Web/SEO/App spam from Google Gmail Part 2



1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[18.206.177.240 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.174 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: persistiqopportunities.pro]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: persistiqopportunities.pro]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_PDS_PRO_TLD .pro TLD

[URI: persistiqopportunities.pro]

[(pro)]

-0.5 SMILEY BODY: Contains one or more Smileys

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.174 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.174 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: persistiq.com]

Subject: {SPAM?} Re: NK new clients



Hi,



I know you're busy, so making it quick. PersistIQ could help NK =

enhance its client bookings consistently.



Mind a quick call in the next =

few days to see if this can work?



Thanks!

-Uma



Uma Powell=C2=A0

PersistIQ





Let me know if this is irrelevant to you.



On Fri, May 15, 2026 11:14 AM,=

Uma Powell

[uma@persistiqopportunities.=

pro]> wrote:



> Hi

>=20

> I previously mentioned that I=E2=80=99ve been =

helping internet service providers find clients by creating personalized =

email sequences, finding targeted prospects, and booking them meetings with=

warm leads.

>=20

> Would that be interesting to you?

>=20

> Best,

> -Uma

>=20

>=20

>=20

> Uma Powell

> PersistIQ https://www.persistiq.com/

>=20

>=20

>=20

>=20

> Let me know if this is irrelevant to you, I'll not reach =

again - thanks :-)

> On Tue, April 21, 2026 11:09 AM, Uma Powell =



> [uma@persistiqopportunities.pro]> wrote:

>=20

> > Hello

> >=20

> > I came across NK online and wanted to reach out =

because we're working with other internet service providers that are =

offering internet services.=E2=80=8D

> >=20

> > We're help internet service=

providers with targeted campaigns that are getting their sales teams =

meetings with warm leads every month. We=E2=80=99re targeting people who =

need internet services using personalized email sequences.

> >=20

> > If I could help you connect with potential clients like this, would =

that be helpful to you?=E2=80=8D

> >=20

> > Thanks

> > Uma

> > PersistIQ

> >=20

> >=20

> >=20

> >

Web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 07:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOxdu-000000001iA-3FQO

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 07:04:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 07:04:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f174.google.com ([209.85.160.174]:51204)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOvwQ-0000000080V-1Vq7

for root@nk.ca;

Mon, 18 May 2026 05:15:30 -0600

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-5164dafcf97so25862741cf.2

for ; Mon, 18 May 2026 04:14:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persistiqopportunities.pro; s=google; t=1779102867; x=1779707667; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=8LmXaPr2h8kiwpWn9jQxUwsXwax1usA29+ASm3z89b4=;

b=lPsSNGd3fIQyeI24v6qyOql7yKdkIvqisOs/lIyGLTJ7V3qtMNgpFtj7EeP8n1Ccj6

57bG6DNeYIyvVHY8xVVzlDgrnu7Lsj/dv3MmpSzkGwx1zAM9yaLZAmGjCLNmmfuEg2Iw

ZFPsBSsZT6IFA8JhKTQs7/ghEHcukmdzP0B3zuIkIlPUCPzUFje9wuvoD5Lx7HHV6DDw

VRprslamJgpR88IPZbw7rbv9kKFWCBghFUmsxFugkUihOEUMdWppv8cBxonrTFcD6PaY

5w08R7DTFHPOIUkfn0vo0RGCXwIvZalVQ1wrQXByVEYEcM/mVcneQ3Qxdk0bKLgsBhyK

CK8w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779102867; x=1779707667;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=8LmXaPr2h8kiwpWn9jQxUwsXwax1usA29+ASm3z89b4=;

b=IXbytUMCmTK/rk6EEj/AixrH628kqEFS9RHiqsZu7jQxBwC8tgNcGTHSvbN7GgoMQy

aqikG8M9zdfo7JFsETiexxHaXlyyKoUPi9D3kFMZvBORnrT/1htH6hRi28YB8vz5cjh3

rl2LaMziQe7iX09iIn18SYVRCdqkWUFtKiQ1unpDDBPNivstcFPHJ9eCPITFtpu24JkV

fkSR3fX675Tch3hcE7uywVTiwyFzpbqybl6RKqCiKiaC59lBEi5CT0hGYsaNQb5pKVwl

5ztTBefLG+JThrmOo+R3oRzCDKxvrdnhirA95gzCg7GHOmOjQEwcn/LO6Mv/g48kStQZ

qjsA==

X-Gm-Message-State: AOJu0YxxmSSknPX5Nl7Hxw0ZFngGisQp1WYd8/abhDaF9sOD0H6zrFVB

sCDHwda1pGwI1MgJ60xHFUqNx3Sk0JLU1cfgksoi9FjeRQZ525Bm5/raeohpuXOhOV+SiK42grC

4PQRdqA==

X-Gm-Gg: Acq92OG1L79Eut6udeZNXFIJvWOJ+3LL5W1GZpkHvRectT3rhAtrEQW763cP1U6qv9S

Qi3xPez/zBmHOHYGteaFWdffcu9fwvjoeevKxq/MjepxrStwDkCeKYwSuAr+4UVrl5fVqF6c/qL

uzcPKrtOpQyas4sME0hxNg5DzTWukkhx15BJwJg02pd+54Eq8FrNtP/O+VZ46mPzehkY304io1n

MKywcTPsTGJNx14IfFLMU08gC/deGuP83FlDGCG9rt/qireKLWl8kuN5fsJtjnuQoQJqvm1OsT3

xayAiwKWWfsB67bP4iNj6+L/9vmSfRHpt+lozd7Cv2dyNzWl/lLM8tqPAFPZCDrHddhByav2iZw

RLVn3onoiOX6nodck/kEWlWNkrdxqYTIOHzfOnBIXsh8rWuYf3PDCmY74/Ncu09Iui3IbGzEXh4

A9Acqt8I/SUrgg21Li0yDVZoJ/5RBpIlmDGIThBvizsTtpithBUOYTgEJwy1DtWzkFJvb3iHHvB

FNYHzlF9bG2/iy4NHMRSfkNkWdaORRINxc6vIoYbHMSVNwL+cV8NkmbzzqJrg==

X-Received: by 2002:ac8:7dcd:0:b0:50e:5ca9:d263 with SMTP id d75a77b69052e-5165a023130mr216196411cf.16.1779102867156;

Mon, 18 May 2026 04:14:27 -0700 (PDT)

Received: from 019e3acb-5ca8-7bdb-b6a5-ae964f1918af.local (ec2-18-206-177-240.compute-1.amazonaws.com. [18.206.177.240])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8ca3618fe17sm54454986d6.30.2026.05.18.04.14.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 18 May 2026 04:14:26 -0700 (PDT)

Message-ID:

<019e3acb-5ca8-7bdb-b6a5-ae964f1918af@persistiqopportunities.pro>

In-Reply-To:

<019e2b58-3a1b-753b-b651-95c205b2a1ca@persistiqopportunities.pro>

References:

<019e2b58-3a1b-753b-b651-95c205b2a1ca@persistiqopportunities.pro>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e3acb-5ca8-7bdb-b6a5-ae964f1918af

From: Uma Powell

To: root@nk.ca

Subject: Re: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Mon, 18 May 2026 11:14:26 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I know you're busy, so making it quick. PersistIQ could

help NK enhance its client bookings consistently. Mind a quick call in the

next few days to see if this can work?



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

[209.85.160.174 listed in dnsbl.ahbl.org]

[209.85.160.174 listed in dnsbl.ahbl.org]

[209.85.160.174 listed in dnsbl.ahbl.org]

[18.206.177.240 listed in dnsbl.ahbl.org]

[18.206.177.240 listed in dnsbl.ahbl.org]

[18.206.177.240 listed in dnsbl.ahbl.org]

[18.206.177.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

Chinese products spam





Hi friend,
n>

Hope this =

email finds you well, this is Emma from Tianjin Lituo professional hardware ma=

nufacturer. We manufacture top quality different kinds of screws and b=

ol, nut since 2000, Long-term cooperation with the 4 largest suppliers in your=

market.


s new roman"> 


es new roman">We are one of the top 3 professional screw factories
trong>in China. We have been providing various screws with high performance, v=

ery competitive price for our customers, rich experience in customization.
an>

 
pan>

=

Now the material price is very
good, and our custome=

rs in your market placed many orders recently for preparing new year stock. i =

would like to know if you have any plan to import. If you have any needs, plea=

se don=E2=80=99t hesitate to contact us.


:18px;font-family:times new roman"> 


gb(255, 0, 0);font-size:18px;font-family:times new roman">Advantage of Tianjin=

Lituo hardware manufacturer:


style=3D"border: none">

ign=3D"top" style=3D"width: 568px;padding: 0 7px;border-width: 1px;border-colo=

r: windowtext">

1=

. We manufacturer since 2000 with rich experience in the hardware field;<=

/span>

2.&nbs=

p;Production Lines: 10 dedicated mature screw production lines;

<=

span style=3D"font-size:18px;font-family:times new roman">3. Market Cover=

age: Exported to 110+ countries; 150+workers in our workshop;


an style=3D"font-size:18px;font-family:times new roman">4. Localized Supp=

ort: Expertise in import procedures and documentation requirements of diverse =

markets;


n">5. Model: Factory direct model;


18px;font-family:times new roman">6. Competitive Edge: Better pricing wit=

h guaranteed quality.


nt-size:18px;font-family:times new roman"> 


olor: rgb(255, 0, 0);font-size:18px;font-family:times new roman">Advantage of =

our screw:


ne">

"width: 568px;padding: 0 7px;border-width: 1px;border-color: windowtext">


pan style=3D"font-size:18px;font-family:times new roman">1. Continuous up=

grades of screw production lines, Ensures excellent quality and performance

pan>

2. =

We provide diverse markets certificates (FTA, SGS
, 0, 0);"> ,
STM, CE, lSO standards...);


"font-size:18px;font-family:times new roman">3. Our screw quality is high=

er than China taiwan now with best price;


e:18px;font-family:times new roman">4. We provide customize service, like=

printing your logo or brand information on the package;


yle=3D"font-size:18px;font-family:times new roman">5. We output 1200tons =

per month, fast delivery;


ly:times new roman">6. 100% Strict quality inspection before sh=

ipment;


">7. Samples free for you to check our quality firstly;


n style=3D"font-size:18px;font-family:times new roman">8.
#ff0000">Roofing metal screw; Drywall screw; wafer scr=

ew, pan head screw, wood screw, nailin anchor screw...hex head screw bolt, nut=

, concrete screw bolt, hex head nut, rivets nut, ASTM A325;8.8grade...
pan>


-family:times new roman"> 


t-family:times new roman">Emma Guo /sales manager


font-size:18px;font-family:times new roman">WhatsApp: +86 18222725900

p>

Tianiin Lituo =

Hardware Products Co.. Ltd.


mily:times new roman">Add: No.5 Meiyuan Road, Huayuan Industrial Park, Nankai =

Dist., Tianiin, China




Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 07:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOxdD-000000000SI-1pPR

for dve@doctor.nl2k.ab.ca;

Mon, 18 May 2026 07:03:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 07:03:39 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from out208-123.dm.aliyun.com ([140.205.208.123]:25473)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOtzF-00000000M4i-00xl

for root@nk.ca;

Mon, 18 May 2026 03:10:18 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.topscrew.ltd:vip_edm_WebBatch:355557

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.topscrew.ltd; s=aliyun-cn-hangzhou;

t=1779095355; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=UTuCiaUKL5WonvJ9iS63KHx4i9AvzbTdC7MBgUkceEs=;

b=hDjfDy5Md2jMSqjb1yEWEZEqgZLyA9wgJWMPTeNtF4UAjIaB/sXul1daSzk7H9wPz97dmh1Xq7iN8frT5ckOWAMlkyjpE470XotjT+OmSp+5reOIRUxyxALFmiUXSrZguzmuG3YDnthhkJyWu1OG96XbAMBrnPWBPNETmH25rLU=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1779095355; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=UTuCiaUKL5WonvJ9iS63KHx4i9AvzbTdC7MBgUkceEs=;

b=H1O0r2bUHA/djZEtoFiBOkNoxNyTjvcSfb+FKbLwO6JsF4QvLcvBKXxU6gMQ5YEwhIyaN2Iml9Xg2goBYzGV2N9HZBjyIsll/oJU1WHH6QSMVzEJ94wTMoDUPtcYIFRMympP3TEfxQdgyfwlNuS/FxmCnERQ/gHvdfQaehePWlU=

Received: from chitu-hsf(mailfrom:vip@vip.topscrew.ltd fp:ma_600000317210688400 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Mon, 18 May 2026 17:07:38 +0800

Date: Mon, 18 May 2026 17:07:38 +0800

From: "Emma"

To:

Reply-To:

Message-ID: <2ac69f84-6e1c-47a0-8afa-5e44e3f9f73e@alibaba.com>

Subject: =?UTF-8?B?U2NyZXcgYm9sdCBGYWN0b3J5?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000317210688403

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi friend, Hope this email finds you well, this is Emma from

Tianjin Lituo professional hardware manufacturer. We manufacture top quality

different kinds of screws and bol, nut since 2000, Long-term cooperation

[...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

[140.205.208.123 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

[140.205.208.123 listed in dnsbl.ahbl.org]

[140.205.208.123 listed in dnsbl.ahbl.org]

[140.205.208.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.123 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.123 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.123 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.123 listed in bl.score.senderscore.com]

0.4 SALES_REPLY Your parents named you sales?

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?U2NyZXcgYm9sdCBGYWN0b3J5?=

Web/SEO/App spam from Google Gmail Part 2

--000000000000bc6b520652071de2

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello nk.ca


Ku-cbO5eDoFxneaME3ac2L2L0xE3ngFTPDnO023pPvIbwkYILREfgTzcDp0GPU_Vy8PTFUOeKEn=

G9j3YbFD3WrNxClxQ-ppa7XZUpcY6j1d_bDVPG5dL8yOBzwhzYl911Y-5jP6zslc7yTL13GyV6c=

Soerho>




Are you looking for a Web Developer, Web Designer, SEO Expert, or Digital

Marketer?



I=E2=80=99m here to help!



I specialize in:



1. Website Design & Development

2. API Integration

3. SEO & SMO

4. Google Ads & Facebook Ads



Feel free to share your project details or schedule an appointment =E2=80=

=94* I=E2=80=99ll

send you a clear proposal.



Waiting for your reply



Regards,

Russell Thompson

Business Development Manager.

-----------------------------------------------------------------

Note: - Our next conversation will be on my corporate Email ID.I will send

more details on our =E2=80=9C*corporate identity*=E2=80=9D, =E2=80=9C*compa=

ny profile*=E2=80=9D, "*Send

your Quote and Price list".


[image: beacon]



--000000000000bc6b520652071de2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0cm 0cm 10pt">Hello=C2=A0<=

a href=3D"https://smartstreamingott-dot-yamm-track.appspot.com/2o_-tMwh5Djs=

DAoBACUN0Ku-cbO5eDoFxneaME3ac2L2L0xE3ngFTPDnO023pPvIbwkYILREfgTzcDp0GPU_Vy8=

PTFUOeKEnG9j3YbFD3WrNxClxQ-ppa7XZUpcY6j1d_bDVPG5dL8yOBzwhzYl911Y-5jP6zslc7y=

TL13GyV6cSoerho" rel=3D"nofollow">nk.ca


rmal" style=3D"line-height:normal;margin:0cm 0cm 10pt">
a, sans-serif" style=3D"">Are you looking for a Web Developer, Web Designer=

, SEO Expert,

or Digital Marketer?


normal;margin:0cm 0cm 10pt">I=E2=80=99m =

here to help!


margin:0cm 0cm 10pt">I specialize in:
ont>



  1. <=

    font face=3D"verdana, sans-serif">Website Design

    & Development


  2. <=

    font face=3D"verdana, sans-serif">API Integration


  3. <=

    font face=3D"verdana, sans-serif">SEO & SMO


  4. <=

    font face=3D"verdana, sans-serif">Google Ads &

    Facebook Ads



">Feel free to share your project detail=

s or schedule an

appointment =E2=80=94=C2=A0I=E2=80=99l=

l send you a clear

proposal.


























>Waiting for=

your reply





Regards,


Russell Thompson


Business Development Manager.


-----------------------------------------------------------------


Note: - Our next conversation will be on my corporate Email ID.I will send =

more

details on our =E2=80=9Ccor=

porate identity
=E2=80=9D, =E2=

=80=9Ccompany profile=E2=80=9D, =C2=A0"
>Send your

Quote and Price list".

ily:Arial,"sans-serif";font-size:12pt;font-size:12pt">

=




I7jQMeh-rCCKq9SRu_Yn7u52WrOBMDZaNGI0xE3ngGyqEXAgLeNsWftUs9KMBKWdXefCOGxth7H=

RUxcXsJhGu_1DRgh0u8175kzgfe_VVXSpII7G_HzQHhTCIGaU60ufCOQ3OoxquxsOoZ4U8MWuRT=

sqIPtytmg" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; d=

isplay:none!important;">



--000000000000bc6b520652071de2--

Web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 May 2026 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOhS6-000000000uZ-1OFR

for dave@doctor.nl2k.ab.ca;

Sun, 17 May 2026 13:47:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 May 2026 13:47:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f66.google.com ([74.125.82.66]:54613)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOfgV-00000000A6R-0ZRA

for sales@nk.ca;

Sun, 17 May 2026 11:53:59 -0600

Received: by mail-dl1-f66.google.com with SMTP id a92af1059eb24-1357c851a48so513488c88.1

for ; Sun, 17 May 2026 10:53:03 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779040377; cv=none;

d=google.com; s=arc-20240605;

b=e3zLdLE0HGGbONtGPU+B518g5O4nxlrojlvLkAhg8Ygc515r4jGmfEodYzynWyVJKi

aPgNx3Lqsg8+rUXCWxGJ1fooIydg6gZjIa9r3akVXsSfjJ9WOGbGrGDFAM/LB52bBdvg

d5JYNaaLVddA5FszRRyXjIXyNFB18Yw6fGjzYOR6HNZKL3rVOmezJIp+6kJvqZ0htIVD

EvcdDp8gYnzHGnL+oKEgxj0tbebbedsayBZTReXGazCnvVAeW1PGoh3oq8LJb7sKAUU4

J6SOQ3WlBjTFUuDmMAg9Jk0Z9wZkyMOvUfuAoEaW05Pggtn1OuIr383130jfI5HlDO2C

kZCw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=Xh+f3x/BdPAf3OpuL+PspcYrZ+gd6og/U3vx0dKdv2Q=;

fh=K4YXDlBzh75jp+umpiVSGKtavKLbAmcgNobJ9O4QpWc=;

b=OdXriMHjvLFYbKivvbd3I6TLWV26reCd1QsB/8CRyyfeEFs5w1ZhGrWDwexoVnqBOB

JbKKs4r65KCrAtluwHoCoJmbEou+8SXKO3Kl1csEUm2jEssesI/FXc2tV2NVu0oHMlwf

jLXjqiawZ7PW7rp5YF8UK8HMCFSeiMsnZln0Q58GzIcpgMPmErCQDRsuMwu1gl1LBJey

iAGSsIgqVOASD/+w6mXoQuq4/gd1i+nqHtFhbPVu0Sr1gbZUE1QsTK0Igw72H7d2+CDw

O9bO7dtMhY+32LC0YjJx9317+wG4f0keKDlcaIRq+R1nS+EKzjXHDWcRZGC3jiH1VWEZ

VjqA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smartstreamingott-com.20251104.gappssmtp.com; s=20251104; t=1779040377; x=1779645177; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=Xh+f3x/BdPAf3OpuL+PspcYrZ+gd6og/U3vx0dKdv2Q=;

b=vjiEeZMNL1PAXjh8hUPKY1gLe64m0jGPO4TfZzac4Xcuj4Gjyg7X9G4ffBQf9htdPO

XjQNznyM4bd0AjFdeuOZI/USPoKqp3SmJwG/vEInRnhStdNLvvRHlQGjkBGrJ4x9yQSq

RAPXDkIjFj8+ptg/W4Xh5GTo19WhbyZ5my1x/0KTRoRbMgya3V1GYnwIM/uVmDiqEGd1

o4cy8WBuS/xATLd1prmja7BIUwyogBfCcyTiholdj2+m0/3SFaC5CGjXo320bht2lc0+

T5vb2cFJCtXtAH18mnFeRBjqFJw9V5fHo6J158M2I3ULorji/ou85qu28hTqD05kPn35

OZwg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779040377; x=1779645177;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Xh+f3x/BdPAf3OpuL+PspcYrZ+gd6og/U3vx0dKdv2Q=;

b=Tqs1bUTDbDqToHc3ViKqbVp9JH7VZnjSaF4qUQW1a+/mtKc4ebnQctArGPsCbANZ3A

NgQEwRZhypi8eHic/FF2dOVBwQHmY485Q0X4wBwJB0icw1v6xm+kZ8uexqvQ+Zh21PhS

A+qOpLl4EgKgORR40/9ZtEuLOecD5YXR/514efqN6qrTX/RrSp0I8xl8Xzt+IJFgaRdo

E2T3LlacmOAyQy2zgUqLI0rVrHMGOLCODOE8gbcwpRL3ZaRZxvl0v6yEvmCB0lT3DJwS

HNvWrbs3zKSed1QLP5wdEBwPUTqxgAwQPT/MHQNPLjbqPxH/pw77J6Zg4m1t3azMvEZ9

j+fg==

X-Gm-Message-State: AOJu0YwC1IBKf68eEvT3t9UmGAtEIGqVmLBohN17dCJ7eOPSRlSAaDNp

Cn4WbyXzwCcEjkiCELcqEInKRX4twPQORoYoYBAvwANi3GpdNeXpMy1bzEi5R81BbiiCL9dvW2q

qqY++0JM2uPvkPiteaZ9kk7qdNwewyI9SMIPajcQgYJ4uX5B37uihY8U=

X-Gm-Gg: Acq92OHFwyleRgFL2IPV5l+VN+Ds96+cyzTUeIdQ8EUuXMEA7KqJT2i1St7KKWV05YW

lcIUA/bAtZBrfsykH42EogNOXYv7zuaKk2zHL0zICMCEeM+b4QW4qDDIN3cFnlZG5DucNMoXh2F

kNO7NUEnnsbNOwqqhu55ImOm2JEOZFsUfn/2vT/JqtkqMQ1VN40AsNIeSEWbwpmOYbLn+exiTQM

uz+u4FCdevLRlV5Pjf0eqgBudttYjtL812QJUJwi+K/pT2l0bFv0dpiatoYPJpvDbAa2zCiN7ya

pVlgne39ucqRJhTrzt2BSIU=

X-Received: by 2002:a05:7301:400a:b0:2de:1508:937c with SMTP id

5a478bee46e88-3039869fcffmr4935129eec.24.1779040377395; Sun, 17 May 2026

10:52:57 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sun, 17 May 2026 10:52:56 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sun, 17 May 2026 10:52:55 -0700

MIME-Version: 1.0

Sender: Russell Thompson

From: Russell Thompson

Date: Sun, 17 May 2026 10:52:56 -0700

X-Google-Sender-Auth: OtDnzmo3PTsWYe4sp2NbCYPiXkU

X-Gm-Features: AVHnY4J56pW6nczN8GulWmqbG6pCY7zsDWQ0tBbrjhKD1ZKtDZC6TRZMIPWKbTM

Message-ID:

Subject: nk.ca : Development & Promotions at Affordable cost..

To: Sales

Content-Type: multipart/alternative; boundary="000000000000bc6b520652071de2"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello *nk.ca
[...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.66 listed in dnsbl.ahbl.org]

[74.125.82.66 listed in dnsbl.ahbl.org]

[74.125.82.66 listed in dnsbl.ahbl.org]

[74.125.82.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.66 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

[74.125.82.66 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.66 listed in list.dnswl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.66 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.66 listed in wl.mailspike.net]

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} nk.ca : Development & Promotions at Affordable cost..

Web/SEo/App spam from Microsoft Outlook Part 2

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?W9/c/udv3FSdM6iB8tkLqeV91oGmETmfnBWfkk162LHVv+YYtwpzvfUgjk?=

=?iso-8859-1?Q?rTCZ4K1Nt+hoBJUTKi2wb0BYDppwWwjparZUK/r8KqplFqx0hsQSU0S1eV?=

=?iso-8859-1?Q?m4YGLDxUuilmHMbNKZ/Q9kEyPzfr62cyP9ZdQZOKIiY4itPGNdQ5vr7hMv?=

=?iso-8859-1?Q?oNCtbLjWLIwrlHDQJjI8UszHYTWEtywtOyAEIccBQDaib0CiR1/zvr05ZD?=

=?iso-8859-1?Q?wWhkME+6LzYu09YsCh0yiyCMGOX0h5tkNFXk/j1FOp2jUwZr59FjlnP43g?=

=?iso-8859-1?Q?qTkGNoHJc4aVdR1TRFY0vi0ZAFFgevKF3kuZRFXS3QzX1/LwRedazAZqSw?=

=?iso-8859-1?Q?4jO227/uMYIRSIvBC2Hy1T7EkmiS4nPj2fDsaSzDDFMd29na68QG3G3lIp?=

=?iso-8859-1?Q?JeBRgSc1ieMlqEZzH9VVVzV/Kvs1pJRocZ/7pMcSKVwoYz5twi7VNr3vx7?=

=?iso-8859-1?Q?8EQzeAgYTDlEvWfLutQODkjWy69NfJrXlHgszO4Ho4Sq+XsmfOTi7MympM?=

=?iso-8859-1?Q?Lni9tsXSwGNvWeA3MZAuMlWr9LrRMFAOpVSbmE0V89OtPiqCntjtgcIM6b?=

=?iso-8859-1?Q?y+NCWG2bL9QPo96udiuPQRx8sJt61h26TiuIglOTJyccMNpLv0hvd/pVW+?=

=?iso-8859-1?Q?mxBmAYi5VMozBC59yUC7lUCVjpiGNxhXyHjXy7wMF2PVFFIcOE4vxE8Ngu?=

=?iso-8859-1?Q?56SDH0xpZU31f8Zb+Mq+KTaQqF3Yr21eQZlGjcJPV6FOYkao1nhvFJYTKo?=

=?iso-8859-1?Q?k+qH2uoljPI+o5NMT0K9t1dATWLo/iBlbMyDUAiyCmNoPjIb83P2TAVLZ3?=

=?iso-8859-1?Q?M5OPafmHDRT2Y2BCRJBe1CvueSJtlr9DKohVuczoYYhYbJowN+jNGdEVGl?=

=?iso-8859-1?Q?FhqmIlHncGTMmYsgJ4UVeAM9HvvCNY92PzG/cUV2SN3l4YQcQRnOsoHPTg?=

=?iso-8859-1?Q?EnQx4X4JA+tQ/bqmAo4QE+zdypMzUJZj0FKunHh5caugDeeKKlxa5/hH4+?=

=?iso-8859-1?Q?4TZOsdOYAhwVbNA8JhfkfyJ2D5qk8UxxjyRshbJhMFaxJLii+kimA96RQz?=

=?iso-8859-1?Q?mWmQndHvR6AxF5QQ31e7M4Fu9DLF/qHgXSxcR2GtiSorLSb/GmgxxMPRSD?=

=?iso-8859-1?Q?t7uGAaZGCfFm3vL84zPj5+wyd5rQ8GDsE5jZv3IyfnsAFMM24OmAU+FGjZ?=

=?iso-8859-1?Q?xBCIzsPmfnpB2iGBX1SJsmMao6fd9a29e1G1IMKew/qT/G0nw8lxoMwfRm?=

=?iso-8859-1?Q?4tEUiiLxJOh0oI/phWr2g/tgbRURi27uyZTplhQAZoH249gw991mtwVNzU?=

=?iso-8859-1?Q?thejCg0piwCUxDJpH0e5DVBf9xo/XBQqjvA8I0gA2FzKnotEbgssEhjTLl?=

=?iso-8859-1?Q?BPn2LqJvm7yOkLFhpDclz5lWBip7+mlNjTkNIYZU0DF3ui1GQDhvrW+hZG?=

=?iso-8859-1?Q?HAJ885DK6Y9xCNM5AHevG1EXGETgbk4Lj5kiNMcuyWtVKjWslwWQ0ceeGr?=

=?iso-8859-1?Q?kP6Us4e5RDJgtsCKfp7UwB?=

Content-Type: multipart/alternative;

boundary="_000_SE5P216MB3276D3994DC871D9C2717B98F5022SE5P216MB3276KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE5P216MB3276.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: acc4df25-0087-483a-b833-08deb4374bd3

X-MS-Exchange-CrossTenant-originalarrivaltime: 17 May 2026 17:11:11.9988

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SL2P216MB2215



--_000_SE5P216MB3276D3994DC871D9C2717B98F5022SE5P216MB3276KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I visited your site and it looks great, but it seems to be falling short on=

search engine rankings for Google, Yahoo, and Bing.



Can I send over my price list and a proposal to help you improve your resul=

ts?



Thank you!



--_000_SE5P216MB3276D3994DC871D9C2717B98F5022SE5P216MB3276KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I visited your site and it looks great, but it seems to be falling short on=

search engine rankings for Google, Yahoo, and Bing.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I send over my price list and a proposal to help you improve your resul=

ts?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you!








--_000_SE5P216MB3276D3994DC871D9C2717B98F5022SE5P216MB3276KORP_--

Web/SEo/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 May 2026 13:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOhRe-000000000s4-1Xvs

for dave@doctor.nl2k.ab.ca;

Sun, 17 May 2026 13:46:38 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 May 2026 13:46:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19012048.outbound.protection.outlook.com ([52.103.74.48]:7618 helo=SEVP216CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOf3O-000000006jl-2X4l

for sales@nk.ca;

Sun, 17 May 2026 11:13:37 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Nsskt/A7MHCfPPfo/KI7FR3mdzuT0NESlzdQ4fGViTGoA/QO4JMDGTDBjdh9btqbf8wgZHQD9Y25beqJFS+wARosSMothBd8gP+J4kLtfsg309+KEJvazsQ4ka4zyqB+V2g5ixGBPp07ZDnvZxG7oPHyE4o7XEZKB1C44Iey14EvJo2e3bigX3OA48GlRLzHUYzU6sIc4SeYOmMIuc3aXL8aaDHskTkSFGSl2b+EFczqA3UP5+U6MiV4YgFVEMCELN8q8vXmZlN6nH5OEAaGCyGuTWAA/h0t7CEf5WkiBw090JYtUZ2rFiFv0R/Rl2a3sXzbgDvWZYVtyFRQ+c0kag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UHNeM4g2UG2LdalbO5wqVBPS4X7nCxlZCW+dJN4KppY=;

b=H1PLKhigB00eKRpSctkHNpp2tNU7phiup/pRwuOMWoTqgHPwr/msPpDbmPGMii5YQbujrl8+7vNj6LvIHD9+2/r+CHvBfmsCtHoIiVgKH6nfXibCG3l1V9Ct4ufGzmaMJQb514noiiErHCCQ/+fIffYUKZ2g0qBHFfmYyi8A+itRjNtXy7z+MvUCylCGC8iB9ItoVR7yexZW1KSAryJxrODBhC45sHF0aoICEcl0UVZTRp8KCn5MGNH3mXcOYoR7sC8bjVSoHFHxbVZXzGGcL8aHTR6nUgKhADihhdxylt/qivFHmm7RQDlHmE7lLiZ/mkJuJvldtEAnG2Q8UN92sw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=UHNeM4g2UG2LdalbO5wqVBPS4X7nCxlZCW+dJN4KppY=;

b=XfjoSafN5bDnPTR/SoEltARB4dHiyllxzKMuxCLm0aq4f1wvK3FwsbykxjEs68lq9Dy6eD9CbXA4BVhtSo/l44Zmr5rmfei/kKC1URR0TTNF+qGIviNs72L+QKh/rXG6Lt6rHYr6RN7kbOQ2TwiIz1edBe/nJQV5TihTZ9E22QyfvceGDTzxxfL8878jP4eYuZ1mPO2ihc0dWByKrbYdnteYyMK2eHYxdVdZ6StEgx5U6N45hblqDXD4mmqW5UMtQ7Y1gEls3o5OSWVtHtj0S4i45ciyzgC9v2kRXkW5OyGVlefggP9AI1cxIzPg2ovapaX1Eh1jxhoLFEcFSnw6KA==

Received: from SE5P216MB3276.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2fe::15)

by SL2P216MB2215.KORP216.PROD.OUTLOOK.COM (2603:1096:101:14c::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.23; Sun, 17 May

2026 17:11:12 +0000

Received: from SE5P216MB3276.KORP216.PROD.OUTLOOK.COM

([fe80::892d:a6a2:a641:e5a1]) by SE5P216MB3276.KORP216.PROD.OUTLOOK.COM

([fe80::892d:a6a2:a641:e5a1%5]) with mapi id 15.21.0025.020; Sun, 17 May 2026

17:11:12 +0000

From: David Charles

To: David Charles

Subject: send

Thread-Topic: send

Thread-Index: AQHc5h+6gGgbbFZ+3kaWxssBhKnmMw==

Date: Sun, 17 May 2026 17:11:11 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE5P216MB3276:EE_|SL2P216MB2215:EE_

x-ms-office365-filtering-correlation-id: acc4df25-0087-483a-b833-08deb4374bd3

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|9112599006|37011999003|2604031081799003|704163111799003|2604032031799003|55001999006|16051099003|8062599012|8060799015|19110799012|31061999003|15030799006|15080799012|3420499032|3430499032|39145399003|41105399003|40105399003|3412199025|440099028|18071099003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?ap513J1mOE8Y9qLGHORcpkkaDAlTqOqV+5PHDmlr78POa9GDJ1MhODDD/h?=

=?iso-8859-1?Q?OMkaKGbRyJN83wka4rOHKHOBVbyD/URCKAOKbLO5uQNXDuXSehHmUbloGB?=

=?iso-8859-1?Q?C6U2wv3cxZWWswY/9NALh5TnwAGr014xotqdnPPc4MSW8eYLBt/dFYQtbh?=

=?iso-8859-1?Q?qiY24wmYtyZLN5/XP3fC3c/AbrT/k0nm8F2a7j/+c7gHblLoNF8Z7BDjEI?=

=?iso-8859-1?Q?J44GXEXSBTzA92C75FBDNgRU7bYKZiicSDvDP2gRnEedggFw6QCMVdaQgl?=

=?iso-8859-1?Q?VIbLaDaJYrSTJqplJ255VWlh/P75J5BIJkft8w8s/XgbQlVZPxLCqIPDr6?=

=?iso-8859-1?Q?oZsR019CRJ2oagLkuHFjJcfwidTlvcnySYJytJ+mPVfjsUuhmRF+2rSjD+?=

=?iso-8859-1?Q?ZouDEW6mZXLi6oP6W6dO2tXg2a1sabI8SzRrnC5KumKA39cbO10EKzENzY?=

=?iso-8859-1?Q?IjOo8fc2o5djzTkxVYMZfRzC9oJBPlQUv0KuZSrmbCqkNlMnAzqMyubDiT?=

=?iso-8859-1?Q?kt8lzDS2fIZqcewjvRnv3+yWNR00uMLSQVhaWxhCcjefH7YN5PcgiOLiaa?=

=?iso-8859-1?Q?Y1rDhcZuyMK1H2hz7YBqd9BeW8IebKPim6pTOcNN4z00tqRp7BwXvO3XWw?=

=?iso-8859-1?Q?lECkfZAYqy+GtEPdPq2DKH4NbXPAh9tpZJANoldpI0R6zvie9v1fT0iMsk?=

=?iso-8859-1?Q?COcKosOyPeESBYUh8yrmlDyKNBYPf1DrmHU/VgpvwqzMmc9XWEVa5FaCH7?=

=?iso-8859-1?Q?V/nNg3UvhhDl9K7Dd+QXoW4PFpIrfbPPTzy9MWmCJnRLBTdTl1gPK1anbK?=

=?iso-8859-1?Q?tbiQtMrxQBQbDi4og4phYSava+VmOoHGZR5Oto9Ko9KamIP67uD6fYnwDk?=

=?iso-8859-1?Q?/kb0duDd1+MGKA7a+7I9uzOm9p2zn5lYg51aEDWsvjUOHbjhXPw0lFlTWQ?=

=?iso-8859-1?Q?x/O+/2wKEB2p33yd3chCqmB1+W7it/pOAwG69Nknt4cJXxAvDuH811s6ff?=

=?iso-8859-1?Q?jbnC7JVtubChfXyUzB4T5B4yTbpv9S9xD17nxvezWnntRlBWlrnPMV1ZDF?=

=?iso-8859-1?Q?92edOtx0LrNRWd/Tr1GahEuPznv4P48KvCL2TAkHYodV4O8JdqCxnTN350?=

=?iso-8859-1?Q?d9TbgZ5sDEDVOIBC9Hcrkv4HF4qJ0qvpL9n5u7B00DuhGm6s7ZDttiP78+?=

=?iso-8859-1?Q?7viqoi9ro9aYCgInO1PmWK8f+QKtdkpVuILx9sRTUKuag/TS1jcyxbmpAM?=

=?iso-8859-1?Q?A6inCAv53hEDRIP8H8HPKWSwF0KxYj/QfFx/NUNi6SODN54QJnTmGaX0ix?=

=?iso-8859-1?Q?I3YqA3W5PBUxQ2Ulcz9dILrDdjNE/16koSpBImU2XTCMRDEV7vHq6V3+IA?=

=?iso-8859-1?Q?tru/mB5x1m?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 May 2026 13:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOhQB-000000000mY-2rrH

for dave@doctor.nl2k.ab.ca;

Sun, 17 May 2026 13:45:07 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 May 2026 13:45:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from viriato.bfv.cloud ([5.250.187.145]:45977)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOdEf-00000000Nat-3UJy

for Mailer-Daemon@doctor.nl2k.ab.ca;

Sun, 17 May 2026 09:17:07 -0600

Received: from [10.5.0.2] (unknown [41.121.241.168])

by viriato.bfv.cloud (Postfix) with ESMTPA id 914719EB4D;

Sun, 17 May 2026 13:56:40 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=viriatoseguridad.com; s=default; t=1779026205;

bh=H4jodlhDRASqBN9Zo0T/+rAh4Y1wWq8GALH1fabE/JY=; h=Subject:To:From;

b=nIiJrtQZZj1j3RXZtcla0t9FiUce9bWmTyxIU6PvEowV5usSwC4sNHcSihFd8tGgq

VogcfFjQDHLDDCvHieg9e1Fel3FxmdDOYCPfh+Z+22a3bV7EJslqOfwS303x+fJXU0

gEny+Qva0+PqMpJMT8Xn188hWpPEm/1o/lLnUFrNdDYtRPS5rFjBf4/nGwL9+GVddP

EdeYkYWHobYFolzMsHwcw3B+N/S4F+iU4prSx8m+jH2jLjmaM50Z4b+2oSaquMWNRM

OwrMp+uI+FVvbTPjyPSkinog2wAO7qvKB/BV+vWf2sUmqlQS18+zonASNNqas00wh2

vGkHe+knfxhyg==

Authentication-Results: viriato.bfv.cloud;

spf=pass (sender IP is 41.121.241.168) smtp.mailfrom=pedro@viriatoseguridad.com smtp.helo=[10.5.0.2]

Received-SPF: pass (viriato.bfv.cloud: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: 4.8 million dollars

To: Recipients

From: pedro@viriatoseguridad.com

Date: Sun, 17 May 2026 15:56:33 +0200

Reply-To: AlexandraSchorghuber302@gmail.com

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I am Alexandra Schorghuber from the Schorghuber Foundation,

an investment development program that is committed to supporting society.

We have discovered there are so many companies and individ [...]



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.250.187.145 listed in dnsbl.ahbl.org]

[5.250.187.145 listed in dnsbl.ahbl.org]

[5.250.187.145 listed in dnsbl.ahbl.org]

[5.250.187.145 listed in dnsbl.ahbl.org]

[41.121.241.168 listed in dnsbl.ahbl.org]

[41.121.241.168 listed in dnsbl.ahbl.org]

[41.121.241.168 listed in dnsbl.ahbl.org]

[41.121.241.168 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.250.187.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.250.187.145 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.250.187.145 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.250.187.145 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[41.121.241.168 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

[5.250.187.145 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[5.250.187.145 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[5.250.187.145 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[alexandraschorghuber302(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.7 MONEY_FROM_41 Lots of money from Africa

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} 4.8 million dollars



Hello, I am Alexandra Schorghuber from the Schorghuber Foundation, an inves=

tment development program that is committed to supporting society. We have =

discovered there are so many companies and individuals in your country havi=

ng difficulties receiving financial support for investments or career build=

ing. Therefore, you have been selected to receive a donation/investment amo=

unt of 4.8 million dollars. Please contact the email below to claim your mo=

ney immediately! Email: AlexandraSchorghuber302@gmail.com

nk.ca credential phishing from Google Gmail Part 2

--0000000000007ad198065200a9c6

Content-Type: multipart/alternative; boundary="0000000000007ad197065200a9c5"



--0000000000007ad197065200a9c5

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



[image: image.png]



We are upgrading our email system to enhance security and better

reliability.



To continue using your mailbox without disruption, kindly update your

account.



UPDATE YOUR ACCOUNT



This message was sent automatically. Replies to this email are not

monitored.

=C2=A9 2026 Telephone . All rights reserved



--0000000000007ad197065200a9c5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



3D"image.png"
80" height=3D"68">
border=3D"0" style=3D"border-radius:6px">
>

px">

We are =

upgrading our email system to enhance security and better reliability.

<=

p style=3D"font-size:16px;line-height:1.6;margin:0px 0px 20px">To continue =

using your mailbox without disruption, kindly update your account.


yle=3D"margin:0px 0px 24px">
er.app/" target=3D"_blank" style=3D"color:rgb(0,86,179);font-weight:600">UP=

DATE YOUR ACCOUNT


e-height:1.5;margin:0px">This message was sent automatically. Replies to th=

is email are not monitored.


padding:12px;font-size:12px;color:rgb(119,119,119);border-top:1px solid rgb=

(221,221,221)">=C2=A9 2026 Telephone . All rights reserved




--0000000000007ad197065200a9c5--

--0000000000007ad198065200a9c6

Content-Type: image/png; name="image.png"

Content-Disposition: inline; filename="image.png"

Content-Transfer-Encoding: base64

Content-ID:

X-Attachment-Id: ii_mp9m1ni40



iVBORw0KGgoAAAANSUhEUgAAALQAAABECAYAAAAoXx8rAAAQAElEQVR4AexdTWzcRpZ+RXbLf/EG

coC57EBIFMwGWKx3dyLfktOgfcpZPuTPziaQEce2lKwzkq87B0uxnbXkrAMZCBInQQ7WOSf1MaeF

NcHAhzml7RFmLwt4ejxJnLi7yZrvq2axSTa7m61uyZJMgY9V9eq9V4+vHl89FinJkfwnt8AuskDu

0LtoMvNLEckdOveCXWWB3KF31XTmF5M7dO4Du8oCuUPvqunsdjGPR1/MoYvFosZla6UUy2XU+z1K

YCBvFIDa+cdvfndGH7kI+GBaP39xWh++eGY2y1W9+LuZ0q8vvQued/WRDwjT+jf/Nf1dFt6cpn8L

xBzasmtNf5SpF198cdTiHvfyhz0if9kncm9/E6oHslnkrwdk+V6Ej/zVon8yG3dO1a8FYg5dr9dj

/N98881UDPFYN2AqDQhs4Ph+UOtcHL54bvbnQmFcadcQ+QqFlpVvz18to5Yfm2CB1gylC59NR+fY

XoYbu/D26P39MluPEBY9kSd+qM3l1ts8C0TMnToIU448SqeapjvSOXCAdhvVjMoB6b6H/tzt8x9X

gmZebIIFejk0h9z1UZoX2T90Nt0vrs2MNwoyb1IMCKZTa9EVadSuo5kfm2iBzrPSGnQc1UlAfhgL

0GQE00g9FUXm2zq0LCA6V9vwOWKoFug+M62huHy2WjuzxmvgamOhtBmXcfjiTMnVatLBRhGBY7ie

lNdPX8mjM42xyZDVoTn5hE1WZ1PFc5Vh5LQwsRmj/binFZ25m094oqbzB8HNMHaKzKwOTVY6BMsc

Olhg7NrZqYarzI1CRyYZ9vSv3z53eY31HDbfAv04NJds5tObr9WOGCFuusPYpvNFzXJTg+CIJ1p5

1fvugzw6b+F8xmelbWBZSaCYfyZQeZMWaIwUpkSJueFt7lzw/IX7pz7OHwRpoC2CLA4dnZDJ/HV4

+8z86sO3x3/ao2bpyHgWFG7XcZuucnZxoZ06x2ymBXo5NJ05GqVH89fh7dPxYG9x1ncUX0KZTtcX

OfiT5N9rGGts7amXQ1ObZJSZIjKHpgXGlmZKBe1OKX7nAWB03lPX5dvvX8m/12iaaEvPWRyar2rD

PVSlFPPEYTs1dwaYn/cL1KWTwbjNGJWXpE32W9pO8oRv/OiwUQJXiUk1mG5YfOFh/9H51xfOlJ7+

6Mzs0x9Nz44ZmDE25jchvGkMfHQu6APN/8ysjgH+8drMKuHppZn5wxdmktdoVYqVY4tnJ8aunWnJ

MuNBZkr5y2vTs78MaA9fOst5ismKNvBgPP7cFV4DZIPnny+dNdcQpUmrj300M/X00nR47Wk0SRyv

tWknq3fTXlkcmrJCh2YDwMlHMZRjFVJuAez+cD8lvyvupAuNH5WVnGw6dLTf1qFK+4EsIoZk+2lM

hBJVslt0ylDwe40rDAKmlfVUdGRCiTOvlTOvpAgoLD9z9ZxWBw/8RTmFVQMiwLMPoAslkUJJYXy8

yCk5Ss029qlbnGjp8vNPV2ZuqoJ7S3RhXoKxXF2cd1OAejjamXdAq0D7sOje+rfL0zc7iceb0MqB

OvV35kWc+R/3qUzf1CNdW/ZdZ97HGA2UfDnVaQyLLzh6kjpRRwJsMco+h6cMwH3UcAlVzSgNg2bg

7E7Cve1B5cx3elCFnt1H32AvH/zI6iM6ayVCYHtPQ6rO/eF8r+HYQSi4AyjQkA4qGIq6I6P3D2ra

1LSTp2euTk/WC8r0k4eQpBGhSxBsj2srUkf1b3tk8t8/mDYywo5IpaBbO2MexPzi2pmu80vnJR1s

aR6meT2wKINRRGp7Ffv9odwiosuTP2vjnxiynbgDZoEOghcFQgBNp8iIrsxHMmoysnHfthfEBsCD

apoB1qBnVA5lR/logGi/rUdpOteVgz1nNe4pEQIJ99X13Pr5jW3TeRQQAPavxXMaFU/V5+CzXUG0

UxHtihYXerjGHQMxbYVWfsze3ImhfOg/1w4OxnXmIBiAMUJpjrhaYnLCLlQ8LQh+jig8Tzi+IyPi

pM0NKO2hw37IpWwpaBU6q6VKlg+LqtR0fpF9Nanal1dOkrBLuwwHiToFB+14YV3kdOuifD6E9oJu

MmwfHTYqh7JtH8tkv6VlXyowisABTJ8SGWWdOALu8vIfzg31e43K+unFhfXTl7pC0VfmuqgDwSjX

5RSlKXqCMZLyP8B4Ubi04AZjUKzCRbs+a+mgfV3mGHQ22Eg0UqJ0yiaWkZYySW/Bc7s7NJ8nGvBc

y1f0hXNpBAJtyqwnTnqUdhhROipv29Y5SVHldLSBOpbNcTwUmTwOzS079tcaIgrx3YL0+qE3NmF/

rRdt//2/P7+0BttURbvi+C4ibiGMwGnSfhpRE3RkOr/tf1AUOXy5c1rjOLolE9etdR2rQpPbaRaZ

z3w4NBEh4OBT7LCjdCB62xfcozdKckJcjd2fwgjtYXBbdSrQNzc4WCHDr5FtRLSLKK3g1QGMPn8h

fXdkbPE/J7S4oy5oaUMUxqYIDvJ9UVpOm1DCV2qCzy0EH3eCwniWpF+HJt915tIExzHsHR8QSLwL

wFwCDW4q9qR9rFa6wskgcPJqRSfz1pkV07n0O3fFekhHiCGH21BYBaxE7aKGEIpzp0MjBaBnEFyo

ppz0FMJRqsR+B5Gczqw0HuyMfEh2NFNaVNIOyCMdgM8BXBUsFce09UwldhQYpc2d5PvQVmQWuC1f

ajMpO2QiOjUCQkuqJycxEebpnEjuAtz/B1lm/XGGgw+k7MI1cBgzIE9OjbZKCSItXdARpd2yVrqZ

OtBRlTuRlsIx2mMOWv6mW/kzB3N46gewo1DFw+GKUhALRkTpx/Z1+PrZK+WG0ivYLhMuk1wCFR6C

uD0G02zTg24WgGKZRc2sdE1Zt89fqYx4umJt8lMREbXZFTujvwRo2k7Lmu81HygNToF0ZKQtSqdE

++ZNAHIefTs0mQALfjM6C0ul1JbnjtBhWxxYjOdEi1mxqBAjtueoeb7hY/txBf6WjgfvYo77sCCj

fDsZtQXfOqJvlLdKwfPlYK1WXp9eWsMzQRV4Q9pABDeVyKlWaH5vThR2N+TJ7weM0BQE4IMhUw9U

sQ2uNR8Mh+HUvCPpE73AjLsdTv9/6krFEX+B6Qj14WT4fPH0ZGEY9qDIHgCvEUJA5heDSqeCtAFo

lp3oovgIncKOisT/fkuU0tY9t4HtO088xxNOprjxnNixe81YJfbXuY+8ZCIt6iZd4XNJLcFD2Q9s

tFee7K031rgaEG8hoqlFZS6jX+GR6VE9HDI68gajDo8E/nxqcaFY1zEdFF4ZIwfkjf5IdMoyKB/v

stBtiAYR1zGeHHArJ5ZH+47Cdp0npBnxWlG20JA14piDa9BEVzpG+YYrYf6MffRw/zkYJXprW1Tm

sizSUgRcjK4xpYHr96BzUsl+4CgGiTkT2lt+HGjISe50cDIInJCH+4vLW67INhnwNt6YOlqvMdIy

HcY6Tv8Itavh5Ynpg9NrzbeLza7oFhwx7hORPBo8xIVgHyJDhAzk0BRznacIDPqihcsOHbQfIE9E

hc2vqpQhvn3/ShlbSCvsI/ABsY4JGLva+QVBiphdhUK2UebNTVCiRsc+fNusWCzriLQMALxg5dcY

wFiV35+/3HwxY1q4DXQrZxYVqaO/5rX40DTHICkHBTDtiEbHcDlg526CpKGSbV6rV5c5BJwqwHzI

w4cihAzsTb+dwS6USKCk3QEKEVRpH1tyviA9EMctmijtjOwp8YY3IFKN7iPzylW48sMejrRSWe2G

GYCnNPLn9u9mwEERAwFeMAzEv2OYGVEYbTopvP4eHhA9vnAR8UHkY2ZEybjw9w3R3m4HH+/60YnX

QyfMynPnzOJKgXd3wICcvemQWkxJeSKaQTGgaBb8HqRZE5hPjY99OGNAiTIRXvij2/mIHoZDM+1g

7kt5jz3cNb9HqCt2IjlpP+xx5n8VLLfbxUD9OKZZaULFffEc3q4homvFbehyrSDgEcGDoInQ8NIS

7RIwtqWMvueFKYjgJYuMuCUDAYMpfNXGR/wwHJpytjpK85cComDueCqyHeDJB3KyEAl/yBflwV53

+VHrZt2wH2e2OkcCrUVlKvFgWOa45qbAasUv5WykZRry5PcR5w0kcqVz8WIm1JMRnRD0k48vtYJm

rBiKQ+PVN6O04AVLTPgmNninRyFDjjosbTg9FtJl8vcJ99ZlhVSWQim39MjfIGK26ViR6GjV61Hi

ShTAJFI9SBPdjlZhtOW4SDtmlbk7fNnb8CvJfWTLvrchZdKz7QgitBLOtzjg3VdPTzeatDwPCHwd

DhHmoyWU+QELuA9rc4hOVU4AASjxXHnkbxCpC6HpVNQqOzBiWifLynX73BL2lbVJSc24qvUafATp

SCc5uPfClEKJjKtI/jzS8MK+JD/4kqgNtxe0xu2zYfbdxYh92Irj6zAV4740nGhctuwNYrs9mfpS

D6ZDpmwnSceoOJqxOo7p3nIQpTkerl94UxDYhvN1dEy/LmFkR/YdG0D7ragf60ADMnEezlGBQ7c9

sQ5H9M6Usn766oLrSXRbExeCB8QLzf1YNLb2gCfSqeyg9YSjWnxa2W9kjspwPH8tOm7Y59UjThti

TYWpiObf1Dat4KT4Gt1r2+YLek0xTIemQJNLs7JBYJ7EMN8LkuLNkpZE9mjPoz9tHKCHd+z9ufkP

ghiVKJUT6x9Ie4MIb5MATL5K6iwQ8Bhe0Dvdv7OgHsyjtXLkhz1u6V8vN/9D1/MX28t/+fBdPX51

GjZqpQkYoe/DR4TmuAS7L+0rqdzq9d8Mop+Gwpk5sIIslp1g2A7NO47QabwkfuCIjgdRLluEpOxk

e+CxkgKb7e7nP75v/kHQioJbkJKT2sAbxM15QKRzc5R0OPhjY0W0rlIHOJR5+XN/b/O/evG/cxnY

58o9wn6Rv+0RabhxWYia1YYPOXF015b5ii6xUvmis/hJ27xq1Z1v2A7NC+vHcbgc8zV3Pzwcg8Co

fP2FF14gP9u9gKsH/zxXm5F6MQ7c/3NtTsGRHDg1HYkRkg+Ihy9keYM48OihAOb1e+v6GHYUjb2p

Twi+Kw4BOhoc6ikZyYp4+hjlhEIzVvbXdTl6U4vT+n6jo4ga8mhGZkJA5Nc6pykkcXiKAK8hClnu

ogi7qdJxojIMssuJYxxDf5QnS/0QeE4GOyyoZjqo2xFQdpOP7vbjf3+7qCpnFtWd04vqT+8sqrvI

j9up0jHr731cuXt66RB5//z2oiKsn1p8Fo7Bm9Iwrc1eXWA/ZaNPrb+zlOlG/fa3S0fJY+Hu6e5/

IPKP710t/9+pxWN/eue/cS0ROHNJ3UkAaYwupxatzsfWz5oVx+jcz+kP55ZO0n4EXuf6qSXORVcR

3I++c7qpI3Uh0JbdmJIO3Y0278stsO0tkDv0tp+iXMF+LJA7dD/Wymm3vQViDn38+PGp119/nd9I

DEXx7SoE1zhPsPrh1f3oa6+9dvPVV1/dol+bsiOLvPbaVoWDcwAABpdJREFU8dVXXz2+4XEH5W9p

0l6jXU6cePPmG8f/Y/WNN94wALutEl4+fnzD38+8/vobq/S19hEHx8QcWms9im0w7gUPLnl7S+Bk

EIyWzz333LLneeN37941T/8GuUUnx+E3Ct7oRocblL/buOPj4xNaNyY93Vj49NNPjxI+//zzo/SR

go7/jmA3Ock+pfwSfS2JH0Y75tAbEYjItkrYCO9m8DB6ELLKZlSGcSeLxWK/OyZZh+hJVygUetJ0

IoDuMgh/J7k7FT+wQ+/UC6feWPYmHMeZbzQaczdu3Nj6/WkoQYd03cTbC+CzHuTPSjssOow5B1mP

xF4Yt+vR1aEx4SanRsSbRX0ZpcmfUJq0BCXzbS7dE4zSjHYvvfTSKMqbb731loncpCGA3+SJKCfY

Bsyjvhzw3SQf2hPM1U6cODFPYJ39b7755iyvopnTnbhJvAXICfMx1kFn9GEd8syYwLUdWDa5zPMb

5TKW0fAjIhJC/3mMy5x6FnJuAlahz82XX37Z/MYE5UbHZz/pqR9pXnnllVWUxkaUB/plAusE0JcA

pDHykO4QLeSnHICxnS2hT3gd4KNOdh5of8PLE/lBS93Jb/UP7QMdrO3ZHwJ0pc0oIhPQXgC+P5Co

TOgW6kV8JmEgIh/o6V/m2njdsC/nBr0i6OczTygbbdb56YLpj566OjTuRJtT8268josw+RMEGAME

7TU4x9oXX3xx9Msvv7z+1FNPTSDiTNZqtQXiSAN6vHFt/iHuiMxqvV7n35xeID352Of7fglQBZSZ

s0G2gM44RzOn05NwgDCni8oOxqKua6wj6qZu3mMcQWSmnryONhqMOQEYB80aozfG4JeEk1jajQMC

b37PjfpxHPYTR/2++uqrCumQwhgaOAt56JBTQV0gexIwTlrwmj/Ww5L8wLPP2I72Q5u6GlmYyFm0

uaKc5LgEtKP8U9BjFvY5Cd5jtCH6w3wV111im3zoP0pgGzzGvtShXwhklijTAmUS34cszjnJ1+7d

u3cMvGXIoM2Io70Y0Bh4jnIMINlPHKrxo6tDW1IIKcM56CgWNYxyjRMKh+FXenMsI0LpkCYCRHBD

q8JYgkkv40bhGKl3Ooxa5XVTx34HBu8KwDghnJslX/HT0Vk3Nzf6N/wA2ksn249y2HPWryky08Me

Fdr766+/ruIGo4268do/Zt9Gk8mh27gyIOA04TIRkNN5gmqrgNF5IQssW9jutayyO0kZGRmhQ8ud

O3cYDcYR+VKduhN/Lzz0WwGMYhnlCoCdAk0HpwNPEMc+ANuMPjFxwBOXyXZkJD3LfgDXyyXbAPgY

7XjDoZrtAH/JrjbZOPqjokNjdenIRMcHxNJES7xpDo07bg6DmiUCRp8DpDq0VaSfclDZiM6CNEeC

70D4wRJztw0vu0ndg9WMKw+XeEZlXjsdh3UupZWAJslq2oNenxHS5WTnhSXIFmCPviI55nI1WHnA

PvyjmzP3Gm3THDo6MCZonhDFDatOuYR+5CG9CZc05JErMCBz+WU+VPUjpxstdGKU5nWb1AXOw3/p

wY+RptjXjTfaB1rK6LiCwLGYY0dZ+qpvtnP2pUxAjPkIaukFVghuUui03mE4NO9u8/SM5XQKzsLI

VIWhossml17SpemQGZdRNscJ9ckiHC9UuHxVn3nmmfDJuhsfnIw5nNmRgXFXea3AVamf5QPOphSm

JD4NR7wF8lMO6FJth37KWoOdv8O43H25+fDhQ7PaUEalUrkO/jJ2Cb4DmF0M4i2gz6QW4DXpBkv2

WTzrUcB4bXOZ5LG8xFugDItnfSMA/igbNx7sjhvtzVWO8xylMfWYQyOKLGAp5KeVpjPZJpL9xLNO

QJ2pxSGUR9F3nbkw6odQP4LSpBwo2T8X0PMBUwHHZZioEIgDX6wPOCODRL1kkwb0MX2ISwKisnnC

t3imHhj3CPD8jFVQxvohM6bzZ599Ngc4ZHc5yAuaQ9TPygRuDaBu3LjBlMag0T4JUIBwMlDn9fKG

EvJTDnCptmM/+wDPgu4YATtL6pNPPjH8vI5A92eDMvYJKnAr4OV4xqbg55wp4o2CiRPHA01yLmM8

5O1HJocI6I3ObGMMhesI26wTxz4C6I8AeM1Gb9YB/AyY3TGIOXSsJ2/sOAsgQnJ/W2Mv2jwTsL3j

LmJAhXOHHtCA24kdUY2r3hx3CaAX07wJbE3OMRVB+7E4cofeZdMMp16IAtKGBaYiu+wyO15O7tAd

TZN37EQL5A69E2ct17mjBf4OAAD//w0Ln88AAAAGSURBVAMAztmSH2zXGYkAAAAASUVORK5CYII=

--0000000000007ad198065200a9c6--

nk.ca credential phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 May 2026 04:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOZ2Z-000000008CX-17zX

for dave@doctor.nl2k.ab.ca;

Sun, 17 May 2026 04:48:11 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 May 2026 04:48:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f41.google.com ([209.85.128.41]:38106)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOYTQ-000000001RX-28mL

for sales@nk.ca;

Sun, 17 May 2026 04:12:25 -0600

Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-4891cd5927dso1762825e9.0

for ; Sun, 17 May 2026 03:11:04 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779012658; cv=none;

d=google.com; s=arc-20240605;

b=MGlcy5P2oMWlg+KUzR5WPS7aTEXWK49WI1LGnR+tVbArWC5turKwGAcISoDxzgaPvT

qbthmbkVDkcfhZnSnVYCeULMB6+8vcY/k22yq1b8R1qmNd5yvHM6dKgK4VAUQtARuWKP

l8Z+e0Clfj6R4MRs8z2Pj4ezotwZe61X5DdX0FjejqWFSEYU11ZP84JPEzbt0Gldbyn2

IPyNUVFjjpi3DobAjpR53cdl98ljxigKcO+bW1DNTBCUohcLZNj5jxVPNVy2CIJW+Ogz

9J2EfjS1EBEsJcZF1QEqPxpTx3shhZd6YLspZwC7qcBSIa6aR5gaYJmMF5wrc1K2cYfq

dxwA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

fh=cdNZKOqgySSxy0pFk3sGmFdCKoTxSFRY9Hj2aRjLwoY=;

b=MftP/PpZGsoHI39b9vq1n7d87dmFm4w73TB8+C7h1NU65SLmMBk7AmNc86c/Gi57wX

hiyBr/eSGt0juSNQkeLwx0GE8l6llwcb40toyZtwwqe8fIt4m7b9FPWUksm3nDH7YYIm

Eo7NqAkKGx1PYgl2kMwychWPm5Ek/NaznOUfuJulZTP+psHUD+d+KrYVrm+kjSHf6mKY

XOkzkTF63iC98/xvcyLnR4hzkNP6NHICBx423odmKBA+GAE4nEl5yVWaN9Ghd4JwEhRl

u0Lba+M4Gv/Nee9S+xXuQXdaZsBCjrGTWBfrpjqofZmMbUsRMB3AJlqN03YiYBr+wjBZ

A3SA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779012658; x=1779617458; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

b=FTPtVbrFW3H8nqiXAtgzfKJ22Yrb1L60/l8pNWZI+HOi6geNnXcw4qVw9SjPjzFZiG

jq2yke1rYfje4dDMBVT0PjRl7cAMKAdLu6l4VCZDqk7/D3mzWnsM2hnWOhk3Wm2o9+yd

2nWEX+RaBJihn34v7iwujoedjGTZfOq65exp5acblJYoFwPCfst8yn1FG7d1um0tF/5f

0iBQ/1bIeQSksm9gTGxEXnO3YZuUkxt+fL/uHM3tNC1eHKco/lu2XrBLkYKYLsHqo3sV

iOQyWE7+9T5gurgYsqGGhqwnUfuen8wsf4HzXhS6kGE00qmqCO/w17QrvBTe7pb+3DWT

DRvw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779012658; x=1779617458;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

b=LQdZcAwQm6K0Xe5xGFBtQUGyiHqzt4LpUZDrmakRQAWLUFSaiDDOWoknUom6sd/d/i

aw2s0u2qy1i18BvnJSSmBOXHnVlQeuQXyzpgaRGJhPEggYhWT0wxwi1Qwg811gOJJ87Z

NeaxKdvNg59Z511t5yiBhqH/SHb7f94e7hNxSmTpUTLG4l2TcsPGMhvqNHPt7+ga00IA

SUML8zjodPhNGQ8yQ/kWDE2o6AV9iLaRLDVZNRwpqY+0MhsMa/0SbWkyhdcQYixTk5M7

v4w/YErB6+7nhZrGrvOzD25qSTr3AmLEnxiz5V9IithM/FA+wL/w672ItU9XC9YbadQV

l7wQ==

X-Forwarded-Encrypted: i=1; AFNElJ+C1/s9dzDoryJDZqrGbAclrM6aRdYsUukPgtp/vGb/HN1AkiWmhAPNxXudRIWI298pssMzmg==@nk.ca

X-Gm-Message-State: AOJu0YzDNVbDPLakYDb/1LtVsMjFD3e+Br2qu4qo7Qd85mqTPKAM8sA5

Ve7oHRQMyElMJSlbEVQp4QsLHfk78lUApi1ssGi/N3sJfVAvEx8w3VoPj/DSiGJBsxs63e5RyV1

pYAg7PmK7pxxFzO/Tev7kNepmfYaXDk84qr35E7sTcV4=

X-Gm-Gg: Acq92OE424oH3+IdanIcw5FUOvRh6cyV7KyPQBBUTqvob7GJsobV6pazjPmo1xFTfvc

zlpwgHakY26r6npEsVshtgwxmaAoQiBPy7e8qZDlcS+/pWsbSLEw8HOMCEZd+7UwSszSbP4aP6A

mRto9Zyz+YTMYz4wIXcG/E9oxiW1C/y1dUUE5dPWCRH3sDJ8onXFZ5xTpjOjNq58QCZPPTL0ra3

xS84979j4A1vNtD4NXWyQp6MKiyRbOiTORQsdDGpapnxQA+GqbiDI2YlB4uX0DBy99u80jCHsKc

IZn5b3MUMIJgQNdeuAi2lsJiYsgu6KMmaTT5VofZkCsJNrWbWK8=

X-Received: by 2002:a05:600c:4587:b0:48f:d410:605e with SMTP id

5b1f17b1804b1-48fe632143fmr78661025e9.7.1779012657127; Sun, 17 May 2026

03:10:57 -0700 (PDT)

MIME-Version: 1.0

From: EMAIL SERVICES

Date: Sun, 17 May 2026 06:10:43 -0400

X-Gm-Features: AVHnY4IHKzk_nagcBF7Iu1uTlXwtMCCVSfAB4e7ZYRhyOrSWNq9Vm_xqDjgfwuo

Message-ID:

Subject: Important Security Maintenance

To: undisclosed-recipients:;

Content-Type: multipart/related; boundary="0000000000007ad198065200a9c6"

Bcc: sales@nk.ca

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [image: image.png] We are upgrading our email system to enhance

security and better reliability. To continue using your mailbox without disruption,

kindly update your account.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

[209.85.128.41 listed in dnsbl.ahbl.org]

[209.85.128.41 listed in dnsbl.ahbl.org]

[209.85.128.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.41 listed in list.dnswl.org]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[djtheman1959(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[djtheman1959(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.41 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.41 listed in wl.mailspike.net]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Important Security Maintenance

nk.ca credential phish from google Gmail part 2

--0000000000007ad198065200a9c6

Content-Type: multipart/alternative; boundary="0000000000007ad197065200a9c5"



--0000000000007ad197065200a9c5

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



[image: image.png]



We are upgrading our email system to enhance security and better

reliability.



To continue using your mailbox without disruption, kindly update your

account.



UPDATE YOUR ACCOUNT



This message was sent automatically. Replies to this email are not

monitored.

=C2=A9 2026 Telephone . All rights reserved



--0000000000007ad197065200a9c5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



3D"image.png"
80" height=3D"68">
border=3D"0" style=3D"border-radius:6px">
>

px">

We are =

upgrading our email system to enhance security and better reliability.

<=

p style=3D"font-size:16px;line-height:1.6;margin:0px 0px 20px">To continue =

using your mailbox without disruption, kindly update your account.


yle=3D"margin:0px 0px 24px">
er.app/" target=3D"_blank" style=3D"color:rgb(0,86,179);font-weight:600">UP=

DATE YOUR ACCOUNT


e-height:1.5;margin:0px">This message was sent automatically. Replies to th=

is email are not monitored.


padding:12px;font-size:12px;color:rgb(119,119,119);border-top:1px solid rgb=

(221,221,221)">=C2=A9 2026 Telephone . All rights reserved




--0000000000007ad197065200a9c5--

--0000000000007ad198065200a9c6

Content-Type: image/png; name="image.png"

Content-Disposition: inline; filename="image.png"

Content-Transfer-Encoding: base64

Content-ID:

X-Attachment-Id: ii_mp9m1ni40



iVBORw0KGgoAAAANSUhEUgAAALQAAABECAYAAAAoXx8rAAAQAElEQVR4AexdTWzcRpZ+RXbLf/EG

coC57EBIFMwGWKx3dyLfktOgfcpZPuTPziaQEce2lKwzkq87B0uxnbXkrAMZCBInQQ7WOSf1MaeF

NcHAhzml7RFmLwt4ejxJnLi7yZrvq2axSTa7m61uyZJMgY9V9eq9V4+vHl89FinJkfwnt8AuskDu

0LtoMvNLEckdOveCXWWB3KF31XTmF5M7dO4Du8oCuUPvqunsdjGPR1/MoYvFosZla6UUy2XU+z1K

YCBvFIDa+cdvfndGH7kI+GBaP39xWh++eGY2y1W9+LuZ0q8vvQued/WRDwjT+jf/Nf1dFt6cpn8L

xBzasmtNf5SpF198cdTiHvfyhz0if9kncm9/E6oHslnkrwdk+V6Ej/zVon8yG3dO1a8FYg5dr9dj

/N98881UDPFYN2AqDQhs4Ph+UOtcHL54bvbnQmFcadcQ+QqFlpVvz18to5Yfm2CB1gylC59NR+fY

XoYbu/D26P39MluPEBY9kSd+qM3l1ts8C0TMnToIU448SqeapjvSOXCAdhvVjMoB6b6H/tzt8x9X

gmZebIIFejk0h9z1UZoX2T90Nt0vrs2MNwoyb1IMCKZTa9EVadSuo5kfm2iBzrPSGnQc1UlAfhgL

0GQE00g9FUXm2zq0LCA6V9vwOWKoFug+M62huHy2WjuzxmvgamOhtBmXcfjiTMnVatLBRhGBY7ie

lNdPX8mjM42xyZDVoTn5hE1WZ1PFc5Vh5LQwsRmj/binFZ25m094oqbzB8HNMHaKzKwOTVY6BMsc

Olhg7NrZqYarzI1CRyYZ9vSv3z53eY31HDbfAv04NJds5tObr9WOGCFuusPYpvNFzXJTg+CIJ1p5

1fvugzw6b+F8xmelbWBZSaCYfyZQeZMWaIwUpkSJueFt7lzw/IX7pz7OHwRpoC2CLA4dnZDJ/HV4

+8z86sO3x3/ao2bpyHgWFG7XcZuucnZxoZ06x2ymBXo5NJ05GqVH89fh7dPxYG9x1ncUX0KZTtcX

OfiT5N9rGGts7amXQ1ObZJSZIjKHpgXGlmZKBe1OKX7nAWB03lPX5dvvX8m/12iaaEvPWRyar2rD

PVSlFPPEYTs1dwaYn/cL1KWTwbjNGJWXpE32W9pO8oRv/OiwUQJXiUk1mG5YfOFh/9H51xfOlJ7+

6Mzs0x9Nz44ZmDE25jchvGkMfHQu6APN/8ysjgH+8drMKuHppZn5wxdmktdoVYqVY4tnJ8aunWnJ

MuNBZkr5y2vTs78MaA9fOst5ismKNvBgPP7cFV4DZIPnny+dNdcQpUmrj300M/X00nR47Wk0SRyv

tWknq3fTXlkcmrJCh2YDwMlHMZRjFVJuAez+cD8lvyvupAuNH5WVnGw6dLTf1qFK+4EsIoZk+2lM

hBJVslt0ylDwe40rDAKmlfVUdGRCiTOvlTOvpAgoLD9z9ZxWBw/8RTmFVQMiwLMPoAslkUJJYXy8

yCk5Ss029qlbnGjp8vNPV2ZuqoJ7S3RhXoKxXF2cd1OAejjamXdAq0D7sOje+rfL0zc7iceb0MqB

OvV35kWc+R/3qUzf1CNdW/ZdZ97HGA2UfDnVaQyLLzh6kjpRRwJsMco+h6cMwH3UcAlVzSgNg2bg

7E7Cve1B5cx3elCFnt1H32AvH/zI6iM6ayVCYHtPQ6rO/eF8r+HYQSi4AyjQkA4qGIq6I6P3D2ra

1LSTp2euTk/WC8r0k4eQpBGhSxBsj2srUkf1b3tk8t8/mDYywo5IpaBbO2MexPzi2pmu80vnJR1s

aR6meT2wKINRRGp7Ffv9odwiosuTP2vjnxiynbgDZoEOghcFQgBNp8iIrsxHMmoysnHfthfEBsCD

apoB1qBnVA5lR/logGi/rUdpOteVgz1nNe4pEQIJ99X13Pr5jW3TeRQQAPavxXMaFU/V5+CzXUG0

UxHtihYXerjGHQMxbYVWfsze3ImhfOg/1w4OxnXmIBiAMUJpjrhaYnLCLlQ8LQh+jig8Tzi+IyPi

pM0NKO2hw37IpWwpaBU6q6VKlg+LqtR0fpF9Nanal1dOkrBLuwwHiToFB+14YV3kdOuifD6E9oJu

MmwfHTYqh7JtH8tkv6VlXyowisABTJ8SGWWdOALu8vIfzg31e43K+unFhfXTl7pC0VfmuqgDwSjX

5RSlKXqCMZLyP8B4Ubi04AZjUKzCRbs+a+mgfV3mGHQ22Eg0UqJ0yiaWkZYySW/Bc7s7NJ8nGvBc

y1f0hXNpBAJtyqwnTnqUdhhROipv29Y5SVHldLSBOpbNcTwUmTwOzS079tcaIgrx3YL0+qE3NmF/

rRdt//2/P7+0BttURbvi+C4ibiGMwGnSfhpRE3RkOr/tf1AUOXy5c1rjOLolE9etdR2rQpPbaRaZ

z3w4NBEh4OBT7LCjdCB62xfcozdKckJcjd2fwgjtYXBbdSrQNzc4WCHDr5FtRLSLKK3g1QGMPn8h

fXdkbPE/J7S4oy5oaUMUxqYIDvJ9UVpOm1DCV2qCzy0EH3eCwniWpF+HJt915tIExzHsHR8QSLwL

wFwCDW4q9qR9rFa6wskgcPJqRSfz1pkV07n0O3fFekhHiCGH21BYBaxE7aKGEIpzp0MjBaBnEFyo

ppz0FMJRqsR+B5Gczqw0HuyMfEh2NFNaVNIOyCMdgM8BXBUsFce09UwldhQYpc2d5PvQVmQWuC1f

ajMpO2QiOjUCQkuqJycxEebpnEjuAtz/B1lm/XGGgw+k7MI1cBgzIE9OjbZKCSItXdARpd2yVrqZ

OtBRlTuRlsIx2mMOWv6mW/kzB3N46gewo1DFw+GKUhALRkTpx/Z1+PrZK+WG0ivYLhMuk1wCFR6C

uD0G02zTg24WgGKZRc2sdE1Zt89fqYx4umJt8lMREbXZFTujvwRo2k7Lmu81HygNToF0ZKQtSqdE

++ZNAHIefTs0mQALfjM6C0ul1JbnjtBhWxxYjOdEi1mxqBAjtueoeb7hY/txBf6WjgfvYo77sCCj

fDsZtQXfOqJvlLdKwfPlYK1WXp9eWsMzQRV4Q9pABDeVyKlWaH5vThR2N+TJ7weM0BQE4IMhUw9U

sQ2uNR8Mh+HUvCPpE73AjLsdTv9/6krFEX+B6Qj14WT4fPH0ZGEY9qDIHgCvEUJA5heDSqeCtAFo

lp3oovgIncKOisT/fkuU0tY9t4HtO088xxNOprjxnNixe81YJfbXuY+8ZCIt6iZd4XNJLcFD2Q9s

tFee7K031rgaEG8hoqlFZS6jX+GR6VE9HDI68gajDo8E/nxqcaFY1zEdFF4ZIwfkjf5IdMoyKB/v

stBtiAYR1zGeHHArJ5ZH+47Cdp0npBnxWlG20JA14piDa9BEVzpG+YYrYf6MffRw/zkYJXprW1Tm

sizSUgRcjK4xpYHr96BzUsl+4CgGiTkT2lt+HGjISe50cDIInJCH+4vLW67INhnwNt6YOlqvMdIy

HcY6Tv8Itavh5Ynpg9NrzbeLza7oFhwx7hORPBo8xIVgHyJDhAzk0BRznacIDPqihcsOHbQfIE9E

hc2vqpQhvn3/ShlbSCvsI/ABsY4JGLva+QVBiphdhUK2UebNTVCiRsc+fNusWCzriLQMALxg5dcY

wFiV35+/3HwxY1q4DXQrZxYVqaO/5rX40DTHICkHBTDtiEbHcDlg526CpKGSbV6rV5c5BJwqwHzI

w4cihAzsTb+dwS6USKCk3QEKEVRpH1tyviA9EMctmijtjOwp8YY3IFKN7iPzylW48sMejrRSWe2G

GYCnNPLn9u9mwEERAwFeMAzEv2OYGVEYbTopvP4eHhA9vnAR8UHkY2ZEybjw9w3R3m4HH+/60YnX

QyfMynPnzOJKgXd3wICcvemQWkxJeSKaQTGgaBb8HqRZE5hPjY99OGNAiTIRXvij2/mIHoZDM+1g

7kt5jz3cNb9HqCt2IjlpP+xx5n8VLLfbxUD9OKZZaULFffEc3q4homvFbehyrSDgEcGDoInQ8NIS

7RIwtqWMvueFKYjgJYuMuCUDAYMpfNXGR/wwHJpytjpK85cComDueCqyHeDJB3KyEAl/yBflwV53

+VHrZt2wH2e2OkcCrUVlKvFgWOa45qbAasUv5WykZRry5PcR5w0kcqVz8WIm1JMRnRD0k48vtYJm

rBiKQ+PVN6O04AVLTPgmNninRyFDjjosbTg9FtJl8vcJ99ZlhVSWQim39MjfIGK26ViR6GjV61Hi

ShTAJFI9SBPdjlZhtOW4SDtmlbk7fNnb8CvJfWTLvrchZdKz7QgitBLOtzjg3VdPTzeatDwPCHwd

DhHmoyWU+QELuA9rc4hOVU4AASjxXHnkbxCpC6HpVNQqOzBiWifLynX73BL2lbVJSc24qvUafATp

SCc5uPfClEKJjKtI/jzS8MK+JD/4kqgNtxe0xu2zYfbdxYh92Irj6zAV4740nGhctuwNYrs9mfpS

D6ZDpmwnSceoOJqxOo7p3nIQpTkerl94UxDYhvN1dEy/LmFkR/YdG0D7ragf60ADMnEezlGBQ7c9

sQ5H9M6Usn766oLrSXRbExeCB8QLzf1YNLb2gCfSqeyg9YSjWnxa2W9kjspwPH8tOm7Y59UjThti

TYWpiObf1Dat4KT4Gt1r2+YLek0xTIemQJNLs7JBYJ7EMN8LkuLNkpZE9mjPoz9tHKCHd+z9ufkP

ghiVKJUT6x9Ie4MIb5MATL5K6iwQ8Bhe0Dvdv7OgHsyjtXLkhz1u6V8vN/9D1/MX28t/+fBdPX51

GjZqpQkYoe/DR4TmuAS7L+0rqdzq9d8Mop+Gwpk5sIIslp1g2A7NO47QabwkfuCIjgdRLluEpOxk

e+CxkgKb7e7nP75v/kHQioJbkJKT2sAbxM15QKRzc5R0OPhjY0W0rlIHOJR5+XN/b/O/evG/cxnY

58o9wn6Rv+0RabhxWYia1YYPOXF015b5ii6xUvmis/hJ27xq1Z1v2A7NC+vHcbgc8zV3Pzwcg8Co

fP2FF14gP9u9gKsH/zxXm5F6MQ7c/3NtTsGRHDg1HYkRkg+Ihy9keYM48OihAOb1e+v6GHYUjb2p

Twi+Kw4BOhoc6ikZyYp4+hjlhEIzVvbXdTl6U4vT+n6jo4ga8mhGZkJA5Nc6pykkcXiKAK8hClnu

ogi7qdJxojIMssuJYxxDf5QnS/0QeE4GOyyoZjqo2xFQdpOP7vbjf3+7qCpnFtWd04vqT+8sqrvI

j9up0jHr731cuXt66RB5//z2oiKsn1p8Fo7Bm9Iwrc1eXWA/ZaNPrb+zlOlG/fa3S0fJY+Hu6e5/

IPKP710t/9+pxWN/eue/cS0ROHNJ3UkAaYwupxatzsfWz5oVx+jcz+kP55ZO0n4EXuf6qSXORVcR

3I++c7qpI3Uh0JbdmJIO3Y0278stsO0tkDv0tp+iXMF+LJA7dD/Wymm3vQViDn38+PGp119/nd9I

DEXx7SoE1zhPsPrh1f3oa6+9dvPVV1/dol+bsiOLvPbaVoWDcwAABpdJREFU8dVXXz2+4XEH5W9p

0l6jXU6cePPmG8f/Y/WNN94wALutEl4+fnzD38+8/vobq/S19hEHx8QcWms9im0w7gUPLnl7S+Bk

EIyWzz333LLneeN37941T/8GuUUnx+E3Ct7oRocblL/buOPj4xNaNyY93Vj49NNPjxI+//zzo/SR

go7/jmA3Ock+pfwSfS2JH0Y75tAbEYjItkrYCO9m8DB6ELLKZlSGcSeLxWK/OyZZh+hJVygUetJ0

IoDuMgh/J7k7FT+wQ+/UC6feWPYmHMeZbzQaczdu3Nj6/WkoQYd03cTbC+CzHuTPSjssOow5B1mP

xF4Yt+vR1aEx4SanRsSbRX0ZpcmfUJq0BCXzbS7dE4zSjHYvvfTSKMqbb731loncpCGA3+SJKCfY

Bsyjvhzw3SQf2hPM1U6cODFPYJ39b7755iyvopnTnbhJvAXICfMx1kFn9GEd8syYwLUdWDa5zPMb

5TKW0fAjIhJC/3mMy5x6FnJuAlahz82XX37Z/MYE5UbHZz/pqR9pXnnllVWUxkaUB/plAusE0JcA

pDHykO4QLeSnHICxnS2hT3gd4KNOdh5of8PLE/lBS93Jb/UP7QMdrO3ZHwJ0pc0oIhPQXgC+P5Co

TOgW6kV8JmEgIh/o6V/m2njdsC/nBr0i6OczTygbbdb56YLpj566OjTuRJtT8268josw+RMEGAME

7TU4x9oXX3xx9Msvv7z+1FNPTSDiTNZqtQXiSAN6vHFt/iHuiMxqvV7n35xeID352Of7fglQBZSZ

s0G2gM44RzOn05NwgDCni8oOxqKua6wj6qZu3mMcQWSmnryONhqMOQEYB80aozfG4JeEk1jajQMC

b37PjfpxHPYTR/2++uqrCumQwhgaOAt56JBTQV0gexIwTlrwmj/Ww5L8wLPP2I72Q5u6GlmYyFm0

uaKc5LgEtKP8U9BjFvY5Cd5jtCH6w3wV111im3zoP0pgGzzGvtShXwhklijTAmUS34cszjnJ1+7d

u3cMvGXIoM2Io70Y0Bh4jnIMINlPHKrxo6tDW1IIKcM56CgWNYxyjRMKh+FXenMsI0LpkCYCRHBD

q8JYgkkv40bhGKl3Ooxa5XVTx34HBu8KwDghnJslX/HT0Vk3Nzf6N/wA2ksn249y2HPWryky08Me

Fdr766+/ruIGo4268do/Zt9Gk8mh27gyIOA04TIRkNN5gmqrgNF5IQssW9jutayyO0kZGRmhQ8ud

O3cYDcYR+VKduhN/Lzz0WwGMYhnlCoCdAk0HpwNPEMc+ANuMPjFxwBOXyXZkJD3LfgDXyyXbAPgY

7XjDoZrtAH/JrjbZOPqjokNjdenIRMcHxNJES7xpDo07bg6DmiUCRp8DpDq0VaSfclDZiM6CNEeC

70D4wRJztw0vu0ndg9WMKw+XeEZlXjsdh3UupZWAJslq2oNenxHS5WTnhSXIFmCPviI55nI1WHnA

PvyjmzP3Gm3THDo6MCZonhDFDatOuYR+5CG9CZc05JErMCBz+WU+VPUjpxstdGKU5nWb1AXOw3/p

wY+RptjXjTfaB1rK6LiCwLGYY0dZ+qpvtnP2pUxAjPkIaukFVghuUui03mE4NO9u8/SM5XQKzsLI

VIWhossml17SpemQGZdRNscJ9ckiHC9UuHxVn3nmmfDJuhsfnIw5nNmRgXFXea3AVamf5QPOphSm

JD4NR7wF8lMO6FJth37KWoOdv8O43H25+fDhQ7PaUEalUrkO/jJ2Cb4DmF0M4i2gz6QW4DXpBkv2

WTzrUcB4bXOZ5LG8xFugDItnfSMA/igbNx7sjhvtzVWO8xylMfWYQyOKLGAp5KeVpjPZJpL9xLNO

QJ2pxSGUR9F3nbkw6odQP4LSpBwo2T8X0PMBUwHHZZioEIgDX6wPOCODRL1kkwb0MX2ISwKisnnC

t3imHhj3CPD8jFVQxvohM6bzZ599Ngc4ZHc5yAuaQ9TPygRuDaBu3LjBlMag0T4JUIBwMlDn9fKG

EvJTDnCptmM/+wDPgu4YATtL6pNPPjH8vI5A92eDMvYJKnAr4OV4xqbg55wp4o2CiRPHA01yLmM8

5O1HJocI6I3ObGMMhesI26wTxz4C6I8AeM1Gb9YB/AyY3TGIOXSsJ2/sOAsgQnJ/W2Mv2jwTsL3j

LmJAhXOHHtCA24kdUY2r3hx3CaAX07wJbE3OMRVB+7E4cofeZdMMp16IAtKGBaYiu+wyO15O7tAd

TZN37EQL5A69E2ct17mjBf4OAAD//w0Ln88AAAAGSURBVAMAztmSH2zXGYkAAAAASUVORK5CYII=

--0000000000007ad198065200a9c6--

nk.ca credential phish from google Gmail part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 May 2026 04:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOZ2Q-000000007mF-1oiu

for dave@doctor.nl2k.ab.ca;

Sun, 17 May 2026 04:48:02 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 May 2026 04:48:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f41.google.com ([209.85.128.41]:38248)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOYTQ-000000001RR-28pB

for doctor@nk.ca;

Sun, 17 May 2026 04:12:31 -0600

Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-48962cd0864so1906775e9.1

for ; Sun, 17 May 2026 03:11:04 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779012657; cv=none;

d=google.com; s=arc-20240605;

b=hwVLpWMWC0Y0p2+gXgz4pPFW2fdfjjObdRLbd5MlktDQvi5fOhf52JAmNH++j3y27e

gd1G5AEUHU1NVycqutxCyAqRfE3XwHaRwgAuCaScJlDKZIS1iLuQxjGCv/cEzFGtYT2m

0Deey2o6RmB4puP+h9P2rlErO895dEAPvjc28RSkg3V7fDpnYYlKtMadEj2+ejBbSQKM

EbiJrplYC2VNcuFehO8BZOTR5BBBWgyrA1KFIb0ZSgCpGJygsnzCj051QAlQBORNHQIk

tsLm/cKZ+jO80llImetFTCLiu2vNFFhHALUX5ah5mu6VCClTi7n2Qia1Ar8tbBfK/js4

UEuw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

fh=huFvjdeAHZ4BptYXBdYUBDZU0DO/sJp4dgUdbCEePZY=;

b=XZupwBXE8Pmy2/ufviJxPMp1rRzXOjps+5UlMWQH5wDneDN0pWbCgc9dQxrld+g7qD

R4ZmyEjc+Np9eGyXWoNNDcYp3UdwHnc2ggDLQFN7o/R7mD6pnwq5342MdVfQLw7NOps0

7fPyjIIvo/ueIBcMXolaUg7ucD95l8TY8fLxh4+5ALnanaP259Kl7isMsQrngNS3HmWP

BDaB1NMoYTtyzhNqJwJ4iunYY246NOQ8+AbODFXk/Pl2fp1efJaZsqNwX5Cy215Yrf/p

tDC8qZS7bRTTT4A+vW+litD7fLKKAdp5vHcVRb2Kf/cUtJ2lJt2P8qVn+N8/0TSpEKWB

A4UA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779012657; x=1779617457; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

b=n+ym+EWZgf7waaAbsYmPdvSqSHLcKlXvNbAeb398BksR+/MsXZ7X9K2RDO4PgXTTev

bweEDV7NtRYG2qLkTikrC3pL5nXSf016sENC8+jiUow2QGNizzTlEHk4Fcxbq+g02D+4

Z8NEzY4V21U6ZtQDcSpazunVxIciQdWL83bSmHuLYAdbwwsy2AXXr0NckPbVcqXj/GSl

8a+SYCf4vGAR+pZU28E/UF9uxN9eUiKAEAV2uhNvsRZlzM97fvgcHZCm24ite4nL+RIG

spEOtSOuS3mpI58p6ukUzH1SBfggSl/qtGC/tQwXqBKWg2UQZ5T7s5+JjIg1BHcUK0wG

CAAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779012657; x=1779617457;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

b=X1Wo/rcOZQ3PmNjhZOtTjAIUpF0dgCaUebsZPKvLX4btzSD+3gphhylx60NxzxlCEj

kAVKoeDIOpiDpx64BC/HGlj7WP9Yr18+uqjYy8IjyMTMcn3SYg6XaQQClrqBYajrzHoO

5cx61rKNOtPmzOrPngmNAhKe4CQo3zsq7mhIYm4wq1wrNpSt/kqCLCoBFJhR29o8q29h

U6oeG70dum01g2YSy1FZiCYv9bmcWeA2/JIuUIa6Dsvt2Lh7wqHe8O0ZPrugbby96nEn

1QZKYL7ELJ2dm+64YQAWDLjJpIz2LHZCFgQu4v3dyaqnPs8qxbLXPcZyqz9ufesnM7u2

IfYg==

X-Forwarded-Encrypted: i=1; AFNElJ9nrzVJqPAz7PWnw3KVkjsh8hV6ysZ5YXNnXbDWi0lhdiz5TnkjaEQxvwg3ENkoHy7tNURpwXE=@nk.ca

X-Gm-Message-State: AOJu0Yw4MyhZO9cAiis9MnEq5m+S+6e2hcGUzZMi4YxyewD5qWHAPnxt

UZn4/yiTLqZBK9qMYHftxRGgMvDA84NosGSiuQBUqlaPeujSNlOYTDX6+LE7mc5XmyPMA0gQR8d

nZLhoeYOfHoENyPEhS9ytAWYsI+vGWA==

X-Gm-Gg: Acq92OHCI2QUAZowrv//WLkBawz7fht2TIaTCaajW7LnT9rj0DlEOg+21KizyKZXIQ9

RT47KSq6ZcHQG23eVgfJdhZ+zhwsZkRyZ8sGLvFu7xhRQ6OwP/SCKpHwYnwki2fb0R457B5ATny

+W0JbYuHbQANPvOykc+odKf1mpVT7cy+QVhQ4AKioSO7NpLaQCwyKl1ciGHbe55CN8jqBDT/Fo0

q5gqSY81MBcp7WtE3ocM2M7/3o9e04tXgPkB/Zm8u67XV4iqx5xso9vGIgEblThdUv2IOKMznzb

1BUkduFBUIGbnzOrC2pX+T+6xCPDwzT2dO8zFen6IMXlIQLpWg0=

X-Received: by 2002:a05:600c:4587:b0:48f:d410:605e with SMTP id

5b1f17b1804b1-48fe632143fmr78661025e9.7.1779012657127; Sun, 17 May 2026

03:10:57 -0700 (PDT)

MIME-Version: 1.0

From: EMAIL SERVICES

Date: Sun, 17 May 2026 06:10:43 -0400

X-Gm-Features: AVHnY4IHKzk_nagcBF7Iu1uTlXwtMCCVSfAB4e7ZYRhyOrSWNq9Vm_xqDjgfwuo

Message-ID:

Subject: Important Security Maintenance

To: undisclosed-recipients:;

Content-Type: multipart/related; boundary="0000000000007ad198065200a9c6"

Bcc: doctor@nk.ca

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [image: image.png] We are upgrading our email system to enhance

security and better reliability. To continue using your mailbox without disruption,

kindly update your account.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.41 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.41 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.41 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

[209.85.128.41 listed in dnsbl.ahbl.org]

[209.85.128.41 listed in dnsbl.ahbl.org]

[209.85.128.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.41 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

[209.85.128.41 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[djtheman1959(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[djtheman1959(at)gmail.com]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Important Security Maintenance

nk.ca credential phish from google Gmail Part 2

--0000000000007ad198065200a9c6

Content-Type: multipart/alternative; boundary="0000000000007ad197065200a9c5"



--0000000000007ad197065200a9c5

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



[image: image.png]



We are upgrading our email system to enhance security and better

reliability.



To continue using your mailbox without disruption, kindly update your

account.



UPDATE YOUR ACCOUNT



This message was sent automatically. Replies to this email are not

monitored.

=C2=A9 2026 Telephone . All rights reserved



--0000000000007ad197065200a9c5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



3D"image.png"
80" height=3D"68">
border=3D"0" style=3D"border-radius:6px">
>

px">

We are =

upgrading our email system to enhance security and better reliability.

<=

p style=3D"font-size:16px;line-height:1.6;margin:0px 0px 20px">To continue =

using your mailbox without disruption, kindly update your account.


yle=3D"margin:0px 0px 24px">
er.app/" target=3D"_blank" style=3D"color:rgb(0,86,179);font-weight:600">UP=

DATE YOUR ACCOUNT


e-height:1.5;margin:0px">This message was sent automatically. Replies to th=

is email are not monitored.


padding:12px;font-size:12px;color:rgb(119,119,119);border-top:1px solid rgb=

(221,221,221)">=C2=A9 2026 Telephone . All rights reserved




--0000000000007ad197065200a9c5--

--0000000000007ad198065200a9c6

Content-Type: image/png; name="image.png"

Content-Disposition: inline; filename="image.png"

Content-Transfer-Encoding: base64

Content-ID:

X-Attachment-Id: ii_mp9m1ni40



iVBORw0KGgoAAAANSUhEUgAAALQAAABECAYAAAAoXx8rAAAQAElEQVR4AexdTWzcRpZ+RXbLf/EG

coC57EBIFMwGWKx3dyLfktOgfcpZPuTPziaQEce2lKwzkq87B0uxnbXkrAMZCBInQQ7WOSf1MaeF

NcHAhzml7RFmLwt4ejxJnLi7yZrvq2axSTa7m61uyZJMgY9V9eq9V4+vHl89FinJkfwnt8AuskDu

0LtoMvNLEckdOveCXWWB3KF31XTmF5M7dO4Du8oCuUPvqunsdjGPR1/MoYvFosZla6UUy2XU+z1K

YCBvFIDa+cdvfndGH7kI+GBaP39xWh++eGY2y1W9+LuZ0q8vvQued/WRDwjT+jf/Nf1dFt6cpn8L

xBzasmtNf5SpF198cdTiHvfyhz0if9kncm9/E6oHslnkrwdk+V6Ej/zVon8yG3dO1a8FYg5dr9dj

/N98881UDPFYN2AqDQhs4Ph+UOtcHL54bvbnQmFcadcQ+QqFlpVvz18to5Yfm2CB1gylC59NR+fY

XoYbu/D26P39MluPEBY9kSd+qM3l1ts8C0TMnToIU448SqeapjvSOXCAdhvVjMoB6b6H/tzt8x9X

gmZebIIFejk0h9z1UZoX2T90Nt0vrs2MNwoyb1IMCKZTa9EVadSuo5kfm2iBzrPSGnQc1UlAfhgL

0GQE00g9FUXm2zq0LCA6V9vwOWKoFug+M62huHy2WjuzxmvgamOhtBmXcfjiTMnVatLBRhGBY7ie

lNdPX8mjM42xyZDVoTn5hE1WZ1PFc5Vh5LQwsRmj/binFZ25m094oqbzB8HNMHaKzKwOTVY6BMsc

Olhg7NrZqYarzI1CRyYZ9vSv3z53eY31HDbfAv04NJds5tObr9WOGCFuusPYpvNFzXJTg+CIJ1p5

1fvugzw6b+F8xmelbWBZSaCYfyZQeZMWaIwUpkSJueFt7lzw/IX7pz7OHwRpoC2CLA4dnZDJ/HV4

+8z86sO3x3/ao2bpyHgWFG7XcZuucnZxoZ06x2ymBXo5NJ05GqVH89fh7dPxYG9x1ncUX0KZTtcX

OfiT5N9rGGts7amXQ1ObZJSZIjKHpgXGlmZKBe1OKX7nAWB03lPX5dvvX8m/12iaaEvPWRyar2rD

PVSlFPPEYTs1dwaYn/cL1KWTwbjNGJWXpE32W9pO8oRv/OiwUQJXiUk1mG5YfOFh/9H51xfOlJ7+

6Mzs0x9Nz44ZmDE25jchvGkMfHQu6APN/8ysjgH+8drMKuHppZn5wxdmktdoVYqVY4tnJ8aunWnJ

MuNBZkr5y2vTs78MaA9fOst5ismKNvBgPP7cFV4DZIPnny+dNdcQpUmrj300M/X00nR47Wk0SRyv

tWknq3fTXlkcmrJCh2YDwMlHMZRjFVJuAez+cD8lvyvupAuNH5WVnGw6dLTf1qFK+4EsIoZk+2lM

hBJVslt0ylDwe40rDAKmlfVUdGRCiTOvlTOvpAgoLD9z9ZxWBw/8RTmFVQMiwLMPoAslkUJJYXy8

yCk5Ss029qlbnGjp8vNPV2ZuqoJ7S3RhXoKxXF2cd1OAejjamXdAq0D7sOje+rfL0zc7iceb0MqB

OvV35kWc+R/3qUzf1CNdW/ZdZ97HGA2UfDnVaQyLLzh6kjpRRwJsMco+h6cMwH3UcAlVzSgNg2bg

7E7Cve1B5cx3elCFnt1H32AvH/zI6iM6ayVCYHtPQ6rO/eF8r+HYQSi4AyjQkA4qGIq6I6P3D2ra

1LSTp2euTk/WC8r0k4eQpBGhSxBsj2srUkf1b3tk8t8/mDYywo5IpaBbO2MexPzi2pmu80vnJR1s

aR6meT2wKINRRGp7Ffv9odwiosuTP2vjnxiynbgDZoEOghcFQgBNp8iIrsxHMmoysnHfthfEBsCD

apoB1qBnVA5lR/logGi/rUdpOteVgz1nNe4pEQIJ99X13Pr5jW3TeRQQAPavxXMaFU/V5+CzXUG0

UxHtihYXerjGHQMxbYVWfsze3ImhfOg/1w4OxnXmIBiAMUJpjrhaYnLCLlQ8LQh+jig8Tzi+IyPi

pM0NKO2hw37IpWwpaBU6q6VKlg+LqtR0fpF9Nanal1dOkrBLuwwHiToFB+14YV3kdOuifD6E9oJu

MmwfHTYqh7JtH8tkv6VlXyowisABTJ8SGWWdOALu8vIfzg31e43K+unFhfXTl7pC0VfmuqgDwSjX

5RSlKXqCMZLyP8B4Ubi04AZjUKzCRbs+a+mgfV3mGHQ22Eg0UqJ0yiaWkZYySW/Bc7s7NJ8nGvBc

y1f0hXNpBAJtyqwnTnqUdhhROipv29Y5SVHldLSBOpbNcTwUmTwOzS079tcaIgrx3YL0+qE3NmF/

rRdt//2/P7+0BttURbvi+C4ibiGMwGnSfhpRE3RkOr/tf1AUOXy5c1rjOLolE9etdR2rQpPbaRaZ

z3w4NBEh4OBT7LCjdCB62xfcozdKckJcjd2fwgjtYXBbdSrQNzc4WCHDr5FtRLSLKK3g1QGMPn8h

fXdkbPE/J7S4oy5oaUMUxqYIDvJ9UVpOm1DCV2qCzy0EH3eCwniWpF+HJt915tIExzHsHR8QSLwL

wFwCDW4q9qR9rFa6wskgcPJqRSfz1pkV07n0O3fFekhHiCGH21BYBaxE7aKGEIpzp0MjBaBnEFyo

ppz0FMJRqsR+B5Gczqw0HuyMfEh2NFNaVNIOyCMdgM8BXBUsFce09UwldhQYpc2d5PvQVmQWuC1f

ajMpO2QiOjUCQkuqJycxEebpnEjuAtz/B1lm/XGGgw+k7MI1cBgzIE9OjbZKCSItXdARpd2yVrqZ

OtBRlTuRlsIx2mMOWv6mW/kzB3N46gewo1DFw+GKUhALRkTpx/Z1+PrZK+WG0ivYLhMuk1wCFR6C

uD0G02zTg24WgGKZRc2sdE1Zt89fqYx4umJt8lMREbXZFTujvwRo2k7Lmu81HygNToF0ZKQtSqdE

++ZNAHIefTs0mQALfjM6C0ul1JbnjtBhWxxYjOdEi1mxqBAjtueoeb7hY/txBf6WjgfvYo77sCCj

fDsZtQXfOqJvlLdKwfPlYK1WXp9eWsMzQRV4Q9pABDeVyKlWaH5vThR2N+TJ7weM0BQE4IMhUw9U

sQ2uNR8Mh+HUvCPpE73AjLsdTv9/6krFEX+B6Qj14WT4fPH0ZGEY9qDIHgCvEUJA5heDSqeCtAFo

lp3oovgIncKOisT/fkuU0tY9t4HtO088xxNOprjxnNixe81YJfbXuY+8ZCIt6iZd4XNJLcFD2Q9s

tFee7K031rgaEG8hoqlFZS6jX+GR6VE9HDI68gajDo8E/nxqcaFY1zEdFF4ZIwfkjf5IdMoyKB/v

stBtiAYR1zGeHHArJ5ZH+47Cdp0npBnxWlG20JA14piDa9BEVzpG+YYrYf6MffRw/zkYJXprW1Tm

sizSUgRcjK4xpYHr96BzUsl+4CgGiTkT2lt+HGjISe50cDIInJCH+4vLW67INhnwNt6YOlqvMdIy

HcY6Tv8Itavh5Ynpg9NrzbeLza7oFhwx7hORPBo8xIVgHyJDhAzk0BRznacIDPqihcsOHbQfIE9E

hc2vqpQhvn3/ShlbSCvsI/ABsY4JGLva+QVBiphdhUK2UebNTVCiRsc+fNusWCzriLQMALxg5dcY

wFiV35+/3HwxY1q4DXQrZxYVqaO/5rX40DTHICkHBTDtiEbHcDlg526CpKGSbV6rV5c5BJwqwHzI

w4cihAzsTb+dwS6USKCk3QEKEVRpH1tyviA9EMctmijtjOwp8YY3IFKN7iPzylW48sMejrRSWe2G

GYCnNPLn9u9mwEERAwFeMAzEv2OYGVEYbTopvP4eHhA9vnAR8UHkY2ZEybjw9w3R3m4HH+/60YnX

QyfMynPnzOJKgXd3wICcvemQWkxJeSKaQTGgaBb8HqRZE5hPjY99OGNAiTIRXvij2/mIHoZDM+1g

7kt5jz3cNb9HqCt2IjlpP+xx5n8VLLfbxUD9OKZZaULFffEc3q4homvFbehyrSDgEcGDoInQ8NIS

7RIwtqWMvueFKYjgJYuMuCUDAYMpfNXGR/wwHJpytjpK85cComDueCqyHeDJB3KyEAl/yBflwV53

+VHrZt2wH2e2OkcCrUVlKvFgWOa45qbAasUv5WykZRry5PcR5w0kcqVz8WIm1JMRnRD0k48vtYJm

rBiKQ+PVN6O04AVLTPgmNninRyFDjjosbTg9FtJl8vcJ99ZlhVSWQim39MjfIGK26ViR6GjV61Hi

ShTAJFI9SBPdjlZhtOW4SDtmlbk7fNnb8CvJfWTLvrchZdKz7QgitBLOtzjg3VdPTzeatDwPCHwd

DhHmoyWU+QELuA9rc4hOVU4AASjxXHnkbxCpC6HpVNQqOzBiWifLynX73BL2lbVJSc24qvUafATp

SCc5uPfClEKJjKtI/jzS8MK+JD/4kqgNtxe0xu2zYfbdxYh92Irj6zAV4740nGhctuwNYrs9mfpS

D6ZDpmwnSceoOJqxOo7p3nIQpTkerl94UxDYhvN1dEy/LmFkR/YdG0D7ragf60ADMnEezlGBQ7c9

sQ5H9M6Usn766oLrSXRbExeCB8QLzf1YNLb2gCfSqeyg9YSjWnxa2W9kjspwPH8tOm7Y59UjThti

TYWpiObf1Dat4KT4Gt1r2+YLek0xTIemQJNLs7JBYJ7EMN8LkuLNkpZE9mjPoz9tHKCHd+z9ufkP

ghiVKJUT6x9Ie4MIb5MATL5K6iwQ8Bhe0Dvdv7OgHsyjtXLkhz1u6V8vN/9D1/MX28t/+fBdPX51

GjZqpQkYoe/DR4TmuAS7L+0rqdzq9d8Mop+Gwpk5sIIslp1g2A7NO47QabwkfuCIjgdRLluEpOxk

e+CxkgKb7e7nP75v/kHQioJbkJKT2sAbxM15QKRzc5R0OPhjY0W0rlIHOJR5+XN/b/O/evG/cxnY

58o9wn6Rv+0RabhxWYia1YYPOXF015b5ii6xUvmis/hJ27xq1Z1v2A7NC+vHcbgc8zV3Pzwcg8Co

fP2FF14gP9u9gKsH/zxXm5F6MQ7c/3NtTsGRHDg1HYkRkg+Ihy9keYM48OihAOb1e+v6GHYUjb2p

Twi+Kw4BOhoc6ikZyYp4+hjlhEIzVvbXdTl6U4vT+n6jo4ga8mhGZkJA5Nc6pykkcXiKAK8hClnu

ogi7qdJxojIMssuJYxxDf5QnS/0QeE4GOyyoZjqo2xFQdpOP7vbjf3+7qCpnFtWd04vqT+8sqrvI

j9up0jHr731cuXt66RB5//z2oiKsn1p8Fo7Bm9Iwrc1eXWA/ZaNPrb+zlOlG/fa3S0fJY+Hu6e5/

IPKP710t/9+pxWN/eue/cS0ROHNJ3UkAaYwupxatzsfWz5oVx+jcz+kP55ZO0n4EXuf6qSXORVcR

3I++c7qpI3Uh0JbdmJIO3Y0278stsO0tkDv0tp+iXMF+LJA7dD/Wymm3vQViDn38+PGp119/nd9I

DEXx7SoE1zhPsPrh1f3oa6+9dvPVV1/dol+bsiOLvPbaVoWDcwAABpdJREFU8dVXXz2+4XEH5W9p

0l6jXU6cePPmG8f/Y/WNN94wALutEl4+fnzD38+8/vobq/S19hEHx8QcWms9im0w7gUPLnl7S+Bk

EIyWzz333LLneeN37941T/8GuUUnx+E3Ct7oRocblL/buOPj4xNaNyY93Vj49NNPjxI+//zzo/SR

go7/jmA3Ock+pfwSfS2JH0Y75tAbEYjItkrYCO9m8DB6ELLKZlSGcSeLxWK/OyZZh+hJVygUetJ0

IoDuMgh/J7k7FT+wQ+/UC6feWPYmHMeZbzQaczdu3Nj6/WkoQYd03cTbC+CzHuTPSjssOow5B1mP

xF4Yt+vR1aEx4SanRsSbRX0ZpcmfUJq0BCXzbS7dE4zSjHYvvfTSKMqbb731loncpCGA3+SJKCfY

Bsyjvhzw3SQf2hPM1U6cODFPYJ39b7755iyvopnTnbhJvAXICfMx1kFn9GEd8syYwLUdWDa5zPMb

5TKW0fAjIhJC/3mMy5x6FnJuAlahz82XX37Z/MYE5UbHZz/pqR9pXnnllVWUxkaUB/plAusE0JcA

pDHykO4QLeSnHICxnS2hT3gd4KNOdh5of8PLE/lBS93Jb/UP7QMdrO3ZHwJ0pc0oIhPQXgC+P5Co

TOgW6kV8JmEgIh/o6V/m2njdsC/nBr0i6OczTygbbdb56YLpj566OjTuRJtT8268josw+RMEGAME

7TU4x9oXX3xx9Msvv7z+1FNPTSDiTNZqtQXiSAN6vHFt/iHuiMxqvV7n35xeID352Of7fglQBZSZ

s0G2gM44RzOn05NwgDCni8oOxqKua6wj6qZu3mMcQWSmnryONhqMOQEYB80aozfG4JeEk1jajQMC

b37PjfpxHPYTR/2++uqrCumQwhgaOAt56JBTQV0gexIwTlrwmj/Ww5L8wLPP2I72Q5u6GlmYyFm0

uaKc5LgEtKP8U9BjFvY5Cd5jtCH6w3wV111im3zoP0pgGzzGvtShXwhklijTAmUS34cszjnJ1+7d

u3cMvGXIoM2Io70Y0Bh4jnIMINlPHKrxo6tDW1IIKcM56CgWNYxyjRMKh+FXenMsI0LpkCYCRHBD

q8JYgkkv40bhGKl3Ooxa5XVTx34HBu8KwDghnJslX/HT0Vk3Nzf6N/wA2ksn249y2HPWryky08Me

Fdr766+/ruIGo4268do/Zt9Gk8mh27gyIOA04TIRkNN5gmqrgNF5IQssW9jutayyO0kZGRmhQ8ud

O3cYDcYR+VKduhN/Lzz0WwGMYhnlCoCdAk0HpwNPEMc+ANuMPjFxwBOXyXZkJD3LfgDXyyXbAPgY

7XjDoZrtAH/JrjbZOPqjokNjdenIRMcHxNJES7xpDo07bg6DmiUCRp8DpDq0VaSfclDZiM6CNEeC

70D4wRJztw0vu0ndg9WMKw+XeEZlXjsdh3UupZWAJslq2oNenxHS5WTnhSXIFmCPviI55nI1WHnA

PvyjmzP3Gm3THDo6MCZonhDFDatOuYR+5CG9CZc05JErMCBz+WU+VPUjpxstdGKU5nWb1AXOw3/p

wY+RptjXjTfaB1rK6LiCwLGYY0dZ+qpvtnP2pUxAjPkIaukFVghuUui03mE4NO9u8/SM5XQKzsLI

VIWhossml17SpemQGZdRNscJ9ckiHC9UuHxVn3nmmfDJuhsfnIw5nNmRgXFXea3AVamf5QPOphSm

JD4NR7wF8lMO6FJth37KWoOdv8O43H25+fDhQ7PaUEalUrkO/jJ2Cb4DmF0M4i2gz6QW4DXpBkv2

WTzrUcB4bXOZ5LG8xFugDItnfSMA/igbNx7sjhvtzVWO8xylMfWYQyOKLGAp5KeVpjPZJpL9xLNO

QJ2pxSGUR9F3nbkw6odQP4LSpBwo2T8X0PMBUwHHZZioEIgDX6wPOCODRL1kkwb0MX2ISwKisnnC

t3imHhj3CPD8jFVQxvohM6bzZ599Ngc4ZHc5yAuaQ9TPygRuDaBu3LjBlMag0T4JUIBwMlDn9fKG

EvJTDnCptmM/+wDPgu4YATtL6pNPPjH8vI5A92eDMvYJKnAr4OV4xqbg55wp4o2CiRPHA01yLmM8

5O1HJocI6I3ObGMMhesI26wTxz4C6I8AeM1Gb9YB/AyY3TGIOXSsJ2/sOAsgQnJ/W2Mv2jwTsL3j

LmJAhXOHHtCA24kdUY2r3hx3CaAX07wJbE3OMRVB+7E4cofeZdMMp16IAtKGBaYiu+wyO15O7tAd

TZN37EQL5A69E2ct17mjBf4OAAD//w0Ln88AAAAGSURBVAMAztmSH2zXGYkAAAAASUVORK5CYII=

--0000000000007ad198065200a9c6--

nk.ca credential phish from google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 May 2026 04:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOZ2V-00000000810-1J9a

for dave@doctor.nl2k.ab.ca;

Sun, 17 May 2026 04:48:07 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 May 2026 04:48:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f48.google.com ([209.85.128.48]:38761)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wOYTQ-000000001Rb-1zIH

for root@nk.ca;

Sun, 17 May 2026 04:12:24 -0600

Received: by mail-wm1-f48.google.com with SMTP id 5b1f17b1804b1-48fde2f2d61so2349675e9.3

for ; Sun, 17 May 2026 03:11:04 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779012657; cv=none;

d=google.com; s=arc-20240605;

b=bRp9FNdcdC6LjMGQwq6o9DTU7BwxXkDO36683wwrLjOzf0GkjDneWpYxQQFqqZmfY3

hIwJKGrrP4StH96YfxIPg2q9Ui+Z+PNR+04zz4BabNu48XG93xjPHJIehkprK3DwpMlS

Ob+z4RzDNHneQBCkXEs6Yv316ZRX/RBU1lISQ0YDuNlENpIasCQqG8cHafp7srndvyR6

nJG12ZaaOBunYMobOT9FNnKlpKpDql8F2bQnYLjzgttI1tiPrm9F/SYsvE1iAX3zZxOR

SvgZMe2CGTV4jxNB+n7ZNhiTB/In88kOukjyT/o7EhTMQWvhxaq35ehsKlBVDeLebR/A

F11g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

fh=dZMD/YIwxQxUE3/qWdO57p/oSIYpjL4zh0DhygwkOiU=;

b=WUbCQo4VnvpZ0glZE/e25/zEvfACBNx9btUOsOv+eqnYNbufNsXDgE46zUF5v5Llgs

9IPKnD+tl3nR9a7X5NwfyEQtgasCEIFoG7NaNvrKfvNSwnwhQPNcexqRJK78sb6xhPLI

djp8LADMidYHYG5irU0lHKnUTSR/JAAEHZgekkKGfohxR9FuJOs7FY0BqSWbSpt3BaR3

Mi1j+j4+ROaV5mgsW2/1vEw6GCGyjda8F+banTQwEfXTE5Q87vFryXU3xSXr7UpkBc1b

fZ1peyOcmRcYOTzN3NBj7tJ/5bd560IRdgJo+Km476l6+ckuYYNQ923O8hhUIGOcF3Qr

YQ8Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779012657; x=1779617457; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

b=n+ym+EWZgf7waaAbsYmPdvSqSHLcKlXvNbAeb398BksR+/MsXZ7X9K2RDO4PgXTTev

bweEDV7NtRYG2qLkTikrC3pL5nXSf016sENC8+jiUow2QGNizzTlEHk4Fcxbq+g02D+4

Z8NEzY4V21U6ZtQDcSpazunVxIciQdWL83bSmHuLYAdbwwsy2AXXr0NckPbVcqXj/GSl

8a+SYCf4vGAR+pZU28E/UF9uxN9eUiKAEAV2uhNvsRZlzM97fvgcHZCm24ite4nL+RIG

spEOtSOuS3mpI58p6ukUzH1SBfggSl/qtGC/tQwXqBKWg2UQZ5T7s5+JjIg1BHcUK0wG

CAAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779012657; x=1779617457;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=J8oMCVHrO3Cvu5hpS0KgOpvBZmqkFtzKtx/mJLaTmcA=;

b=PCLa/H2Qo06gXnlg+2gNGJPV6Rd0pZfEzmR+2kJ7zMs5zuIM+wM/4nNoh1zJItndag

83MeGVPwVKQSM3QGexPvXtrxuVSd1lNki4ol8wSHWPe9AEQdSWLRaFV2Enegiub2ZYj2

vYTp7K+vnFsU+15pkkJySlnbqzz6faFUH0TXWYsytjXHrwj1LA3mybldqyoi2Aa8gdWn

ZAEw6uPcqjA8CKkwpEpomzJmQF8xxFF3fwJR2CIOlfX2ynkhN1cxccd4QYzLyHBfXCDB

nIonw/XFdUYlC3nD9aiR1hF5Sn8zimlJ+83Pply529Mg4Fp2gJG9qybXKdbtf3kAu50u

YZeA==

X-Forwarded-Encrypted: i=1; AFNElJ+WFiZhI99Qx6JFCYpr2i5g0n0QAXoYQ90QVv2S0F3Tbg2HNA0rTcPjXksuUKkArwWJkNeV@nk.ca

X-Gm-Message-State: AOJu0YzS7hLbydH6/8KpBrHpdns2iK2nuYhUJLv4aPJRpxNNSM29uWrt

t8Vtkz6UakSAmtURyHAmU0zlJS/LwBjEjmw7CyKZJZmf940Gi4uiNhnGC9j85My8+bIaPkgBrIN

ChUPJSJG5jyEogBLAYGS+HfVyhIu2vw==

X-Gm-Gg: Acq92OH4t7cZ6U7Gh9OshTi3oLOy8HH3BV0J7J+vgOBz7L2YlbWERQObKpyEUTCm0TB

BNYiodUNDQZId3UfqF4PB1mk7+6cw1gzx8THsj9iQDOvuCvGhbrpp7AhNjOIqKfqjqXIkCMEsPj

Itqq7yvcnZJrIIk9pg8kKP/UKBA3MJmfsHZaubQF38LXgPMWERBCLE0aTG0f+7Qgm+eEKCZ9FPl

w4ym6vV0DMAr8kz4evnwpKOk21s+ivv3Tz8i/8O5mZpgp+29trRPrLDnxlfiWXL9LZb7ZibTHGs

2yKwqwPYsrJEF+cjeaHOWzW/CpRyTeSJA0iWbWCbmEHKssopUPw=

X-Received: by 2002:a05:600c:4587:b0:48f:d410:605e with SMTP id

5b1f17b1804b1-48fe632143fmr78661025e9.7.1779012657127; Sun, 17 May 2026

03:10:57 -0700 (PDT)

MIME-Version: 1.0

From: EMAIL SERVICES

Date: Sun, 17 May 2026 06:10:43 -0400

X-Gm-Features: AVHnY4IHKzk_nagcBF7Iu1uTlXwtMCCVSfAB4e7ZYRhyOrSWNq9Vm_xqDjgfwuo

Message-ID:

Subject: Important Security Maintenance

To: undisclosed-recipients:;

Content-Type: multipart/related; boundary="0000000000007ad198065200a9c6"

Bcc: root@nk.ca

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [image: image.png] We are upgrading our email system to enhance

security and better reliability. To continue using your mailbox without disruption,

kindly update your account.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.48 listed in dnsbl.ahbl.org]

[209.85.128.48 listed in dnsbl.ahbl.org]

[209.85.128.48 listed in dnsbl.ahbl.org]

[209.85.128.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

[209.85.128.48 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.48 listed in list.dnswl.org]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[djtheman1959(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[djtheman1959(at)gmail.com]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.48 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.48 listed in wl.mailspike.net]

Subject: {SPAM?} Important Security Maintenance