Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEx-00000000NR9-2sML

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m81248.xmail.ntesmail.com ([156.224.81.248]:30794)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3bGW-000000004d1-3akX

for sales@nk.ca;

Mon, 07 Sep 2026 09:28:30 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_700008_1860569750.1788794835398"

To: sales

Subject: =?UTF-8?B?RXhjbHVzaXZlIEZhY3RvcnkgRGVhbHMgZm9yICDigJMgUHJvbW90aW9uIEJlZ2lucyE=?=

X-Priority: 3

MIME-Version: 1.0

Received: from optimalman@emjiaju.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 7 Sep 2026 23:27:15 +0800 (GMT+08:00)

From: OptimalMan

Date: Mon, 7 Sep 2026 23:27:15 +0800 (GMT+08:00)

X-WM-Tid: 0aa07c7b11a30a83kunm7d04885ce0de1

DKIM-Signature: a=rsa-sha256;

b=RPnm2ubFAm3Xmlw7r19z3m4PE+EdOwGMazjdqJMG2yC8uohVHnodiHGc16rzuDQWbdLCroeOWH5JI1x/PNT1GPSMGVSTwnWD1mGtJ4jYtPkqW1OO4YRhGUVPqYWUZU29/mRH96XZkqErVEulF+45VRW84BWluxarqeBriUEMFlo=; s=default; c=relaxed/relaxed; d=emjiaju.com; v=1;

bh=Lq4sZJanYfHGw4B7fR4a+Yfnp/o8PKtdRm0pQ/JLkCQ=;

h=date:mime-version:subject:message-id:from;

Message-ID:









Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

Hi Sales,



Explore the Rib Bed, designed for easy installation and exceptional durability. Its wooden slats meet EU standards, ensuring safety and strength. Perfect for various settings, it offers a reliable solution for your furniture needs.

Bed Hardware Factory Metal Slat Luxury Full Size Queen king Size Bed Frame Base

King Size Stable Modern Iron Platform Lift up Hardware Kit Gas Spring Mechanism Storage Bed Frame





Key Features:

① Easy Installation: Simplifies setup process.

② EU Standard Wood: Ensures quality and safety.

③ Strong Load Capacity: Supports heavy weights effortlessly.



Consider the Rib Bed for your next project. Its robust design and compliance with international standards make it an ideal choice for diverse environments.



Warm regards,



Yuchen

Sales Manager

OptimalMan

Email: optimalman@emjiaju.com











Maintain your entry to exclusive updates by selecting . Continue Getting Alerts



To discontinue these messages, visit Refine Delivery Settings.





Jianqun

optimalman@emjiaju.com





在2026-09-03，OptimalMan 写道:



-----原始邮件-----

发件人： OptimalMan

发件时间: 2026年09月03日 周四

收件人： [sales ]

主题： Exclusive Factory Deals for – Promotion Begins!











Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

Hello Sales,



OptimalMan has been a leader in the home furnishings industry for over 20 years. Our state-of-the-art production facilities ensure top-notch quality. Our storage racks are designed to be simple, durable, and stylish, making them a perfect fit for any space.

3 Layer Rotating Practical Shelf Furniture Detachable Tray Trolley Kitchen Cart with Wheel

Three Tier Rolling Cart Kitchen Storage Trolley High Quality Black Organizer Cart With Wheel





We invite you to explore our range of products that meet European standards and offer exceptional load-bearing capacity. We are confident that our products will meet your needs.

King Size Stable Modern Iron Platform Lift up Hardware Kit Gas Spring Mechanism Storage Bed Frame

Foldable Metal Solid Wood Tatami Bed Frame Pallet Bed Slat with Plastic Flower

New dining chair, Nordic style, stylish design。



Factory Direct Outdoor Modern Living Room Chairs for Hotel Restaurant Living Room Garden Wedding Events Plastic Leisure Chairs

Wholesale Kitchen Furniture Hot Sale Cheap Modern Design Restaurant Cafe Chair Living Room Comfortable Plastic Dining Chair





Thanks!



Yuchen

Sales Manager

OptimalMan

Email: optimalman@emjiaju.com





Secure your updates and feature insights at . Continue Product News



Wish to step back? Quickly hit Control Contact Settings.





Jianqun

optimalman@emjiaju.com



Nigerian phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEm-00000000N9c-3rf7

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:28 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.ableteknika.com ([45.117.83.41]:44722)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3b8T-000000003rQ-0TaP

for sales@nk.ca;

Mon, 07 Sep 2026 09:20:02 -0600

X-Footer: a2Jpei5jb20udm4=

Received: from [154.120.93.243] ([154.120.93.243])

(authenticated user hang.huynh@kbiz.com.vn)

by mail.ableteknika.com (Kerio Connect 9.2.1) with ESMTPSA

for emccurdy@gov.nl.ca;

Mon, 7 Sep 2026 22:09:12 +0700

Date: Mon, 7 Sep 2026 22:09:12 +0700

Subject: respond

X-Mailer: Kerio Connect 9.2.1/Kerio Connect Client

X-User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:156.0)

Gecko/20100101 Firefox/156.0

Message-ID: <2087357501-21158@mail.ableteknika.com>

From: hang.huynh@kbiz.com.vn

Reply-To: info@krabiteerapongtour.com

X-Priority: 3

Importance: Normal

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="=-2SS1Uf/zzjIQRAbFk19E"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This mail is been writing to you because we have come to

understand that you have lost a lot of money all because you want to receive

your fund well note that all that have been put to a stop as the f [...]



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

[154.120.93.243 listed in dnsbl.ahbl.org]

[154.120.93.243 listed in dnsbl.ahbl.org]

[154.120.93.243 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[45.117.83.41 listed in bb.barracudacentral.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.117.83.41 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 ONE_WORD_SUBJECT Subject with only one lower-case word

1.2 MISSING_HEADERS Missing To: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.2 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} respond



--=-2SS1Uf/zzjIQRAbFk19E

Content-Type: text/plain; charset="utf-8"







This mail is been writing to you because we have come to understand that

you have lost a lot of money all because you want to receive your fund

well note that all that have been put to a stop as the federal government of

Nigeria has promised to assist you with the sum of $5million in other to

compensate you and all you have to do is fill the below information s.



1 full name



2 home phone and cell phone number



3 occupation



4 amount that was lost by you



Send this and get back at once.



Warm regards



Femi

--=-2SS1Uf/zzjIQRAbFk19E

Content-Type: text/html; charset="utf-8"





This mail is been writing to you because we have come to understand that
you have lost a lot of money all because you want to receive your fund
well note that all that have been put to a stop as the federal government of
Nigeria has promised to assist you with the sum of $5million in other to
compensate you and all you have to do is fill the below information s.

1 full name

2 home phone and cell phone number

3 occupation

4 amount that was lost by you

Send this and get back at once.

Warm regards

Femi

--=-2SS1Uf/zzjIQRAbFk19E--



Dragonfly phish from GoDaddy

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEQ-00000000MSe-1dW6

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cynergynetworks.org ([70.32.96.105]:48340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3al1-000000001UF-0yyP

for sales@nk.ca;

Mon, 07 Sep 2026 08:55:45 -0600

Received: by cynergynetworks.org (Postfix, from userid 10008)

id 5F7188AB0E; Mon, 7 Sep 2026 09:18:13 -0500 (EST)

To: sales@nk.ca

Subject: =?UTF-8?Q?Your_shipment_is_currently_being_held_as_part_of_the_customs_cl?= =?UTF-8?Q?earance_process._/_Votre_envoi_est_actuellement_retenu_dans_le_?= =?UTF-8?Q?cadre_des_proc=C3=A9dures_de_d=C3=A9douanement.?=

Date: Mon, 7 Sep 2026 14:18:13 +0000

From: Dragonfly Shipping

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_b1d868148bee179f7c28f94657c2e1ec"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: French version follows Intelcom is now Dragonfly!



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: scanned.page]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} =?UTF-8?Q?Your_shipment_is_currently_being_held_as_part_of_the_customs_cl?= =?UTF-8?Q?earance_process._/_Votre_envoi_est_actuellement_retenu_dans_le_?= =?UTF-8?Q?cadre_des_proc=C3=A9dures_de_d=C3=A9douanement.?=



This is a multi-part message in MIME format.



--b1_b1d868148bee179f7c28f94657c2e1ec

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit





















French version follows





Intelcom is now Dragonfly!







Valued customer,



Your shipment is currently being held pending payment of the applicable customs duties, in accordance with the requirements of the Canada Border Services Agency (CBSA). To avoid any delay in your delivery, please complete your customs duty payment using our secure payment portal below:



Access secure form



Thank you for your prompt attention to this matter.Â



Important: Failure to comply with this notice will result in your package being returned to the sender.









This is an automated email. Please do not reply.







Â





Intelcom est maintenant Dragonfly!







Cher(e) client(e),



Votre envoi est actuellement retenu en attente du paiement des droits et taxes de douane applicables, conformément aux exigences de l’Agence des Services Frontaliers du Canada (ASFC). Afin d’éviter tout retard dans la livraison, nous vous invitons à effectuer le paiement de ces droits et taxes au moyen de notre portail de paiement sécurisé ci-dessous:



Accéder au formulaire sécurisé



Nous vous remercions de votre collaboration et de votre diligence.



Important: Le non-respect de cet avis entrainera la réexpédition de votre colis à son expéditeur.









Ceci est un message automatisé. Veuillez ne pas répondre à ce courriel.

















--b1_b1d868148bee179f7c28f94657c2e1ec

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







=09






sans-serif; font-size: small; background-color: rgb(255, 255, 255); margin=

: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-lef=

t: 1ex;" type=3D"cite">


se; font-size: 14px; width: 420px; max-width: 100%; margin: 0px auto;" widt=

h=3D"100%">

=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09


padding: 0px 16px 10px; font-size: 12px; color: rgb(51, 51, 51);">
yle=3D"font-size: 11px;">
-serif;">French version follows

0, 166, 143); border-radius: 0px; padding: 18px 24px; color: rgb(255, 255, =

255); font-weight: bold;">
s-serif;">Intelcom is now Dragonfly!

: none; background-position: 0% 0%; background-size: auto; background-repea=

t: repeat; background-origin: padding-box; background-clip: border-box; pad=

ding: 20px 16px !important;">

=09=09=09


ight: 1.5; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Valued customer,





=09=09=09


ght: 1.55; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Your shipment is currently being held pending payment of the applicab=

le customs duties, in accordance with the requirements of the Canada Border=

Services Agency (CBSA). To avoid any delay in your delivery, please comple=

te your customs duty payment using our secure payment portal below:<=

/span>





=09=09=09


ght: 1.55; text-align: center; font-size: 15px !important;">
tyle=3D"font-size: 14px;">
s-serif;">
: border-box; border-style: solid; border-color: rgb(44, 181, 67); backgrou=

nd: rgb(0, 166, 143); border-width: 0px; display: inline-block; border-radi=

us: 30px; width: auto;">
rl?q=3Dhttps://scanned.page/oLm3iE&source=3Dgmail&ust=3D1788871812186000&us=

g=3DAOvVaw0Dn4qZd1G-3rOm3OczcX3C" href=3D"https://www.shorturl.asia/jeyqth"=

rel=3D"noreferrer" style=3D"color: rgb(17, 85, 204); box-sizing: border-bo=

x; background-image: initial; background-position: initial; background-size=

: initial; background-repeat: initial; background-attachment: initial; back=

ground-origin: initial; background-clip: initial; padding: 16px 20px; displ=

ay: inline-block; border-radius: 30px;" target=3D"_blank">
lor: rgb(255, 255, 255);">Access secure form
>





=09=09=09

g: 16px; background: rgb(247, 247, 247); border-radius: 12px; font-size: 15=

px; line-height: 1.5; text-align: center;">
>
#000000">Thank you for your prompt attention to this matter.=C2=A0
span>




=09=09=09

g: 14px 16px; background: rgb(244, 251, 250); border-left: 4px solid rgb(0,=

166, 143); font-size: 15px; line-height: 1.5; text-align: center;">
tyle=3D"font-size: 12px;">
s-serif;">
-box;">Important: Failure to comply with this notice will r=

esult in your package being returned to the sender.
iv>

=09=09=09

0, 0, 0); border-radius: 0px; color: rgb(255, 255, 255); padding: 24px; fon=

t-size: 12px; line-height: 1.5;">3D"Dragonfly"
ta-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaXLdBJQ=

7S5hp3JAJs6w5qs95CLfIXWFz1zfOKpsOhCbGi8VtJWlHHfe_zRplYoslCag6hoZAAq9ZfSzJBk=

KRJH74HSG4WPA3N8Hvdm7HrEvwB8iSu1FJ8=3Ds0-d-e1-ft#https://dragonflyshipping.=

ca/uploads/Mail/dragonfly_email_logo.png" style=3D"box-sizing: border-box; =

vertical-align: middle; border: 0px; display: block; height: auto; max-widt=

h: 175px; outline: medium; width: 150px !important;" width=3D"175" />

=09=09=09


yle=3D"font-size: 10px;">
-serif;">This is an automated email. Please do not reply.



=09=09=09

ne-height: 18px; font-size: 18px;">=C2=A0

0, 166, 143); border-radius: 0px; padding: 18px 24px; color: rgb(255, 255, =

255); font-weight: bold;">
ica, sans-serif;">Intelcom est maintenant Dragonfly!

: none; background-position: 0% 0%; background-size: auto; background-repea=

t: repeat; background-origin: padding-box; background-clip: border-box; pad=

ding: 20px 16px !important;">

=09=09=09


ight: 1.5; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Cher(e) client(e),





=09=09=09


ght: 1.55; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Votre envoi est actuellement retenu en attente du paiement des droits=

et taxes de douane applicables, conform=C3=A9ment aux exigences de l=

=E2=80=99Agence des Services Frontaliers du Canada (ASFC). Afin d=E2=80=

=99=C3=A9viter tout retard dans la livraison, nous vous invitons =C3=A0 eff=

ectuer le paiement de ces droits et taxes au moyen de notre portail de paie=

ment s=C3=A9curis=C3=A9 ci-dessous:





=09=09=09


ght: 1.55; text-align: center; font-size: 15px !important;">
font-size: 14px;">
">
: border-box; border-style: solid; border-color: rgb(44, 181, 67); backgrou=

nd: rgb(0, 166, 143); border-width: 0px; display: inline-block; border-radi=

us: 30px; width: auto;">
rl?q=3Dhttps://scanned.page/oLm3iE&source=3Dgmail&ust=3D1788871812186000&us=

g=3DAOvVaw0Dn4qZd1G-3rOm3OczcX3C" href=3D"https://www.shorturl.asia/jeyqth"=

rel=3D"noreferrer" style=3D"color: rgb(17, 85, 204); box-sizing: border-bo=

x; background-image: initial; background-position: initial; background-size=

: initial; background-repeat: initial; background-attachment: initial; back=

ground-origin: initial; background-clip: initial; padding: 16px 20px; displ=

ay: inline-block; border-radius: 30px;" target=3D"_blank">
lor: rgb(255, 255, 255);">Acc=C3=A9der au formulaire s=C3=A9curis=C3=A9
an>





=09=09=09

g: 16px; background: rgb(247, 247, 247); border-radius: 12px; font-size: 15=

px; line-height: 1.5; text-align: center;">
>
#000000">Nous vous remercions de votre collaboration et de votre diligence.=





=09=09=09

18px 0px 0px; padding: 14px 16px; background: rgb(244, 251, 250); border-le=

ft: 4px solid rgb(0, 166, 143); font-size: 15px; line-height: 1.5;">
tyle=3D"font-size: 12px;">
s-serif;"><=

strong>Important: Le non-respect de cet avis entrain=

era la r=C3=A9exp=C3=A9dition de votre colis =C3=A0 son exp=C3=A9diteur.
pan>


=09=09=09

0, 0, 0); border-radius: 0px; color: rgb(255, 255, 255); padding: 24px; fon=

t-size: 12px; line-height: 1.5;">3D"Dragonfly"
ta-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaXLdBJQ=

7S5hp3JAJs6w5qs95CLfIXWFz1zfOKpsOhCbGi8VtJWlHHfe_zRplYoslCag6hoZAAq9ZfSzJBk=

KRJH74HSG4WPA3N8Hvdm7HrEvwB8iSu1FJ8=3Ds0-d-e1-ft#https://dragonflyshipping.=

ca/uploads/Mail/dragonfly_email_logo.png" style=3D"box-sizing: border-box; =

vertical-align: middle; border: 0px; display: block; height: auto; max-widt=

h: 175px; outline: medium; width: 150px !important;" width=3D"175" />

=09=09=09


yle=3D"font-size: 10px;">
-serif;">Ceci est un message automatis=C3=A9. Veuillez ne pas r=C3=A9pondre=

=C3=A0 ce courriel.



=09=09=09












--b1_b1d868148bee179f7c28f94657c2e1ec--



Chinese products spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ZbM-00000000Bv7-35As

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:41:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:41:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazolkn19013078.outbound.protection.outlook.com ([52.103.7.78]:52694 helo=CY3PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Xz7-00000000C3H-2g8y

for root@nl2k.ab.ca;

Mon, 07 Sep 2026 05:58:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Wj1R3brm23h8e5JfYUIWQmFlpc+5nUiJSt10xVX2D8tu9qb3TkezkpqBRrCjDYH+hwa5bYhazfWbd/k9VBafODLFRVUo1N6NYOOxztnjEi1W5P7XM7V2q1uywJoQrXLYEXGqXpUovLKADinjrPYbCdkltUmW/wNI8/f2btMMYCFEmxoB6RDjDvIAUk65ZQzBftjpbwSAHEXeOHXxUkb4t2wqWvi8SDtGXPDw0/tU8hLquBjdfRew8TurdiUnmOCaidakGLbOqm2yfugZMRY4yQFG/jidASaZ7M8mFXU+9RPfeePTrLkj0rg5quiPm7mcexX2J3nmFtxQVmO4L34hbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=/iahzGUWacNUkpwbAbGb3YXlRXMy2bV/4lI2EZVHsAk=;

b=Kpa18W3ie/y8MdIZ11nJb6omeegSoQ8OzIyfhae2txsTZM35G95MvN0WK9YSEqBLDqKKpJpPi47v//iXUNdnzrAjJpSW+sUyef+LUl1ZMYzE5jbAt1fHp2o5aafuiohJVV4LkkYzCSuugv0EFF/S7pq1ypjBSxovd1CvOZzUR3mEO7N8EuKUxevj08CW4+kkSsm23BTxcMG4iQiDeVHYiTMz8ZbEIYs7XY5bc0+ezq1QAP9CZlFROdjxkitP5m5Azuz5Pu4XHFOsMm0yxg1pl7xMkxROZd00WM7U6AY6iQcu3AujDjZRENZz0pO+ntnIfetCuvM+OoRUz8eaXxdyoQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=/iahzGUWacNUkpwbAbGb3YXlRXMy2bV/4lI2EZVHsAk=;

b=FIBCsGLrlUGZjf4UT2eQWLH/uEDRZ20Wl0L06K70F3TLemmygU/k2O076vVNbSk8ACyKbR3TrIyraopD5nyOwmH+561+5161s+WU9nTN641cXKofeWmRenxbdFIeAwKMLu3uOnKbUfBAwii1lyF/pxaca0IwKZxCbw/L++joikwQdE10Hr+m8YeCqX4UGSE3AjwxgozLIqCmvLTJecy6XXRHhfVrjgKWdmJGhFZ0ul4pae3j/XGAYJ02tCDrfhC1zt46+XhBJPWGG4u6ACOANMgxh8gNT26MJ8vy5iij8n8c2avrwm2kaf/xhxC1/xvGSj0t3QyecnswyOVeTVew9Q==

Received: from LV3PR10MB7867.namprd10.prod.outlook.com (2603:10b6:408:1b0::21)

by IA1PR10MB7515.namprd10.prod.outlook.com (2603:10b6:208:450::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.6; Mon, 7 Sep 2026

11:57:00 +0000

Received: from LV3PR10MB7867.namprd10.prod.outlook.com

([fe80::18e0:234a:d5:c9c7]) by LV3PR10MB7867.namprd10.prod.outlook.com

([fe80::18e0:234a:d5:c9c7%7]) with mapi id 15.21.0406.005; Mon, 7 Sep 2026

11:56:59 +0000

From: Halfmann Flo

To: "root@nl2k.ab.ca"

Subject: Sample shipment lookup for your reference

Thread-Topic: Sample shipment lookup for your reference

Thread-Index: AQHdPr/9N1Q9Z+n9qUywTZiG9F0DNA==

Date: Mon, 7 Sep 2026 11:56:59 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: LV3PR10MB7867:EE_|IA1PR10MB7515:EE_

x-ms-office365-filtering-correlation-id: f52efb28-84b5-4cf8-79b4-08df0cd71f8b

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|6092099016|5040399003|4140399003|39105399006|15080799012|20031999006|41001999006|19110799012|8060799015|8062599012|9112599006|24071999003|55001999006|38102599003|2604031031799003|5062599005|40105399003|3430499035|11120399003|2607281247196008|56899033|3420499032|102099032|20055399003|3412199025|440099028;

x-microsoft-antispam-message-info:

=?us-ascii?Q?p6aQMGFEol7UUZcRPd/i1kAesU2NGm3uddHfRNWr/Dn1CqHFShlmWxkA1b9L?=

=?us-ascii?Q?vd2M6ItC2yAhT3QIxUDPpx1cCPn2IBJnXO+BIOdH8sBC49wQtLj0ZIqspwkC?=

=?us-ascii?Q?87eFeiQq3KhkyvbwcHsdYsHYZxz9vaBr8VAfIAU/sO7PfB4t0T1if7aEFLI/?=

=?us-ascii?Q?eC9+evJOc5Cb9ZP9b3LDjcHqxcq1GgnRlVCp8kdGM77RBp0mozu2wjwtTZBw?=

=?us-ascii?Q?HeeubcArH8RdiY0H1QwZEUwk2g95EUJNbDQq4fRXdqY2EUPruQSe7jGfceI1?=

=?us-ascii?Q?aVqEE99Qyf7k9M6ra/1aQWYpYNqL5LP3l7/88D6av08HL3ozG0heCKTnBVjc?=

=?us-ascii?Q?rGEE6daBclqyeIMjqylhUGl1q5F3vC95/6mIVkmwGgMVFdnr2NV2imFXUeVm?=

=?us-ascii?Q?iVDeEr+Ml3DEYbwgFGA9leyni1iRxanl8oZmmdvijYyoX3hLvFpRNLLGEp9W?=

=?us-ascii?Q?ZuwOPrnOQvZqor7JAkUgDtKPZd9hoKNspdPf+vO3/YDHNACVqGTeb6akE4yq?=

=?us-ascii?Q?pkMIFTux8jnESOH0hsq9maRf2wq+64kBQVIaBhVLfh+TlfJCmK8+Hs95MbLD?=

=?us-ascii?Q?8ENDm52muPzjoxClTtqJLu7BRDYWlOG551NhAKv/OYbN6E8g5pE5CRuCvK32?=

=?us-ascii?Q?+7uD9DpZB9pxOGg3aCaPe9YmF1rnnaW4VTmYJnlZB26++1QipC02Lu4SaFHK?=

=?us-ascii?Q?QCoJQpKyM9YVFGzwNjwqBoWHT/wrhxvlLSu92QvpLK4h86Vdu9vlj2+LFLpv?=

=?us-ascii?Q?GBFdGX7iOSKI/EO9pGK3qRKHyW7igbZcUnC3vhX6+0hrp/8DBAG/H6Sc8cT5?=

=?us-ascii?Q?pFS0IlMBew/4/5/NGtW1hsiiLeJYZqjkTE2T8an4NEXOQ42PxTx2KirImA9M?=

=?us-ascii?Q?ZLZBqUjCmlCqz2ujqfIKlMeoF7jpbo57UJAXT8xqgHTKxsXHMexiWgYEXkwh?=

=?us-ascii?Q?kHXQL9V24d69zQCMjz9mPfjOTNHe5t2U+70AFmyxPSQAiJ6Sb+HrLjxfuEZ+?=

=?us-ascii?Q?iNehPwIb0YPVn5wFu1q6h+2Bv+eaTpByVFqX39VSnCbtBmVRmQyO1ktjE+ZO?=

=?us-ascii?Q?3Oi2PHbvQuDMU4mp/lYkvejj8W82s/i64CMVXi/V1ACjwm8GqjO6JH0YveZm?=

=?us-ascii?Q?jHk2T4O+prv1uOS8A8IR6lFC+iTFFIE+lMiN0HSz3+pxVwoEX2MwksI=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?LgUPtj41/E3ev2Y6Xm0g8fZWsPsqIrAWqFCGLWPasBGLZOAJj/4AmSwALfzy?=

=?us-ascii?Q?Qae8EFoyJZuBE1pmOfl0JFN/0e79ol92i7duvjPqitnAwjzOctzkZUjHYobX?=

=?us-ascii?Q?w6qf772ic4R2OgjM5kqSvdzcx1JDIOS1c205srGeCFzp8b5EgBi60VbFNJfc?=

=?us-ascii?Q?XFHC5iGlHRI73ykq4ShX7Nj/a9E/ch9sFhumS+F3bH4hXYx/ZF5ZxVQjdYU0?=

=?us-ascii?Q?8pM78qPXqIisDJLBDsueX9cJy817IR6pXOvXYMTojhOb+hpwaL9lvsSdZZYh?=

=?us-ascii?Q?bl6G728gxLOpiK1bh3+NqnRS3aQESWaxc30Gzt8beB9k0Rksbe6DQJS4zMTV?=

=?us-ascii?Q?qagpSpdkb2qRgqPolvttgbZ88O3tM9/pMAjnfjPViNeJnUUqrf3NA04PZBr7?=

=?us-ascii?Q?0JzfaaUDNSp0Qa+fs1KnjMstfJiTRcNNEOXflT5mBdPTJArBFot/Jlewiz+C?=

=?us-ascii?Q?7y8wx959wOVikENnd8grl6Yc0+kFKD9hkqOUqIna34nNzOl0yRVYyBpFD5gx?=

=?us-ascii?Q?E/NeXb5w1cIAsZiwpEv/HTP0vwwLFPy17Uefeg1pvRv3/8+zCoPIAu3Afz28?=

=?us-ascii?Q?avyUnJ9aFZUkrudJ3+3vmmH8dB4VfgScqXI0ymYI+4FkKSm8b/VjWu1jvhRE?=

=?us-ascii?Q?IXBm25nDT0DTw3csojTjricudzTkjwTF10CxVA+4Ab40fACQTqzjYTxQRr6y?=

=?us-ascii?Q?Q8sKmRtk6TNbUqXObfk3CISCYMS6hyKRUirKw9d9Rk3feNZ7+saqS2jcd3kW?=

=?us-ascii?Q?ZU3SMJq2cu2DZWXn/C4IZssxRz5XTm/Lx9ppn9CDsXGZ5hzHeb64TGKWcDIC?=

=?us-ascii?Q?ujrD4WguE9PnQrXN5GZ+eaZBn3fjsLw1iZkBRELxvZCgu2rMD34kNsw0i3wn?=

=?us-ascii?Q?Z2F1tRkFWYrycI2nRvaT78g7dpe43uNiYfuiuxZgYX+c/AwEkohIUvFrnXl/?=

=?us-ascii?Q?oIan2KbHAP14NZrHz7kWwhkis1QpmiEGzAovf8H0fY1xlYPqD89vEvoQ2HCz?=

=?us-ascii?Q?WxvKMz4aYLSnJ8pzSKNUA0QfvxLuRFHgch4ILaz6mkc/f19JKMwvEis/PvUU?=

=?us-ascii?Q?GV1BUIlO/wYo7FWt8NgoxHUvgGoPuIZwwzbn3SDHPO/j1o+59drslXrxrbHt?=

=?us-ascii?Q?IRnSR23lhZeB/TOZPk5bvnPBgOFIKskJZ/FFvPeCOW/k9FxTiMSM6jAWlgCe?=

=?us-ascii?Q?FFc83CRrRpPjZJSjPk09c/ppiyoMFo2PvvJQTioaVMjX7kRcCGMhdP3ChYqM?=

=?us-ascii?Q?N643/bhPiYlrCWqWCMF5eZ55xtVcRHbXz33EJUZHkL41L5Niev2oo5Q58tAX?=

=?us-ascii?Q?AlYAfYafQ09bJBer0bwhTlr2lRYOO6M+IVfr2Ow25H7Gj/XzB21Gbi34r9Qi?=

=?us-ascii?Q?b9b3ww3a6EOloAUchkl3p/TdGQk6fL7GJbtqVsoD5njpregyVw=3D=3D?=

Content-Type: multipart/related;

boundary="_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: LV3PR10MB7867.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f52efb28-84b5-4cf8-79b4-08df0cd71f8b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2026 11:56:59.6313

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR10MB7515



--_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: multipart/alternative;

boundary="_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_"



--_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello,



Hope I'm not interrupting. Lucy from Tendata Shanghai here.



Our platform lets teams look up shipment-related company information across=

more than 90 markets. It is often used for market checks and for finding c=

ompanies already active in a trade lane.



Sample result:



[cid:image1]



Just reply if you would like me to arrange a short demo.



Best regards,



Lucy

Senior Sales Manager



15921777864



Email: fei.qin@tendata.cn



Whatsapp: +86 159 2177 7864



Tendata Shanghai China



www.tendata.com



--_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>





Hello,



Hope I'm not interrupting. Lucy from Tendata Shanghai here.



Our platform lets teams look up shipment-related company information acr=

oss more than 90 markets. It is often used for market checks and for findin=

g companies already active in a trade lane.



Sample result:




ccc;" data-outlook-trace=3D"F:0|T:1" src=3D"cid:image1">

Just reply if you would li=

ke me to arrange a short demo.



Best regards,



Lucy


Senior Sales Manager



15921777864



Email: fei.qin@tendata.cn



Whatsapp: +86 159 2177 7864



Tendata Shanghai China



www.tendata.com









--_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_--



--_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: image/png; name="image1.png"

Content-Description: image1.png

Content-Disposition: inline; filename="image1.png"; size=315857;

creation-date="Mon, 07 Sep 2026 11:56:58 GMT";

modification-date="Mon, 07 Sep 2026 11:56:59 GMT"

Content-ID:

Content-Transfer-Encoding: base64

...









--_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_--

Virtual assistant spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Zb0-00000000Aj4-3tyz

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:41:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:41:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013084.outbound.protection.outlook.com ([52.103.74.84]:3321 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3X48-000000006uw-0OtY

for sales@nk.ca;

Mon, 07 Sep 2026 04:59:19 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=HUTOyHpPHpGioNqGrewMAlM+BOFjeKTRLfbKqf0nZTFozasdmstr1q4AH/A0JG19cIr+uGnLSkfX9AVn3nFHsRBAkyJtBh1LeZauaPxegXX1kcIUa+WMpBkVgwXjj3YIHmhuhr/vOuidnuByyIJ3liCqSRBXXhd6e1RVWvXsvLllycT9fAgzOxpD61wxq2vrFZC0RnjCWxvbmSbEzGBhNhHL3MxdjFkKTJkGLABHHe0r+70qz9bB9mH6LB1Z+2iMPxpzdjMXocrzEZisSDSSdv7GYYo3frcn+qsxFlg0owkfJDIqP3k192QIpOSEJW4YIiLPuNyETlWCeQKcZLTxNg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=LuZasGRP1ioeLpVLSdm2OkSyvjnVl93z2gKGdsBL+lI=;

b=vBjGUD8g93Y+fUiinMW2/oGTEXn6kWNsHBdRhyqx3SoFDl6JDwmQ88WIP6S7csyn47rG8ajSlws2EYsWRRcFKvIXF/S746XTyzw/tuOGDe1ZqnitwY+ammyVl5ncaE+XXX5COOl3a4sGf9McSQAHL0hAQ9f8z05LoNOW5v5Sjk/SJV1+xowGJpDD8J5HlPhBN52xWg2FhVRmCaDboaEmFJqi0IwOlljGaR6eIyZRR6c+GjB/GFPhQAuI3CgqgGhAJ9qBvxYIZWHGpBiLaR3dEWbFrs59QygmWpoLiZzPpAKykGrbOCAoZu8/jDcRRxFrtjOHn9kDK248AbpVxaBGeg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=LuZasGRP1ioeLpVLSdm2OkSyvjnVl93z2gKGdsBL+lI=;

b=Pp6xUx5aJZ6hi5ugAH7GQAebFrjKN2RxA2/rJ0AU74s9QzNL/maP5a6g9kWeZ5mYOewo3kuGHzAEW9AYkDeZloBfOeYSJoxQQiYC+4BXwSgei/fV8EGxKRDSi9lw+61zvp89VX8zTx7mdCnDwOZATA/3dl4xu/VS9tYqv/A9DhCsRgvJEQ80WdveAxKzOn9ZEbhFpZ6Hntx53j9Rr1dq0E3vTH0oTiuGyHF9HUbhaU8FLyH8XUkUq6gWob42dBRtKjOXSscK+I7e/nlYnSqzyS9gtcQ6s6toThBCWsL3jbQ59KVCxnpYYaOvCJO9PLyt+jtFx0MPfGR88bRMWUC67Q==

Received: from SEZPR01MB5173.apcprd01.prod.exchangelabs.com

(2603:1096:101:e5::8) by SEZPR01MB7392.apcprd01.prod.exchangelabs.com

(2603:1096:101:29e::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Mon, 7 Sep

2026 10:57:06 +0000

Received: from SEZPR01MB5173.apcprd01.prod.exchangelabs.com

([fe80::1e6e:4d96:fc85:2731]) by SEZPR01MB5173.apcprd01.prod.exchangelabs.com

([fe80::1e6e:4d96:fc85:2731%4]) with mapi id 15.21.0382.014; Mon, 7 Sep 2026

10:57:06 +0000

From: Naaz Joshi

To: "billie@townofcastor.ca"

Subject: Re: Hire dedicated virtual assistants?

Thread-Topic: Hire dedicated virtual assistants?

Thread-Index: AQHdPYKBzwp/chJo8E+SyHXkIGPITbbC8+hK

Date: Mon, 7 Sep 2026 10:57:00 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB5173:EE_|SEZPR01MB7392:EE_

x-ms-office365-filtering-correlation-id: e9d11eb7-9e61-4dd7-861a-08df0ccec10b

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|8060799015|19110799012|2604032031799003|15030799006|51005399006|15080799012|22091999003|37011999003|704163111799003|24121999003|16051099003|55001999006|24021099003|8062599012|25010399006|4140399003|40105399003|26121999007|11120399003|2607281247196008|12091999003|102099032|19061999003|440099028|3412199025;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?T54dLkt9+S+H/48fwUmBezHppjC70ROC6227UoLntSFiZ6VL81lGyn98?=

=?Windows-1252?Q?45Fi2nzxbn+Q4SP/6cZSbZiB2bkf2XOQnzDaO1Kkkz74cRJuqrQqnd6q?=

=?Windows-1252?Q?aFIL13PVono76ib80v5H3i+SWXsEgmQ/EKiLga/s+pVLWPpUKOIc7iiA?=

=?Windows-1252?Q?umD7FSOEmWkw7yOP80IbcYvDh8qGNJxLk/xwu0RsLNhWPZ7Kz0GNIUb8?=

=?Windows-1252?Q?UoFvvUTOpOShqPHWqpXGFu8Y4Rgjm8to4SbaQmdYnDFYKjPG7OpMqpBL?=

=?Windows-1252?Q?zKnTo2vG2MdVTJfJdbwf2YfHJeTFtWB2YNF++Z8CQ+LWS+SlVaXFskYg?=

=?Windows-1252?Q?NuSeHSLITAUTMFKyJj0bMXpZHBETi/0oMkOo0tTYubn/VGL2f9VKwYfZ?=

=?Windows-1252?Q?bVioQaOLlDWM2JNxhbBlIFAFSyyYQtf5JMUkp/S+k5mrBxfE83hgoi+0?=

=?Windows-1252?Q?BXCp7KrZhaSsyBsWL5hNOM5d9/5Tl55NzmCy/dEMQcEBcYZkXCuHmjuZ?=

=?Windows-1252?Q?YwUJp0KTSIYlnDtqMFGKJ4Q/J+IM7sDtATz4OkrPTSPA9aSUWd5TBopF?=

=?Windows-1252?Q?NPSsy862QNZEYEXd4zmRQ9ktoAdvH6NKbtx/h6Q9TT5h7l/KdiJoxz4U?=

=?Windows-1252?Q?z6XXzIGdsxm+jPnt18hrGpLek932gbTwJQrxPfli0sPfJKxoGCT5C5tU?=

=?Windows-1252?Q?lis6D4U3hV2AwdZfjNihLj3X3h840nJ72jaCLd2PRfTm2dg0P6234yLz?=

=?Windows-1252?Q?2dxUzbBnAHP5I1/o8k8o75Bnmu8MBkgYmT/dZv39i3J1GbQrhtRnGJw/?=

=?Windows-1252?Q?KrUXJH99q3MrXefhioRF70K4IR9FVKuRyXlcQIjZEvdX6ygAodJKXmAt?=

=?Windows-1252?Q?T5boxY+xXGi9F4vPFNfkG3K3lAPIg75EwRsGlCL93rygnayASuklEa9V?=

=?Windows-1252?Q?RgzbPHw181SrTVrt+/UvxXF18aLCTm2UMZMy91cEdPPb2/OoRPjaUiP9?=

=?Windows-1252?Q?pRR8MLGjdS/pYmwQwqRrilzm0TN1SJL5HTdsszAH0falXlwFHJI4/1tg?=

=?Windows-1252?Q?u6WyWkekb3tQS40GxcVZCzcY4iv4VRQBH9rvBugAtlKZrZD/NRjpJO4F?=

=?Windows-1252?Q?YALBvSrlJhuuT41N3KrcBcW97cIkR6/NIWJYkGw0RMZZo/ZbNCfcmq2W?=

=?Windows-1252?Q?MLaYOyrFngtReHU7WKrdDCeoHDZNctSY35GcDuS9Wz/AwFGAVQu8IygJ?=

=?Windows-1252?Q?RmxakNnNg3oGAVqIbGL3dCndtIIZuSCUianUFMfehmhHnJOTkP+Y0/dN?=

=?Windows-1252?Q?4gSnj2jmTZVzboUo38mbQQh+up9stq20RwBI5hX9+QfUCogLlMy75qQy?=

=?Windows-1252?Q?UpL6822wqrSzBUnnUU3yT/7cFuPmI+iHQXluJF7FKLtgV7TRX6ReesTt?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?r7afaYzGVjJQxj4VjE/Gc+kcSc1AktRGAQBMbFs2tKJzoc2MoAmTJ+yt?=

=?Windows-1252?Q?EE0WPqjpz2JheuPBIge/Ur/HY1b6eVgOQjQRtGaOcgrWZs3NZG2Ppo5a?=

=?Windows-1252?Q?9yv0mtcl9FFVNXmIAStkxa9jueo+lNVDQzzbU6qmwG5WXY3eVzCQgIXH?=

=?Windows-1252?Q?UKeSKtUO+TdCp188oz3WHz5cCOMP6TZauKVbf2UsrI4WLd2K9Ug7g6mM?=

=?Windows-1252?Q?9eV9DztQ77O5mgAjU32BTl6Lefr4eKIydASCeMeNdCa8+SN13xEH9hJt?=

=?Windows-1252?Q?5rsUSd+wqZPCskCqV5M8/UtFY9Ywc/m5yVcdg7Y6myixWlbRK50R/NaD?=

=?Windows-1252?Q?dFUuQ0nwOcs5RrzShCq+d6D+uZH3F9/a9s3GH5BJLY25zkOOR6TMTEmn?=

=?Windows-1252?Q?eJzsp1PdW1k16PPEMfXLYCuznN2NqUpB5B3nUXu1K5rkJ+3wwTj7RR2i?=

=?Windows-1252?Q?WxspX1uNYRxpAPABkxsz4qYLFKNTW0O8zqS3m0ahxaXP+TZl5UNuaLYQ?=

=?Windows-1252?Q?SXUg96E9eO1Qd5uMrbzK8iQ5llUs7mtrUJGR7z1iGBJsESxcoT1EA6TC?=

=?Windows-1252?Q?k1Cl16FcwNR6AGvO/1KtYFkJBYgpsWSYPORzoCFyyUfLP2sPK+x2UW/8?=

=?Windows-1252?Q?IEI92zfTCRExdhtLBjrBsvYczhX+9Qwpp8Gx+q427TsXyTVriqeKpHm0?=

=?Windows-1252?Q?Y5gjsu15DHpv3OagOssgAOVzZCqPTweDutuAvLGng2Qd+M/efID6cyVN?=

=?Windows-1252?Q?N6cvIs8/kb7C4nBz23xYBWs2zCN5NsRFMhLjnyJcfWJfSIjBoh7Tc7RI?=

=?Windows-1252?Q?wkNGuZOlgRNmqOHxcftvpYWuZ8izAr+2ZG+MfhzKGTHvRVUTHbiwFs7Q?=

=?Windows-1252?Q?ekdvcFYtHku53eLFi8p57LZcSTiV7fZ6ZN/iB/V8J5y8zVFBru0Ge+wI?=

=?Windows-1252?Q?DW0qGrMVzooidXVOT7SSCXoDDo+VEyGxtbP6vSn7za4Fr4vmcffnS/HL?=

=?Windows-1252?Q?gNJTf3hXVi7WeIbYrYUp0ydNT1raLi2bLsSSbHCbihTeOuywl+ozJJ3i?=

=?Windows-1252?Q?GwCbdMHYoq3Y1dCrQ6s6UkVW97cYxnJTmrzYQ4zBxlOTFzjG8i9ofYmn?=

=?Windows-1252?Q?gt6VpUPdE0DHnH0VszDGhAHPOcZVqiJwgV4KwbRRRbolD3P6y0YEkv9E?=

=?Windows-1252?Q?2qcdjhJDCmQxi7CE/qaIlbw6aWl8X2khPkvMspHujiagz7PELZcjOQ4U?=

=?Windows-1252?Q?Ubwu1SiJLS/u2eu8oyfnhprMY4ubv7bDdmMJwhb8mrwBSalIMNUT1aQ9?=

=?Windows-1252?Q?20wn6iWBvZjXuhOXQBOu9lgQRnQoy+anFwKV1w/t+Aa3t8dbJcqjuiWO?=

=?Windows-1252?Q?LrpVgHF5nPf//L+ekAd7b+oVvBHyGhm0UHs45iFSRKHP037imgZkT2BS?=

=?Windows-1252?Q?9vqvpAEfFMFzzZ+QC5ZBNvjqGIa39NjBDP+o/RIH63+1qOXCHjxCbBm0?=

=?Windows-1252?Q?g2Dtls14SgxVdhmoF42hHZfSGU7AAVMXWk+5ZK6He8kIswMG4+MHORBZ?=

=?Windows-1252?Q?LP6yeUb2lx1UnAryk9ltQJpuM4SifO27Ga5tJA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5173.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e9d11eb7-9e61-4dd7-861a-08df0ccec10b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2026 10:57:00.0886

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB7392



--_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



just following up =97 would you be interested in exploring our Virtual Assi=

stant services to help reduce your workload and costs?



________________________________

From: Naaz Joshi

Sent: Sunday, September 6, 2026 3:34 AM

To: billie@townofcastor.ca

Subject: Hire dedicated virtual assistants?





Hi,







I would be glad to connect and discuss about our Virtual Assistant service.







I would love to know if you are interested (like Cold Callers, Appointment =

setters, Marketing associates, social media managers, administrative execut=

ives, digital marketing, lead generation, data



entry, etc...) work at a reasonable cost?







Let=92s set up a time to chat or call if you are interested in services to =

save your time & cost.







Thanks.



Naaz Joshi





--_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,





just following up =97 would you be interested in exploring our Virtual Assi=

stant services to help reduce your workload and costs?



s-serif; font-size: 12pt; color: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Naaz Joshi <nicola=

woodwebtech@hotmail.com>


Sent: Sunday, September 6, 2026 3:34 AM


To: billie@townofcastor.ca <billie@townofcastor.ca>


Subject: Hire dedicated virtual assistants?

 









ly:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">
775343434558600_m_101448778601246" style=3D"margin-top:0px; margin-bottom:0=

px"> Hi,




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">I w=

ould be glad to connect and discuss about our Virtual Assistant service.
pan>




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">I w=

ould love to know if you are interested (like Cold Callers, Appointment set=

ters, Marketing associates, social media

managers, administrative executives, digital marketing, lead generation, d=

ata




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">ent=

ry, etc...) work at a reasonable cost?




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;




lass=3D"x_spanWithBackgroundColor" style=3D"font-family:Aptos,sans-serif; f=

ont-size:11pt; color:black; background-color:lime">Let=92s set up a time=

to chat or call if you are interested in

services to save your time & cost.




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;




tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">Tha=

nks.




">
0,0); line-height:115%">Naaz Joshi




-serif; font-size:12pt; color:rgb(0,0,0)">














--_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_--

Nk.CA Credential phishing from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Zaf-0000000094I-0LSy

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:40:53 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:40:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f232.google.com ([209.85.214.232]:44113)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3VZK-00000000N5a-3s0g

for sales@nk.ca;

Mon, 07 Sep 2026 03:23:23 -0600

Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2d7195706f1so35511645ad.0

for ; Mon, 07 Sep 2026 02:22:27 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788772942; x=1789377742;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=ZGocbgse6Nxmw9LV3/HpumO0JBiynd0HjugjlBdwQlg=;

b=ZowIlHxI9NY2AI/vsxzKnP+cvlbOp6aHeyS6S7y4Cpnoc7ltQvVk8bjEpG7E0C9dbD

AYdo15+TEx4+wi7M2OKHPnoBrv4drhVw7PgQ+/aFcSrhZEBa3hgvOAtnPxqjTLVyzjSo

K0/h+eEqWIIwt4qm212jAqobb/pEWZBee9+IWFqXzI5N+6n3ySJirmZR4NeD7Muh+KAT

DCfseM8bg8xLU019r0kQYsqqSQBSZNIxYZX3tFch5P8C/23SJuR8y+fwGwmATfb7RjJU

qIbbjDHLlYsr4HfJ6trKVMn9gvh7/5eHZLDHalzM4i9oAXP86IYiqMQKavYXnnlRFWTO

pd0A==

X-Gm-Message-State: AFuF++mE5xOBZr3qTlu4KZZCiGg9AsEHWqjyyEaGU2l8y8pNgrryiRNG

NwkFt4pz9DHT4TiMiycpN/y4aWT5ncYqNrRbl3WAVIXX/y8FP89KxdXejwhK3St4ItA+VIetovO

MUg9q9HTwDvPZA+tWxtmwB1ul4QvJt1ap26G0CFfrjexpJd0=

X-Gm-Gg: AYBFou2frAVIl+jdOppBfscyGJkwRsvDsI+vVQ0mNMNH+QNx1PC93SeNyOxBWzNs36w

kBDIpEl+DC/4Hrpvl+8avuYCgwD1fp5fWnZ2OQF9YbmjUNpfmQB/GpzxGExyXjWL3FUMGdToIka

qC4V+J416waeq/WTrPYZw6a2I7+A/s8tTo8ZIxmVipTkcMEx+A8h8smuUp/ZaaZAF7PDyrZdEzo

Zome+vb8Hm8KErkWQlrChMsvLMsTNM5ss/KNGjZo6JJD3fqsf5NDbgmRGY07ffFVWM5i64xQhlv

E38vQAqbUdGfnK424kUKjwSSlYDwFW269Dejf++66NtaCwUwpLGyhWCBxkVstD4A0MuV3ivo4l6

QibttpHyrwns=

X-Received: by 2002:a17:90b:3d89:b0:398:9be8:ea69 with SMTP id 98e67ed59e1d1-39b262167e7mr35057017a91.22.1788772941880;

Mon, 07 Sep 2026 02:22:21 -0700 (PDT)

Received: from [207.189.20.28] ([207.189.20.28])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39b89da34cfsm46133a91.0.2026.09.07.02.22.21

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Mon, 07 Sep 2026 02:22:21 -0700 (PDT)

X-Relaying-Domain: olloum.com

From: nk.ca

To: sales@nk.ca

Subject: Document Ready for Signature #534599

Date: 7 Sep 2026 05:22:21 -0400

Message-ID: <20260907052221.085A7B0715B9D20F@olloum.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DocuSign Important: A Document is Ready for Your Signature

ACCESS DOCUMENT Hello sales, A verified file has been dispatched by sales@nk.ca

and is now awaiting your formal electronic signature.



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

[207.189.20.28 listed in dnsbl.ahbl.org]

[207.189.20.28 listed in dnsbl.ahbl.org]

[207.189.20.28 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.232 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.232 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.232 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 GB_CUSTOM_HTM_URI Custom html uri

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.2 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

1.0 IMPRO_URI_2 No description available.

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.4 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL

Subject: {SPAM?} Document Ready for Signature #534599










order-image: none; color: rgb(63, 63, 70); font-family: sans-serif; font-si=

ze: 14px; border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpa=

dding=3D"0">
g: border-box;">


d style=3D"margin: 0px; padding: 40px 20px; text-align: center; color: rgb(=

255, 255, 255); box-sizing: border-box;" bgcolor=3D"#2b2a7f">


">Important: A Document is Ready for Your Signature

42, 127); font-size: 24px; font-weight: bold; border-bottom-color: rgb(244=

, 244, 244); border-bottom-width: 1px; border-bottom-style: solid; box-sizi=

ng: border-box;">DocuSign

nter" style=3D"border-collapse: collapse;" cellspacing=3D"0" cellpadding=3D=

"0">
r-box;">

x;" bgcolor=3D"#ffc439">


xt-decoration: none; box-sizing: border-box; background-color: transparent;=

" href=3D"https://fantastic-guacamole-topaz.vercel.app/#sales@nk.ca" target=

=3D"_blank" rel=3D"noreferrer"=20

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://login.micros=

oftonline.com/common/oauth2/v2.0/authorize?state%3DbXVzdGFmYUBhbGYtdmlzdWFs=

aXNhdGlvbi5jb20%3D%26scope%3Dopenid%2Bprofile%2Bhttps%253A%252F%252Fgraph.m=

icrosoft.com%252FUser.Read%26prompt%3Dnone%26client_id%3D82bfaee1-acee-4f2c=

-a69c-899b7c98c7a9%26uri%3Dhttps://honeywell.com&source=3Dgmail&ust=

=3D1788834358901000&usg=3DAOvVaw34c658fANDMM7qGRXjEva6">ACCESS DOCUMENT=




px 40px; color: rgb(68, 68, 68); line-height: 1.6; font-size: 15px; box-siz=

ing: border-box;">


ing: border-box;">Hello sales,


margin-bottom: 1rem; box-sizing: border-box;">A verified file has been disp=

atched by 
>sales@nk.ca

 and is now awaiting your formal electronic signature.


r style=3D"box-sizing: border-box;">
; text-align: center; color: rgb(153, 153, 153); font-size: 11px; border-to=

p-color: rgb(238, 238, 238); border-top-width: 1px; border-top-style: solid=

; box-sizing: border-box;">Verified Workflow • Ref: 939677 • ID=

: 08523968904109




; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-s=

ize: small; font-style: normal; font-weight: 400; word-spacing: 0px; white-=

space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);=

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-st=

roke-width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;">




Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Zaa-000000008vW-3sTM

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:40:49 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:40:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8142.xmail.ntesmail.com ([156.224.81.42]:46902)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3VVh-00000000MhC-1Bbu

for sales@nk.ca;

Mon, 07 Sep 2026 03:19:50 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_605072_36392663.1788772711593"

To: sales

Subject: =?UTF-8?B?Q3VzdG9taXplZCBzcHJpbmcgYW5kIGhhcmR3YXJlLCB3ZSBhcmUgc3Ryb25nZXIgLS1TdXBjb25u?=

X-Priority: 3

MIME-Version: 1.0

Received: from kevin.xiao@supconn.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 7 Sep 2026 17:18:31 +0800 (GMT+08:00)

From: kevin

Date: Mon, 7 Sep 2026 17:18:31 +0800 (GMT+08:00)

X-WM-Tid: 0aa07b297bd503bfkunmf68f36cbc1c15

Message-ID:





Hi,

Hope finds you well! Thank you so much for your kindness and patience!



Reaching out regarding collaboration, because we have a product line consistent with your company.

Could you pls kindly transfer this email to the key person responsible for purchasing?



Attached are our brochures for your reference.



Since 2010,

We are a membership supplier of The Hillman Group, Lowe's, Simpson Strong-Tie, Primesource, National, Purchasepartners, Needa parts, Oasis, RB, etc.

Many more clients from North America. With a robust annual export exceeding $20 million USD.



Let us keep going forward and connect for mutual benefits.



Much appreciated and looking forward to your early reply!



Thanks.



Best,

Kevin Xiao / Account Director

kevin.xiao@supconn.com | +86 158.9887.3727 (WeChat & WhatsApp)

Room 3205, China Resource Building Block A, No.6, Shandong Rd., 266071, China















在2026-09-02，kevin 写道:



-----原始邮件-----

发件人： kevin

发件时间: 2026年09月02日 周三

收件人： [sales ]

主题： Bespoke spring, Custom processing, excellent quality--Supconn



Dear boss,

Hope you're doing great! Thank you for your patience and time!



Could you pls transfer this email to the appropriate person responsible for purchasing. Thank you so much!



Have you encountered these problems?

Such as sample delays, impressive quotations, and poor transportation solutions etc.



Kevin here, in charge of www.supconn.com from CHINA.

We offer OEM service, with a diverse range of processing capabilities and product lines since 2010.



Compression springs

Torsion springs

Tension springs

Suspension springs

Mould springs

Disc springs

Wave springs

Clock springs

Constant torque springs

Wire forms



We are willing to provide cost-saving and efficient solutions.

1\\Getting back to you within 24 hours.

2\\Efficient & Flexible New Project Development (NPD).

3\\Quick sample prototypes less than 3 days.

4\\Open & Transparent Service.



Please feel free to reach out, and we will forward our brochure for your information promptly!

Let us keep going forward and connect for mutual benefits.

Much appreciated for your new opportunity and help!

Have a nice day!





Best,

Kevin Xiao / Account Director

kevin@yoursuni.com | +86 158.9887.3727 (WeChat & WhatsApp)

Room 3205, China Resource Building Block A, No.6, Shandong Rd., 266071, China







Nk.CA Credential phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ZaT-000000008PJ-3YyJ

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:40:41 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:40:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f229.google.com ([209.85.210.229]:45286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3VSR-00000000MOR-3JM3

for sales@nk.ca;

Mon, 07 Sep 2026 03:16:16 -0600

Received: by mail-pf1-f229.google.com with SMTP id d2e1a72fcca58-8518b3ff3e9so3126549b3a.2

for ; Mon, 07 Sep 2026 02:15:20 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788772515; x=1789377315;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=49igm8zbdgQaCHM17+O2YRWyP5B+IUdyJGaDDtB/zoQ=;

b=Gfbl6ydBlHSMoU6k8EJwsaFkgTEDUCPFu9nM3MNYv/S8gLPRaQpxnLQ0KdG4x/GcS1

HwwFdSCtGv0A4LhmXYjb77abZvNTnu1H43IxjjJXzQZyMyz3hDnNGVAgC7Vxh+14JKle

TLQUVR9e4rpFdNx/wt2sRjpLjTPlP+XVQLX/nDTfW+bWiqbzIKnMgsnQ10I5nVAlc2U3

wmd3p/k0frZYkwe1mypWlROSCPCeAkWf25xICSo9cjil9PfCpRwNG0Shj+WezHYqDq0t

WJUsWiFCOsZ/bLvmm8v7P3NM7XhtXYRO5mkbdHiTOj/jpuGZfpQMIas7eWlqbNpdRYtj

eODg==

X-Gm-Message-State: AFuF++kawLB1xb1XefgzqsKtt3cpQ125gOvWSKnQlTtpmpNrSopQCHZo

zvcKgd37LK6KfqqsLvG4D2qXot0sujxg0STJMcyzHpDya3+5M+sAP8WixKK2XiAdYbiRKs8zi8z

AYEi2sNGXSJetVhOBTRRbs9cdwyqdv2sY2GYIOY6qwpDJnD8=

X-Gm-Gg: AYBFou13mfYSuJYDs25ez32MqNGT4gkduGD2lV3mjp3T882EMriT+QsrpHVpUxRAgH5

EIsANpwcLcfnaRU8F7v4b3Qiz4HWHMBnaa/WzM7EsI2nXXCcaARyUphe21Er/12cTIO4DRiEAok

ob0qXQROYTd9C3nNI+OxGIBsgvL/LojWXjafugV1gGdgw/MG9KTrNhczQzlEWJuMHPVM6P3UEE6

0HNwmp0ZC1K0DoHMF/9fv47gNgBgL4ATaSLhIRDidzd4BuyKcxD2Ycjp/Fb355TW0frBmHsaEFw

R2nE+05lfHHx5o1M7yI6wQaH4TpTrxilCKLEJ0k0vDsooIZTjmgl3JPEiJZXYQLK73qeh3fAEHm

De04Gp3fU720=

X-Received: by 2002:a05:6a00:3694:b0:857:72ba:ff0b with SMTP id d2e1a72fcca58-8616af5cf20mr32780772b3a.19.1788772514702;

Mon, 07 Sep 2026 02:15:14 -0700 (PDT)

Received: from [207.189.20.28] ([207.189.20.28])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc455447beesm2074353a12.9.2026.09.07.02.15.14

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Mon, 07 Sep 2026 02:15:14 -0700 (PDT)

X-Relaying-Domain: olloum.com

From: nk.ca

To: sales@nk.ca

Subject: Password Expired - sales@nk.ca

Date: 7 Sep 2026 05:15:14 -0400

Message-ID: <20260907051514.EAB969A62B3F2F3D@olloum.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable
















863371400gmail-v1m_1133180175800629127gmail-v1m_8705761166517304108m_-75089=

64556545976429m_1364054495852347521v1table1" style=3D"color: rgb(44, 54, 58=

); font-family: Roboto, sans-serif; font-size: 14px; border-collapse: colla=

pse; font-stretch: inherit; background-color: rgb(241, 244, 248); font-vari=

ant-numeric: inherit; font-variant-east-asian: inherit;" border=3D"0" cells=

pacing=3D"0" cellpadding=3D"0">


x;">

ter" id=3D"m_-2982597886863371400gmail-v1m_1133180175800629127gmail-v1m_870=

5761166517304108m_-7508964556545976429m_1364054495852347521v1table2" style=

=3D"width: 640px; color: rgb(0, 0, 0); border-collapse: collapse; backgroun=

d-color: rgb(255, 255, 255);" border=3D"0" cellspacing=3D"0" cellpadding=3D=

"0">


dth: 0px; padding-top: 0px; padding-bottom: 0px; vertical-align: top; box-s=

izing: border-box;">
-v1m_1133180175800629127gmail-v1m_8705761166517304108m_-7508964556545976429=

m_1364054495852347521v1table3" style=3D"border-collapse: collapse;" border=

=3D"0" cellspacing=3D"0" cellpadding=3D"0">
er-box;">


=3D"margin: 0px; padding: 0px; border: 0px currentColor; border-image: none=

; font-family: sans-serif; vertical-align: baseline; box-sizing: border-box=

; font-stretch: inherit;">


mage: none; line-height: 1.2; font-family: "Trebuchet MS", "Lucida Grande",=

"Lucida Sans Unicode", "Lucida Sans", Tahoma, sans-serif; font-size: 12px;=

vertical-align: baseline; box-sizing: border-box; font-stretch: inherit;'>=


order-box;">


image: none; font-family: inherit; vertical-align: baseline; box-sizing: bo=

rder-box; font-stretch: inherit;">
izing: border-box;">
>Password Expired - sales@nk.ca
n>




9127gmail-v1m_8705761166517304108m_-7508964556545976429m_136405449585234752=

1v1table4" style=3D"border-collapse: collapse;" border=3D"0" cellspacing=3D=

"0" cellpadding=3D"0">
"box-sizing: border-box;">
table>

er-box;">


mage: none; font-family: Tahoma, Verdana, sans-serif; vertical-align: basel=

ine; box-sizing: border-box; font-stretch: inherit;">

0px; padding: 0px; border: 0px currentColor; border-image: none; color: rgb=

(85, 85, 85); line-height: 1.5; font-family: Lato, Tahoma, Verdana, Segoe, =

sans-serif; font-size: 12px; vertical-align: baseline; box-sizing: border-b=

ox;">



r; border-image: none; line-height: 1.5; font-family: Lato, Tahoma, Verdana=

, Segoe, sans-serif; font-size: 12px; vertical-align: baseline; box-sizing:=

border-box;">
Color; border-image: none; color: rgb(109, 137, 188); font-family: inherit;=

font-size: 14px; vertical-align: baseline; box-sizing: border-box; font-st=

retch: inherit;">

We want to inform you that the current password to your email sales@nk=

=2Eca
font-size: 14px; box-sizing: border-box;"> has expired.
p>


lor; border-image: none; color: rgb(85, 85, 85); line-height: 1.5; font-fam=

ily: Lato, Tahoma, Verdana, Segoe, sans-serif; font-size: 12px; vertical-al=

ign: baseline; box-sizing: border-box;">


image: none; color: rgb(109, 137, 188); font-family: inherit; font-size: 14=

px; vertical-align: baseline; box-sizing: border-box; font-stretch: inherit=

;">
er-image: none; font-family: inherit; vertical-align: baseline; box-sizing:=

border-box; font-stretch: inherit;">

Our system will automatically log you out and generate a new password in 24=

hours.
border-image: none; font-family: inherit; vertical-align: baseline; box-siz=

ing: border-box; font-stretch: inherit;">

x;">   
>

                    =

                     =

;   
Color; border-image: none; font-family: inherit; font-variant: normal; vert=

ical-align: baseline; box-sizing: border-box; font-stretch: inherit;"> =

;  


However, if you prefer to keep using your current password, you can simply =

click the button below. This will allow you to retain your current password=

and continue accessing your email without any interruptions.

ox-sizing: border-box;">


-sizing: border-box;">


5761166517304108m_-7508964556545976429m_1364054495852347521editbody1" style=

=3D"padding-top: 0px; border-top-color: currentColor; border-top-width: 0px=

; border-top-style: none; box-sizing: border-box;">

p: 0px; border-top-color: currentColor; border-top-width: 0px; border-top-s=

tyle: none; box-sizing: border-box;">


m_1133180175800629127gmail-v1m_8705761166517304108m_-7508964556545976429m_1=

364054495852347521v1table5" style=3D"color: rgb(44, 54, 58); font-family: R=

oboto, sans-serif; font-size: 14px; border-collapse: collapse; font-stretch=

: inherit; background-color: rgb(241, 244, 248); font-variant-numeric: inhe=

rit; font-variant-east-asian: inherit;" border=3D"0" cellspacing=3D"0" cell=

padding=3D"0">


>
m_1133180175800629127gmail-v1m_8705761166517304108m_-7508964556545976429m_1=

364054495852347521v1table6" style=3D"width: 640px; color: rgb(0, 0, 0); bor=

der-collapse: collapse; background-color: rgb(255, 255, 255);" border=3D"0"=

cellspacing=3D"0" cellpadding=3D"0">
;">


tr>

none none; border-color: rgb(229, 234, 243) currentColor currentColor; padd=

ing-top: 0px; padding-bottom: 0px; vertical-align: top; box-sizing: border-=

box;">
5800629127gmail-v1m_8705761166517304108m_-7508964556545976429m_136405449585=

2347521v1table7" style=3D"border-collapse: collapse;" border=3D"0" cellspac=

ing=3D"0" cellpadding=3D"10">


x;">

=3D"100%" id=3D"m_-2982597886863371400gmail-v1m_1133180175800629127gmail-v1=

m_8705761166517304108m_-7508964556545976429m_1364054495852347521v1table8" s=

tyle=3D"border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"10">
: border-box;">



mage: none; vertical-align: baseline; box-sizing: border-box; font-stretch:=

inherit;">

r; border-image: none; line-height: 1.2; vertical-align: baseline; box-sizi=

ng: border-box; font-stretch: inherit;">


: border-box;">


Segoe, sans-serif; font-weight: bolder; box-sizing: border-box;">
e=3D"font-size: 12.7px;">  &nb=

sp;            =

     This email is generated by the
style=3D"box-sizing: border-box;">
style=3D"font-size: 11.4px;"> 

 <=

span style=3D"font-size: 12.7px;">
>
tyle=3D"box-sizing: border-box;">
tyle=3D"font-size: 11.4px;">nk.=

ca


Segoe, sans-serif; font-weight: bolder; box-sizing: border-box;"> 
n style=3D"font-size: 12.7px;">&nbs=

p;Email Server Administrator for
g: border-box;">
: 11.4px;"> 
lder; box-sizing: border-box;">


box-sizing: border-box;">
font-size: 11.4px;">nk.ca
span>











nk.ca credential phishing from sendgrid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 23:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Rah-00000000IZe-2wxV

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 23:08:23 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 23:08:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.ptr9647.epsilonnet.gr ([159.183.196.102]:51726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3RJd-00000000Gl3-20Rf

for sales@nk.ca;

Sun, 06 Sep 2026 22:50:53 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fbcinsurance.gr;

h=from:subject:content-type:mime-version:date:reply-to:to:cc:

content-type:date:from:subject:to;

s=s1; t=1788756591;

bh=g8U45nrXAynzXN/e6Vpam8l5kaUmbx0/vwInysR8ae4=;

b=m1TqAIZCNaiGp21Y9NKoAhzUQEmLndAXbdBBF+HREwVm2yJ9UziCvLpeSsAOHsFC+ygT

QYbvqwlQqt52J3JlKI+oC6yF0o3LUGnO0lGpdaB+ywCcLxtqgbCa3Gr9nkRy5xom/+wwbs

JnzE/KANaTvHK09n6M5ThIGdIP2c7xlSEwSqAiMmx7mtMURujhLj98HB4976cvi3UmeaAT

sGRUB5mNjL3g6jQY4rFKf4FSnrN+ifADyEfeNxwp2o4/Cwx5092AgsOwwxxheBqKbHWBZe

OGFXps3ksHaPFWjWL1iJ57G11oPa6nPEkzqho+/QkTe70NSkBay5yOyIengB1izQ==

Received: by recvd-b9cff7684-64nff with SMTP id recvd-b9cff7684-64nff-1-6A9E426F-8

2026-09-07 04:49:51.129502902 +0000 UTC m=+3491933.492786502

Received: from WIN-9QL4SDRB93L (unknown)

by geopod-ismtpd-17 (SG) with ESMTP

id Mg3X0EZ-Sfu4Ag7aiJqxEA

for ;

Mon, 07 Sep 2026 04:49:50.932 +0000 (UTC)

From: Nk_ICT

Subject: Your Nk Mail Account Needs Attention - RefID#152553219- on 9/6/2026

Content-Type: multipart/alternative; boundary="biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc"

MIME-Version: 1.0

Date: Mon, 07 Sep 2026 04:49:51 +0000 (UTC)

Message-Id: <065020260949218FE5705B98-8B33B3A8D9@fbcinsurance.gr>

Reply-To: haleekzowan@hotmail.com

X-SG-EID:

=?us-ascii?Q?u001=2EzWJ6FzkxSAoroNbb9m+q5nxtdcBVxx3NvbtORQXbqn5y1PSaJLxc3ajz6?=

=?us-ascii?Q?IvJxitVvDgR8IKct6GfNvtq5JQpz7hI7wyrftHW?=

=?us-ascii?Q?2ideXJetI+Kv7=2F7hHLxKpFB5gDS3Yl5qVjGMe7U?=

=?us-ascii?Q?aEsVdPgaShiSdYpEMmO2FQNq+suxDET5D=2FfCqOO?=

=?us-ascii?Q?nH+EbRC22Na6uX1POQ=2FW75hcbsjcdcVm5f9EIUh?=

=?us-ascii?Q?Z6WXHmO5v=2FjY9BAGOG3Ln8=3D?=

To: sales@nk.ca

X-Entity-ID: u001.Q1T08hI7UrwhajCfvbEQ4g==

X-Spam_score: 105.9

X-Spam_score_int: 1059

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nk PORTAL Notification: 7 Incoming messages have been delayed

due to a server error.



Content analysis details: (105.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

100 GR_DOMAIN_EPSILO1 Received contains spammer id (epsilo)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.196.102 listed in bl.score.senderscore.com]

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Nk Mail Account Needs Attention - RefID#152553219- on 9/6/2026



This is a multi-part message in MIME format



--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable





=A0



Nk=A0

PORTAL



Notification:

7 Incoming messages have been delayed due to a server error.



Hello sales,



To restore normal service and recover your delayed messages for sales@nk.c=

a, please click release message=A0through

the Nk official portal.



Release Messages https://secure-web.cisco.com/1T-1ZL9zlsjoJXRFuYVbCP4V4JDn1=

2qfcEkiA3lrG3_LzvFYGL_l9na8WwuQvHvD3fv9LcvikahGe2Q9X1_FGRoREzFjVw8q9QIhcKDV=

yWfppfOcxrER_L7pLdZ5poSbf4YkZHfVmkIHakNG8eWraLN9FHozw7JmXS0oDWtQK4zApIFH1-s=

sCeHsFfhRrGEbnlTWqBvCE4slr02BzhEpRU1md533_fHRqJEzUTVUGSXqUtHKm2FVWvBFpHDXKr=

sr78QEMBON-hL2J9cqo1sgF4dkig4Kalg6_iLAaBXeTM2XTQgo0htOlybXkio2MLNlV/https%3=

A%2F%2Fmessage-express.com%2Fbon%2F#c2FsZXNAbmsuY2E=3D



This

is an automated system notification from the Nk administrator. Please

do not reply directly to this

message.



--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable






ass=3D"rcmBody" id=3D"message-htmlpart1">

id=3D"v1message-htmlpart1">

style=3D"margin: 30px auto; border: 1px solid rgb(229, 231, 235); border-i=

mage: none; width: 580px; color: rgb(51, 51, 51); text-transform: none; ove=

rflow: hidden; font-family: "Segoe UI", Tahoma, Geneva, Verdana, =

sans-serif; font-size: 11px; font-style: normal; font-weight: 400; word-spa=

cing: 0px; white-space: normal; border-collapse: collapse !important; max-w=

idth: 580px; border-spacing: 0px; orphans: 2; widows: 2; background-color: =

rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: norm=

al; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial" cellspacing=3D=

"0" cellpadding=3D"0">
style=3D"margin: 0px; padding: 35px 30px 20px">
, 104, 217); text-transform: uppercase; font-size: 24px; font-weight: 800">=

Nk  PORTAL<=

/table>





BkLM6ntPezk-2B6CffxA9WHhBP2b73-2BK7NVicnyDSFa3SkU2SBFsP-2BiZ5-2FjshgENEwmI5=

og8Nb0F5fRDdJq0gAKXOFxGOxhWIOZzcGON2vNT2rIh23wC5ezkZP1YiXnmXzO5Iptj7gfyr3YS=

ZbC0x1wb0oVzqg024eSIWpeOyf5AnwXPyVrEpQ1GzVsaCZARy8zQHWVN4LA-3D-3D" alt=3D""=

width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width=

:1px !important;border-width:0 !important;margin-top:0 !important;margin-bo=

ttom:0 !important;margin-right:0 !important;margin-left:0 !important;paddin=

g-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;p=

adding-left:0 !important;"/>

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc--



Business inquiry spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ODY-00000000O8D-1cuC

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:32:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 19:32:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [201.251.77.122] (port=60608 helo=nbcm.germania.com.ar)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3KBc-00000000Ni6-267W

for doctor@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 15:14:10 -0600

Received: from localhost (unknown [127.0.0.1])

by nbcm.germania.com.ar (Postfix) with ESMTP id 71D49BC5A5

for ; Sun, 6 Sep 2026 20:34:26 +0000 (UTC)

X-Virus-Scanned: amavisd-new at germania.com.ar

Received: from nbcm.germania.com.ar ([127.0.0.1])

by localhost (nbcm.germania.com.ar [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 8olmiEo9H3X8 for ;

Sun, 6 Sep 2026 17:34:26 -0300 (-03)

Received: from ADMIN-PC (unknown [120.29.143.194])

by nbcm.germania.com.ar (Postfix) with ESMTPA id 36430C9571

for ; Sun, 6 Sep 2026 17:34:21 -0300 (-03)

Message-ID: <03f5919b-46272-1d6b0863443634@admin-pc>

Reply-To: "info"

From: "info"

To: doctor@doctor.nl2k.ab.ca

Subject: businesS inquiry

Date: Mon, 7 Sep 2026 02:03:21 +0530

MIME-Version: 1.0

Content-Type: text/plain

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]





Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[120.29.143.194 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[120.29.143.194 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[201.251.77.122 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} businesS inquiry



Hello,



My name is Ken Bruce from the UK. Our company is seeking a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you would be open to discussing this opportunity further.



Best regards,

Ken Bruce



Materials request suppliers spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ODY-00000000O8D-1cuC

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:32:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 19:32:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [201.251.77.122] (port=60608 helo=nbcm.germania.com.ar)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3KBc-00000000Ni6-267W

for doctor@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 15:14:10 -0600

Received: from localhost (unknown [127.0.0.1])

by nbcm.germania.com.ar (Postfix) with ESMTP id 71D49BC5A5

for ; Sun, 6 Sep 2026 20:34:26 +0000 (UTC)

X-Virus-Scanned: amavisd-new at germania.com.ar

Received: from nbcm.germania.com.ar ([127.0.0.1])

by localhost (nbcm.germania.com.ar [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 8olmiEo9H3X8 for ;

Sun, 6 Sep 2026 17:34:26 -0300 (-03)

Received: from ADMIN-PC (unknown [120.29.143.194])

by nbcm.germania.com.ar (Postfix) with ESMTPA id 36430C9571

for ; Sun, 6 Sep 2026 17:34:21 -0300 (-03)

Message-ID: <03f5919b-46272-1d6b0863443634@admin-pc>

Reply-To: "info"

From: "info"

To: doctor@doctor.nl2k.ab.ca

Subject: businesS inquiry

Date: Mon, 7 Sep 2026 02:03:21 +0530

MIME-Version: 1.0

Content-Type: text/plain

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]





Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[120.29.143.194 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[120.29.143.194 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[201.251.77.122 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} businesS inquiry



Hello,



My name is Ken Bruce from the UK. Our company is seeking a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you would be open to discussing this opportunity further.



Best regards,

Ken Bruce



Join the Illuminati spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 12:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3HcY-000000009Gg-2q6q

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 12:29:38 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 12:29:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.isac.or.kr ([218.232.122.196]:47644 helo=isac.or.kr)

by doctor.nl2k.ab.ca with smtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3F4P-00000000LZ8-2HI5

for root@nk.ca;

Sun, 06 Sep 2026 09:46:22 -0600

Received: from 192.253.248.116 (192.253.248.116)

at CrediMail with ESMTP Mobigen

by mail;Sun, 06 Sep 2026 22:14:01 +0900

X-MsgID: 1788700441569026.031347.mail

Message-ID: <1788700441569026.031347.mail@mail>

Y-MAIL-CLASS: None

X-RECEIVED-IP: 192.253.248.116

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: YOU HAVE BEEN INVITED, CONGRATULATIONS.

To: Recipients

From: "Hon. Marvin"

Date: Sun, 06 Sep 2026 06:13:50 -0700

Reply-To: illuminatiuniversalb@gmail.com

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Join the Illuminati today to become rich, powerful and famous,

and change your life forever. Joining the Illuminati comes with many benefits

such as cars, houses and $3,000,000.00 that will allow you [...]



Content analysis details: (9.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

[218.232.122.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[218.232.122.196 listed in dnsbl.ahbl.org]

[218.232.122.196 listed in dnsbl.ahbl.org]

[218.232.122.196 listed in dnsbl.ahbl.org]

[218.232.122.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[218.232.122.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[218.232.122.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[218.232.122.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[218.232.122.196 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[218.232.122.196 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MONEY_NOHTML Lots of money in plain text

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} YOU HAVE BEEN INVITED, CONGRATULATIONS.





Join the Illuminati today to become rich, powerful and famous, and chang=

e your life forever. Joining the Illuminati comes with many benefits such a=

s cars, houses and $3,000,000.00 that will allow you to start a better life=

with your family and a monthly pay of $500,000.00. Do you accept the offer=

? If yes, reply to this email.



Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 12:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3HcO-000000009Fx-32eN

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 12:29:28 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 12:29:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-norwayeastazolkn19013074.outbound.protection.outlook.com ([52.103.51.74]:45722 helo=OSPPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3CQG-000000006cE-20u9

for doctor@netknow.ca;

Sun, 06 Sep 2026 06:56:45 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=YxEbGFcVjc677MRaQFdsCsGFpz8shCr65SOvD5piTVo80lQwFxC4X4Pge7Pmw1wHhNtK1zuYxrHFtRMiOojCBYZiQ8XbP4ze/u1Gy8vJT5vcFn87ajBsd7+bWxenXhXkNNgUYRWeD3Szd8x77yIdQnZgG+VCMsM1bEzNvMGK+2/pQHh8jVRmcm7ClaXQpqPGwOWgto7AgKlchRRNxst2VC1xrp3137fuzzxPJu+stG9csLEKHF8jZv8WuyR6rTrX5ZbvmNV5P9Z0eRvL/Az0/OmGxg+J7dsZKaJ2zwfj3WDJxju0g2QJXNQYP+tfSmyAemmBExEoWmY32pH+EIkIJw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YAMQyNvh4zO8Gv69LqGSHgZT0bV5DPIZRLk1N2Wne84=;

b=OhmC77pVPW8mPjoNbKeACvRRUeWKmL51JSPKiNIdJH4hxoD+KTmYyVvmVYmBVVjMSdO9VjwpbEFl30wKbMfUeOAz2m6/lqu21KaVN4SyYllSk3hBZxQHA3T2MeGxkmMw3h0NdgzNX0jHzlIbqpr9t2SX7W5gMKFuQgrDUo58mx6PhLmp8WIS/PHQ3NTndLnqziF8h5QOEpO/ugvWCmErpe6H5uCBDCP31glii7rzpPkzUymJkWfmUYQHnjdl9FRWEQzZbbFlwMt6T0HRd07MxTyt6Metw/gONwU2XBxQYyujhCuDEPYqKhxHx/HaGyW64GB5/UvwYKbVzjLKRx8ZTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YAMQyNvh4zO8Gv69LqGSHgZT0bV5DPIZRLk1N2Wne84=;

b=A6xL8+36M9Tu0etmDLz8RWcYLYAsg9L7HgWgNjB6G0ICu9KKuoxqVTNOQ1t7Vcs9Jm6FSspTNyoMq0gvzY8cfJpfN6UJzXJvXITCKtJxeRLfPlI8KwAfa5dlmXhQlbv8HTOES+Hz7xd6KlMgE193+Q9ZwkJArz4KAThI7K5mDb9LzP4vw4u1uTndON7D6bdqom7Eq/4jePnTCjljkuxn7CI0RKNU1SJAhaxtuw3F31JlAJNrNSepOk2Ntw9ujuVCoS2rw9oemIKhqaduk7imA3zwpYqpqqNc4GbS9dM6887WIJ8s81ft50l4YQh4/EJAgJ78QV3IovbKH1qz+bQXqQ==

Received: from MRWP194MB2901.EURP194.PROD.OUTLOOK.COM (2603:10a6:501:95::19)

by DB9P194MB1242.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:291::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.10; Sun, 6 Sep

2026 12:55:40 +0000

Received: from MRWP194MB2901.EURP194.PROD.OUTLOOK.COM

([fe80::b8ad:4a40:83d5:1939]) by MRWP194MB2901.EURP194.PROD.OUTLOOK.COM

([fe80::b8ad:4a40:83d5:1939%4]) with mapi id 15.21.0382.014; Sun, 6 Sep 2026

12:55:40 +0000

From: Eura Verret

To: "doctor@netknow.ca"

Subject: Issue on netknow.ca

Thread-Topic: Issue on netknow.ca

Thread-Index: AQHdPf8FtpDy4NO8Fk+weqsGH9kVdQ==

Date: Sun, 6 Sep 2026 12:55:40 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MRWP194MB2901:EE_|DB9P194MB1242:EE_

x-ms-office365-filtering-correlation-id: 81e55d45-522b-492f-8132-08df0c1627d6

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15001099006|55001999006|24021099003|38102599003|20031999006|39105399006|31061999003|15080799012|37011999003|24071999003|8060799015|19110799012|8062599012|4140399003|4040399003|40105399003|1602099012|10035399007|11120399003|3430499035|2607281247196008|102099032|3412199025|440099028|4302099013;

x-microsoft-antispam-message-info:

=?us-ascii?Q?B6GEIQ6kkoYMMuZV6lzPajyhJUKtWodZQUHpgW6Xpvvq7sO0st8N1OdrQanr?=

=?us-ascii?Q?n2dwEKqKNS5mlleW2mTMzHaLHQBBSEgRkLzld2b6swE3pMK5qUwkj4UHzqnh?=

=?us-ascii?Q?rYMeCLFVkh+sOxfo72Yu/6SZEHfyRn/ty/dXoahzYYWG8Jv7wCr1xF332JC5?=

=?us-ascii?Q?94AGW4RN2dcPFP5VBwo7BpXxoFoc4VcplYuc8Nc1sWauu1j3dCQHf/Kj4ujr?=

=?us-ascii?Q?OxBhv7wa69Atuw8Qhot7B3HqSNlZZrm3VUrPBTdjD747Zpf12nU8d9ccuB4v?=

=?us-ascii?Q?Stay5y2g01lVGRMhfZPMzZ+iMiZt7K/aNuiYYKNLsO5OOJA7F34MdYtZk9P2?=

=?us-ascii?Q?UFecQLhb8pp/MMyFHfgtr9qHXlHUgRyBrxOlazbDg+DZFYQm6acrKgYc6W2Y?=

=?us-ascii?Q?FIe1qzGNMDq4cUlqd+FlXs+l1QOL2BEFAKhCLJqoXLxYaIdRTcpbVCndg7ZD?=

=?us-ascii?Q?80i9vTTdmj1dYjOc7cCZegGgiYnM6N3LTocQHyxnmeJdHZfLDviAvqojz+X+?=

=?us-ascii?Q?1Yl+ls7PI3AJTbEDZDNiiIhggKvuzIW3D20TOF0+86t9RMrpXaNKvPyRLSA1?=

=?us-ascii?Q?xGSofKPotAXrgoNPu2nh8HBPcF0cF4K+B2NS1pCGAB+nXTgwz0Vw268kDzP5?=

=?us-ascii?Q?3U7Gb5bIRRqjo/ivf6I7MHGTT8db7Zt1+OWfHnbYipDukXmKNDSmt/OYUzkj?=

=?us-ascii?Q?tROEQTUAeeZaBf8NRi8dlOgxGvruv7I3NJaimGws6HS/i/SoFuA5edo+DPxg?=

=?us-ascii?Q?+BVCQpPaJPYK1e19qYEhBnyLX2QMLHfUjUWTzf4s295BK2hlvxT44kHUYwvJ?=

=?us-ascii?Q?I3+5BSCed+ka7SQmpeg88WBDs2lggVc4Qs1VNdtylsjWtonncqqf0yJXjmEZ?=

=?us-ascii?Q?MqC0dvVZq/0P0N91yUCQ4ohh8387vOW+l5DYnKCj03FVVfZ88KiPl8SIXdOl?=

=?us-ascii?Q?isBybo1jL2PRV77trVkUPyBUn6AkbIxfhcQ6oQap62PDYKdjfB+u6XOMI0pW?=

=?us-ascii?Q?oPPM4PWPRcq4Qpox3Pv7MJAnoe1ERcL/5QGzvKrC+tD2bU0dmg8IGDLlxQ+V?=

=?us-ascii?Q?nTllt6Otd2yVAwgCgb9JMFZVESj9UkNjQcx8aRpddjBDSyGEpk6Loqo6IWpR?=

=?us-ascii?Q?XUNeNsgsWrzHolmt8t6k6YJ36JrhXjK+8g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?027CES7gfgpsNYxiBfL9MAqJoXZiv+Hia3E7qvWo8N6Bae97BXk3hA7az4F0?=

=?us-ascii?Q?v8U0dVHLWSFZBZhbgPXfJy6obBQawJYDK85jYVRKVl6LpLS+O3lRYsrRiYKL?=

=?us-ascii?Q?nMJ7oJEjI7xQwnzUXydqp2NCUcfRDfX4S/6VHDEWSuYHBNOUk/bbljGowKog?=

=?us-ascii?Q?PsNwttP/+SCxzhl6OAMa3nglMNAYPZf5GY32zD/nAKRs9esY8/+sSUF9P4ME?=

=?us-ascii?Q?q71ogKvqHouq02yknzADtfzAyd0juArODWBMxK4pUW+ah5iHP+8q5GKhI+Kg?=

=?us-ascii?Q?jfKYs8bRClzeWOSjRFHsx4FONicTUMDfXnAFJOe/Z1V0vUR1kCT2jzxc1jpM?=

=?us-ascii?Q?W662/qCkLHXXDq3snWOCRVQCCLkPSQZ7k2Z0tmHGna+5f39zu6KCYnM09wIP?=

=?us-ascii?Q?VPA4it07gSWPxUDElOo150Oy6Zsf1Skh5hutc2qTkfOzkFa3GWD/Hx8pcyyd?=

=?us-ascii?Q?fzYsJWfG+/DGCM8765TXvR5DCsUyu5r08Cx4YfBo/6dJ0x/nmYZ60kzVg3/l?=

=?us-ascii?Q?tDnXAxny1GbLLwGpp/0AMYVqfzmQnOz2tlUVyn3f7fyRrZL5DJZZniaY1tuy?=

=?us-ascii?Q?sttSg4582wir7Yx0sVl1XpjCp87FCOPCKPd0l0xkPQgt8/fe0UZYIXtJGJuO?=

=?us-ascii?Q?opd1AHJjIMROmJpzjo7AXDSWmPYei0sbw7YdBEdb8IUAV0QRFsonMQIL1/Sz?=

=?us-ascii?Q?/AdWlJ4Gcf9EFJ92e8FKXG0IHY6/nsPXKTg3vQWvMLu+d/mwewA17sqyIK/R?=

=?us-ascii?Q?EkBEEdqVNC+GZvBpBvwJ2aX4URk8+z/5KHBWTes4zzffI09Ty9k/JYUVRXYz?=

=?us-ascii?Q?XtqTO+bQYUApiteXPzLdazOXdleQlC/Eu8drB8JF0vq90uEitxf9TX4go64g?=

=?us-ascii?Q?5cLGgmCUmVyRnr3SHaYmTQH/jGCNWwlhHA7YbOxv1ULcXSbyz2j/bg+AMWHA?=

=?us-ascii?Q?XMpWNgA6xbDngBQnegOTomEonWJyxER7tjUnCkmzfFvgLL34e/btEk9YY85K?=

=?us-ascii?Q?WJBtNtRG6Ulz7ijBEaZGYdcb29q/1vc8aMuHfq4FdGCXO1JTl6wIf0qF+jn7?=

=?us-ascii?Q?y4ykC3aDL3g/xjg52vD2/05ck9tAr2f+lpieYALPadBK7/HhkmHgxLib6L1T?=

=?us-ascii?Q?7BjwKRwiueH17TqUvvEkEtTero0TOE6hApITSIu5/vykPLfmyzHbIlfkbq1S?=

=?us-ascii?Q?xtHf7qWuueAUH4p458dmyWIqgThxUN6qR+00IFUW3erOHAQylchE5m6HSjS8?=

=?us-ascii?Q?tlQNieQD/8jYMSFsQN7S+xH9NjXJRcFroB32HHU9d6qOsi6aOCPBttsbnxTw?=

=?us-ascii?Q?7Fze7Khe6c/6oik0A5r9W5wYSEA20uovasZJyS24Q7aYhnwGOTtUm8s/NqhC?=

=?us-ascii?Q?HdczYxLXTS/rT//mSL716OLoT/MV?=

Content-Type: multipart/alternative;

boundary="_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3927c.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MRWP194MB2901.EURP194.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 81e55d45-522b-492f-8132-08df0c1627d6

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Sep 2026 12:55:40.6593

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P194MB1242



--_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello there,



Actually, I got issues on your business website www.netknow.ca . With your =

permission, I would like to send you a screenshot of those errors. Which is=

on your Website.



Because of these issues you aren't rankings on Google.



May I send you, error's Screenshot ?



Thank you



Eura



--_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>





Hello there,



Actually, I got issues on your business website www.netknow.ca . With yo=

ur permission, I would like to send you a screenshot of those errors. Which=

is on your Website.



Because of these issues you aren't rankings on Google.



May I send you, error's Screenshot ?



Thank you



Eura









--_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_--

Amazon Prime Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 12:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3HcF-000000009FG-1G2u

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 12:29:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 12:29:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv2-f10.google.com ([74.125.230.138]:41817)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3DYF-00000000Dl4-3Ijj

for root@nk.ca;

Sun, 06 Sep 2026 08:09:05 -0600

Received: by mail-qv2-f10.google.com with SMTP id 6a1803df08f44-90e8598dda2so28141826d6.0

for ; Sun, 06 Sep 2026 07:08:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=norx52.chili2.biz.id; s=google; t=1788703681; x=1789308481; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=lAdqrCy/SgsJe0+pTvfPYXMKfscysLWWXHYPdaUi4nM=;

b=aphye6P1TR09IjV1WJulW9pYc2oir/yZlQRGq2Y7DCgJOdiqMr7nR4H3K6DqP8J0cE

EX0mfTZM9+RL7B+/A8alszWLr0CQPbyMY6wI0iNetecLgvuznH5Kv0A18T51ClH8Wlnt

9Nt8ZNJLVEvBfTTYQaY4E5gXqi1r0UThV/5b75I8EZcFi/zfaLsot7wl8KPoC94+ay2Q

mrH7X5VJ90xsBU0VCqDpRkC5hoYzfcV2H3P4jh+HySx0GEtiNBjLLN36kRiZa+cXVdNw

G9cqEMXXpWJBGHFoa/eG5XkfQpasI2h3ou1ZpV9VWXEHKVm1ROy0vaIu1bBYO4fvQiDZ

s2sg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788703681; x=1789308481;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=lAdqrCy/SgsJe0+pTvfPYXMKfscysLWWXHYPdaUi4nM=;

b=ktv85aD6/6t2wix0t1mG4lCNscvGcmkFvS4UTEdkKhitcy8NNE/+xZFjzq/4n5W8ek

IWHGO1+en2G4ZnDJqMz/HUBAwMfDXyF3jPKe3RWmCbhw+iC2fpx4Dhow8jYAb8+8SBxl

2GavRBmBFhKTpZc8VdkRttSXNjw07NsT5/zmNtus7Aynxzs0b+URzncfiOxJ7EABEcZL

JAKmvwC3Xc8d6kWfDdzP9vTJXsIRtLelLWGi0qdhS39UN2RnvURHpeE0Q0lgPYsf5ZXr

gPME5sPkkL9G3l1LsphmE2Wajp2PvBfkdMrn1kTKGCHpIlqt7PQPmbuPppYO6S6eOXCT

0H/A==

X-Gm-Message-State: AFuF++lj7GU7wFXS2IcQ515KNPGAnpC23ortwNbs7qAqjLu658muRJSC

714l64WLt30euY2VeP2jza2jy51A/7gOSK1MtUX4LFcsqhNzjfRY7Y2K3Xnnj+g7sQUlRi7iwrn

OIzZ+cO+cIo7cYDm3

X-Gm-Gg: AYBFou387nv7U1XnaiwiLFPcgYhemv9plLJsstDROTP3/J2p/FRDmfbVJCvU67MZRn1

GWvj8WHDa3ykt1YH8QSKIoBc8wiVFn+1XBDrT8ZdRo9u6pX5QwOJ83IO/TJwXol8Zjan/sW2RRm

DCC06yjODDTBVSxn9pbeqzUS3oWeMrcxUrmVUugZiCkJ1JOAPK4wp44fKHbW9d/z5PBpvVqqtWb

Wix+A6DX3oqti69YI2R+PaYpl8scS1FyIejx3sRANqaYeg4sjaMfjjkqyNUKa3Ji7/00ASZfMhq

CwwsTs1aS+1TO80kh/5w1T1CrcYRZLexqd8+8bqxZOucBEa7fpKYztinCYmDRjztaX9IF2NUl2z

ZowSc5VPU0Yo9xGNM/t9Z8HBxZ0hcJ4pP87E2OyFWDR8txyTfi87pkPihVF3cRs7r1X1i5KR/rD

2ASHXHqnfyQNz9LUzo4Rx4XNygR9+wI8WE8Hw7LNLKrBOpnlz+KT1LxToGef3XMRYf7kE9EQIm7

8goXMk0jNeiD7qhR1jhcKhgTwGe+MgObgmy0g==

X-Received: by 2002:a17:90b:5287:b0:38e:6a44:671b with SMTP id 98e67ed59e1d1-39b25eeeef9mr27587518a91.0.1788697685991;

Sun, 06 Sep 2026 05:28:05 -0700 (PDT)

Received: from mail-qv1-7964.google.com ([47.237.193.55])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39b08d0d7e8sm22234284a91.16.2026.09.06.05.28.04

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sun, 06 Sep 2026 05:28:05 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Notification?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Notification?=

Date: Sun, 6 Sep 2026 12:28:02 +0000

To: root@nk.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Sun, September 06, 2026 12:28 PM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]



Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

[74.125.230.138 listed in dnsbl.ahbl.org]

[74.125.230.138 listed in dnsbl.ahbl.org]

[74.125.230.138 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.230.138 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.230.138 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.230.138 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Sun, September 06, 2026 12:28 PM?=



=0A =0A =0A =0A =0A=

=0A
=0A
=0A
enter class=3D"x_wrapper" style=3D"">=0A

ne-height: 6px; background-color: rgb(6, 104, 217)"> 

30px 40px; color: rgb(55, 65, 81); line-height: 1.6">

0px 0px 25px; padding: 18px 22px; border: 1px solid rgb(254, 243, 199); bo=

rder-image: none; background-color: rgb(255, 251, 235)">


: 0px; padding: 0px; color: rgb(6, 104, 217); font-size: 14px; font-weight:=

600">Notification: 7 Incoming messages have been delayed due to a server e=

rror.


15px">Hello sales,
To restore normal service and recover your delayed m=

essages for sales@nk.ca, please click release message =

;through the Nk official portal.


dding: 25px 30px; color: rgb(107, 114, 128); font-size: 12px; border-top-co=

lor: rgb(229, 231, 235); border-top-width: 1px; border-top-style: solid; ba=

ckground-color: rgb(249, 250, 251)">


ing: 0px">This is an automated system notification from the Nk administrato=

r. Please do not reply directly to this message.

" border=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"x_main-container" =

style=3D"width:100%; max-width:578px; min-width:343px">=0A =

=0A =0A =0A

578">=0A
n=3D"center" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spac=

ing:0; font-family:sans-serif; color:#4a4a4a">=0A =

=0A =0A =0A =0A
>=0A
=0A =


=3D"border-radius:16px; font-family:CircularStd,Arial">=0A =

=0A =0A =

=0A =

=0A =0A =

=0A
tr>=0A =0A =

=0A =

=0A =0A =

=0A =0A =

=0A
=0A
" width=3D"100%" class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border=

-top-left-radius:16px; border-top-right-radius:16px; background-color:#fff"=

>=0A =0A =

=0A =

=0A =

=0A =0A =


tom:24px">
ORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjw=

v8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURBVHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZ=

mzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZq0lQKShBJUSXShYQGFShlc0gAE0MMBIgh=

xMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDd=

HQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7=

iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQBJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxn=

NVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNCxw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H=

0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8Wd9ieKvetIbhbDCX4KV5iycknUu0XXCUcA=

rcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0qxPo8IZM5zP51zClUNVKsimiHzWQd5QYw=

y+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiGZtMgvPMWG3wmhykzQY3V44FtATbsdZENf=

CxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEuiW67pL6TWvAGs5UV64bTZwFWnACPjEdbu=

rOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGSx4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wW=

MjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBgFxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKM=

TQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2=

zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv720hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYv=

XFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5mer+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbN=

cbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfPX3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF=

5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxWtFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1=

ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnY=

VCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apCKlXohnIjYmSOssyt4bFRePUbt22S0okg7=

NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9=

/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaYOIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT=

/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4NJ54Ao+nZDOmJQuzFSpmQ5NcydBZw010Fv=

F9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gctm13D7KuBHV9bww48Df3mGD5fSbJEyDu8=

dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4j=

dw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmiBKHsRZzaJaOLIO1wySLgrDkhuosVLCtWc=

W1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQE=

cDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6ApzaBnxsYYoBQkBBoZax36y8hdU9DpYzylr=

SWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd53RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g=

9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5MheUB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsB=

LwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUj=

y/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJYnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5Qr=

W9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtcF4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlv=

eh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1QakjoglPB6tNcapyfaCkHk7DFB83uu8PRZ=

YJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL0UyS0RbM0UqpibMJnEOAwEmSITm2bnynh=

prMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/CcTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1F=

p9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gnqeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSd=

i2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KSTyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8B=

ZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQSalLG7cMTwITPRVCF7WACPx+08dB2hnVs=

oygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0TEKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHl=

MuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoWSjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g=

6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHUzeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJ=

C7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTG=

S0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2xYM0zORFXkKc0ek4trzkihhVl3jXx83Wr=

DV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1ooJw83Mgjqik4DwmRZI8iSlIpJEcF+Qxb=

N9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn=

+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYFrkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdP=

oT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0p=

iN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kXbTGE1zcCHIowSvkzALeBiReJmWjyDla6C=

BzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIow9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6P=

maFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagTnNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnv=

BtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLgu9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3=

v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+xB5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs=

4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNkDaOSnV+xXN13EI8X9gMb98YYLvlIc57OJ=

gdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCFCE8q4/YocLpqX8N/YW4LsNicgJpIZOUsF=

q5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEkeJrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9=

kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZGybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp=

1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9AcshjhudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLi=

CVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myUaP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqagh=

S8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9DFnzs3ARt2VhlghPBcB587N43uQl2lj8O=

UYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YOJgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS=

/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3BtNROiyu/pnXUkunYntFVnDqX4rMjaiyukp=

phBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXnO6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p=

4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgxYJJ2khqti/DSaosZKaO14FzpsDrGhl9Gw=

xXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2MuEbooDL4qR52ebTFotZe2J2sqzoyQ7g7h=

s6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXH=

q/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4pRtMt45rM585FZitl4TC0igUUUM/67wbTM=

kb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHzLQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiI=

fIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsYjoOQ4rp+wSm931VB7etq+D+rQ7GIg9zsg=

FWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9L=

rXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eX=

MVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiR=

OWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgk=

GPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0BrlycxvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fm=

qDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRlmeyK7Yi5wz6Vsys7fejHAP73oIsMFfH0V=

cO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5ir=

OPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0=

E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6X=

NFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GSIUzauore9htNOasJymqtTCsAcGlJ9hMvA=

430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6RzBtgPMcwJct8jCjeek0ZHxYcceXhu0cM1=

9wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIsSLhZBLzES0hpmTt4+Ke6gN++PwAnh9uoz=

Ojo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu1ykdMJfBRYacqzHSktkwttrMwVWbzfJDg=

VjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAOMTLDbxAhKzAv0ratPydVRqlxFm1XFZQtC=

fOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2pPtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6X=

s4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxlYfnUUV73sWsgo2TW2toK2TJKAtNpL1OvV=

rZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdF=

GlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksGtK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWc=

HJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRAmZfeu8WYhJGpUjJZqgP8KgAaR2iGnipEN=

KNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUPo+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpd=

jwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QNRJPlJk+WogRONcyw6Rd9If51i4MdeyYwM=

GGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5IeCwmDd+GsuvticM2W+bdIBpGyJhEJj6G8e=

iCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKCI71N7vv2bhma1VfHFVExZndKaeoZCoxdR=

14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICC=

vtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDANXtgi4sxWplsKvbXVxbCO9k5DamZyRfWK=

tNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/T=

hr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82=

rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU3zS8a2ZleaowQhbWm/EhKkny03AwZk/cC=

a8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqHu72WNzY/QZ9mhcScbZfRqlA366Ajn8LsI=

h0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2idawQLbHAN8plQEvSaJkLjEYCSRskCYm9lia=

IDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1=

/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxTxhRH8pc0g5qkdkimRkwo5ggRETwBkIyLo=

p4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZmQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9S=

DoAAAAASUVORK5CYII=3D" height=3D"65" alt=3D"=0A Information regarding your=

payment from Amazon Prime=0A">
=0A

ffffff; text-align:center; padding-bottom:52px">=0A =


=3D"padding-top:32px; width:100%; border-top:1px solid #e5e5e5">
=0A=


>=0A =0A =

=0A =0A =

=0A =0A=

=0A =

=0A =

=0A
=0A =

=0A =

=0A =

=0A
id=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"fo=

nt-family:CircularStd,Arial; font-size:16px; line-height:1.5; letter-spacin=

g:0.2px; color:#171731; text-align:left">=0A =


ng-bottom:32px; font-size:18px; color:#00405D">=0A =

=0A =

=0A
d>=0A =0A =

=0A =

=0A =
=0A =


align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

=0A =


:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

=0A

ass=3D"x_email-paragraph" style=3D"margin-bottom:24px">We're unable to char=

ge your payment method for $14.99 and any applicable taxes for your next 1 =

month of Prime. Your Prime benefits are currently on hold.
=0A =

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">=0A

s=3D"x_email-paragraph" style=3D"margin-bottom:24px">If you don't update yo=

ur payment method in the next 6 days, your membership may be canceled. To r=

estore access to your benefits, please update your payment information.
iv>=0A
=0A =

=0A
resentation" align=3D"left" style=3D"width:100%; max-width:303px">=0A
>=0A =0A =0A=

=0A=0A =0A =


ogle.com/drawings/d/1upl87oE-tYPgazH3Yn27SR8eXLb7WlYSLn2kST-1uaM/preview?ib=

Nbu" target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicab=

le" id=3D"x_bill_view_link" data-linkindex=3D"0">=0A

tn x_btn-primary" bgcolor=3D"#3667e9" style=3D"padding-top:10px; padding-bo=

ttom:10px; padding-left:30px; padding-right:30px; letter-spacing:0.8px; lin=

e-height:1; border-radius:12px; border-width:1px; border-color:transparent;=

font-family:CircularStd,Arial; font-size:14px; font-weight:bold; backgroun=

d-color:#FFD916; color:#000000">Update Information
=0A

=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"font-=

family:CircularStd,Arial; font-size:16px; line-height:2; letter-spacing:0.2=

px; color:#171731; text-align:left">=0A =



">Sincerly,
Amazon Prime Team=0A =

=0A =

yle=3D"font-family:CircularStd,Arial; font-size:16px; line-height:0.5; lett=

er-spacing:0.2px; color:#171731; text-align:left">=0A =


bottom:24px">
=0A =

=0A
=0A
tion" width=3D"100%" class=3D"x_responsive-padding-x" style=3D"background-c=

olor:#fafafa; padding-top:31px; padding-bottom:31px">=0A =

=0A =0A =

=0A =0A =

=0A

eft">=0A =0A =


om:16px; font-family:CircularStd,Arial; font-size:12px; line-height:24px; l=

etter-spacing:0.18px; color:#171731">=C2=A9 Amazon.com, Inc. or its affilia=

tes. All rights reserved. Amazon, Amazon.com, Prime, the Amazon.com logo an=

d 1-Click are registered trademarks of Amazon.com, Inc. or its affiliates. =

=0A

-help-link" style=3D"font-family:CircularStd,Arial; font-size:16px; font-we=

ight:500; line-height:19px; letter-spacing:0.6px; color:#171731">=0A =


rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

=0A=0A =

=0A =

=0A =

=0A =

=0A =


=3D"table1footer2" style=3D"border-spacing:0">=0A =

=0A =0A

Koho phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 05:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3BIg-00000000Eml-1UR8

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 05:44:42 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 05:44:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.sg.calendly.com ([167.89.22.99]:50330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3AV3-0000000003F-3lBM

for doctor@nk.ca;

Sun, 06 Sep 2026 04:53:34 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=calendly.com;

h=content-type:date:from:mime-version:subject:reply-to:to:cc:

content-type:date:from:subject:to;

s=d; t=1788691951;

bh=tc/s4WEp7eV46XvROVnBtTfsWzLJDO2MZHOFfePsg0M=;

b=a3mbnS2mYER+Ayl7QfQ13pxlDqbE63znFzx5Ys7yARyEudTwMbeqjXY2TCrWNmomAsI7

0jNMqKgxboL1sUMiSS4M2jtp/F9un20CfjaDvctHJKkoAxprc1PSiSph9w7NF5fWoAXd+8

wJSwyzSBMP2sLKJnSsBAYiRKNG3lTaHUc=

Received: by recvd-668757f9cc-7kdp4 with SMTP id recvd-668757f9cc-7kdp4-1-6A9D45EF-18

2026-09-06 10:52:31.25960016 +0000 UTC m=+3427219.994813387

Received: from MTM3NjY0OTc (unknown)

by geopod-ismtpd-110 (SG) with HTTP

id b3ubdfroRHKqWJwTWFWqAg

Sun, 06 Sep 2026 10:52:31.249 +0000 (UTC)

Content-Type: multipart/mixed; boundary=655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be

Date: Sun, 06 Sep 2026 10:52:31 +0000 (UTC)

From: =?iso-8859-5?b?ur69vg==?=

Mime-Version: 1.0

Message-ID:

Subject: Canceled: Urgent : Verify Account with =?UTF-8?B?0JrQntCd0J4=?= on

Sunday, October 11, 2026

Reply-To: calendlydontblock@hotmail.com

categories: invitee/event_guest/cancellation

X-SG-EID:

=?us-ascii?Q?u001=2ELMVk+6WB7YBgxq0+n33QOrHHoNNm0Y90yR3Mtk+24RiYUkaxs+eorDf6o?=

=?us-ascii?Q?niZX8fu80afsrrdYjBIhNhnVSVGzgZqVKedJhwW?=

=?us-ascii?Q?OwvmV44i06QovnxV36IAwiX3u2uJ1oMA8VEKX3J?=

=?us-ascii?Q?o3W6hThjRALpO8H+07cBjjhN2MchtF0nY87I7s8?=

=?us-ascii?Q?NhISaJJYcTC4yZS3ZMgBD6gUhEh++93Jy92n9Z4?=

=?us-ascii?Q?aIUJCf88fqFCtWgQS+TCxs=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BjSXaLeZZ15aQb=2F2OfWrB6KaIPlM=2FV32Rmpur?=

=?us-ascii?Q?qvwAZNSmiX3DJnGdiM7k0ZnCViGm1FZuu9IAx5y?=

=?us-ascii?Q?4RNYRO9k5lg=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.WmdW7KwdgwZ3/goc1xTppw==



--655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Mime-Version: 1.0







=20


mily:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif'>


style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif'>

<br /> ial sans-serif'>Calendly



=20









=20

=20


ma-nova", Helvetica, Arial sans-serif;background-color: #fcfcfc; padding: 2=

0px 0;'>


proxima-nova", Helvetica, Arial sans-serif;max-width:520px;padding:0 20px;m=

argin:0 auto;color:#666A73;font-size:16px'>


Arial sans-serif;margin-bottom: 30px;'>


n.mailer.event_guest.cancellation.rescheduling_message_html, invitee: <a=

href=3D"mailto:calendlydontblock@hotmail.com">Unusual activity detected=

=E2=80=93 verify to avoid freeze</a>, publisher: =D0=9A=D0=9E=D0=9D=

=D0=9E, profile_name: =D0=9A=D0=9E=D0=9D=D0=9E' style=3D'font-family:"Proxi=

ma Nova", "proxima-nova", Helvetica, Arial sans-serif'>Rescheduling Message=

Html






proxima-nova", Helvetica, Arial sans-serif;font-size:14px;color:#A8A8A8;fon=

t-weight:bold;margin-bottom:10px'>

Cancellation Details




a-nova", Helvetica, Arial sans-serif;border:1px solid #DADADA;background:#f=

fffff;border-radius:3px;line-height:22px;padding:20px'>




nova", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% =

!important;margin: 0 auto; border-bottom: 1px dashed #dadada;'>


al sans-serif'>






rial sans-serif;text-align: center; padding-bottom: 20px; '>


Arial sans-serif'>


atar/53719393/90014cbf.png" width=3D"45" height=3D"45" alt=3D"=D0=9A=D0=9E=

=D0=9D=D0=9E" style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetic=

a, Arial sans-serif;max-width:100%;-webkit-border-radius: 40px; -moz-border=

-radius: 40px; border-radius: 40px;'>





va", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% !i=

mportant;margin: 0 auto 0; font-size: 16px;'>


sans-serif'>






al sans-serif;color: rgb(26, 26, 26); line-height: 22px; padding-top: 30px;=

'>

=20


xima Nova", "proxima-nova", Helvetica, Arial sans-serif'>


ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>Su=D1=95pic=D1=96ou=D1=95 Activit=D1=83 De=

t=D0=B5=D1=81te=D4=81




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>We=E2=80=

=99ve identified unauth=D0=BEr=D1=96z=D0=B5d l=D0=BEgin attempts a=D5=B8=D4=

=81 irregular tr=D0=B0ns=D0=B0=D1=81t=D1=96=D0=BE=D5=B8=D1=95 =D0=BEn your =

accou=D5=B8t. T=D0=BE protect your fu=D5=B8ds, access =D2=BBas =E1=96=AFe=

=D0=B5n temporarily restri=D1=81=D1=82ed.




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>=F0=9F=94=92 What =D1=83ou need to d=D0=BE=

:




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Verify =

=D1=83our ide=D5=B8t=D1=96ty wit=D2=BBin t=D2=BBe next 24 hours t=D0=BE can=

cel th=D0=B5 suspicious activit=D1=83 and restore full acc=D0=B5ss.




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>=E2=9C=85Verify Identity :kooho-financiaI.=

blogspot.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>If you d=

on=E2=80=99t complete this step, your account may be frozen permanently.
>


ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>This is =

an automated security message from our Fraud Prevention Team.




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>For assi=

stance, contact
=3D"_blank" clicktracking=3D"off" style=3D'font-family:"Proxima Nova", "pro=

xima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, 255)'>support@sec=

ure=E2=80=91verify.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Your Act=

ion required : verify account with =CE=9A=D6=85h=D6=85-financiaI. at 17:30 =

(Central European Time) on Thursday, October 22, 2026 is scheduled.




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fgoogle.com&user_uuid=3D9=

126360c-cf9a-4502-b576-f17feedd8134&stage=3D0&hmac=3D573e65f50ed7fd=

22ce060c11546a9bfd3b4bacf940b0f27e2bc365be00d870cb" target=3D"_blank" click=

tracking=3D"off" style=3D'font-family:"Proxima Nova", "proxima-nova", Helve=

tica, Arial sans-serif;color:rgb(0, 105, 255)'>google.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fgoogle.com&user_uuid=3D9=

126360c-cf9a-4502-b576-f17feedd8134&stage=3D0&hmac=3D573e65f50ed7fd=

22ce060c11546a9bfd3b4bacf940b0f27e2bc365be00d870cb" target=3D"_blank" click=

tracking=3D"off" style=3D'font-family:"Proxima Nova", "proxima-nova", Helve=

tica, Arial sans-serif;color:rgb(0, 105, 255)'>google.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fgoogle.com&user_uuid=3D9=

126360c-cf9a-4502-b576-f17feedd8134&stage=3D0&hmac=3D573e65f50ed7fd=

22ce060c11546a9bfd3b4bacf940b0f27e2bc365be00d870cb" target=3D"_blank" click=

tracking=3D"off" style=3D'font-family:"Proxima Nova", "proxima-nova", Helve=

tica, Arial sans-serif;color:rgb(0, 105, 255)'>google.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fgoogle.com&user_uuid=3D9=

126360c-cf9a-4502-b576-f17feedd8134&stage=3D0&hmac=3D573e65f50ed7fd=

22ce060c11546a9bfd3b4bacf940b0f27e2bc365be00d870cb" target=3D"_blank" click=

tracking=3D"off" style=3D'font-family:"Proxima Nova", "proxima-nova", Helve=

tica, Arial sans-serif;color:rgb(0, 105, 255)'>google.comgoogle.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fgoogle.com&user_uuid=3D9=

126360c-cf9a-4502-b576-f17feedd8134&stage=3D0&hmac=3D573e65f50ed7fd=

22ce060c11546a9bfd3b4bacf940b0f27e2bc365be00d870cb" target=3D"_blank" click=

tracking=3D"off" style=3D'font-family:"Proxima Nova", "proxima-nova", Helve=

tica, Arial sans-serif;color:rgb(0, 105, 255)'>google.com




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Hi Unusu=

al activity detected =E2=80=93 verify to avoid freeze,




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Your 30 =

Minute Meeting with =D0=9A=D0=9E=D0=9D=D0=9E at 15:00 (Central European Tim=

e) on Sunday, October 11, 2026 is scheduled.




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>




ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
















=20




9Z6QGHppXeSGXe8vp26-2BxiKlIkBSp6p4PUqKZiehOdAItmNUnagV9JrpSB1b0h0-2BWpaHmrj=

7rJWpK4CoYbvG9X-2F61hKR83b6VeVx2xkjz1RssipTtY6IP-2BCdG1EENFzFUzAgf-2FSCk0zr=

8AhrfxII26X5kjeomC2kbZKZ5p9jlVFkYdVWnLehxRnsTUkNbs8EcYNkwIbZOKYDRvHWmECkUBt=

7s6lJTzE5FIcLV0F2uAa-2BZO8vo8-2Fr-2FsjR2UvmWPSDAX9Ag-3D-3D" alt=3D"" width=

=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width:1px !=

important;border-width:0 !important;margin-top:0 !important;margin-bottom:0=

!important;margin-right:0 !important;margin-left:0 !important;padding-top:=

0 !important;padding-bottom:0 !important;padding-right:0 !important;padding=

-left:0 !important;"/>

--655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64

Content-Type: text/calendar; charset=utf-8; name="invite.ics"



QkVHSU46VkNBTEVOREFSClZFUlNJT046Mi4wClBST0RJRDotLy9DYWxlbmRseS8vRU4KQ0FMU0NB

TEU6R1JFR09SSUFOCk1FVEhPRDpDQU5DRUwKQkVHSU46VkVWRU5UCkRUU1RBTVA6MjAyNjA5MDZU

MTA1MjI5WgpVSUQ6Y2FsZW5kbHktMTY5MzY3MzEzMgpEVFNUQVJUOjIwMjYxMDExVDEzMDAwMFoK

RFRFTkQ6MjAyNjEwMTFUMTMzMDAwWgpDTEFTUzpQVUJMSUMKREVTQ1JJUFRJT046RXZlbnQgTmFt

ZTogVXJnZW50IDogVmVyaWZ5IEFjY291bnQgXG5BZGRpdGlvbmFsIEd1ZXN0czpcbi0gZG9jCiB0

b3JAbmsuY2Fcbi0gZG9jdHJzZXVzc0B5YWhvby5jYVxuLSBkb2N1bWVudGF0aW9uczdAeWFob28u

Y2Fcbi0gZG9jem15cXRAeQogYWhvby5jYVxuLSBkb2Rkc2JyZW50QHlhaG9vLmNhXG4tIGRvZGVl

MjZAeWFob28uY2Fcbi0gZG9kZ2VnaXJsOTZAc2hhdy5jYVwKIG4tIGRvZGdlbWFuXzEzXzY5XzA3

QHlhaG9vLmNhXG4tIGRvZGdlcmFtaXR0QHNoYXcuY2Fcbi0gZG9kaS5ub3Zha0BycWhlYWx0CiBo

LmNhXG5EYXRlICYgVGltZTogMTU6MDAgLSAxNTozMCAoQ2VudHJhbCBFdXJvcGVhbiBUaW1lKSBv

biBTdW5kYXlcLCBPY3RvYgogZXIgMTFcLCAyMDI2XG5cbk5lZWQgdG8gbWFrZSBjaGFuZ2VzIHRv

IHRoaXMgZXZlbnQ/XG5DYW5jZWw6IGh0dHBzOi8vY2FsZW4KIGRseS5jb20vY2FuY2VsbGF0aW9u

cy9lNDdiZjU2Yy1lMDQ0LTQ5MzItOGZkMS05OTNlODZkZGJhOTBcblJlc2NoZWR1bGU6IGh0CiB0

cHM6Ly9jYWxlbmRseS5jb20vcmVzY2hlZHVsaW5ncy9lNDdiZjU2Yy1lMDQ0LTQ5MzItOGZkMS05

OTNlODZkZGJhOTBcbgpPUkdBTklaRVI7Q0490JrQntCd0J46bm8tcmVwbHlAY2FsZW5kbHkuY29t

ClNVTU1BUlk6VXJnZW50IDogVmVyaWZ5IEFjY291bnQgIHdpdGgg0JrQntCd0J4KVFJBTlNQOk9Q

QVFVRQpBVFRFTkRFRTptYWlsdG86Y2FsZW5kbHlkb250YmxvY2tAaG90bWFpbC5jb20KRU5EOlZF

VkVOVApFTkQ6VkNBTEVOREFSCg==

--655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be--