT3FhlPcWGU9xbZsuIQxFrqqzDOxZh9fXS1jIcENaKC

4/8AVWJLyz/7sQayTlS47hqlrZhkKE+lXWG0ou7QXsGG2KructyI1lJdsJuJ1hGI+BD/AGiw

Lyu5y3Iu5y3ItdFloENv2WWJ0GFDZFY3FbHmu5y3Iu5y3Ijq5aAyvALKh/lZUP8AKESK2E2O

7CwmiwynuLDKe4sMp7iYX0tEX03fStDIDJg2sLjReGS/OvDJfnXhkuP80Jb4dBa1jsZBossc

4WWOcLLHOFk9QW1cyGP9qrBaifrKEGWhbLe42hesjragDCsjjaCbCh7h58VXUbNtzBbCyOtq

b8yzVwvM2gg1go0XAJ75aj2uNaE3hZHWFkdbVkdbVkdbVrJyHQMvDai8q1F+Hwn8KxF4ZL86

8Ml+deGS/OoYLQwho7I8v54//8QAKxAAAQIFAwIFBQEAAAAAAAAAAQARITFR0fAQQZFhgUBx

obHxIFBgcMHh/9oACAEBAAE/If04D2BtEL8LNaWa0s1pZrSzWlS+JRcHUegEcx/YLNaRQOwf

3CBcFcbBZrSzWlFd0B7hMONvZAs1pZrSNuSOICId/HGBYCBnMjKPjV8avjUQRIvMaEERiJF0

Ygl4yjdSAigZOdCCA5MgyDXgSHOMIHB20fUE46pvDYb10/H2gnfJI8X2BgQuVAjqaZhoUNoU

gOqn027Zz0fQE46ps33IKch7QHSMkQZaIeaAJNEUx29pU4uw19HvhMkZVZg8WWoNphmWFusL

dYW6EaiKHqiTh9zULfQCj2UK5/qMAxgT+qZb71uFEcxAZk2jbVenpCcemXZDVmI1UYmCTVAh

rkQD/jVm64g+Fg3LBuR4CrtNurrC3WFusLdBLEUvu5tvCiagTBBAxWFusLdEgCAdysaEojsj

9CiigEgOdUQ5k70QpxvTe1E6kdo39zssVxCxkMSh8FDZqVKlEIkIwk1nusVxBWOTjtAoegVh

sEUM0gjixXViuLFcWK4q52RxJxfEKNYW6wt1hboo9SMiGQ8vzj//2gAMAwEAAgADAAAAEAAA

AAAAAAAAAAAAAAAAAAAAAAAAACAwygBiBQBgAAAAAAAAAAAAAE6AyDCQbR5oQAAAAAAAAAAA

FMqQEUeiYggAA88oAAAAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDP/xAAoEQEAAQMDAwMEAwAA

AAAAAAABEQAhUTFBYZGx0aHB8DBxgfFAUOH/2gAIAQMBAT8Q/mSQDIL7V+8eK/ePFSoDyRTq

PDAvamwQcvFDK8MC9qRHBuie1HFhwvFDC8sid/rkSTpULJYuo+xdSyEOU/ilis6XmTOhUYZT

b7f77UWGrq5fGKK5pzj8UZ0DfLmtwxfl89L7lObAdCmysLBg8v1SgjHOnqncrgqRhcrQG7I7

4zRNQclDkCyPNR8toFjrpSTYAgQdfhVqu6JRzr0owob8eNetE41aozB11e1GAmi8wZ5JKChf

55pjFRsSX1oJb7fVBwW1wVITj+j/AP/EACURAQACAAUDBQEBAAAAAAAAAAEAESExQVFhcZGx

MIHB0fChQP/aAAgBAgEBPxD/AGV3G4k7hP03xP03xLZlslP9iiPTYXxGh4aqrxDFJNhfBG5h

qoO6Q+yOSJPEJEl3E8+uwCLJk5niw6GL3jKrOdvBJmhcsbs3yJVKxhuH0/F6QxjLFbv0aQMb

Wwz2Omsy2TN3dVljcXF3bftLdSJnodgjh4DAbH26+qGdavG8ve0P6Ti7p3EHBQ1bMTY1YBXw

O/VgIGMrH3HAtITXu5dsYj0eKlO93xoc3MF2oE0b557d9IWccsRhx8uYSqVmEgbZpb46wo4l

F3ZetlkDpZIgFWhZeMGAIWW6thwYMDpOLunQdZW+lUqVKlSpUqVKlSpUqVKlSpUqVKlSpU//

xAAoEAEAAgEEAQMEAgMAAAAAAAABABEhEDFBYVEgwfBAcYHxUGBwkbH/2gAIAQEAAT8Q/wAO

M8NlKOgvqRRRRR7xCn+wC6tWPQNnaDoiXGFAsG6oBEr/ANhItdUUXzjl6ZfYQhTGpgPmytUU

THXR1WzQE+uT06gW0cBys5beVC2J+6z91n7rAEcbq6LCeIUROSMUblh0Redwa+g8J4BZV4JX

kmeF4E/FFYX/ADow4sPA5XRBSEU2EmVHCMo5XTwKPaPb7Dn+Ay9krng7GNz2iAcFpPnPtK8I

os35CcEPNC7T30YdGdDldEyKu2Fcq6vLE4Io5XR6ODXKORJ8a94qqwZJRoDKrGg8YuyCXGXF

/G27p4f0rC3YYcP3D27v1Z2sjnYrTZn0aaaOdnLxQ6i86wD8SvbXhSzTDqQwCoXz/cgtUyVv

AE2WTHbtlatTAIJuOmxs+5O3a7mIWTYjxDGt2vC2vE3K7BMkONCXIHjVd8YJv2vNOtlmKMLM

tlu+0PRppoBgOoGFtyXt9K2JDRANWzOvXTYsBuh3hl8Iri3xFeeZ859585958594sHZkgZ5H

l+Mi/YlZP2DYQQ110TlA1o9HVoXBeURmC822779zLpj4b5Lz0e1pSxPQ4CNsArkGgCgIOObZ

itM4T0/+++1lDLd4rslErqq4lOJv6OuulpA5aAFuTYf0a5cuXLly5cuXLly5cuXLly5cuXLl

y5cuXLly5cuXLly5cuXLly5cuXLly5c//9k=



------=_NextPart_000_0012_E76775BB.612E9BC5--

Chinese Domain phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 21:15:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4rjd-00000000KZJ-0zs8

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 21:15:29 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 21:15:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sw5.labevandadelreb2b.com ([45.82.64.198]:49135)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4rKM-00000000HaG-1Uza

for sales@nk.ca;

Thu, 10 Sep 2026 20:49:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1788735923; d=labevandadelreb2b.com;

h=Date:To:From:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:

Content-Transfer-Encoding; i=support@sw1.labevandadelreb2b.com;

bh=O2dJ42Xjm+ONWWSR+PpWowKWwOkHrDeW2PW6dId2H2E=;

b=SKGEHKmka1bpYoUDPSYqO2jjfi6BWHrvmGFXtDDS2Z4dQ5k8TFnNjApTeR+FaNYdYJTiJc4gN58z

uevRZ4kyC524w56MrNNTj6FNXs9PphMm7OVmwhy8z9bZLCBpXG+ym+8nxjGVeMgLVBqNLRJDleMb

5rulI1d8zDD/pzHxMl0=

Date: Fri, 11 Sep 2026 02:45:48 +0000

To: sales@nk.ca

From: muumuu

Subject: =?UTF-8?B?44OJ44Oh44Kk44Oz5pyJ5Yq55pyf6ZmQ5YiH44KM44Gu44GK55+l44KJ44Gb?=

=?UTF-8?B?IOKAlCDmm7TmlrDmiYvntprjgY3jga7jgYrpoZjjgYQ=?=

Message-ID: <78ba18bd2d5f683565b0f94b51c1e67a@sw1.labevandadelreb2b.com>

List-Unsubscribe: mailto:bounce045-nWgPjmv6QB2IFM2@sw1.labevandadelreb2b.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="127a1eab92e8b3f6cdeefe95ae123948c"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--127a1eab92e8b3f6cdeefe95ae123948c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













ドメイン有効期限切れのお知らせ











































ステータス：期限切れ





















ドメイン有効期限切れのお知らせ







お客様のドメインサービスの有効期限が切れていることを確認いたしました。







現在、ドメインは 「期限切れ（Expired）」 の状態となっています。

æ›´æ–°æ‰‹ç¶šããŒè¡Œã‚ã‚Œãªã„å ´åˆã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã«é–¢é€£ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãŒåœæ­¢ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚















サービス停止の可能性があるもの







ドメインの利用

Webサイトへのアクセス

ドメインに関連するWebメール

その他、ドメインに紐づく関連サービス













サービスを継続してご利用いただくには、ドメインの更新手続きを行ってください。

æ›´æ–°å¯èƒ½ãªæœŸé–“ã«ã¯åˆ¶é™ãŒã‚ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã®ã§ã€ã§ãã‚‹ã ã‘æ—©ã‚ã®ãŠæ‰‹ç¶šãã‚’ãŠã™ã™ã‚ã„ãŸã—ã¾ã™ã€‚















ドメインを更新する













※ 更新料金、更新可能期間、および復旧条件などについては、お客様の契約内容をご確認ください。



















本メールはドメインサービスに関する重要なお知らせです。

ご不明な点がございましたら、公式サポート窓口までお問い合わせください。



























--127a1eab92e8b3f6cdeefe95ae123948c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable












1.0">

=E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E6=9C=89=E5=8A=B9=E6=9C=9F=<br /><br /> =E9=99=90=E5=88=87=E3=82=8C=E3=81=AE=E3=81=8A=E7=9F=A5=E3=82=89=E3=81=9B</t=<br /><br /> itle><br /><br /> </head><br /><br /> <br /><br /> <body style=3D"margin:0; padding:0; background-color:#f5f7f7; font-family:A=<br /><br /> rial, 'Hiragino Kaku Gothic ProN', Meiryo, sans-serif; color:#333333;"><br /><br /> <br /><br /> <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" st=<br /><br /> yle=3D"background-color:#f5f7f7; padding:40px 15px;"><br /><br /> <tr><br /><br /> <td align=3D"center"><br /><br /> <br /><br /> <table width=3D"600" cellpadding=3D"0" cellspacing=3D"0" border=3D"=<br /><br /> 0" style=3D"max-width:600px; width:100%; background:#ffffff; border-radius:=<br /><br /> 8px; overflow:hidden;"><br /><br /> <br /><br /> <!-- Header --><br /><br /> <tr><br /><br /> <td style=3D"padding:28px 35px; border-bottom:1px solid #eeeeee=<br /><br /> ;"><br /><br /> <img src=3D"data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4=<br /><br /> wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC=<br /><br /> 9zdmciIHZpZXdCb3g9IjAgMCAyMzIxLjQzIDg0My41NSI+CiAgPGcgZmlsbD0iIzM5M2M0MSI+C=<br /><br /> iAgICA8cGF0aCBkPSJtMjExNS4zMiA4MzEuODhjLS4wOCAxLjA0LjcyIDEuOSAxLjc3IDEuOWgy=<br /><br /> MS4yOGMxLjA0IDAgMS45Ny0uODUgMi4wNS0xLjlsMy42Ni00OC43NWMuMDgtMS4wNC0uNzItMS4=<br /><br /> 5LTEuNzctMS45aC0yMS4yOGMtMS4wNiAwLTEuOTYuODUtMi4wNSAxLjl6Ij48L3BhdGg+CiAgIC=<br /><br /> A8cGF0aCBkPSJtMjIzOC41MyA3ODEuMjRjLTEuMDQgMC0xLjgzLjg1LTEuNzYgMS45bDMuNyA0O=<br /><br /> C43NWMuMDggMS4wNC45OSAxLjkgMi4wNCAxLjloMjEuM2MxLjA0IDAgMy4wNC0uODUgMi45NS0x=<br /><br /> LjlsLTQuOS00OC43NWMtLjA2LTEuMDQtLjk5LTEuOS0yLjA1LTEuOXoiPjwvcGF0aD4KICAgIDx=<br /><br /> wYXRoIGQ9Im0yMjYxLjE2IDc1Ny4wOWMxLjA0IDAgMS45LS44NSAxLjktMS45di0yMC41YzAtMS=<br /><br /> 4wNC0uODUtMS45LTEuOS0xLjloLTU2LjkyYy0xLjA2IDAtMS45MS0uODUtMS45MS0xLjl2LTE0L=<br /><br /> jQ1YzAtMS4wNC0uODUtMS45LTEuOS0xLjloLTIwLjVjLTEuMDQgMC0xLjkuODUtMS45IDEuOXYx=<br /><br /> NC40NWMwIDEuMDQtLjg3IDEuOS0xLjkxIDEuOWgtNTYuNTJjLTEuMDQgMC0xLjkuODUtMS45IDE=<br /><br /> uOXYyMC41YzAgMS4wNC44NSAxLjkgMS45IDEuOWg1Ni41MmMxLjA0IDAgMS45MS44NSAxLjkxID=<br /><br /> EuOXY3Mi45YzAgMS4wNC44NSAxLjkxIDEuOSAxLjkxaDIwLjVjMS4wNCAwIDEuOS0uODcgMS45L=<br /><br /> TEuOTF2LTcyLjljMC0xLjA0Ljg1LTEuOSAxLjkxLTEuOXoiPjwvcGF0aD4KICAgIDxwYXRoIGQ9=<br /><br /> Im0xNzE3LjEgNzk3Ljg4Yy0uNS41LS41IDEuMzEgMCAxLjgxbDE1LjM3IDE1LjM3Yy41LjQ5IDE=<br /><br /> uMzEuNDkgMS44MSAwbDU1LjctNTUuN2MuNS0uNSAxLjMxLS41IDEuODEgMGw3Mi43MyA3Mi44N2=<br /><br /> MuNTIuNSAxLjMyLjUgMS44MiAwbDE1LjM3LTE1LjM2Yy41LS41LjUtMS4zMiAwLTEuODFsLTg5L=<br /><br /> jkxLTkwLjA4Yy0uNS0uNS0xLjMxLS41LTEuODEgMGwtNzIuOSA3Mi45eiI+PC9wYXRoPgogICAg=<br /><br /> PHBhdGggZD0ibTE5MjIuMzMgODMyLjUxYy0uMDkuNy40MSAxLjI4IDEuMTMgMS4yOGgyMy42Yy4=<br /><br /> 2OSAwIDEuMzQtLjU4IDEuNDMtMS4yOGwxMi43Ny0xMDYuMTNjLjA4LS43LS40NC0xLjI3LTEuMT=<br /><br /> QtMS4yN2gtMjMuNmMtLjcgMC0xLjM0LjU3LTEuNDIgMS4yN3oiPjwvcGF0aD4KICAgIDxwYXRoI=<br /><br /> GQ9Im0yMDE3Ljk0IDcyNS4xMmMtLjcyIDAtMS4yMi41Ny0xLjEzIDEuMjdsMTIuODggMTA2LjEz=<br /><br /> Yy4wOC43LjczIDEuMjcgMS40MyAxLjI3aDIzLjZjLjcgMCAxLjIxLS41NyAxLjEzLTEuMjdsLTE=<br /><br /> yLjg4LTEwNi4xM2MtLjA5LS43LS43My0xLjI3LTEuNDMtMS4yN3oiPjwvcGF0aD4KICA8L2c+Ci=<br /><br /> AgPHBhdGggZD0ibTIyNzQuOTUgNzQyLjg5YzAgMS4wNC44NSAxLjkxIDEuOSAxLjkxaDE0LjQ0Y=<br /><br /> zEuMDYgMCAxLjktLjg3IDEuOS0xLjkxdi0yOC4wNGMwLTEuMDQtLjg0LTEuOS0xLjktMS45aC0x=<br /><br /> NC40NGMtMS4wNCAwLTEuOS44NS0xLjkgMS45eiIgZmlsbD0iIzFmN2FjYyI+PC9wYXRoPgogIDx=<br /><br /> wYXRoIGQ9Im0yMzAyLjk4IDc0Mi44OWMwIDEuMDQuODQgMS45MSAxLjkgMS45MWgxNC40NGMxLj=<br /><br /> A0IDAgMS45LS44NyAxLjktMS45MXYtMjguMDRjMC0xLjA0LS44NS0xLjktMS45LTEuOWgtMTQuN=<br /><br /> DRjLTEuMDYgMC0xLjkuODUtMS45IDEuOXoiIGZpbGw9IiMxZjdhY2MiPjwvcGF0aD4KICA8Y2ly=<br /><br /> Y2xlIGN4PSIxODY2LjI3IiBjeT0iNzMwLjkiIGZpbGw9IiMxZjdhY2MiIHI9IjE3Ljk1Ij48L2N=<br /><br /> pcmNsZT4KICA8cGF0aCBkPSJtMjA3Ny42IDcxMi45NWMtOS45IDAtMTcuOTUgOC4wMy0xNy45NS=<br /><br /> AxNy45NXM4LjA0IDE3Ljk1IDE3Ljk1IDE3Ljk1IDE3Ljk1LTguMDQgMTcuOTUtMTcuOTUtOC4wM=<br /><br /> y0xNy45NS0xNy45NS0xNy45NXoiIGZpbGw9IiMxZjdhY2MiPjwvcGF0aD4KICA8cGF0aCBkPSJt=<br /><br /> OTg2LjQ2IDc5NS4zNWMtLjIzIDcuNDgtMy41MSAxNy41NS0xMy40NiAxNy41NS0xLjEzIDAtMTA=<br /><br /> uMjkgMC0xMy4wMS0xMC43Ni0uNDUtMS4zNC0uOS0zLjczLS45LTcuMjQgMC0xMi4xIDcuMjQtMT=<br /><br /> YuNzUgMTMuMzUtMTYuNzUgNy4zNSAwIDE0LjM3IDYuMDEgMTQuMDMgMTcuMjF6bS00MC42LTUxL=<br /><br /> jEydjc5Ljg2aDEzLjQ2di01Ljg4YzIuOTQgMy4zOSA4LjAzIDcuNTggMTUuNSA3LjU4IDEzLjQ2=<br /><br /> IDAgMjUuNjktMTEuNzYgMjUuNjktMzAuMnMtMTItMjkuNzUtMjQuNzgtMjkuNzVjLTYuMjIgMC0=<br /><br /> xMS44OCAyLjI1LTE2LjQgNi40NXYtMjguMDVoLTEzLjQ2em05NS4wMiAyMy4zLTEwLjc1IDQyLj=<br /><br /> E5LTEyLjU2LTQyLjE5aC0xNC41OWwyMC40NyA1Ny42OWMwIDEuMTMtMS41OCAzLjYyLTMuMTcgN=<br /><br /> C42NC0yLjE1IDEuNDctNS4wOSAxLjQ3LTYuMTEgMS40Ny0xLjM2IDAtMi4zOC0uMTEtMy42Mi0u=<br /><br /> MzN2MTEuODZjMS41OC4yNCAzLjczLjY5IDguMTQuNjkgMTAuNTIgMCAxNC43LTQuMiAxOC41NS0=<br /><br /> xNi4wNmwzLjE3LTEwLjYzIDE0LjM3LTQ5LjMzaC0xMy45MXoiIGZpbGw9IiMwMDViYWMiPjwvcG=<br /><br /> F0aD4KICA8cGF0aCBkPSJtMTM3Ny44NyA4MjUuNzljLS40MSAwLS45My0uMjktMS4xNC0uNjRsL=<br /><br /> TMzLjYyLTU1LjA0LTE4LjI5IDYyLjk4Yy0uMTEuMzktLjU0LjcyLS45Ni43MmgtMzUuMjljLS40=<br /><br /> IDAtLjY0LS4zMS0uNTItLjcybDM3LjIxLTExNy44M2MuMTMtLjM5LjU3LS43My45Ny0uNzNoMTM=<br /><br /> uMjZjLjQxIDAgLjkzLjI5IDEuMTYuNjRsNDUuMzMgNzAuMjkgNDUuMzMtNzAuMjljLjIzLS4zNS=<br /><br /> 43NC0uNjQgMS4xNi0uNjRoMTMuMjVjLjQxIDAgLjg1LjM0Ljk4LjczbDM3LjIxIDExNy44M2MuM=<br /><br /> TMuNC0uMTEuNzItLjUzLjcyaC0zNS4yOGMtLjQxIDAtLjg1LS4zMy0uOTctLjcybC0xOC4yNy02=<br /><br /> Mi45OC0zMy42MiA1NS4wNGMtLjIxLjM1LS43NC42NC0xLjE0LjY0aC0xNi4yNHptLTg4LjIxLTU=<br /><br /> 4LjcxYy0uMDgtLjMzLS4zOC0uNi0uNzMtLjZoLTEwMC41NWMtNS4zMiAwLTkuNjMgNC4zMS05Lj=<br /><br /> YzIDkuNjNzNC4zMSA5LjYzIDkuNjMgOS42M2g1OS43NWMtNy4xMSAxOC44LTMxLjE3IDMyLjYzL=<br /><br /> TU5Ljc1IDMyLjYzLTM0LjE3IDAtNjEuODctMTkuNzgtNjEuODctNDQuMTlzMjcuNy00NC4xOCA2=<br /><br /> MS44Ny00NC4xOGMxOC42OCAwIDM1LjQgNS45MSA0Ni43NSAxNS4yMy4wNC4wNC4wOC4wNi4xMS4=<br /><br /> xLjEzLjA4LjI2LjEzLjQxLjEzaDQxLjA5Yy40MSAwIC43NS0uMzQuNzUtLjc1IDAtLjE4LS4wOC=<br /><br /> 0uMzQtLjE5LS40OC0uMDEtLjAzLS4wNC0uMDUtLjA2LS4wOC0xNy40OC0xOC42My01MC43My0zM=<br /><br /> S4yMS04OC44Ny0zMS4yMS01Ni4zMSAwLTEwMS45NCAyNy40Mi0xMDEuOTQgNjEuMjNzNDUuNjQg=<br /><br /> NjEuMjQgMTAxLjk0IDYxLjI0IDEwMS45NS0yNy40MSAxMDEuOTUtNjEuMjRjMC0yLjM5LS4yNC0=<br /><br /> 0Ljc2LS42OC03LjA5em0yOTMuOTMtNTQuMTNjNTYuMzEgMCAxMDEuOTUgMjcuNDEgMTAxLjk1ID=<br /><br /> YxLjIzcy00NS42NSA2MS4yMy0xMDEuOTUgNjEuMjMtMTAxLjk1LTI3LjQxLTEwMS45NS02MS4yM=<br /><br /> yA0NS42NS02MS4yMyAxMDEuOTUtNjEuMjN6bTAgMTA1LjQyYzM0LjE3IDAgNjEuODktMTkuNzgg=<br /><br /> NjEuODktNDQuMTlzLTI3LjcxLTQ0LjE5LTYxLjg5LTQ0LjE5LTYxLjg5IDE5Ljc4LTYxLjg5IDQ=<br /><br /> 0LjE5IDI3LjcxIDQ0LjE5IDYxLjg5IDQ0LjE5eiIgZmlsbD0iIzAwNWJhYyI+PC9wYXRoPgogID=<br /><br /> xwYXRoIGQ9Im05OTEuMTEgMjI3LjY3LTQ4LjUxLTgyLjk5Yy0uODQtMS40My0yLjY4LTEuOTEtN=<br /><br /> C4xMS0xLjA4LS45Mi41NC0xLjQ5IDEuNTMtMS40OSAyLjU5djExOS4zOGMwIDUuMzYtNC4zNCA5=<br /><br /> LjcxLTkuNyA5LjcxaC00Mi42OGMtNS4zNiAwLTkuNy00LjM1LTkuNy05Ljcxdi0yMzkuODJjMC0=<br /><br /> 1LjM2IDQuMzQtOS43MSA5LjctOS43MWg0Ni45OWMzLjM1IDAgNi40NiAxLjczIDguMjMgNC41OG=<br /><br /> w2Mi40NSAxMDEuNjljMS40NSAyLjM2IDQuNTMgMy4wOSA2Ljg4IDEuNjUuNjctLjQxIDEuMjMtL=<br /><br /> jk4IDEuNjUtMS42NWw2Mi40NC0xMDEuNjljMS43Ny0yLjg0IDQuODgtNC41NyA4LjIzLTQuNThs=<br /><br /> NDctLjAyYzUuMzYgMCA5LjcgNC4zNCA5LjcgOS43djE4Ny44NXMwIDUyLjAxIDAgNTIuMDFjMCA=<br /><br /> 1LjM2LTQuMzQgOS43MS05LjcgOS43MWgtNDIuNjhjLTUuMzYgMC05LjctNC4zNS05LjctOS43MX=<br /><br /> YtMTE5LjU1YzAtMS42Ni0xLjM0LTMtMy0zLTEuMDYgMC0yLjA0LjU2LTIuNTggMS40N2wtNDkuN=<br /><br /> DkgODMuMjNjLTEuNzcgMi44Ni00Ljg5IDQuNi04LjI1IDQuNmgtMTMuNGMtMy4zOCAwLTYuNTIt=<br /><br /> MS43Ni04LjI4LTQuNjV6bTc0MC43NyAwLTQ4LjUxLTgyLjk5Yy0uODQtMS40My0yLjY4LTEuOTE=<br /><br /> tNC4xMS0xLjA4LS45Mi41NC0xLjQ5IDEuNTMtMS40OSAyLjU5djExOS4zOGMwIDUuMzYtNC4zNC=<br /><br /> A5LjcxLTkuNyA5LjcxaC00Mi42OGMtNS4zNiAwLTkuNy00LjM1LTkuNy05Ljcxdi0yMzkuODJjM=<br /><br /> C01LjM2IDQuMzQtOS43MSA5LjctOS43MWg0Ni45OWMzLjM1IDAgNi40NiAxLjczIDguMjMgNC41=<br /><br /> OGw2Mi40NSAxMDEuNjljMS40NSAyLjM2IDQuNTMgMy4wOSA2Ljg4IDEuNjUuNjctLjQxIDEuMjM=<br /><br /> tLjk4IDEuNjUtMS42NWw2Mi40NC0xMDEuNjljMS43Ny0yLjg0IDQuODgtNC41NyA4LjIzLTQuNT=<br /><br /> hsNDctLjAyYzUuMzYgMCA5LjcgNC4zNCA5LjcgOS43djE4Ny44NXMwIDUyLjAxIDAgNTIuMDFjM=<br /><br /> CA1LjM2LTQuMzQgOS43MS05LjcgOS43MWgtNDIuNjhjLTUuMzYgMC05LjctNC4zNS05LjctOS43=<br /><br /> MXYtMTE5LjU1YzAtMS42Ni0xLjM0LTMtMy0zLTEuMDYgMC0yLjA0LjU2LTIuNTggMS40N2wtNDk=<br /><br /> uNDkgODMuMjNjLTEuNzcgMi44Ni00Ljg5IDQuNi04LjI1IDQuNmgtMTMuNGMtMy4zOCAwLTYuNT=<br /><br /> ItMS43Ni04LjI4LTQuNjV6bS00ODYuOTggNDcuNjJjLTI1LjU1IDAtNDQuMTEtOC4xNi01NC43M=<br /><br /> y0yMi44Ny0xMC42My0xNC43MS0xNS45NC0zMi45OC0xNS45NC01NC43OXYtMTA0LjgzYzAtNS4z=<br /><br /> NiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJjNS4zNSAwIDkuNyA0LjM1IDkuNyA5LjcxdjEwMy4=<br /><br /> zMWMwIDguNjMgMi4xNSAxNS4yMiA2LjQ1IDE5Ljc5czEwLjM3IDYuODUgMTguMjIgNi44NWM0Lj=<br /><br /> gxIDAgMTAuNS0xLjI3IDE3LjA4LTMuODEgMTAuOTgtNC4yMyAxOC4yMi0xNC43OCAxOC4yMi0yN=<br /><br /> i41NXYtOTkuNTljMC01LjM2IDQuMzQtOS43MSA5LjctOS43MWg0My4yMmM1LjM1IDAgOS43IDQu=<br /><br /> MzUgOS43IDkuNzF2MTcyLjc5YzAgNS4zNi00LjM0IDkuNzEtOS43IDkuNzFoLTQzLjIyYy01LjM=<br /><br /> 1IDAtOS43LTQuMzUtOS43LTkuNzF2LTMuODhzLTIuMjUuOTctMTMuNDcgNS4xOGMtMTEuMjMgNC=<br /><br /> 4yMS0yNC43NyA4LjQxLTM4LjQzIDguNDF6bTc0MC43OCAwYy0yNS41NSAwLTQ0LjExLTguMTYtN=<br /><br /> TQuNzMtMjIuODctMTAuNjMtMTQuNzEtMTUuOTQtMzIuOTgtMTUuOTQtNTQuNzl2LTEwNC44M2Mw=<br /><br /> LTUuMzYgNC4zNC05LjcxIDkuNy05LjcxaDQzLjIyYzUuMzUgMCA5LjcgNC4zNSA5LjcgOS43MXY=<br /><br /> xMDMuMzFjMCA4LjYzIDIuMTUgMTUuMjIgNi40NSAxOS43OXMxMC4zNyA2Ljg1IDE4LjIyIDYuOD=<br /><br /> VjNC44MSAwIDEwLjUtMS4yNyAxNy4wOC0zLjgxIDEwLjk4LTQuMjMgMTguMjItMTQuNzggMTguM=<br /><br /> jItMjYuNTV2LTk5LjU5YzAtNS4zNiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJjNS4zNSAwIDku=<br /><br /> NyA0LjM1IDkuNyA5LjcxdjE3Mi43OWMwIDUuMzYtNC4zNCA5LjcxLTkuNyA5LjcxaC00My4yMmM=<br /><br /> tNS4zNSAwLTkuNy00LjM1LTkuNy05Ljcxdi0zLjg4cy0yLjI1Ljk3LTEzLjQ3IDUuMThjLTExLj=<br /><br /> IzIDQuMjEtMjQuNzcgOC40MS0zOC40MyA4LjQxem0tNTE5LjU1IDBjLTI1LjU1IDAtNDQuMTEtO=<br /><br /> C4xNi01NC43My0yMi44Ny0xMC42My0xNC43MS0xNS45NC0zMi45OC0xNS45NC01NC43OXYtMTA0=<br /><br /> LjgzYzAtNS4zNiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJjNS4zNSAwIDkuNyA0LjM1IDkuNyA=<br /><br /> 5LjcxdjEwMy4zMWMwIDguNjMgMi4xNSAxNS4yMiA2LjQ1IDE5Ljc5czEwLjM3IDYuODUgMTguMj=<br /><br /> IgNi44NWM0LjgxIDAgMTAuNS0xLjI3IDE3LjA4LTMuODEgMTAuOTgtNC4yMyAxOC4yMi0xNC43O=<br /><br /> CAxOC4yMi0yNi41NXYtOTkuNTljMC01LjM2IDQuMzQtOS43MSA5LjctOS43MWg0My4yMmM1LjM1=<br /><br /> IDAgOS43IDQuMzUgOS43IDkuNzF2MTcyLjc5YzAgNS4zNi00LjM0IDkuNzEtOS43IDkuNzFoLTQ=<br /><br /> zLjIyYy01LjM1IDAtOS43LTQuMzUtOS43LTkuNzF2LTMuODhzLTIuMjUuOTctMTMuNDcgNS4xOG=<br /><br /> MtMTEuMjMgNC4yMS0yNC43NyA4LjQxLTM4LjQzIDguNDF6bTc0MC43OCAwYy0yNS41NSAwLTQ0L=<br /><br /> jExLTguMTYtNTQuNzMtMjIuODctMTAuNjMtMTQuNzEtMTUuOTQtMzIuOTgtMTUuOTQtNTQuNzl2=<br /><br /> LTEwNC44M2MwLTUuMzYgNC4zNC05LjcxIDkuNy05LjcxaDQzLjIyYzUuMzUgMCA5LjcgNC4zNSA=<br /><br /> 5LjcgOS43MXYxMDMuMzFjMCA4LjYzIDIuMTUgMTUuMjIgNi40NSAxOS43OXMxMC4zNyA2Ljg1ID=<br /><br /> E4LjIyIDYuODVjNC44MSAwIDEwLjUtMS4yNyAxNy4wOC0zLjgxIDEwLjk4LTQuMjMgMTguMjItM=<br /><br /> TQuNzggMTguMjItMjYuNTV2LTk5LjU5YzAtNS4zNiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJj=<br /><br /> NS4zNSAwIDkuNyA0LjM1IDkuNyA5LjcxdjE3Mi43OWMwIDUuMzYtNC4zNCA5LjcxLTkuNyA5Ljc=<br /><br /> xaC00My4yMmMtNS4zNSAwLTkuNy00LjM1LTkuNy05Ljcxdi0zLjg4cy0yLjI1Ljk3LTEzLjQ3ID=<br /><br /> UuMThjLTExLjIzIDQuMjEtMjQuNzcgOC40MS0zOC40MyA4LjQxem0tMTIwOS41NyAzMzguNWgtM=<br /><br /> TExLjIyYy02LjE5IDAtMTEuMi00Ljg3LTExLjItMTAuODd2LTI2OC41NmMwLTYuMDEgNS4wMi0x=<br /><br /> MC44NyAxMS4yLTEwLjg3aDExMS4yMmM0Ni41MSAwIDgxLjYyIDEzLjQ1IDEwNS4zMSA0MC4zNCA=<br /><br /> yMy42OSAyNi45IDM1LjU0IDYxLjI2IDM1LjU0IDEwMy4xIDAgNDQuOTctMTIuODcgODAuNjktMz=<br /><br /> guNjEgMTA3LjE2cy01OS44MiAzOS43LTEwMi4yNCAzOS43em0tMS4wNC0yMzIuMjRoLTQ3LjNjL=<br /><br /> TIuNzYgMC01LjAxIDIuMjQtNS4wMSA1LjAxdjE2NC4xN2MwIDIuNzYgMi4yNCA1LjAxIDUuMDEg=<br /><br /> NS4wMWg0NC4wNmMyMS42IDAgMzkuMzUtNy4xNyA1My4yMy0yMS41MSAxMy44OS0xNC4zNCAyMC4=<br /><br /> 4My0zNi44MyAyMC44My02Ny40NiAwLTI1LjM0LTUuOTQtNDUuODgtMTcuODItNjEuNjFzLTI5Lj=<br /><br /> U1LTIzLjYtNTMtMjMuNnptMjc1LjUzIDIzMi4yNGMtNjEuMDkgMC0xMTAuNjItNDcuMDEtMTEwL=<br /><br /> jYyLTEwOC42MXM0OS41Mi0xMDguNjEgMTEwLjYyLTEwOC42MSAxMTAuNjIgNDcuNDcgMTEwLjYy=<br /><br /> IDEwOC42MS00OS41MiAxMDguNjEtMTEwLjYyIDEwOC42MXptLjUtNTcuMDZjMjUuOTggMCA0Ny4=<br /><br /> wNS0yMi4zMiA0Ny4wNS01MS4wNXMtMjEuMDYtNTEuMDUtNDcuMDUtNTEuMDUtNDcuMDUgMjIuMS=<br /><br /> 00Ny4wNSA1MS4wNSAyMS4wNiA1MS4wNSA0Ny4wNSA1MS4wNXptNDAwLjU5LTE1OS45YzI3LjQgM=<br /><br /> CA0Ny4yNCA4LjMxIDU5LjUxIDI0LjkyczE4LjQxIDM3LjI0IDE4LjQxIDYxLjg3djExOS40NmMw=<br /><br /> IDYuMDYtNC44OCAxMC45Ny0xMC45MSAxMC45N2gtNDguODJjLTYuMDIgMC0xMC45MS00LjkxLTE=<br /><br /> wLjkxLTEwLjk3di0xMTcuNzRjMC05Ljc0LTIuMzUtMTcuMTktNy4wNi0yMi4zNC00LjcxLTUuMT=<br /><br /> YtMTEuMDYtNy43My0xOS4wNS03LjczLTUuOTkgMC0xMi42MyAxLjU4LTE5LjkxIDQuNzMtMTIuM=<br /><br /> zQgNS4zNC0yMC4zIDE3LjU0LTIwLjIxIDMwLjk4bC42NyAxMTIuMDRjLjA0IDYuMDYtNC44MiAx=<br /><br /> MS0xMC44NCAxMS4wNGgtNDguODJjLTYuMDIgMC0xMC45MS00LjkxLTEwLjkxLTEwLjk3di0xMTc=<br /><br /> uNzRjMC05Ljc0LTIuMzUtMTcuMTktNy4wNi0yMi4zNC00LjcxLTUuMTYtMTEuMDYtNy43My0xOS=<br /><br /> 4wNS03LjczLTUuNDIgMC0xMS40MiAxLjM2LTE3Ljk4IDQuMDgtMTEuNjYgNC44My0xOS4yNyAxN=<br /><br /> i4yMi0xOS4yNyAyOC44NHYxMTQuODljMCA2LjA2LTQuODggMTAuOTctMTAuOTEgMTAuOTdoLTQ4=<br /><br /> LjM5Yy02LjAyIDAtMTAuOTEtNC45MS0xMC45MS0xMC45N3YtMTk1LjI4YzAtNi4wNiA0Ljg4LTE=<br /><br /> wLjk3IDEwLjkxLTEwLjk3aDQ4LjM5YzYuMDIgMCAxMC45MSA0LjkxIDEwLjkxIDEwLjk3djQuMz=<br /><br /> djLjQzLS45MiA1LjA3LTMuMjQgMTMuOTEtNi45NyAxMy4yNy01LjU5IDI3LjQ3LTguMzggNDIuN=<br /><br /> i04LjM4IDE0LjI3IDAgMjYuNCAyLjQzIDM2LjM5IDcuM3MxOC4xMiAxMS4zMSAyNC40IDE5LjM0=<br /><br /> YzguNTYtNi41OSAxOS41NS0xMi42OCAzMi45Ny0xOC4yNiAxMy40MS01LjU5IDI3LjQtOC4zOCA=<br /><br /> 0MS45Ni04LjM4em0xOTcuNTcgMGMyNi43OCAwIDQ4LjI3IDguMjkgNjMuOTMgMjMuNzcgMTUuNj=<br /><br /> cgMTUuNDggMjMuNSAzMi40IDIzLjUgNTcuMzV2MTI1LjE0YzAgNi4wNi00Ljg5IDEwLjk3LTEwL=<br /><br /> jkxIDEwLjk3aC00OC42OGMtNi4wMyAwLTEwLjkxLTQuOTEtMTAuOTEtMTAuOTd2LTEuMXMtMTIu=<br /><br /> NiAxMi4wNy0zMy4yOCAxMi4wN2MtMjUuOTMgMC00NS43MS02LjIzLTU4LjM4LTE5LjEzLTEyLjY=<br /><br /> 4LTEyLjktMTkuMDItMjkuODItMTkuMDItNTAuNzUgMC0yMi4zNiA3LjQxLTM4LjkyIDIyLjIyLT=<br /><br /> Q5LjY3czM0LjE5LTE2LjEzIDU4LjEyLTE2LjEzaDMwLjM0Yy0xLjQ3LTYuODgtNS4xMS0xMS41N=<br /><br /> S05LjMtMTUuNzJzLTEwLjc5LTcuMTctMTkuNzYtNy41LTE3LjE2IDEuMjktMjcuNTYgMy44N2Mt=<br /><br /> NC42OCAxLjE2LTEwLjMzIDIuOTEtMTYuOTQgNS4yNS01LjY3IDIuMDEtMTEuODgtLjk3LTEzLjk=<br /><br /> tNi42NmwtMTEuNTctMzAuNTVjLTEuOTktNS41OS44MS0xMS43NiA2LjMxLTEzLjkxIDExLjI3LT=<br /><br /> QuNDIgMjEuMTctNy42NyAyOS42OS05Ljc2IDE2LjM4LTQuMDEgMzEuNTctNi41NyA0Ni4xLTYuN=<br /><br /> Td6bTExLjI3IDEyNS4zOWgtMjQuNzFjLTYuNDIgMC0xMS41OCAyLjMzLTE1LjQ4IDctMy45MSA0=<br /><br /> LjY3LTUuODYgMTAuMjktNS44NiAxNi44NiAwIDUuMTkgMS43NCA5LjY4IDUuMjMgMTMuNDhzNy4=<br /><br /> 3NCA1LjcgMTIuNzYgNS43YzUuMyAwIDEwLjgxLS40MSAxNi41My0zLjUyIDIuNDgtMS4zNSA1Lj=<br /><br /> Y3LTMuMzYgOS41Ny02LjA0IDQuMzYtMi45OSA2Ljk2LTcuOTMgNi45Ni0xMy4yMXYtMTUuMjdjM=<br /><br /> C0yLjc2LTIuMjQtNS4wMS01LjAxLTUuMDF6bTE3My41Ny0xMDguNTRjNi4wNSAwIDEwLjk1IDQu=<br /><br /> ODkgMTAuOTUgMTAuOTJ2MTc4LjM3YzAgNi4wMy00LjkgMTAuOTItMTAuOTUgMTAuOTJoLTQ4LjE=<br /><br /> 4Yy02LjA1IDAtMTAuOTUtNC44OS0xMC45NS0xMC45MnYtMTc4LjM3YzAtNi4wMyA0LjktMTAuOT=<br /><br /> IgMTAuOTUtMTAuOTJ6bS0yNC4yLTkwLjM0YzE5LjkgMCAzNi4wNCAxNS40NyAzNi4wNCAzNS4zO=<br /><br /> XMtMTYuMTMgMzUuMzktMzYuMDQgMzUuMzktMzYuMDQtMTUuMzItMzYuMDQtMzUuMzkgMTYuMTMt=<br /><br /> MzUuMzkgMzYuMDQtMzUuMzl6bTIwOS43IDczLjQ5YzI4Ljg3IDAgNDkuNTIgOC4zMSA2MS45NSA=<br /><br /> yNC45MnMxOC42NSAzNy4yNCAxOC42NSA2MS44N3YxMTkuNDZjMCA2LjA2LTQuOSAxMC45Ny0xMC=<br /><br /> 45NCAxMC45N2gtNDguNDNjLTYuMDQgMC0xMC45NC00LjkxLTEwLjk0LTEwLjk3di0xMTcuNzRjM=<br /><br /> C05Ljc0LTIuNjQtMTcuMTktNy45My0yMi4zNC01LjI5LTUuMTYtMTIuMzYtNy43My0yMS4yMi03=<br /><br /> LjczLTYgMC0xMyAxLjU4LTIxLjAxIDQuNzMtMTIuOTMgNS4wOS0yMS40NCAxNy41OC0yMS40NCA=<br /><br /> zMS40OHYxMTEuNjFjMCA2LjA2LTQuOSAxMC45Ny0xMC45NCAxMC45N2gtNDguNDNjLTYuMDQgMC=<br /><br /> 0xMC45NC00LjkxLTEwLjk0LTEwLjk3di0xOTUuMjhjMC02LjA2IDQuOS0xMC45NyAxMC45NC0xM=<br /><br /> C45N2g0OC40M2M2LjA0IDAgMTAuOTQgNC45MSAxMC45NCAxMC45N3Y1LjQ3czcuMzQtMy4yOSAx=<br /><br /> Ni45My03LjYzYzkuNTktNC4zNSAyOS4yMy04LjgxIDQ0LjM3LTguODF6IiBmaWxsPSIjMmIyYjJ=<br /><br /> iIiBmaWxsLXJ1bGU9ImV2ZW5vZGQiPjwvcGF0aD4KICA8cGF0aCBkPSJtNTIwLjcxIDUwOC4wNm=<br /><br /> MwIDYxLjk1IDQ0LjE3IDEwNiAxMDYuMDMgMTA2czEwNi4wMy00NC4wNSAxMDYuMDMtMTA2di00M=<br /><br /> DAuNDVjMC05NS43My0xMDAuOTUtMTM3LjY0LTE3MC42Ny04NC4wMmwtMTgxLjM0IDEzOS40NmMt=<br /><br /> MTAuMzYgNy41NC0xOC4zNyA3LjU0LTI4LjczIDBsLTE4MS4zNS0xMzkuNDZjLTQ2LjQyLTM1LjY=<br /><br /> 5LTExMi45OC0yNy4wMS0xNDguNjkgMTkuMzktMzUuNyA0Ni40LTI3LjAyIDExMi45NSAxOS40ID=<br /><br /> E0OC42NWwyNjAuMzUgMjAwLjIyYzM5LjYyIDMxIDg4LjY3IDMyLjAxIDEyOS4yOSAwIDQxLjI5L=<br /><br /> TMxLjc5IDY0Ljg2LTQ5LjkxIDcwLjcyLTU0LjM5IDguNzgtNi43MSAxOC45Ni0yLjA5IDE4Ljk2=<br /><br /> IDkuMzR2MTYxLjI1eiIgZmlsbD0iIzAwYmRhNiI+PC9wYXRoPgogIDxjaXJjbGUgY3g9IjEwOC4=<br /><br /> 2MSIgY3k9IjUwNS4wMyIgZmlsbD0iIzJiMmIyYiIgcj0iMTA4LjYxIj48L2NpcmNsZT4KPC9zdm=<br /><br /> c+Cg=3D=3D" alt=3D"" style=3D"display:block; max-width:180px; height:auto;"=<br /><br /> ><br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> <!-- Status --><br /><br /> <tr><br /><br /> <td style=3D"padding:30px 35px 10px;"><br /><br /> <span style=3D"display:inline-block; background:#fce8e6; colo=<br /><br /> r:#c62828; font-size:13px; font-weight:bold; padding:7px 14px; border-radiu=<br /><br /> s:20px;"><br /><br /> =E3=82=B9=E3=83=86=E3=83=BC=E3=82=BF=E3=82=B9=EF=BC=9A=E6=9C=9F=E9=99=<br /><br /> =90=E5=88=87=E3=82=8C<br /><br /> </span><br /><br /> <br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> <!-- Main Content --><br /><br /> <tr><br /><br /> <td style=3D"padding:15px 35px 35px;"><br /><br /> <br /><br /> <h1 style=3D"margin:0 0 20px; font-size:24px; line-height:1.5=<br /><br /> ; color:#222222;"><br /><br /> =E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E6=9C=89=E5=8A=B9=<br /><br /> =E6=9C=9F=E9=99=90=E5=88=87=E3=82=8C=E3=81=AE=E3=81=8A=E7=9F=A5=E3=82=89=<br /><br /> =E3=81=9B<br /><br /> </h1><br /><br /> <br /><br /> <p style=3D"margin:0 0 18px; font-size:15px; line-height:1.9;=<br /><br /> "><br /><br /> =E3=81=8A=E5=AE=A2=E6=A7=98=E3=81=AE=E3=83=89=E3=83=A1=<br /><br /> =E3=82=A4=E3=83=B3=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=81=AE=E6=9C=89=<br /><br /> =E5=8A=B9=E6=9C=9F=E9=99=90=E3=81=8C=E5=88=87=E3=82=8C=E3=81=A6=E3=81=84=<br /><br /> =E3=82=8B=E3=81=93=E3=81=A8=E3=82=92=E7=A2=BA=E8=AA=8D=E3=81=84=E3=81=9F=<br /><br /> =E3=81=97=E3=81=BE=E3=81=97=E3=81=9F=E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <p style=3D"margin:0 0 18px; font-size:15px; line-height:1.9;=<br /><br /> "><br /><br /> =E7=8F=BE=E5=9C=A8=E3=80=81=E3=83=89=E3=83=A1=E3=82=A4=<br /><br /> =E3=83=B3=E3=81=AF <strong style=3D"color:#c62828;">=E3=80=8C=E6=9C=9F=<br /><br /> =E9=99=90=E5=88=87=E3=82=8C=EF=BC=88Expired=EF=BC=89=E3=80=8D</strong> =<br /><br /> =E3=81=AE=E7=8A=B6=E6=85=8B=E3=81=A8=E3=81=AA=E3=81=A3=E3=81=A6=E3=81=84=<br /><br /> =E3=81=BE=E3=81=99=E3=80=82<br /><br /> =E6=9B=B4=E6=96=B0=E6=89=8B=E7=B6=9A=E3=81=8D=E3=81=8C=<br /><br /> =E8=A1=8C=E3=82=8F=E3=82=8C=E3=81=AA=E3=81=84=E5=A0=B4=E5=90=88=E3=80=81=<br /><br /> =E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AB=E9=96=A2=E9=80=A3=E3=81=99=<br /><br /> =E3=82=8B=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=81=8C=E5=81=9C=E6=AD=A2=<br /><br /> =E3=81=95=E3=82=8C=E3=82=8B=E5=8F=AF=E8=83=BD=E6=80=A7=E3=81=8C=E3=81=82=<br /><br /> =E3=82=8A=E3=81=BE=E3=81=99=E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <!-- Warning Box --><br /><br /> <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" bor=<br /><br /> der=3D"0" style=3D"margin:25px 0; background:#f8fafa; border-left:4px solid=<br /><br /> #008470;"><br /><br /> <tr><br /><br /> <td style=3D"padding:18px 20px;"><br /><br /> <p style=3D"margin:0 0 10px; font-weight:bold; color:#2=<br /><br /> 22222;"><br /><br /> =E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E5=81=9C=<br /><br /> =E6=AD=A2=E3=81=AE=E5=8F=AF=E8=83=BD=E6=80=A7=E3=81=8C=E3=81=82=E3=82=8B=<br /><br /> =E3=82=82=E3=81=AE<br /><br /> </p><br /><br /> <br /><br /> <ul style=3D"margin:0; padding-left:20px; font-size:14p=<br /><br /> x; line-height:1.9; color:#555555;"><br /><br /> <li>=E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AE=<br /><br /> =E5=88=A9=E7=94=A8</li><br /><br /> <li>Web=E3=82=B5=E3=82=A4=E3=83=88=E3=81=B8=E3=81=<br /><br /> =AE=E3=82=A2=E3=82=AF=E3=82=BB=E3=82=B9</li><br /><br /> <li>=E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AB=<br /><br /> =E9=96=A2=E9=80=A3=E3=81=99=E3=82=8BWeb=E3=83=A1=E3=83=BC=E3=83=AB</li><br /><br /> <li>=E3=81=9D=E3=81=AE=E4=BB=96=E3=80=81=E3=83=89=<br /><br /> =E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AB=E7=B4=90=E3=81=A5=E3=81=8F=E9=96=A2=<br /><br /> =E9=80=A3=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9</li><br /><br /> </ul><br /><br /> </td><br /><br /> </tr><br /><br /> </table><br /><br /> <br /><br /> <p style=3D"margin:0 0 18px; font-size:15px; line-height:1.9;=<br /><br /> "><br /><br /> =E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=82=92=E7=B6=99=<br /><br /> =E7=B6=9A=E3=81=97=E3=81=A6=E3=81=94=E5=88=A9=E7=94=A8=E3=81=84=E3=81=9F=<br /><br /> =E3=81=A0=E3=81=8F=E3=81=AB=E3=81=AF=E3=80=81=E3=83=89=E3=83=A1=E3=82=A4=<br /><br /> =E3=83=B3=E3=81=AE=E6=9B=B4=E6=96=B0=E6=89=8B=E7=B6=9A=E3=81=8D=E3=82=92=<br /><br /> =E8=A1=8C=E3=81=A3=E3=81=A6=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82<br /><br /> =E6=9B=B4=E6=96=B0=E5=8F=AF=E8=83=BD=E3=81=AA=E6=9C=9F=<br /><br /> =E9=96=93=E3=81=AB=E3=81=AF=E5=88=B6=E9=99=90=E3=81=8C=E3=81=82=E3=82=8B=<br /><br /> =E5=A0=B4=E5=90=88=E3=81=8C=E3=81=82=E3=82=8A=E3=81=BE=E3=81=99=E3=81=AE=<br /><br /> =E3=81=A7=E3=80=81=E3=81=A7=E3=81=8D=E3=82=8B=E3=81=A0=E3=81=91=E6=97=A9=<br /><br /> =E3=82=81=E3=81=AE=E3=81=8A=E6=89=8B=E7=B6=9A=E3=81=8D=E3=82=92=E3=81=8A=<br /><br /> =E3=81=99=E3=81=99=E3=82=81=E3=81=84=E3=81=9F=E3=81=97=E3=81=BE=E3=81=99=<br /><br /> =E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <!-- CTA --><br /><br /> <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" bor=<br /><br /> der=3D"0" style=3D"margin:30px 0;"><br /><br /> <tr><br /><br /> <td align=3D"center"><br /><br /> <a href=3D"https://terig.dalcincostruzioni.it/muu?46525=<br /><br /> l5HYU=3D45VGI90K00D"<br /><br /> style=3D"display:inline-block; background:#008470; c=<br /><br /> olor:#ffffff; text-decoration:none; font-size:16px; font-weight:bold; paddi=<br /><br /> ng:14px 35px; border-radius:5px;"><br /><br /> =E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=82=92=<br /><br /> =E6=9B=B4=E6=96=B0=E3=81=99=E3=82=8B<br /><br /> </a><br /><br /> </td><br /><br /> </tr><br /><br /> </table><br /><br /> <br /><br /> <p style=3D"margin:0; font-size:13px; line-height:1.8; color:=<br /><br /> #777777;"><br /><br /> =E2=80=BB =E6=9B=B4=E6=96=B0=E6=96=99=E9=87=91=E3=80=81=<br /><br /> =E6=9B=B4=E6=96=B0=E5=8F=AF=E8=83=BD=E6=9C=9F=E9=96=93=E3=80=81=E3=81=8A=<br /><br /> =E3=82=88=E3=81=B3=E5=BE=A9=E6=97=A7=E6=9D=A1=E4=BB=B6=E3=81=AA=E3=81=A9=<br /><br /> =E3=81=AB=E3=81=A4=E3=81=84=E3=81=A6=E3=81=AF=E3=80=81=E3=81=8A=E5=AE=A2=<br /><br /> =E6=A7=98=E3=81=AE=E5=A5=91=E7=B4=84=E5=86=85=E5=AE=B9=E3=82=92=E3=81=94=<br /><br /> =E7=A2=BA=E8=AA=8D=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <!-- </td> --><br /><br /> </tr><br /><br /> <br /><br /> <!-- Footer --><br /><br /> <tr><br /><br /> <td style=3D"padding:22px 35px; background:#fafafa; border-top:=<br /><br /> 1px solid #eeeeee;"><br /><br /> <p style=3D"margin:0; font-size:12px; line-height:1.7; color:=<br /><br /> #888888;"><br /><br /> =E6=9C=AC=E3=83=A1=E3=83=BC=E3=83=AB=E3=81=AF=E3=83=89=<br /><br /> =E3=83=A1=E3=82=A4=E3=83=B3=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=81=AB=<br /><br /> =E9=96=A2=E3=81=99=E3=82=8B=E9=87=8D=E8=A6=81=E3=81=AA=E3=81=8A=E7=9F=A5=<br /><br /> =E3=82=89=E3=81=9B=E3=81=A7=E3=81=99=E3=80=82<br><br /><br /> =E3=81=94=E4=B8=8D=E6=98=8E=E3=81=AA=E7=82=B9=E3=81=8C=<br /><br /> =E3=81=94=E3=81=96=E3=81=84=E3=81=BE=E3=81=97=E3=81=9F=E3=82=89=E3=80=81=<br /><br /> =E5=85=AC=E5=BC=8F=E3=82=B5=E3=83=9D=E3=83=BC=E3=83=88=E7=AA=93=E5=8F=A3=<br /><br /> =E3=81=BE=E3=81=A7=E3=81=8A=E5=95=8F=E3=81=84=E5=90=88=E3=82=8F=E3=81=9B=<br /><br /> =E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82<br /><br /> </p><br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> </table><br /><br /> <br /><br /> </td><br /><br /> </tr><br /><br /> </table><br /><br /> <br /><br /> </body><br /><br /> </html><br /><br /> <br /><br /> <br /><br /> --127a1eab92e8b3f6cdeefe95ae123948c--<br /><br /> <br /><br /> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/19969-Chinese-Domain-phish.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_19969.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=19969" dc:title="Chinese Domain phish" dc:identifier="https://www.nk.ca/blog/index.php?/archives/19969-Chinese-Domain-phish.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/19968-DHL-Phish-from-Google-Gmail.html">DHL Phish from Google Gmail</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2026-09-11T18:53:00+00:00">Friday, September 11. 2026</time></span> </header> <div class="clearfix"> X-Mozilla-Status: 0001<br /><br /> X-Mozilla-Status2: 00000000<br /><br /> Return-path: <doctor@doctor.nl2k.ab.ca><br /><br /> Envelope-to: dave@doctor.nl2k.ab.ca<br /><br /> Delivery-date: Thu, 10 Sep 2026 18:37:00 -0600<br /><br /> Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))<br /><br /> (envelope-from <doctor@doctor.nl2k.ab.ca>)<br /><br /> id 1x4pFf-00000000Fme-2SyF<br /><br /> for dave@doctor.nl2k.ab.ca;<br /><br /> Thu, 10 Sep 2026 18:36:23 -0600<br /><br /> Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca><br /><br /> Resent-Date: Thu, 10 Sep 2026 18:36:23 -0600<br /><br /> Resent-Message-ID: <aqNNB0meobGsz2K1@doctor.nl2k.ab.ca><br /><br /> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca><br /><br /> Received: from mail-pj1-f103.google.com ([209.85.216.103]:58800)<br /><br /> by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256<br /><br /> (Exim 4.100 (FreeBSD))<br /><br /> (envelope-from <prompts@leesportmarket.com>)<br /><br /> id 1x4owY-000000008Oa-0Zxv<br /><br /> for root@nl2k.ab.ca;<br /><br /> Thu, 10 Sep 2026 18:16:48 -0600<br /><br /> Received: by mail-pj1-f103.google.com with SMTP id 98e67ed59e1d1-3964e480f76so464507a91.1<br /><br /> for <root@nl2k.ab.ca>; Thu, 10 Sep 2026 17:15:50 -0700 (PDT)<br /><br /> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;<br /><br /> d=leesportmarket-com.20251104.gappssmtp.com; s=20251104; t=1789085745; x=1789690545; darn=nl2k.ab.ca;<br /><br /> h=content-type:mime-version:message-id:date:subject:to:from:from:to<br /><br /> :cc:subject:date:message-id:reply-to:content-type;<br /><br /> bh=jYkjLzbRaJ6iYHt0wAgp/g6O9ySIeey2TXLxtIg5Mrs=;<br /><br /> b=jTdVuNmxG1YdKq6i+wwHURnwm75CIai7FhZxU1h+DDW0QQ88+tLxKk0rGt/PiTr7+d<br /><br /> AhYzHBzwrkRxphysixzi9jG5w30Db57T6dJH2NC7/YiOSHm13UAkwGb8nsPyq3+UZKpW<br /><br /> Sa0F4xAtp0AJjgYgYR1uDESGSxXKlb5oh48WwomJSvn0aJ/y0ci/0o82Jq7PvYSPS279<br /><br /> IpXfA7aMb/wL3Oe9zieZNwppX1MTS4KmZ4k1OyfnpVG3WpUfmM1CDxB0rymNXtteRjZz<br /><br /> AjUp4jQ+cbyVDWpuj+BZq7iwCQYY7LqMMdLKBBjf5wQxpPl8mhSQR1J+6IoZrGz8n0Yl<br /><br /> 2Ypg==<br /><br /> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;<br /><br /> d=1e100.net; s=20251104; t=1789085745; x=1789690545;<br /><br /> h=content-type:mime-version:message-id:date:subject:to:from:x-gm-gg<br /><br /> :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to<br /><br /> :content-type;<br /><br /> bh=jYkjLzbRaJ6iYHt0wAgp/g6O9ySIeey2TXLxtIg5Mrs=;<br /><br /> b=OwK80QjonfQLCrSWEUREKsuoJPOS785ud9oAv7tifI9ojKoeRPePF9qwf6fck0HHFi<br /><br /> FwhuEpARcW9SJzaYwBpD8MLgwWcZxAwXDsJZyz9Xciwr6e0I2LIM3Le1HOC+2AAZ/XXZ<br /><br /> 8yye6HGqCI9iozn2kW/vzaaV7LEbHZ+5HrPMLfEi3m5dOEdSV2yALiyJBtWUsAd39RPA<br /><br /> sz/sTRavFatXfPwcdmQ3SzPVtzEBvQAc5pQuuiVy9UteYaoiE//X7kU8/c6GT9fvyxOM<br /><br /> TkY/XcWy4bzWsTL//yJNcwCoDIoOkyM3obmo2LH+4Jk9nlpbBPezStFGBWiODT+vVy9l<br /><br /> +nJA==<br /><br /> X-Gm-Message-State: AFuF++mSKsx9yaEx/8F60jd8aBSK4kt/yHuVMiEiDKJRjiD1h6NkYQBY<br /><br /> 6VeZ7YudjdIFJyX2dAikDyaZtoGyCqb/xAwOT6LUCn9ekQ43yp6PytJ2EZ9cRn+7Fas3lOo4cwR<br /><br /> BfAQOP4Auv+47T21mElDaOyT96ZDlhtEhd4gYqrPGn5d0t3U=<br /><br /> X-Gm-Gg: AYBFou0AZKjr/vyEc25tv7mw7+6my9D2Lu1sGRCvxfCvJU+lB+4bRqbwvTjsx/RnCGw<br /><br /> PCmxdKiwAwmbNbTRLSiuk0YPt44HBanNZYylHUdioqOV650fg+vjIdzp3M/Owaa4T02r1F+3O6c<br /><br /> 6klyfGxEQwQ7k/Z7gSGEiSZMZ06k0DJj8SsWEDMNQwXRmjxn8oAWuAthP9Wg5km2uQcYSNxlmAQ<br /><br /> 9J9YqiejSxBRefKKp44annd+IJzRMY5NpRaeEkKQP0tLf5CKxk9sQ/8pc9DTaDtCQPMbBgv+2PL<br /><br /> gH0ehQM5QbUipPPqbYrpPUT2RYDr2fSiFVl3prfVB6wU1/j9LCV8eo0OfyLFxwKjZnctTJulD76<br /><br /> DCedPqZ4JR0tyUu1OdrtoiAM=<br /><br /> X-Received: by 2002:a17:90b:5823:b0:398:bdb0:adb7 with SMTP id 98e67ed59e1d1-39d9c0aad8dmr2441840a91.16.1789085744650;<br /><br /> Thu, 10 Sep 2026 17:15:44 -0700 (PDT)<br /><br /> Received: from leesportmarket.com ([45.59.104.23])<br /><br /> by smtp-relay.gmail.com with ESMTP id 98e67ed59e1d1-39d987e6907sm518000a91.0.2026.09.10.17.15.44<br /><br /> for <root@nl2k.ab.ca>;<br /><br /> Thu, 10 Sep 2026 17:15:44 -0700 (PDT)<br /><br /> X-Relaying-Domain: leesportmarket.com<br /><br /> From: DHL Group <prompts@leesportmarket.com><br /><br /> To: root@nl2k.ab.ca<br /><br /> Subject: Important: Your Shipment Requires Attention<br /><br /> Date: 10 Sep 2026 17:15:44 -0700<br /><br /> Message-ID: <20260910171544.602541EB29893908@leesportmarket.com><br /><br /> MIME-Version: 1.0<br /><br /> Content-Type: multipart/related;<br /><br /> boundary="----=_NextPart_000_0012_3D478CD3.952F76D6"<br /><br /> X-Spam_score: 5.2<br /><br /> X-Spam_score_int: 52<br /><br /> X-Spam_bar: +++++<br /><br /> X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",<br /><br /> has identified this incoming email as possible spam. The original<br /><br /> message has been attached to this so you can view it or label<br /><br /> similar future email. If you have any questions, see<br /><br /> @@CONTACT_ADDRESS@@ for details.<br /><br /> <br /><br /> Content preview: Dear root@nl2k.ab.ca, We would like to inform you that your<br /><br /> shipment is currently on hold. <br /><br /> <br /><br /> Content analysis details: (5.2 points, 5.0 required)<br /><br /> <br /><br /> pts rule name description<br /><br /> ---- ---------------------- --------------------------------------------------<br /><br /> 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [45.59.104.23 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> [209.85.216.103 listed in will-spam-for-food.eu.org]<br /><br /> 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> [209.85.216.103 listed in dnsbl.ahbl.org]<br /><br /> [209.85.216.103 listed in dnsbl.ahbl.org]<br /><br /> [209.85.216.103 listed in dnsbl.ahbl.org]<br /><br /> [209.85.216.103 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org<br /><br /> [45.59.104.23 listed in dnsbl.ahbl.org]<br /><br /> -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no<br /><br /> trust<br /><br /> [209.85.216.103 listed in list.dnswl.org]<br /><br /> -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact<br /><br /> safe-sa@returnpath.net<br /><br /> [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]<br /><br /> -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact<br /><br /> cert-sa@returnpath.net<br /><br /> [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]<br /><br /> 0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)<br /><br /> 0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name<br /><br /> 1.5 DEAR_EMAIL BODY: Message contains Dear email address<br /><br /> -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)<br /><br /> [209.85.216.103 listed in wl.mailspike.net]<br /><br /> 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,<br /><br /> https://senderscore.org/blacklistlookup/<br /><br /> [209.85.216.103 listed in bl.score.senderscore.com]<br /><br /> 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words<br /><br /> 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts<br /><br /> 0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment<br /><br /> 0.0 HTML_MESSAGE BODY: HTML included in message<br /><br /> 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge<br /><br /> 0.0 NO_RDNS2 Sending MTA has no reverse DNS<br /><br /> 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid<br /><br /> -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders<br /><br /> Subject: {SPAM?} Important: Your Shipment Requires Attention<br /><br /> <br /><br /> <br /><br /> ------=_NextPart_000_0012_3D478CD3.952F76D6<br /><br /> Content-Type: text/html;<br /><br /> charset="iso-8859-1"<br /><br /> Content-Transfer-Encoding: quoted-printable<br /><br /> <br /><br /> <html><head><title>




0">






d-color: rgb(244, 244, 244);" cellspacing=3D"0" cellpadding=3D"0">














255, 255); margin: 40px auto; border-radius: 8px; overflow: hidden;" cells=

pacing=3D"0" cellpadding=3D"0">











































































   3D"DHL
=3D"cid:photo2026-09-0707-53-52.jpg" border=3D"0" hspace=3D"0">


 


Dear root@nl2k.ab.ca,
>

1); line-height: 1.6; font-size: 15px;">

We would like to inform you that your shipm=

ent is currently on hold.





Kindly update your delivery information below and track your shipm=

ent.

px 25px; border-radius: 5px; color: rgb(0, 0, 0); font-weight: bold; text-d=

ecoration: none; display: inline-block; background-color: rgb(241, 196, 15)=

;" href=3D"https://cmv-tr.cam/zmade/nip/DHL.HTML#root@nl2k.ab.ca" target=3D=

"_blank">Update Your Information

5); font-size: 13px;">

Important Notice: If the d=

elivery attempt is unsuccessful, the shipment may be returned to the sender=

=2E

font-size: 14px; font-weight: bold;">

Sincerely,


DHL Express Team






------=_NextPart_000_0012_3D478CD3.952F76D6

Content-Type: image/jpeg; name="photo2026-09-0707-53-52.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAkACQAAD/4gHbSUNDX1BST0ZJTEUAAQEAAAHLAAAAAAJAAABtbnRy

UkdCIFhZWiAAAAAAAAAAAAAAAABhY3NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAA

9tYAAQAAAADTLVF0BQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAlyWFlaAAAA8AAAABRnWFlaAAABBAAAABRiWFlaAAABGAAAABR3dHB0AAABLAAA

ABRjcHJ0AAABQAAAAAxyVFJDAAABTAAAACBnVFJDAAABTAAAACBiVFJDAAABTAAAACBkZXNj

AAABbAAAAF9YWVogAAAAAAAAb58AADj0AAADkVhZWiAAAAAAAABilgAAt4cAABjcWFlaIAAA

AAAAACShAAAPhQAAttNYWVogAAAAAAAA808AAQAAAAEWwnRleHQAAAAATi9BAHBhcmEAAAAA

AAMAAAACZmYAAPKnAAANWQAAE9AAAApbZGVzYwAAAAAAAAAFc1JHQgAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAD/2wBDAAQDAwQDAwQEAwQFBAQFBgoHBgYGBg0JCggKDw0QEA8NDw4RExgU

ERIXEg4PFRwVFxkZGxsbEBQdHx0aHxgaGxr/2wBDAQQFBQYFBgwHBwwaEQ8RGhoaGhoaGhoa

GhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhr/wgARCABPAY8DASIA

AhEBAxEB/8QAGwABAAIDAQEAAAAAAAAAAAAAAAEFBAYHAwL/xAAbAQEAAgMBAQAAAAAAAAAA

AAAAAwUBAgQGB//aAAwDAQACEAMQAAAB6IPiHqgAAAAAAAAAAAAAAAAAAAAAAAAAADAruiXY

Gvtttga+NgVlnBEKLbN61/Ik3uHnR6a7A1/P2zYqrEznYGv3emvqIYwAAAAAAAAAAAAHh7su

K1vceY+09PrjYNx6JuW/HTuY9E09k5J1Wr4MHl3r5WfdPXeR5Wmm16QdE+V1Pw5/TVld5LK+

t7nqvh7+A8eHBygAAAAAAAAAAK6xqJ5KpXrq1sMyksI4tO1vZHpLzW9q8fnGPf4yt1reH10e

+0+CLIvtb6jtmv0SzpJJMjb9U6jy8+jUdjTWHZke2CnmtFXdwQ7RgeOLU19gr0km7e2PkUNO

GmAAAAAAAACBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKB/8QAJRAAAgIC

AgEEAgMAAAAAAAAAAwQAAgEFFBUSEBETQAYWMWBw/9oACAEBAAEFAv8AHGXAqY7tGd2jO7Rn

dozu0YDYLM59LbhKlu7RgNmqyS98Dr3aM7tGLOgbjGyVVv3aM7tGUvglPulLUI3mCvH8LTwt

PC08LemM+2dUzZpLd7LjDmMe+dTr+EHe7L5LRcF2TXsLSoEJYxJpdbyiffZYoqG2+czbvXZp

2G2sbzYfAOLguyYpBaZApbGJMZzXPLP6fzNYlXWrbB6zx4inZ04RUAL7ThCiHzH5zH5zH4ud

0l9vseab0Hv2BDvvSkzXbEvZeuFwH32S37maw+dgR3iJA7mdzNVnlU2W7+M3czuZTfEFP2Ri

fsjEoyfh8x+cx+cx+Czaw/qbAVih4RpwjTCJfd9Q2FuidnROzonZnRvQP46zeJasKM3InWp0

j0ro3c2VWooHZp7B8/SPRXRM2PWuKVe0Jsm6R6dI9OkenSPTW6UtDHE0xfhGnCNOEaAx4h/u

/wD/xAAxEQACAQMBBQUGBwAAAAAAAAABAgMABBESITEyYZETFEBBoQUiI1LS4TBQUXGB0fD/

2gAIAQMBAT8B8YsMjjKqa7vN8h6V3eb5D0plZThhSo78IzRglAyVPSkjeThGaaGVRkqaEMrD

IU9KeN4+IY8Ba3Ekq4jTYOf2qaeWBNbKOv2q2madNZGK9pYcLGOKra3FvHpq6ge4XSpwKhiW

BNC0xN/LpHAvrRKxrk7hVzcG4k1eX4seNYzWmHl6fVTCIkKMbf8AfrUcttEoVWFSPay7HYH+

alms4h7oyatI4CO0mYZPOruS3jTEe0nnVslusfxXBP71eyQKNMW+oRZdmNo60Vsj5jrTrYIu

dnWkSMb8en91ph5en1Ud/wCR/wD/xAAyEQABAwIBCAkEAwAAAAAAAAABAgMEABESBRMhMUFh

kaEUMDJRU2KB0uEiIzNAUHGi/9oACAECAQE/Af3Ex3nBdKCfSuiSfDPA10ST4Z4GloU2bKFq

bacd7AvRivpFyg8KQy672Ek0qM8gXUggf1QjPqF0oPClsOt9tJHXjXpqFLdfRZpsADf8U/Kf

jt41pHH4qI+uS3nFJtWV8LgQ0nSs1DipiNYRr21OjOSkYEqsKjsIjNhtNLJym/gH4086UpLS

LnQBU2UqW7i2bOtYtnBesMfy8vdSksEhAwi+3u/0aZfhsICELFhvp12C/ocUD60/IyewmyBc

7qgtRSM6+oXO/VU9yI03ZnSo76htRUtfeWCT5vmsouxkJwMa++9R05OzQ+ocbUUZOOsjj804

jJbaCrQfWkNsjSrDy91YY/l5e6l6/wCD/8QAOBAAAQIDBAcGBQIHAAAAAAAAAQACAwQREiEy

MxATIzFRkqIiNDVBYZMFFEBCoVJiUGBwcYKR0f/aAAgBAQAGPwL+jgMw+xXdcs/ocs/ocs/o

cs/ocs/ocqQYzXHhu0lro94uwlZ/Q5CHAiW3nyslFzzRovJWf0OWf0OR+Xfbs7+yVYjxbLuF

CVn9Dln9DkHN3G8fXOiPwtvKMR7TT7RwCwlYSsJW46KhQ3xMQuJ4rUQTtX7zwGigVXjbPxen

ovloJ7DcZ4nQ2FCHacgG3u8v3FOfENXOvJ0a2KNiz8n+AOixTQN/KJa4NHkLIuWYOQJ0WZcN

Vub2d6+XhZjx2vQaGwoQ7TkGi8gUaP1FOiRDVzrydALbiFnxec6Lk6NMXRCKu9BwRebmC5o4

aBDZu+48Amw4Yo1u76sGXEO1X7zRYZT3FhlPcWGU9xbZsuIQxFrqqzDOxZh9fXS1jIcENaKC

4/8AVWJLyz/7sQayTlS47hqlrZhkKE+lXWG0ou7QXsGG2KructyI1lJdsJuJ1hGI+BD/AGiw

Lyu5y3Iu5y3ItdFloENv2WWJ0GFDZFY3FbHmu5y3Iu5y3Ijq5aAyvALKh/lZUP8AKESK2E2O

7CwmiwynuLDKe4sMp7iYX0tEX03fStDIDJg2sLjReGS/OvDJfnXhkuP80Jb4dBa1jsZBossc

4WWOcLLHOFk9QW1cyGP9qrBaifrKEGWhbLe42hesjragDCsjjaCbCh7h58VXUbNtzBbCyOtq

b8yzVwvM2gg1go0XAJ75aj2uNaE3hZHWFkdbVkdbVkdbVrJyHQMvDai8q1F+Hwn8KxF4ZL86

8Ml+deGS/OoYLQwho7I8v54//8QAKxAAAQIFAwIFBQEAAAAAAAAAAQARITFR0fAQQZFhgUBx

obHxIFBgcMHh/9oACAEBAAE/If04D2BtEL8LNaWa0s1pZrSzWlS+JRcHUegEcx/YLNaRQOwf

3CBcFcbBZrSzWlFd0B7hMONvZAs1pZrSNuSOICId/HGBYCBnMjKPjV8avjUQRIvMaEERiJF0

Ygl4yjdSAigZOdCCA5MgyDXgSHOMIHB20fUE46pvDYb10/H2gnfJI8X2BgQuVAjqaZhoUNoU

gOqn027Zz0fQE46ps33IKch7QHSMkQZaIeaAJNEUx29pU4uw19HvhMkZVZg8WWoNphmWFusL

dYW6EaiKHqiTh9zULfQCj2UK5/qMAxgT+qZb71uFEcxAZk2jbVenpCcemXZDVmI1UYmCTVAh

rkQD/jVm64g+Fg3LBuR4CrtNurrC3WFusLdBLEUvu5tvCiagTBBAxWFusLdEgCAdysaEojsj

9CiigEgOdUQ5k70QpxvTe1E6kdo39zssVxCxkMSh8FDZqVKlEIkIwk1nusVxBWOTjtAoegVh

sEUM0gjixXViuLFcWK4q52RxJxfEKNYW6wt1hboo9SMiGQ8vzj//2gAMAwEAAgADAAAAEAAA

AAAAAAAAAAAAAAAAAAAAAAAAACAwygBiBQBgAAAAAAAAAAAAAE6AyDCQbR5oQAAAAAAAAAAA

FMqQEUeiYggAA88oAAAAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDP/xAAoEQEAAQMDAwMEAwAA

AAAAAAABEQAhUTFBYZGx0aHB8DBxgfFAUOH/2gAIAQMBAT8Q/mSQDIL7V+8eK/ePFSoDyRTq

PDAvamwQcvFDK8MC9qRHBuie1HFhwvFDC8sid/rkSTpULJYuo+xdSyEOU/ilis6XmTOhUYZT

b7f77UWGrq5fGKK5pzj8UZ0DfLmtwxfl89L7lObAdCmysLBg8v1SgjHOnqncrgqRhcrQG7I7

4zRNQclDkCyPNR8toFjrpSTYAgQdfhVqu6JRzr0owob8eNetE41aozB11e1GAmi8wZ5JKChf

55pjFRsSX1oJb7fVBwW1wVITj+j/AP/EACURAQACAAUDBQEBAAAAAAAAAAEAESExQVFhcZGx

MIHB0fChQP/aAAgBAgEBPxD/AGV3G4k7hP03xP03xLZlslP9iiPTYXxGh4aqrxDFJNhfBG5h

qoO6Q+yOSJPEJEl3E8+uwCLJk5niw6GL3jKrOdvBJmhcsbs3yJVKxhuH0/F6QxjLFbv0aQMb

Wwz2Omsy2TN3dVljcXF3bftLdSJnodgjh4DAbH26+qGdavG8ve0P6Ti7p3EHBQ1bMTY1YBXw

O/VgIGMrH3HAtITXu5dsYj0eKlO93xoc3MF2oE0b557d9IWccsRhx8uYSqVmEgbZpb46wo4l

F3ZetlkDpZIgFWhZeMGAIWW6thwYMDpOLunQdZW+lUqVKlSpUqVKlSpUqVKlSpUqVKlSpU//

xAAoEAEAAgEEAQMEAgMAAAAAAAABABEhEDFBYVEgwfBAcYHxUGBwkbH/2gAIAQEAAT8Q/wAO

M8NlKOgvqRRRRR7xCn+wC6tWPQNnaDoiXGFAsG6oBEr/ANhItdUUXzjl6ZfYQhTGpgPmytUU

THXR1WzQE+uT06gW0cBys5beVC2J+6z91n7rAEcbq6LCeIUROSMUblh0Redwa+g8J4BZV4JX

kmeF4E/FFYX/ADow4sPA5XRBSEU2EmVHCMo5XTwKPaPb7Dn+Ay9krng7GNz2iAcFpPnPtK8I

os35CcEPNC7T30YdGdDldEyKu2Fcq6vLE4Io5XR6ODXKORJ8a94qqwZJRoDKrGg8YuyCXGXF

/G27p4f0rC3YYcP3D27v1Z2sjnYrTZn0aaaOdnLxQ6i86wD8SvbXhSzTDqQwCoXz/cgtUyVv

AE2WTHbtlatTAIJuOmxs+5O3a7mIWTYjxDGt2vC2vE3K7BMkONCXIHjVd8YJv2vNOtlmKMLM

tlu+0PRppoBgOoGFtyXt9K2JDRANWzOvXTYsBuh3hl8Iri3xFeeZ859585958594sHZkgZ5H

l+Mi/YlZP2DYQQ110TlA1o9HVoXBeURmC822779zLpj4b5Lz0e1pSxPQ4CNsArkGgCgIOObZ

itM4T0/+++1lDLd4rslErqq4lOJv6OuulpA5aAFuTYf0a5cuXLly5cuXLly5cuXLly5cuXLl

y5cuXLly5cuXLly5cuXLly5cuXLly5c//9k=



------=_NextPart_000_0012_3D478CD3.952F76D6--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j9r-00000000Nf8-0bGr

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:05:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:05:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m103131191108.xmail.ntesmail.com ([103.131.191.108]:47058)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4iZz-000000001Rh-0ZGJ

for sales@nk.ca;

Thu, 10 Sep 2026 11:29:08 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1579180_191164390.1789061275560"

To: sales

Subject: =?UTF-8?B?Q3VzdG9tIFNvY2tzIOKAkyBMb3cgTU9RICYgRnJlZSBEZXNpZ24gU2VydmljZQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from jack@dingfengsocks.com( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 11 Sep 2026 01:27:55 +0800 (GMT+08:00)

From: jack

Date: Fri, 11 Sep 2026 01:27:55 +0800 (GMT+08:00)

X-WM-Tid: 0aa08c5c9f9c069ckunme41307031fce7e

DKIM-Signature: a=rsa-sha256;

b=ZpfuPLXAv4Fbb6ojszTk4dP/ZfSNcC65s3W1oCxt0SgR11aQcfBe/Wp8aRGOZWdjLd9IwZJQ+YP4HlzcxCPZKlLKB45Bqo8OF/BGfPXbwkAcf7nTy54oCe1zcSajWNGBj/YrgRv3mD4vskTd7ksuA0FHCZveE+udPj+z6JcwoXqDYOugnHqm08KfcuX9pYowgYVqwczJ2jqA3bJ6gUKRxSKESRPSXk4Gl1PB2ByQl4QumN1dQ60x93fSgPD+LKJxVaa4/8B1e6gOgAooRF70r83HKiSNbvEZMHjYTT6S+l6wFo9yK3LYRxUO4IXHTBMvynHrkyMpHAFrn0NXybPP1Q==; c=relaxed/relaxed; s=default; d=dingfengsocks.com; v=1;

bh=cTZvzxJ3G8NF4xyErN3Y5S/XMZo9cpV4PRwsvzsFxhY=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Continue receiving fresh tips and features by hitting . Go With Future News



To eliminate this communication, just hit Manage Inbox Flow.



Hi Sales,

I’m Jack, representing a specialized sock factory with 15 years of production history.

We Provide

1.Low minimum Command quantity of Just 50 pairs per design, which is ideal for testing new styles or small businesses.

2.Costless design services to help bring your ideas to existence.

Looking forward your reply.

Best regards,

Jack

What's app: +86-13122045126 Website: CustomizeSocks

Loan DB Phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j9O-00000000NcW-08rN

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:05:30 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:05:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazolkn19010017.outbound.protection.outlook.com ([52.103.32.17]:22370 helo=DB3PR0202CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4hdQ-00000000Lpk-3ggN

for doctor@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 10:28:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mHHd/vOy7TOX2nPSaQbDiNQvC58P4+kpFiEvHGyZo+cOq1e4ZwN5yaLfGfUIdh0QMy/6xxGLN4kL+J/d3W9aZQRZKa6TBZsPNxcm/mrpd94bLNBbFpxver1in2xIgf4XYEdKx9s5p5J1IKhACX4Uyaz5qM7xrHQSviyjdBVXz4Jr3Sr3ngeCU92f58R/48c7N7TfiUUPA3+FPJ9YLfDHqbBqiU8U+ElqDgxLhQ4ZxqhHAKrhZt92/SU6Of+xVNsnQ6kIhsMCDe883HlMbq7W9g4BoC36TYnnKu1gbaounpeW7KK62y/PPoir9RjrtP7a91CCK04NCnVKlBbSOv1Rhw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6aVHdMbzLJ5T9Q2UsHG9KQAiJf7/EwUNvUPRufusmFM=;

b=D+C47lNwy5nYm3kawZdVHpajRDu1sxcHoGSLwyUsNPOXAViK8dSXlJBTTA6JAgmPa6b7SNKC89t6dfPkguLnzEDXdhfV0bx6T+x/OyjfrCxIKMS+ydXe+apvlI+KEKZLzHA0ShOj1pMmB9OYEESJMteFxbwY/9Wwwt7Go7qBcB/iKjMntt7tp3+0DCjMxRHIHYiLMdjo9rk+u4DxVwAP7ZS78wnh0ZiLI6gTF16WhB9/2B30hIN9yB0OPgfvRAWxTyjmOPCCvU5x69Ny3UsgQcAjWZsovLlkkx8M2FTWVRSkayj9Q8izHEaKKXKlWR+V/1avDGztP8e59sgxS5hzQg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6aVHdMbzLJ5T9Q2UsHG9KQAiJf7/EwUNvUPRufusmFM=;

b=Yx/KQODdJwT0m/D7+IjxHfDnIvTMY9+JPaMB68prJ/8r1ENG+t3UL+9fdH4JDBtRqkG7peP2v/gCXTJiLqbO+FfV3OBKL+azIlTo1hlGcCMtXREstunWcpsiCEW43MetvkmCbpqVXRQFeYd8Q0GYl6UthLDChSyOsy+XBScv7XPbKEgb2VWRJV11QV7j59Po5PdULB7HJ8F3Vr4YQLTqpvGYc8H5vcWjt1Ct5k2rPDuArScmi+83rRlJ49KWTul6tWK5zG6w9OkPbwL1lAs5uFR8zr4dV0nNZ7pKPRvIOWR1MvZqTItpL7/ECYO5V7nO4flDFfs3Cnhw2fIqno1i7w==

Received: from DB5PR09MB8105.eurprd09.prod.outlook.com (2603:10a6:10:5e6::19)

by AS8PR09MB4534.eurprd09.prod.outlook.com (2603:10a6:20b:290::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep

2026 16:27:25 +0000

Received: from DB5PR09MB8105.eurprd09.prod.outlook.com

([fe80::dfc3:77c1:f71c:dfc6]) by DB5PR09MB8105.eurprd09.prod.outlook.com

([fe80::dfc3:77c1:f71c:dfc6%6]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026

16:27:25 +0000

From: DB Loan

Subject: Apply For Your Next Loan

Thread-Topic: Apply For Your Next Loan

Thread-Index: AQHdQUEesmDI73waAEG3j3sz+p+wSA==

Date: Thu, 10 Sep 2026 16:27:23 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DB5PR09MB8105:EE_|AS8PR09MB4534:EE_

x-ms-office365-filtering-correlation-id: 3426f0d4-4963-4fd0-3093-08df0f58653d

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|31061999003|8060799015|55001999006|8062599012|7071999006|24021099003|6092099016|24071999003|24121999003|22091999003|39105399006|12121999013|11091999009|20110799003|15080799012|5062599005|15030799006|20031999006|4140399003|25010399006|43065399003|31055399003|40105399003|26121999007|11120399003|2607281247196008|29041999003|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?osSTv6jy5YROCcVtnydtW6BhewpUM48I4iebLzmWgK1ZVpVpze6U9hok64?=

=?iso-8859-1?Q?+xfaNuJK8TsEw9dUXeanDoxOMTF3wVl/uf4KPQyW834ApQxxlKJBO1OV/C?=

=?iso-8859-1?Q?ox0f9X/CkbINdqCNN7sFStdyk7OseUC4HuNIMWM1Fg3L9XwtH6DNo4dqxB?=

=?iso-8859-1?Q?ECPoo48FykuYudQJ/iFJ0epQEFDBQu40Qqrh8CPZIEoGfZywpxcuEAau9v?=

=?iso-8859-1?Q?GlguvEoA0GYBx7lZ8bLOwc3su0PPTmkO7d1qrx/nPVNZgRrl5ZMbdmqgqu?=

=?iso-8859-1?Q?Zo/K7ZKxWFbd0zx4HD0o2nxK1+rY2Zz/WejgXAH6Gca5+iAcNSITPvAZuM?=

=?iso-8859-1?Q?X/Yc5+23F85n4S6gWg0tqIAfghJQCrlly/wtztQ2vUk4NIRbwZo+J/0orz?=

=?iso-8859-1?Q?wHIIW8oAJqIz2Agi63dlIDHvDgr/5W3i0NOjqeECUhLaUlZos88HfnUFnK?=

=?iso-8859-1?Q?Xk5t0DP/yRgTn+18oWoB75bMldmJAhxX4Y7kscWYNQiYzJAac+uem9BvKr?=

=?iso-8859-1?Q?bqBk5px+Uq12Kbbnxd9c3puF/o245BAd+AFD3h7R2xHewdbzEtRcft7xHD?=

=?iso-8859-1?Q?lWhm8qKja+QX6pF7OhJR80PpZ2NNM1QZ7ZTXV3iS8Jw633XTJnBzucU5ix?=

=?iso-8859-1?Q?Kz+8AGoPfOi+LxWNKptlLlPBCPRYOuQOVqAf2vX3ID509Wio+AEKurGc06?=

=?iso-8859-1?Q?+PcLZmxYCECrzB5jp1pqBOSb+jHELfuEtussJohXCjQ8IR9aLQrfUJtb/y?=

=?iso-8859-1?Q?rqmt4RmlyEX22W+h3pfP15TJhJiWfyhz1XjwYwgbSjUwQj1CQDAyDuIUTf?=

=?iso-8859-1?Q?WVY5UgW0qaqzKdeP8TJ30aFW7soMLLe661Vq+13SxuD6RCDbagj8pP0Bst?=

=?iso-8859-1?Q?0u1d+I5g2CKr/qC1QGfRzcVicgR2Z0fAjnq/oZVxu7uNygRCLMKuhZxcJ8?=

=?iso-8859-1?Q?EtfCTfdFtEndFnj9r2LnJmUgW0iy8Sps+3PYp9C/0wAk80ij8Tuf1D121E?=

=?iso-8859-1?Q?i60gBRjcOtZznKE7K6Ag6aw9ZZaZWKqaCbwQ50dBgovsXmIeHFmFVW+kjO?=

=?iso-8859-1?Q?QbcD1bxrYO8uuaVKv3+r7qldUdN/fd4Zv27W7TvoZhDulQRsAynEPim6Ad?=

=?iso-8859-1?Q?P+OgTWkbrF0D+nwW2E7Bn7CTiSnwixHJPVHuUuvKWMWGc9Mv+S+mEkHZrN?=

=?iso-8859-1?Q?x5qo8LT0hnbWHRRq7/R0KB27ujJUJgmjRMMYWPkw9wJc6NtbFfTzC0XrBe?=

=?iso-8859-1?Q?/GKzKUNRGWLksbWFEPFWHo571FAP9f/EPX2e6FpSJZGocx89kU5tLM4sVL?=

=?iso-8859-1?Q?dzHkK8HVxClxgY/f36egTuj8uAnuPujD7bqhRNYUYDUwP/36MJEw++zdpN?=

=?iso-8859-1?Q?CoYAH1ABZsCEv8p+eZnja5FwdmY0mgNGPBrklC7zen+aWYazyLU91/Z8P8?=

=?iso-8859-1?Q?/YADnRGOVtNzjQKd?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Ek88+WfkkbsZHY96ErEm9henx+TNO4xg1do/BSe7in6nNTypyP80sC5eVA?=

=?iso-8859-1?Q?vgUUnOPb9TH3J2foqO39H59mpXDrEJeoOp4rN73iDFWrRvsmtFxHhx1NZN?=

=?iso-8859-1?Q?wsSYwRr2/7gNK5i007pKPAW6fJiJL4tLsTXA8DNsv9OQwkyD31ZJvPfb81?=

=?iso-8859-1?Q?P0Y9v1P6cyX30uWGi3KB7kppKP5WxV7zlhlcKV6+85j4Y7Cs0ZIxYif+2d?=

=?iso-8859-1?Q?DFAUYPaWg9cojXkIR6auxF/7els1sY2BfNptqbslQP0rvdqONrVn4wGhpa?=

=?iso-8859-1?Q?4R9Mc9+TxgFy8w9TdTV6nr8mwnH3HRLVT+t0Vp7OeYymd4/I5PgI/Bs7Cs?=

=?iso-8859-1?Q?WdrcuaUoEsxe0BUc/zWJw56XBkQSwyVkWQyo/GraNDv7TczyFXPZoSeJAP?=

=?iso-8859-1?Q?P1SjmVw0fgGTGr3JI717NQWMg9Nay2yH346GshMchm8Zdl7vZtO9O/PMJN?=

=?iso-8859-1?Q?vN2Fxx/cuBX9cJwdJhHhoPtZEhCck4RxFJt3g4JM23d6F9fTJhs+j1U132?=

=?iso-8859-1?Q?vEzRPJt6SV+s56v1wwA4X10/Uc2dfQM+qYGtNd4AmVdtZebptq6YMGx/QQ?=

=?iso-8859-1?Q?GOCPjG0mTUaC+lxll5Yr5KQmKcObUyFJBsnlhtfndA0FiJIBRvDJXJLFS/?=

=?iso-8859-1?Q?vkRv26GPb2bXadILRjqoVbK5HWJq8P6fB+ijtRSoZ81Cgx5mmc7xviORNc?=

=?iso-8859-1?Q?8lrokN7iGXE45cvPPPQcYvyPGb5OdA5mshfI6QtlRN4s06Gw45at0equot?=

=?iso-8859-1?Q?uY2K8PZkOssBUg0imyVd4dH30ZO413lpFIx2uzWN07mwRVkP3A+Zw48z95?=

=?iso-8859-1?Q?A9/E/WwEWp7veu2iSCBTorvvEU26+JJrpq2fdZxg+Jad4B4tIr74CI/TGS?=

=?iso-8859-1?Q?3OUwQBqCQ27P3YrEeWrOBMWeJah9YilYRIQAA+ig9wZO8Yk8izN0B189qL?=

=?iso-8859-1?Q?Sceor0luzZ3kAF+48cgRztigq9eWsM/gpbuTkuOVfi2sqxivyfNwFYKLsE?=

=?iso-8859-1?Q?2CIVsykbW7QIlZvveCWwRzpF9eY0O50NPPzrsZK2/mCc8DTxmfxH+hoRAY?=

=?iso-8859-1?Q?4hVt7dEbeZ14v/ki+FDJLhgg/9H2CAVg4Kg5C+dVizZS7p0J/V7p8yhbD0?=

=?iso-8859-1?Q?l/sJeaXe33WkFsWWvHmRmGWQNV9ctK8BnaVFj9sfPVkBYnn69d/QmZSNaJ?=

=?iso-8859-1?Q?ukpL0biQyF/K0ZQQvy0nPHKzDG6dGC5RVQblgngV8xMkBlg9ByNChS9AcA?=

=?iso-8859-1?Q?HBNh17dEgjsijVGGu+gprqWRmDSvmLXbfHJuEn/JOgJhbucpBjpxa78u+c?=

=?iso-8859-1?Q?zYlJsYTN960NNBVz3Vtqe0lO6a+PJsZWCD+aV/zgq+o/46l6OKSnVw1tf4?=

=?iso-8859-1?Q?46//Q2dsy2ZNTgZJlIPI6lAuT0pek3rs7l5xjDfepzgEoGP7sIhzA=3D?=

Content-Type: multipart/mixed;

boundary="_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DB5PR09MB8105.eurprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 3426f0d4-4963-4fd0-3093-08df0f58653d

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Sep 2026 16:27:23.8648

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR09MB4534



--_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: multipart/alternative;

boundary="_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_"



--_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Good day.



Apply for loan with DB FINANCE LOANS and have peace of mind, knowing that:

NO MUCH PAPERWORK

NO STANDING IN LONG QUEUES

APPROVAL WITHIN 24 Hours

INTEREST RATE @ 5% FIXED

BLACKLISTED AND DEBT REVIEW INDIVIDUALS CAN APPLY.

Open the attached document to see our LOAN REPAYMENT SCHEDULES that suit yo=

ur individual needs and apply for a loan with us. You can apply via our Ema=

il: dbloanservice@gmail.com



Kind Regards,

Sylvia Jacobs (Mrs.)

DB LOAN SERVICES



--_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Good day.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Apply for loan with DB FINANCE LOANS and have peace of mind, knowing that: =

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

NO MUCH PAPERWORK  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

NO STANDING IN LONG QUEUES  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

APPROVAL WITHIN 24 Hours  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

INTEREST RATE @ 5% FIXED  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

BLACKLISTED AND DEBT REVIEW INDIVIDUALS CAN APPLY.  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Open the attached document to see our LOAN REPAYMENT SCHEDULES that suit yo=

ur individual needs and apply for a loan with us. You can apply via our Ema=

il: dbloanservice@gmail.com



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kind Regards,  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Sylvia Jacobs (Mrs.)



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

DB LOAN SERVICES








--_000_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_--



--_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_

Content-Type: application/pdf; name="DB LOAN SERVICES.pdf"

Content-Description: DB LOAN SERVICES.pdf

Content-Disposition: attachment; filename="DB LOAN SERVICES.pdf"; size=116094;

creation-date="Tue, 25 Aug 2026 16:32:01 GMT";

modification-date="Thu, 10 Sep 2026 16:26:24 GMT"

Content-Transfer-Encoding: base64



...



--_004_DB5PR09MB8105FB74A3D40E297BDD3BA5A9BF2DB5PR09MB8105eurp_--

Investor Line Phish from SendGRid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8n-00000000NWj-3dIw

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzbpn.outbound-mail.sendgrid.net ([159.183.235.50]:63510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4gJe-00000000DLb-33NL

for doctor@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 09:04:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mkxczd.com;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; t=1789052580;

bh=vi4U36+vt6EXwwz7bgllIsHMgyNyeW+i1tfTNvLGyYk=;

b=HDa7cJcnok/+i4cnghyFNZqdBfQvoic2yTFSc7xgwx+gpQmKTU+OOFU6vCAvdLs9BF+z

RC1FV0MWacCNFHQA/ASyf9lrdzY1v6N0pRAqnc8LWEcsXRFvoT3TQ9VEdT3RDXNJSKTfYH

5YCegDIiBCZBdlGN04+gIRBWqJnTJFBLSDNWKCrtv/XgZkn2oeZju+izyhpxgoD3zChS3j

+geUCxIGvXG8QyJiHfrBbnYUlcHPanMd6zO6KRPF3KYIhVuZkVjcaOmk2AWihXbSPHqqR3

8aNC9eG2febgDSWmn1+bqLXRU8Dj0C3nloNjjO/fj85/kP9O7CpxVENQiuT/Ux1w==

Received: by recvd-6cd9678977-4jqd5 with SMTP id recvd-6cd9678977-4jqd5-1-6AA2C6A4-71

2026-09-10 15:03:00.325352891 +0000 UTC m=+3787807.071772490

Received: from wiipress.ch (unknown)

by geopod-ismtpd-7 (SG) with ESMTP

id KjfPNiexRXK9blAjEWeagA

for ;

Thu, 10 Sep 2026 15:03:00.112 +0000 (UTC)

Message-Id: <92a496bd9aaf08e3157af64c27d5e69f@mkxczd.com>

From: InvestorLine Info

Subject: Action Required: Please Review Your Customer Information

Date: Thu, 10 Sep 2026 15:03:00 +0000 (UTC)

X-Priority: 3

X-Mailer: RZQGEZJBNXOHIK ZSWFRIH KGUIRAVRD 723

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EnhMA48XH+kD7Dk1x3LbBwQT1mimGGynp44e3tDbfreTFd46cbvs40gFTd?=

=?us-ascii?Q?TGNxCktTAIrTQU0TkLQlKwK9nsk7T8ld6m6N5RK?=

=?us-ascii?Q?AJ5YSZZxp=2FtRijtg+X24WJhM0xhP=2FRYkb3HHHKk?=

=?us-ascii?Q?pvN6LhL9lYsZXjvx3rOD5HG8F5qbD6dSrQlW1Ih?=

=?us-ascii?Q?hvTAgttfcAcuPKLymkFeFRb7FcPqdpV76P7=2FfeJ?=

=?us-ascii?Q?cDgFiydwJr1F9Xegg2Ol46pSeQM++6wFBPLofEe?= =?us-ascii?Q?Esry?=

To: doctor

X-Entity-ID: u001.U3bXSLnQhyyXUhtoxL8Iww==

Content-Type: multipart/alternative; boundary="c307a3f1dd3ff4aa6c665b29000c3f01"

X-Spam_score: 29.4

X-Spam_score_int: 294

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  French message to follow/Version française ci-dessous

Dear Customer,As part of our regular review of customer records, we have

identified that certain personal or identification details associa [...]



Content analysis details: (29.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: mkxczd.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.235.50 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.6 J_CHICKENPOX_82 BODY: 8alpha-pock-2alpha

0.6 J_CHICKENPOX_83 BODY: 8alpha-pock-3alpha

2.0 TVD_PH_REC BODY: Message includes a phrase commonly used in phishing

mails

0.6 J_CHICKENPOX_84 BODY: 8alpha-pock-4alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 MIXED_HREF_CASE Has href in mixed case

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Action Required: Please Review Your Customer Information







French message to follow/Version française ci-dessous







Dear Customer,



As part of our regular review of customer records, we have identified that certain personal or identification details associated with your account need to be confirmed, supplemented, or updated.



Keeping your customer information complete and up to date is an important part of our customer identification and verification requirements and helps ensure that your account records remain accurate.



We kindly ask you to review the information currently registered on your account and make any necessary changes or additions.



To complete the review, please sign in directly through the official online banking service or mobile banking application and follow the instructions displayed in your account:Review Customer Information.



Once your updated information has been submitted, it will be reviewed by the appropriate team. Your customer records will be updated once the verification process has been completed.



Please note that incomplete or outdated information may temporarily affect the availability of certain account functions or services until the required review has been completed.



If you need assistance, please contact Customer Support through the institution’s official contact channels.



BMO InvestorLine







***********************************************************************************************************************







Madame, Monsieur,



dans le cadre de notre examen régulier des dossiers clients, nous avons constaté que certaines informations personnelles ou d’identification associées à votre compte doivent être confirmées, complétées ou mises à jour.



Le maintien d’informations client complètes et à jour constitue un élément important de nos exigences en matière d’identification et de vérification de la clientèle et contribue à garantir l’exactitude des informations relatives à votre compte.



Nous vous invitons donc à vérifier les informations actuellement enregistrées sur votre compte et à effectuer, le cas échéant, les modifications ou compléments nécessaires.



Pour finaliser cette vérification, veuillez vous connecter directement à votre espace bancaire en ligne officiel ou à l’application bancaire mobile et suivre les instructions affichées dans votre compte :Vérifier mes informations.



Après l’envoi de vos informations mises à jour, celles-ci seront examinées par le service compétent. Votre dossier client sera actualisé une fois le processus de vérification terminé.



Veuillez noter que des informations incomplètes ou obsolètes peuvent temporairement affecter la disponibilité de certaines fonctionnalités ou de certains services du compte jusqu’à la fin de la vérification requise.



Si vous avez besoin d’aide, veuillez contacter le service client par l’intermédiaire des canaux de contact officiels de l’établissement.



BMO Ligne d’action

WealthSimple Phish from Microsoft

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8d-00000000NVu-3F5l

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:43 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from aejkz.bzjfls.com ([20.175.94.160]:49305)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4fjr-00000000AA0-2yEN

for support@nk.ca;

Thu, 10 Sep 2026 08:27:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=aejkz.bzjfls.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=lsuee@aejkz.bzjfls.com;

bh=T9e1ux+W0Eta+5qj2kRPKMseV5fK7KXzrCf8fnLQ/6c=;

b=QVOXTGriPkQyci90K1S2v/whXfkelN2gY7c9A5ebu1nKICYxT5Rkc99HffIRdiqlpdsMY9qRINC9

cQ/Y/qoUg252hGfrzFX82DWgGFBnpEx/kOupGsYtEPZFmPFWLDm3BMgqix6FmynA7G2XMJB0hJSI

HG4L5tOlLrWiGJjEzfDZrPrt1TngItcZWSO8MSPyQAEDkT7y3kGpkqh6GYPgPLcTbULsvYLTBoWN

rEaCaYCSi6FFn9mUl2mPhtdblpT2rOq3aPuR1IS7iai98ufwLhLuycslntnXPojRWaK6tlEPpGwL

WYMRm4EuUqw65x85LuydtM8IzmB4HLaOhP/oig==

Content-Type: multipart/alternative;

boundary="===============5945496873381675340=="

MIME-Version: 1.0

From: Wealthsimple investing

To: support@nk.ca

Subject: Restore trading - Complete your account details

Date: Thu, 10 Sep 2026 10:26:07 -0400

Message-ID: <178905036757.6695.12570061606466614698@aejkz.bzjfls.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

X-Entity-Ref-ID: 5202a6c5-a59b-4a89-b8bf-6c1e50466f93

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 29.1

X-Spam_score_int: 291

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Wealthsimple Complete your details to restore trading Hi support,





Content analysis details: (29.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

[20.175.94.160 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

[20.175.94.160 listed in dnsbl.ahbl.org]

[20.175.94.160 listed in dnsbl.ahbl.org]

[20.175.94.160 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.175.94.160 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.175.94.160 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} Restore trading - Complete your account details



--===============5945496873381675340==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Wealthsimple



Complete your details to restore trading



Hi support,



Your account information has not been updated for a long time. To keep your account secure, trading is currently restricted.



Trading will be restored as soon as your account details are completed and confirmed.



Sign in to Wealthsimple to finish the update.



Restore my trading: https://www.aliboshi.com/?uid=koSkbNjiAGXcrdW38VRTz1LN



This email was sent to support@nk.ca. This is an automated message from Wealthsimple. Please do not reply.



---



FRANAIS



Bonjour support,



Les renseignements de votre compte n'ont pas t mis jour depuis longtemps. Afin d'assurer la scurit de votre compte, la ngociation est actuellement restreinte.



La ngociation sera rtablie ds que les renseignements de votre compte seront complts et confirms.



Connectez-vous Wealthsimple pour terminer la mise jour.



Rtablir la ngociation : https://www.aliboshi.com/?uid=Q5mEvfmENMb2zTAe5t1z0qgE



Ce courriel a t envoy support@nk.ca. Ceci est un message automatis de Wealthsimple. Veuillez ne pas y rpondre.



--===============5945496873381675340==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Restore trading - Complete your account details



































































































Wealthsimple
Security notice


Complete your details to restore trading
Hi support,


Your account inform​ation has not been upd​ated for a long time. T​o keep your account secure, trading is currentl‍y restricted.


Trading will be rest‍ored as soon as your acco​unt details are completed and confirmed.
Sign in to Wealthsimp‍le to finish the update‍.


Restore my trading


The whole update takes​ only a few minutes. If t‌he button above doesn'‌t work, sign in to Wealthsimple‍ and go to your account s​ettings.


This email was sent to su‌pport@nk.ca.



This is an automated me‍ssage from Wealthsimpl‍e. Please do not reply.



Questions? Visit our Help Centre.












--===============5945496873381675340==--

Investment spam from China

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8Y-00000000NVN-0GKN

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:38 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.nihao.cn ([61.135.129.15]:55178 helo=nihao.net.cn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4e8L-000000008XJ-237k

for sales@nk.ca;

Thu, 10 Sep 2026 06:44:16 -0600

Received: from DESKTOP-BCBFKL4 (unknown [41.184.248.196])

by send (Coremail) with SMTP id D4GHPQAnFsTNoKJqX+ZXAw--.46038S19;

Thu, 10 Sep 2026 20:23:36 +0800 (CST)

From: "John Lucas"

Subject: Questions on Requests

To:

Content-Type: multipart/alternative; boundary="WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e"

MIME-Version: 1.0

Reply-To:

Date: Thu, 10 Sep 2026 05:43:02 -0700

Message-Id: <20261009054301D4A8CD556E$3373B56062@rauch.com.cn>

X-CM-TRANSID:D4GHPQAnFsTNoKJqX+ZXAw--.46038S19

Authentication-Results: send; spf=neutral smtp.mail=info@rauch.com.cn;

X-Coremail-Antispam: 1UD129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73

VFW2AGmfu7bjvjm3AaLaJ3UjIYCTnIWjDUYxBIdaVFxhVjvjDU0xZFpf9x0zRUUUUUUUUU

=

X-CM-SenderInfo: plqi0qpudxuxoofrzhdfq/

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I hope this message finds you well. Kindly confirm

if you havereceived the loan offer letter.The company has a large portfolio

in Eastern partof Europe, Middle East and Asia which he earmarked forinve

[...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[41.184.248.196 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

[61.135.129.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

[61.135.129.15 listed in dnsbl.ahbl.org]

[61.135.129.15 listed in dnsbl.ahbl.org]

[61.135.129.15 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

[41.184.248.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[61.135.129.15 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[61.135.129.15 listed in bl.score.senderscore.com]

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[jonlucas2104(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Questions on Requests



This is a multi-part message in MIME format



--WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Greetings,



I

hope this message finds you well. Kindly confirm if you havereceived

the loan offer letter.The

company has a large portfolio in Eastern partof

Europe, Middle East and Asia which he earmarked forinvestment.



If

this is of interest to you, get back to me and I will give youfurther

details and my personal information



I

will give you more details as soon as I hear fromyou.

I await your response



Warm

regards,



John

LucasFinancial

Consultant



--WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


e=3D1">
tle>Questions on Requests




=3Dleft>Greetings,


NG: border-box; FONT-SIZE: 16px; FONT-FAMILY: -apple-system, system-ui=

, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Helvetica,=

Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI S=

ymbol'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(34,26,20); FONT-STYLE: normal; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; scr=

ollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: thin; user=

-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-=

user-drag: none; font-variant-ligatures: normal; font-variant-caps: no=

rmal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initi=

al; text-decoration-style: initial; text-decoration-color: initial">I =

hope this message finds you well. Kindly confirm if you have

"scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: thin; =

user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -web=

kit-user-drag: none">received the loan offer letter.

lbar-color: rgb(78, 69, 69) transparent; scrollbar-width: thin; user-s=

elect: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-us=

er-drag: none">The company has a large portfolio in Eastern part

yle=3D"scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: =

thin; user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0)=

; -webkit-user-drag: none">of Europe, Middle East and Asia which he ea=

rmarked for

scrollbar-width: thin; user-select: text; -webkit-tap-highlight-color:=

rgba(0, 0, 0, 0); -webkit-user-drag: none">investment.


"BOX-SIZING: border-box; FONT-SIZE: 16px; FONT-FAMILY: -apple-system, =

system-ui, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', H=

elvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'S=

egoe UI Symbol'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFOR=

M: none; FONT-WEIGHT: 400; COLOR: rgb(34,26,20); FONT-STYLE: normal; O=

RPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT:=

0px; scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-width: t=

hin; user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0, 0);=

-webkit-user-drag: none; font-variant-ligatures: normal; font-variant=

-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial; text-decoration-color: in=

itial">If this is of interest to you, get back to me and I will give y=

ou

-width: thin; user-select: text; -webkit-tap-highlight-color: rgba(0, =

0, 0, 0); -webkit-user-drag: none">further details and my personal inf=

ormation


FAMILY: -apple-system, system-ui, BlinkMacSystemFont, 'Segoe UI', Robo=

to, 'Helvetica Neue', Helvetica, Arial, sans-serif, 'Apple Color Emoji=

', 'Segoe UI Emoji', 'Segoe UI Symbol'; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,26,20)=

; FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255=

,255,255); TEXT-INDENT: 0px; scrollbar-color: rgb(78, 69, 69) transpar=

ent; scrollbar-width: thin; user-select: text; -webkit-tap-highlight-c=

olor: rgba(0, 0, 0, 0); -webkit-user-drag: none; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial">I will give you more details as soon as =

I hear from

scrollbar-width: thin; user-select: text; -webkit-tap-highlight-color:=

rgba(0, 0, 0, 0); -webkit-user-drag: none">you. I await your response=


-apple-system, system-ui, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Hel=

vetica Neue', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Sego=

e UI Emoji', 'Segoe UI Symbol'; WHITE-SPACE: normal; WORD-SPACING: 0px=

; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,26,20); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=

); TEXT-INDENT: 0px; scrollbar-color: rgb(78, 69, 69) transparent; scr=

ollbar-width: thin; user-select: text; -webkit-tap-highlight-color: rg=

ba(0, 0, 0, 0); -webkit-user-drag: none; font-variant-ligatures: norma=

l; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style: initial; text-decor=

ation-color: initial">Warm regards,


box; FONT-SIZE: 16px; FONT-FAMILY: -apple-system, system-ui, BlinkMacS=

ystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Helvetica, Arial, san=

s-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol'; WHI=

TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT=

: 400; COLOR: rgb(34,26,20); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2=

; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; scrollbar-colo=

r: rgb(78, 69, 69) transparent; scrollbar-width: thin; user-select: te=

xt; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-user-drag: =

none; font-variant-ligatures: normal; font-variant-caps: normal; -webk=

it-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial">John Lucas
style=3D"scrollbar-color: rgb(78, 69, 69) transparent; scrollbar-widt=

h: thin; user-select: text; -webkit-tap-highlight-color: rgba(0, 0, 0,=

0); -webkit-user-drag: none">Financial Consultant







--WWFn1M2bMBvanyB=_tauRuHcj8zxhimN8e--



Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:04:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j8M-00000000NUI-0h3i

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:04:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:04:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:51586)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4e0H-000000007Q4-2O8O

for root@nk.ca;

Thu, 10 Sep 2026 06:35:57 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-39b9a99469fso2905332a91.3

for ; Thu, 10 Sep 2026 05:34:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1789043692; x=1789648492; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=f+MeOVBBz8R8V/ZQ5JqiNOF0/jVmLOJJyLy26dsq/nk=;

b=ZJ+g2TXkaxJSPaAbpwRNJ6yfBnswoCNIScQDXHs9BzNXtcjfN6/APriUwae1M1ZgYj

1k71j40GTK47auIU13a7KJ+Kep4w6qiido4SW+/NpM4CqtnxH7DatLqaGNVIIvLal1xq

f7rtUaCXetvNb8MdB6Q1IM7Fs4B8YAK9WLd/ruad2VSF/MEC9FgBQAXQrqfDuGZVukL/

oGR6U7WpXpE5apfxjb3IwauG8ODdMyr9F8NxJ8eLGcCLxjwJrnf1pYVJyzLrZoofNMGT

y3FsAobA31QajikoRmDxcbtAfo/JyoRjFpz7dWWKYkaCk48GJsOws9DryeCkC3VGpX25

37vg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789043692; x=1789648492;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=f+MeOVBBz8R8V/ZQ5JqiNOF0/jVmLOJJyLy26dsq/nk=;

b=dhbM7zkp4vX5L5iO3bkktFtYaK59G/7cSn2CXfolNyGa84drei71agN6wcNcm3XXOq

UW8TVjZvuzyfxzk4Hlgy6CGCUpYoeWmXuW5ckzC6Y4veRI3OTabfRWhbB2AC9auYHjMz

s65QMwWCh1tIHnCFYLNHD7IZpJCtpcv9TuxSBIaPL8+MYyt+sN73cCsS97InC5UeMyjK

0VIT03GeB7+adtjis8/XMdvmzc20S5+8TRdu0aWZd5pmcy67FSUOISqf+3GBD4RvEZce

taXfVaOQtQsxIgTFySBFCzLG9AjZ00xxBlxM7eMWldQZhVVTP0pAeGpcspj/62OE/6mM

/54g==

X-Gm-Message-State: AFuF++l43ovmIz7BFluVDb+FUhe0RTcqdrDX9xD7j+jJOglqcv5ayClf

cT74+KyKzKKyQ3yvxHMQMeHXJ3cWgjT8Ep3tsyFXeYyuwIGq09ZTqHm+evXNTn5J

X-Gm-Gg: AYBFou2+jxC5Qym9gQ6LTMD2pEoSx7HWSMLAQjTiRQrdX34W5Tv8B2ZvoXfw42ZVd1L

h4lVLAf8gXEaOH9f2vjpmBl747/0oD5qA+ZGIauHIl1+oz9mZOme21Mg/+RIedUToAyyQ4ZEqj+

f3SgE+rS8G/d8mKzVNP/gvGHsspceUOYZvkjs4gh6Nd8YRGKC/k7UqePG/WvEFt/WQsXvdVkCZ0

96S+AhOZwSzNFEpMSaigWx9DfYFT44GcCWwdosRaZLxOoxhiDXbsXi1aKUhxKMBxWGdCVWc/yQI

gPuGct6WQtA6cdYktZAC1Ji0rWiijyaWlhFFJVFLaZZHFxKMVtB61xsUSOsePsr2uPVPceniclF

iiZvzZ1m3r7mNXnPpdzQN3se9ydxqbNQV/awD9swRvAq3Jif/4mhJcRpZKQf/+2yv6if7N9SSRf

SGg+9KtkDmQATesct4HQTud/JrJwPaehQMBb/E8higerY0n+rUnvd1IdUhdy/mcG36OXhK4CR/w

HnCK1gVavbIelJ1/T0vgXvP

X-Received: by 2002:a17:90b:4d87:b0:380:540:d499 with SMTP id 98e67ed59e1d1-39b26100bfdmr56135532a91.6.1789043691747;

Thu, 10 Sep 2026 05:34:51 -0700 (PDT)

Received: from DESKTOPD8VAGM3 ([2401:4900:8f80:79cb:b43c:94e:ff57:93ff])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39d7e7f4369sm4573702a91.8.2026.09.10.05.34.50

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 10 Sep 2026 05:34:51 -0700 (PDT)

From: "Adam"

To:

Subject: Design or Re-build?...

Date: Thu, 10 Sep 2026 18:00:22 +0530

Message-ID: <187f01dd4120$2c7559b0$85600d10$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1880_01DD414E.462D95B0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Ad1BHyN92SEWOTTLR1SvZOPU2uDT7Q==

Content-Language: en-us



This is a multi-part message in MIME format.



------=_NextPart_000_1880_01DD414E.462D95B0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello root@nk.ca,







I provide completely built new site re-design service like: Creative Web

Design, Word Press, PHP, Shopify, CMS Design, E-Commerce, Web, etc.







If you are interested, please send your requirement. And help us with the

reference site if you have one.







Thank you









------=_NextPart_000_1880_01DD414E.462D95B0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello
style=3D'background:lime;mso-highlight:lime'>root@nk.ca,


class=3DMsoNoSpacing> 

I provide =

completely built new site re-design service like: Creative Web Design, =

Word Press, PHP, Shopify, CMS Design, E-Commerce, Web, etc.


class=3DMsoNoSpacing> 

If you are =

interested, please send your requirement. And help us with the reference =

site if you have one.

 


class=3DMsoNoSpacing>Thank you


class=3DMsoNormal> 



------=_NextPart_000_1880_01DD414E.462D95B0--



Investment inquiry spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 06:10:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4dbh-00000000Csr-2qZ3

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 06:10:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 06:10:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f44.google.com ([209.85.218.44]:57421)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4cuG-000000005PF-3TJ0

for doctor@nl2k.ab.ca;

Thu, 10 Sep 2026 05:25:38 -0600

Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-c1c52d920b8so951899766b.2

for ; Thu, 10 Sep 2026 04:24:41 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1789039474; cv=none;

d=google.com; s=arc-20260327;

b=qd+1OTOo8iAGc1ntTbg2cmmb24/K9Htd1N6VU7GQ+ba/V+8gk3oaYe3vQ4+5uCCcIh

UmIM5ppmLsOfj22wYrIdWsqA/ZHDzNqQW+6dC/xlOukjI7Wtd0hxK6m8LdTdU3bkKy2c

KYpk1YGiVeXh2yFlMJ5+gmXc8pqRc+COYfCGtzwPskALv57IPRHKQ8+9R5b2Dq29dJCi

YVz41QbeJnLJ+FoPW2pjJoXYmG1yuspLpVKVh6R3tsMZlpG3BCSmFOGKdwbAU79ycbWP

ukjnv5gPlYMKByICvJLd/cc9f/jICKac6hK6OACdcE3S/zQwf5jyxSHLIz91ewLgkx7S

k/hw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=y8w2sPg70c1WQOqbN4N8rSDljVSQ4dXSRqJZJ//AnVw=;

fh=4atT8ZWk/v84INkqS8Nb6Cito6AxhsQ33N+t1zi9pps=;

b=XiMIemYFxkjui9Sa+jeC7jdxQHL263MLTchgzaGiizKUxqG5wNOrE02O/x41qrMY4s

PhfK9VDd9hkHYF307DJIHBj9sPT7OOeK63qx8k3bookSrLhgesh1E5LVhvu5awEmWXtN

m5dvhaYgBVBzyMMHbi/EleMQrYFnO3u0pCtt/v3jqJQrgW6SOnooGZEZ0htG6Mvp272p

0W/iOzyzLeSd+76kPNMc0XRHIvplt1XNOm8zR6e0mHnkZFoRR4YbPF9XDeqz7PKqpJOR

NhPBmEvYGop6/fCJQqYzZrd1wpCeB6MUITo9LOgG5ZkSRPiLLJc3fJacRyOLmdejImIt

sHRA==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1789039474; x=1789644274; darn=nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=y8w2sPg70c1WQOqbN4N8rSDljVSQ4dXSRqJZJ//AnVw=;

b=GAQ8EIuJgU9a6vGQKbRGagVYJG15rRXHn5i6CdkQ0zKkAjc/9dMaHkYPlIBoDQcN4Q

Ec6JrlxqBWPvoJhyY2B0de4u1vISarmLEeVarPR3SjP59GHPQ8GS+0VoPfpQQuVjVydC

jloQxphlB3RKzQ2IniGvcVBHcGyU0v9Gt8BDVCVHuI4krm95yMVX8D809HLOT1r0xEAz

C2MEwK1BFlFIQJi9VlFR8lFqlKrViincmk7hW60ooyCa9JxRMhrVq4LUZA64MOcjHYai

wknqOGNWo3VFZaXewcbKrpDEt884i1DtPZgp/1AdIi0iAner11g1gDaozbfkRQOxUPlX

Qabw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789039474; x=1789644274;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=y8w2sPg70c1WQOqbN4N8rSDljVSQ4dXSRqJZJ//AnVw=;

b=LBxeRtMSovdVL2iLlwkIoKOGccNOBqlwTQ99jjetPFhGcYe/1s2VQaPxeB4lT533Ru

lka7G1bfRieqbhSvcwOIuaqpbifRp+17ggFk+Yb4lWmOZX2c45HiA+hEI715kQpKe8cR

xWqGNXCbBL4OmFDGdtMAfn6IOJIu5gRk7qKOSZfb8o7ebkCEH6uAJUVxXsOt+4hiIRV0

1e7TcdEh//ZC7Im4L67t0nSzuI0xItlQ6OFE/aiVrZRGMshBb0CFCdvTugu5s7JeYbXJ

26dqrzKK7LhYfFNbw25jvQwn4EMI7OZoPvaw/rIbO23mtTOmfZBdeFpE1gxeFUrQ/OaG

WPHQ==

X-Forwarded-Encrypted: i=1; AKwUvBwSeVomBvevq0P023BIfLCjUesha8pLG3ARCyuWfVPHzHxK2zCvLfhAdg2aQwT4cHmkbrE3CDs=@nl2k.ab.ca

X-Gm-Message-State: AFuF++lSNbvlgrulP3tGKqm2f1DC2rKibps4/e1eWgqLvdO+zfN4ux3j

PuVI/ecDSFlrx23pgonKrn+KeFc80ska8Te+MzzJOlHj/PtRNg8KZFsikRyd9yJNbSMxOYIcqSY

FshlOcqrYGbSR71G3A2G3BXf6tzdFEmE=

X-Gm-Gg: AYBFou1ef6T8rPW1hD7vOKaY+HcOLV1F+NAG8FJKDYacLey2SbtTzzuMqdRlyQUtJiK

mPoKJAAfaIGlWr3L72zsNc17IyfmKBOwH1dbsgudptfogX7wKTVYfoK+79pAVMY3zDxko31uA9x

kwIR59gYeW2XMdMggCkhPfZ7GtLwWn1fL1OjBIg5nKyTr9uvLA7T+CokEw9pkMDcJ6xQijalKJv

5yGLp0hrzGUxqgCh7JMEGf0KZg9Gd0gGi8kH0B5sSFZqRXcN9kyH0bmu2wKTWGPzzIdhj1rWOKz

1wWQxG/4euK00l6RhZxuMHaWUd8/6kh5PtPin11yUydyv1flyYHyH6JzarF2hlNLYa5qhWFMi48

3wlBAsSTDH4fL+mTLGDcIYd4j1w9i7h+4CMx4E2z67fsX2mA15dbyopIkBfnb

X-Received: by 2002:a17:907:d9e:b0:c26:19de:9aed with SMTP id

a640c23a62f3a-c2619dea8femr1710531466b.44.1789039473509; Thu, 10 Sep 2026

04:24:33 -0700 (PDT)

MIME-Version: 1.0

Reply-To: steveford677@zohomail.com

From: Steve Ford

Date: Thu, 10 Sep 2026 13:23:40 +0200

X-Gm-Features: AcwNN1U3A05BdIEoaoa66dqObc6mMPfQRBUYq1wfu3HuOk34qQwalcYVixp1agI

Message-ID:

Subject: Investment Inquiry,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004ecacb065b1f364c"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Investment Inquiry, Greetings. we are here with our mother

and our younger ones meanwhile we got your name in our search for a foreign

partner who will help us as we and our mother status as refugee cannot allow

us to transfer our [...]



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

[209.85.218.44 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

[209.85.218.44 listed in dnsbl.ahbl.org]

[209.85.218.44 listed in dnsbl.ahbl.org]

[209.85.218.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.44 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.44 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[barclaysbnkheritance(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[steveford677(at)zohomail.com]

0.9 URG_BIZ BODY: Contains urgent matter

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.44 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.218.44 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.2 XFER_LOTSA_MONEY Transfer a lot of money

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Investment Inquiry,



--0000000000004ecacb065b1f364c

Content-Type: text/plain; charset="UTF-8"



Investment Inquiry,





Greetings.





we are here with our mother and our younger ones meanwhile we got your

name in our search for a foreign partner who will help us as we and our

mother status as refugee cannot allow us to transfer our money. Please

accept our apology if this e-mail is embarrassing as you don't know us. Our

mother and we are in need of urgent assistance. I the son and my sisters

miss Ruth, the daughter of Sir, and Daniel Mutombo of Zimbabwe. During the

current crises against farmers in Zimbabwe and from the support of

Zimbabwean government to claim all the white owned farms in our country.



All the white farmers were ordered to surrender their farms to his party

members. Our father who was one of the best farmers in our country did not

support his idea. And so the party members invaded my father's farms and

burnt everything in the farm, and our father was beaten up by this evil man

and made away with a lot of properties in our father's farm company and the

tension was so much on him he was rushed to a SPECIALIT HOSPITAL in South

Africa along with us and our mother and our junior ones we move out of

Zimbabwe because our lives were in danger. And after much distress our

beloved father died here in South Africa. But before then, our father

handed over to our mother a proof of deposit slip/Agreement and some

documents which was made between him and A VERY RELIABLE FINANCIAL SECURITY

COMPANY here in South Africa on which he deposited the sum of $30M (THIRTY

MILLION UNITED STATES OF AMERICA DOLLAR)



This money was raised by his farmer's group for the purchasing of

farming equipment s/machineries before the land dispute Rose. So we

decided to make contact with an overseas person, who will assist us to

transfer this money out of South Africa, we want to be there in your

country. We are here as refugee and our status don't allow us to stand for

the fund for transfer, we will like you to stand as our father's

beneficiary, and with

the help of our father's financial attorney this transfer is going to be

fast and easy.



Note that for your time and help 35% of this fund is yours and 5% of the

fund is for any expenses incurred both locally and internationally in the

course of this transfer and the remaining 60% is for our family to start up

business in your country with your support.



If you're interested in assisting me, please do not hesitate to Reply to my

email address (steveford677@zohomail.com) as soon as possible.



when you reply we will tell you things you need to do.



THANKS AND GOD BLESS YOU

Mr. Steve AND Miss Ruth Mutombo

(FOR THE FAMILY)



--0000000000004ecacb065b1f364c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Investment Inquiry,


=C2=A0Greetings.
>

=C2=A0we are here with our mother and our younger ones meanwhile w=

e got your
=C2=A0name in our search for a foreign partner who will help =

us as we and our
=C2=A0mother status as refugee cannot allow us to trans=

fer our money. Please
=C2=A0accept our apology if this e-mail is embarra=

ssing as you don't know us. Our
=C2=A0mother and we are in need of u=

rgent assistance. I the son and my sisters
=C2=A0miss Ruth, the daughter=

of Sir, and Daniel Mutombo of Zimbabwe. During the current crises against =

farmers in Zimbabwe and from the support of
=C2=A0Zimbabwean government =

to claim all the white owned farms in our country.

=C2=A0All the whi=

te farmers were ordered to surrender their farms to his party
=C2=A0memb=

ers. Our father who was one of the best farmers in our country did not supp=

ort his idea. And so the party members invaded my father's farms and bu=

rnt everything in the farm, and our father was beaten up by this evil man a=

nd made away with a lot of properties in our father's farm company and =

the tension was so much on him he was rushed to a SPECIALIT HOSPITAL in Sou=

th Africa along with us and our mother and our junior ones we move out of Z=

imbabwe because our lives were in danger. And after much distress our belov=

ed father died here in South Africa. But before then, our father =C2=A0 han=

ded over to our mother a proof of deposit slip/Agreement and some documents=

which was made between him and A VERY RELIABLE FINANCIAL SECURITY COMPANY =

here in South Africa on which he deposited the sum of $30M (THIRTY MILLION =

UNITED STATES OF AMERICA DOLLAR)

=C2=A0This money was raised by his =

farmer's group for the purchasing of
=C2=A0farming equipment s/machi=

neries before the land dispute Rose. So we decided to make contact with an =

overseas person, who will assist us to transfer this money out of South Afr=

ica, we want to be there in your country. We are here as refugee and our st=

atus don't allow us to stand for the fund for transfer, we will like yo=

u to stand as our father's beneficiary, and with
=C2=A0the help of o=

ur father's financial attorney this transfer is going to be
=C2=A0fa=

st and easy.

=C2=A0Note that for your time and help 35% of this fund=

is yours and 5% of the
=C2=A0fund is for any expenses incurred both loc=

ally and internationally in the
=C2=A0course of this transfer and the re=

maining 60% is for our family to start up
=C2=A0business in your country=

with your support.

=C2=A0If you're interested in assisting me, =

please do not hesitate to Reply to my
=C2=A0email address (
ilto:steveford677@zohomail.com">steveford677@zohomail.com) as soon as p=

ossible.

=C2=A0when you reply we will tell you things you need to do=

.

=C2=A0THANKS AND GOD BLESS YOU
=C2=A0Mr. Steve AND Miss Ruth Mu=

tombo
=C2=A0(FOR THE FAMILY)




--0000000000004ecacb065b1f364c--