NetKnow now in NetCraft's Top 10900 part 2



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in NetCraft's Top 10900 part 1

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 10853 from 11008 at Netcraft
and pfs compliant



A slight increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Rogers





Rogers Business Solutions

which rank 4863 from 4567 and are hosted in Europe.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6286 from 6227 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Netknow again





We at Netknow are at 10853 from 18857 since the start of 2026.



Government of Alberta



The Government of Alberta Website

ranks 14791 from 14693 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton
ranks 31807 from 31613 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta
ranks 51699 from 51647 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 309275 from 302237 who are the owners of

US Based Netzero
at Netcraft Rank 77026 from 75654 .



Grant MacEwen University





MacEwan ranks 105894 from 106143 .



NAIT / Northern Alberta Institute of Technology





NAIT ranks 106467 from 109948 hosted by Microsoft .



TekSavvy



TekSavvy ranks 264427 from 249721 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 1172972 from 1177511 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 303923 from 290106 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 364551 from 365358 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Internet Centre / CCINet



Internet Centre

rank 458365 from 459188 . Their partner Rack Nine ranks > 2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 915352 from 917764 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber
are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

Grant opportunities spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueE2-00000000OAj-2Z2o

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:16:22 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:16:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx1.syban.ca ([216.234.184.14]:23594)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vucan-00000000ITI-01bq

for doctor@nl2k.ab.ca;

Mon, 23 Feb 2026 13:31:53 -0700

Received: from mx1.syban.ca (mx1.syban.ca [127.0.0.1])

by mx1.syban.ca (Postfix) with ESMTP id 4fKXYR3vV0zFM91

for ; Mon, 23 Feb 2026 13:30:51 -0700 (MST)

Authentication-Results: mx1.syban.ca (amavis); dkim=pass (2048-bit key)

reason="pass (just generated, assumed good)" header.d=syban.ca

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=syban.ca; h=

content-transfer-encoding:content-type:mime-version:message-id

:date:subject:to:from:reply-to; s=dkim; t=1771878651; x=

1774470652; bh=Y9DyL+lp50Df6naPB+Gv6drAYHuc787C1s596EoUbNM=; b=q

reTQcts2iZe2IMJrJtwQA80jRup93R1xyupYzW2+Tn1W5OX5U6m8tqbosiSk4DSX

v7Cu9E6S57foUIr571x4MjH6+WeZ/k88p5DQcjjSVXhGdWosyaRrmHrLSFcaz532

m9525keD7BGiQTTtBauX33rMKYU5emc8Y7WqPzrdyoX4RZuJn+uL3YRgjmWPiWB2

dTLx79y0EVe6O5UiRuLkcdlCjvt6YFmB18RQYFr/ZB6+Qzcc9SwRwTg2IPmZz7dV

PMR/Hp76nJH0tgQD9ufGc+e7P4oCfHcqZJYxkTXp4psjGNWyLWxDhg2vXTdnp1Gw

2Y2M+bgyl11GMj6KligpA==

X-Virus-Scanned: amavis at mx1.syban.ca

Received: from mx1.syban.ca ([127.0.0.1])

by mx1.syban.ca (mx1.syban.ca [127.0.0.1]) (amavis, port 10026) with ESMTP

id hakSuLQlPhdl for ;

Mon, 23 Feb 2026 13:30:51 -0700 (MST)

Received: from ec2-54-226-129-179.compute-1.amazonaws.com (ec2-54-226-129-179.compute-1.amazonaws.com [54.226.129.179])

by mx1.syban.ca (Postfix) with ESMTPSA id 4fKXYQ5hvNzFM90

for ; Mon, 23 Feb 2026 13:30:50 -0700 (MST)

Reply-To: bizinfo@summitadps.com

From: NOTICE OF GRANT OPPORTUNITY

To: doctor@nl2k.ab.ca

Subject: GRANT

Date: 23 Feb 2026 20:30:49 +0000

Message-ID: <20260223190222.CE9522DD6E91819C@syban.net>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: In light of the global economic downturn, WelCome Trust is

providing grant opportunities to support individuals and households whose

businesses have been adversely affected. These grants are designed [...]



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[54.226.129.179 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

[216.234.184.14 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.226.129.179 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[54.226.129.179 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

[216.234.184.14 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} GRANT















In light of the global economic downturn, WelCome Trust is providing gra=

nt opportunities to support individuals and households whose businesses hav=

e been adversely affected. These grants are designed to aid in business rec=

overy, safeguard livelihoods, and bolster resilience. If your business has =

faced losses or disruptions, we encourage you to consider applying. For det=

ails on eligibility requirements and application processes, please contact =

Summit Advisory Partners by return mail.



Kind regards,
Barbara Kołodziej.









Cloud phishing from Google Gmail Part 3

.consequences li::before {

content: "=E2=9A=A0=EF=B8=8F";

font-size: 20px;

filter: drop-shadow(0 2px 2px #b33);

}



/ signature /

.signature {

margin: 20px 0 28px 0;

}



.signature p {

font-size: 16px;

color: #4e2e2e;

}



.signature .team {

font-weight: 800;

color: #8b1a1a;

margin-top: 12px;

font-size: 18px;

}



/ CTA button =E2=80=94 aggressive red /

.cta-block {

background: #b71c1c;

border-radius: 100px;

display: inline-block;

width: auto;

margin: 12px 0 20px 0;

box-shadow: 0 14px 24px -8px #7a2020;

transition: all 0.2s;

border: 1px solid #ffb7b7;

}



.cta-block a {

display: flex;

align-items: center;

gap: 20px;

padding: 18px 42px 18px 36px;

text-decoration: none;

color: white;

font-weight: 700;

font-size: 20px;

letter-spacing: 0.3px;

text-shadow: 0 2px 4px #5f0000;

}



.cta-block a span {

background: #ffffff;

color: #b71c1c;

padding: 6px 20px;

border-radius: 40px;

font-size: 16px;

font-weight: 800;

box-shadow: inset 0 -2px 0 #aaa;

}



.cta-block:hover {

background: #a11515;

transform: scale(1.01);

box-shadow: 0 18px 28px -6px #a14040;

}



/ footer /

.footer-links {

border-top: 2px solid #f0c0c0;

padding-top: 18px;

margin-top: 12px;

display: flex;

flex-wrap: wrap;

justify-content: space-between;

align-items: center;

color: #973d3d;

font-size: 14px;

}



.links a {

color: #a13232;

text-decoration: none;

margin-right: 22px;

font-weight: 600;

}



.links a:hover {

text-decoration: underline;

color: #c10000;

}



.copyright {

color: #ad5a5a;

}



hr {

border: none;

border-top: 3px dotted #d88;

margin: 16px 0 10px;

}



/ mobile /

@media (max-width: 650px) {

.alert-header {

flex-direction: column;

align-items: flex-start;

gap: 16px;

}

.usage-pill {

align-self: flex-start;

}

.account-detail {

flex-direction: column;

align-items: flex-start;

gap: 20px;

}

.plan-item {

gap: 24px;

}

.consequences ul {

grid-template-columns: 1fr;

}

.cta-block a {

padding: 15px 28px;

font-size: 18px;

flex-wrap: wrap;

justify-content: center;

}

}



Cloud phishing from Google Gmail Part 4

Cloud phishing from Google Gmail Part 2










=3D1.0">

Cloud storage =C2=B7 urgent attention

















PayPal Phish from Google Gmail Part 2

--000000000000e2b2f5064b8250aa

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGVhciBWYWx1ZWQgQ3VzdG9tZXIsIFdlIGFyZSBwbGVhc2VkIHRvIGluZm9ybSB5b3UgdGhhdCB5

b3VyIHJlY2VudCBCaXRjb2luICANCnB1cmNoYXNlIGZ1bmRlZCB0aHJvdWdoIHlvdXIgUGF5UGFs

IGFjY291bnQgaGFzIGJlZW4gY29tcGxldGVkIHN1Y2Nlc3NmdWxseSAgDQpvbiBGZWJydWFyeSAy

MywgMjAyNi4gT3JkZXIgUmVmZXJlbmNlOiBQUC0yMDI2LTY1ODMgQ3VzdG9tZXIgUmVmZXJlbmNl

OiAgDQpQQy03Mjg0OTEtR0ggQW1vdW50IFByb2Nlc3NlZDogJDg0OS4wMCBGdW5kaW5nIFNvdXJj

ZTogUGF5UGFsIEFjY291bnQgIA0KKOKAouKAojcyKSBTdGF0dXM6IFN1Y2Nlc3NmdWxseSBWZXJp

ZmllZCBUaGlzIGVtYWlsIHNlcnZlcyBhcyB5b3VyIG9mZmljaWFsICANCnJlY2VpcHQgYW5kIGNv

bmZpcm1hdGlvbiBvZiBwYXltZW50LiBLaW5kbHkga2VlcCB0aGlzIGRvY3VtZW50IGZvciBmdXR1

cmUgIA0KY29ycmVzcG9uZGVuY2Ugb3IgZmluYW5jaWFsIHJldmlldy4gU2hvdWxkIHlvdSBuZWVk

IGFzc2lzdGFuY2Ugb3Igd2lzaCB0byAgDQpkaXNjdXNzIHRoaXMgdHJhbnNhY3Rpb24sIHBsZWFz

ZSBjb250YWN0IEN1c3RvbWVyIFN1cHBvcnQgZGlyZWN0bHkgYXQgKzEgIA0KKDg1NikgODg2LTQy

NjEuIE5vdGljZSBpc3N1ZWQgb24gRmVicnVhcnkgMjMsIDIwMjYuIFN1cHBvcnQgQ29udGFjdDog

KzEgIA0KKDg1NikgODg2LTQyNjENCg0KT2ZmaWNpYWwgQmlsbGluZyBDb25maXJtYXRpb24gTm90

aWNlIOKAkyAkODQ5LjAwIEJpdGNvaW4gUHVyY2hhc2UgdmlhIFBheVBhbA0KVHVlc2RheSBGZWIg

MjQsIDIwMjYNCg0KDQoNCk9yZ2FuaXplcg0K4LiZ4Liy4Lii4LmE4Lie4LmC4Lij4LiI4LiZ4LmM

IOC4geC4sOC5hOC4iuC4ouC4p+C4h+C4qeC5jA0KMjE0MDJAdGhhbWFpLmFjLnRoDQoNCkd1ZXN0

cw0KKEd1ZXN0IGxpc3QgaGFzIGJlZW4gaGlkZGVuIGF0IG9yZ2FuaXplcidzIHJlcXVlc3QpDQoN

Cg==

--000000000000e2b2f5064b8250aa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20

PayPal Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueDK-00000000O7d-37wG

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:15:38 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:15:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f202.google.com ([209.85.128.202]:58711)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <21402@thamai.ac.th>)

id 1vub6W-00000000AlN-2Lpb

for doctor@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:56:35 -0700

Received: by mail-yw1-f202.google.com with SMTP id 00721157ae682-79801df242bso67355907b3.1

for ; Mon, 23 Feb 2026 10:55:41 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771872935; x=1772477735; darn=doctor.nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=m6aBSklg6UGwZKN2lSvlgZ4JE942pQAOYUls9DpMmfA=;

b=1y+ark5cDxXdlFuOhWdSHVQJZwUjzajidowExOrlBvQny3D+D1npR73Z5D2q7OwrfY

L1UozPRipjTg8UJw8mhJ50k5xEuVjLo3BtMsbg71Gc2weIso/JPeI2STKsKhK7eUOz+/

noTTtHlwYXsJBmY9BKi70FAJ0Ec0cR6+mbJArV2m9typMu+IqgOxXpXSWrFFvZKfZcE+

i3GWklDSP/cXvZC3RkXON//Ei+SQ4JNgiONq8rP9vnbD5mUs2Lo39V8oV2vTSiIuzbi1

nTk1aAqBa48CxbmnSBj1x95UQLLqhBVPm4Mgn6OTFpsXXOs5bxV19dhvUXJMeuo57aVV

lSTA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thamai-ac-th.20230601.gappssmtp.com; s=20230601; t=1771872935; x=1772477735; darn=doctor.nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=m6aBSklg6UGwZKN2lSvlgZ4JE942pQAOYUls9DpMmfA=;

b=YT9uyEvcus/aEjcK8uy1GseI0ucs0CuiWbH6Rf09qCpLf1kgDOErV2yhmlZ6IBEzHe

tBmjb4mDEpeMlBrIEYbI+HtyrCaa/5DRoGGo1nW3ln7v+ErAEruy8+6mPQLEY1niIqT3

8dOpjmw+bZDsSj43PZgY6uaM9sCIhgQoxiUDpDx5zirHfr3sGdCybdiZc03kThHP1e8e

0K4bBAJLu4Kc5E0rwAamhtAHQtd2tl+p4vgBsy9RW2jHhxfdhxUu6FDc7BxspMeRv3Ay

8OXFFuu0cPjatG/jdsuLZ98nu3VIE2TAk7HRk1YYurmf6u99PfVxOu33B7D9oDUqRmt9

VMEw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771872935; x=1772477735;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=m6aBSklg6UGwZKN2lSvlgZ4JE942pQAOYUls9DpMmfA=;

b=Yh9ttydLLJj9jhOtvHTpqcZhI0gtKINFMvzL6k11Q6h21/e6B9PzWRAm3JRuQaMf14

7EPdxj2dsOiSw8nDis8qBXm3SoWArnGngDyIa0WErA1MmKj1zQqFTW5ccV7sLsUmRs3F

FqKuQBORhuMlt7Ksu1ji2Vr0jqMokAyugny8lp1nEfmVZ3Elgb2g7v5KWgFn7NFvF6GK

VsrobiuKoHw2vbQ72NlXSdv3tE0o++4EFaeEkholTAtgAmp9vNT0bEhEt0M1XnWJAW1r

yZ7kKJiazzGRqrN4dZblYocaPOhCoctXz6hgBH7HeoAtJBfPUbIicThNxE9qKZi56Gc+

JYbw==

X-Forwarded-Encrypted: i=1; AJvYcCVTWlFFewAmbtSn8YuZovH2lTgUG+pj3f1HVarZ4OQbePeuY25l3I3bCJnW+bOHLc4sGKFZfbU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxRivd9xSzf5RKm5f9HRAZcPw4/C9XoeKt/BvlgDbsVGv/r7We2

e+FGRVt0BzOcW7T0vEkUVWUxsT5QEnvm1GGGFaks/49yEbPjqlYZ6Yec/QkVEyOTlXBqTvLxlyW

Fz7y6VRCROsmeodL+WtsKtRYwy8cI1gWUURHp/9aMUI37xg==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:c50d:b0:797:e4f4:729a with SMTP id

00721157ae682-79828cde14fmt95977687b3.3.1771872934908; Mon, 23 Feb 2026

10:55:34 -0800 (PST)

Reply-To: =?UTF-8?B?4LiZ4Liy4Lii4LmE4Lie4LmC4Lij4LiI4LiZ4LmMIOC4geC4sOC5hOC4iuC4ouC4pw==?=

=?UTF-8?B?4LiH4Lip4LmM?= <21402@thamai.ac.th>

Sender: Google Calendar

Message-ID:

Date: Mon, 23 Feb 2026 18:55:35 +0000

Subject: Official Billing Confirmation Notice - $849.00 Bitcoin Purchase via PayPal

From: =?UTF-8?B?4LiZ4Liy4Lii4LmE4Lie4LmC4Lij4LiI4LiZ4LmMIOC4geC4sOC5hOC4iuC4ouC4p+C4h+C4qQ==?=

=?UTF-8?B?4LmM?= <21402@thamai.ac.th>

Content-Type: multipart/alternative; boundary="000000000000e2b2f5064b8250aa"

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Customer, We are pleased to inform you that your

recent Bitcoin purchase funded through your PayPal account has been completed

successfully on February 23, 2026. Order Reference: PP-2026-6 [...]



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.202 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.202 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.202 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.202 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.202 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.202 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Official Billing Confirmation Notice - $849.00 Bitcoin Purchase via PayPal

Cloud phishing from Google Gmail Part 3

Cloud phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 15:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vueCw-00000000O6Y-0Gnn

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 15:15:14 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 15:15:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f71.google.com ([209.85.161.71]:44073)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuahE-000000009IA-3cRh

for sales@nk.ca;

Mon, 23 Feb 2026 11:30:24 -0700

Received: by mail-oo1-f71.google.com with SMTP id 006d021491bc7-679dcf1f680so3264859eaf.0

for ; Mon, 23 Feb 2026 10:29:30 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1771871365; x=1772476165; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Zi6zgC8edmxVR269zIbEnrF325PN1I2s7BtGVVq9L5c=;

b=Do15HQfEv7ckFZBS1pieoL2tflx5MWIJaMdHkAQxEUWfk3rc0g0tn6lAJe1qwSGBk6

YoeqQM7Os5Ha9j3e8LXaB3d9HZpX7c+eWrQYHzXEkWd9KatbqwmmK1yWi5r2CiO6CPSV

OPLjTJ42NSfyflNixex9V+MehqaZC2KGzrx/IhJ3IVmsfJB/u7UIteyoRNRm/F78OVXw

Y+DdD+QmrvIu2a+F8/xNSBVIGiV587Qv1NAOqPhuUGRonboNxDTuTFFjK51DINaIwrmL

7RJ40tCFJrIeuJotUxKLQs/YcSyt/QGonbk1RfgBDW8krllLfoGIhO3wQ1OFfD2CHOEw

y49g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771871365; x=1772476165;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Zi6zgC8edmxVR269zIbEnrF325PN1I2s7BtGVVq9L5c=;

b=ffDxoJmeKQvPgnHifb+4eFkRjjvWF9X5Fr3Qphlvc7L5of8PBPUPFVkll2pILOKzes

IhY2EINgffSuzrgqtKFh38j6AczYYYw6S7ix0oXz63CXYlLhUsZfSGqVs4outhXyjcBd

MEwtth978W0ZpMXsMlnm8GMmrxCC0FIFLO4RG1T9pemgSnqDxNWV351ZcRiKmZtTEns4

h7XQpjk2anbvBWrak4nR9QAXxQCKrANPZJKe6MdZLVqhtkhOQxU2CWbTHaGFjz7Nqc+d

O3egNOFE59D583MWUJie+zX04Jy2MMk78wg9oKyhcXpdoIeSzzPI8f9L6iR0z+icld5+

qUAg==

X-Gm-Message-State: AOJu0YwPFqBE0dHCRPoWaKo9SjbrBE0NvOmVsKkQEem0uz2T+3d1J4Ny

LY1RZoAMCa4yv6/GHHObTyfK4yg8jJd3LJoIUAQrLCXEenquc5hc9FSkXmRoTK2/Z6NN3o8ALB9

pVLexODx3tQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:215:b0:662:fb4e:5f40 with SMTP id

006d021491bc7-679c44e3405mr5122376eaf.35.1771871364717; Mon, 23 Feb 2026

10:29:24 -0800 (PST)

Message-ID: <000000000000481c72064b81f3d2@google.com>

Date: Mon, 23 Feb 2026 18:29:24 +0000

Subject: Final Notice: 250GB Cloud Storage Renewal Failed

From: Account Security

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000481c67064b81f3cf"



--000000000000481c67064b81f3cf

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4pqg77iPDQpDTE9VRCBTRUNVUklUWSDCtyBVUkdFTlQNCkRBVEEgREVMRVRJT04gU0VRVUVOQ0Ug

4oCUIEFDVElWRQ0KDQoNClNUT1JBR0UgTElNSVQgUkVBQ0hFRCAxMDAlIEZVTEwNCg0KWW91ciBj

bG91ZCBzdG9yYWdlIGlzIGN1cnJlbnRseSBhdCAxMDAlIGNhcGFjaXR5Lg0KVXBsb2FkcywgYmFj

a3VwcywgYW5kIHN5bmNocm9uaXphdGlvbiBhcmUgcmVzdHJpY3RlZC4NCg0K4o+zIERvbid0IGxl

dCB5ZWFycyBvZiBtZW1vcmllcyBkaXNhcHBlYXIuIFJlbmV3IG5vdy4NCg0KDQowIEdCDQoNCmF2

YWlsYWJsZSBvZiA1MDAgR0INCg0KDQpQbGFuIFR5cGUgQ2xvdWQgU3RvcmFnZSBQbHVzDQoNCkN1

cnJlbnQgU3RhdHVzIOKaoO+4jyBFWFBJUklORyBTT09ODQoNCg0KRmluYWwgRGF0ZSBGZWJydWFy

eSAyMiwgMjAyNi4NCg0KDQrim5QgV0hBVCBIQVBQRU5TIElGIFlPVSBET04nVCBSRU5FVzoNCg0K

DQpBbGwgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkDQpDb250YWN0cyBhbmQgY2Fs

ZW5kYXIgZW50cmllcyB3aWxsIGJlIGxvc3QNCkRvY3VtZW50cyBhbmQgYXBwIGRhdGEgd2lsbCBi

ZSByZW1vdmVkDQpBbGwgZGV2aWNlIGJhY2t1cHMgd2lsbCBiZSBlcmFzZWQNCg0KDQpCZXN0IHJl

Z2FyZHMsDQpDbG91ZCBTZWN1cml0eSBUZWFtDQoNCg0K8J+UpSBSRUFDVElWQVRFIFNUT1JBR0Ug

QUNDRVNTIFNlY3VyZSDigKIgRmFzdCDigKIgUmVjb21tZW5kZWQNCg0KVGhpcyBub3RpZmljYXRp

b24gd2FzIHNlbnQgdG8gaW5mb3JtIHlvdSBvZiBhIGNyaXRpY2FsIHN0b3JhZ2UgaXNzdWUuDQoN

Cg0KQWNjb3VudCDigKIgU3VwcG9ydCDigKIgUHJpdmFjeSDigKIgVW5zdWJzY3JpYmUNCg0Kwqkg

MjAyNiBDbG91ZCBTdG9yYWdlIFNlcnZpY2VzDQoNCg0K

--000000000000481c67064b81f3cf

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












=3D1.0">

Cloud storage =C2=B7 urgent attention



Domain for Sale spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Feb 2026 11:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuaMr-000000008aM-1TX2

for dave@doctor.nl2k.ab.ca;

Mon, 23 Feb 2026 11:09:13 -0700

Resent-From: The Doctor

Resent-Date: Mon, 23 Feb 2026 11:09:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f194.google.com ([209.85.210.194]:48296)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vua6E-000000007iS-0nZG

for root@nk.ca;

Mon, 23 Feb 2026 10:52:09 -0700

Received: by mail-pf1-f194.google.com with SMTP id d2e1a72fcca58-824af5e5c81so4350653b3a.0

for ; Mon, 23 Feb 2026 09:51:15 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1771869069; cv=none;

d=google.com; s=arc-20240605;

b=P25UZzIvyJJUQ4VwleeylMACBJrU75LV0thWVWXB7rK8DBYIk8r896ye0Xc0uaBR6d

axYe6nglt4e74heX1wLD3L0Dw2O2l4XEZGHu4FwgCIFOu0luMxpEtvWSgjHFT9oxrrDI

ZmNP79LsODpRdi+mY3KdPdm90XqseqzvpZipYmJOShU2krFWafv+piRZYkqjUt6TK1OW

nK1mANptjF/SHp5UdjQdtHi26NXiZOH2hO053xbJro380hHv1aRpCeSP5jSsZm3t/RFs

95lNkbFrPGpwA0ES/0gZoKKk1tawiBo7vnvOq9J1ockE/xjfeXEUJtSQbkSX7zajLusP

VTGw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=LGJvRBjcJEdKnk31IU7ICazstgnkIn1AQFwkGYkaWpHT6DWbxfMEvVdP8ZDm2ZTapw

29If742VmfY7qaM3boicOIUIgQ53U0tf8UacLMKqalYknjfjGtII7i8pS7ImiN/4uAnS

g65IzMFW2+AdpEmG9gG170o0q9n7OfRe/hcqeda2EzcoTGZQGzSlXP5V9bBZeIxsR/ok

U7Cwlb3QNyd5oVUUYJe2k+scxqmo9YmMDBS5uqAQOHgKjYI1OhVDSi4kHgB2/OCpY9nI

AhQBemPBsbXGzYZuOE1+n7b0D0U6hh/tCVhmnAHuYeBPRMXWXnjndOqPEeF2xF5k8h/S

eBeQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1771869069; x=1772473869; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

b=gT8tVhdO5+S55tVyNjQTrKIZN+MdPfx0iiRCXJ/UwyB2LOwqpkkk9AG4I6+xjtrd7o

Gc995MEGVJnouivdgFUJVtNVCJQVHCy7ILuwn1qXNWlHw0BWL7FC3tDyjdJYC0Ul9mDL

AMvuZooc7raJ5xYG+rSJ0KC3+yw1JHpy37TYljBzp+DkAljS5Rz/uEZcQpk5yJ2e9D4i

eAdvXiy4RmLxw0VmhHq50znYa5HhRIKy1HEaRdKF4oBGLFxWkxcOT/hC6NMlMbKS7m1y

Fj6pMmPFGZLWG+vbSz3DbgQrNvhy5aCTNse4Sh1y5eKJ4cN7ZIoZSjD9RMssTKjHtte9

hVng==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771869069; x=1772473869;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=6tVUxxX2ItFl8HAz65WSMCKX1B+DGWFkWRG775BYTXw=;

b=ngQIvr2YoKcleWpuneyTax7a/koOAqJPv8xdZvGHnktGXb3PZd33vHDamyhI3kk5Gb

YgAlRPJSJ2wk8ya7sxv07EwRK+LEpDMeDIc+7x5EzOPaigSIFGyfC6heYMulOsxU7PYH

dXiQsX1TWqhIx8TpDx/5JbrKWXl/31RUYNFqcT0jrsWMBdHox+lRt0efSK2dHkskn6Yu

l39m7+9NxVgOoFJSYrb8PoMdVwjc43aq0UL86v/zxphwPkh4vyACiefgjyxLyD7wPFdO

q4oe5CqtFSaQ9d6izf7N7yGtRrDSZzHjGmhLeFet0dQPcetd6Rk/NYORx3lRpeHv7TIx

nyaQ==

X-Gm-Message-State: AOJu0YwZf4s3Nfek1Hyw/LBRnAR1rOOVpO7CKrcGWilI99DezyeObArY

2X18luYWTbZJ/iHC5RBK2TsK1raqJOm6q58yyzBrilSdAQ53m9NLfpY72zRdU5h+27nG09sVN/U

4mjcQSw2hMqCuoVmAILnff2YEhlWj9fhULLdsoCi6+w==

X-Gm-Gg: AZuq6aK72RC3h/chwm3H7zbeDfQKRtBYKA3GY2Lho97CDBD6HHiYvW/8BNk85pgAyNL

VwDgYIekyaruh+4H019ce3HRUu+gPcyd+1x2rboFCYqfyhq21bhCxsEgsvIMxtghmCn8lld5YxA

DO7L6g/TOfMIg8WWPYcwgzSiQcrt96/MgizSjgZtZxNd6jMhFIIj59mEJ5ZrTPC41RX7gFlWEKB

KzJGE6W8NTqLS2bgeoK4jhaJGuGfvHZj8bmTlb5AXkxqI3NkvfMRafOwV35mcTfOYtX3DAHkCH2

ULOGO31sbEc=

X-Received: by 2002:a05:6a20:9d90:b0:390:ca32:da2c with SMTP id

adf61e73a8af0-39545ed46fdmr8221576637.24.1771869069206; Mon, 23 Feb 2026

09:51:09 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

From: John Riley

Date: Mon, 23 Feb 2026 18:50:57 +0100

X-Gm-Features: AaiRm533sM3qpVqPijPjwjhhZEMAWb9do_GHHp_BV3rP2hRumJqwlX2T-uLyoS0

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000756836064b816a3e"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, This is our final follow up regarding the availability

of the domain name www.VoipEdmonton.com we have reduced the price one last

time to $200. This is an excellent opportunity to secure a valuable domain

that perfectly matches your business niche.