We transfer phish

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 16:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uye7G-000000008yS-2DTh

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 16:25:38 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 16:25:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from linuxhosting001.in.cloudinhost.com ([103.152.79.23]:52507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uydnG-00000000Kd4-3sES

for doctor@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 16:05:05 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=polinytics.com; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=AqHRqiY/g3RlcfsAiR0Q30Jw3Lca/PrmabU8zHM13CQ=; b=Q1VUb6sru7E7YxbSkFwGpEoTtq

V5w66bl4zcdlgvRhSYpDJ0RkahVOir4fgPpk+yD+NPMdI4YqlVwDIaeSSFt5lXBILiMJM2YFnCCpB

IOkebEVzidxHJP86kloW7PtJU3EGVzTKrS5fKmnlgVC+EwgHt1+3nnedZPA0GBOLTg/NrNxQ6NHky

GD3+bqOsN0VK4sEStCrd3ofFsMETeRLfEru7rP42YYwKWMkEAL0ZD64Rk8/DAgPpuqqAYq3dJzx2E

O9XisY2/7160aWvHKLPm568iD9ZDI0j3Jkcj3eMeUYvksDnQBvlBt4wx6AQS+fD2HfJ8CcNee0P9M

LRibEBCQ==;

Received: from [62.60.130.141] (port=60535)

by linuxhosting001.in.cloudinhost.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1)

(envelope-from )

id 1uydmM-00000005JV9-3h99

for doctor@doctor.nl2k.ab.ca;

Wed, 17 Sep 2025 03:34:01 +0530

From: "WeTransfer"

To: doctor@doctor.nl2k.ab.ca

Subject: You received some documents!.

Date: 16 Sep 2025 15:04:00 -0700

Message-ID: <20250916150359.DC90A75C75769BA8@polinytics.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - linuxhosting001.in.cloudinhost.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - polinytics.com

X-Get-Message-Sender-Via: linuxhosting001.in.cloudinhost.com: authenticated_id: info@polinytics.com

X-Authenticated-Sender: linuxhosting001.in.cloudinhost.com: info@polinytics.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your files have been downloaded 3 item, 4.6 MB in total ãƒ»

Expires on 24 September, 2025 We give you a heads up the first time your

link transfer is downloaded (we won t email you each time). You ca [...]

Content analysis details: (8.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: serviceautopilot.com]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} You received some documents!.

tml; charset=3Diso-8859-1">

=20

=20

0">=20

=20

margin: 0;

padding: 0;

background-color: #f3f3f3">

adding: 0px; border: currentColor; border-image: none; border-collapse: col=

lapse; table-layout: auto !important; max-width: 100%; box-sizing: border-b=

ox; border-spacing: 0px; empty-cells: show; text-size-adjust: none; -webkit=

-font-smoothing: antialiased;" bgcolor=3D"#f4f4f4" border=3D"0" cellspacing=

=3D"0" cellpadding=3D"0">

er: 0px solid rgb(221, 221, 221); border-image: none; width: 792px; min-wid=

th: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smoot=

hing: antialiased; user-select: text;">

entered" style=3D"margin: 0px auto; padding: 0px; border: currentColor; bor=

der-image: none; width: 600px; border-collapse: collapse; table-layout: fix=

ed; min-width: 600px; max-width: 100%; box-sizing: border-box; border-spaci=

ng: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothing:=

antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

style=3D"margin: 0px; padding: 0px; border: 1px solid rgb(221, 221, 221); =

border-image: none; width: 600px; min-width: 600px; box-sizing: border-box;=

text-size-adjust: none; -webkit-font-smoothing: antialiased; user-select: =

text;">

er: currentColor; border-image: none; width: 599px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

"margin: 0px; padding: 55px 0px 0px; border: 1px solid rgb(221, 221, 221); =

border-image: none; width: 598px; min-width: 5px; box-sizing: border-box; t=

ext-size-adjust: none; -webkit-font-smoothing: antialiased; user-select: te=

xt;">

er: currentColor; border-image: none; width: 597px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

table>

"background: no-repeat center / cover; margin: 0px; padding: 0px; border: 1=

px solid rgb(221, 221, 221); border-image: none; width: 596px; font-size: 1=

0px; min-width: 5px; box-sizing: border-box; text-size-adjust: none; -webki=

t-font-smoothing: antialiased; user-select: text;" bgcolor=3D"#5268ff">

; padding: 0px; border: currentColor; border-image: none; width: auto; bord=

er-collapse: collapse; table-layout: fixed; max-width: 100%; box-sizing: bo=

rder-box; border-spacing: 0px; empty-cells: show; text-size-adjust: none; -=

webkit-font-smoothing: antialiased;" border=3D"0" cellspacing=3D"0" cellpad=

ding=3D"0">

ing: 0px; border: 0px solid rgb(221, 221, 221); border-image: none; width: =

56px; height: 16px; min-width: 5px; box-sizing: border-box; text-size-adjus=

t: none; -webkit-font-smoothing: antialiased; user-select: text;">

=3D"box-sizing: border-box;">

er: 0px solid rgb(221, 221, 221); border-image: none; width: 56px; min-widt=

h: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smooth=

ing: antialiased; user-select: text;">
text-decoration: underline; box-sizing: border-box; user-select: auto;" hre=

f=3D"https://wetransfer.com/?trk=3DTRN_TDL_12&utm_campaign=3DTRN_TDL_12=

&utm_medium=3Demail&utm_source=3Dsendgrid" target=3D"_blank">

le=3D"margin: 0px; padding: 0px; width: 56px; height: auto; line-height: 10=

px; text-decoration: none; display: block; position: relative; cursor: poin=

ter; max-width: 100%; box-sizing: border-box; text-size-adjust: none; -webk=

it-font-smoothing: antialiased; user-select: none;" alt=3D"Click 'Download =

images' to view images" src=3D"https://email.wetransfer.net/emails/logos/bl=

ue_2x.png" border=3D"0" height=3D"30">

ing: 0px; border: 0px solid rgb(221, 221, 221); border-image: none; width: =

56px; height: 11px; min-width: 5px; box-sizing: border-box; text-size-adjus=

t: none; -webkit-font-smoothing: antialiased; user-select: text;">

=3D"box-sizing: border-box;">

dding: 0px; border: currentColor; border-image: none; width: 599px; border-=

collapse: collapse; table-layout: fixed; max-width: 100%; box-sizing: borde=

r-box; border-spacing: 0px; empty-cells: show; text-size-adjust: none; -web=

kit-font-smoothing: antialiased;" bgcolor=3D"#ffffff" border=3D"0" cellspac=

ing=3D"0" cellpadding=3D"0">

tbody>

er: 0px solid rgb(221, 221, 221); border-image: none; width: 599px; min-wid=

th: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smoot=

hing: antialiased; user-select: text;">

er: currentColor; border-image: none; width: 599px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

align=3D"top" style=3D"margin: 0px; padding: 0px; border: 1px solid rgb(221=

, 221, 221); border-image: none; width: 598px; min-width: 5px; box-sizing: =

border-box; text-size-adjust: none; -webkit-font-smoothing: antialiased; us=

er-select: text;">

er: currentColor; border-image: none; width: 597px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

_td_wider" valign=3D"top" style=3D"margin: 0px; padding: 60px 80px 0px; bor=

der: 1px solid rgb(221, 221, 221); border-image: none; width: 596px; color:=

rgb(23, 24, 26); line-height: 30px; font-size: 26px; font-style: normal; f=

ont-weight: normal; word-spacing: 0px; min-width: 5px; box-sizing: border-b=

ox; text-size-adjust: none; -webkit-font-smoothing: antialiased; user-selec=

t: text;">Your=20

files have been downloaded

top" style=3D'margin: 0px; padding: 20px 80px 0px; border: 1px solid rgb(22=

1, 221, 221); border-image: none; width: 596px; color: rgb(106, 109, 112); =

line-height: 23px; font-family: "Fakt Pro", "Segoe UI", "SanFrancisco Displ=

ay", Arial, sans-serif; font-size: 14px; font-style: normal; font-weight: n=

ormal; word-spacing: 0px; min-width: 5px; box-sizing: border-box; text-size=

-adjust: none; -webkit-font-smoothing: antialiased;=20

user-select: text;'>3 item,=20

4.6 MB in total ・ Expires on 24 September,=20

2025

lign=3D"top" style=3D'margin: 0px; padding: 50px 80px 0px; border: 1px soli=

d rgb(221, 221, 221); border-image: none; width: 596px; color: rgb(121, 124=

, 127); line-height: 24px; font-family: "Fakt Pro", "Segoe UI", "SanFrancis=

co Display", Arial, sans-serif; font-size: 14px; font-style: normal; font-w=

eight: normal; word-spacing: 0px; min-width: 5px; box-sizing: border-box; t=

ext-size-adjust: none; -webkit-font-smoothing:=20

antialiased; user-select: text;'>We=20

give you a heads up the first time your link=20

transfer is downloaded (we won t email you each=20

time). You can see if this transfer gets=20

downloaded again in your account.

d_mobile" valign=3D"top" style=3D"margin: 0px; padding: 40px 160px 0px; bor=

der: 1px solid rgb(221, 221, 221); border-image: none; width: 596px; min-wi=

dth: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smoo=

thing: antialiased; user-select: text;">

ng: 0px; border: currentColor; border-image: none; width: 275px; border-col=

lapse: collapse; table-layout: fixed; max-width: 100%; box-sizing: border-b=

ox; border-spacing: 0px; empty-cells: show; text-size-adjust: none; -webkit=

-font-smoothing: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=

=3D"0">

er: 0px solid rgb(221, 221, 221); border-image: none; width: 275px; min-wid=

th: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smoot=

hing: antialiased; user-select: text;">

der-radius: 25px; text-align: center; color: rgb(255, 255, 255); font-size:=

14px; font-style: normal; text-decoration: none; word-spacing: 0px; displa=

y: block; box-sizing: border-box; background-color: rgb(82, 104, 255); user=

-select: auto;"=20

href=3D"http://email.double.serviceautopilot.com/c/eJwkzzluwzAQQNHTiB0FzsKt=

YJHG9-AyjIRIpmBLhnP7IEn7gV-8OvYj37_Xlgx18qFUbUsFzdF2nZuQZheoAZRMBVVL3UUMTkk=

Cb523BAxK9rxua0tsSo4cRVeHorm7rGNAq5kiRRIQ8aSWFAgaowsUG4Dv1bgeigfKsTM529Wa0K=

A10QAEGw3MFQIKsUNb0UtpE5s2rrLJ_JTHa62Sr3Mc6zbOuY5dbWk5z2OijwlvE96eh0jbrntd5=

v39X9_qkZ55k30fX8uZH25i8_mr-PtfCX8CAAD__wnJUhE#doctor@doctor.nl2k.ab.ca" ta=

rget=3D"_blank">
255, 255); box-sizing: border-box;">=20

Check your=20

transfers

valign=3D"top" style=3D"margin: 0px; padding: 40px 80px 0px; border: 1px s=

olid rgb(221, 221, 221); border-image: none; width: 596px; min-width: 5px; =

box-sizing: border-box; text-size-adjust: none; -webkit-font-smoothing: ant=

ialiased; user-select: text;">

er: currentColor; border-image: none; width: 435px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth: 1px 1px 2px; border-style: solid; border-color: rgb(221, 221, 221) rg=

b(221, 221, 221) rgb(244, 244, 244); margin: 0px; padding: 0px; width: 434p=

x; line-height: 0; font-size: 1px; min-width: 5px; box-sizing: border-box; =

text-size-adjust: none; -webkit-font-smoothing: antialiased; user-select: t=

ext;">

container" valign=3D"top" style=3D'margin: 0px; padding: 50px 80px 0px; bor=

der: 1px solid rgb(221, 221, 221); border-image: none; width: 596px; color:=

rgb(121, 124, 127); line-height: 24px; font-family: "Fakt Pro", "Segoe UI"=

, "SanFrancisco Display", Arial, sans-serif; font-size: 14px; font-style: n=

ormal; font-weight: normal; word-spacing: 0px; -ms-word-break: break-all; m=

in-width: 5px; box-sizing: border-box; text-size-adjust:=20

none; -webkit-font-smoothing: antialiased; user-select: text;'>
=3D"body_content_subheading_span" style=3D"color: rgb(23, 24, 26); font-siz=

e: 18px; font-weight: 500; box-sizing: border-box;"> Download=20

link

t: normal; text-decoration: underline; box-sizing: border-box; user-select:=

auto; overflow-wrap: break-word;"=20

href=3D"https://mail.notifyvisitors.com/tracker/email_tracker/handler/click=

/56975/14566?cd=3DaktPMUFtRXRLeXhOT3pUYzZJeEw1Y2ptMzBDSDJkYm1IWEdmNk5GVEFvV=

lRyN1FMVjdQUFEyWmpkUURtQndBMnJ2Nk1iOWtYSEJQY0UzY1NodklLd05WQ2RtaG9SSHJrL0FG=

Zk40Y0FNdlFTeThVR2ZGRlJjOEt2QW54WS8wTFVnSmdRNC9BNHVDUDJvMFcwYjZLOHNjWXlaUmR=

naTdYa2ZJRXl1c1loUnlTd25WWWJuazhwQVFtYnFKQ3podmRrTUZYNVJ6L0pBd0JYdTk3bWRmNU=

R2N1Nyc1MyT21tQTh1TklvMGVPU0s1YjY2akZ3VmRsaHVYSEF4Q0dWemFOV0lVR3FFWmNuZnF0M=

npsTW9lZStjR0NvWERIeExWakwxSlZDWDVkNG5nWEp1YlB3Y1EyeVh

CODI4MXVZLzBxNyt1Sm9DbjMvNW9vN3FRWkhhbGdPUXJPdDdOWEUzL3NkQkswV1h1RUIvW=

mVjUVpYVWcyVjJYUmFhS3lnclFxMTl2bGE2TUJMSFlzNHQ2cTVoekUrSHJXVTZlV2ZYWXBSNE1J=

M2lIWFF2SjlkM1p4VlI0Q2I5aW5FMVgzeFZNQ01HYXh2YlFMZmtzR1lKd2NJTHZRa2NFaEVISyt=

YaklFbkYzZXZYY0lwMituWHpNK3pqUHRnbVA0TkFXNVdSKzAxNUZScjlRUDhadDgxdUc2MXoxdU=

ppYzFET1NvU3BjazNBQnhoNTk3TURvMWNzakExQmRRYytzRVpRYWFISWkrQTJtV2drME52WmlzO=

FhQOEJlSjJ3NlMwN1pqdDlFMlFyN3JrdkN2YS9wQ0lWdVhiRXdHTHBNU2V5emNwUWd5SnlJZmhC=

L0NjNi82cTk2MU5oM2x3TXlFWDJ1WXNBWW9QMVFkK3dxb2VxbD

dVd1p rVVJIT05FZHUzc2JSdmVpaTMxb3JyM2szOGtrcDROZHlnbWhodGYvS1NscVhzQlND=

RWR4dUVpeVdoS05uYnhKMEhyNm8xZ3FuODhaOVpSbWFsQnBkWStJTnBGQlR0MGYwalVRSnhCWEp=

DZEx3OVZjcGNjMm5kWlVlbEYrQmpOSlRINnV6Q3pmRkpOU0trVWZhRlVvMkQ1SnJOT04yRWZQZ2=

FrRDhOZFIxZ2YyVVZhSTNnWFY3bzBjenEyRi9JSTZwNUljaDVOcTFDTVNhcWNwZDMxSGFzYWJPe=

XliWTYybjhzNzM2c2tPVzd5RXYvWmo1OGw1UWpqbnh1U1g0Q1BUSlQzL1ZReW1xNEw4UlpMcXpQ=

SlRG#[Email]" target=3D"_blank">

weight: normal; text-decoration: underline; box-sizing: border-box; overflo=

w-wrap: break-word;">=20

https://we.tl/t-UgJnTaVFDK

" style=3D'margin: 0px; padding: 50px 80px 0px; border: 1px solid rgb(221, =

221, 221); border-image: none; width: 596px; color: rgb(121, 124, 127); lin=

e-height: 24px; font-family: "Fakt Pro", "Segoe UI", "SanFrancisco Display"=

, Arial, sans-serif; font-size: 14px; font-style: normal; font-weight: norm=

al; word-spacing: 0px; min-width: 5px; box-sizing: border-box; text-size-ad=

just: none; -webkit-font-smoothing: antialiased;=20

user-select: text;'>
olor: rgb(23, 24, 26); font-size: 18px; font-weight: 500; box-sizing: borde=

r-box;"> 3=20

item

"top" style=3D'margin: 0px; padding: 0px 80px; border: 1px solid rgb(221, 2=

21, 221); border-image: none; width: 596px; color: rgb(121, 124, 127); line=

-height: 24px; font-family: "Fakt Pro", "Segoe UI", "SanFrancisco Display",=

Arial, sans-serif; font-size: 14px; font-style: normal; font-weight: norma=

l; word-spacing: 0px; min-width: 5px; box-sizing: border-box; text-size-adj=

ust: none; -webkit-font-smoothing: antialiased;=20

user-select: text;'>

); font-size: 18px; font-weight: 500; box-sizing: border-box;">

"box-sizing: border-box;">

7px; border-bottom-color: rgb(244, 244, 244); border-bottom-width: 1px; bor=

der-bottom-style: none; box-sizing: border-box;">

eight: 16px; font-family: "Fakt Pro", "Segoe UI", "SanFrancisco Display", A=

rial, sans-serif; font-size: 14px; font-style: normal; font-weight: normal;=

word-spacing: 0px; box-sizing: border-box;'>Order=20

List.pdf

); line-height: 16px; font-size: 12px; box-sizing: border-box;">4.6=20

MB

unpadded_mobile" valign=3D"top" style=3D'margin: 0px; padding: 50px 80px; =

border: 1px solid rgb(221, 221, 221); border-image: none; width: 596px; col=

or: rgb(121, 124, 127); line-height: 24px; font-family: "Fakt Pro", "Segoe =

UI", "SanFrancisco Display", Arial, sans-serif; font-size: 14px; font-style=

: normal; font-weight: normal; word-spacing: 0px; min-width: 5px; box-sizin=

g: border-box; text-size-adjust: none;=20

-webkit-font-smoothing: antialiased; user-select: text;'>

border-box; text-size-adjust: none; -webkit-font-smoothing: antialiased;">=

); font-size: 18px; font-weight: 500; box-sizing: border-box;"> Messag=

e
doctor@doctor.nl2=

k.ab.ca

er: currentColor; border-image: none; width: 599px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

=

style=3D"margin: 0px; padding: 2px 0px 0px; border: 1px solid rgb(221, 221=

, 221); border-image: none; width: 598px; min-width: 5px; box-sizing: borde=

r-box; text-size-adjust: none; -webkit-font-smoothing: antialiased; user-se=

lect: text;">

: 0px; border: currentColor; border-image: none; width: 597px; border-colla=

pse: collapse; table-layout: fixed; max-width: 100%; box-sizing: border-box=

; border-spacing: 0px; empty-cells: show; text-size-adjust: none; -webkit-f=

ont-smoothing: antialiased;" bgcolor=3D"#ffffff" border=3D"0" cellspacing=

=3D"0" cellpadding=3D"0">

valign=3D"top" style=3D"margin: 0px; padding: 0px 20px; border: 1px solid r=

gb(221, 221, 221); border-image: none; width: 596px; min-width: 5px; box-si=

zing: border-box; text-size-adjust: none; -webkit-font-smoothing: antialias=

ed; user-select: text;">

er: currentColor; border-image: none; width: 555px; border-collapse: collap=

se; table-layout: fixed; max-width: 100%; box-sizing: border-box; border-sp=

acing: 0px; empty-cells: show; text-size-adjust: none; -webkit-font-smoothi=

ng: antialiased;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

rgin: 0px; padding: 13px 0px; border: 1px solid rgb(221, 221, 221); border-=

image: none; width: 554px; color: rgb(121, 124, 127); line-height: 24px; fo=

nt-family: "Fakt Pro", "Segoe UI", "SanFrancisco Display", Arial, sans-seri=

f; font-size: 12px; font-style: normal; font-weight: normal; word-spacing: =

0px; min-width: 5px; box-sizing: border-box; text-size-adjust: none; -webki=

t-font-smoothing: antialiased; user-select: text;'>

border-box; text-size-adjust: none; -webkit-font-smoothing: antialiased;">=

To=20

make sure our emails arrive, please add
ault_client_style" style=3D"color: rgb(121, 124, 127); font-weight: normal;=

text-decoration: none !important; box-sizing: border-box; user-select: aut=

o;" target=3D"_blank">
tyle=3D"color: rgb(121, 124, 127); font-weight: normal; text-decoration: no=

ne !important; box-sizing: border-box;">noreply@wetransfer.com&n=

bsp;to =20

n: underline; box-sizing: border-box; user-select: auto;" href=3D"https://w=

etransfer.zendesk.com/hc/en-us/articles/204909429?utm_campaign=3DTRN_TDL_12=

&utm_source=3Dsendgrid&utm_medium=3Demail&trk=3DTRN_TDL_12" tar=

get=3D"_blank">your contacts.

If you don t=20

want us to email you when your link transfers=20

have been downloaded, you can
font-weight: normal; text-decoration: underline; box-sizing: border-box; u=

ser-select: auto;" href=3D"https://wetransfer.com/ltdn-optout?vid=3DeyJfcmF=

pbHMiOnsibWVzc2FnZSI6IkJBaHBCRW9XNVFZPSIsImV4cCI6bnVsbCwicHVyIjoibGlua190cm=

Fuc2Zlcl9kb3dubG9hZF9ub3RpZmljYXRpb25fdW5zdWJzY3JpYmUifX0%3D--de0af22b8727d=

b3619b68bfec64257cb7fcb4ad3" target=3D"_blank">unsubscribe from these=20

updates.

px; padding: 30px 20px; border: 1px solid rgb(221, 221, 221); border-image:=

none; width: 598px; color: rgb(121, 124, 127); line-height: 23px; font-fam=

ily: "Fakt Pro", "Segoe UI", "SanFrancisco Display", Arial, sans-serif; fon=

t-size: 12px; font-style: normal; font-weight: normal; word-spacing: 0px; m=

in-width: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font=

-smoothing: antialiased; user-select: text;'>

ormal; text-decoration: underline; box-sizing: border-box; user-select: aut=

o;" href=3D"https://wetransfer.com/about?trk=3DTRN_TDL_12&utm_campaign=

=3DTRN_TDL_12&utm_medium=3Demail&utm_source=3Dsendgrid" target=3D"_=

blank">
; font-weight: normal; text-decoration: underline; box-sizing: border-box;"=

>About=20

WeTransfer
"color: rgb(121, 124, 127); box-sizing: border-box;">  ・&n=

bsp;
4, 127); font-weight: normal; text-decoration: underline; box-sizing: borde=

r-box; user-select: auto;" href=3D"https://wetransfer.zendesk.com/hc/en-us?=

utm_campaign=3DTRN_TDL_12&utm_source=3Dsendgrid&utm_medium=3Demail&=

amp;trk=3DTRN_TDL_12" target=3D"_blank">

-weight: normal; text-decoration: underline; box-sizing: border-box;">Help<=

/span>
21, 124, 127); box-sizing: border-box;">  ・
pan> =20

normal; text-decoration: underline; box-sizing: border-box; user-select: au=

to;" href=3D"https://wetransfer.com/legal/terms?trk=3DTRN_TDL_12&utm_ca=

mpaign=3DTRN_TDL_12&utm_medium=3Demail&utm_source=3Dsendgrid" targe=

t=3D"_blank">
, 127); font-weight: normal; text-decoration: underline; box-sizing: border=

-box;">Legal

0px !important; margin: 0px !important; padding: 0px !important; width: 1p=

x !important; height: 1px !important; position: relative; cursor: pointer; =

max-width: 100%; box-sizing: border-box; user-select: none;" alt=3D""=20

src=3D"http://email.wetransfer.com/wf/open?upn=3Du001.EyARP-2FBynQ7gyBCoHEX=

2SWscfoafN-2FA83AqZT-2FYhPEhZm1d3H79jEnt69YoUz38R-2BPvMsLm7c4XNIw-2FMCZ-2B5=

wgi7i46XGKb3Q0cthtSxy4GuFlvEPPmJPGqgGYih9z5a8qRKzVbS2TLHmDkegIiDjeGkHhTpq-2=

BI1TxR6O6iXvwx0yEfZhO1uHO-2FFQzmze3Sfx-2BPwTXiKMTYBpU2ZNkaLkunUonInYvtX17fP=

5Cw1-2FjsfHUBkFqvtWuVy4-2FAmFrhXVmf2j2jnovxhmVc0mJx6MgRyWaBNutsPQTBr-2BSr1T=

U6sapK-2FPLhRhwB1ZmropbrTmvzIj-2BM6wPyG9fxlny6in4pCYee1hytQSRh0qOWLn-2BoJ4D=

TG-2Bpc1VrtFPZbGQRuQzxUdo93C-2FY3B2JSEBrKsqA-3D-3D"=20

border=3D"0">

; text-indent: 0px; letter-spacing: normal; font-family: arial; font-size: =

14px; font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; box-sizing: border-box; orphans: 2; widows: 2; background-color: r=

gb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: norma=

l; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text=

-decoration-style: initial; text-decoration-color:=20

initial;">

We transfer phish

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 16:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uye7O-0000000092c-3Jy0

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 16:25:46 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 16:25:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from linuxhosting001.in.cloudinhost.com ([103.152.79.23]:43087)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uydnG-00000000KfG-3sBf

for sales@nk.ca;

Tue, 16 Sep 2025 16:05:02 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=polinytics.com; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=OZVWxRofy9k+a8TWyeS3kIL9zAHMap2Hoes2D6wwM3M=; b=BD64x+922sRTDTE9VNlcj5IgFk

FMuEfYKlinFyPCdEaHMI19uHQ66qP6MBnP+7tT8yhvYAq4PNnu98/8XP6AjXI4gSK2SM45UqmdodT

42CCtO/cnKzWvHIAln55dR+ha89gkPxeMmc/OjI4B+TA9m6B8149YaibwLy3IWoXloq54p/SP+LU+

q6ifCxQOvc3GdvfqfL2BoG/GSsEMzQtm9t8xb1Xa9DhFxUvas6LV8qCriugC0c2B8xA2yWWBIcGUX

4j63xun7hclYHGySNIVILPgkxpPQR5UvJqNu7ceiT+6D/XQiQer/L0+KJGiLp14Ozy6mFJCJZIvKj

Q+YNplLQ==;

Received: from [62.60.130.141] (port=60539)

by linuxhosting001.in.cloudinhost.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1)

(envelope-from )

id 1uydmO-00000005JVW-3LLX

for sales@nk.ca;

Wed, 17 Sep 2025 03:34:03 +0530

From: "WeTransfer"

To: sales@nk.ca

Subject: You received some documents!.

Date: 16 Sep 2025 15:04:02 -0700

Message-ID: <20250916150401.0DFE65E3369ECF41@polinytics.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - linuxhosting001.in.cloudinhost.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - polinytics.com

X-Get-Message-Sender-Via: linuxhosting001.in.cloudinhost.com: authenticated_id: info@polinytics.com

X-Authenticated-Sender: linuxhosting001.in.cloudinhost.com: info@polinytics.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your files have been downloaded 3 item, 4.6 MB in total ãƒ»

Expires on 24 September, 2025 We give you a heads up the first time your

link transfer is downloaded (we won t email you each time). You ca [...]

Content analysis details: (8.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: serviceautopilot.com]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} You received some documents!.

tml; charset=3Diso-8859-1">

=20

=20

0">=20

=20

margin: 0;

padding: 0;

background-color: #f3f3f3">

er: 0px solid rgb(221, 221, 221); border-image: none; width: 275px; min-wid=

th: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smoot=

hing: antialiased; user-select: text;">

der-radius: 25px; text-align: center; color: rgb(255, 255, 255); font-size:=

14px; font-style: normal; text-decoration: none; word-spacing: 0px; displa=

y: block; box-sizing: border-box; background-color: rgb(82, 104, 255); user=

-select: auto;"=20

href=3D"http://email.double.serviceautopilot.com/c/eJwkzzluwzAQQNHTiB0FzsKt=

YJHG9-AyjIRIpmBLhnP7IEn7gV-8OvYj37_Xlgx18qFUbUsFzdF2nZuQZheoAZRMBVVL3UUMTkk=

Cb523BAxK9rxua0tsSo4cRVeHorm7rGNAq5kiRRIQ8aSWFAgaowsUG4Dv1bgeigfKsTM529Wa0K=

A10QAEGw3MFQIKsUNb0UtpE5s2rrLJ_JTHa62Sr3Mc6zbOuY5dbWk5z2OijwlvE96eh0jbrntd5=

v39X9_qkZ55k30fX8uZH25i8_mr-PtfCX8CAAD__wnJUhE#sales@nk.ca" target=3D"_blan=

k">
x-sizing: border-box;">=20

Check your=20

transfers

); font-size: 18px; font-weight: 500; box-sizing: border-box;">

"box-sizing: border-box;">

7px; border-bottom-color: rgb(244, 244, 244); border-bottom-width: 1px; bor=

der-bottom-style: none; box-sizing: border-box;">

); line-height: 16px; font-size: 12px; box-sizing: border-box;">4.6=20

MB

border-box; text-size-adjust: none; -webkit-font-smoothing: antialiased;">=

); font-size: 18px; font-weight: 500; box-sizing: border-box;"> Messag=

e
sales@nk.ca

td>

We transfer phish

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 16:06:00 -0600

Received: from linuxhosting001.in.cloudinhost.com ([103.152.79.23]:44297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uydnG-00000000Kd1-3sI7

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 16:05:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=polinytics.com; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=vEvHbKfVKvL/FwLLR7Z1YwGQKWSsvOucOLMmD9mfs3A=; b=Ze62LCo3AdFFTYiI8tkYaKYwN2

bAVK1AhDBeVss4RAeB5PjLExqFV/cBwrZf539rno8fbFNdnL0Sdl3pHXwMsdGrhixBn29tzhRk2Iu

O2A/jaaK8affjR6+LIHoQ12mkVXjiKlmIMpRa8NZxdt2rSc4Lrig3OOkF8eTw9dWA0Kz6H8bMjRlS

AuTh2Oloc1zuSo2X1PTT54AKcwfGvjPTWrEDmsktpRxBbqtg7exmi4kyU1Qqzuvd/zcl/FBzlOG7t

E/D0P3MviEDEgNyQDl1ukl9DCpGuczHOk55+D3MtQ1F6byGTDmhSGVMVdAoCZ1g2iXhHP+zQIVcxp

TTLSwTww==;

Received: from [62.60.130.141] (port=60536)

by linuxhosting001.in.cloudinhost.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1)

(envelope-from )

id 1uydmN-00000005JVA-0Tuw

for dave@doctor.nl2k.ab.ca;

Wed, 17 Sep 2025 03:34:02 +0530

From: "WeTransfer"

To: dave@doctor.nl2k.ab.ca

Subject: You received some documents!.

Date: 16 Sep 2025 15:04:00 -0700

Message-ID: <20250916150400.F65B184E6B579CF2@polinytics.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - linuxhosting001.in.cloudinhost.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - polinytics.com

X-Get-Message-Sender-Via: linuxhosting001.in.cloudinhost.com: authenticated_id: info@polinytics.com

X-Authenticated-Sender: linuxhosting001.in.cloudinhost.com: info@polinytics.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your files have been downloaded 3 item, 4.6 MB in total ãƒ»

Expires on 24 September, 2025 We give you a heads up the first time your

link transfer is downloaded (we won t email you each time). You ca [...]

Content analysis details: (13.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[62.60.130.141 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

[103.152.79.23 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[103.152.79.23 listed in dnsbl.ahbl.org]

[62.60.130.141 listed in dnsbl.ahbl.org]

[62.60.130.141 listed in dnsbl.ahbl.org]

[62.60.130.141 listed in dnsbl.ahbl.org]

[62.60.130.141 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.152.79.23 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: serviceautopilot.com]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[62.60.130.141 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[62.60.130.141 listed in sbl-xbl.spamhaus.org]

[62.60.130.141 listed in sbl-xbl.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} You received some documents!.

tml; charset=3Diso-8859-1">

=20

=20

0">=20

=20

margin: 0;

padding: 0;

background-color: #f3f3f3">

er: 0px solid rgb(221, 221, 221); border-image: none; width: 275px; min-wid=

th: 5px; box-sizing: border-box; text-size-adjust: none; -webkit-font-smoot=

hing: antialiased; user-select: text;">

der-radius: 25px; text-align: center; color: rgb(255, 255, 255); font-size:=

14px; font-style: normal; text-decoration: none; word-spacing: 0px; displa=

y: block; box-sizing: border-box; background-color: rgb(82, 104, 255); user=

-select: auto;"=20

href=3D"http://email.double.serviceautopilot.com/c/eJwkzzluwzAQQNHTiB0FzsKt=

YJHG9-AyjIRIpmBLhnP7IEn7gV-8OvYj37_Xlgx18qFUbUsFzdF2nZuQZheoAZRMBVVL3UUMTkk=

Cb523BAxK9rxua0tsSo4cRVeHorm7rGNAq5kiRRIQ8aSWFAgaowsUG4Dv1bgeigfKsTM529Wa0K=

A10QAEGw3MFQIKsUNb0UtpE5s2rrLJ_JTHa62Sr3Mc6zbOuY5dbWk5z2OijwlvE96eh0jbrntd5=

v39X9_qkZ55k30fX8uZH25i8_mr-PtfCX8CAAD__wnJUhE#dave@doctor.nl2k.ab.ca" targ=

et=3D"_blank">
5, 255); box-sizing: border-box;">=20

Check your=20

transfers

); font-size: 18px; font-weight: 500; box-sizing: border-box;">

"box-sizing: border-box;">

7px; border-bottom-color: rgb(244, 244, 244); border-bottom-width: 1px; bor=

der-bottom-style: none; box-sizing: border-box;">

); line-height: 16px; font-size: 12px; box-sizing: border-box;">4.6=20

MB

border-box; text-size-adjust: none; -webkit-font-smoothing: antialiased;">=

); font-size: 18px; font-weight: 500; box-sizing: border-box;"> Messag=

e
dave@doctor.nl2k.=

ab.ca

Canadian Tire Phish from Google Gmail

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 13:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uybfL-00000000N1l-2ljp

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 13:48:39 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 13:48:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f172.google.com ([209.85.210.172]:52432)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyaf3-00000000EI5-2Ac5

for doctor@nk.ca;

Tue, 16 Sep 2025 12:44:26 -0600

Received: by mail-pf1-f172.google.com with SMTP id d2e1a72fcca58-76e4fc419a9so4690190b3a.0

for ; Tue, 16 Sep 2025 11:43:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=moon-onlajn-znakomstva-com.20230601.gappssmtp.com; s=20230601; t=1758048204; x=1758653004; darn=nk.ca;

h=content-disposition:reply-to:list-unsubscribe:precedence:to:date

:subject:mime-version:from:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=GxNhJEG/mM9fO1bQU/9BAp6oQIFknDAWXb2le140yEc=;

b=vRvzzx0pexQJPRibr/jMud09iynk3T+0O2Buz1NgWVsToff4Fuv6NaqD9KAt+EwBgZ

TBE+RI7PDm3PH9u7XxnErKsV/G5Uc0aJHg3evKNjIAIR/u62Md4mLB2eeJXZm4Tvfg5z

SFLMCEihLrLlHa2NXrZem0bN8kp2JJlMbMJUIaQUtRiM6naO81HAanej9bp77WAAohqH

gXqm4bFYaarLBFcgbYLlsosHVZHJi0oSHQIlsOHDTi8HTmdqDTXDzt4oYQGbGrqKm8pC

hie5NDw9NzAki7mFnZ4cRcZ/l/6rogZO+6RIXiV97ZjVcLXrxRQ15mZBbsAOqjM2mWTt

8tHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758048204; x=1758653004;

h=content-disposition:reply-to:list-unsubscribe:precedence:to:date

:subject:mime-version:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=GxNhJEG/mM9fO1bQU/9BAp6oQIFknDAWXb2le140yEc=;

b=K/WfyBPusapG+Gaie1/3Rlm+21+ijo/Dqu1oAa6OUKKypIsH8T5ws0Fca8TLL8P6Dr

Ddef+I5GwB+Of7I5EIPQ4dRDS2d+dVI9VRAjpYtsAJB4X+XlNBtQLJsmvkFix6u2rS1k

E3iqm96GGvm+k7xEneEBy/7MWbYtIjyEz0OwDF9gNqPTDpBphg3XRJwcZ/xJmr3eIcst

bTTVwYJB1jHvxaAizH0Y/i50axT190AUBnHFYuAS15U4Pf9JD8NJDhc43LH5xYHSib1b

2SpEy9tu5QcCwPCRGns5/CNzopMU6nAtXYf2p7mZRT8A05IQnOuzSqRF4BuEMdIjfCyK

ri5w==

X-Gm-Message-State: AOJu0YzlqdlJq3SgNVYrcR2tff4V9EWLLvh92B0quWZf1n/iUSrprCON

E0Ljpav/pMXjaOmSNKZTJCF1end8wDAERGVj7E7gxVfSU9vWI8cM9ydNk2Ess75NUksx/ghLOZG

XBVGf

X-Gm-Gg: ASbGncvzc9bYXZHr9gNBSGliWKsNlJ4wOCqUDwZuiHfnMdkPZREyYRGXYdSgY1Hpg8u

i7TewUWDnDuGbp6lmlEEqrTKubTzRPldZKFhYzMyAxp1vM6VAA17Kxr8NAEbP8DjVZou0fvGVCQ

t5Zn4+7+aOMgtXSeLOarnt7yz7T3EFJjyxHckaJ6PomPMMpuDRFDKUal/fu+9Y3cwqcDwDaguQ8

aqLdIsk6WoQUcPttJ5K8c/oHPdC2LHjysUWHm6VKbY9Q5VpXKWAydIvBwc8PhGqOZsiyLFL5sZI

JeY+YQH5y6xpBDbwB8BEhFAmzk4FUj4Qmg1WdBaVwwvOHMpWKeBOmFb/Vf6SpQ3kYuJDJhRPtQy

pX5oOP2WvKQ==

X-Google-Smtp-Source: AGHT+IGfXJ0qbDd4bFDZXl8Eq0BpWpkpgtwqAU6804ZBl/1Zg6ef9BRQRL0r9kIZ0tPI8v7uefAgAA==

X-Received: by 2002:a05:6a00:4106:b0:776:1f45:9044 with SMTP id d2e1a72fcca58-7761f45915fmr15470260b3a.0.1758048204414;

Tue, 16 Sep 2025 11:43:24 -0700 (PDT)

Received: from lyerjcepssbtvbz.com ([4.242.237.186])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7761562f25dsm13860319b3a.74.2025.09.16.11.43.21

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 16 Sep 2025 11:43:21 -0700 (PDT)

Message-ID: <68c9afc9.050a0220.36b29a.3daa@mx.google.com>

X-Google-Original-Message-ID: <232397-486785340-104567-[randomc/6]@E0005718.com>

From: Claim Your Free Mastercraft Tool Set

X-Google-Original-From: Claim Your Free Mastercraft Tool Set

Received: by lyerjcepssbtvbz.com for ; Tue, 16 Sep 2025 19:43:20 +0100 (envelope-from <>)

X-Google-Original-Sender: info_[randomcl/10]@uses-quality.namecheap.com

MIME-Version: 1.0

subject:Tool Kit â€“ Just for Loyal Members

date:Tue, 16 Sep 2025 11:43:20 -0700

to:doctor@nk.ca

Precedence: bulk

X-Mailer-id:<486785340-doctor@E0005718.com>

List-Unsubscribe: ,

reply-to:

Content-Disposition: inline

X-Rival-Recipient: [randoma/60]

X-Gm-Features: [randoma/40]_[randoma/16]_-[randoma/5]

Content-Type: multipart/alternative;

boundary="==0000000000000ehV182p244867853400ehV182p24"

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Home Depot Unsubscribe from this list

Content analysis details: (18.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[4.242.237.186 listed in zen.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

[209.85.210.172 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[4.242.237.186 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[209.85.210.172 listed in dnsbl.ahbl.org]

[209.85.210.172 listed in dnsbl.ahbl.org]

[209.85.210.172 listed in dnsbl.ahbl.org]

[209.85.210.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.172 listed in list.dnswl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.172 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

2.5 HDRS_MISSP Misspaced headers

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Tool Kit â€“ Just for Loyal Members

--==0000000000000ehV182p244867853400ehV182p24

Content-Type:text/html; charset=UTF-8

Home Depot

Unsubscribe from this list

--==0000000000000ehV182p244867853400ehV182p24--

Canadian Tire Phish from Google Gmail

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 13:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uybfF-00000000MvW-1wZu

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 13:48:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 13:48:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f175.google.com ([209.85.215.175]:47544)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyaf2-00000000EI1-2kzP

for doctor@nl2k.ab.ca;

Tue, 16 Sep 2025 12:44:23 -0600

Received: by mail-pg1-f175.google.com with SMTP id 41be03b00d2f7-b4cb3367d87so3910101a12.3

for ; Tue, 16 Sep 2025 11:43:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=moon-onlajn-znakomstva-com.20230601.gappssmtp.com; s=20230601; t=1758048204; x=1758653004; darn=nl2k.ab.ca;

h=content-disposition:reply-to:list-unsubscribe:precedence:to:date

:subject:mime-version:from:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=ssDaBYcteayMeXhCdpowrMw+khq6MoPaJFu7fcoZ3Fs=;

b=K5yXXZkojK/WTw7YdRnFYnpOpYtBJqkyKjQImS7vv84FXmGu5ghW2+MIcYSWJkVUYD

yE4kLjUDPH58GXBUKuvca0jLq10ryNxv4J6U+xYBoY9duebkQl7NXKgWBGImy+cBiqdR

ifu5pcD4uZaVF0LQWUtqyv1wNWGelMyzLKYEeYoJruVwDWUE4re9Myexe9lS2pcuWDE4

tvcXjpt8cjWbZHXdxAd/lJgmeTIQMDlyLD7nEhaOXMLojrx/AXTLVxBhtLz4zAzA323A

ehM6Gm+ZwQpAQLp2K3nmVRjtjwpQwTx/RN3bHqnN3fHOos3TbAbASWwbps3hQ2OI9k59

ZNUA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758048204; x=1758653004;

h=content-disposition:reply-to:list-unsubscribe:precedence:to:date

:subject:mime-version:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=ssDaBYcteayMeXhCdpowrMw+khq6MoPaJFu7fcoZ3Fs=;

b=Ae8XQ8qLHT+pnbzLeNmxMFPC9DsrCD2dj1g+lys6lnRUdAXuEwQ+bHvyDfjGLBxtS/

FFi9tXwNj32yZx79xtRJeXIDUN1aU0hLbsR7qJaOKZHP8NZFg2zcOzpO/SskuUWmHqkA

yuEJUMaFIGTMeUZToJz2SXHXF5MORMwbEq4pkOq/RsrX44Ydv1cDH1qXs9fKMkn42zuN

dJIGU0MV///COHaTlaA4LTeLDhnTFazKpLPicGhJv0lrXgHbTJfZVd6c0jAph9xPFBHN

2cFVvZCEXC/LcL9BtwkArVwtoLkfl3sUFO+YOjDqkvlLDFMcu6H/zOSYGusFzIWFKjWF

r0UQ==

X-Gm-Message-State: AOJu0Yy/MZwDs28Mi5rola78xPaywV8vMekyG5BJkoSFMfkQTDvn01mG

YW+aWAORBzbNXl19ixDeKORHEYY+J2uO7ZqDBneZpLoWttiWPTFCTH6AmofbNuWHm4bx0H2AwlQ

CvEpy

X-Gm-Gg: ASbGncurQFlhIBN//PFMbPCkKhkVNhx/7Y6FiN36VO5AWUGK4hktymSJtEa9RoEETul

Bhj4Ixt37PbIkSJADndpnUdS1akpklXEVbFI445JL/Yb25oKPgUMKFtAwCC617cgrEudr6DuCLZ

j1DdHKutO8NzihYOPPPBZWg0TXCZGdNkC1y0Pur0k5A4bVE0T85t46bUzqV2XgiPCgk2bKjh/sr

JpYWRnriCLMHtj5RMoOjJfwGSu/VOAgfUJiuXHmOeluxTvs197Efqm0pZij6/5+6IvmV/FqfG4M

gu+vLReEJf+ITPqeWKkCUKW5cVca5YBhDdYvKMDJYGwXgzKflL6ZkbEOoWqUpsOT/O1CJehpBSJ

aUHOfFkb5jNk3iDHtWSPe

X-Google-Smtp-Source: AGHT+IFm7lLXwX1OnT4D8dEfBoGvvoaYpBrgsjudRO9Sz5s5Luz/1DVYalLKc1fQxLiXjyXKwanUZg==

X-Received: by 2002:a17:90b:4f92:b0:32b:ca6f:1245 with SMTP id 98e67ed59e1d1-32de4e63bc2mr19240040a91.5.1758048203915;

Tue, 16 Sep 2025 11:43:23 -0700 (PDT)

Received: from lyerjcepssbtvbz.com ([4.242.237.186])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-32ed26ec4e0sm262440a91.25.2025.09.16.11.43.21

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 16 Sep 2025 11:43:21 -0700 (PDT)

Message-ID: <68c9afc9.170a0220.10113a.2426@mx.google.com>

X-Google-Original-Message-ID: <232397-486758798-104567-[randomc/6]@hG1T0H4z.com>

From: Claim Your Free Mastercraft Tool Set

X-Google-Original-From: Claim Your Free Mastercraft Tool Set

Received: by lyerjcepssbtvbz.com for ; Tue, 16 Sep 2025 19:43:20 +0100 (envelope-from <>)

X-Google-Original-Sender: info_[randomcl/10]@uses-quality.namecheap.com

MIME-Version: 1.0

subject:Free Mastercraft Tools â€“ Canadian Tire Exclusive

date:Tue, 16 Sep 2025 11:43:20 -0700

to:doctor@nl2k.ab.ca

Precedence: bulk

X-Mailer-id:<486758798-doctor@hG1T0H4z.com>

List-Unsubscribe: ,

reply-to:

Content-Disposition: inline

X-Rival-Recipient: [randoma/60]

X-Gm-Features: [randoma/40]_[randoma/16]_-[randoma/5]

Content-Type: multipart/alternative;

boundary="==000000000000s5019ikm1P486758798s5019ikm1P"

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Home Depot Unsubscribe from this list

Content analysis details: (18.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[4.242.237.186 listed in zen.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

[209.85.215.175 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[4.242.237.186 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[209.85.215.175 listed in dnsbl.ahbl.org]

[209.85.215.175 listed in dnsbl.ahbl.org]

[209.85.215.175 listed in dnsbl.ahbl.org]

[209.85.215.175 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.175 listed in list.dnswl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.5 HDRS_MISSP Misspaced headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.175 listed in wl.mailspike.net]

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Free Mastercraft Tools â€“ Canadian Tire Exclusive

--==000000000000s5019ikm1P486758798s5019ikm1P

Content-Type:text/html; charset=UTF-8

Home Depot

Unsubscribe from this list

--==000000000000s5019ikm1P486758798s5019ikm1P--

Canadian Tire Phish from Google Gmail

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 12:45:00 -0600

Received: from mail-pl1-f180.google.com ([209.85.214.180]:45294)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyaet-00000000EH1-0wxd

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 12:44:15 -0600

Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-2570bf605b1so57636715ad.2

for ; Tue, 16 Sep 2025 11:43:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bearmail-my-id.20230601.gappssmtp.com; s=20230601; t=1758048194; x=1758652994; darn=doctor.nl2k.ab.ca;

h=content-disposition:reply-to:list-unsubscribe:precedence:to:date

:subject:mime-version:from:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=xnTIjI5QBKg9eNZ36jhVrhBmAvIeKdPi1MeV+DM7t8o=;

b=0VY7OoR4rRXCPfp9g/yCKIskK0hITeh8FmlcPO/vLjewqdh8TgwRNSSF+YMsv2HS5a

TPG8E3GZrBDerefPmmxGKdcEml6rq8bS373k2A9vFDXQYdO3Uc37INZ3y7kh2IPUNkEJ

XumTzDavJ38halOwdrSO6gbR7msTITfWd1WtDumuqOj9OgzR4yNDg0KWnyx/BpYzUwS3

2nXfOBD5HCX/X48+MRh2ddd5BBSr1NMJZ0l9KvriT/Sn8L6MwYDX6ZMKH5Gra3511DH9

V2ICmK70R5zf6tELdhqWo/QubyyKM9m5mPNnvdbp7zXwHQkeimlroJSJAuYplKH6GXZS

70Tw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758048194; x=1758652994;

h=content-disposition:reply-to:list-unsubscribe:precedence:to:date

:subject:mime-version:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=xnTIjI5QBKg9eNZ36jhVrhBmAvIeKdPi1MeV+DM7t8o=;

b=TScWg7fEirBQ8OSND8G5V+O8q3ZhargIBEUFNWLpI06YSwLB0TVoDOW+ij0Dhz4qxv

rBV7voNboz8rv7bw4/5MpI5LZdG4lhpOnTVy59CTpButQvohUQk2406GkPpkayJsJwqV

dYGlzFpsx3/iFbWK2hmWlcEkHVibIegSmMh58Ym7Ew4JbkGeEw5Jtyx7b8D6WLIPtgM5

LqMSlCRh6J+wIEpEhqAiNgQr92bZLDLI74YY663OTIFg+jy4pWpKr34a9vjEVW/z2egQ

7Q18KR0OdVSM3GqOsPupJp9j5PNzVu9uLdhdDzNgPj+fxWYngQ87dZxpKyGkwz7kvXUc

Xs6w==

X-Gm-Message-State: AOJu0Yz17GR05CIp2qRevRljhBzOLkoPtZNgDH2n9OSCGiBdecYx7Bmt

ziDaweAXTYw+To2V7grNvyY1FUhSWyReHp0gAqSvOqdRBfcpVPcO/D9NaH4HT2aRXf1YpTre/wh

aOJvn

X-Gm-Gg: ASbGncs2zlRpK7rXJLp/6UJvBR9eku+sZHej+0IACB9zlufB1Ea42zr3OrD0P2u2zrq

SO+MXc9pGsWpn4rzOyO99LkqbUZ784sq1ohz/8F8iVn6LMv/5h4FbRcwM5JxIXXX6im/2IebMmB

aI9nXLuOb5jzShOgZfySYON0u1SN+qHq4GRHIPFl/zMVSQNejZlvapq7Z5OMHLgG2KnNJdEU4q9

2RUs4Rv1aB5nuPNm43pzMeY0kpyFrr6iOHkcYoCsgWHe+++cpSBrDTO3QTaDABpdVnSa6fok5+K

YFY7sS/xyh6X/SO1WP7XH1UKqfUe8T7UKo/WZvwq7/bBggCfUrreDGlBTJVktyW9oU7Cx+oRkMo

9+g==

X-Google-Smtp-Source: AGHT+IFYYLCF6Jp5zTv+zM7BduM1vtValF355/kMgL1642JfMZGCQx4IlRijyrxCcqD+Nps9jkSWgg==

X-Received: by 2002:a17:902:d4c2:b0:267:4b80:29c4 with SMTP id d9443c01a7336-2674b802e80mr105066435ad.59.1758048194210;

Tue, 16 Sep 2025 11:43:14 -0700 (PDT)

Received: from nqranyaaaz.fr ([4.242.237.186])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-25c3ae29aefsm163265055ad.118.2025.09.16.11.43.12

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 16 Sep 2025 11:43:13 -0700 (PDT)

Message-ID: <68c9afc1.170a0220.1d44e3.e1dd@mx.google.com>

X-Google-Original-Message-ID: <232397-486709180-104567-[randomc/6]@jc7V446Q.com>

From: Claim Your Free Mastercraft Tool Set

X-Google-Original-From: Claim Your Free Mastercraft Tool Set

Received: by nqranyaaaz.fr for ; Tue, 16 Sep 2025 19:43:12 +0100 (envelope-from <>)

X-Google-Original-Sender: info_[randomcl/10]@uses-quality.namecheap.com

MIME-Version: 1.0

subject:Mastercraft Tool Set â€“ Claim from Canadian Tire

date:Tue, 16 Sep 2025 11:43:11 -0700

to:dave@doctor.nl2k.ab.ca

Precedence: bulk

X-Mailer-id:<486709180-dave@jc7V446Q.com>

List-Unsubscribe: ,

reply-to:

Content-Disposition: inline

X-Rival-Recipient: [randoma/60]

X-Gm-Features: [randoma/40]_[randoma/16]_-[randoma/5]

Content-Type: multipart/alternative;

boundary="==000000000000M1uq7sS422486709180M1uq7sS422"

X-Spam_score: 18.3

X-Spam_score_int: 183

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Home Depot Unsubscribe from this list

Content analysis details: (18.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[4.242.237.186 listed in zen.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[4.242.237.186 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[4.242.237.186 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[4.242.237.186 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[4.242.237.186 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.180 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.180 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

2.5 HDRS_MISSP Misspaced headers

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Mastercraft Tool Set â€“ Claim from Canadian Tire

--==000000000000M1uq7sS422486709180M1uq7sS422

Content-Type:text/html; charset=UTF-8

Home Depot

Unsubscribe from this list

--==000000000000M1uq7sS422486709180M1uq7sS422--

Government of Canada Phish from Amazon

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 12:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyaPp-00000000CYs-2JoY

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 12:28:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 12:28:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [54.240.8.41] (port=41421 helo=a8-41.smtp-out.amazonses.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <0100019953651fd0-7cc283eb-3a2a-418f-9f53-50e27f5bc29e-000000@amazonses.com>)

id 1uyYj2-00000000OVe-3v6f

for support@nk.ca;

Tue, 16 Sep 2025 10:40:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=pvqh2wnr5it264mhuipnfpc6dibzhqn6; d=esglobal.my; t=1758040760;

h=Content-Type:Content-Transfer-Encoding:From:To:Subject:Message-ID:Date:MIME-Version;

bh=mfusv2RdLxhgkCy+GNx7wQi5iX8NMGzVWfTk6xpyB5w=;

b=XQRWtsvhnXNW84fABjzAx803WcmZdtGrZKIenXIQ45JY4LAbPc3cTjMrF8sEa2P0

IhmcRTPr+geBtPk9g7wV2Redz9FwrUHcLOKJF6T5sEbd7vXTLmNI9oeeCEAjmH1FRbJ

VdwfmKlyW7gMz9FO6uyrVIc+dj/ZyBYQqx+LDbdAAKo62cUSjBIcJaFUxv/jqRSRoH/

er/1vprnlVYkyjA1E3zU0hSGaqv1+aPz0YE90BZe7fEkH8ac4akXBKrGF8UiCzAPf9d

iTAZU9t6GjCQdvXKtxgeMDbSaTqDD0QzQu8XHFDzbwip3mchimKZSmE2fn/whweLVqs

k3VYtTaGfg==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1758040760;

h=Content-Type:Content-Transfer-Encoding:From:To:Subject:Message-ID:Date:MIME-Version:Feedback-ID;

bh=mfusv2RdLxhgkCy+GNx7wQi5iX8NMGzVWfTk6xpyB5w=;

b=mbtVrbugt53LTJshF5nU5+l7dy/Rh8v5Q3i0/WgN2gLn+Vlc3femr7o9oy32KdC4

lOozpvCbTmARQNe6aqCX9mHY89lAY+YZGD1LY/dxE6RokI2TyoHbiqd+dJ81CY52LLQ

bjLPTScdIRPDsp44w71xi44qv4hqgQKHgU5YP2Kw=

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

From: Government of Canada - Tax Services

To: support@nk.ca

Subject: Update: Your Review was Successful.

Message-ID: <0100019953651fd0-7cc283eb-3a2a-418f-9f53-50e27f5bc29e-000000@email.amazonses.com>

Date: Tue, 16 Sep 2025 16:39:20 +0000

MIME-Version: 1.0

Feedback-ID: ::1.us-east-1.DU684iq/wa498q5dItDSMnubddtHdaQ1947JGnRWTss=:AmazonSES

X-SES-Outgoing: 2025.09.16-54.240.8.41

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: English version ** La version française suit ** Hi,

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

[54.240.8.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.41 listed in dnsbl.ahbl.org]

[54.240.8.41 listed in dnsbl.ahbl.org]

[54.240.8.41 listed in dnsbl.ahbl.org]

[54.240.8.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.41 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.41 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.8.41 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.41 listed in bl.score.senderscore.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.41 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.41 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.8.41 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Update: Your Review was Successful.

=EF=BB=BF

initial-scale=3D1, maximum-scale=3D1, user-scalable=3Dno">

100%;margin: 0;padding: 0;min-height: 1000px;color: #000000;font-family: =

'Cabin',sans-serif;font-size: 12px;background-color: #eaeaea;height: 100% !=

important;width: 100% !important;" bgcolor=3D"#eaeaea">

id=3D"templateContainer" style=3D"-webkit-text-size-adjust: =

100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace: =

0pt;width: 420px;min-width: 420px;border-collapse: collapse !important;" =

bgcolor=3D"#ffffff" width=3D"430px">

=20

100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace: =

0pt;border-collapse: collapse !important;" class=3D"center" =

cellspacing=3D"0" cellpadding=3D"0" border=3D"0" width=3D"100%">

=20

100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace: =

0pt;">

100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace: =

0pt;border-collapse: collapse !important;" cellspacing=3D"0" =

cellpadding=3D"0" border=3D"0">

#faf8f5;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: =

100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;width: 100%;">

100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace: =

0pt;width: 100%;border-collapse: collapse !important;" cellspacing=3D"0" =

cellpadding=3D"0" border=3D"0">

=20

100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace: =

0pt;">

style=3D"-webkit-text-size-adjust: 100%;-ms-text-size-adjust: =

100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;border-collapse: collapse =

!important;width: 100%;" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" =

width=3D"100%" bgcolor=3D"#ffffff">

=20

=20

st: 100%;-ms-text-size-adjust: 100%;mso-table-lspace: 0pt;mso-table-rspace:=

0pt;">

-adjust: 100%;-ms-text-size-adjust: 100%;mso-table-lspace: =

0pt;mso-table-rspace: 0pt;border-collapse: collapse !important;margin: =

20px;" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">

=20

=20

style=3D"-webkit-text-size-adjust: 100%;-ms-text-size-adjust: =

100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

style=3D"-webkit-text-size-adjust: 100%;-ms-text-size-adjust: =

100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;width: =

100%;border-collapse: collapse !important;" cellspacing=3D"0" =

cellpadding=3D"0" border=3D"0">

=20

=20

style=3D"font-size: 14px;-webkit-text-size-adjust: 100%;-ms-text-size-adjus=

t: 100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

style=3D"font-size:14px;/*! background: #fe462c; //*! border-radius: 7px =

7px; /">

border=3D"0" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" =

style=3D"WIDTH: 100%; BORDER-COLLAPSE: collapse !important; =

-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

=20

style=3D"-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

border=3D"0" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" =

style=3D"WIDTH: 100%; BORDER-COLLAPSE: collapse !important; =

-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

=

=

=

=

=

=

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt">

=

=

src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAiYAAABkCAYAAACywfsIAA=

AACXBIWXMAAA7EAAAOxAGVKw4bAAAEuWlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja=

2V0IGJlZ2luPSfvu78nIGlkPSdXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQnPz4KPHg6eG1wbWV0=

YSB4bWxuczp4PSdhZG9iZTpuczptZXRhLyc+CjxyZGY6UkRGIHhtbG5zOnJkZj0naHR0cDovL3d=

3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyc+CgogPHJkZjpEZXNjcmlwdGlvbi=

ByZGY6YWJvdXQ9JycKICB4bWxuczpBdHRyaWI9J2h0dHA6Ly9ucy5hdHRyaWJ1dGlvbi5jb20vY=

WRzLzEuMC8nPgogIDxBdHRyaWI6QWRzPgogICA8cmRmOlNlcT4KICAgIDxyZGY6bGkgcmRmOnBh=

cnNlVHlwZT0nUmVzb3VyY2UnPgogICAgIDxBdHRyaWI6Q3JlYXRlZD4yMDI1LTA3LTI1PC9BdHR=

yaWI6Q3JlYXRlZD4KICAgICA8QXR0cmliOkV4dElkPmY2YzcyYTM3LWU3MTctNDdkYi05MGE1LT=

Y5MDQ1ODkyYzRjYTwvQXR0cmliOkV4dElkPgogICAgIDxBdHRyaWI6RmJJZD41MjUyNjU5MTQxN=

zk1ODA8L0F0dHJpYjpGYklkPgogICAgIDxBdHRyaWI6VG91Y2hUeXBlPjI8L0F0dHJpYjpUb3Vj=

aFR5cGU+CiAgICA8L3JkZjpsaT4KICAgPC9yZGY6U2VxPgogIDwvQXR0cmliOkFkcz4KIDwvcmR=

mOkRlc2NyaXB0aW9uPgoKIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PScnCiAgeG1sbnM6ZG=

M9J2h0dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvJz4KICA8ZGM6dGl0bGU+CiAgIDxyZ=

GY6QWx0PgogICAgPHJkZjpsaSB4bWw6bGFuZz0neC1kZWZhdWx0Jz5VbnRpdGxlZCBkZXNpZ24g=

LSAxPC9yZGY6bGk+CiAgIDwvcmRmOkFsdD4KICA8L2RjOnRpdGxlPgogPC9yZGY6RGVzY3JpcHR=

pb24+CgogPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9JycKICB4bWxuczpwZGY9J2h0dHA6Ly=

9ucy5hZG9iZS5jb20vcGRmLzEuMy8nPgogIDxwZGY6QXV0aG9yPlA2MDExOTI1MjU8L3BkZjpBd=

XRob3I+CiA8L3JkZjpEZXNjcmlwdGlvbj4KCiA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0n=

JwogIHhtbG5zOnhtcD0naHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyc+CiAgPHhtcDpDcmV=

hdG9yVG9vbD5DYW52YSAoUmVuZGVyZXIpIGRvYz1EQUd1Tm1Jd3pjMCB1c2VyPVVBR3VOcEE3Mn=

VRIGJyYW5kPUJBR3VOdlFwRl80IHRlbXBsYXRlPTwveG1wOkNyZWF0b3JUb29sPgogPC9yZGY6R=

GVzY3JpcHRpb24+CjwvcmRmOlJERj4KPC94OnhtcG1ldGE+Cjw/eHBhY2tldCBlbmQ9J3InPz7E=

4JQGAAA7NklEQVR4nO2deVxN2///XyoaEIkyl4ylEFKKj6QypAyZyb26lwy3271mLtccX3FNGSL=

TFRKRzDKViK4hSpRQUSQqU9NR9/fH+eVWZ61z9j5DJ7Wej0cPWmuv93rvs3dnv/d7vdf7XePff/=

/9FwwGg8FgMBiVABVlK8BgMBgMBoNRAjNMGAwGg8FgVBqYYcJgMBgMBqPSoKZsBRgMRuWhqKgI6=

enpeP/+PT5+/Iji4mLUr18fHTp0gIaGhrLVYzAY1QDxholAAKxaVUGqyAl9fWDaNGVrwSjhxg0g=

LEzZWnCnQQPg11+VrUWFcuHCBYSEhODatWtISkrC169fRY5RUVFB27ZtYWlpCUdHRzg4OEBPT08=

J2jIYjKpODbG7cnJzgdq1K1AdOWBmBjx8qGwtGCWsXQvMm6dsLbjTpg3w9KmytVA4hYWF2LdvHz=

Zs2IAnT57wHq+iooJRo0ZhyZIl6NChgwI0ZDAY1RW2lMNgVDMuXLiAn376CWlpaVLLKC4uRmBgI=

IKCgjB9+nSsWbMGtb+3lxgGgyEX8vPz8ebNG5F2dXV1NGnShLc8FvzKYFQjlixZggEDBshklJSm=

uLgYvr6+6NGjB5KTk+Uik8FgfF9ER0ejVatWIj+urq5SyWOGCYNRTfDy8sLy5csVIjs+Ph59+/b=

Fq1evFCKfwWBUH9hSDoNRDZg1axY2b94s9hgDAwO4uLjAwsICbdu2ha6uLj59+oS0tDRER0cjND=

QUD8XEbyUnJ8PJyQk3btxAnTp15H0KDAajmsAMk8pKairQrBmgqqpsTRjfOf7+/vjrr7+o/W3bt=

oWPjw+GDBlC7O/atSucnZ2xYsUK3LhxA3/++SeuXLlCPPbhw4eYO3cutm3bJhfdGQxG9YMt5VRW=

liwBDh5UthaM75ynT5/C09OT2j9mzBg8ePCAapSUx8bGBpcvX4a3tzf1mO3bt4v1rDAYDIY4mGF=

SGXnxAggIAFasAAg5JRgMrnh4eCA/P5/YN3bsWBw+fBiampq85S5YsACLFi2i9q9du5a3TAaDwQ=

CYYVI5Wb1aaJAkJQEHDihbG8Z3yuXLl3H16lVin7GxMfz9/WWSv2zZMlhZWRH7Tpw4gS9fvsgkn=

8FgVE9YjEllIy0N2Lfvv99XrgTc3AA1dqkY/BDntdi9eze0tLRkkq+iooJFixZh8ODBIn25ubmI=

jIxE//79pZJdMv7JkyfIzMzE+/fvAQANGjSAnp4eOnTogF69esl8DpWBe/fuITo6GpmZmcjIyEB=

RURH09PTQvn17dO/eHe3atVPo/O/evUNoaCji4uKQnZ0NVVVVjBo1Co6OjrxlJSQk4Pr160hMTE=

RWVhbq1KkDXV1d9O7dG9bW1qhVq5YCzgB4/Pgxrl27hsTERHz48AF6enpo0qQJLCwsYG1tLXF8S=

koKzpw5g7S0NGRkZKBWrVrQ0dFB+/btYWlpifbt28tN1/j4eNy8eRMZGRnIyMhAQUEBGjZsiHbt=

2sHc3BydOnWS21wk8vPzER4ejpiYGKSkpKCoqAj169dH69atYW9vDyMjI4XOzwX2tKtsrFkjLAV=

QwvPnwN9/A+7uytOJ8d2RnJyMixcvEvtcXFzQs2dPuczTv39/1K5dm+gduXnzJm/DJCIiArt27c=

Lx48eRm5sr9lgtLS24urrCw8MDNjY2EmWPHj0at2/fFmm3sLDA0aNHeekJAL1798bLly9F2rdu3=

QonJyexY3Nzc7F161Zs27ZNYv6XNm3aYPbs2Zg0aRLnB/vWrVvh4+Mj0n7hwoVvD9nMzEzMmjUL=

gYGBEJT+zgHQuHHjb4bJ//73P6SmppbpNzMzw6lTp779fuDAAaxbt05sbFGDBg0wdepUzJ49Gzo=

6OhLPYe7cuQgKChJpv3PnDho2bAgAOHnyJFasWIG7d+9S5XTo0AGrVq3C8OHDRfoePHiA5cuXIy=

QkBMXFxVQZ3bt3x9KlSyVeVxoCgQC7d+/G1q1bERcXJ/bYpk2bwsvLC9OnT+e8u+3kyZPw8vISa=

d+yZQucnZ0BAG/evMHKlSuxf/9+fP78mSrL2toaCxYsIL5wlDBixAjcuXPn2++05eJ79+7B0NBQ=

pD00NFSsAcYMk8rE69fArl2i7StWCL0mNWtWvE6M75Lg4GBq3zQ51pJSU1PDpEmTEBsbK5Oc1NR=

UuLu74/Lly5zH5Obm4sCBAzhw4ACcnJywa9cusVkme/fuTXzQvXr1Cu/evfv2sONCfHw8IiMjRd=

q1tLTQp08fsWPDwsLg7u7OOedLUlISpk6ditWrV2Pnzp2cPBkfPnxASkqKSHuJAXL//n04OTnh9=

evXEmW9evVKRFbJZ5WXlwc3Nzex91sJWVlZ8Pb2xt9//42goCCJxvG7d++I51BUVITc3FxMmjSJ=

eD3L8+TJE7i6umL69OnYsmULVFRUUFRUhKVLl2L16tUoKiqSKOPOnTsYPHgwVqxYITa2isS9e/c=

wceJEPHr0iNPx6enpmDdvHtatW4cNGzZg/PjxEsd8+fKF+FmVGCDXr1+Hq6srMjMzJcq6efMmnJ=

2d4ebmBj8/P2IM2ps3b4jzlaegoIB4XEFBgdhxLMakMrF2LUC6YMnJZZd3GAwJnD9/ntiuo6MDe=

3t7uc61ZcsWXLt2TeRn2bJlnMafPn0anTt35mWUlOfMmTPo1KkTNaYGEAb7qhGWRIuKinDixAle=

89GOHzp0qNi3XF9fXzg6OkqViC4lJQUDBw6En58f77GlSUhIgJ2dnVijRFwJtRIEAgGcnZ05GSW=

lefXqFRwdHXH//n2xx9F0KCwshIuLCyejpDTbtm37tm3+xx9/xMqVKzkZJaVZvHgxDvLYLRkcHA=

xra2vORklpMjMzMWHCBPzxxx+8x5YmIiICDg4OnIyS0hw4cADjxo0jfkZc7g9ZYIZJZeHtW0DcF=

86qVWWXeBgMCsXFxYiKiiL2OTo6Eh/OyuLs2bMYOnQocnJyZJb17t07DBw4kGrg6OrqYuDAgcQ+=

vks5NMNE3NvtunXrxG7d5kJxcTGmTp2K3bt3SzW+qKgIY8aMkfh516hRQ6Ks2bNnS21Mfv78GW5=

ublLpsHTpUqnnXbJkCWbPno2AgACpxgPAnDlzUFhYKPG4I0eOYNSoURK9A5Lw9vbGn3/+KdXY16=

9fY/jw4VLrEBISgn2El2Iu94csVJ5vqOrOunVAXh69PyUF2LMH8PCoOJ0Y3yVPnjyh7ojhEghYU=

bx69Qpubm7Ut9batWtj5MiRcHJygpGREWrUqIFnz57hzJkzOHr0KPEcCwoKMHLkSMTGxqJZs2Yi=

/RMmTCgTG1HC1atXkZWVhQYNGkjUOzU1lRjT0LBhQ+oyS0REBOZRqmxrampi8uTJcHBwgKGhIVR=

UVJCSkoKDBw/iyJEj+EpIGeDh4QFjY2Pe1/Pw4cOIiYnhNYZEfHx8mc+gcePGmDFjBnr37o3GjR=

vj06dPiI+Px/Hjx3Hy5EmijEePHiE4OJh3PZU9e/Z8+3+TJk0wbdo02Nvbo0GDBkhPT0dERAQ2b=

NiADx8+iIzNzc3F+vXrv/2upqaGH3/8EUOHDv0WC5GWloYzZ85g+/btIrE3gPBhHxISglGjRlF1=

TEhIgLu7OzFuRVVVFRMnTsTgwYPRunVrqKurIy0tDSdOnMDevXuJsVUrVqyAqamp2DlJLF68uIy=

8YcOGYdSoUWjfvj00NTXx8uVLREZGwt/fH+np6UQZ3t7e+Omnn8q0DRw4EG3atPn2e0ZGBtFL26=

hRIwwaNEikXdKyaY1/xflkcnOB761iqKkpION6t1zx8xMGroqLD3n/HjA0BMQEJAEQZoJ9/hxQU=

GS7Qli7FqB8IVdK2rQBnj5VthYyERoaSk2YdvHiRTg4OFSwRmTs7OyoSy8jRoyAr68v9PX1if0Z=

GRmYMWMGdRnB1dUVx44dE2nPz89H48aNiQ+tPXv2YNKkSRL13rhxI37//XeR9l9//RWbNm0Sac/=

Ly4OZmRmePXsm0mdpaYkjR47AwMCAOFdCQgKGDBmChIQEkT4zMzPcu3eP6AHz9vYmLgHo6OggOz=

v72+9aWlr48ccfMWTIELRo0QKFhYV48+YNmjZtCjMzMwCAkZERXrx4QdQPAAYNGoSAgABqQOu6d=

eswZ84cYp+bmxv+/vtvYp+7uzv27t1LnXfYsGE4dOgQNDQ0RPoSExNhY2ODd+/eUcc3adIEZ86c=

gbm5ObH/ypUrcHBwIBoXHh4e2LFjB1V27969iTFIbdu2RVBQELp06UIc9/r1a4wcORI3btwQ6dP=

X10diYiK0tbVF+g4dOiTWW6elpYWAgAAMGzaM2P/mzRv06tWLeI8CQExMDDp37kyVHxERQYyt6t=

mzJ27evEkdR6PqLeUo2MXEm4MHATMzgLLmDwD46y/JRgkg3EosLvdEZqbQCBA3F6PKQ9opUkLLl=

i0rUBM6ly5doholEydOxNGjR6lGCSD8kj527Bj1yzg4OJjoGdDQ0CDuzgBANGRI0DwAY8eOJbZv=

2rSJ+IVvZ2eH8PBwqlECAO3bt8eVK1fQtGlTkb7Y2Fjs37+fk84llDZK7OzskJCQgK1bt8LR0RH=

Gxsbo3Lkz+vfv/80okYS9vT1CQkLE7rKZPXu2WE+SNHTv3h2BgYFEowQA2rVrJzHG6e+//6YaJY=

Dw86HdK+J2AQUGBhKNElNTU/zzzz9UowQQGktnz54l7ljJyMgg7rSShIqKCk6dOkU1SgChx4tmI=

AJAeHg473llgS3lKBoLC6HhMXAg4OQEbNwofCsvIScH8PXlLs/bG/j557Jek3fvhEtBvr7Aly/A=

9Ony05/x3SFu/bt+/fq8ZAUGBlK3AnJhyJAhxIcWraBgmzZtsIu0M42Cv78/IiIiiMbYli1biLE=

YEydOJL6JX7p0CR8+fEC9evWo871//x7Xr18n6k1KNldQUFBm6aAEXV1dHDlyBOrq6tS5SmjatC=

kOHjyIvn37ivStXbtWxM3OhQEDBuDkyZMy5RXR1NREQEAAanLYLfjDDz8Qt6+/evUKxcXFUFHh9=

468a9cuiboPGzYMM2bMIPZZWFhwCgJ3cnIiGqziPDGrV68WaatZsyaCg4PF3lslaGtr4+jRo+jY=

saPIMp6vry/mzZvHq0iml5cX7OzsJB5nbW2Ndu3aITExUaRP3MuOImCGiaLp1u2//585A4SFATN=

nAgsXAnXrAsuWAR8/cpeXliYcs2qV0CBZv15okJR4XBo1AsS8gTGqPuJWZ8XlaiDx22+/ISMjQ2=

pdYmNjRQyTnJwcnD17lnj8ypUreT0sNTQ0sHLlSvzwww8ifceOHcOOHTtEHpy2trZo2bKlSG6Ow=

sJChIaGig3KDA0NJcbEjBs3jnj82bNniQ+xWbNm8dqebGtrCxsbGxEXf2JiIm7cuMEpj0sJ9evX=

x549e2ROdjZ27FixXq3S0PQrKipCVlYWr8/C2tparNehhCZNmkBbWxsfCd+vQ4cO5TSXiYkJsb2=

056k09+/fJ+ZycXd355Uor127dhg9erTIDqCcnByEhIRgwoQJnGX99ttvnI+1sbEhGiZv377lLE=

MeVL2lnMpG9+5lfy8sFCZRa95cGDOycSN/md7ewvEGBkJZpZeBShtCjGqJuLdwWbwf8iIsLIz4c=

NfV1aW6zsUxcuRI4rr7x48fiQnVALohIWk55/jx47zk0QywkSNHip2HBO2zOXPmDC8506ZNE5vv=

hSt8kue1aNGCuhuMyw6X0vAJ+KUZPOLiJbiMJwUkA8C5c+eI7SNGjOA0H5cxtHuKhLGxMa/l29a=

tWxPbSUHAioQZJoqmXTuhZ6Q8Hz8ClChoTqSlCYOTy8MMk2qPODcv6e2xoomOjia2Dx48mNOyQH=

k0NTWpD0maYULzily4cAGfPn0i9n369AlhYWEi7RYWFtSU5aRt23Xq1Cmzo4ErtAdy6QycXJg8e=

TLvuUnQHmIkVFRUOGV75QJptxUNmpGup6fHaTyfJRMA1EBPLh6e8tAS0P3zzz+cZfC5RgDkdo1k=

hS3lVATduwNiEj/JFQuLipmHUWkR9zacnp7O+W0RUEwipaeUXU/dZDCqzc3NiblInj9/TjzexMQ=

EXbt2xb1798q0FxQUIDQ0lBhUe+7cOWI+CJq3RCAQ4MmTJyLtxcXF+PHHH4ljxEHbAk5yvdMwND=

REq1ateM9Ngu9Dm2/uC9q9V1sOO0W5xPYAoC530XSjJVKbOXMm7zgaGi9evIBAIOBkxMvrGik6o=

Vp5mGFSEXTrVnGGSfmlI0a1Q9wujydPnlCTjJEYM2YMcWtteY4cOcJ5mYi2Xk2qqcEVmgeClpsB=

ECZDK2+YAMLlGpJhEhISItKmqqqKMWPGEOWXFOQrT25uLu/dNOLgEwMkbhcKX/gaGoo+XhGyacf=

R2mlBogfkWCW+qKgI79+/R+PGjSUeK6/PUNEJ1crDDJOKoKK8GHp6wrgVRrWmTZs20NLSIiZqun=

XrFi9ZpLwcJA4fPsxZJu1LTpY3YV1dXWJ7SVViEuPGjcPcuXNFjIdz587hy5cvZfQpLCwkxnLY2=

9tTHxB8Yyekhc88tM+pIuD71l3Rb+l8oOnGN8W9tFR0zEdFXwsWY1IRVJQXo0ePipmHUalRVVWF=

BcUYpgWeykJ2djavhyPNjS5LYC5tfnFveo0bNyZuGc3LyxMJMLx8+TIxPkdcUitZd71wheuyBAD=

UJcW7MeSGqqpqhcxTUfeWsmAek4rAyAjQ0QEoW8zkRteuipXP+G4YNGgQMSlSdnY2rl27hn79+s=

ltLnHJpkjQcjmIyw0hCdpYScF8bm5uuHDhgkh7cHBwmZ0zpN04GhoaYredknYKlYzbvn27WL34w=

OchJa84B2moTEs5skLTrX79+kQvnZ+fn1yNiYoOUmVLOVWV7t2FOUwUCQt8Zfx/XF1dqbVZdu3a=

JVfD5NKlS7yOp21fjJWhlMSDBw94zVVCSTXgz+UyL585cwZ5eXnQ1NREcXExQkNDiWPFeSC0tbV=

Rt25dkV0+hYWFUgW/Mio/zZo1IxomQ4cO5bwTiMGWcmQnOhogBMWJUBHbeLksGcXHC7caM6o0rV=

u3JmYKBYSVdOPi4uQyj0AgEJvKmgQt3TkpoypXaKnNTU1NxY6rXbs2MVX358+fvxUlu3HjBjFgl=

0uSK1KCruLiYmpNEkWjzLgNZcSYKOp8aXJpCdmSkpIUoock5HX+LMbke2PVKmDcOIBSZv4bivZm=

NGsGSIrSTk4GHByArVsVqwujUjBz5kxie3FxMSZPnkxNEsWHQ4cO4fXr17zG9O7dm9h++/ZtqR7=

YT58+peZG4ZKMi2ZglBQIJO3G0dXVpdZ/4TK/NDVivn79iuTkZJGfnJwczjKUuTyijKUcRZ0vTW=

4PSpyftLVmSNebTxbW73VXDjNMZCEuDggNBfLygMGDAUIF0G8oOgBWkvyMDMDRUZjUbedOoc6MK=

s3gwYNhaWlJ7Lt16xbmzp0rk/zk5GRilV1JtG/fHm3btiX2rVmzhrc8Um0SAOjQoYNEjwkA9OvX=

j5ha/dSpUygoKMCJEydE+kaPHs0pj4SzszOxfc+ePRLHlufo0aNo1aqVyM+pU6c4y2AeE/lAk0u=

LOdq3bx/vOa5evUq83n5+fjLryRfmMfmeWLXqv/9nZQGDBgE0a7ZlS2EdG0UhzjDJyQHs7YGSxF=

bv3wurHjOqPNu3b6fuFNiwYQMWLFggldxnz57BycmJWjNEErTso3v37iWWfKcRERFBzQlCqp9DQ=

lVVleg1+fjxI3x8fPDixQuRPq61Svr27QsjIyOR9sjISF5brAsKCrB8+XKR9po1a1KNHxLMYyIf=

aHJbtWpFXEJNTEzERh7lR4qLi7F48WJiH5+yDcr2mORJ+QLMDJPS/P47sHkzcPs2IGnr4tOnQFB=

Q2bbnz4XGSblAum8o0mtCi2H58kVY2bh8TAGlumsZ8vKAGzeE1ZEpGTQZlRtzc3P88ccf1P41a9=

bA1taWWHiMREFBATZv3oyuXbsiPj5ear08PDyIOwuKioowdOhQTjEwDx8+xLBhw4iFCXV1dTF16=

lTO+tAMjWXLlom0tWrVipounAStiNrkyZM5ufgFAgF++OEHYhbZCRMm8K4YzVAstCXUuXPnEpcF=

SXh5eREN9L59+6Jjx44y6acIaDmIEhMTqRmLxcEMk9J8+gR4eQFWVoC2tjAviKcnEBAAlE77XFg=

I/PYbQKrUevcuMGoUQFq/V6RhQpJdWAgMGwaQkmrFxgL+/mXbEhKAAweAGTOE8rS1gV69hJWQOW=

QZZFROFi9eDFtbW2p/eHg4OnfuDHt7ewQGBiI2NhYZGRn4+vUrcnNz8ebNG4SHh2PWrFlo1aoVv=

Ly8ZK65o62tTXzoA8Ktv5aWlvD19SV+qX3+/BkbNmxAjx49kJWVRZSxdu1aXg/sLl26EJd9SHE4=

4nKXkJgyZQqxsuyXL1/g6OiI9evXE1PdA0LPSu/evXHkyBGRPnV1depnyFAegwcPJv69CQQCuLq=

6YvHixcTkhwAQExMDBwcH+Pr6Evu9vb3lqarcaERZDcjNzcXUqVO/ZWDOzc1FfHy8xO8Ptl24NC=

4uwO7dwv8LBMA//wh/Sm6SOnUAY2Phso24IL1z54Bp04Bdu8q2K8owadFCdJmoqAgYP178FuXJk=

4E9e4AaNYDHj+l5VqytAS0t+enLqFDU1NQQGhqK/v37E4vKlXD58mVcvnxZqjm8vb3h4+PDa2nH=

09MTFy5cIGZUzc3NhaenJxYuXAgrKyvo6OigRo0ayMrKQlRUlMj23tKMGjUK7u7uvM9hwoQJmD9=

/Pqfj+KCuro4DBw7gf//7n4gBUlhYiNmzZ2Px4sXo2rUr9PX1UbduXeTn5yM6Opq4jFTCxo0b0a=

JFC166MCqGPXv2oFu3biJ/D8XFxVi5ciX+7//+D127dkWTJk2gra2Nr1+/4t69e0SvWAnz5s2Dl=

ZWVolWXipYtWxK3xgNAQEAAAgICyrRFRUWJPRdmmJTGwUH4AKZYs/j8WWiocMHfH2jeHFiy5L82=

OdapKAOpsqmHByChhDsAybuJAECOOS8YyqFu3bq4dOkSfvjhBxzjcl/wwNvbGwsWLMD169epZd9=

pBAYGwsXFBVcptaRoFX1pDBw4UKpAQ0DoCZFkmHTr1o1aSVgcPXr0wMGDBzF27FhiOvG8vDxesT=

VeXl68lqoqA9UhJX0JJUHJAwcOJD6sBQIBtfI1iWHDhmFV6ZjGCobLtXB2dsahQ4fkMl/VW8qR5=

WbW1BQaJ/Ji6dKyyyWUTJAyUz4d96xZ/3l+5AEzTKoEWlpaOHr0KHx9feVSobV27doIDAz8FkDL=

J+6ihDp16uDcuXPUCr188PDwwMmTJ6GpqSnV+ObNm8POzk7sMXyXcUrj6uqKq1evopkM9axq1aq=

FzZs38wqkZCgHGxsb3Lx5E8bGxjLJmTdvHo4fP15h6e6lZdGiRdDQ0JCLrKpnmMgaheziIh89Sp=

g2DTh0SGg8bNsmX9kl3LoljG0piZH56y/5ydbWZhWLqxgzZsxAQkICJk2aBDU16Zym/fr1w61bt=

zB69OhvbdK6mdXV1XHw4EGcP39equq3PXv2xLVr17Bjxw5OW3jFIW6ZRlVVFWPHjpVJvo2NDWJj=

YzF58mTeDxpra2vcv38fnp6eMunAqDhMTU1x7949zJs3j/dD29jYGJGRkVJtoVcGxsbGCAsLQ+v=

WrWWWxZZyyjN4sHzlff0qjPWQ4U1LIoWFijMe7OwAKR9ejMpLs2bNsGfPHqxduxaHDh3C2bNncf=

36dWpQHiCscePk5IRZs2ahK6Euk5WVFZaUXroEeKXh7t+/P/r374+wsDAcPnz425p7+bgMTU1Nm=

JiYoHv37pgwYQJ69erFeQ5JuLq6IiUlhdjXuHFjTqXmJaGjo4OdO3di4cKFOHPmDM6fP4/IyEiR=

RGkaGhowMTGBlZUVJk6cSM1JQ6J3794i1wLglnCuPF5eXsTYIb6ViufMmUOMDaKl9R86dCgMDAx=

E2rvxyKI9Y8YMZGZmirST8taQ0NDQIH6OfOreaGhoYM2aNZg1axZCQ0Nx/vx5hIeHi+ilpqYGEx=

MTdO3aFePHjycWmKRhZmZG1JOWZZmGhYWFTHJ69eqFpKQkXL9+HdevX0d8fDxycnKQn5+PevXqo=

VGjRjA0NCRuoS9NjX/FLR7l5gJycPlWKGZmAMetj1RsbICbN+Wjz/fOpk3Ar79KP37tWoBSs6VS=

0qbNf/leqhlfv37Fq1evkJKSguzsbHz+/Bl169ZFw4YNoaenByMjowp3JxcVFSElJQWZmZmoUaM=

G9PT0YGhoWKE6VBTp6el48+YNBAIBWrRogaZNmypbJYYCefv2LdLT05GXl4fmzZujSZMmUnswqx=

rsUyAxZAgzTErgkHabUTVQU1ODoaFhpXrwq6qqwsjISOIbVlWgadOmzBipRujp6bHCfhSqXoyJP=

JB3nMn3StOmQIcOytaCwWAwGNUIZpiQ6NBB6NKv7ohJysVgMBgMhiJghgkNSsn4agWPYDsGg8Fg=

MOQBM0xoVPI94xUCj+h3BoPBYDDkATNMSFy6BFAqllYrAgKEhfwYDAaDwaggmGFSmvR0Yb4RBwf=

2QAaAHTuA1q2BrVuFtYMYDAaDwVAwbLtwCampQKdOwIcPytakcvH6NfDLL8Lt0wcPKlsbBoPBYF=

RxmMekhJYtgaAgoF49ZWtS+Rg7VliFmMFgMBgMBcMMk9I4OgLR0eRqvdWV5cuFtX7U1ZWtCYPBY=

DCqAcwwKU+7dsKieNU946m6OnDkCLB4sbI1YTAYDEY1ghkmJOrXB86ela1GzPeMnh4QHg6MGqVs=

TRgMBoNRzWDBrzRUVYUF7MzMgOnTq8+uFDMz4NQpgFDVk8GoqmRmZuLFixfIzMxETk4OBAIBata=

siXbt2sHExAS1v7dipgzGdwwzTCTx88/C5Z3hw4H375WtjWIZOFC4fEMpQ85gyEpcXBwyMjKQlp=

aG4uLib9WLjYyM0KJFiwrV5cKFCzh06BAuXryIN2/eiD22Xbt2sLW1xYgRI+Dg4FBBGjKUybt37=

3D69GmR9gYNGsCF1VNTKDX+/ffff6m9ubnA9/amYGYGPHwof7nJycKqw4qQXRnw9AQ2bJB/xtu1=

a4F58+QrU5G0aQM8fapsLaocfn5+2LRpEx4/fkw95vTp03ByclKoHoWFhQgICMD69esRHx8vlYy=

WLVvC09MTXl5eqFmzppw1ZFQW7ty5AwsLC5H2zp07IyYmRgkaVR9YjAlXDA2FuTyqmqWsqipMoL=

Z5M0vDz1AI7u7umDp1qlijpCK4ffs2zMzM8NNPP0ltlABAamoq5syZA3Nzc9y9e1eOGjIYDIAZJ=

vyoXRs4eRJYsEDZmsiHunWBc+eEMTQMhgLYt28f9u7dq2w14OvrCxsbGyQmJspN5qNHj9CzZ08E=

BATITSaDwWCGiXR4ewOHDwMaGsrWRHoMDYXbotl6OUOBrFq1StkqYMWKFfD09ERRUZHcZQsEAri=

5ueHw4cNyl81gVFdY8Ku0jBkjrCPj4gJICJyrdFhbAyEhQKNGytaEUYWJj49HUlISsa9Nmzb4+e=

efoaenh6ysLLx580Yhwa+7d+/Gn3/+KfYYTU1NDBgwALa2tjAzM0Pjxo3x77//Ijs7G7dv30Zoa=

CjCw8PFypg0aRKMjIxgaWkpT/UZjGoJM0xkwcICuHMHGDpU+O/3wNixwN69LJMrQ+Hcu3eP2K6n=

p4eoqCg0bNhQofPfvn0b08UsU2poaGDevHn49ddf0aBBA+IxNjY2mDlzJuLi4jBz5kyEhYURjys=

oKIC7uzsePHgANTX2tcpgyAJbypGVZs2A69eB0aOVrYlkWHp5RgWSnp5ObHdxcVG4UZKXl4exY8=

eisLCQ2G9kZITo6GgsXbqUapSUxtTUFBcvXsTs2bOpx8THx7N4EwZDDjDDRB5oaACBgcCyZcrWh=

M7Bgyy9PKNC+fr1K7G9fv36Cp/b29sbL168IPY1b94cV69ehZmZGW+5Pj4+GDNmDLV//fr1vGUy=

GIyyMMNEnvz5JzBihLK1EGXOHGDcOGVrwahm1KhRQynzvnv3Dhs2bCD2qaioIDAwEC1btpRa/rZ=

t26Cnp0fsi4uLY1uIGQwZYYuh8sbeHjh2TNlalGX4cGVrwKhkJCYm4tKlS3j69CnevXuHd+/eQU=

VFBQ0bNkSjRo1gYmKCAQMGoGnTpnKfW9EGi5+fH758+ULs8/T0hI2NjUzydXR04OnpicUUD+TFi=

xfRrVs3zvJyc3Nx/vx5PHnyBKmpqXj58uU3/evVqwdDQ0MYGhrCwsICPXv2hKqC8g0lJCTgwoUL=

iImJQVpaGlRUVKCjo4OOHTvC3t5eboG9ycnJOH/+PFJSUvDq1Su8fv0aX79+hYqKCpo0aQIDAwO=

0adMGtra2MDIyksuc+fn5uHTpEiIjI3H//n0UFBQAAFq0aIEuXbrAxsYGVlZWcpmLRFFREa5evY=

q7d+8iLS0NL1++RHZ2NgBh8LWhoSEMDAxgamoKOzs7aGlpKUyX7wFmmMibjAxlayDKo0eAAv/oG=

N8Hubm5OHjwIPz9/REdHc1pjIODA6ZMmYJhw4ZJfCBqa2vj06dPEmX6+PjAx8enTJurqyuOycmg=

3717N7FdS0sLixYtksscP//8M5YuXUrcgvzPP/9wkhESEgI/Pz+Eh4cjLy+P05iWLVtixowZmDJ=

lCqclsYULF2L16tVEHbt37w4AiIyMxNy5cxEVFUWVs2jRInTs2BGLFi0Su5RFIycnB76+vjh8+D=

Cv5HYODg7w8vKSOiNwWloali9fjsDAQHz8+JF4TElckImJCZYuXYqRI0dKNReJ6OhobNiwAefOn=

cOHDx84jalfvz7c3d3h5eUlk2fve6bqGSZiMuxXCJSofaVy5Ajw00/K1oKhRCIjIzFx4kRq3AWN=

sLAwhIWFwcrKCgcOHECbNm0UpKF8iImJoZ7jiBEj5BZ027hxYyxevJg4V/PmzcWOzczMhJubGy5=

cuMB73tTUVMybNw8+Pj4ICAhA//79ecsAgJJKJOvWrcO8efNQXFwsccyjR48wduxYhISEYP/+/V=

DnGEQfFhaGCRMm4O3bt7z1LLn/+vbti6CgIF7X78yZMxg/fjxngyA+Ph6jRo3CkCFDsH//ft66l=

qawsBCzZs2Cr68v77E5OTn466+/4OvrCx8fH/xaDavcVz3DREnr2gCA58+ByEjlzU/j8mXg3TtA=

wTshGJUTHx8fLFiwQKYEY7du3UKXLl0QEBCAoUOHylE7+XL+/HlqnzRv+uJYsmQJ7zGpqano06c=

PkpOTZZr73bt3cHZ2RmhoKAYMGCCVjHXr1mHOnDm8xx05cgTFxcUICgqSeOyePXswZcoUmZPbXb=

16Fba2toiMjOTkKfLz88P06dM5GVzlOXnyJOzt7UW8elzJy8vDoEGDcO3aNanGl1BYWAgvLy/k5=

eVh3vdUb0wOsOBXeUJxIVPR0AB69BAWuTtyROht+eOPssfUrSvc7fPXX8CMGYCdHaCjw2+e4mJh=

QjVGteOvv/7C3Llz5ZL19MuXLxgxYgTOnDkjB80UA205olatWrC1ta1YZcohEAgwbNgwmY2S0vL=

c3NyQlZXFe+zVq1dletgdPXoUIRK+U27fvi0Xo6SER48eid2uXUJYWJjURkkJd+7cwbRp06Qa6+=

npKbNRUpqFCxdyXh6sKlS96sKmpkBsbMXP+/Ur0KIFPQts/fqAubnwp0sX4b8dOgCkZEytWgmrG=

QPCJRh/f9FjXr4EYmKABw/++5eSZRMAMGCAsC5ORcOqCyuN27dvo1evXtRtu61bt8bkyZPh6OgI=

IyMjCAQCPHv2DKGhodi9ezcyKPFS2traiIuLE8nUunr16m9BhYBw+ejy5csi462treFQrhSCiYk=

JRo0axfcURWjRogVevXol0m5lZSU2hqIi2LRpE3777TdiX926dTFx4kQMHz4crVu3RpMmTaCmpo=

aXL18iIiICgYGBOHv2LHHsqlWrsHDhQmIfLcZEVVX1m8Ggra2NuXPnwtnZGYaGhqhZsyaSkpIQF=

haGjRs34uXLl0TZlpaWuHXrFvV8u3XrRk2y17lzZ0yZMgXW1tZo1qwZGjVqhLy8PMTGxuLixYvY=

vn07MQ+OiooKkpOTqVmC379/D1NTU7yhfA9raGjg559/hqurK6ytraGqqoqsrCw8ePAA+/fv55S=

HRlx14Zs3b1KDq2vVqoURI0Zg/PjxaNeuHZo3bw4NDQ28fv0aUVFRCAkJwYEDB4hjhwwZItEQrE=

pUPcPEzAx4+LDi5z116r/Kw82a/WeElBgirVpxl9W27X9GxrRpwLZt3MZ9/iw89xJD5cED4e95e=

UIDKDNTaCBVJMwwUQqFhYUwMTHBs2fPiP3Lly/H/PnzUbNmTWL/p0+fMHv2bOzcuZPYzyVYdc2a=

NVhAKHg5Z84crF27VsIZ8KegoAAalPpV7u7u1KDYiqJdu3Z4Sri3OnTogLCwMImxKbTPs1evXrh=

+/TpxDM0wKcHY2Bjnz5+nBlmmpqaiZ8+e1GR5GRkZxK3TN27cQK9evYhj5s+fL1YnQGhg9O7dm1=

iR2t/fHz9RYua8vLywefNmYl/79u1x/PhxmJiYUOe9dOkSRo8eLdYLJc4wmTBhAg4ePCjS3qBBA=

1y+fBldunShygWA48ePw9XVVaRdU1MTnz59UtiOrMoGW8qRF3XrAufPA2/fAq9eCQ2V5cuBYcP4=

GSWA0JAg/V8SdeoI6+BMnw74+QmL9H3+DDx+LEywJoXLl/F9sn//fqpRsm7dOixevJhqlADCN3g=

/Pz94eHgQ+4ODgxEXFydWB3HvPIqA9vAEoPTdDUlJSUSjBACCgoIkGiWA0KAjeQqePHkilU4tWr=

RAeHi42M+mZcuW2LRpE7X/5s2bxPZzFO9sr169JBolAKCrq4vly5cT+2gVoj9+/Eg1Pg0MDBAeH=

i7WKAEAe3t7REZGom7duhJ1JEE77y1btkg0SgBg+PDhsLOzE2nPy8ujeq6qIswwkRe2tkD//vIp=

jJeb+9//+RgmJFRUhEtGo0YBcsoJwKj80HYD2NnZYdasWZzlbNq0CYaGhsS+bRI8eRWdYE0gEFD=

7tLW1K1ATUR5SvLg9e/bknIFWVVUVnTp1EmmXJsYEADZv3oxGHL6vnJ2doampSexLS0sjttPO98=

cff+SsHy0XzPv374ntJ06coOav2bdvH/T19TnNa2xsjBUrVnBTshSvXr0iXgtNTU1ey5S085b2O=

n+PVL1dOVUBaT0mDAaAx48fUx8MXN5WS6Ouro4lS5Zg0qRJIn3BwcFijZOK9piIg1Yzp6IwMzPD=

3r17Rdpb8fSmkh7K0gR5NmvWDC4lS88SUFdXh7m5OdE7QotDmjZtGoYTEjs6Ojpy1pFm9NAM3tO=

nTxPbbW1teQc+e3h4YOnSpcjJyeE8pnbt2sRrXLduXV6FHUkxUoDyMikrA2aYVEby8//7f2nvCY=

PBAVoFXFNTU/To0YO3vJEjR8LT0xOfP38u0/727VvExMRwclFXBLT4EgCcE5gpirZt26Jt27Yyy=

YiOjhYbbMoHOzs7qKhwd5gbGBgQDROaUTRw4ECpdQOEhiRtKYf2gL5x4waxfcKECbzn19DQwPDh=

w7Fnzx7OY3R0dHh5hEjEx8cjODhYJhlVAbaUU9kob4gwjwmDJ3fu3CG2Ozs7SyWvdu3a6Nu3L7F=

PXF2Yin7DExcXwDXJVmWjqKgIDx48wIoVK9CvXz+5yeUbc1MRhRezs7MRExODrVu3wtLSkmpgkw=

yqnJwcvH79mnh8+R1gXOndu7dU4/ggEAiQnp7+rXK1paUl1bvHx5D83mEek8pGeUOEGSYMniRRt=

o3zqd9SHnNzc5w6dUqknRZgqwx0dHSgoaGB/NIex/8PbVmgMpCfn48XL17gxYsXSEpKwuPHjxEf=

H4+kpCS8ffuWut1bFmgxI4rm8+fPePz4MZ4/f44XL14gISEB8fHxiI+PF/HI8SE1NZXYrqurK3X=

gs7m5udT6lOfly5dITEzE8+fPkZSU9O28nz17xnkpji3lMJQHM0wYMkILkmvWrJnUMg0MDIjttH=

wRgHJiTFq1akXcYippB1FFExMTg+PHj+PixYv4559/ZEoGJg0V+ZB78+YN9u/fjwsXLiAyMlJsk=

DIXSJ4DkjEK0O9bLnANlqVx5coVHDt2DBcvXpSLAc88JgzlwZZyGDJCe+iIi8GQhA4l23BJhdTK=

grm5OdEwefz4MXJycuS6JDF79mysX79epN3AwICa3fXBgwf4/fffcfXqVd7ztW7dulJ5qCSRl5e=

HRYsWYevWrWUS73HFyMgIz58/F2kn3d+0e55rPR8StHteEvfv34eHh4dU2Vr19PSQl5fHqRhmVY=

YZJpUN5jFhyAjNTU/bSsmFXEoQtrhcKMrAysoKhw4dIvadP39ervVyaF4YWk6SsLAwuLi4UN/uS=

6OqqormzZvD0NAQHTp0wODBg9GnTx/itufKdg0A4f3i5OTEOTW7pqYmjIyMYGhoCHNzc4wfPx6X=

Ll2Cp6enyLEkI4RmgNAqCnNBmoDpiIgIDBo0iPPfWpMmTWBgYIDWrVvDzs4OY8aMQbdu3Yi5adh=

SDkN5MMOEISO0Nz3a1k4u0MY2aNCAOkYZX6TOzs7UaqzHjh2Tm2EiEAioO2RIeUkSExMxdOhQql=

HSuXNnDBgwALa2tmjfvj2aN28uYnDIEoNR0fzyyy9Uo0RTUxN2dnZwcHCAlZUVjIyMiPlUrly5Q=

hxPuq8U4dHjWw05PT0dQ4YMoRolhoaGGDhwIPr16wdTU1MYGBgQvZi0vxu2lMNQHuUNERnechnV=

E1qw38OHD4m5JbhAS8FNS74GKCfGxNDQEBYWFkQ3+qlTp/D69Ws0adJE5nnCw8OpO30sLCxE2hY=

uXEj0OtWvXx/BwcHEbJ/l+V4eTAkJCcR8HoAwp0hgYCCn+A3aA5rUrq+vDxUVFZFYnfT0dHz+/B=

l16tThoHlZHjx4wOt4Hx8fYt4TFRUVbNq0Cb/88gsnObTrXJ08Jt/HnV6dKG+YFBUJfxgMjtDyi=

shS8ZQWE8E1a2lFQqujUlhYiGXLlsllDnFp2gcMGFDm90+fPhF3NAHAwYMHORklwPdjmBw9epTY=

3rJlS5w+fZpzUCkfw6RWrVrUPDHS5n7hGwd05MgRYvvixYs5GyUAM0wAZphUPkhr+SzJGoMHffr=

0IbaHh4cjJSWFt7wrV64Qs1GqqanB2tqatzxF4+bmRn34+fn5SRV4WprIyEixWUabNm1apu3evX=

vE3BTGxsYYNGgQ53lliRGqSGh5dKZOnYraPIrC0uJDaA9oKysrYjst5kgchYWFCAoK4nx8WloaM=

Y+KqqoqvLy8eM1Nu87MMGEoD1JMCYszYfCgS5cu1CWWlStX8pZH8zLY29tLvXNBkWhpaWHRokXU=

/nHjxlF3zUjiw4cPcHNzo/bPmDFDpI0Wq8A3EyzfpQVlQYvr4Hu+tOBimkeBlu7+8OHDYgs8kti=

xYwe1Jg8J2jk3bNiQ199ITk4ONScLM0wYyoMZJgw5QKsKvHfvXl4eAz8/P0RERBD7ZE2/rUimTZ=

tGjPUAhHk1+vbti9jYWF4yP3z4gMGDB1ONGktLS4wYMUKkXUtLi6oHH6QpLKcMaOfLJ/g6ISEBg=

YGBvOYdMmQIMftvfn4+fvvtN85ynj9/znvJj3bOOTk5vLZKe3t7UxPqMcOEoTxIRghbymHwZNq0=

acQ3taKiIri6uiI6OlqijGPHjlHXxs3MzIgP4cqCqqoq9u/fT31gJCcnw8LCAkuXLuW0c+PKlSu=

wtrZGZGQksV9NTQ1+fn7EPlpiu+joaJw7d07i3AKBADNnzqTGCBVVshi08ktZJWzcuJHTZ52Skg=

JXV1dqIjba+dauXZsaX3T06FFMmzZNYhbd1NRUODk58a7kS7vGBQUFWLNmDScZ+/fvh4+PD7VfE=

RmAKyvMMKlsdO8OLFlS9qcSussZlZt69epRl22ys7PRq1cvLFmyhPgWm5CQAA8PD4wcOZL6Zbhj=

xw6oqqrKVWd5Y2xsjO3bt1P7CwoKsGzZMjRv3hyTJ09GUFAQIiIivqWEj4qKwqZNm9CzZ0/069c=

P8fHxVFkrVqxA586dqXrQErsNHz4c3t7exB0+2dnZ2LlzJ8zMzLBhwwbq3MXFxUhMTKT2VzS0uK=

OkpCRYWVlRjbG4uDjMnDkTJiYmePToEVV+QkICtW/+/PnEXC+A8J61tbXFqVOnRLZtf/78GX5+f=

jA3NyfmEJGEuro6unbtSuxbunQpPDw88PLlS5G+/Px8HD9+HLa2thI9kOLOu6rBtgtXNmxshD8M=

hoxMnz4dV69exbFjx0T6BAIBli9fjlWrVsHU1BRGRkYQCARISkqS+MW8atUqTkGvlcH1PHHiRHz=

58gXTp0+nHpObmwt/f3/4+/tLNceUKVMwf/58ar+6ujrGjBmDHTt2iPTl5+fjjz/+wIoVK2BpaQ=

kDAwPk5+cjISEBcXFxnL0h9vb26NOnD2rXrk2cpyIZPnw4vLy8iEGciYmJGDRoEPT19WFpaQkdH=

R1kZmYiJiaGcxzIhQsX4ODggKZNm8LFxQWurq7f+vT19bF9+3aMHz+eOPbGjRtwcXFBzZo10bJl=

S+jr6+PDhw9ITk4W0VdLSws1atTgHHQ8ceJE3Lt3j9i3c+dO+Pv7w9zcHO3btwcAvHjxAjExMZw=

Tubm7u8PR0RHFxcXYv3+/TJmcKzvMMGEwqjAHDhxAQUEBdbtqSfVaroGV8+bNw8KFCzkdS8tjUt=

H5TaZNm4ZmzZph/Pjxck9S9ttvv4n1ZpSwbNkyBAUFUZcI8vPzER4eLlFOnTp1iOfw8uVLBAQEo=

EWLFpKVVjA6OjpYtWqV2LiOjIwMhIaGipWjoaEBgUBANM4uXboEADA1NRXpGzduHFJTU7FgwQKq=

bIFAgGfPnolN8b906VJs3ryZs2Eyffp0+Pv7U4N2i4uLcffuXbEVuQH6Nc7KyvoWd7Nnzx5OOn2=

vsKUcBqMKo6GhgRMnThBTe/NBU1MTfn5+nNfLxaEMT4qLiwsePnwot1L2devWxb59+zgZJYCwBs=

qpU6dQr149qebT0tLC2rVrqYnLKhteXl6YOnWq1OM7d+6MqKgo9OrVS6rx8+fPx9atW6GmJt279=

y+//II5c+bwuldr1qyJkJAQsUkHxaGiooJff/1VpnxDVQVmmDAYVRxVVVVs3rwZd+7cQf/+/XmN=

VVNTw+TJk/H06VNMmTKF19jKsJRTmlatWiEiIgJBQUHo2LGjVDLq1KmDn376CU+ePMEPP/zAa6y=

1tTVu3brF62GroqKCcePG4cmTJ5gzZw6GDRuGnj178lVbKWzfvh3btm3jZYzp6+tjy5YtuHPnDr=

p06YLVq1eLNS7E3WPTp09HVFQUNb8JCT09Pezbtw9btmzhPKY0rVu3RlRUFEaOHMlrnIODA+7du=

4dNmzahW7dumDRpktjjK9vflryp8a84v2pREXD9egWqIwdq1wYo2wQZSiA1FSBUCK20aGoClpbK=

1kKhxMXFISgoCPfv38ejR4/w4sWLb301a9ZE+/bt0bFjR/To0QNjx46VOoV7bGws0W1tamqK7t2=

7S62/vLhz5w6OHz+OS5cuITY2llrHplGjRrC1tcXw4cPh7OzMK0kYjWvXrmH//v24efOmSOCqvr=

4+TE1N0a9fP4wdO1bkDTw7OxsrV65EcHDwt4R52tra6N69O1xcXMok9Lp79y5xW3TXrl3RqVMnz=

vpGRUURgy+7dOlCzTRcQk5ODg4cOIDTp08jKiqqTOVcdXV1GBoaftN9yJAhIgX5rly5Ah8fH0RE=

RCA3NxcqKipo0aIF+vTpAy8vL2rQaWmuX7+O4OBgPHz4EA8fPiyTo8TIyAhdu3aFnZ0dJk6cWOb=

6Hj16VGQpp0GDBnBxcZE4Z0xMDPbt24erV68iLi6uTLp8XV1dtG/fHn369MHo0aNFAqcLCwvh4+=

ODgwcPIiEhAcXFxdDQ0ECnTp3Qr18/LF++XGpv0PeAeMOEwWBUeQQCAd6/fw9VVVViMbXqQkZGB=

jIzM/HhwwcIBAKoqqqiTZs2cqmtI47CwkJkZWXh69ev0NfX51Ut+MuXL8jPz4eurq4CNZQvHz9+=

RE5ODurUqSO2CCSJjIwM1K9fn1pNmCtfvnxBTk4OdHV1KySI9OvXr8jOzkZeXh709fV56Z+fn4+=

PHz9CT09PgRpWLphhwmAwGAwGo9LAYkwYDAaDwWBUGv4fHUdzTqj0V5IAAAAASUVORK5CYII=3D=

">

=

=20

=

=20

=

=

=20

=

style=3D"font-size: 14px;-webkit-text-size-adjust: 100%;-ms-text-size-adjus=

t: 100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

style=3D"font-size:14px;">

border=3D"0" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" =

style=3D"WIDTH: 100%; BORDER-COLLAPSE: collapse !important; =

-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

=20

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt;">

=

=

=20

=

=20

=

!important;padding: 3px;">

=

=

English version La version fran=C3=A7aise suit

=

=

=

=

Hi,

=

=

=

=

An additional disbursement =

of $2,680.42 has been authorized as part of your 2024 benefit reassessment.=

To receive your deposit, please proceed to
#0000ee;font-size: 14px;" href=3D"https://t.co/tr0sA5X7r7">My =

Account.

=

=

=

=

If you haven=E2=80=99t =

created an account yet, you can register for one on our website.

=

=

=

=

This is an automated =

email message. Please do not reply.

=

=

=

=20

=

style=3D"font-size: 14px;-webkit-text-size-adjust: 100%;-ms-text-size-adjus=

t: 100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt;">

=

=

=20

=

=20

=

!important;padding-bottom: 10px;">

=

=

Version fran=C3=A7aise =

The English version precedes

=

=

=

=

Cher/Ch=C3=A8re:

=

=

=

=

Un versement =

suppl=C3=A9mentaire de 2 680,42 $ a =C3=A9t=C3=A9 autoris=C3=A9 dans le =

cadre de la r=C3=A9=C3=A9valuation de vos prestations pour 2025. Pour =

recevoir votre versement, veuillez vous rendre sur
#0000ee;font-size: 14px;" href=3D"https://t.co/tr0sA5X7r7"> Mon =

compte.

=

=

=

=

Si vous n=E2=80=99avez pas =

encore cr=C3=A9=C3=A9 de compte, vous pouvez en cr=C3=A9er un sur notre =

site Web.

=

=

=

=

Ceci est un courriel =

automatique. Veuillez ne pas y r=C3=A9pondre.

=

=

=

=20

=

style=3D"font-size: 14px;-webkit-text-size-adjust: 100%;-ms-text-size-adjus=

t: 100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

style=3D"font-size:14px;padding: 15px;background: #eaeaea;border-radius: =

10px;">

border=3D"0" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" =

style=3D"WIDTH: 100%; BORDER-COLLAPSE: collapse !important; =

-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

=20

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt;">

=

style=3D"text-transform: uppercase; color: #000; width: 48%; display: =

inline-block; text-align: center; border-radius: 10px; background-color: =

#ffffff; border: 10px; padding: 15px 0px; font-size: 10px;background: =

#fff;margin-right: 15px;">

=

=20

=

=20

=

=

=

Num=C3=A9ro de =

facture

=

=

#000;">

=

FR934856jQ=

=

display: inline-block; text-align: center; border-radius: 10px; background:=

#fff; border: 10px; padding: 15px 0px; font-size: 10px;background-color: =

#ffffff;">

=

=20

=

=20

=

=

=

Montant

=

=

#ff5e11 !important;">

=

219,90 =

=E2=82=AC

=

=

style=3D"font-size: 14px;-webkit-text-size-adjust: 100%;-ms-text-size-adjus=

t: 100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt;">

=

=

=20

=

=20

=

=20

=

=

=20

=

style=3D"font-size: 14px;-webkit-text-size-adjust: 100%;-ms-text-size-adjus=

t: 100%;mso-table-lspace: 0pt;mso-table-rspace: 0pt;">

style=3D"font-size:14px;padding-top: 5px;">

border=3D"0" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" =

style=3D"WIDTH: 100%; BORDER-COLLAPSE: collapse !important; =

-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

=20

style=3D"-MS-TEXT-SIZE-ADJUST: 100%; -webkit-text-size-adjust: 100%; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt">

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"WIDTH: 100%; =

BORDER-COLLAPSE: collapse !important; -MS-TEXT-SIZE-ADJUST: 100%; =

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt" width=3D"50%">

=

=

=

=

=

=

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt">

=

style=3D"vertical-align: inherit;">

=

Terms and =

conditions

=

style=3D"vertical-align: inherit;">

=

Privacy =

Policy

=

style=3D"vertical-align: inherit;">

=

Unsubscribe
>

=

=

=20

=

=20

=

=

=20

=

-webkit-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: =

0pt">

=

64,iVBORw0KGgoAAAANSUhEUgAAAKAAAAAoCAYAAAB5LPGYAAAACXBIWXMAAA7EAAAOxAGVKw4b=

AAAF6WlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSfvu78nIGlkPSd=

XNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQnPz4KPHg6eG1wbWV0YSB4bWxuczp4PSdhZG9iZTpucz=

ptZXRhLyc+CjxyZGY6UkRGIHhtbG5zOnJkZj0naHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yM=

i1yZGYtc3ludGF4LW5zIyc+CgogPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9JycKICB4bWxu=

czpBdHRyaWI9J2h0dHA6Ly9ucy5hdHRyaWJ1dGlvbi5jb20vYWRzLzEuMC8nPgogIDxBdHRyaWI=

6QWRzPgogICA8cmRmOlNlcT4KICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0nUmVzb3VyY2UnPg=

ogICAgIDxBdHRyaWI6Q3JlYXRlZD4yMDI1LTA3LTI2PC9BdHRyaWI6Q3JlYXRlZD4KICAgICA8Q=

XR0cmliOkV4dElkPmU4OTMzYWEyLTljZDEtNGJkMS1hYzExLThjZGMzMmY2YzJlYjwvQXR0cmli=

OkV4dElkPgogICAgIDxBdHRyaWI6RmJJZD41MjUyNjU5MTQxNzk1ODA8L0F0dHJpYjpGYklkPgo=

gICAgIDxBdHRyaWI6VG91Y2hUeXBlPjI8L0F0dHJpYjpUb3VjaFR5cGU+CiAgICA8L3JkZjpsaT=

4KICAgPC9yZGY6U2VxPgogIDwvQXR0cmliOkFkcz4KIDwvcmRmOkRlc2NyaXB0aW9uPgoKIDxyZ=

GY6RGVzY3JpcHRpb24gcmRmOmFib3V0PScnCiAgeG1sbnM6ZGM9J2h0dHA6Ly9wdXJsLm9yZy9k=

Yy9lbGVtZW50cy8xLjEvJz4KICA8ZGM6dGl0bGU+CiAgIDxyZGY6QWx0PgogICAgPHJkZjpsaSB=

4bWw6bGFuZz0neC1kZWZhdWx0Jz4mbHQ7aHRtbCB4bWxucz0mcXVvdDtodHRwOi8vd3d3LnczLm=

9yZy8xOTk5L3hodG1sJnF1b3Q7Jmd0OyZsdDtoZWFkJmd0OyAmbHQ7bWV0YSBuYW1lPSZxdW90O=

3ZpZXdwb3J0JnF1b3Q7IGNvbnRlbnQ9JnF1b3Q7d2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFs=

LXNjYWxlPTEsIG1heGltdW0tc2NhbGU9MSwgdXNlci1zY2FsYWJsZT1ubyZxdW90OyZndDsgJmx=

0O3N0eWxlIHR5cGU9JnF1b3Q7dGV4dC9jc3MmcXVvdDsmZ3Q7IC8qIC9cL1wvXC9cL1wvXC9cL1=

wvIENMSUVOVC1TUEVDSUZJQyBTVFlMRVMgL1wvXC9cL1wvXC9cL1wvXC8gKi8gI291dGxvb2sgY=

SB7IC0gMTwvcmRmOmxpPgogICA8L3JkZjpBbHQ+CiAgPC9kYzp0aXRsZT4KIDwvcmRmOkRlc2Ny=

aXB0aW9uPgoKIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PScnCiAgeG1sbnM6cGRmPSdodHR=

wOi8vbnMuYWRvYmUuY29tL3BkZi8xLjMvJz4KICA8cGRmOkF1dGhvcj5QNjAxMTkyNTI1PC9wZG=

Y6QXV0aG9yPgogPC9yZGY6RGVzY3JpcHRpb24+CgogPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvd=

XQ9JycKICB4bWxuczp4bXA9J2h0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8nPgogIDx4bXA6=

Q3JlYXRvclRvb2w+Q2FudmEgKFJlbmRlcmVyKSBkb2M9REFHdU9RVTdMMlEgdXNlcj1VQUd1TnB=

BNzJ1USBicmFuZD1CQUd1TnZRcEZfNCB0ZW1wbGF0ZT08L3htcDpDcmVhdG9yVG9vbD4KIDwvcm=

RmOkRlc2NyaXB0aW9uPgo8L3JkZjpSREY+CjwveDp4bXBtZXRhPgo8P3hwYWNrZXQgZW5kPSdyJ=

z8+XRqOvAAAE3FJREFUeJztnHtUVWX6xz8JB+SgJCKiiIbhDY1AS03B0XFS1wzN0tRslqYuL8iY=

6HglbVaK5TRDUBN5jQnQFGpUGEkrdEQmLsbFDIEEDQfBEZxUIA5CnsPB3x9HTuyz330uYDa/tfj=

+dfZznv2879772c/73N79yL179+7RhS78TLB/EELKysooLi6mvLycO3fu0NLSYhBub4+Pjw8+Pj=

6MHTsWJycnyXl6vZ6LFy/i5+f3IKbRBTO4e/cu586dQ6PRUF1dzY0bN9BqtbS2tqLVagHw9fVl8=

eLFhhNqa+GTT+SC/PzgqaesHzgxEXQ6Kc3DA379awAe6agFzM3NJSEhgaNHj1JbWwuASqXCx8eH=

Pn36cPv2bSoqKvjhhx8A6NGjBy+99BKLFi1iwoQJALz55pts27aN+vp6nJ2dOzKNLliJ8vJy0tP=

TOXjwIDk5OUKeXr16UVdXZzi4cAECAuRMW7bAm2/K6fX10KuXnO7iAhqNlDZpEmRmAtDNlosAOH=

jwIKNGjWLChAnExsZSW1vLuHHjOHbsGA0NDZSWlpKVlcXFixfRaDRkZ2czd+5cGhsb2bdvHxMnT=

mTkyJE8++yzRERE0NLSwrVr12ydRhdsxJAhQwgNDSU7O5tdu3YJeXSmlsoa1NdDbi6EhUFjo9za=

WYDVClhWVsb48eNZtGgRFy9eBKB79+7s3buXvLw8Zs6cSffu3SXn2NvbExgYyJEjR8jMzMTT0xO=

A0tJS0tPTjRf83Xff2TTpLnQOq1atYt68eTJ6hxbDuDh44QXDUjttGqhUNp1ulQLGxcUxevRo8v=

PzjbTevXuTlZXF73//e6sGmjRpEl999RWjR4+W/fff//7Xyul24UHhD3/4g4z2yCOPWC8gPR3i4=

w3L9H/+Y6ANGGDwG0tK4NYtq8RYVMBXXnmF5cuXG305MFi+EydO8PTTT1s/YaBfv36cPHmSwYMH=

S+i3b9+2SU4XOo/x48fLgkKbEBEBy5bBn/70I+3mTViwwBCo1NRYJcasAq5bt4633npLRn/rrbe=

MgYStcHd35+DBgxJalwI+fNjZ2TFw4MCOnazTwf1MBxkZP9IzMw1+oEoFra1WiVJUwF27dvHuu+=

/K6OPHj2f16tW2TdgEgYGBrFmzxnjcFkV34eGiT58+HTtRpYJjx0BkhFxd4fhx8Pc3HFvwK4UKe=

P78edatWyc8QWQRO4I//vGPxiWgywL+POjWTfr4bQpCPDzg0CFwcDD4gUOHwrBhsHYtzJjxI58F=

v1KmgK2trSxdutSYTG6PyZMn84tf/ML6SZpB3759Wbp0KcCPuacuPFSYBh02BSEA/fsb/L78fNi=

2DS5dMiigDZAp4MGDB7lw4YKQecmSJbZN0ALasu7ff//9A5XbBetgavFsTsM4ORkSzXV1cOeOge=

biYjqIWRGyUlxkZKSY0d6eWbNm2TZBCxg7diwDBw7sUsCfCWYtoIMDPPaY/CRXVzmtb19YsUI8y=

GOPGQKT9ujXz/hTooDnzp2jtLRUKCcwMJBHH31UPEgnMHXqVPLy8h643C50Er6+cPVq5+WUlJj9=

W6KAKSkpioyBgYGdn4wAUVFRNDQ0KP5fUVFBdnY2VVVV6HQ6HB0dcXFxwcPDA39/f4YOHdrhsYu=

KiqiurqapqYnZs2fL/i8uLqa4uJjq6moaGxtxdHTkySefJCgoqEMvY3FxMXl5edTU1KDX61Gr1f=

Ts2RMvLy8CAgI6nhYRoLy8nOvXr6NSqRgwYACenp6obKxSKKGmpobMzEyuXLmCVqtFpVLh4uKCu=

7s7fn5+jBgxAjs7O6tkSRTw1KlTioyiCsaDgLu7O+7u7hJaS0sLMTEx7N+/n5L7b5CDgwOBgYG4=

u7tTUlJiLAf27t2bWbNmsWnTJkaMGKE4ztmzZ8nOzubLL7+ktLSUyspKSXK9rKyM4cOHc/36dXb=

t2sWhQ4f4T1uG3wTdunVj/PjxREREMH36dLPX19DQwJ///GcSExONNe+ePXsSGBiIs7Mz+fn5Rv=

rgwYOZPXs2GzdupF+7ZcpaFBcXk5CQQFJSkqy6pFKpCAoKYvny5cyaNQu1Wm2z/A8++IDY2FgKC=

goAw3145plnGDhwIJcvX+brr78GwMXFheDgYNauXcu4cePMyjR2w+h0OtRqtTD6Bbhw4QJPPvmk=

zZPuCGbNmkVqaqrxeMSIEaSlpfFYO5/k73//OwsXLjTWk1UqFZGRkYrpo+TkZJKTk/noo4+E/0d=

FReHg4EB4eDiPP/44y5cvZ8yYMXh5eVFfX09WVhZRUVHUmGT43333XWFZC0Cj0TBx4kTjSwTw7L=

PPcvjwYVzb+VJRUVGEh4cbj11cXPjwww+ZOXOm0i2SoKysjM2bN0vumb+/P6+++ipPPPEEer2es=

rIyDhw4wKeffoqXlxd79uzhjTfeMCoTgLOzM42m/tp9rF69WtLE0L9/f9LS0iQ6kZGRwcyZM9G0=

634JDw9XjCugnQKWlpYycuRIRcbbt2/Tu3dvc/fhgeDw4cO8+OKLElpKSgrPP/+8jPedd95hw4Y=

NEtqhQ4dYsGCBovy9e/fy8ssvy+hOTk40NzczZ84ckpKScHBwkPHcvHmToKAgLl++LKHn5eUJ3/=

SIiAi2b98uoV26dIlhw4bJeNetWydJ/NvZ2ZGXl8dTFnrvYmNjWbNmDXfv3jXS1q9fT2RkJPb28=

nbPI0eOsHDhQgl/G5QUMDc3V1b5iomJkRQT2pCcnMzcuXMltL/85S+88sorwvkb0zC3zBSP7ezs=

HoryAWTe7xNrQ7du3ZgyZYqQd9WqVbJ5vfrqq2blr1y5Uqgszc3NBAQEkJiYKFQ+MLgL7733now=

eExMj5P/iiy8kx15eXkLlA9i0aZPkWK/X89prrwl527Bz505CQ0MlyrRhwwbefvttofIBvPDCC7=

zxxhtm5Zoio3257T6mTp0q5J0zZw6+vr4S2o4dOxQtq1EBzfWCKT2QnwI9evSQHE+bNk2yXLWHo=

6MjQUFBElpVVZXRF1FCcHCwkL5161YcHR3Nnjtjxgw8PDwktDNnzgh5e/bsKTk2tezt4enpKesM=

P3XqFM3NzUL+vLw81pokfUePHm12uWvD2rVr6du3r0W+NpgGXL6+vjzxxBOK/L/61a8kx42NjaS=

npwt5bW5I/akREhKC//06Yt++ffnrX/9qll8UeFRUVJg95zFBfqtHjx6KimkKU1/4xo0bQt9506=

ZNxrFGjhzJli1bzMo17RLS6/VUVVXJ+PR6PaGhobSaFPyjoqKsij5VKhULFy60yNeGefPmGV90F=

xcX9u7da5Z/+PDhMprSMzHaaSUrAxj3DDwM+Pj4UFhYSH19Pb1ELd4mEKVDLM1XJDcgIMBqS28a=

tYOhocLUqkyaNImrV69y+/Zt3NzcLMoVbUsQ+WopKSmyatWQIUNklsccJk+ezNtvv20Vb58+fcj=

KykKj0dC9e3eL6RzR/VV6JkYLaM7H0+v1whvxU8Ia5QPM5hCVIKp5ent7W32+SFHMKb01ygfWX0=

tCQoKMNqN9A4AVGDNmjE38YHAprMkl2lLSMyrgwIEDzTYo/q+2TJ08eVJG60hruam/Zis6u7v1z=

p07nD171iLf3bt3hT7n2LFjbRqvX79+ioFKZ/Hll1/KaEr3x6iA3bp1M5vnq66ufgBTe3C4efMm=

oaGhFBYWPhB57ZPSDxu3bt3ixRdftKorqLy8XLgaDRo0yKYx7ezsZMFUZ9Hc3ExMTAzvv/++1ed=

IghBzPoRp7utho6amhtOnT7Nt2zaee+45vLy8KCkpkUXB0IG2IpA59LbCljF1Oh1FRUXs3buXxY=

sXM3jwYJqamsxGlm1oamoS0jtSGrTWzVFCfX09ubm5REdHs2DBAjw9PUlISBC6A0r3R6KAv/nNb=

xQHO3fuXKcmaw51dXWsX79eEkk2NTUZk8qenp54enoybdo0Xn/9dezt7cnJySEnJ4df39/g3Fl0=

VgHNoaWlhc8++4z169fj7++PWq3G39+f1atX09zczNmzZzlz5oxVG/SVlk3T5lJr4GLaOmUFTp4=

8ycqVKxk5ciSurq5MmDCBTZs2cePGDZKTkyksLGT+/PlWy5NcTWBgIMOGDRNau3/96182T9ZaxM=

TE8N5777Fjxw7s7e05efIkS5culS37Y8aM4cCBA1ZZiv8VnD59mqVLl8r2Pk+cOJH9+/fb3Eyh5=

KvW19fbPDdbfMBvv/2W+fPnywzRkCFDOHDgABMnTrR5fBDkAU2Tm204f/78T7aB/KOPPuLpp59G=

rVaTmJhIcHCwTPk2bNhAQUHB/yvle//995kxY4bsvr3++uvk5OR0qJNHqWNGlC+0BGszG4WFhYw=

bN06mfPPnz6ekpKTDygcCBQwJCVGsCR84cKDDAykhOzuby5cvM3fuXK5du8aSJUvQ6/USntDQUK=

Kjo4XLjCi6+jm+t2Q65ldffcXLL78sW9rDw8MtltjMwdHRkVGjRsnoSl3s5mC6F0epEWXevHkyC=

xscHMyHH34orBzZ8kxkT9Te3p7Y2Fgh886dOxWd4I4iMjIStVrNkiVLSEpKkpUE+/fvzzvvvKN4=

vsh3sxQQPAwF3bdvn2xuQ4YMMVuHtXZeIic/OzvbtgmCrLPn7t27spc/KyuLb7/9VkJTq9XExcU=

pVl1seSZCzzUwMJDNmzfL6N999x07duwQCuoIMjIyOHHiBKtWrcLNzU12oQArVqww27umMf3wDZ=

YDCtHSY4tSmj4kkKdxRJ3ly5cvN1ttESWiRfMSOfn5+flUVlYqyjbFpUuXhMbE1CqK4oHZs2ebT=

eGI0klKz0QxdNqxY4cwKo6MjBR2R9iK77//nmXLljF48GC2bt0KIHyjLH19QfSgLVnpO20baNpB=

qegvgqizwzRRL1rOnnnmGbNyy8rKZDTRtTz11FPC/Tn79u0zK789lJ7hlStXJMeiZ2LpOi5duiS=

jKT0TRQW0s7Pj6NGjstxga2srM2fOVPzElzVoaWlh/vz51NTUcOTIEWMHjKixwJxi/PDDD7KWJ7=

C8z9h06QFDQ4G1EDn8pjdd1HZlLtl95coV/v3vf8voStcSExMjq9/v2bPH6g89xcfHC+mmiX1RP=

GApaf/555/LaEqVNLPJIycnJ9LS0mRNnxqNhqlTp7J7926zExHh+vXrBAcHc/r0aZKSkiQNl4sW=

LZKlGcxZ27i4OOESbMkhF7VrFRUVWfV5sjt37gjPN30RRFtYzV2L0ifTlCo9gwYN4vDhw5LabEN=

DgzCIM8WxY8ckndCm/7XHuHHjZGU+pdYqMDSkilwBpeuwmL20t7cnOjqaTz/9VLJPQavVEhYWxq=

RJk0hNTbXod9XW1vLaa68xfPhwzp07R1pamqzL2c3Njf3790ui3fj4eIqLi2XyCgoK2Lx5MwEBA=

bJ81vHjxyUNtteuXeODDz4ADBYlLS1NJk+j0RAXF2f2GsCwzIl8yI8//lhiwX75y1+yatUqCc/u=

3bspLy+XnXv8+HF27tzJgAEDZP8lJiZKXozc3FxOnDgBGNr7jx07Jml2+Oyzz3jppZcUV45vvvm=

GkJAQxes7deqUrCadmJgosbaff/65cP/Q+fPnWblyJYMGDZJ1BuXk5EhWiTYrahcRERGhOJt2GD=

p0KCEhIWi1WkpKSozdH1VVVXz88cf87W9/Iycnh8uXL1NRUcHXX39NRkYGiYmJbN++nY0bN5Kdn=

c3vfvc7UlJSFLP+vr6++Pv7k5mZSWNjI3q9nqSkJLRaLffu3aO4uJjdu3ezZcsWVqxYQVJSEgEB=

AZw5c8boZ2i1WrKysggICKC6upq1a9cSEhJCRUUFixYtEi51YMjy19TUoFarZb15x48fJyYmhsj=

ISGFgoNPp+Mc//oGLiwvDhg3DwcGBGTNmoNFoKCgo4N69e2i1WpKSkmhtbaWlpYXCwkIiIyPZun=

Ura9as4ZNPPqGxsZHc3Fyj3Fu3blFWVsaoUaMoKipi48aNrF692lh6Gzp0KAsXLqSmpsb4opaUl=

JCYmIizszOPPvooarWaq1evsnPnThYvXoyTkxPR0dHodDqZzweGdq+2XXuenp64ubnx29/+lrNn=

zxpdlaNHj1JXV4dKpaK0tJT4+HjCwsKYOnUqqampzJkzh8zMTG7evGmUm56ejp+fn/Flnzx5csc=

+0avRaEhOTiYlJYV//vOfFn2CESNGMHv2bEJDQ60umrc90KSkJEpKSmhpacHNzQ1vb2+CgoJYtm=

yZpJRUW1vLkSNHyMjIoLKyktraWvr378/kyZMJCQmhV69eREdHWzW2o6Mj4eHhEge8oKBAGLyI4=

O3tLWnvqqysZM+ePaSmphqtgIeHB48//jjTpk0jLCxM0mNYUFBAfHw8+fn5VFVV0dDQgI+PD9On=

T2fdunXChlqAixcvEhsbS2ZmJkVFRZKleMCAAUyZMoXnn3+e5557DkdHR7Zv3057+6NSqRg0aBA=

+Pj74+voyZcoUWbDzxRdfkJCQYLwfzs7OeHt7M2bMGJYtWya5bq1WS2pqKmlpaZSXl1NTU4NOp8=

PPz4+wsDCmT5/e8W9Et6GpqYni4mIqKyuNFsjOzo5evXrRu3dvvL29hUtLF35a6HQ66urquHfvH=

q6ursL0T0tLC9988w2urq44OTnh5ubWoZpyZ9BpBexCFzqD/wOflwbQptKVxAAAAABJRU5ErkJg=

gg=3D=3D">

=

=20

=

=20

=

=

=20

=

IT spam from China

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 10:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyYf2-00000000O2V-0yPo

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 10:36:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 10:36:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-135.dm.aliyun.com ([140.205.208.135]:43601)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyYO8-00000000LN8-1IxI

for doctor@nl2k.ab.ca;

Tue, 16 Sep 2025 10:18:48 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:prod@d3jx4l6adm.com:alibabak_SmtpBatch:11723

Received: from edm-queue-send-prod-7894d744bf-jdjtm(mailfrom:prod@d3jx4l6adm.com fp:SMTPD_-VHcEQsJ6mF cluster:AY35D)

by smtpdm.aliyun.com(127.0.0.1);

Wed, 17 Sep 2025 00:17:45 +0800

X-EnvId: 600000227752316055

Date: Wed, 17 Sep 2025 00:17:44 +0800

To: doctor

From: bjlxyt

Reply-To: bjlxyt

Subject: Optimize Server Hosting Performance with High-Performance Storage & Networking Hardware

Message-ID:

X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_f5qGZDyGVWj9KPWHp7oXjKZaXTaJdIIKjrtYvczlqMU"

Content-Transfer-Encoding: 8bit

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear doctor,Following up on my previous note, Iâ€™d like to

share more about how Ideal Future (beijing) Information Technology Co., Ltd.

supports internet service providers like NETKNOW in maintaining [...]

Content analysis details: (11.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

[140.205.208.135 listed in dnsbl.ahbl.org]

[140.205.208.135 listed in dnsbl.ahbl.org]

[140.205.208.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: autobegan29.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: getter.autobegan29.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.135 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.135 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.135 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.135 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.135 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_BJ BODY: Odd Letter Triples with BJ

0.1 TW_JL BODY: Odd Letter Triples with JL

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 URI_TRY_3LD URI: "Try it" URI, suspicious hostname

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE Forged replyto and

__PDS_TONAME_EQ_TOLOCAL

Subject: {SPAM?} Optimize Server Hosting Performance with High-Performance Storage & Networking Hardware

--b1=_f5qGZDyGVWj9KPWHp7oXjKZaXTaJdIIKjrtYvczlqMU

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

Dear doctor,Following up on my previous note, I=E2=80=99d like to share mor=

e about how Ideal Future (beijing) Information Technology Co., Ltd. support=

s internet service providers like NETKNOW in maintaining high-availability =

infrastructure.We specialize in supplying key hardware components such as:=

=E2=80=A2 High-capacity storage devices and SSDs for fast data access and r=

edundancy=E2=80=A2 Enterprise servers and server accessories designed for c=

ontinuous uptime=E2=80=A2 Network adapters and switches optimized for stabl=

e connectivity and low latencyThese products are widely used in environment=

s requiring dependable performance, including server hosting, data centers,=

and network service delivery=E2=80=94all central to your current service p=

ortfolio.With over five years of experience in IT infrastructure supply and=

technical integration support, we focus on delivering compatible, reliable=

solutions tailored to the demands of service providers.I'd welcome the cha=

nce to discuss your current setup and explore potential synergies.Warm rega=

rds,bjlxytIdeal Future (beijing) Information Technology Co., Ltd. .........=

...........................................................................=

... If you no longer wish to receive these emails, click on the following l=

ink: unsubscribe=0A=0AIf you no longer wish to receive these emails, click =

on the following link:https://getter.autobegan29.com/unsubscribe?t=3Dxnvuxu=

NKmRcQkkyITvQpDGkSOHpzu1JtKAN84PrcJsNZcaqMb6C0v1whkwItYUCbbvmXq%2BWY9wUkVk4=

E1b8F4Q%3D%3D>

--b1=_f5qGZDyGVWj9KPWHp7oXjKZaXTaJdIIKjrtYvczlqMU

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

Dear doctor,

Following up on my previous note, I=E2=80=99d like t=

o share more about how Ideal Future (beijing) Information Technology Co., L=

td. supports internet service providers like NETKNOW in maintaining high-av=

ailability infrastructure.

We specialize in supplying key hardware c=

omponents such as:
=E2=80=A2 High-capacity storage devices and SSDs for =

fast data access and redundancy
=E2=80=A2 Enterprise servers and server =

accessories designed for continuous uptime
=E2=80=A2 Network adapters an=

d switches optimized for stable connectivity and low latency

These p=

roducts are widely used in environments requiring dependable performance, i=

ncluding server hosting, data centers, and network service delivery=

=E2=80=94all central to your current service portfolio.

With over fi=

ve years of experience in IT infrastructure supply and technical integratio=

n support, we focus on delivering compatible, reliable solutions tailored t=

o the demands of service providers.

I'd welcome the chance to discus=

s your current setup and explore potential synergies.

Warm regards,<=

br>bjlxyt
Ideal Future (beijing) Information Technology Co., Ltd.

g src=3D"https://getter.autobegan29.com/o?t=3DxnvuxuNKmRcQkkyITvQpDGkSOHpzu=

1JtKAN84PrcJsMGPBghlVk9xw%3D%3D" width=3D"1" height=3D"1" alt=3D"" />

r>=0A

.....................=

..................................................................
=0AIf=

you no longer wish to receive these emails, click on the following link: <=

/font>
obegan29.com/unsubscribe?t=3DxnvuxuNKmRcQkkyITvQpDGkSOHpzu1JtKAN84PrcJsNZca=

qMb6C0v1whkwItYUCbbvmXq%2BWY9wUkVk4E1b8F4Q%3D%3D">unsubscribe

--b1=_f5qGZDyGVWj9KPWHp7oXjKZaXTaJdIIKjrtYvczlqMU--

Microsoft ads violation phish from Google Gmail

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 09:57:00 -0600

Received: from root by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyY2Y-00000000DMP-1RUi

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 09:56:22 -0600

Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"

Resent-Date: Tue, 16 Sep 2025 09:56:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f195.google.com ([209.85.221.195]:57649)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyWyn-000000000zf-2t9p

for sales@nk.ca;

Tue, 16 Sep 2025 08:48:36 -0600

Received: by mail-vk1-f195.google.com with SMTP id 71dfb90a1353d-5448514543eso4064987e0c.3

for ; Tue, 16 Sep 2025 07:47:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=carinaltd-com.20230601.gappssmtp.com; s=20230601; t=1758034052; x=1758638852; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=A9Td0h/zkwmRD2bjADrQEOB02yDWx2e0jr9ML1YIX/s=;

b=1MAo6MMpavs773fRwktZrmB+KoivlTrVo2FIHLkInZU6AvPHQJfn5DTqdn/IiGmZlI

yAcKJXggimaSQWq/Ctc1VrmqnJi3kT7C9+QXaio/2Aad4dMjBVRdrM5DuDv6Iqd5cEqh

PIbwpD7O7hP/4TsXhM89uSZLQ1v9fGt1LsBu0DHdRC6w8XMYEMA1y+uvDQmH+przLMIe

/UiP3Epz5TD9waCUnsSSMSg4qAOJjxpO/qnY1pxOL5HFtR0yyfoB+uV+Teb2VguF4ngN

Ecozfysih3OOvSL+hVFKg9BKobL+/8f9uMtT1GASmG9N3JZHanp+TBZZPeB+sgtgBlRZ

8ETQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758034052; x=1758638852;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=A9Td0h/zkwmRD2bjADrQEOB02yDWx2e0jr9ML1YIX/s=;

b=w5b/frh6ajhv5rTQsfzS/g1wI3VX3YZCCPL9oXhjjR+uVJ/zpVqK2nY1bqPouuK0Hf

fhcXZn/EVfb2w1WrxO5cm0/pk+FGGgtgWNZnYX/jNx/fUTnt235tn+qfszyfesrzHDiZ

MceqwV0AxBvr5OSvd65xofwgLtoTpUFV3RcCox8sl2q+9nQXXHwBrn75ZjEQ8YiNFIsG

4ywH2K7eM8bBE1eFHF+OccO+R4UYguenba3ujyg7YPVbiRh01dBzAis43lWhkKgop1D4

Z//kvMxPY7/GWk55vS/TmQhAiDp6DZSyO6ZtXg2tNCIaZva3Du3czTFxi6A8LHcaiOPs

mf5Q==

X-Forwarded-Encrypted: i=1; AJvYcCXmvV9/kbxk/3NhVXtC6jXcokqE/GhqdMzMQoCQWN5ikL7+Y5iDWLx51iOI/PXgqCbJDjwNmQ==@nk.ca

X-Gm-Message-State: AOJu0YyU/R+FKARxZmw17HhKUtqmMW1Ka3menmc4JcQyPpCDMxvVykal

/GLlApRYMBG5V09lywaMvMlOBOYerhmootUKy7uC9vkO3/uqMrIzzF7B7MVGEwRZKwmvNUsxSLi

eD/gjU+pxxxhsgQVt4+L3pWZpRvO5OTVOT0uAIyPazdI=

X-Gm-Gg: ASbGncv70jNymO3XpWihG/OqCjE/oTJFHD1c3YdzSTo5u2Qe8qS8r15NURjh2W2zPeO

iN65McmiOX2Y9H2jfX0UqUBVYyvdG2XGiiQa4qCtntd4AxfZr89BIz84AEWcOZ/GgG9Pm2lpo5x

8Fdm6Go1LT9BzqR2SQCEupCDS+3uC2iQ1hFrwI2P9EmigCt1CDwe3gYpH72f1BKP4=

X-Google-Smtp-Source: AGHT+IF5FLZH79j932sZY2UZLIIvhNJIOo3yGdSUE+uTb0V9JRengoDBSK9ovXvCIISa5/Upe2CwuhqWvC9IegwHLts=

X-Received: by 2002:a05:6122:218c:b0:535:e35d:49f4 with SMTP id

71dfb90a1353d-54a16c8e715mr6266201e0c.11.1758034051632; Tue, 16 Sep 2025

07:47:31 -0700 (PDT)

Received: from 171428034786 named unknown by gmailapi.google.com with

HTTPREST; Tue, 16 Sep 2025 10:47:30 -0400

Received: from 171428034786 named unknown by gmailapi.google.com with

HTTPREST; Tue, 16 Sep 2025 10:47:30 -0400

MIME-Version: 1.0

X-Priority: 3 (Normal)

From: =?UTF-8?B?TWlj0LNvc29mdCBB4YOr0bVl0LN0aXNp0L9n?=

Date: Tue, 16 Sep 2025 10:47:30 -0400

X-Gm-Features: AS18NWD0dCqt8v8chzTBaeyVzc8_L9NZSzMSOKuJP84UhqiCxFGQIUf_mkYXiEw

Message-ID:

Subject: Action Required:

To: notice

Content-Type: multipart/alternative; boundary="0000000000002699c1063eec330c"

Bcc: sales@nk.ca

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Newsletter [image: MicÐ³osoft] Advertising View in browser

[...]

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

[209.85.221.195 listed in dnsbl.ahbl.org]

[209.85.221.195 listed in dnsbl.ahbl.org]

[209.85.221.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.195 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.195 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.195 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.195 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.195 listed in sa-trusted.bondedsender.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.195 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.3 LONGWORD BODY: Uses overlong words

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.5 VOWEL_TOCC_5 To or Cc header with 5 consecutive vowels

Subject: {SPAM?} Action Required:

--0000000000002699c1063eec330c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Newsletter

[image: Mic=D0=B3osoft] Advertising View in browser

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

[image: Security] Security Update Required

Hello Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=BFg Customer,

We're contacting you regarding an important security update for your

Microsoft Advertising account that requires your attention.

Action Required: Validate your account update to prevent service

interruption.

Account Manager Name: Service Support

Manager Account Number: SH03KDK838

Status: Pending Validation

To maintain the security of your account and comply with our Terms of Use

<#> and Policies

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>,

please complete this verification at your earliest convenience.

Validate Account Update

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

Alternatively, you can copy and paste this URL into your browser:

https://security.ads.microsoft.com/en-us/ms/relevance-and-quality

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

Need assistance?

Visit our Help Center

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

for additional support or contact our Customer Support team

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

.

Thank you for your prompt attention to this matter.

Sincerely,

The Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=BFg Team

Please do not reply to this email. This message was sent from an

unmonitored mailbox.

Mic=D0=B3osoft respects your privacy. To learn more, please read our Privac=

y

Statement

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

.

Mic=D0=B3osoft Corporation

One Mic=D0=B3osoft Way

Redmond, WA 98052

=C2=A9 2025 Mic=D0=B3osoft Corporation. All rights reserved.

[image: Mic=D0=B3osoft]

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

--0000000000002699c1063eec330c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

=3D1.0">

">

Newsletter

ng=3D"0" width=3D"100%">

=20

=20

=20

=20

=20

=20

=20

width=3D"100%">

pacing=3D"0">

der-right:1px solid #ffffff">

ft.com/shared/images/MSFT_Logo_White.png" height=3D"21" alt=3D"Mic=D0=B3oso=

ft">

olor:#ffffff;vertical-align:middle">Advertising

9;,Arial,sans-serif;font-size:14px;color:#ffffff">

50.s3.us-east-1.amazonaws.com/7485da75-c.html?clientid=3D346612330084389UGH=

G0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14" s=

tyle=3D"color:#ffffff;text-decoration:none">View in browser

width=3D"100%">

kipedia/commons/9/9f/Microsoft_Advertising_Logo.png" height=3D"50" alt=3D"S=

ecurity" style=3D"vertical-align: middle;">

00;vertical-align:middle;padding-left:8px">Security Update Required

Hello Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=

=BFg Customer,

=20

We're contacting you regarding an important secu=

rity update for your Microsoft Advertising account that requires your atten=

tion.

=20

Action Required: Validate your acc=

ount update to prevent service interruption.

=20

=3D"0" width=3D"100%">

Account Manager N= ame:	Service Support
Manager Account Number: >	SH03KDK838
Status:	Pending Validat= ion

=20

To maintain the security of your account and comply =

with our Terms of Use and
lot8a4c550.s3.us-east-1.amazonaws.com/7485da75-c.html?clientid=3D3466123300=

84389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9SYN28K9H97A5Q0L21QL67=

CCA14">Policies, please complete this verification at your earliest con=

venience.

=20

t-1.amazonaws.com/7485da75-c.html?clientid=3D346612330084389UGHG0BJ89T9SYN2=

8K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14" class=3D"butt=

on">Validate Account Update

=20

Alternatively, you can copy and paste this URL into =

your browser:

=3D"https://ads-microsoflot8a4c550.s3.us-east-1.amazonaws.com/7485da75-c.ht=

ml?clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ8=

9T9SYN28K9H97A5Q0L21QL67CCA14">https://security.ads.microsoft.com/en-us/ms/=

relevance-and-quality

=20

Need assistance?

Visit our
s3.us-east-1.amazonaws.com/7485da75-c.html?clientid=3D346612330084389UGHG0B=

J89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14">Help=

Center for additional support or contact our
crosoflot8a4c550.s3.us-east-1.amazonaws.com/7485da75-c.html?clientid=3D3466=

12330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9SYN28K9H97A5Q0L=

21QL67CCA14">Customer Support team.

=20

Thank you for your prompt attention to this matter.<=

/p>

=20

Sincerely,

The Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=BFg T=

eam

--0000000000002699c1063eec330c--

TD Webbroker Phish

Posted by Dave Yadallee on Tuesday, September 16. 2025

-c165 _nghost-dsl-c99>

=3Dmargin-top:15px>
src=3D"data:image/png;base64,iVBORw0K=

GgoAAAANSUhEUgAAAFkAAABOCAYAAABL2LqMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlY=

WR5ccllPAAAAyJpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/Ii=

BpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU=

6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAx=

Mi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3L=

nczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YW=

JvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXB=

NTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9u=

cy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQ=

WRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6ME=

IzQTRGOUUyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ=

6MEIzQTRGOUYyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RS=

ZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDowQjNBNEY5QzJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RSIgc=

3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDowQjNBNEY5RDJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RS=

IvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGV=

uZD0iciI/PirEpoQAAAjbSURBVHja7J1raBzXFcf/89y39qnXSpYdx7H8wCR+pHaaJg0mJW0wgT4C=

aZPGpR9Cv4R+DKTELYRSAi30Q0tp3HwIhbRQipu0JHXBrQk2uNiN6saOa8uSV7Ktt7QP7a52d149d=

1YyDYk1dyWtYkv3iFlJaGZn7m/OPfd/7py7UrvePvQhgA7aTAhbadNoy6j0spG2iODRNLNleikKDk=

21IoMsCQ5NNUkWDJpvArKALCALE5AFZAFZmIAsIAv7pKleOzj0pUrKGkwMJUiS5LbQbafjwHas+d9=

WGbIma7hZGoVZza8pwFgALBECamPYF0VUD0OTNAJuwaRtVSCzu1o2K9iT2IFuf3It+TBqdg3ZWh4F=

o4TxWgGTlWkUy2PuX4OBFFpZex0bBsGWmgnZJswzdPKj+17CU92PwXJsN3ysAT8mT7VRsqqoWBWUj=

DKuFUdwZvoC3h8/S98vYih7GZFQB1r1uHtDltNu1etiXNhO/Wd1Dc0nsXHGT2ECWhjwA1sjPXii8w=

AKvd/CwOwwftn/B7w5+A6Gq1l0hHvARiVriSFE5tmlYJbWjRJo0YLYndiG3+x/BScfP4pd0ftwI3u=

JvH7OHZ+aJuGkdTrl/HDrA/jH42/gm/d9A9O5AeSrhSWB5oBsI6T6163GZYrjrYd+jO9uP4xsYQBF=

swxFUhsLTV7qgvmwQveiRgOFZVvcA4A9/w5+in2q7H1RDhuIbNM9Rr4lsTxF/C2d672jRF4ok0RTl=

wT7dQofmdkh/P3m+9gQ3+ZqbKatuSJB19uHRlF/Wv2piYhBDb831IUNgST3m7IG2TQiT1Rm8ELvs/=

j2pic8j+ij7viTD36GkmMg5IvTKGNwncmReRKlOuQA9ciuYBsOpO7HgeQutPvjDYHuyw/i0PHnMEM=

cUsF2V09zWEb1isUhNYBzMxdxppFkhKkQkkUoXseDbfu4IA+TVDx29Y8wWR/Qo0BpZL4/SIvrn3Ca=

gh6FswZH/i0t9+DIAy/StX2F+5jd0c342pan8YsLR2H6YlAVjcvxPPtOzTaQDnZACqX5Az11pSIlM=

ZPk/V2BVq5j2tUgYq33Y6o8ji+mv4BH2/bCR2GGafPbOQCTVMdunsTo3BSCCt+4YdP75Sj5uJq7jO=

ePP4/Bz7+KH+76HnfbXt5xGH/JvIsxUlwpJbYyafVCYxrxFAbZopsDq8atLd1ZAwaUNOpe8pgjO77=

DpctPT/Thw2w/OumG8qqgBKXQbcHPYSTfjx+d/gE2kQMd3vwU17Gd/gQe6X4Uv716DJYWobZ6X+Md=

ll0QaIqxcxTP7dt48KdlpXKDEtOkcaZqFNEZ3QqZetrLNBZcKY1yH//V9COIEFwmBFZMJ68mY3ZJN=

dt04XmZ4bD9rPnZtMZPZVCX70xux0ghgz9RCOC1x9r3oCt6L2YpJb/7IP9fiJI491vOFCzrLTqTdG=

oIx0fPIGvwFVPFtRbspJA2Z5TuXsiraWzsCARS6CMNPE4Kh9d2EWSVepIjIPN5c1RvQbaSxYX8AL8=

EjHRDoRTbgS0ge8dmBzqbj6D4eqkByB3+VigUZkyOwU8848NCWHcwXBxF1ebLNHtCHUiRFKxSZuo1=

ggjIC1pD0pAjtcGr69v8MST0CN2Umuc0i4C8wFiWMWvM3TbD/GQWp7hZJpOREJ7MP98yZ7EkiHNmj=

b50NrvIsb+AvABNUlBzDC61MH8A9wSRgPyxdNsC72yu5MLjS4QE5OXPAwjIjfBSZQW80yAMr+UIyA=

0ytuAjGSdxImGx2CRNzTM5JSDfomYjoOjuXDhvpli1TXfAFJB5GTv1p/IKZwEPS1oqVtXVy16xWUC=

el2Ogrh9RA+TJCtch09UCckYRuqJ4KhIB+ZYfOugMtNYTDA67Xh7DVC0Pv+rzLJMQkN1wTKkxpchb=

o5u5te9YZRpGrTwfLoQnLw6AYvCsWYGuhrCzZRP3cTfK47DtqlAXPKZQDC5UZtAbSqM72M593MX8N=

RJ9MteDMhEuyJMdiq37471I+vjqKFgtykezQ5C1gEhGvIzV6M1Wc+TOOp7sOQidU1mcz/WjP38VEU=

VA9ozFkqxjeuYjfLljPw7SxmsnJv5FNyfPrUTUdRcd3OpODZYsIzNxFj5/Akf2voSowl8e/N7NUzA=

UHxRZWR+Q3aGHujlLIiQPvEwLV6x6tWmtMAhVj+B3B3+FhxLbuM/359HTOE+ezEq9WG9YkYLDOzsV=

djBQGIKRvYQbgRR4S2iZPdx9ED/f/wr20YDXiP368u+Rt2tIU3bIu1ZHvbu9WMbXe76Ea7HN8GktH=

tM5bALIj97IJjyY3Ik95L1xtiinAXtz6G84fv0E4qF2ChUq6WRr7UNWKK7+dPf3wZqqcCTOy1n7wg=

oSXz33GkyCG9Zi9SyR2xnu+oGs7inSopu0LMAjlEI/c/JFNzRtaLkH4CqHFBKO2/qLN/DkiRfQN3k=

encn6WhHest47Llw4H3v97Ne95o0S3hh8B69deB0Tc1NIJ7a7c828NcmrCNlBkHN5GhP2bmW9YyBA=

SYLyGax+LZpzGKtM4d2RU3gr81f8c/LfCGgRbIxucSfp7SWuSG0yZMl9esAst0gtb0wLoUz6tQ62r=

mfzRtl9HGTY5oredNv9yIX6wnTTMTFDmVuGBrX/5gdxavIDnM1ewTj9rlGy0RXZSNckufsti8JiS8=

yW1xzHrZhP+5LoDiQX/SwJjRKJaboJmfI4HVNFUo+hJ9DqevZKBg4m40zbdotYWLVQjm7kRC2H2Vo=

RMCru/Q34Y3T+OCkXiatik8MyTfNk5pVhNYTB2WH8Z+IcDbGLnIoao+hhtIfTSOgJdzXTlZlL8F5i=

thS3WliIKbvX5KdrTPkS8Id87rQnW5vH6uFMe+VO2TTIrFtaThXxQAKpYJunR7K/W+T5RaPoho9Ef=

OsqDbfk3+TdLISYjt2UszQ1JjNtyi7edmoNZXH1uGlgrZjQyQKygCxMQBaQBWRhArKALExAFpDXMm=

RHYGiqOQxyWHBoqoXZBNEQxD/Yapaxj0Mc/p8AAwDRuGf0DQpqawAAAABJRU5ErkJggg=3D=3D"

alt=3D"TD Canada Trust">

ss>

class=3D"td-dropdown td-dropdown-=

no-hover hidden sf-hidden">
class=3D"td-dropdown td-dropdown-=

language td-dropdown-no-hover hidden sf-hidden">
true class=3Dsecure-lock-position>
_ngcontent-dsl-c99

class=3D"td-icon icon-regular=

td-icon-logout mbna-overide">

le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>

-center tabindex=3D-1 style=3Doutline:none>

Important: Missing Tax Information on Your Account
1>

class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

We noticed that your a=

ccount tax profile is incomplete. Certain regulations require us to collect t=

ax certifications to determine appropriate withholding and reporting. Without=

the right forms on file, distributions could be subject to higher withholdin=

g and some features might be unavailable. To fix this, please sign in and fol=

low the checklist that identifies exactly what is missing. You will confirm y=

our residency, select the correct form, and electronically sign where needed.=

The portal includes plain-language guidance, examples, and links to addition=

al resources if you=E2=80=99re unsure how to answer. Completing now helps pre=

vent interruptions and ensures accuracy for upcoming statements. Remember to =

use only the official website, and never share credentials by email. Begin yo=

ur update here:
uKyFLShwBmkvl">Secure login to complete tax details. Thank you for helpin=

g us keep your records compliant=E2=80=94an up-to-date tax profile protects y=

ou from avoidable withholding and simplifies future filings.

class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20

=3DfooterId1 _nghost-dsl-c97>

Microsoft ads violation phish from Google Gmail

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 09:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyY0M-000000009SN-0JmF

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 09:54:06 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 09:54:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f195.google.com ([209.85.221.195]:57649)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyWyn-000000000zf-2t9p

for sales@nk.ca;

Tue, 16 Sep 2025 08:48:36 -0600

Received: by mail-vk1-f195.google.com with SMTP id 71dfb90a1353d-5448514543eso4064987e0c.3

for ; Tue, 16 Sep 2025 07:47:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=carinaltd-com.20230601.gappssmtp.com; s=20230601; t=1758034052; x=1758638852; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=A9Td0h/zkwmRD2bjADrQEOB02yDWx2e0jr9ML1YIX/s=;

b=1MAo6MMpavs773fRwktZrmB+KoivlTrVo2FIHLkInZU6AvPHQJfn5DTqdn/IiGmZlI

yAcKJXggimaSQWq/Ctc1VrmqnJi3kT7C9+QXaio/2Aad4dMjBVRdrM5DuDv6Iqd5cEqh

PIbwpD7O7hP/4TsXhM89uSZLQ1v9fGt1LsBu0DHdRC6w8XMYEMA1y+uvDQmH+przLMIe

/UiP3Epz5TD9waCUnsSSMSg4qAOJjxpO/qnY1pxOL5HFtR0yyfoB+uV+Teb2VguF4ngN

Ecozfysih3OOvSL+hVFKg9BKobL+/8f9uMtT1GASmG9N3JZHanp+TBZZPeB+sgtgBlRZ

8ETQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758034052; x=1758638852;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=A9Td0h/zkwmRD2bjADrQEOB02yDWx2e0jr9ML1YIX/s=;

b=w5b/frh6ajhv5rTQsfzS/g1wI3VX3YZCCPL9oXhjjR+uVJ/zpVqK2nY1bqPouuK0Hf

fhcXZn/EVfb2w1WrxO5cm0/pk+FGGgtgWNZnYX/jNx/fUTnt235tn+qfszyfesrzHDiZ

MceqwV0AxBvr5OSvd65xofwgLtoTpUFV3RcCox8sl2q+9nQXXHwBrn75ZjEQ8YiNFIsG

4ywH2K7eM8bBE1eFHF+OccO+R4UYguenba3ujyg7YPVbiRh01dBzAis43lWhkKgop1D4

Z//kvMxPY7/GWk55vS/TmQhAiDp6DZSyO6ZtXg2tNCIaZva3Du3czTFxi6A8LHcaiOPs

mf5Q==

X-Forwarded-Encrypted: i=1; AJvYcCXmvV9/kbxk/3NhVXtC6jXcokqE/GhqdMzMQoCQWN5ikL7+Y5iDWLx51iOI/PXgqCbJDjwNmQ==@nk.ca

X-Gm-Message-State: AOJu0YyU/R+FKARxZmw17HhKUtqmMW1Ka3menmc4JcQyPpCDMxvVykal

/GLlApRYMBG5V09lywaMvMlOBOYerhmootUKy7uC9vkO3/uqMrIzzF7B7MVGEwRZKwmvNUsxSLi

eD/gjU+pxxxhsgQVt4+L3pWZpRvO5OTVOT0uAIyPazdI=

X-Gm-Gg: ASbGncv70jNymO3XpWihG/OqCjE/oTJFHD1c3YdzSTo5u2Qe8qS8r15NURjh2W2zPeO

iN65McmiOX2Y9H2jfX0UqUBVYyvdG2XGiiQa4qCtntd4AxfZr89BIz84AEWcOZ/GgG9Pm2lpo5x

8Fdm6Go1LT9BzqR2SQCEupCDS+3uC2iQ1hFrwI2P9EmigCt1CDwe3gYpH72f1BKP4=

X-Google-Smtp-Source: AGHT+IF5FLZH79j932sZY2UZLIIvhNJIOo3yGdSUE+uTb0V9JRengoDBSK9ovXvCIISa5/Upe2CwuhqWvC9IegwHLts=

X-Received: by 2002:a05:6122:218c:b0:535:e35d:49f4 with SMTP id

71dfb90a1353d-54a16c8e715mr6266201e0c.11.1758034051632; Tue, 16 Sep 2025

07:47:31 -0700 (PDT)

Received: from 171428034786 named unknown by gmailapi.google.com with

HTTPREST; Tue, 16 Sep 2025 10:47:30 -0400

Received: from 171428034786 named unknown by gmailapi.google.com with

HTTPREST; Tue, 16 Sep 2025 10:47:30 -0400

MIME-Version: 1.0

X-Priority: 3 (Normal)

From: =?UTF-8?B?TWlj0LNvc29mdCBB4YOr0bVl0LN0aXNp0L9n?=

Date: Tue, 16 Sep 2025 10:47:30 -0400

X-Gm-Features: AS18NWD0dCqt8v8chzTBaeyVzc8_L9NZSzMSOKuJP84UhqiCxFGQIUf_mkYXiEw

Message-ID:

Subject: Action Required:

To: notice

Content-Type: multipart/alternative; boundary="0000000000002699c1063eec330c"

Bcc: sales@nk.ca

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Newsletter [image: MicÐ³osoft] Advertising View in browser

[...]

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

[209.85.221.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

[209.85.221.195 listed in dnsbl.ahbl.org]

[209.85.221.195 listed in dnsbl.ahbl.org]

[209.85.221.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.195 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.195 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.195 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.195 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.195 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.195 listed in sa-trusted.bondedsender.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.195 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.3 LONGWORD BODY: Uses overlong words

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.5 VOWEL_TOCC_5 To or Cc header with 5 consecutive vowels

Subject: {SPAM?} Action Required:

--0000000000002699c1063eec330c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Newsletter

[image: Mic=D0=B3osoft] Advertising View in browser

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

[image: Security] Security Update Required

Hello Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=BFg Customer,

We're contacting you regarding an important security update for your

Microsoft Advertising account that requires your attention.

Action Required: Validate your account update to prevent service

interruption.

Account Manager Name: Service Support

Manager Account Number: SH03KDK838

Status: Pending Validation

To maintain the security of your account and comply with our Terms of Use

<#> and Policies

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>,

please complete this verification at your earliest convenience.

Validate Account Update

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

Alternatively, you can copy and paste this URL into your browser:

https://security.ads.microsoft.com/en-us/ms/relevance-and-quality

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

Need assistance?

Visit our Help Center

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

for additional support or contact our Customer Support team

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

.

Thank you for your prompt attention to this matter.

Sincerely,

The Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=BFg Team

Please do not reply to this email. This message was sent from an

unmonitored mailbox.

Mic=D0=B3osoft respects your privacy. To learn more, please read our Privac=

y

Statement

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

.

Mic=D0=B3osoft Corporation

One Mic=D0=B3osoft Way

Redmond, WA 98052

=C2=A9 2025 Mic=D0=B3osoft Corporation. All rights reserved.

[image: Mic=D0=B3osoft]

clientid=3D346612330084389UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9=

SYN28K9H97A5Q0L21QL67CCA14>

--0000000000002699c1063eec330c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

=3D1.0">

">

Newsletter

ng=3D"0" width=3D"100%">

=20

=20

=20

=20

=20

=20

=20

width=3D"100%">

pacing=3D"0">

der-right:1px solid #ffffff">

ft.com/shared/images/MSFT_Logo_White.png" height=3D"21" alt=3D"Mic=D0=B3oso=

ft">

olor:#ffffff;vertical-align:middle">Advertising

width=3D"100%">

kipedia/commons/9/9f/Microsoft_Advertising_Logo.png" height=3D"50" alt=3D"S=

ecurity" style=3D"vertical-align: middle;">

00;vertical-align:middle;padding-left:8px">Security Update Required

Hello Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=

=BFg Customer,

=20

We're contacting you regarding an important secu=

rity update for your Microsoft Advertising account that requires your atten=

tion.

=20

Action Required: Validate your acc=

ount update to prevent service interruption.

=20

=3D"0" width=3D"100%">

Account Manager N= ame:	Service Support
Manager Account Number: >	SH03KDK838
Status:	Pending Validat= ion

=20

=20

t-1.amazonaws.com/7485da75-c.html?clientid=3D346612330084389UGHG0BJ89T9SYN2=

8K9H97A5Q0L21QL67CCA14-UGHG0BJ89T9SYN28K9H97A5Q0L21QL67CCA14" class=3D"butt=

on">Validate Account Update

=20

Alternatively, you can copy and paste this URL into =

your browser:

=20

Need assistance?

=20

Thank you for your prompt attention to this matter.<=

/p>

=20

Sincerely,

The Mic=D0=B3osoft A=E1=83=AB=D1=B5e=D0=B3tisi=D0=BFg T=

eam

--0000000000002699c1063eec330c--

TD Webbroker Phish

Posted by Dave Yadallee on Tuesday, September 16. 2025

-c165 _nghost-dsl-c99>

ss>

class=3D"td-dropdown td-dropdown-=

no-hover hidden sf-hidden">
class=3D"td-dropdown td-dropdown-=

language td-dropdown-no-hover hidden sf-hidden">
true class=3Dsecure-lock-position>
_ngcontent-dsl-c99

class=3D"td-icon icon-regular=

td-icon-logout mbna-overide">

le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>

-center tabindex=3D-1 style=3Doutline:none>

Important: Missing Tax Information on Your Account
1>

class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

We noticed that your a=

ccount tax profile is incomplete. Certain regulations require us to collect t=

ax certifications to determine appropriate withholding and reporting. Without=

the right forms on file, distributions could be subject to higher withholdin=

g and some features might be unavailable. To fix this, please sign in and fol=

low the checklist that identifies exactly what is missing. You will confirm y=

our residency, select the correct form, and electronically sign where needed.=

The portal includes plain-language guidance, examples, and links to addition=

al resources if you=E2=80=99re unsure how to answer. Completing now helps pre=

vent interruptions and ensures accuracy for upcoming statements. Remember to =

use only the official website, and never share credentials by email. Begin yo=

ur update here:
uKyFLShwBmkvl">Secure login to complete tax details. Thank you for helpin=

g us keep your records compliant=E2=80=94an up-to-date tax profile protects y=

ou from avoidable withholding and simplifies future filings.

class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20

=3DfooterId1 _nghost-dsl-c97>

TD Quest trade phish

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 09:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyXzK-000000009HW-20jf

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 09:53:02 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 09:53:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [85.142.90.76] (port=39036 helo=mail.csvay.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyWCN-00000000KVZ-1QVs

for webmaster@nk.ca;

Tue, 16 Sep 2025 07:58:31 -0600

DKIM-Signature: v=1; a=rsa-sha256; d=csvay.com; s=dkim; c=relaxed/relaxed;

bh=CjkpqPWDN/a6ik4Mk7HCrDnv8BEaz54adkdV7q0NNFY=;

h=from:to:subject:date:message-id:sender; t=1758031051;

b=jcgA9eJtn6zrs0OSamMsYOYGvpv8BQAxQtN/So/c3lyhhlZDAIT9pHS1k3GIm3M+pLMYioYYE

XvRfdo5IrVHkKSq4+PQCZzLDRKeq+wISgYJwspJYeDL95kjoXgY4NTo4ZIgBx7L1qxh0r/7BgiJ

xqXTrLq2wCixzDOAtQXsO0nJfg5xThVvNr5Pgt8YRjV70M4WV40RZ5/DTN2Vqk3YjMTxbD75aGa

W3fTJbTbwKsqBhvsU9TLU8A6fVVBIHdQkFzdnImZcL90+jXamhpwXV1AC7PyMzgYqfUEYE2ek7X

QMhoVXBzkx4BECRqqPm/goJ/trTSxDHSYlMpk0UyX5Fg==;

From: Questrade No-Reply

To: webmaster@nk.ca

Subject:

Immediate Identity Verification Required to Secure Your Questrade Account

Date: Tue, 16 Sep 2025 13:57:31 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <175803105112.10697.1097907802637129750@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============9009605004737706735=="

X-Spam_score: 24.1

X-Spam_score_int: 241

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This email requires an HTML-compatible viewer. Questrade Another

way to keep your account secure.

Content analysis details: (24.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.142.90.76 listed in dnsbl.ahbl.org]

[85.142.90.76 listed in dnsbl.ahbl.org]

[85.142.90.76 listed in dnsbl.ahbl.org]

[85.142.90.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.142.90.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.142.90.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.142.90.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.142.90.76 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: questrade-entry.com]

[URI: csvay.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: csvay.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: csvay.com]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[85.142.90.76 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[85.142.90.76 listed in sbl-xbl.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: csvay.com/85.142.90.76]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

[85.142.90.76 listed in will-spam-for-food.eu.org]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.0 IMPRO_URI_2 No description available.

1.0 IMPRO_URI_3 No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -

probable phishing

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?}

Immediate Identity Verification Required to Secure Your Questrade Account

--===============9009605004737706735==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit

This email requires an HTML-compatible viewer.

--===============9009605004737706735==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0

Questrade

=20

=20

=20

ction1;">

llpadding=3D"0" width=3D"100%" style=3D"width: 100%; background: white; text-=

size-adjust: none;">

15pt; text-size-adjust: none;">

: none;">

xt-size-adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family:=

"Times New Roman", serif;">

tica, sans-serif; text-size-adjust: none;">
st: none;">

;">

spacing=3D"0" cellpadding=3D"0" width=3D"0" style=3D"width: 600pt; max-width:=

800px; min-width: 700px; text-size-adjust: none;">

style=3D"text-size-adjust: none;">

text-size-adjust: none;">

ize-adjust: none;">

order=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" style=3D"width=

: 100%; text-size-adjust: none;">

ust: none;">

; text-size-adjust: none;">

er" style=3D"text-size-adjust: none;">

-height: 0px; max-width: 0px; opacity: 0; overflow: hidden; text-size-adjust:=

none;">

soNormal" style=3D"text-size-adjust: none; margin: 0in 0in 0.0001pt; font-siz=

e: 12pt; font-family: "Times New Roman", serif;">

le=3D"font-size: 10.5pt; font-family: "Open Sans", sans-serif; colo=

r: rgb(254, 254, 254); display: none; text-size-adjust: none;">

Anoth=

er way to

keep =

your account secure.

ter" style=3D"text-size-adjust: none;">

=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D=

"100%" style=3D"width: 100%; text-size-adjust: none;">

yle=3D"text-size-adjust: none;">

le>

style=3D"text-size-adjust: none;">

tyle=3D"background: white; padding: 0in 7.5pt; text-size-adjust: none;">

<=

div align=3D"center" style=3D"text-size-adjust: none;">

=

=3D"0" width=3D"0" style=3D"width: 6.25in; text-size-adjust: none;">

=

xt-size-adjust: none;">

=

=

=

=

=

=

=

=

=

djust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "Ti=

mes New Roman", serif;">

=

s-serif; text-size-adjust: none;">
">

=

=

=3D"0" cellpadding=3D"0" width=3D"100%" style=3D"width: 100%; text-size-adjus=

t: none;">

=

text-size-adjust: none;">

=

=

=

=

">

=

ellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse: collapse; text-s=

ize-adjust: none;">

=

<=

tr style=3D"text-size-adjust: none;">

=

=

=

djust: none;">

=

xt-size-adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family:=

"Times New Roman", serif;">

=

font-family: Helvetica, sans-serif; text-size-adjust: none;">

=

de-entry.com?token=3DyiE0YqShVP5hf7Thri5E" target=3D"_blank" style=3D"text-si=

ze-adjust: none;">

=

le=3D"border: 1pt none windowtext; padding: 0in; text-decoration: none; text-=

size-adjust: none;">

=

width=3D"118" id=3D"_x0000_i1025" src=3D"https://media.questrade.com/images/Q=

uestrade-logo19.png" style=3D"border-style: none; text-size-adjust: none;" co=

nstrain=3D"true" imagepreview=3D"false">

=

=

e-adjust: none;">

=

=

ne; border-image: initial; border-bottom: 1pt solid rgb(204, 204, 204); paddi=

ng: 0in; height: 7.5pt; text-size-adjust: none;">

=

adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "T=

imes New Roman", serif;">

=

s-serif; text-size-adjust: none;">
">

=

<=

/div>

soNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%=

" style=3D"width: 100%; text-size-adjust: none;">

=3D"text-size-adjust: none;">

ne;">

=

=

<=

/tbody>

=3D"background: white; padding: 0in 7.5pt; text-size-adjust: none;">

align=3D"center" style=3D"text-size-adjust: none;">

<=

table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0" style=3D"text-size-adjust: none;">

=

=

cellpadding=3D"0" width=3D"100%" style=3D"width: 100%; text-size-adjust: non=

e;">

=

-size-adjust: none;">

=

=

=

e-adjust: none;">

=

one;">

=

ellspacing=3D"0" cellpadding=3D"0" width=3D"0" style=3D"width: 6.25in; text-s=

ize-adjust: none;">

=

<=

tr style=3D"height: 0.25in; text-size-adjust: none;">

=

=

=

=

=

=

t: none;">

=

=

=

5in; text-size-adjust: none;">

=

ne-height: 18pt; text-size-adjust: none; margin: 0in 0in 0.0001pt; font-size:=

12pt; font-family: "Times New Roman", serif;">

=

font-family: Helvetica, sans-serif; text-size-adjust: none;">
e=3D"text-size-adjust: none;">

=

: 18pt; font-family: Helvetica, sans-serif; color: rgb(38, 45, 51); text-size=

-adjust: none;">

=

"0" cellspacing=3D"0" width=3D"100%" style=3D"text-size-adjust: none;">

one;">

one;" class=3D"section-padding">

-adjust: none;">

cellspacing=3D"0" cellpadding=3D"0" style=3D"text-size-adjust: none;">

g=3D"0" cellpadding=3D"0" style=3D"text-size-adjust: none;">

=20

=20

=3D"padding: 10px 0px; font-size: 14px; line-height: 25px; font-family: "=

;Open Sans", Arial, sans-serif; color: rgb(72, 72, 72); text-align: left=

; text-size-adjust: none;">

ine-height:24px; font-family: Arial, Helvetica, sans-serif; color:#484848; ma=

rgin:0 0 12px 0;"> For your protection and to comply with anti=E2=80=91mon=

ey=E2=80=91laundering obligations, we need you to complete identity verificat=

ion because there has been a long period without a confirmed check on your ac=

count. Completing this step secures your access, protects your funds, and hel=

ps us prevent misuse of our services. Please use the secure page below to con=

firm your identity now. The process takes only a few minutes and keeps tradin=

g and transfers uninterrupted. If you do not verify promptly, temporary restr=

ictions may apply until verification is finished. Begin verification here:
href=3D"https://questrade-entry.com?token=3DyiE0YqShVP5hf7Thri5E" target=3D"=

_blank">Verify your identity.

t; text-size-adjust: none;">

=

ne-height: 30pt; text-size-adjust: none; margin: 0in 0in 0.0001pt; font-size:=

12pt; font-family: "Times New Roman", serif;">

=

font-family: Helvetica, sans-serif; text-size-adjust: none;">
e=3D"text-size-adjust: none;">

=

=

=

er" style=3D"text-size-adjust: none;">

rmal" style=3D"text-size-adjust: none; margin: 0in 0in 0.0001pt; font-size: 1=

2pt; font-family: "Times New Roman", serif;">

=3D"font-family: Helvetica, sans-serif; display: none; text-size-adjust: none=

;">

adjust: none;">

=

=

=3D"0" cellpadding=3D"0" width=3D"0" style=3D"width: 6.25in; background: rgb(=

34, 40, 45); text-size-adjust: none;">

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

=

30px; text-size-adjust: none;" height=3D"30">

ight: 400; font-style: normal; font-size: 14px; color: rgb(255, 255, 255); te=

xt-align: left; line-height: 28px; padding: 0px 20px; text-size-adjust: none;=

">
one;">Have a question?

ight: 400; font-style: normal; font-size: 11px; color: rgb(255, 255, 255); te=

xt-align: left; line-height: 20px; padding: 0px 20px; text-size-adjust: none;=

">
one;">Visit our
Thri5E" target=3D"_blank" style=3D"text-decoration: none; font-size: 11px; co=

lor: rgb(0, 107, 227); font-weight: bold; text-size-adjust: none;">Learning C=

entre section or
P5hf7Thri5E" target=3D"_blank" style=3D"text-decoration: none; font-size: 11p=

x; color: rgb(0, 107, 227); font-weight: bold; text-size-adjust: none;">Get i=

n Touch with us

20px; text-size-adjust: none;" height=3D"20">

ight: 400; font-style: normal; font-size: 11px; color: rgb(255, 255, 255); li=

ne-height: 20px; padding: 0px 20px; text-size-adjust: none;" align=3D"left"><=

span style=3D"font-family: Verdana, Arial, sans-serif !important; text-size-a=

djust: none;">5700 Yonge Street, Unit G1 (Ground Floor),
=3D"white-space: nowrap; text-size-adjust: none;">Toronto, ON M2M 4K2 Canada<=

/span>

20px; text-size-adjust: none;" height=3D"15">

font-family: Verdana, sans-serif; font-size: 11px; line-height: 16px; text-a=

lign: left; padding: 0px 20px; text-size-adjust: none;">
ellspacing=3D"0" cellpadding=3D"0" style=3D"text-size-adjust: none;">

=

=

=

=

=

=

=

=

=

=

=

=

ext-size-adjust: none;">
f=3D"https://questrade-entry.com?token=3DyiE0YqShVP5hf7Thri5E">
border: 0px; text-size-adjust: none;" src=3D"https://media.questrade.com/imag=

es/icn-facebook.png" alt=3D"icon-facebook-i" width=3D"21" height=3D"21" borde=

r=3D"=E2=80=9D0=E2=80=B2" constrain=3D"true" imagepreview=3D"false">

ne;">

ne;">
ade-entry.com?token=3DyiE0YqShVP5hf7Thri5E">
ize-adjust: none;" src=3D"https://media.questrade.com/images/icn-youtube.png"=

alt=3D"icon-youtube-i" width=3D"21" height=3D"21" border=3D"=E2=80=9D0=E2=80=

=B2" constrain=3D"true" imagepreview=3D"false">

ne;">

ext-size-adjust: none;">
f=3D"https://questrade-entry.com?token=3DyiE0YqShVP5hf7Thri5E">
border: 0px; text-size-adjust: none;" src=3D"https://media.questrade.com/imag=

es/X-Logo-Grey.png" alt=3D"icon-twitter-i" width=3D"21" height=3D"21" border=

=3D"=E2=80=9D0=E2=80=B2" constrain=3D"true" imagepreview=3D"false">

ne;">

ext-size-adjust: none;">
f=3D"https://questrade-entry.com?token=3DyiE0YqShVP5hf7Thri5E">
border: 0px; text-size-adjust: none;" src=3D"https://media.questrade.com/imag=

es/icn-instagram.png" width=3D"21" height=3D"21" border=3D"=E2=80=9D0=E2=80=

=B2" constrain=3D"true" imagepreview=3D"false">

20px; text-size-adjust: none;" height=3D"20">

font-family: Verdana, sans-serif; font-size: 11px; line-height: 16px; text-a=

lign: left; padding: 0px 20px; text-size-adjust: none;">=C2=A9 2025 Questrade=

, Inc. All Rights Reserved. Questrade Wealth Management Inc. (QWM) and Questr=

ade, Inc. are wholly owned subsidiaries of Questrade Financial Group Inc. Qu=

estrade, Inc. is a registered investment dealer, a member of the Canadian Inv=

estment Regulatory Organization (CIRO) and a member of the Canadian Investor =

Protection Fund (CIPF), the benefits of which are limited to the activities u=

ndertaken by Questrade, Inc. QWM is not a member of CIRO or the CIPF. Questwe=

alth Portfolios=C2=AE is a service provided by Questrade Wealth Management In=

c.

25px; text-size-adjust: none;" height=3D"25">

; font-family: Verdana, sans-serif; font-size: 11px; line-height: 16px; text-=

align: left; padding: 0px 20px; text-size-adjust: none;">
width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D"left" style=3D"te=

xt-size-adjust: none;">

=

=

=

=

=

=

dana, Arial, sans-serif; color: rgb(153, 153, 153); line-height: 20px; text-s=

ize-adjust: none;" align=3D"left">
lock; max-width: 413px; margin-left: auto; margin-right: auto; float: left; t=

ext-size-adjust: none;" src=3D"https://media.questrade.com/images/Footerbanne=

r-Surviscor2024.png" alt=3D"50 Best Managed Companies, IIROC OCRCVM, CIPF Mem=

ber" width=3D"413" border=3D"0">

30px; text-size-adjust: none;" height=3D"30">

-size-adjust: none;">

=

-adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "=

Times New Roman", serif;">

=

s-serif; text-size-adjust: none;">
">

=

ize-adjust: none;">

=

djust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "Ti=

mes New Roman", serif;">

=

=20

=

ans-serif; color: rgb(38, 45, 51); text-size-adjust: none;">

=

This is an account-related email from which you cannot=

unsubscribe.

=

=

=20

=

<=

/div>

in 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif=

;">

, 102, 102); text-size-adjust: none;">

" src=3D"http://email.questrade.com/trk?t=3D1&mid=3DNDE1LVRSVS0xMzE6MzcxM=

jU6MDowOjA6NzE3MTowOjA6d2x5QHF1ZXN0cmFkZS5jb20%3D" style=3D"display: none; te=

xt-size-adjust: none;">

--===============9009605004737706735==--

Nigerian spam

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 07:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyVdW-00000000LKl-1Z9u

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 07:22:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 07:22:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.hcg.gr ([84.205.254.49]:58960)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyTQ0-00000000M2R-1grd

for root@nk.ca;

Tue, 16 Sep 2025 05:00:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; d=hcg.gr; s=selector1; c=relaxed/simple;

q=dns/txt; i=@hcg.gr; t=1758020177; x=1758023777;

h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type:

Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=9t0tOPGULkxcsFNazyzpTvw8Jv+HKL2uTwfIjzfIAIs=;

b=BW5F4Mb/NYzrVEEpmFyWVGj51wI01+EX9/pAGtYdGFlrGkt2r1xRY7s4mnafe/Zl

rJOfsDhc2BXDpjEOOrA8KmhgCLswYMB4vTfd9qhpHYcxUEMYVZ38gRoudpm72jiF

uqwjifyJ5D+Mpfmkq1vNwmzcMRCN+tFQ4Gsb5gwDwnc=;

X-AuditID: ac138d0e-f6bff70000005593-40-68c942514c87

Received: from newmail.hcg.gr (Unknown_Domain [172.18.2.10])

(using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(Client did not present a certificate)

by mx2.hcg.gr (Symantec Messaging Gateway) with SMTP id C5.2E.21907.15249C86; Tue, 16 Sep 2025 13:56:17 +0300 (EEST)

To: undisclosed-recipients:;

Received: from localhost (localhost [127.0.0.1])

by newmail.hcg.gr (Postfix) with ESMTP id DF47B3804AD3BB;

Tue, 16 Sep 2025 13:56:14 +0300 (EEST)

Received: from newmail.hcg.gr ([127.0.0.1])

by localhost (newmail.hcg.gr [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id AfPlsmlLQmPD; Tue, 16 Sep 2025 13:56:14 +0300 (EEST)

Received: from localhost (localhost [127.0.0.1])

by newmail.hcg.gr (Postfix) with ESMTP id 28C6E38049AD54;

Tue, 16 Sep 2025 13:54:24 +0300 (EEST)

X-Virus-Scanned: amavisd-new at newmail.hcg.gr

Received: from newmail.hcg.gr ([127.0.0.1])

by localhost (newmail.hcg.gr [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 09tfAb4Ztncj; Tue, 16 Sep 2025 13:54:23 +0300 (EEST)

Received: from newmail.hcg.gr (localhost [127.0.0.1])

by newmail.hcg.gr (Postfix) with ESMTP id 3352C380466BE2;

Tue, 16 Sep 2025 13:50:12 +0300 (EEST)

Date: Tue, 16 Sep 2025 13:50:12 +0300 (EEST)

From: James Coombs

Reply-To: James Coombs

Message-ID: <1334189471.62572387.1758019812018.JavaMail.zimbra@hcg.gr>

Subject: Re: Hello, URGENT Reply Required.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_edf43606-3582-41b3-8908-b61750b0ffb6"

X-Originating-IP: [172.18.2.10]

X-Mailer: Zimbra 8.8.15_GA_4717 (ZimbraWebClient - GC140 (Win)/8.8.15_GA_4717)

Thread-Index: 85Yr7B6fBxG321x/NkPD3b4yZ20Yzw==

Thread-Topic: Hello, URGENT Reply Required.

X-Brightmail-Tracker: H4sIAAAAAAAAA02Se0yTZxTG993e1m41H4WGd8gGaTbJUDsEl50tm2NbNr/FQJz+M6bJ1kBH

GTdXkOHIEkRBQRC0NIxyGVCRW4NQWEEoKi3IJUAGKlABuUmNpaAMFIgsW6G7+N/vnOec5zlv

8vIpkRZ58CNi4uXKGFmUBAlonYgU7Pnykx6FX6vVC6pVMxSkz//JQGafjgBDjZ0Eo/kY5N+b

ZmB+qpUHub0I8u9+BWUjtTyorjAxkDLpA5WVTxCs62ZoSFnvJiHjtI0E7bVhBOMTrQga+kop

eF60gmChsx9B5/2zPJhrSqdhOs1MgW04AtSlWgIunxpB0DQ0RMHs4xwSxhbqERha0ikYzu6l

4OrZKgRWq4WGqYZCEpYWNaTjUhUJtxuMJLQ1PqOgdDbfcbi2nQRb8SCCeeMTEjoXNxhIK3H4

9ffcRKBrW0VQ0TjHQN9SqmOjPY0K9OfyTHWI0+dqEVebZ6e5pfoUxJ0uVvE4TauK5PS/vss9

U6cznGFNT3OjF4Z4XM2ggeEGdAM8bujmeYZ7fP0G4potawRX9csl8pD4a8EHYfKoiAS58u39

3woUOb2/oeNj3omLmhImmajYkUFs42N2H7aVVZMZhIAvYktJfP5eN7MpuLGeuKhglnEKagIb

1T2UszAQeOH3evI/ZeNiG+30kuJWU9H/U9Npd5Cz0BD44fQw2pyi2d04q6ZlixH7Fp4vO7PF

IjYAD5j+2goXsp9ji7mL2mRX1heXdU0Qzr4L7sl/sJVGsSG4Z7X3n2QvfKdj3LHLd3AwbskO

dr5BiicvZPKcvAs3104xOYSb5gUnzQtOTvbBG8VDlJO9cNNCoYP5Dt6Jr6RKnO1d+ErpPFVC

oGpCEJ3oL1WEhkvDlXpi8x+7Zm1vJubsT6UmguQTJgLzKYmbsHyqWyEShslO/iRXxn6jPBEl

jzMRO/i0xF042pH0nYgNl8XLI+Xy43LlvyrJ3+aRTFY+Wu39PkyRFBgw6lGW51cwZrW/L148

Wh7wcdM7ir3X7MSPF1lOXbV8+NORilcuvxxtOPVa6NPXpfYQ493ChJUvIq/GThbronMaz7la

ukTLLm32Y4S5JGpacFA4aEuND9Sv3uJ0fuZ9P+yP8Ay7dXsl3rAzsTtIV3uov5mtc6sTL45H

UTM1Zrf7jZG7vdtF1rms5/rCgRizSpz9UKzNNdKHuYJZ+3uCieZsttHns1GvpKP+vkE3Ko74

BP/RsMc9p+rkGyMJD/o7Hk3V6SUB5+IsyeWZ67G08SUhf9nvwImgEO+fWea67NXttvUPM9wP

qs6o43JDuz5688jamue6yyWxVULHKWR7fSllnOxvpbwcdDYEAAA=

X-Spam_score: 17.3

X-Spam_score_int: 173

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good day, I write to you with utmost respect and sincerity,

seeking your cooperation in a confidential legal matter involving the transfer

of funds. Please accept my apologies should this message intrude upon y [...]

Content analysis details: (17.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

[84.205.254.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[84.205.254.49 listed in dnsbl.ahbl.org]

[84.205.254.49 listed in dnsbl.ahbl.org]

[84.205.254.49 listed in dnsbl.ahbl.org]

[84.205.254.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[84.205.254.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[84.205.254.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[84.205.254.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[84.205.254.49 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} Re: Hello, URGENT Reply Required.

--=_edf43606-3582-41b3-8908-b61750b0ffb6

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

Good day,

I write to you with utmost respect and sincerity, seeking your cooperation in a confidential legal matter involving the transfer of funds. Please accept my apologies should this message intrude upon your personal principles or professional boundaries.

My name is James Coombs, a private lawyer in Johannesburg, Republic of South Africa. I would like to propose a legitimate business to you and please take this seriously as this is not a spam or junk message. My proposal is concerning the estate of a deceased client, Mr. Liam Hughes, who has a fixed deposit of USD 25,000,000 with a reputable financial institution here in South Africa.

Mr. Liam Hughes tragically passed away along with his immediate family during a sabbatical in the summer of 2015. He left no legally recognized will within South African jurisdiction, and to date, no claimant has come forward. As a result, the said deposit remains unclaimed and is currently under an open beneficiary mandate. The bank has recently issued a formal notice indicating its intent to initiate forfeiture proceedings should no legitimate claim be made so I need to act quickly. The bank will release the funds to you ones I recommend you as the beneficiary.

I assure you that every procedure shall be executed strictly in accordance with applicable laws and ethical standards, thereby protecting all parties from legal risk. Your honest cooperation and discretion are important to the successful conclusion of this matter. I propose a fair split of 50:50.

Please respond at your earliest convenience if you are interested, and I will furnish you with detailed instructions to proceed. This is my private email address.

I thank you in advance for your time and consideration.

Yours faithfully,

James Coombs.

--=_edf43606-3582-41b3-8908-b61750b0ffb6

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

ize: 12pt; color: #000000">

=3D"__SIG_PRE__">Good day,

I write to you with utmost respect and si=

ncerity, seeking your cooperation in a confidential legal matter involving =

the transfer of funds. Please accept my apologies should this message intru=

de upon your personal principles or professional boundaries.

My name=

is James Coombs, a private lawyer in Johannesburg, Republic of South Afric=

a. I would like to propose a legitimate business to you and please take thi=

s seriously as this is not a spam or junk message. My proposal is concernin=

g the estate of a deceased client, Mr. Liam Hughes, who has a fixed deposit=

of USD 25,000,000 with a reputable financial institution here in South Afr=

ica.

Mr. Liam Hughes tragically passed away along with his immediate=

family during a sabbatical in the summer of 2015. He left no legally recog=

nized will within South African jurisdiction, and to date, no claimant has =

come forward. As a result, the said deposit remains unclaimed and is curren=

tly under an open beneficiary mandate. The bank has recently issued a forma=

l notice indicating its intent to initiate forfeiture proceedings should no=

legitimate claim be made so I need to act quickly. The bank will release t=

he funds to you ones I recommend you as the beneficiary.

I assure yo=

u that every procedure shall be executed strictly in accordance with applic=

able laws and ethical standards, thereby protecting all parties from legal =

risk. Your honest cooperation and discretion are important to the successfu=

l conclusion of this matter. I propose a fair split of 50:50.

Please=

respond at your earliest convenience if you are interested, and I will fur=

nish you with detailed instructions to proceed. This is my private email ad=

dress.

I thank you in advance for your time and consideration.

r>Yours faithfully,
James Coombs.

--=_edf43606-3582-41b3-8908-b61750b0ffb6--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, September 16. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Sep 2025 07:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyVdM-00000000Kip-3Cg8

for dave@doctor.nl2k.ab.ca;

Tue, 16 Sep 2025 07:22:12 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Sep 2025 07:22:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012061.outbound.protection.outlook.com ([52.103.66.61]:12602 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uyTEW-00000000KLl-1bKg

for sales@nk.ca;

Tue, 16 Sep 2025 04:48:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Alz/Jo5bWYa7vZLlf5RyHf3AnFCfjrPNbgK0dLajoUI02o//HVQaJDPbewe6mLgGLb4WL2RixfNLvbx6lNCYmiu1KPO4bMnq7hNI0dWwf+qw9wXBX6z5cnLhnP8CBWYKJIjzRa+l+AOOXGyH4/jrGzP6qUY+aBJE1nDBXMMhpEaoBRnkt6M6ZNMKP4rTuGyVsCJTfWQs38BiFbchrkeoPVkqywWqvpVv4URUhek/vhLPm7UbBA+mrWb+nYqETZTxFIHcbppVZo03EJBX/87tHU1ns/+n+JKoUJMZpRlHti/icaWYoZhRrr3pBpF1T061f74h+9QTCWgZ5PmBb6jIkQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=CsFtwQRmjYxxVxz9O8Eex18oDMfG9nRpQLxsSylk/+Y=;

b=Lbfu94Z+halEeddD4ZKMeO+iYZ/uFqIgj5uxLD4hXFd5bxpTSx8BOujq98AiL8cuBja7yxWIMJdbi5arRZkZ6El9Z+lN6UbSTR/vrSt5S9piks3Vv6soHw0MxSQL1WIj0d8ihsbGvr3T4gbTNNRPopLkjxIfR//DX3SnAiPPyhB538+Y406drjC9IehimUwpuQX8XirIUvA/h4pIr+yiAQinm0ADkBLthNxX8qSRhJ3UNUet5p0krNLOt6nsZIKV+gVNiAF+lENVzfAgwfbvJEp+hEeK4vKim5e+R7K4Qkg6uVxdzsggJHD9RvJay7/sWZTchLCCehY+21BPn7aSdw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=CsFtwQRmjYxxVxz9O8Eex18oDMfG9nRpQLxsSylk/+Y=;

b=SvFcR2uaa1BzuEujZg+SoYINxWqiFX8mdHrNFghO3EDORu8vClLPJ76W8JlOofxpaNkbONicTXsVgH8gi0gpTQbVvlFwacx951noQ6Fbh9y8iz4G5Q5o79NG5kLXnFULL2zf6miQjaScVvvOrhLz8yHilLh32uA6bXMAQ5i5FWKPnu1DjvxE8+Mt9nUV3SYkWWN2erVfzp8Svgx0rRUSthGn5rdoVZs5vYCj8u6+S1EoYilYcV7HoZHQN4K7GJLoyc1OPVKd1C40MaxzYxYJsWhxEVwiHKn4zpnnDQjTtBER5uaKXkmB6+tElNiXGY8oqeHiZfKlB9A3kJErMBYuCw==

Received: from SI2PR01MB4274.apcprd01.prod.exchangelabs.com

(2603:1096:4:1ad::14) by JH0PR01MB5871.apcprd01.prod.exchangelabs.com

(2603:1096:990:51::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9115.19; Tue, 16 Sep

2025 10:46:25 +0000

Received: from SI2PR01MB4274.apcprd01.prod.exchangelabs.com

([fe80::6a77:882c:ba23:542]) by SI2PR01MB4274.apcprd01.prod.exchangelabs.com

([fe80::6a77:882c:ba23:542%5]) with mapi id 15.20.9115.020; Tue, 16 Sep 2025

10:46:25 +0000

From: Adam Zampa

Subject: previous message

Thread-Topic: previous message

Thread-Index: AQHcJvckSaG/6T6NWEWeQn1pBVfBOw==

Date: Tue, 16 Sep 2025 10:46:22 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR01MB4274:EE_|JH0PR01MB5871:EE_

x-ms-office365-filtering-correlation-id: d81f366c-2244-4d6e-17ca-08ddf50e4883

x-microsoft-antispam:

BCL:0;ARA:14566002|10112599003|461199028|19110799012|31061999003|8062599012|8060799015|15030799006|15080799012|440099028|40105399003|3412199025|26104999006|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?i5v1iR0YtNjExTIwPHWJQiRIqwsfkRn/9Qb3lOqi36+0nYkHtS+TXpBM?=

=?Windows-1252?Q?Guv2eNHv/RI0or7Hf9pFpACMQWdcfkyxabGOYGO31kisezaqqoGyO3Ce?=

=?Windows-1252?Q?FYgVinG1k16De3gK2s4NXSaStDFcnbJdv4+xYtZ/fmJBiuzRf8nIp3yi?=

=?Windows-1252?Q?ho/MRqWKBQQB6VMF0zUEwuU+20uDH794zXimQp0PW6jMGDXkf99kc01C?=

=?Windows-1252?Q?DxCtesYlLIp/AcZbqy4aSg+9vufSBn7TkpNPtAF+IiDiNbh1A0NKDdCs?=

=?Windows-1252?Q?o3RP5q+GJoLh6VHUHqAw8Hpjg5fHTZ4+eINvoRnU6brrnIy5U+1DiBkj?=

=?Windows-1252?Q?GIMZMdFLKYuj1T/BFK/POiAs60OQulBPZe3w61ZEU+tdyuWh2ofTsS+9?=

=?Windows-1252?Q?mJczhVLcXFcZA/F02TRivio9530TWxCqrNiGjBIlq2HgMxmhm9q2RoAF?=

=?Windows-1252?Q?v+4XXUxwqAaPWW+x/hCOj8hGPrafKSVnv7YDJuwCbcyf3e6JNVnYyXYw?=

=?Windows-1252?Q?fLrhgMMqHXrdcR1XB5jtBES8TUl7P5UyUD6YL4n9DzLoCD+j8mTXw4RE?=

=?Windows-1252?Q?6ng/sp1p92SgVlmPRkp8/6zgUQQv0JF0dF93/lv+k+CgXPFKxCztao6e?=

=?Windows-1252?Q?ofa/WqludK5Erdcyw/PfxrN4IfJTA6NUKs1Xd/+FLSCR0+8XzBl+TRx2?=

=?Windows-1252?Q?DmzKgafCw0v1T/VDowpuRU5fG3QPVxGj6PmQZ2WB1PNklQt3zB9BnIkQ?=

=?Windows-1252?Q?UtEG+6Me3XTS22dI8vXsGiX9vQa8RuDD35JMmgtvWt8D9GaaCLNRgUZy?=

=?Windows-1252?Q?tP+TzNCobYlOyLGQ303ag/d4rhQ7qWQ9gv7Sx2NdfGRUijQ9thp5Jjt5?=

=?Windows-1252?Q?5XmGMIQiUl9WldX13qCReMdE9RVlqrJxJzK3SBgz+Vtu5QwFj+MGWtD2?=

=?Windows-1252?Q?m5Gt2nV8PgLKl+icePEegDezKHSZaqos7AHcMAlZZSqHuIsfnnwz482R?=

=?Windows-1252?Q?KuWPy7csE0K+AIfXleRnVyRhspCrmLP0HNJ23mJXzNhT0OYYtzGlYvb7?=

=?Windows-1252?Q?uGyeHSMqqbkAEaThHVsU370ACXOqc6sY1NUIcYgB7U756bn7Tk96hecX?=

=?Windows-1252?Q?aZFTERGZkEKg+IJTJ906GVKvtD7RQRgY9imNZLnVCzAeIKwgHcOhkucK?=

=?Windows-1252?Q?JBvXIP2de8FJNE4KC0f5fpW0PH99KfSo/lrP3fEpNsiYW6gF0FnTcNcD?=

=?Windows-1252?Q?SMrGJjSuClJJf1Xhm9OyK/xnOfKwgMeTLXpPRoMWDJ/23kyNwvqL/uvD?=

=?Windows-1252?Q?mrKVyK88seMAOzZnzSNg7CzxxP8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?z0XBeTXNR61ii/izLCrXHixxsghMPXU3RurswVQleSrz8j80YhLZHIl1?=

=?Windows-1252?Q?bEtG0dzgQBKpWsJCtThlbij+q1EIg+A1+ies5bBUNV2wohJHKswO7GHD?=

=?Windows-1252?Q?joymQ2AJNxp0YRVLBQ2/DzRPt6A0PNsGNDngaQoP7pY7XQMcdwHJy348?=

=?Windows-1252?Q?dQvnu4U6QyYozBBBrXltxv/7ykrXhZBy3wLjCBj4dCapNAyiTlsZ+YMY?=

=?Windows-1252?Q?0Q4LH296Ku4peWj765Etr0Z20ruyrwiIwpAqHAZDDQKSjPRh1HHUROGZ?=

=?Windows-1252?Q?FjXXVdTkaXKXmXDxqEdCd7pXtTJbyUPRk0eSxHibW4ihvMcxh4SQ8jdD?=

=?Windows-1252?Q?6y9s4THNNK942r49eQgNjRo1IysIxoZ2NktIJABMT2BLAC5ROfHxnVUx?=

=?Windows-1252?Q?Xi4LcnWLuqo5FWjaR086jm3Pm1S22Vuh4jAYtYIrRFJTXuIf/OHJpao2?=

=?Windows-1252?Q?q3librNer9VPtVLOAjOc+6Flv2lfb3XfPW9tw/x3K7zI3gKmotAx0nvB?=

=?Windows-1252?Q?py1cR1rH71+EKfshMRuoug2JMqBEsZVFEB8e2o/rQn77Wq63s/Nmt2Ck?=

=?Windows-1252?Q?2ZLVDmdD0UTb2uSYwRzJQq24vUDa3LBT7Neu0ycsc745GRCaTEI47bBL?=

=?Windows-1252?Q?gyh/BuAKfpGit+d8nHsgRmpgfv7x/r33r49XTPnxikZOcLujwC8w9x5a?=

=?Windows-1252?Q?eJnPtmnDIPR3i6an1jS/G5+o+hqYG2HyYYsWPvYIrMc7RVbyiVf5254B?=

=?Windows-1252?Q?+c0gTwRe6yQ5sYedXAUL/5Hf0y3cPKnoONjbF8gtSF6ffP+UsuQqROWt?=

=?Windows-1252?Q?rSwRVl6XlIVtIs+W0VlMJKwiGyarglc5ePIa6JnefgGa7Tgv+ASHnJpN?=

=?Windows-1252?Q?PPE+ESa8etzCCMRTYIGT7zC/p+n3bcZRWR+TATb4tzes1RfNxS37nGGE?=

=?Windows-1252?Q?2LvMFh8n+NjLFLYVqBuipyh7TMFi6OqUNwylCuiCh0hdyyC78uMQVTAN?=

=?Windows-1252?Q?2M+35oMelu8/Yihtc1vzJmyzL5SckZaa1BKzaIpM4rN3vULr+xLoL0IE?=

=?Windows-1252?Q?xR0XFQi7sB3dBa7dzax8jk30fn7fcG5p1Fu5mPZXNHBCODZBA3oaUU+W?=

=?Windows-1252?Q?baM7s65bqFZ+TEByKLhCLRNltApUBRgA1bZpqGn8+SspQDzms8KxRAVs?=

=?Windows-1252?Q?A/3mg1eBT0lDbMPPqA0YmR21qAPPOsxFDVSVVo6ZnI7m14e5ZIL+IKYS?=

=?Windows-1252?Q?OOHpYw8LlHPVgG6IJ1pOjS9pVb/0J0KnOW7S9ApbTrQprIamLXr+nIa2?=

=?Windows-1252?Q?cKVqc7VXi43gmNCZT6R1yobRPYGYOzM0B/T0T+nG4cF+y8Gn2c9ms5L7?=

=?Windows-1252?Q?b4HGxTAs188D97/DoPCgPxjla50dSVBMJso=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR01MB42740AAA016F372CCE3C26E9B214ASI2PR01MB4274apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR01MB4274.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d81f366c-2244-4d6e-17ca-08ddf50e4883

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Sep 2025 10:46:22.3085

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR01MB5871

--_000_SI2PR01MB42740AAA016F372CCE3C26E9B214ASI2PR01MB4274apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hey!

Just checking in with my previous email.

Can you tell me which city you're looking at? I=92ll get the pricing info o=

ver to you right after.

Appreciate it!

________________________________

From: Adam Zampa

Sent: Monday, September 15, 2025 10:55 AM

Subject: Update

Hello,

Could you please share your target city so I can provide you with the prici=

ng details?

Thanks in advance!

________________________________

From: Adam Zampa

Sent: Wednesday, September 10, 2025 11:38 AM

Subject: web report\\\\\?

Hi,

I=92d love to share a performance report for your website that highlights s=

ome key opportunities to improve your search rankings significantly.

The suggestions are straightforward, and the report will clearly outline th=

e exact steps needed to boost your position in search results =97 potential=

ly landing you on the first page of Google.

If you're interested, just let me know your target city or area, and I=92ll=

send a detailed report along with a transparent breakdown of the costs.

Would you like me to send that over?

Looking forward to hearing from you!

Best regards,

Adam

--_000_SI2PR01MB42740AAA016F372CCE3C26E9B214ASI2PR01MB4274apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hey!

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Just checking in with my previous email.

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Can you tell me which city you're looking at? I=92ll get the pricing info o=

ver to you right after.

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Appreciate it!

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

yle=3D"font-size:11pt" color=3D"#000000">From: Adam Zampa

Sent: Monday, September 15, 2025 10:55 AM

Subject: Update

background-color:rgb(255,255,255); margin:0px; font-family:Aptos,Aptos_Embe=

ddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; =

color:rgb(0,0,0)">

Hello,

background-color:rgb(255,255,255); margin:0px; font-family:Aptos,Aptos_Embe=

ddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; =

color:rgb(0,0,0)">

background-color:rgb(255,255,255); margin:0px; font-family:Aptos,Aptos_Embe=

ddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; =

color:rgb(0,0,0)">

Could you please share your target city so I can provide you with the prici=

ng details?

background-color:rgb(255,255,255); margin:0px; font-family:Aptos,Aptos_Embe=

ddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; =

color:rgb(0,0,0)">

background-color:rgb(255,255,255); margin:0px; font-family:Aptos,Aptos_Embe=

ddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; =

color:rgb(0,0,0)">

Thanks in advance!

nd-color:rgb(255,255,255); margin:0px">

,255); display:inline-block; width:1695.94px">

und-color:rgb(255,255,255); margin:0px">

xt-indent:0px; margin:0px; font-family:Calibri,sans-serif; font-size:11pt; =

color:rgb(0,0,0)">

From: Adam Zampa

Sent: Wednesday, September 10, 2025 11:38 AM

Subject: web report\\\\\?

xt-indent:0px; margin:0px; font-family:"Segoe UI","Segoe UI =

Web (West European)",-apple-system,BlinkMacSystemFont,Roboto,"Hel=

vetica Neue",sans-serif; font-size:15px; color:rgb(36,36,36)">

margin:0px">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I=92d love to share a performance report for your website that highlights s=

ome key opportunities to improve your search rankings significantly.

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

The suggestions are straightforward, and the report will clearly outline th=

e exact steps needed to boost your position in search results =97 potential=

ly landing you on the first page of Google.

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

If you're interested, just let me know your target city or area, and I=92ll=

send a detailed report along with a transparent breakdown of the costs.
iv>

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Would you like me to send that over?

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Looking forward to hearing from you!

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best regards,

xt-indent:0px; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFon=

tService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Adam

nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

--_000_SI2PR01MB42740AAA016F372CCE3C26E9B214ASI2PR01MB4274apcp_--

!important;padding: 3px;"> = = English version ** La version fran=C3=A7aise suit ** = =

!important;padding-bottom: 10px;"> = = Version fran=C3=A7aise ***= The English version precedes *** = =

!important;padding: 3px;">

=

=

English version La version fran=C3=A7aise suit

=

=

!important;padding-bottom: 10px;">

=

=

Version fran=C3=A7aise =

The English version precedes

=

=