Netflix Phish from DigitalOcean Part 3

Posted by Dave Yadallee on
3D""
base64,iVBORw0KGgoAAAANSUhEUgAAADAAAABYCAYAAAHEokQmAAAABGdBTUEAALGPC/xhBQAA=

DT1JREFUeAG9W22MXFUZvvfO7MzubHeXbXfa3dmlaQCx8qEFCkkRQSMEUdpUkxohiiIxhtQfmhg=

SSDREE/jhD020McTYH0SKyjeIsaKxSlpCMWkURZquoaXd2e1ui+12v2fmXp/n3Dl3zpx77sfMtD=

3JzjnnPe/Hec/7nvd83bX/0z00329bBQtpdPGU/XL+Eo9l5++1igCyoiZnwLHVelB2WNpfrQjAR=

M+QYMOKaJgTYP/nhOu3iYYhhV255goM0cDS7srKm8wfzOeZ+axYWGtbPirKC57XaChlMmwXiXIC=

VoRQQeb3dOWaGwiUyZZ9l9jBkEiMyUuGN8gyc+e5yoqou8vV95oaxjJN8oM2JxsULQvyfiSrAv0=

3dXYAfrcC5ZhEg8quaRC7BY7/s7WrSxQCyVKPvOUbLmhQiKxZdRDZYFv235h/KtNl2buy/d52DJ=

qaJFvC5BDJdoc9PeIGJhJwOa4SSc2FExx1aypMlCd7ijtCQACEEqtB9kxjsASea3m/ZYEKqSnQe=

sxxrBcqvptKBHbt/brzSVhAkMOw5Q0+f0c2Z52uuzKJAgJW1qFreyorb7AsUwmw48qgNBEQaczJ=

BD4qiR7I5a2pOlGIYJWE2NYZScD8c+gak2wWFfVndOHUoFpnuaxPFx1BtTjbtmbhGrpVdaSQa+h=

cy4XiH3SYWnee1Yzled6dKoJedgp2s+l1BL3u9Nlh86JbJ3VEWYcEYV1ZFzm6tbYJoFSEHUxSFJ=

ymoiAYgJRqE1gEC6NygqAXauxZWdZI/GrzXFRcYwDzQU/eDTd0RU6gfnRr2mvmV37n2MrZZlDD+=

bC+WL/XjEiJZzUmTf2gFD11Iyqp2oUJbHuXSnRPLmedjZqilDC6MPMtlYBlVfEmCZlwjwTtOruB=

1igpbB3H+apStT6ZzVpzamBXG1kemZ9+UoedrdvdKEFHZn1j3bCRBHY29xGV8EqEH9owkqB0rvy=

uSsDyWX3h0BH0+vWQYj+RHfDuri9UOoKs53rX9BdPHT4n62quRxW1jWWHtppQYq2OwPrK/OlZEz=

wNzKFTH6zp0zNMijjyzzA0GeJ0wz0ZMp7WFjidFHHn2pN9a2/W4Ul1YWVu5vqAeagWXnpVBtWqu=

1+tpykLAfzph5D/GtZ2nclET3FJh8XVAz/txTBRk1+t+PuwaCIvX+4Z+rZsV2OJhKl5IIBA2oKa=

/LG+xVUR1TKm6Y9lfVaJPRKm5k0CuG1jTDqDGTVnGaN8QCtXXc4+7n+jUpMAIvXBbSnk+ZXmHZC=

JAYbqKWqgBkQdLySACJwbFJJkD/T73ixi+iwKMh6mEpCv20LMcs/9QCdS6/fn/TWAQkzJqAEROV=

Rcgl+rVA+bCFWYXGhMQiIFsEF6VWlhJhKPgtgRDikNrq2z0fGahAXaArlt257t2I8QFpW2ISLPI=

miqSyZxY3tGBBqcqTQ/8ziKsbHky9jQ0qMqij0SBWSVTUpp8ZR6fPIlK79kth74s8ocShSg0Iti=

xsncrsPU+uZMVgzTcl2LlgUMz5/8M6wyrjLVyztw5KLBmVoWQKLRxZkPMY9LH8WJeQEy2hJAxn3=

Z/FCcgFFsj5bgVWaj2dZREB/B3/s4ch40Meo/N3F6srd4v+fZWOW8Ejpbwhb/w57lBVcUd2CoQm=

cRnZltOV8oLU6/oMNZf6V78ACW0i2mNglLHCL06CmJ3E7uvFVN2lF4Pe0wljTOMW3PLRvUfLJQ3=

KnWWyk7DM2JOnjeT1thquJCAK+Z4kXAQ+oRSSVNV3Z41aSfb0yk2Nk9ZoInwcQQ8Xy+kIAJd3w4=

AcXY7HAnwe3jvkr8MJHa27GjcWNmZBcGinlADeZCa1EYefLVfbvD0HiIENCNzRaFnIrZ35ANhum=

+eHbh1kCDtMP0weBlA5JN0iaTeEGooAa1FBcSi0uzz0kBywkHlyYBnHAUciyZ6NNSwJK/psiqMQ=

804ISjkNcTNr7kMt1fvII5hyhJRiCAU5VCcC4kbWyqVrxXiLAE9ksJjhEIIAENTSHvJJx00OuNx=

KcGcnFn3ZSaBNAGDB1vJgggo/Kq4q1L2Ma1dAChtDzmBIUkJUT557nBX8YQVWOGqUkDMuUlMYfp=

raSjreetIT41iNMiLADM6U1va9etZKanqzPOGtogzg4hAYxm1ID2SHLBWzLZK+hFHKaoFBJARA5=

TN4T8NWEhAorD7foy8KPChlEAe8+/8RTn5k24TqIGUcNkFNAl7IB5gZ6haLxlgXyRtmCLyAkXNU=

xGAaTsxtaPWliOY7zFZ5NM7D1tYbJEpAAyp7FL89N7JaOo/OMYphXoagob0QLEMOEHCQN1VBQif=

riT9r0pjBApgKicD0y4J9wmCjE/lQg7xAuojyoOHW/H8BZNt+HBh+6qbx3iBdQ18JnbB+KEXI63=

IdMwxQpQGWYyzufVuqnMAV3WfCm1gOG5k9MmpiqMd7hL2vVOagFkBG96RmWol4dxhGXIWFFiU0s=

CRkYHvqIz1es9sBuNLVNLAuzx8bjQL3h+Audk1Q4tCSAH3Fn8RPbOlPMChUspoyxTywJwZ/Ednz=

T6dxBCZPhuWUA020bLlixCR92b2hKA0PFQg124hJc62MFPbQnAk0TwSh1m70NGMEy8+2lLAFnAE=

WOvJTfBmxg62haAh4GvUVBUEmEDK5DhrsKeww3aYYSU99B+IopBaf7knnLv2s2e642AWQl7kA3A=

X6/i83LKfjU36G1SPlZQEdKWGUJKizNfTIsv8dLcdUjcqNzhzmRGC4BRyFFwrPY7JnvX3hfVfiH=

h4py/v8b1tLPkue4vJ1cNFzvj0jq1uEdg599I2IQmsQaPrFurvZiEd77bxVUO9z4TOK4cTXEeiO=

+Ad3O5t/hwPM75bRVvdDyO8XB5EK600qEzIWo8NrVq3TXnt5vR3MR3SOw899FZbNaTzjPRrBotb=

s0VR/QG5MKVxEIgP9DJY/T/h9Xh3ylO4HFdQlTaMFEo/iwO53y1CQX4I06UWBg4H/4BBeS9f9uC=

PG8nFqI726ZPSSgUIC6tkIMFOB94JPtLiuuiRBmu+4y3YYP6eVsiSasIgQIk5OiLP5S5XTrYsSt=

ZfZPTc0+TtynFvpSZCAywJgXE7QeQ5EXRESgw2ekq7VnbpwrFrxtkW2muKk10KqxJATbQfTgf5M=

TeB1eS+3uVsJWy63m/mO4tDus0vHbo1AohBSiEc4GXK5wP8CqLSnSS0E8HV3kv6TzopqYrDR0vr=

m5UoEvMBX9iU4kyQut4p/PBs26aLAx9T+2MuFkCoJPhMSpAIf5krrsS6nw5osBOEqbTD6YLxesk=

D7pQ3P2bxIvLIxWA51h8CRHzAeUcyq8ZPqaLY25qw4fFL+HlhOzF0ZZPAlSiXStEKkABfJDipJZ=

bDa7ShzrctYLlpXgV/jn5s/M8n3cyF2IVoBDReSghFjhM7EN4cOG3Op0kkH9zqjB0N7nIC1DhTm=

0wTVSACFSisch51t7z4EquZ/8aFnbkpZ6fm29y4/RKVIDE8sY3jzc1KsLJnPQcHCeUbehq711dX=

VeyLCdyO1ZIpQCFNCzgl99FWD2R/H5H0shUsu3Bq3C16s8DvI4Bk1dKrSxuqRXg/YiYB3QnlhGV=

/oTXZqzSHS3Ut+GT8lWYW7yTXEbnfWukn2OpFeAw+lao56jTY1+vVsfZ1kn6TK4LXzeh82Ai/tD=

/uEc4VVZLCjB4+1aQuW2Ne+5pfOv1pMq01XIRVr1RXNz6UUlYISWTlhQgT7HNQE5r+Asdvn++6e=

oHoMRMSplGtM24Ul0NN5LbC1pC/jeNkaAObFkB0uHjI9+dRBkbvn37qpmMvb3Os+3sLrjSCtxHL=

GycD5CTlNpSgF9S+ttuf8NHIevOTR+AFR5PEhjXzg+0bsWk5pogIlM9j6NpSwEy9NcGuJHCHR9W=

PgIl/qWAWi5uRFgd4VdssIRc3OKYtK0Amcp9kirAzmW2qvV2yrfj407GZvkEygUuKnWkAI+g3PC=

paeTM1FHHtkP/a6HiJJW55ohXN+FCXCPwKWyEEh0pwI504ypGTyMLM7vgSnt1eCv1S8H3cvzRje=

ScMNGHpZuwYmBRcaKrsBpP8fZiDGli0xa8ffK7belKNYMVOlYgqhf8lxBY4d6o9rRw+YAbtbhdM=

AXYwdLC9Iu4FdidtrMmvNVYMK/CC5LYYmAu6FuMC6qAUOKhnd+AJSZNnUsLuxYK9GHzyJ0qFVHT=

BVfAfvRR1/YyHa/St+CTiQrmA0Oqen6+4ApwtEYWpw7atvNDdeRaLXPB/BgWOeFKiEwyXRQFKAz=

z4fuYD4ek4Hbyy/CPZUO0AojlRxMXTQF2uNvLbUPYbQxfG1rciNDKlzD5heZFVWDN4sQJfHDxYB=

v9Dki4+l+PrbfvSh18CxBwbLEAV3oCrvS7Fsma0PkfnWPc8MGYF9UCsheZPudLeN2fl/V28msQW=

mkN++XuwQn45TGUj0Gh47blHXcdpwxY2fHcsj02NPXZFN/ytNOJJJpyqVRw5mvrbHwvgU9OcT3v=

jaF/o65lr8f+6LpFyy3+H+OtP7zIZ7e2AAAAAElFTkSuQmCC" alt=3D"Netflix Logo" styl=

e=3D"width: 25px;">=0A =0A <=

/tr>=0A =0A =0A
x; font-size: 16px; color: #333; line-height: 1.6;">=0A =


>Action required: your payment has failed

=0A =

Reference:
>NFX-BE4EB007

=0A

Hi root@nk.ca,<=

/p>=0A

We were unable to process the =

latest payment for your N​e​t​f​l​i&=

#8203;x membership. As a result, your account has been temporarily =

put on hold and access to streaming will be suspended within the n=

ext 24 hours if no action is taken.

=0A =

Why this happened: the c​r​e=

203;d​i​t c​a​r​d on file was declined by you=

r bank. This is commonly caused by an expired card, insufficient funds, or =

an outdated billing address.

=0A

W=

hat you need to do now: update your billing details to restore you=

r account and avoid permanent cancellation. This only takes a minute.

=

=0A

px 0;">=0A
ssociate.com/storage/.q/?go=3D730a3d" target=3D"_blank" style=3D"display: i=

nline-block; background-color: #e50914; color: #ffffff; text-decoration: no=

ne; padding: 14px 28px; font-size: 16px; border-radius: 3px; font-weight: b=

old; width: 80%; max-width: 350px; text-align: center;">Update Payment Now<=

/a>=0A
=0A


tyle=3D"background-color:#fff4f4; border-left:4px solid #e50914; padding:12=

px 16px; font-size:14px; color:#5a1a1a; margin:20px 0;">Important:<=

/strong> if your payment is not updated within 24 hours, y=

our N​e​t​f​l​i​x membership for
g>root@nk.ca will be automatically cancelled and your viewing hist=

ory, profiles, and personalized recommendations may be permanently lost.
>=0A

If you have already updated your payment=

information, please disregard this notice — it may take a few minute=

s for our system to reflect the change.

=0A <=

p>Need help? Our Member Services team is available 24/7 to assist you with =

billing questions.

=0A


tom:0;">Thank you,

=0A


:4px;">The N​e​t​f​l​i​x Payment Suppor=

t Team

=0A =0A =0A =

Netflix Phish from DigitalOcean Part 4

Posted by Dave Yadallee on
=0A =

=0A =0A =

=

=0A =0A =

=0A =0A =


; border-style: solid; border-bottom-width: 0; border-color: #221F1F; borde=

r-top-width: 2px;">
=0A =0A =

=0A =0A
e=3D"font-size: 12px; color: #888; text-align: left; padding: 20px; backgro=

und-color: #ffffff;">=0A
100%;">=0A =0A =

=

=0A =0A =0A =


0px;">=0A 3D""
image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAABYCAYAAAHEokQmAAAABGdBTUEAAL=

GPC/xhBQAADT1JREFUeAG9W22MXFUZvvfO7MzubHeXbXfa3dmlaQCx8qEFCkkRQSMEUdpUkxohi=

iIxhtQfmhgSSDREE/jhD020McTYH0SKyjeIsaKxSlpCMWkURZquoaXd2e1ui+12v2fmXp/n3Dl3=

zpx77sfMtD3JzjnnPe/Hec/7nvd83bX/0z00329bBQtpdPGU/XL+Eo9l5++1igCyoiZnwLHVelB=

2WNpfrQjARM+QYMOKaJgTYP/nhOu3iYYhhV255goM0cDS7srKm8wfzOeZ+axYWGtbPirKC57XaC=

hlMmwXiXICVoRQQeb3dOWaGwiUyZZ9l9jBkEiMyUuGN8gyc+e5yoqou8vV95oaxjJN8oM2JxsUL=

QvyfiSrAv03dXYAfrcC5ZhEg8quaRC7BY7/s7WrSxQCyVKPvOUbLmhQiKxZdRDZYFv235h/KtNl=

2buy/d52DJqaJFvC5BDJdoc9PeIGJhJwOa4SSc2FExx1aypMlCd7ijtCQACEEqtB9kxjsASea3m=

/ZYEKqSnQesxxrBcqvptKBHbt/brzSVhAkMOw5Q0+f0c2Z52uuzKJAgJW1qFreyorb7AsUwmw48=

qgNBEQaczJBD4qiR7I5a2pOlGIYJWE2NYZScD8c+gak2wWFfVndOHUoFpnuaxPFx1BtTjbtmbhG=

rpVdaSQa+hcy4XiH3SYWnee1Yzled6dKoJedgp2s+l1BL3u9Nlh86JbJ3VEWYcEYV1ZFzm6tbYJ=

oFSEHUxSFJymoiAYgJRqE1gEC6NygqAXauxZWdZI/GrzXFRcYwDzQU/eDTd0RU6gfnRr2mvmV37=

n2MrZZlDD+bC+WL/XjEiJZzUmTf2gFD11Iyqp2oUJbHuXSnRPLmedjZqilDC6MPMtlYBlVfEmCZ=

lwjwTtOruB1igpbB3H+apStT6ZzVpzamBXG1kemZ9+UoedrdvdKEFHZn1j3bCRBHY29xGV8EqEH=

9owkqB0rvyuSsDyWX3h0BH0+vWQYj+RHfDuri9UOoKs53rX9BdPHT4n62quRxW1jWWHtppQYq2O=

wPrK/OlZEzwNzKFTH6zp0zNMijjyzzA0GeJ0wz0ZMp7WFjidFHHn2pN9a2/W4Ul1YWVu5vqAeag=

WXnpVBtWqu1+tpykLAfzph5D/GtZ2nclET3FJh8XVAz/txTBRk1+t+PuwaCIvX+4Z+rZsV2OJhK=

l5IIBA2oKa/LG+xVUR1TKm6Y9lfVaJPRKm5k0CuG1jTDqDGTVnGaN8QCtXXc4+7n+jUpMAIvXBb=

Snk+ZXmHZCJAYbqKWqgBkQdLySACJwbFJJkD/T73ixi+iwKMh6mEpCv20LMcs/9QCdS6/fn/TWA=

QkzJqAEROVRcgl+rVA+bCFWYXGhMQiIFsEF6VWlhJhKPgtgRDikNrq2z0fGahAXaArlt257t2I8=

QFpW2ISLPImiqSyZxY3tGBBqcqTQ/8ziKsbHky9jQ0qMqij0SBWSVTUpp8ZR6fPIlK79kth74s8=

ocShSg0ItixsncrsPU+uZMVgzTcl2LlgUMz5/8M6wyrjLVyztw5KLBmVoWQKLRxZkPMY9LH8WJe=

QEy2hJAxn3Z/FCcgFFsj5bgVWaj2dZREB/B3/s4ch40Meo/N3F6srd4v+fZWOW8Ejpbwhb/w57l=

BVcUd2CoQmcRnZltOV8oLU6/oMNZf6V78ACW0i2mNglLHCL06CmJ3E7uvFVN2lF4Pe0wljTOMW3=

PLRvUfLJQ3KnWWyk7DM2JOnjeT1thquJCAK+Z4kXAQ+oRSSVNV3Z41aSfb0yk2Nk9ZoInwcQQ8X=

y+kIAJd3w4AcXY7HAnwe3jvkr8MJHa27GjcWNmZBcGinlADeZCa1EYefLVfbvD0HiIENCNzRaFn=

IrZ35ANhum+eHbh1kCDtMP0weBlA5JN0iaTeEGooAa1FBcSi0uzz0kBywkHlyYBnHAUciyZ6NNS=

wJK/psiqMQ804ISjkNcTNr7kMt1fvII5hyhJRiCAU5VCcC4kbWyqVrxXiLAE9ksJjhEIIAENTSH=

vJJx00OuNxKcGcnFn3ZSaBNAGDB1vJgggo/Kq4q1L2Ma1dAChtDzmBIUkJUT557nBX8YQVWOGqU=

kDMuUlMYfpraSjreetIT41iNMiLADM6U1va9etZKanqzPOGtogzg4hAYxm1ID2SHLBWzLZK+hFH=

KaoFBJARA5TN4T8NWEhAorD7foy8KPChlEAe8+/8RTn5k24TqIGUcNkFNAl7IB5gZ6haLxlgXyR=

tmCLyAkXNUxGAaTsxtaPWliOY7zFZ5NM7D1tYbJEpAAyp7FL89N7JaOo/OMYphXoagob0QLEMOE=

HCQN1VBQifriT9r0pjBApgKicD0y4J9wmCjE/lQg7xAuojyoOHW/H8BZNt+HBh+6qbx3iBdQ18J=

nbB+KEXI63IdMwxQpQGWYyzufVuqnMAV3WfCm1gOG5k9MmpiqMd7hL2vVOagFkBG96RmWol4dxh=

GXIWFFiU0sCRkYHvqIz1es9sBuNLVNLAuzx8bjQL3h+Audk1Q4tCSAH3Fn8RPbOlPMChUspoyxT=

ywJwZ/EdnzT6dxBCZPhuWUA020bLlixCR92b2hKA0PFQg124hJc62MFPbQnAk0TwSh1m70NGMEy=

8+2lLAFnAEWOvJTfBmxg62haAh4GvUVBUEmEDK5DhrsKeww3aYYSU99B+IopBaf7knnLv2s2e64=

2AWQl7kA3AX6/i83LKfjU36G1SPlZQEdKWGUJKizNfTIsv8dLcdUjcqNzhzmRGC4BRyFFwrPY7J=

nvX3hfVfiHh4py/v8b1tLPkue4vJ1cNFzvj0jq1uEdg599I2IQmsQaPrFurvZiEd77bxVUO9z4T=

OK4cTXEeiO+Ad3O5t/hwPM75bRVvdDyO8XB5EK600qEzIWo8NrVq3TXnt5vR3MR3SOw899FZbNa=

TzjPRrBotbs0VR/QG5MKVxEIgP9DJY/T/h9Xh3ylO4HFdQlTaMFEo/iwO53y1CQX4I06UWBg4H/=

4BBeS9f9uCPG8nFqI726ZPSSgUIC6tkIMFOB94JPtLiuuiRBmu+4y3YYP6eVsiSasIgQIk5OiLP=

5S5XTrYsStZfZPTc0+TtynFvpSZCAywJgXE7QeQ5EXRESgw2ekq7VnbpwrFrxtkW2muKk10KqxJ=

ATbQfTgf5MTeB1eS+3uVsJWy63m/mO4tDus0vHbo1AohBSiEc4GXK5wP8CqLSnSS0E8HV3kv6Tz=

opqYrDR0vrm5UoEvMBX9iU4kyQut4p/PBs26aLAx9T+2MuFkCoJPhMSpAIf5krrsS6nw5osBOEq=

bTD6YLxeskD7pQ3P2bxIvLIxWA51h8CRHzAeUcyq8ZPqaLY25qw4fFL+HlhOzF0ZZPAlSiXStEK=

kABfJDipJZbDa7ShzrctYLlpXgV/jn5s/M8n3cyF2IVoBDReSghFjhM7EN4cOG3Op0kkH9zqjB0=

N7nIC1DhTm0wTVSACFSisch51t7z4EquZ/8aFnbkpZ6fm29y4/RKVIDE8sY3jzc1KsLJnPQcHCe=

Ubehq711dXVeyLCdyO1ZIpQCFNCzgl99FWD2R/H5H0shUsu3Bq3C16s8DvI4Bk1dKrSxuqRXg/Y=

iYB3QnlhGV/oTXZqzSHS3Ut+GT8lWYW7yTXEbnfWukn2OpFeAw+lao56jTY1+vVsfZ1kn6TK4LX=

zeh82Ai/tD/uEc4VVZLCjB4+1aQuW2Ne+5pfOv1pMq01XIRVr1RXNz6UUlYISWTlhQgT7HNQE5r=

+Asdvn++6eoHoMRMSplGtM24Ul0NN5LbC1pC/jeNkaAObFkB0uHjI9+dRBkbvn37qpmMvb3Os+3=

sLrjSCtxHLGycD5CTlNpSgF9S+ttuf8NHIevOTR+AFR5PEhjXzg+0bsWk5pogIlM9j6NpSwEy9N=

cGuJHCHR9WPgIl/qWAWi5uRFgd4VdssIRc3OKYtK0Amcp9kirAzmW2qvV2yrfj407GZvkEygUuK=

nWkAI+g3PCpaeTM1FHHtkP/a6HiJJW55ohXN+FCXCPwKWyEEh0pwI504ypGTyMLM7vgSnt1eCv1=

S8H3cvzRjeScMNGHpZuwYmBRcaKrsBpP8fZiDGli0xa8ffK7belKNYMVOlYgqhf8lxBY4d6o9rR=

w+YAbtbhdMAXYwdLC9Iu4FdidtrMmvNVYMK/CC5LYYmAu6FuMC6qAUOKhnd+AJSZNnUsLuxYK9G=

HzyJ0qFVHTBVfAfvRR1/YyHa/St+CTiQrmA0Oqen6+4ApwtEYWpw7atvNDdeRaLXPB/BgWOeFKi=

EwyXRQFKAzz4fuYD4ek4Hbyy/CPZUO0AojlRxMXTQF2uNvLbUPYbQxfG1rciNDKlzD5heZFVWDN=

4sQJfHDxYBv9Dki4+l+PrbfvSh18CxBwbLEAV3oCrvS7Fsma0PkfnWPc8MGYF9UCsheZPudLeN2=

fl/V28msQWmkN++XuwQn45TGUj0Gh47blHXcdpwxY2fHcsj02NPXZFN/ytNOJJJpyqVRw5mvrbH=

wvgU9OcT3vjaF/o65lr8f+6LpFyy3+H+OtP7zIZ7e2AAAAAElFTkSuQmCC" alt=3D"Netflix =

Logo" style=3D"width: 25px;">=0A
padding-left: 10px; color: #a4a4a4;">=0A =

Questions? Call 007-803-321-8275
N​e​t​f​l=

​i​x P​t​e. L​t​d.=0A =

=0A =0A =

=0A =0A =0A
lor: #888; text-align: center; padding: 20px; background-color: #f5f5f7;">=

=0A

N​e​t​f​l​i=

​x | 1​0​0 W​i​n​c​h​e̴=

3;s​t​e​r C​i​r​c​l​e, L=

203;o​s G​a​t​o​s, C​A 9​5​=

0​3​2

=0A

This email was sent =

to root@nk.ca regarding your N​e​t​fR=

03;l​i​x account.

=0A =0A =

=0A =0A =0A =

=0A =0A=0A=0A



------=_A_17fa1097644008c8ae6768fd467becbe--

Netflix Phish from DigitalOcean Part 2

Posted by Dave Yadallee on
This is a multi-part message in MIME format.



------=_A_17fa1097644008c8ae6768fd467becbe

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=EF=BB=BF=0A=0A =0A =0A =0A =0A =0A =0A =0A =0A =

@media (prefers-color-scheme: dark) {=0A body, .body-wrapper=

{background-color: #2d2d2d !important;}=0A .content-wrapper {ba=

ckground-color: #383838 !important;}=0A .content-inner p, .conte=

nt-inner div {color: #f1f1f1 !important;}=0A .header-text {color=

: #ffffff !important;}=0A .footer-content {background-color: #2d=

2d2d !important; border-top-color: #444444 !important;}=0A .foot=

er-content p {color: #aaaaaa !important;}=0A }=0A @media scre=

en and (max-width: 600px) {=0A .mobile-full-width {width: 100% !=

important; max-width: 100% !important;}=0A .mobile-padding {padd=

ing-left: 15px !important; padding-right: 15px !important;}=0A .=

mobile-stack {display: block !important; width: 100% !important;}=0A =

.mobile-center {text-align: center !important;}=0A .mobile-=

logo {font-size: 24px !important;}=0A .mobile-btn {display: bloc=

k !important; width: 85% !important; padding: 12px !important; font-size: 1=

4px !important;}=0A }=0A =0A=0A =0A =0A =0A =

=0A =0A =0A =

=0A =0A =0A =

=0A =0A =

=0A Action required: your payment has failed=0A=

=0A Reference: NFX-BE4EB007=0A=0A =

Hi root@nk.ca,=0A=0A We were unable=

to process the latest payment for your N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=

=E2=80=8Bl=E2=80=8Bi=E2=80=8Bx membership. As a result, your account has be=

en temporarily put on hold and access to streaming will be suspended within=

the next 24 hours if no action is taken.=0A=0A =

Why this happened: the c=E2=80=8Br=E2=80=8Be=E2=80=8Bd=E2=80=8Bi=E2=80=

=8Bt c=E2=80=8Ba=E2=80=8Br=E2=80=8Bd on file was declined by your bank. Thi=

s is commonly caused by an expired card, insufficient funds, or an outdated=

billing address.=0A=0A What you need to do now:=

update your billing details to restore your account and avoid permanent ca=

ncellation. This only takes a minute.=0A=0A =0A =

Update Payment Now=0A =

=0A=0A Important: if your payment is not up=

dated within 24 hours, your N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=

=E2=80=8Bi=E2=80=8Bx membership for root@nk.ca will be automatically cancel=

led and your viewing history, profiles, and personalized recommendations ma=

y be permanently lost.=0A=0A If you have already=

updated your payment information, please disregard this notice =E2=80=

=94 it may take a few minutes for our system to reflect the change.=0A=0A =

Need help? Our Member Services team is available =

24/7 to assist you with billing questions.=0A=0A =

Thank you,=0A=0A The N=E2=80=8Be=E2=80=8Bt=

=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=E2=80=8Bx Payment Support Team=0A=0A =

=0A =0A =0A =

=0A =0A =0A=

=0A =0A =

=0A =0A =

=0A =0A =0A =

=0A =0A =

=0A =0A =

=0A =0A =

=0A Questions? Call 007=

-803-321-8275=0AN=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=

=E2=80=8Bx P=E2=80=8Bt=E2=80=8Be. L=E2=80=8Bt=E2=80=8Bd.=0A =

=0A =0A =

=0A =0A =0A =

=0A =0A =0A =

N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=

=E2=80=8Bx | 1=E2=80=8B0=E2=80=8B0 W=E2=80=8Bi=E2=80=8Bn=E2=80=8Bc=E2=80=

=8Bh=E2=80=8Be=E2=80=8Bs=E2=80=8Bt=E2=80=8Be=E2=80=8Br C=E2=80=8Bi=E2=80=

=8Br=E2=80=8Bc=E2=80=8Bl=E2=80=8Be, L=E2=80=8Bo=E2=80=8Bs G=E2=80=8Ba=

=E2=80=8Bt=E2=80=8Bo=E2=80=8Bs, C=E2=80=8BA 9=E2=80=8B5=E2=80=8B0=E2=80=

=8B3=E2=80=8B2=0A=0A This email was sent to root=

@nk.ca regarding your N=E2=80=8Be=E2=80=8Bt=E2=80=8Bf=E2=80=8Bl=E2=80=8Bi=

=E2=80=8Bx account.



------=_A_17fa1097644008c8ae6768fd467becbe

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=EF=BB=BF=0A=0A=0A
=3D"UTF-8">=0A
initial-scale=3D1.0">=0A
phone=3Dno, date=3Dno, address=3Dno, email=3Dno">=0A
le-disable-message-reformatting">=0A
=3D"light dark">=0A
ght dark">=0A =0A =0A=0A

NetFlix Phish from DigitalOcean Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6W-000000009w0-1ela

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:09:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:09:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from panel.cometeleven.com ([157.245.61.76]:54764)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWRk-00000000OhM-4493

for root@nk.ca;

Fri, 05 Jun 2026 09:27:05 -0600

Received: from maex by panel.cometeleven.com with local (Exim 4.99.4)

(envelope-from )

id 1wVWQw-000000002e0-0x1L

for root@nk.ca;

Fri, 05 Jun 2026 21:56:06 +0630

From: =?UTF-8?B?TmV0ZmxpeCBQYXltZW50IFN1cHBvcnQ=?=

To: root@nk.ca

Subject: =?UTF-8?B?WW91ciBOZXRmbGl4IGFjY291bnQgaGFzIGJlZW4gdGVtcG9yYXJpbHkgc3VzcGVuZGVk?=

Date: Fri, 05 Jun 2026 15:26:06 +0000

Message-ID: <9e2ca0d55467d42f.1780673166@mingalarbuddha.com>

Reply-To: noreply@bawvp.com

X-Mailer: PHP/8.1.34 (cPanel-Exim)

X-Priority: 3

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="----=_A_17fa1097644008c8ae6768fd467becbe"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - panel.cometeleven.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [1013 992] / [47 12]

X-AntiAbuse: Sender Address Domain - mingalarbuddha.com

X-Get-Message-Sender-Via: panel.cometeleven.com: authenticated_id: maex/sender_address_domain

X-Authenticated-Sender: panel.cometeleven.com: noreply@mingalarbuddha.com

X-Source:

X-Source-Args: /opt/cpanel/ea-php81/root/usr/bin/php-cgi

X-Source-Dir: mmis.maex.com.mm:/mingalarbuddha.com/storage/app/public

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  @media (prefers-color-scheme: dark) { body, .body-wrapper

{background-color: #2d2d2d !important;} .content-wrapper {background-color:

#383838 !important;} .content-inner p, .content-inner div {color: [...]



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

[157.245.61.76 listed in dnsbl.ahbl.org]

[157.245.61.76 listed in dnsbl.ahbl.org]

[157.245.61.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[157.245.61.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

[157.245.61.76 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: laxmiassociate.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[157.245.61.76 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[157.245.61.76 listed in wl.mailspike.net]

2.3 MANGLED_INCHES BODY: mangled inches

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

2.3 MANGLED_CREDIT BODY: mangled credit

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 UNICODE_OBFU_ZW Obfuscating text with hidden characters

0.0 UNICODE_OBFU_ZW_MANY Heavily obfuscating text with hidden characters

0.9 URI_PHISH Phishing using web form

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?WW91ciBOZXRmbGl4IGFjY291bnQgaGFzIGJlZW4gdGVtcG9yYXJpbHkgc3VzcGVuZGVk?=

Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?cEgvODJaV1dTSEcvM2g0YVNlUXducE8wcFZhVHhsS0dMTVlpYWhHTnJSOEFx?=

=?utf-8?B?ZG00Z2lIVXJpQlo3RDR0NXpnN1B5cVlvVWN4RUE0RGhpbVZlRFF2Y1BmdnR4?=

=?utf-8?B?MW5hd1ljdG5ZQ0RMMEFPR3E4T1Q4K0VKUTd6eUlrWS9mZEFwaytZbXNQMk05?=

=?utf-8?B?YzNuSnZhakM3VlJjeVlhak9LY1lnRmkvZ2dtd3lpZk9CcGxCcUltR1huRVVK?=

=?utf-8?B?bzJaRVd2T3pmMWRremZWR0FCMDIrV0VXT240RkkyS3pZL1lDVnZWR084TXB0?=

=?utf-8?B?aStRRUZYS2RGNU1INFBsWHZmV2tGTGloSjBvNWk1RTBsZFBucXh6T0Nwd25B?=

=?utf-8?B?M3hITnJPMTl5bWVDVSthVytOd0xjT3Mvd1BxSFZoVUVRM1NaSzJPam80SG1B?=

=?utf-8?B?dXZmaDJNWE04ODF5a2t6OTZZN0E4WWlaV3FZRTRNUE1BdWswYmhPekJxaEt3?=

=?utf-8?B?Q1lFcHk3OUQxelRpZTEvd3ZRRnN3blpta25QSkxDZGxhY3QvdlFBcUZNcGsr?=

=?utf-8?B?dHVWaCtmdXRvd2c0ZFRJUThrc0RtVU0wM2hkYnowVzJVakFabjFRUFJJcXBu?=

=?utf-8?B?V09yNzhpemJJYXJjeWV0MTF1UDB6OHZZSUFsOGJZMFNXam1qODlJWDViYllh?=

=?utf-8?B?TWtGR2lsajRnUHJvTW5NZTN0SlRHYnpZZ1VqeTg3dUhPeEQvc0NNczc3bXZl?=

=?utf-8?B?RU8vdTdWTlB6aEhlUEJzdnFDS3RGK2F4Z29OV2VWaHZLQXV3K3RsTk03Qy9E?=

=?utf-8?B?SXg3QTE3b2FtcFNTa3ZLdXNwQWZsRGwrczMxTEpUd2lZQUZPenk5Ymg5bmFU?=

=?utf-8?B?M0NyMmp4REdOWUNQcU1CZXJrVkxZSlJIWlEwdU1nNDJFNis3ZDl0UkY4NmpY?=

=?utf-8?B?d09WZ2ZtRUZGbDNMQW5DbTEva3VpODJaVVVHQ05pMUJja3VsdWk5OElHOUh3?=

=?utf-8?B?SlprbGtYV0ZhSUlZbTQrNDIyMzZoMHVZQUtTSllnYlBmUjllR2JMVXhqNy9j?=

=?utf-8?B?NUl6MTBIZXkzOG5rQWJxQktHVVNwdUFCN3dZQjhEOUczMG5vVitBaDdVYjln?=

=?utf-8?B?aWJRRFFoWEljUE40M3ZnNmtMZm5DdDA3ZE4vckY3TDk4UkUyNmdTbWp3ckhT?=

=?utf-8?B?ZEtxRm05QzFIeTRUdTBUZGpsVzd3a3JOU0owTG1ZZXp4QzdQckU0Wit5NFVR?=

=?utf-8?B?YzQ3ODdnRjBHS1M2NVZCT2ZUVVZxWXRuMFhKblBhVnNmRCtpcUllblFFckY4?=

=?utf-8?B?a3AxSTdkU2phUW55c0JiaHNxZi9WWmlDeE9Xa0RJS3Rub3l3RnpzekhtaEN1?=

=?utf-8?B?bjVTOHdMTHZ5OGV1bDlmSDFsUjE2RnhYV25MQVAwZjBDZDJ6ci9rQ2xpeDV4?=

=?utf-8?B?SVNCVllzZFBISCtvOFJxL0hOMUhxaWltd1NiOXlkTktFR1A5OEthZlhGVm1J?=

=?utf-8?B?ZE1lbkVtYWNzQjlXbDNrbThYRFV2WEdHdkRVWHFZait2VnU5cHFRcXJPanZx?=

=?utf-8?B?ZEdyallIZGFNWTk5L0JJUnFRMUFuRkpkVmx3bjhYN0JxL29RYzNyM0g1ekZP?=

=?utf-8?B?TkU5dDNaYTR6UFdER3NSZDZZQ0cwaFBjZTF3N3AzL3FrU1lISHB1ckhNSjBw?=

=?utf-8?B?WVl3RHRvUFcvdVNGY0JaYmhWK1NTeTRyVXRoWXJWd1NkNFRIK0VINHlnYThX?=

=?utf-8?B?UVZwOHlMRVE4di9GdnpBaU1GVkp1WkFNMXBiNXBoeFAvR1hDaFVhc1kvZmJl?=

=?utf-8?B?Sk5OakpaNEpkejk5TDRYM2l3NitpNm9PckFLREtNQjR5YWxzTk1yL2FXR3ZU?=

=?utf-8?B?L2pnUW5UWStBMDFwU0g5ZkN1aWNHOXlrY3FiWllrREQyRWhrQW5XMVE1c0N5?=

=?utf-8?B?emVrRmtkOWd3MWZSNnVFVDAzWWxoTHhDaFlUTE81dUJxNFFMa1NmYnIrQy8v?=

=?utf-8?Q?pYBFzFL2bumdgiJNHa9tcmWw3wTTgJa3?=

Content-Type: multipart/alternative;

boundary="_000_TYUPR04MB6837B49428AE09CF1617BDE28A112TYUPR04MB6837apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-c3e7a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYUPR04MB6837.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2026 15:22:42.5655

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB5898





Hi,



I’m still waiting for your reply.



Can I show you the errors?



Best wishes!



From: Kerry

Sent: 01 April 2026

Subject: Re: Ranking



Hello,



I noticed a few errors that could be affecting your website's search rankings.



Would you mind if I sent them over?



I have an audit report and screenshots ready that explain the issues clearly.



If you’re interested, please let me know, and I’ll send over the details.



Thank you,

Kerry





Web/SEO/App spam from Microsoft Outlook PArt 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6N-000000009v2-1F6i

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:08:55 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:08:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:59759 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWOn-00000000Ife-47AA

for sales@nk.ca;

Fri, 05 Jun 2026 09:24:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=uVui53CjXdOOdi0X7xfyZHTqgTK71qYnVUCmszn8oIsh6JlH3IgLitDjv4r7KYuzN8BZhUmnzNWxHYQH01LdAVB9wVc07kADJYBcPJ4iWBzRocZa3a2Tsfi+QCXakYfLS41372Kq5p354hlwmnXBxr8GmRM/xUe7zbAeovNO8wGwnJpXjt2amxi25Tz4sp/A+jMQcSABwE/AckU92Hxm6X4KtecAw4ba7MnbsILKpT73dMHN0mzupmffOjeTVLW0yPlZj3OyjBo5EA79Efn7+yCw3ZaWXjLwsexT0sSMcFl1DOIGhl56ozrOfWKg+XH3H+9rq3wvAmS2t2vGOS6x6g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=N1UU+ZQWTBJOY7aWfAZPB7Yb3HqwvjyomfokxZuC2He+qPNgVLApFVO9PdvvhtrVmuqKuLqvnT6dDixE+xHVyasoYW0UBw2BWwSVKsAf4bmeXl57Cgi0d/h60cmOcgr4gUqRczPbizkih8TNhHi1sHSogLXJ/ggrQuVEGRlOWZJe/A8K8fJJa1fH1vfgjhIepnQjVPY371aikHXWVIy/jjAEtnAhV6roF4DvQSUNlJLO7YnZpLJmbMaxfCu6PkhAA+jBq6HKUAS5oXRlZuASlrnsYPHrt59q2+5yri1uSkt/JSdy6td1Gm1QkC4B9RqKVyMsgB5Tm4HTE3rx7ZT3LA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=RnUIn1JG5uAwUeM4ZHH6enIYCqQ2FAIDJTZ/2BLFrnn9g/XJ7a0f1NCL3iF3akncT3a7z795hVferkN7OZfgMFjOeEbnJ2lAXaR39DebawP/Wk3Tsc/yZHVuYZP6dM1LbuALAXTACqNvyB2iCJOz+B1N2peXdsuy3Ac67JduVHaqmyHxhJl/py1pwTuPZvUYIpOPyPptqoFAsr1QMzRYVxyXLd/obobm+aOmGFOCrKQejBlMBfHq8ha+GtwIeWWqFG4A6tF2be6+2sXNViKpVreGIsUZFtlx+7ciEcldGm8O/jbHg32qS6AY7jXNPqkx+Wj8xHD8mxYj235Z0YfItw==

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com (2603:1096:400:359::12)

by SEZPR04MB5898.apcprd04.prod.outlook.com (2603:1096:101:7e::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.10; Fri, 5 Jun 2026

15:22:43 +0000

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927]) by TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927%2]) with mapi id 15.21.0092.007; Fri, 5 Jun 2026

15:22:43 +0000

From: Kerry Hunt

To: Kerry Hunt

Subject: =?utf-8?B?UmU6IFNFTyBCcmVha2Rvd24g8J+Tig==?=

Thread-Topic: =?utf-8?B?U0VPIEJyZWFrZG93biDwn5OK?=

Thread-Index: AQHcx2FygmZ0af99p0ua+GayEe/nbLYBTnTrgC8hB4A=

Date: Fri, 5 Jun 2026 15:22:42 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYUPR04MB6837:EE_|SEZPR04MB5898:EE_

x-ms-office365-filtering-correlation-id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

x-ms-exchange-slblob-mailprops:

Ugkdk/JpyJ6+JwvoIulIV8wWGD0NN93bbOkTh7SSbAzAqWz7E0arvWaJycM3YvYTIvVn2WKwGJVy7gTJJVDVmf96H9ZYzWlwVVoSgphx7uBLM8L+Is2EiDdNDhPNTD342C1YhRl1xh5vD6tdeX0ys5mX7ZbAHYRwr/87Ee48azOSCSGYvk89fRrjCHMxTsGOv5vuvGj0cyBuqz65xyelOEMo0kYm16uxtp6T0DBu4pojLaJB/dFenBcY5AwcUVpdcGepzssBnjDvJgpSqFvXjQINffbQfMJ+QyJ+MUrS3NkBkTz9esO9yWb/p2AsMow1sxHGxNQA+/AcMZsV1RzzCvUH5qdCpE1H9xsnJ7pItu9c7GVpg37DSKawQuDl4ztZPRmz3Ca/RXlij2+96urksQfKl6Q7QQh0cTWy7YmrzDff4IKXA4EJu56KFcK83PqaUGq23dB20w0+uPWWirTNteVYHcFts8ceBeY6NVtJ6Ufso8H1yBVfNG++Hf0OnA5ai661h8T3TMCZjPKJ6+1hUYMOGb3HkfxMzIm67aVOZLCVavyS3NufEWIFBdN9uyCNUof1Bye8HsJyLXzqeWjDn0RT4sGOUZkwH08FUecNX/BPTic0wc++AZIy/02SfoYd

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|39105399006|31061999003|24071999003|8062599012|8060799015|15030799006|15080799012|7071999006|55001999006|37011999003|24121999003|22091999003|16051099003|19101099003|20031999006|3412199025|440099028|102099032|35041999009|51015399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?SjUrVUZ0eEwvNkFnRkJlMjdMSy9NM2JlRzFZUy9CS0hHTzhwRXRaYnArOStp?=

=?utf-8?B?eTh1VkVJUU9tbHdQVVlTT3pLbW5jeXZ3djBpSnhNOTVlTm9MVFpMRFloZzkx?=

=?utf-8?B?UXRzT2JHb01NcjVNTWV2Z0EzN3A4bldFcFNKMGpIWTl6WmExRnUzcVU3UlVD?=

=?utf-8?B?azhFZVpEbkZHVEZ2anhGRzZrdWk4MUpFMThYRitEZmRodklyTXpDRTZpOUd1?=

=?utf-8?B?WGF1N09jQTVja2g0TGI3K0dDVHVBWXlRS1QwMEJjV29sejdPSjFoL1lXRC82?=

=?utf-8?B?RTdTeXNLQ2Y5NVg4ZmFjbGdqT2szZUlKRWRRQjYwMG53S3BvaGVZZDR5NHBJ?=

=?utf-8?B?MklZNWU4ZnA3R0hzSFFiQm9PTnFUbDQ2cnB5enFyTE5OeTNYb09oTytrYmJC?=

=?utf-8?B?MFlaVG5GMk11QWRJN1NLS3dpR0tCTFdBK0YzTkdidDE1Z1EvNUxpWkxMZUti?=

=?utf-8?B?aFppaGVIT0VVWlEyWThhV1hmTVdwQlJzdEViNHB6TDBMU2wyRndPWENoTzJ1?=

=?utf-8?B?OGpZZThFK2FITEhKQ1hld2hLNDZFdUptZ0dtUlRGWDltUjluRS8rSG5nN1p4?=

=?utf-8?B?YW1HWGZLd0VkaEtCeWpwbGN0RjlMNVQvbm1wdzFHbS9BamNCTkFaMHNidlkx?=

=?utf-8?B?WGJxV3lJOE1qWU1RMGI1a05VTUVNcUF6L1NiQm5TU1FvTjVTaFNNZ1BueXpU?=

=?utf-8?B?dVRmTmJwc3V4WGs5dWg0bCtIdy9QK1BTenAxY0RsdjFBZk9UbXNmNjMvTElm?=

=?utf-8?B?cTFpRFpxdXVBZmQ3dFJHZkxmb0ZMeEVGd0NyZkNHNlphbVU5LzhXZDV6UTYx?=

=?utf-8?B?Z1RGVVUrZDBpMEEwZDljK1RGS2Qxek96M0dUSTZwUlJEdmovaFU5NmJFbWsw?=

=?utf-8?B?STBCUGFNR29FNThXSGFWRnRpRXBHdHRacU1QRWVraG9JRGgzNll5WXZSeDcy?=

=?utf-8?B?dTQvaWgyVE4rT3pQcEZaVnpRR1Boby81bXdrbmcrcHN1cnBhRDdBLzFjcEoy?=

=?utf-8?B?V2t3eVlqNEZLRXJOcjJYa0h4ajdSNHJBZnVTdHNlSGtrZWVwcmZURGd2VnNS?=

=?utf-8?B?LzgzN0VvcDk4VDBSaE1ha2lqUndtWXh1Yit1RDBkdFFxN0dpTzlOZ3NKdTR0?=

=?utf-8?B?SDN0UVVBaHY2SjQyZTV4Q0E5MlYxSkQvYW1UUXBwa25XUXhVTVhQZzM5dTJX?=

=?utf-8?B?VXVOck50OExqM1Q0STVOdGErY1NyRWcxU2F0d1hWTTQ5MC9ONUpFNlowZFJZ?=

=?utf-8?B?RkNFdlVSSDZoMlAweU15SlZ4bC9oMFp6QmR4V3lnMjNBOWF6SUgzTUJHN3BG?=

=?utf-8?B?WjJIbU5EWU9UV3ZzbUQzK0Z6bndxaVZYT2ZHNldWaDkxUjNIelE0dFVMakFw?=

=?utf-8?B?ZjF1OGF4M3RIVFdwWU1tcVlURHpJNjA3dnRyK25uOGNaVi9aNEViMTF6cFNT?=

=?utf-8?B?a2piWWZ0UGx0YjhlK1VuSUhFUzVjWjVYRGxxR3hHeC96akRtQnc4N1JpSWVV?=

=?utf-8?B?aHIzMEF1UDZTSHN0a1oyZVBFbHRNZm5xKy9ZY0FBdW9yRlpRNHQwdWRkajYr?=

=?utf-8?B?OGpreXJtYjBwNXlhenBjcklUc0JqQm1Nc1VaMkkwelVkUXYyWWRzS3ZtRE5M?=

=?utf-8?B?U0x6d0QrUnIwTTY4VmhTdlo0TzRUb0ZXMGJwcmpkdWhTamJkcHo2b0craG9j?=

=?utf-8?B?amVNNVQ3dUNKYVRna0xxdytqNnNzNFQ4TFlSZXYrQi9XbGpmOWJ1WDR6ejQ1?=

=?utf-8?Q?Ee7FQxRZLKo2HuwB5F1GtuiaMsKSldQcz0kUWtH?=

Web/SEO/App spam from Microsoft Outlook PArt 2

Posted by Dave Yadallee on


x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?cEgvODJaV1dTSEcvM2g0YVNlUXducE8wcFZhVHhsS0dMTVlpYWhHTnJSOEFx?=

=?utf-8?B?ZG00Z2lIVXJpQlo3RDR0NXpnN1B5cVlvVWN4RUE0RGhpbVZlRFF2Y1BmdnR4?=

=?utf-8?B?MW5hd1ljdG5ZQ0RMMEFPR3E4T1Q4K0VKUTd6eUlrWS9mZEFwaytZbXNQMk05?=

=?utf-8?B?YzNuSnZhakM3VlJjeVlhak9LY1lnRmkvZ2dtd3lpZk9CcGxCcUltR1huRVVK?=

=?utf-8?B?bzJaRVd2T3pmMWRremZWR0FCMDIrV0VXT240RkkyS3pZL1lDVnZWR084TXB0?=

=?utf-8?B?aStRRUZYS2RGNU1INFBsWHZmV2tGTGloSjBvNWk1RTBsZFBucXh6T0Nwd25B?=

=?utf-8?B?M3hITnJPMTl5bWVDVSthVytOd0xjT3Mvd1BxSFZoVUVRM1NaSzJPam80SG1B?=

=?utf-8?B?dXZmaDJNWE04ODF5a2t6OTZZN0E4WWlaV3FZRTRNUE1BdWswYmhPekJxaEt3?=

=?utf-8?B?Q1lFcHk3OUQxelRpZTEvd3ZRRnN3blpta25QSkxDZGxhY3QvdlFBcUZNcGsr?=

=?utf-8?B?dHVWaCtmdXRvd2c0ZFRJUThrc0RtVU0wM2hkYnowVzJVakFabjFRUFJJcXBu?=

=?utf-8?B?V09yNzhpemJJYXJjeWV0MTF1UDB6OHZZSUFsOGJZMFNXam1qODlJWDViYllh?=

=?utf-8?B?TWtGR2lsajRnUHJvTW5NZTN0SlRHYnpZZ1VqeTg3dUhPeEQvc0NNczc3bXZl?=

=?utf-8?B?RU8vdTdWTlB6aEhlUEJzdnFDS3RGK2F4Z29OV2VWaHZLQXV3K3RsTk03Qy9E?=

=?utf-8?B?SXg3QTE3b2FtcFNTa3ZLdXNwQWZsRGwrczMxTEpUd2lZQUZPenk5Ymg5bmFU?=

=?utf-8?B?M0NyMmp4REdOWUNQcU1CZXJrVkxZSlJIWlEwdU1nNDJFNis3ZDl0UkY4NmpY?=

=?utf-8?B?d09WZ2ZtRUZGbDNMQW5DbTEva3VpODJaVVVHQ05pMUJja3VsdWk5OElHOUh3?=

=?utf-8?B?SlprbGtYV0ZhSUlZbTQrNDIyMzZoMHVZQUtTSllnYlBmUjllR2JMVXhqNy9j?=

=?utf-8?B?NUl6MTBIZXkzOG5rQWJxQktHVVNwdUFCN3dZQjhEOUczMG5vVitBaDdVYjln?=

=?utf-8?B?aWJRRFFoWEljUE40M3ZnNmtMZm5DdDA3ZE4vckY3TDk4UkUyNmdTbWp3ckhT?=

=?utf-8?B?ZEtxRm05QzFIeTRUdTBUZGpsVzd3a3JOU0owTG1ZZXp4QzdQckU0Wit5NFVR?=

=?utf-8?B?YzQ3ODdnRjBHS1M2NVZCT2ZUVVZxWXRuMFhKblBhVnNmRCtpcUllblFFckY4?=

=?utf-8?B?a3AxSTdkU2phUW55c0JiaHNxZi9WWmlDeE9Xa0RJS3Rub3l3RnpzekhtaEN1?=

=?utf-8?B?bjVTOHdMTHZ5OGV1bDlmSDFsUjE2RnhYV25MQVAwZjBDZDJ6ci9rQ2xpeDV4?=

=?utf-8?B?SVNCVllzZFBISCtvOFJxL0hOMUhxaWltd1NiOXlkTktFR1A5OEthZlhGVm1J?=

=?utf-8?B?ZE1lbkVtYWNzQjlXbDNrbThYRFV2WEdHdkRVWHFZait2VnU5cHFRcXJPanZx?=

=?utf-8?B?ZEdyallIZGFNWTk5L0JJUnFRMUFuRkpkVmx3bjhYN0JxL29RYzNyM0g1ekZP?=

=?utf-8?B?TkU5dDNaYTR6UFdER3NSZDZZQ0cwaFBjZTF3N3AzL3FrU1lISHB1ckhNSjBw?=

=?utf-8?B?WVl3RHRvUFcvdVNGY0JaYmhWK1NTeTRyVXRoWXJWd1NkNFRIK0VINHlnYThX?=

=?utf-8?B?UVZwOHlMRVE4di9GdnpBaU1GVkp1WkFNMXBiNXBoeFAvR1hDaFVhc1kvZmJl?=

=?utf-8?B?Sk5OakpaNEpkejk5TDRYM2l3NitpNm9PckFLREtNQjR5YWxzTk1yL2FXR3ZU?=

=?utf-8?B?L2pnUW5UWStBMDFwU0g5ZkN1aWNHOXlrY3FiWllrREQyRWhrQW5XMVE1c0N5?=

=?utf-8?B?emVrRmtkOWd3MWZSNnVFVDAzWWxoTHhDaFlUTE81dUJxNFFMa1NmYnIrQy8v?=

=?utf-8?Q?pYBFzFL2bumdgiJNHa9tcmWw3wTTgJa3?=

Content-Type: multipart/alternative;

boundary="_000_TYUPR04MB6837B49428AE09CF1617BDE28A112TYUPR04MB6837apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-c3e7a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYUPR04MB6837.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2026 15:22:42.5655

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB5898





Hi,



I’m still waiting for your reply.



Can I show you the errors?



Best wishes!



From: Kerry

Sent: 01 April 2026

Subject: Re: Ranking



Hello,



I noticed a few errors that could be affecting your website's search rankings.



Would you mind if I sent them over?



I have an audit report and screenshots ready that explain the issues clearly.



If you’re interested, please let me know, and I’ll send over the details.



Thank you,

Kerry



Web/SEO/App spam from Microsoft Outlook PArt 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 10:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVX6H-000000009tk-0GuE

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 10:08:49 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 10:08:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:59759 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWOn-00000000Ife-47AA

for sales@nk.ca;

Fri, 05 Jun 2026 09:24:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=uVui53CjXdOOdi0X7xfyZHTqgTK71qYnVUCmszn8oIsh6JlH3IgLitDjv4r7KYuzN8BZhUmnzNWxHYQH01LdAVB9wVc07kADJYBcPJ4iWBzRocZa3a2Tsfi+QCXakYfLS41372Kq5p354hlwmnXBxr8GmRM/xUe7zbAeovNO8wGwnJpXjt2amxi25Tz4sp/A+jMQcSABwE/AckU92Hxm6X4KtecAw4ba7MnbsILKpT73dMHN0mzupmffOjeTVLW0yPlZj3OyjBo5EA79Efn7+yCw3ZaWXjLwsexT0sSMcFl1DOIGhl56ozrOfWKg+XH3H+9rq3wvAmS2t2vGOS6x6g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=N1UU+ZQWTBJOY7aWfAZPB7Yb3HqwvjyomfokxZuC2He+qPNgVLApFVO9PdvvhtrVmuqKuLqvnT6dDixE+xHVyasoYW0UBw2BWwSVKsAf4bmeXl57Cgi0d/h60cmOcgr4gUqRczPbizkih8TNhHi1sHSogLXJ/ggrQuVEGRlOWZJe/A8K8fJJa1fH1vfgjhIepnQjVPY371aikHXWVIy/jjAEtnAhV6roF4DvQSUNlJLO7YnZpLJmbMaxfCu6PkhAA+jBq6HKUAS5oXRlZuASlrnsYPHrt59q2+5yri1uSkt/JSdy6td1Gm1QkC4B9RqKVyMsgB5Tm4HTE3rx7ZT3LA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IOgOEpdh6SLpGFOi5dMA0tFvERbupaPTTwirDTtIsLU=;

b=RnUIn1JG5uAwUeM4ZHH6enIYCqQ2FAIDJTZ/2BLFrnn9g/XJ7a0f1NCL3iF3akncT3a7z795hVferkN7OZfgMFjOeEbnJ2lAXaR39DebawP/Wk3Tsc/yZHVuYZP6dM1LbuALAXTACqNvyB2iCJOz+B1N2peXdsuy3Ac67JduVHaqmyHxhJl/py1pwTuPZvUYIpOPyPptqoFAsr1QMzRYVxyXLd/obobm+aOmGFOCrKQejBlMBfHq8ha+GtwIeWWqFG4A6tF2be6+2sXNViKpVreGIsUZFtlx+7ciEcldGm8O/jbHg32qS6AY7jXNPqkx+Wj8xHD8mxYj235Z0YfItw==

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com (2603:1096:400:359::12)

by SEZPR04MB5898.apcprd04.prod.outlook.com (2603:1096:101:7e::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.10; Fri, 5 Jun 2026

15:22:43 +0000

Received: from TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927]) by TYUPR04MB6837.apcprd04.prod.outlook.com

([fe80::87f3:6ae4:4078:8927%2]) with mapi id 15.21.0092.007; Fri, 5 Jun 2026

15:22:43 +0000

From: Kerry Hunt

To: Kerry Hunt

Subject: =?utf-8?B?UmU6IFNFTyBCcmVha2Rvd24g8J+Tig==?=

Thread-Topic: =?utf-8?B?U0VPIEJyZWFrZG93biDwn5OK?=

Thread-Index: AQHcx2FygmZ0af99p0ua+GayEe/nbLYBTnTrgC8hB4A=

Date: Fri, 5 Jun 2026 15:22:42 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYUPR04MB6837:EE_|SEZPR04MB5898:EE_

x-ms-office365-filtering-correlation-id: 42e0e7fe-b2b1-4549-f039-08dec31649ae

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|39105399006|31061999003|24071999003|8062599012|8060799015|15030799006|15080799012|7071999006|55001999006|37011999003|24121999003|22091999003|16051099003|19101099003|20031999006|3412199025|440099028|102099032|35041999009|51015399003|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?SjUrVUZ0eEwvNkFnRkJlMjdMSy9NM2JlRzFZUy9CS0hHTzhwRXRaYnArOStp?=

=?utf-8?B?eTh1VkVJUU9tbHdQVVlTT3pLbW5jeXZ3djBpSnhNOTVlTm9MVFpMRFloZzkx?=

=?utf-8?B?UXRzT2JHb01NcjVNTWV2Z0EzN3A4bldFcFNKMGpIWTl6WmExRnUzcVU3UlVD?=

=?utf-8?B?azhFZVpEbkZHVEZ2anhGRzZrdWk4MUpFMThYRitEZmRodklyTXpDRTZpOUd1?=

=?utf-8?B?WGF1N09jQTVja2g0TGI3K0dDVHVBWXlRS1QwMEJjV29sejdPSjFoL1lXRC82?=

=?utf-8?B?RTdTeXNLQ2Y5NVg4ZmFjbGdqT2szZUlKRWRRQjYwMG53S3BvaGVZZDR5NHBJ?=

=?utf-8?B?MklZNWU4ZnA3R0hzSFFiQm9PTnFUbDQ2cnB5enFyTE5OeTNYb09oTytrYmJC?=

=?utf-8?B?MFlaVG5GMk11QWRJN1NLS3dpR0tCTFdBK0YzTkdidDE1Z1EvNUxpWkxMZUti?=

=?utf-8?B?aFppaGVIT0VVWlEyWThhV1hmTVdwQlJzdEViNHB6TDBMU2wyRndPWENoTzJ1?=

=?utf-8?B?OGpZZThFK2FITEhKQ1hld2hLNDZFdUptZ0dtUlRGWDltUjluRS8rSG5nN1p4?=

=?utf-8?B?YW1HWGZLd0VkaEtCeWpwbGN0RjlMNVQvbm1wdzFHbS9BamNCTkFaMHNidlkx?=

=?utf-8?B?WGJxV3lJOE1qWU1RMGI1a05VTUVNcUF6L1NiQm5TU1FvTjVTaFNNZ1BueXpU?=

=?utf-8?B?dVRmTmJwc3V4WGs5dWg0bCtIdy9QK1BTenAxY0RsdjFBZk9UbXNmNjMvTElm?=

=?utf-8?B?cTFpRFpxdXVBZmQ3dFJHZkxmb0ZMeEVGd0NyZkNHNlphbVU5LzhXZDV6UTYx?=

=?utf-8?B?Z1RGVVUrZDBpMEEwZDljK1RGS2Qxek96M0dUSTZwUlJEdmovaFU5NmJFbWsw?=

=?utf-8?B?STBCUGFNR29FNThXSGFWRnRpRXBHdHRacU1QRWVraG9JRGgzNll5WXZSeDcy?=

=?utf-8?B?dTQvaWgyVE4rT3pQcEZaVnpRR1Boby81bXdrbmcrcHN1cnBhRDdBLzFjcEoy?=

=?utf-8?B?V2t3eVlqNEZLRXJOcjJYa0h4ajdSNHJBZnVTdHNlSGtrZWVwcmZURGd2VnNS?=

=?utf-8?B?LzgzN0VvcDk4VDBSaE1ha2lqUndtWXh1Yit1RDBkdFFxN0dpTzlOZ3NKdTR0?=

=?utf-8?B?SDN0UVVBaHY2SjQyZTV4Q0E5MlYxSkQvYW1UUXBwa25XUXhVTVhQZzM5dTJX?=

=?utf-8?B?VXVOck50OExqM1Q0STVOdGErY1NyRWcxU2F0d1hWTTQ5MC9ONUpFNlowZFJZ?=

=?utf-8?B?RkNFdlVSSDZoMlAweU15SlZ4bC9oMFp6QmR4V3lnMjNBOWF6SUgzTUJHN3BG?=

=?utf-8?B?WjJIbU5EWU9UV3ZzbUQzK0Z6bndxaVZYT2ZHNldWaDkxUjNIelE0dFVMakFw?=

=?utf-8?B?ZjF1OGF4M3RIVFdwWU1tcVlURHpJNjA3dnRyK25uOGNaVi9aNEViMTF6cFNT?=

=?utf-8?B?a2piWWZ0UGx0YjhlK1VuSUhFUzVjWjVYRGxxR3hHeC96akRtQnc4N1JpSWVV?=

=?utf-8?B?aHIzMEF1UDZTSHN0a1oyZVBFbHRNZm5xKy9ZY0FBdW9yRlpRNHQwdWRkajYr?=

=?utf-8?B?OGpreXJtYjBwNXlhenBjcklUc0JqQm1Nc1VaMkkwelVkUXYyWWRzS3ZtRE5M?=

=?utf-8?B?U0x6d0QrUnIwTTY4VmhTdlo0TzRUb0ZXMGJwcmpkdWhTamJkcHo2b0craG9j?=

=?utf-8?B?amVNNVQ3dUNKYVRna0xxdytqNnNzNFQ4TFlSZXYrQi9XbGpmOWJ1WDR6ejQ1?=

=?utf-8?Q?Ee7FQxRZLKo2HuwB5F1GtuiaMsKSldQcz0kUWtH?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Product catalogue request spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 09:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWLt-00000000Gge-2eRo

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 09:20:53 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 09:20:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vzded219.smartservers.com.au ([203.98.83.103]:35844)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVV96-00000000J2b-3Coe

for root@nk.ca;

Fri, 05 Jun 2026 08:03:46 -0600

Received: from [155.103.70.103] (port=53463 helo=menbakasal262)

by vzded219.smartservers.com.au with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1wVV8J-0000000DUqi-3jZS

for root@nk.ca;

Fri, 05 Jun 2026 22:02:47 +0800

From: "Hans Edstrom"

Subject: Re: Purchase.

To:

Content-Type: multipart/alternative; boundary="Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B"

MIME-Version: 1.0

Reply-To:

Date: Fri, 5 Jun 2026 07:02:46 -0700

Message-Id: <0545202606020713DA988C2C$75C4B666D2@hualeonggroup.sg>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vzded219.smartservers.com.au

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - hualeonggroup.sg

X-Get-Message-Sender-Via: vzded219.smartservers.com.au: authenticated_id: ehs@hualeonggroup.sg

X-Authenticated-Sender: vzded219.smartservers.com.au: ehs@hualeonggroup.sg

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir, I am reaching out regarding our interest in your

products. Kindly provide your product price list along with catalogs for

our review. Additionally, please include any relevant information that may

ass [...]



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

[155.103.70.103 listed in dnsbl.ahbl.org]

[155.103.70.103 listed in dnsbl.ahbl.org]

[155.103.70.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

[203.98.83.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[155.103.70.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[155.103.70.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

[203.98.83.103 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[edstromh00(at)gmail.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[155.103.70.103 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[203.98.83.103 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re: Purchase.



This is a multi-part message in MIME format



--Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Dear Sir,



I am reaching out regarding our interest in your products. Kindly prov=

ide your product price list along with catalogs for our review. Additi=

onally, please include any relevant information that may assist us in =

conducting due diligence about your company.



Thank you for your attention to this matter. We are optimistic about t=

he potential for a long-term business partnership and look forward to =

your response.



Regards

Mr. Hans Edstrom

CEO

Company Name: INWATER AB

Address: Lovangsvagen 12 194 45 Upplands V=E4sby

Stockholms,

Tel: +46739303676



--Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>Re: Purchase.



Dear =

Sir,

I am reaching out regarding our interest in your products. =

Kindly provide your product price list along with catalogs for our rev=

iew. Additionally, please include any relevant information that may as=

sist us in conducting due diligence about your company.

Thank yo=

u for your attention to this matter. We are optimistic about the poten=

tial for a long-term business partnership and look forward to your res=

ponse.

Regards
Mr. Hans Edstrom
CEO
Company Name: INWAT=

ER AB
Address: Lovangsvagen 12 194 45 Upplands V=E4sby
Stockholm=

s,
Tel: +46739303676







--Qq89=_CJhn12MdlKIlCWGmZpyeR9n1ex3B--



Geek Squad Phish from Microsoft Outlook Part 4

Posted by Dave Yadallee on


Haresasz Nxysarwsa has invited you to Geek Squad Security Renewal Alert

Title: Geek Squad Security Renewal Alert

Location: https://meet.google.com/pas-qxpy-ach

When: June 5, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Protected Customer,



We wish to notify you that the Geek Squad 365 Advanced Protection Plan safeguarding your devices has been securely renewed for another three-year term.



The mandatory renewal fee of $299.99 was processed using your stored payment details. It can take up to twenty-four hours for this purchase to appear on bank statements.



Protection Summary:

Contract: 365 Advanced Protection Plan

Period: 3 Years

Charged: $299.99



To report any unrecognized or potentially fraudulent activity regarding this charge, call our Billing Specialists right away at +1 805 422 6065 to receive immediate support from us.



Thank you for continually prioritizing security with Geek Squad services.



Respectfully yours, Billing Team



-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Pripojiť sa cez Google Meet: https://meet.google.com/pas-qxpy-ach



Viac o službe Meet sa dozviete na https://support.google.com/a/users/answer/9282720



Túto sekciu neupravujte.

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Attendees:



cynthiaperez389903@groups.outlook.com



Geek Squad Security Renewal Alert

Pripojiť sa cez Google Meet – Dear Protected Customer, We wish to notify you that the Geek Squad 365 Advanced Protection Plan safeguarding your devices has been securely renewed for another three-year term. The mandatory renewal



Pripojiť sa cez Google Meet

Odkaz na stretnutie

meet.google.com/pas-qxpy-ach

Dear Protected Customer,



We wish to notify you that the Geek Squad 365 Advanced Protection Plan safeguarding your devices has been securely renewed for another three-year term.



The mandatory renewal fee of $299.99 was processed using your stored payment details. It can take up to twenty-four hours for this purchase to appear on bank statements.



Protection Summary:

Contract: 365 Advanced Protection Plan

Period: 3 Years

Charged: $299.99



To report any unrecognized or potentially fraudulent activity regarding this charge, call our Billing Specialists right away at +1 805 422 6065 to receive immediate support from us.



Thank you for continually prioritizing security with Geek Squad services.



Respectfully yours, Billing Team

Kedy

piatok 5. jún 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Geek Squad Phish from Microsoft Outlook Part 2

Posted by Dave Yadallee on
X-Microsoft-Antispam-Message-Info:

=?utf-8?B?NHpob1Q3d0FGMEx3UW5PMm9NWi96UnkzUzFjMnZ5R2dreGpoRSsrTE9nTGlJ?=

=?utf-8?B?UmxEN2IzL2k1bXNoWEpIL2p3Ynkzak5mcnpLQ3A0ZGM4bWx1Rko0bGlyUWp1?=

=?utf-8?B?VE5vcG1UMHVpMXI1cFlWV3VsK1k4ME5nZUpUUDRiYllMeHdlVUFsVWpsT0w0?=

=?utf-8?B?eHFpSE1mNkdwRVMrbG5tNXd2Z2ZzTHRRWXd5c2pLbzkyTUJaT2g5bFZBUGha?=

=?utf-8?B?WWxRZDBhc0RLTGZreU1mY0YzZ1BEZWNWcTdqbG5nQm1qZ3ozRmk4cEc1R25t?=

=?utf-8?B?REtQbHRnNit1NyswQ3IrdGh3V0g4SkNWSjJ0bWtocGFOVHlIY3Rxc3FlUHM5?=

=?utf-8?B?THlKaG5YY3JBZ1VyV2pKL1JVb29vajlWaFc0LzZneXQ0VzNRN0pzWWY5UHN2?=

=?utf-8?B?SUs5OUhDV0dlNThXWnlQWUV1STRodHYxNHpiQmVtNDdDcGpGNytGbitjdXk1?=

=?utf-8?B?M1ZsUERxZ2ZvbnBjMXFDcGxwbENLUnRIN2crTjI5R0pQYmdkK0NpTXFYUEFr?=

=?utf-8?B?djF4MVg2VGF4MkhDWEMxaXBsN0pFQ1hqdU5WYjJRTE9pSzJkYzJieFRhVlNL?=

=?utf-8?B?RGpWYkVDMitlbkYvMEQ1MWFBYW5BaHJleXBjMk13anFmRFRsZFRROFVFSm5E?=

=?utf-8?B?WjVhMGFuM1l4WEFBWHM2RHJRMkN5ZFNvaTZyUUQxcU1BOUVuNGp6NU1iRkpD?=

=?utf-8?B?TDFma3JDRXBxZFNLZXRZbExxYzVFak9qZ3ZsRWE1ZTFEdnNmdFNQVjBnaWFO?=

=?utf-8?B?ckp5SEpIVm1sNkRsNE1NbkJzZ2lsaWdIUFB6clF0ZFpJVnl3cUdTdldvUERR?=

=?utf-8?B?TjR5SnJDV3hLZFgyWjVkckZPNVA3R3RTSGl2YUExTTVmdDBqRTlrL204SWtt?=

=?utf-8?B?dlo5M0xub0w5T0hzV01uQ3pxakgwUGdQYUZ3T0l5TzRhdUEvTGJMRTFOQ3Qr?=

=?utf-8?B?QkM2MHk4eGRMdHB3aEhZNkJQSlU2MHlxRm52WFVGdzM3WGRHcVk1WldQVVJh?=

=?utf-8?B?K2FqaXozbnhEU3BKcG1vQ0J2K2lSWXZoWHZJTGNEeFlKMXRBRHB3Y2kwM3ZL?=

=?utf-8?B?NHpTS05BQklvSzlVb1N1N25tbjVsUXE2ak00bTR2Smg2Vjl2OFJiUHBnNkNK?=

=?utf-8?B?OEdleGtmME9iZ0svMWFySm5JeXE0aExlNGtEWHFTTGM0Y0prRU1EQ2Z4ZVNN?=

=?utf-8?B?cHc2TXN3cnhJS0pqWHkxUzNQbGh3TnJBNDZSbG5OSlVRTGFVQkQwVjB3WlF3?=

=?utf-8?B?SlN2ZXp5Y3h1b1JhUTZBbXVQYUVuam5QSUlNa0hoNkptMCtMb0ZiOGtxSDJk?=

=?utf-8?B?S0pNREtPL1BsMWJCRWZTZnpyd3ZnNnJjUXVkYVFKMWRLWTkrWVpKaXdicDJi?=

=?utf-8?B?dUg2eGMybEhLVEZwdXpOamJpWnNiTmdIdXBlYmh2emtOa256Sk1mZUZTMGdk?=

=?utf-8?B?YUdFWXNyb096cG51eHo5YVpZZlhZUmU3L0lvUGJXb3cyblBjWEV1cUI5UERn?=

=?utf-8?B?NWZYWlBCS0pmdG5XTzNqWTkyRUNhSFdBMkJuZUdsTUFLcVpEUGdwVHNJczVv?=

=?utf-8?B?QVQ2T0NrMFZVZ2NUZWN3UWJHbnV0blYrRUJ0TnorOWtXUmtDVlRPQzZleFdS?=

=?utf-8?B?RU0xSXBoTnNsRndtUWhjYXZ0MXVuV1FiU0VMZDdVNWhyUStRTUg1eDJ2R1RZ?=

=?utf-8?B?MWpQRTZCTGJLM2tJeGtZTzErY1A5TmdDYU9ZQ0JFaUcvUy9pazhneFNoWThT?=

=?utf-8?B?bGZGR2RzS0oyQmpUWFN2ajZ4SWIrcFhCRHY0ZzBVWExZZ0FoTC9ENzVzR0dV?=

=?utf-8?B?Z3BFY01aQStNM0ZFSjUxYnk2Uk1EeTlUeERrQS9vTm16bG5tWHhNWEdjMnAz?=

=?utf-8?B?NXB4d3ZKTVZIZFhIOE5EcU1nZUliOFdIMDVXNm5NRWxpVWhaV2pXbEh2OFc2?=

=?utf-8?B?WjFhN0dPMVpLRXpjVGl1WnFBcHgxTXZwZ21aa0JoWGNNeVFjM2pmOGVoYW50?=

=?utf-8?B?QnJIeWtKYWd5NGU2Um9JQXFoZitGTHYyeCtsa0xWNzYwcFd1S2MrdEZUS3JC?=

=?utf-8?B?UTllYmI5dWNHbW9BdjRWbmdWQTFXcDZNem9GNmdRRUpTekRhSVZGZjVBV1lS?=

=?utf-8?B?bTd2V1JKNHdja1llMjhweTNYc0ZkZFl6R0ZEWXRJK1NiS1pIQVp4UUw5TXZq?=

=?utf-8?B?R0R0UDBOaU4ybEhRVnpwdEg1azVsdFVyS0gwV1daZFBKNy9QTkRuSTFYKzBv?=

=?utf-8?B?T2xKekVkWHpTMi9OTUxtUDlTY0podHRZZzBpYjhac1RadDJPOC8wNkI2eUhx?=

=?utf-8?B?MXlGSkNlM1J1NnhIK0dNRldzOWE4Y3ZkK1dZWFd1dXVueDdSKzJKazV1TU9h?=

=?utf-8?B?Z2J2Z2QxVzQyRmZPU1ZRcXc3Qk9BdDRCRlI2amVzWkdjQzl6UTlOWStiNTRt?=

=?utf-8?B?UHpKUlpLeEpkR0FnMlQrZENKM29EbVF4Tk1wSGNaRVQ3QlV2eFNFcDVOelV1?=

=?utf-8?B?UUpHZWt3eWtpY20wNm0zZXlpZHljUFZlNjNvNjJpTHkwOXZWdzhRZHhvM0RX?=

=?utf-8?B?bW5sV25idGIyR294WFNjSlQvNXhZaWRlRlRJMGNTTHJ2NCtHOXQyRVRvdVlo?=

=?utf-8?B?S3JHazRzMmJDTWczUWN0eGVjeWpYclJqdFZUYlFGUmNmNWhOU042UkdSZkpi?=

=?utf-8?B?bXJqeTI0MVd1V3lQRHU1WThPenk3eTAzRVpwUHdVQVpCK1RPOXV0WnlzdFBC?=

=?utf-8?B?dzdQNVBmL3ZRaHFOLzFlRjJmVlYzUENjN3gyM0x2WVBJV2Z1M0R2bjcyNng0?=

=?utf-8?B?WkZ6RU9nVVpndDR3QXJrU0pMVVBwUGN6aUNqNmVGUjJXaEJ0ZkZwNXBjTDZr?=

=?utf-8?B?RytQMEpIcEI3ZlZXUTNZT2plM09aSkVLcGs2RCtkZitKVUF1VlNOR2pyNUJC?=

=?utf-8?B?SFFOUm0wbGhYWVpjSHlHajZBcmhNUllzYTVYcTcydG13ZU44STRxdFRHc1pw?=

=?utf-8?B?YkJWTGFFSk9UYmg0WFI3cS8zKzNmUWVCWG1tSEhvMmJNNml2bU84endURm5B?=

=?utf-8?B?T3ZYeXVOY1dXQVZFT2U2S29XZmN4Vm1QQ2ZEalZOMUkvdFJ3S0xiOVJoMXJM?=

=?utf-8?B?UWZ2TVMvTFJGVXExaXcrOTRvR3I4Uld2ODgxQkgzRjV5NVphWlFnTHFjNTY4?=

=?utf-8?B?cHpBRXBUWC9TWEd2Q3kxTkt0b0dWWXp0Z0krL1hyRUNuODM4WGhld0hjK2Fm?=

=?utf-8?B?ZnZEMXpFY3dsYzVqUkFkekpZSDBmUy9ua1dLZDhRNUZZREgwWXN6N0FLUmhY?=

=?utf-8?B?cG9xWkJMSzVZYVdJU0JpOTUrdXUrWWpDSXVzVGJGb0dhNjNRZWVUVitXdW8r?=

=?utf-8?B?d2QzUm1MRW1OQ0NWUmpxSzZMaGVHaHptL1BnSzVHTnlNOXJsNUxTbi9QNEdY?=

=?utf-8?B?UzVsOXp6VkZtYWMyVWNuZnZ2SW9EblROYzFEZ1BNcTJaQ3pFUnhmaHkyME5a?=

=?utf-8?B?RHVqZHg3QUtOUWs1WStwNnBnZnFEQjBDTjJNSWdBOW1Ua050bmhSN2ZGVmNL?=

=?utf-8?B?ODdMdDNNdmowc05WbVBZZ0l2VEdlNEdqbmNuTk9JeCs3Umh4SnZsazc3WWhm?=

=?utf-8?B?NDBscmxWS0FaU1ExQkY0N1hiZ09qUEdkdFRIWW1JOVVOOXF6b3hWRW1CUWdX?=

=?utf-8?B?bXFTZFdxUFpqQkRLVDF1VkJENzRML1l3NkxOT2VWYjBVMndDVFczWTdsc1lU?=

=?utf-8?B?Z1dlT01tSEtEeUEwU2hqTnB5ZkhIRzFzZWUvQWtjVTl5MWszRzhSMWR5Y3B5?=

=?utf-8?Q?zuIMVvj+reiyu5wbq9DxQ2Ms7l?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Jun 2026 13:35:42.4103

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a0c2f9f1-17b3-4466-e6f8-08dec30756f6

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BN3PEPF0000B071.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR18MB4365

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Geek Squad Security Renewal Alert piatok 5. jún 2026 Pripojiť

sa cez Google Meet https://meet.google.com/pas-qxpy-ach?hs=224 Dear Protected

Customer,



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.12.21 listed in dnsbl.ahbl.org]

[40.93.12.21 listed in dnsbl.ahbl.org]

[40.93.12.21 listed in dnsbl.ahbl.org]

[40.93.12.21 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[dnsbl.ahbl.org]

Geek Squad Phish from Microsoft Outlook Part 3

Posted by Dave Yadallee on
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.12.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.12.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.12.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.12.21 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:cafe:0:0:1c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:e6:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

[40.93.12.21 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.12.21 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.12.21 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_QX BODY: Odd Letter Triples with QX

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Geek_Squad_Security_Renewal_Alert_=40_pi_5=2E?=

=?UTF-8?Q?_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=

Geek Squad Phish from Microsoft Outlook Part 1

Posted by Dave Yadallee on
\X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 09:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVWLU-00000000FPe-0CXL

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 09:20:28 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 09:20:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastus2azlp17010021.outbound.protection.outlook.com ([40.93.12.21]:35854 helo=BN1PR04CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVUj0-00000000HYI-3eRf

for doctor@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 07:36:51 -0600

Received: from BN0PR03CA0010.namprd03.prod.outlook.com (2603:10b6:408:e6::15)

by DM4PR18MB4365.namprd18.prod.outlook.com (2603:10b6:5:39a::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.71.15; Fri, 5 Jun 2026

13:35:42 +0000

Received: from BN3PEPF0000B071.namprd04.prod.outlook.com

(2603:10b6:408:e6:cafe::1c) by BN0PR03CA0010.outlook.office365.com

(2603:10b6:408:e6::15) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.9 via Frontend Transport; Fri, 5

Jun 2026 13:35:42 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.71)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.71 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.71; helo=mail-wm1-f71.google.com; pr=C

Received: from mail-wm1-f71.google.com (209.85.128.71) by

BN3PEPF0000B071.mail.protection.outlook.com (10.167.243.116) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.5 via

Frontend Transport; Fri, 5 Jun 2026 13:35:42 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:B443219361A61EB7CC52C274A603A39198522F0D02679FA8F520649F3C96793C;UpperCasedChecksum:C13EBA62FAE74B872C16CFA71A80EC8368E1570A8DDC195D5DC0E57F2E52624F;SizeAsReceived:3374;Count:15

Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-490af284fd8so14924065e9.3

for ; Fri, 05 Jun 2026 06:35:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1780666541; x=1781271341; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=UJh/3ZZql8ltrPkcMr1hErbFFl+w4nVKwR1qsw9fVtk=;

b=HuxH8JY2986G8dTvSxfvGpJniGZF0nNSpI7BTYOg6OJzD5VqEDnE125EalO4cT2AhQ

4rqz5pwnMSMHRoW5JMKywZ89vidliekqb7adhnCONyvsyRxc0wOmG38ynKMnWZew9R8a

5YxCDEBV0xsvCMMxHWidK9obKdz0IQR8t/TWssdn2dd4Fo8t4J2Q4DIohag3zj1INsaq

OePv0LADUj78aBZi94QbzFcOkVaKxNBKb0gsGT52aV6p8Wjoukq72BxwOyqc3mNdLhwq

+3T3OSNCDqdy6fHT7AoPTTI1A0yhjerPwDn5X8Oo6ZczmTfNmozclslV5MoRVyF0zdAU

p/ug==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1780666541; x=1781271341; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=UJh/3ZZql8ltrPkcMr1hErbFFl+w4nVKwR1qsw9fVtk=;

b=ZFTDw1yeYEzfAGg46lS3dUUG+mVq7VM9hX7cyx7boYO+Mt12tspzdrDt3BeyTHAJDP

xbVQyUgcOuIUl1xXSlMrBKH/JRTr3msT56MM4MvmkfqQwF09P0kgB7AfA93c9tY2ocI2

i97Tkf4O6r+EXhLD7mMAnDDw84sAjGRUfX1Fs6/lTV5FIy1kv5uP3jC0q0yhmg/GntDA

1pn8uUoXbmMLfxx/SXCE5ok6Bahaum1FpNxx7iuUyo5fHWVowOKpvCKMNjnja10qdPd4

oBNavng9ODUTKGedXxo3Lo1u1DzQiEq8P9BB38NFQP5JmlbguYZ5QDPcyoj9xY9KrLXg

WW6A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780666541; x=1781271341;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=UJh/3ZZql8ltrPkcMr1hErbFFl+w4nVKwR1qsw9fVtk=;

b=mXFhVMv9Ox0cI8MUOF1Py31WjejB9oJ470JLW2Cx2k7ehSeLys1H1ggc1wgRggjpqV

YsMO9l+bWt6rsvnPio1QnJkiohDV8fDIf89HOr4hobW153tnMzrNfeJT7iH4iqZMLgSX

uIdlHzJe81xRrUXv4D3MWgsU27XOvxgCZdOxOhPOBsWkKREVDeNXMrjZadIBWGomfxG0

Hb36D04Rxv7h0e1VcpnWjy2ATC1eHCaEiBujvBPRgSKKrCJp+TP0hqme2AoIrj138H/u

VNwjIUrdxCQ/EjuhCDcB18o0CNTITqnkRK1VGnXy1BpgxoO+fzJ3YEZGJhBgibpN8H5/

DBFw==

X-Gm-Message-State: AOJu0YxbG/aa5hEj2eZQaq5nu3ti7mtMFOFFH6NHY6LPspJAVUvL5HCC

Id3ye0QODIxlszB9fsUASgm8s6AhisXb1w8DA3k+7gqjX0lmKAf/FJalNBO+wcuYJLyw1yFA7NG

JZWygaFX0qLIbxwfelQFPCJuQszOkoP/Gskg=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:4506:b0:490:b642:ce2a with SMTP id

5b1f17b1804b1-490c25c0d27mr58597045e9.9.1780666541372; Fri, 05 Jun 2026

06:35:41 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Fri, 05 Jun 2026 13:35:41 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Geek_Squad_Security_Renewal_Alert_=40_pi_5=2E?=

=?UTF-8?Q?_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000a97e42065381bcc1"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN3PEPF0000B071:EE_|DM4PR18MB4365:EE_

X-MS-Office365-Filtering-Correlation-Id: a0c2f9f1-17b3-4466-e6f8-08dec30756f6

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.71

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|1680799066|26130799012|9400799043|970799063|34130799006|6019299003|3069299007|32020799003|22000799015|16200799027|26000799027|9000799056|29080799009|4040799016|3151999006|5139299004|9020799019|24102599021|6092099016|26104999009|21002599022;

Norton 360 Phish from Google Gmail Part 2

Posted by Dave Yadallee on


Alanna Zaggia has invited you to Account Information Available for Review

Title: Account Information Available for Review

When: Friday, June 5, 2026 at 19:18

Organizer:

Alanna Zaggia

Description:



Norton 360 Registry » Friday, 05 June 2026 20:18:33

File Reference: QQVEUTSZI2GIKM • Contact Desk: (828)-275 1293‬





Account details continue under current service information





Customer Support Notice,





Please review the account information listed below. This notice has been generated as part of routine record maintenance.





Payment Activity Center



» Registry Handle: J6CMYCQC27



» Service Entry: Device Status Center



» Coverage Window: 1-Year



» Recorded Figure: $362.14 USD



» Security Marker: b6daedd9-a953-4acf-bd10-82c42a62e686





Please retain this document for future reference.





With kindness,,



Norton Life lock Security



Support Coordinator: Sherry Ramirez • Contact Phone: 1-(805)-(303)-0425



4758 Clear River Ct - San Jose Horace Nd 58047 USA



Attendees:



doctor@nl2k.ab.ca



Account Information Available for Review

Norton 360 Registry » Friday, 05 June 2026 20:18:33File Reference: QQVEUTSZI2GIKM • Contact Desk: (828)-275 1293‬ Account details continue under current service information Customer Suppo





Norton 360 Registry » Friday, 05 June 2026 20:18:33

File Reference: QQVEUTSZI2GIKM • Contact Desk: (828)-275 1293‬



Account details continue under current service information



Customer Support Notice,





Please review the account information listed below. This notice has been generated as part of routine record maintenance.



Payment Activity Center



» Registry Handle: J6CMYCQC27



» Service Entry: Device Status Center



» Coverage Window: 1-Year



» Recorded Figure: $362.14 USD



» Security Marker: b6daedd9-a953-4acf-bd10-82c42a62e686



Please retain this document for future reference.



With kindness,,



Norton Life lock Security



Support Coordinator: Sherry Ramirez • Contact Phone: 1-(805)-(303)-0425



4758 Clear River Ct - San Jose Horace Nd 58047 USA



When

Friday Jun 5, 2026 ⋅ 9:18pm (Eastern Time - New York)

Organizer

Alanna Zaggia

alannazaggia@dietlives.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Norton 360 Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jun 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVUN4-00000000EdY-47oI

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jun 2026 07:13:58 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Jun 2026 07:13:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:43118)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVTWj-00000000Nrz-3d1K

for doctor@nl2k.ab.ca;

Fri, 05 Jun 2026 06:20:03 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-51776d4355cso74570801cf.0

for ; Fri, 05 Jun 2026 05:19:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1780661940; x=1781266740; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=6wZVN9MMcXxs1y6O/Bhm2l+PUbrE+RerPLmdZ2lidhw=;

b=vTGrMw/+Xw3gMVNDzMAJs9jKMs8sfk018Zd8DlivxekrcfdVc68I04FA8hkkHZnhCu

RhvohRMls3W9cK2djEi/YS+puyDvCoLLZ683EQ2Zqhb63s6N1K1ZCQGgc+ySrT7AzO+O

k+f57IFCVH3zIBdVwL5oSNcfQUlPsi/UsCNb1sUuae4DmJzkg73t5DJ95RZ2+3JoQZeD

TpTNwoW/qYPvoRlipp52X7M3tmUrFGCNI9GLBEbfwbkg6vN5LnUyxfaBLiyttY6GWOvZ

DiahC27kZfpke/wV+jcDpkC0ySzg/6ozYAIsx4QVtLn4AfWyWB/wBbe0qkWX5uuJyz8y

6G7A==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dietlives-com.20251104.gappssmtp.com; s=20251104; t=1780661940; x=1781266740; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=6wZVN9MMcXxs1y6O/Bhm2l+PUbrE+RerPLmdZ2lidhw=;

b=d4p7QkjNdC9jrWR+KaE0sNsN+k8VdUtURCfqZfVNqzYqdx2C+IAPzzQ2Gsx5hwx0sE

edYOwL0NwGTzA7gQMY/4qrSIPlgGCVMhpPRft4sRZA1hk037vN8wJJQ3KUUTgNB+Jc1M

iigIwVrjcjZdCz4vtgtJz66cVUhoMjKzWxK3px37X2Tmbv1NppJeYqqh/dZ8J7Cmta4c

MyJh54IWrPKr1VLZ1PhSt2y9oCvToKFAFGDv073aTjxUNstQdL58Mtuqn4K93euszAel

9YWPVGTcbV/VZ0D2Q5aHArb+0huHVZOqpnvruwqw/G0hH4byX5H5eliTX9Xv9nuN1/pT

LJbg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780661940; x=1781266740;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=6wZVN9MMcXxs1y6O/Bhm2l+PUbrE+RerPLmdZ2lidhw=;

b=J19ETFAUxKGMUkLzOydiI/cX1N0ZlUx7gfUgiml1NAbTaQwHiJ49uccHDTsVu7X/wy

4pTUn4KmSGuCS42ILG8bYrVzHAGko7wgsBVyuh1g/bDo8IU/xg7pei0Fv9QqzM5+PdUr

qpp64wKLpQ+2efInYE58UKf++Rq0ltf/kemstfaZPoOVMN5x9p/1bM4Zp0Ri8egIFK/a

6BbgD20LDS20037aopwgxLFzXqKNMDR7QB2mNhdch8hD1sChEM2UrMjkgZ2mawtvvYH3

F96qW+WJ51FjJxKwqE06PMHqcXTRGS7B+fHb6q9S/Q+/wOsbYaXdAq7F+8qq543VKQSc

lCOg==

X-Gm-Message-State: AOJu0YxpBu/UoZPKV5NSlBBqHZk2RpjdjIwkXg93aLX1/TI3TlB3LQa+

dhgtxcNctUFiQxPwS86un37HwQCF04OD8LOTocGJkIPs87J0XZgR/CrK3gE3VoR0OQ8P7zTG+iO

QsrKktAczF3236CvW3PZXYPFNSBIqY99Cm+rNq29E0P42Joe86qzTmKn8

MIME-Version: 1.0

X-Received: by 2002:a05:6820:f023:b0:69e:3426:5b64 with SMTP id

006d021491bc7-69e6d4ea507mr883291eaf.28.1780661929128; Fri, 05 Jun 2026

05:18:49 -0700 (PDT)

Reply-To: Alanna Zaggia

Sender: Google Calendar

Message-ID:

Date: Fri, 05 Jun 2026 12:18:49 +0000

Subject: Invitation: Account Information Available for Review @ Fri Jun 5,

2026 9:18pm (GMT-4) (doctor@nl2k.ab.ca)

From: Alanna Zaggia

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="000000000000c037dc065380a94c"

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Account Information Available for Review Friday Jun 5, 2026

â‹… 9:18pm Eastern Time - New York Norton 360 Registry » Friday, 05

June 2026 20:18:33File Reference: QQVEUTSZI2GIKM • Contact Desk: (828)-275

1293‬



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.198 listed in list.dnswl.org]

0.8 ZMIvirSobY_SUB39 SPAM from Sober-Y-Virus

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Account Information Available for Review @ Fri Jun 5,

2026 9:18pm (GMT-4) (doctor@nl2k.ab.ca)