Blood Pressure monitor spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLZI-00000000CpB-0isw

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:40:32 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:40:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f198.google.com ([209.85.222.198]:61507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woL1i-00000000MiN-3ZYw

for sales@nk.ca;

Mon, 27 Jul 2026 07:06:02 -0600

Received: by mail-qk1-f198.google.com with SMTP id af79cd13be357-92e9a2b95b5sf472414585a.2

for ; Mon, 27 Jul 2026 06:05:03 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1785157497; cv=pass;

d=google.com; s=arc-20260327;

b=UN5EKuWR92tiefQHU+f0mACNow8/8omgrvZ8hh3X4OIifXJos5BKSlkdfFiLFFJzxf

EpPMKBuZFN0VwdysyOZQ/T+xX5MzUepgvEDYT8UUIUzC/k2o/ucDmhqhb9jvGdeGO8ak

WiN5GSLqcnT5e2CapgqKnpclFvxeOTXCxPO6o6GeFRl50ECJmC/OE6NmmViEtCGQtGTs

XajBdK4ul14NK06ilum+d6WSFiSb9kwBxUgnYHdgUwKzOQkzclNHWvFpoORX131XhRGj

CpwQijG6788ZEX2xxosbb7oNaPZDAzcsdOB08wy9j1k11kT/wJwAa4BvKukTZXYEsEyH

AICw==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date

:references:in-reply-to:mime-version:from:sender:dkim-signature;

bh=4zLetRGwSElvBGN0PXM+2MK9u1PsELxH1J5+en8rchI=;

fh=sjW/uzlleb96xbFXa4Jemi4pDqz10BI/DkRr3XjJZZM=;

b=si20HqoId10xu5a3fj6OKHFx1CpLaj3TAYttf3M/aKFlHzJU0dbgUiHRt+uj6kQ97O

xATF/VYZiWl+Q8QBgqIA3DlAr/RYM6Jxigm5NJWqMiaCnYkC2BUO4nK4wZE0UlHjn4aW

n/cIqmrKNXx26RKdGxSFi3s6fLPG+TAP8BetICYB0rTP9qClWvPtyLEIyw4pXkubiY18

gLZO7d3l3hm0mFcVYCnb3XocRvuAWdYELorRMS/2EhhMYS18ZPW1YyU087bs5AxzAx43

dkoB1/zuHUys1mGUsiM5TSHsITgLazNk7BrZuQiWTLQWaAJu6fQf/LS4Pq4djPaD7TfW

TQ7w==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@swashaa.com header.s=google header.b=ZCpw5lJ9;

arc=pass (i=1);

spf=pass (google.com: domain of contactus@swashaa.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=contactus@swashaa.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=swashaa.com;

dara=neutral header.i=@voguepolis.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=voguepolis.com; s=google; t=1785157497; x=1785762297; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date

:references:in-reply-to:mime-version:from:sender:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=4zLetRGwSElvBGN0PXM+2MK9u1PsELxH1J5+en8rchI=;

b=FonhSXM+1PpWykVSnR2f9ERBWKeWyF/CupnQtOnVL9tawYPKjk1BaB/nqPywD4z8uk

4OVVPDnK+xpVtz00/WSyu2LacPMEfVg4wv3bd+607zEkjojlmWtRCX3KIvkwonhcutp/

TsSxYMNP8MRX23/f6PlB57NZBUI8vX+WMp5nw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785157497; x=1785762297;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:references:in-reply-to:mime-version:from

:x-gm-gg:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=4zLetRGwSElvBGN0PXM+2MK9u1PsELxH1J5+en8rchI=;

b=YbmrUX/ZwsjysDaa9Yy55AfpglCoCZrZ2GKsc92Lz3Uoe3ES+7cvh706irCKmJgcXH

qi47fIHOjnByhcAukOpZiJXFz6H+lBnpLyGZU9V0QxpwsgYtzJGn04ZKuQ9r0T7A26lP

Zv2W0638poFfGEQIy1BCLIZJSAESkH4OCyU7ZxzF9D2pCXifUHxSbkuocBf6IWbwFbFg

sB86DylfV+wGoBb/SmQCWe5y0B1kvybyVopaUueUcL+VSChgCWu1hRFPTwydzU8O0DBi

4MJ5XAFzgvdK5kO60YmFO5635AI8eXsBjIUO/jfPmAaG5D3ohslFqYdouZyrR1cr6wk4

wzRQ==

Sender: k1@voguepolis.com

X-Forwarded-Encrypted: i=3; AHgh+RpqWDqAY8ZaTJMIIyfaexr6lzdxgDMqL5xRaV12t4JitmARpzh6aeNEXuVBuSZUWllEXYtAXQ==@nk.ca

X-Gm-Message-State: AOJu0YxM8Et6Vzpq022urYBHqsz8OJOISv5j8UglXeRenb6ZGtFvHlEn

YbOebrFGchE+/dAcd2xRDbBjD2Tx17j9ZC0sVlWFiBLRZvz5NHB5B0H0NJWjOzIkkLI=

X-Received: by 2002:a05:622a:2515:b0:51c:7b12:1212 with SMTP id d75a77b69052e-529a8758e57mr96829681cf.80.1785157497299;

Mon, 27 Jul 2026 06:04:57 -0700 (PDT)

X-BeenThere: k1@voguepolis.com; h="Aa7YSPSHiJVpQXjTNCtX4YmhmlQa5nrAkbSFKPSrF+nzX4kidw=="

Received: by 2002:a05:622a:8d17:b0:51c:1d7e:a33 with SMTP id

d75a77b69052e-5283a34a31cls103943041cf.0.-pod-prod-09-us; Mon, 27 Jul 2026

05:58:28 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AHgh+Rr+47FxATBO4RyGAWPTe82mMxiNhiw80mgIQzf61o9ukS4LIiWTE5j495Xn0cBrP8JtAw==@voguepolis.com

X-Received: by 2002:ac8:5f93:0:b0:51a:8b64:69e0 with SMTP id d75a77b69052e-529a833afa6mr87124141cf.11.1785157108684;

Mon, 27 Jul 2026 05:58:28 -0700 (PDT)

X-BeenThere: sudfdfvvcvcvcvpport@voguepolis.com; h="Aa7YSPRIV7NCKJcCcK+5GdXy3ZbFs0uFAL052mp9g3WqNNtH/w=="

Received: by 2002:a05:622a:1f0d:b0:51b:f30e:a1c3 with SMTP id

d75a77b69052e-5283a6f725fls125244291cf.2.-pod-prod-09-us; Mon, 27 Jul 2026

05:58:28 -0700 (PDT)

X-Received: by 2002:a05:622a:420b:b0:51c:84f0:d8f9 with SMTP id d75a77b69052e-529a86f4239mr81239421cf.67.1785157107785;

Mon, 27 Jul 2026 05:58:27 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1785157107; cv=pass;

d=google.com; s=arc-20260327;

b=Xu3qbzYmH9hFXDIRPYeNChVuwZqu+SU2Ss7LuigyQE18ntKwqaslSmrBMTtFOGTJ3l

ZSyQNPiwFSIabPV23yuqgsjnlMKj0cwgeQF8qttt7mdx7xhNEi1NJttpju16Mv8QwjIA

GbhXLIpvxd0iZdyk8J5daHkRIFsc9567H53qL81jPR1qhlvc1gNRJd81ADB3lO7yF7SC

570uIrRF9ocXf6Dlq9h0seL+5o+TBrPFfcPxRnbtJl9dBAOdgFduVIwQ6I3Xt30eQIin

7bvz5IsHzdsxEmOqQfUj4nZDUkug8jLPgKQRveALuG6JSljGyG/WDkqoYSzK2FgcZCZZ

+dUg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:mime-version:from

:dkim-signature;

bh=ffvTAm7xuYpyBOv8EEmFhwcDDddVFzcqBAy2wt0pnZI=;

fh=KVZQdp7rHnhI7pfXJtAgspxFVb2FWzqhwzaPCk3sGKg=;

b=ge42/MFfUa1ggYUH1XLQF3liCGuNjclAdy+hOTf93YZfe8hTO6uh1TC0aysuZFlY5R

oxTmvpKMslcEWSi90XrrNn6O2zPgvSgK2P+stKWhHQMSwgiPdOTvfhqBZTigO5/bdHfD

b6BZW5UyC+pV5vHdWDN6wD1umqi4rtKpgD8I5PKluiRrc9w6lldYOKspXZCb6aTVtQFj

PsgXHkJbiSz7mJIs7/04FuTDAr2lGK+Zv6ZBfL8k9538Wp4whyqpxvg92e2yYK/Dx5wB

ELXAWBRPCc2mFL+NHFbKQo4bUAcb72rVLWIMxC7KGsEJ3zkzIRoBdEp2HECw2qxJhWxr

YLOg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@swashaa.com header.s=google header.b=ZCpw5lJ9;

arc=pass (i=1);

spf=pass (google.com: domain of contactus@swashaa.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=contactus@swashaa.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=swashaa.com;

dara=neutral header.i=@voguepolis.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 6a1803df08f44-907e86790ddsor33753556d6.7.2026.07.27.05.58.27

for

(Google Transport Security);

Mon, 27 Jul 2026 05:58:27 -0700 (PDT)

Received-SPF: pass (google.com: domain of contactus@swashaa.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1785157107; cv=none;

d=google.com; s=arc-20260327;

b=a/EMvNpeZsoUwkjfKCrZQCnepzeTbYbRxgSENKp43ASglhhGYF+CurYnnfMFM3k6eR

+BM9hEDOFuFHlIH3G4LEKen/lTAnPXNrqcsLY4u9UJezH8xS4F6FeoRPHGB+ng13LYfm

yrJbEURJ8Gyh16OMxKOeEVnPKZxjpqxpkKZteG73Q5Hp/Vcgs6hecfGWZ8440HI7ZomK

PXaX6ySGiGlEVUidvYOhQ7DFLqwuyKYv089o6JKolKDrQtEANo/ycXLdZMPMRxCZlDeq

SZokmz+EmrdRqIWXoL1K6DyNlBz3hDQUyRGFgKozqTf/jYOWJ/njD+sQRv7qj6CxJf7Y

davA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:mime-version:from

:dkim-signature;

bh=ffvTAm7xuYpyBOv8EEmFhwcDDddVFzcqBAy2wt0pnZI=;

fh=KVZQdp7rHnhI7pfXJtAgspxFVb2FWzqhwzaPCk3sGKg=;

b=aBha8QUt/I3EXjSkuqwKhbNTrJrpr1NwsuwTO6rlI0lEv1TPOmr5KLLK7j+oLxSbs4

ggTQE/CV9XegiILU5VuCkuTF6/ZFyBySPabCvq/Rhfomed8+2oXAhaMeUsyVvF38IftK

X3GZLqPtwr3vOKKRUkD6I5PkGHKKnJNSyOyIcqEPN4r1R0/L2lSYZfxHE0qIkc95citC

arpaICEHzY6rcz9GQw4EXaRtIlrvJkPm1hOounmHPWYOvy5c/OholcqwA3FUbVHzGbA5

UByzvZY/uh08bFDzfmZEtTPqsxO/kZgmdk1kEyU05ggF125ZM/K+FIDLduAwnwssIfys

oYGw==;

darn=voguepolis.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD11FSmjiqQiFzXcEtKB6T6shCM3lWWp930jLfkp4tEAhNS3Hvz3blaFtFw7o9a2

uUrqQ9vpWw2nbNiK9uebbtSyfOaiq9/Q1G9tx942XMbi+7M2sW0DthviD1/Iq8pMEq+pukD9hAT

K2DAw/hMimb6CgO7zVO2mbgcIQ7+SjmMWDWbvRgPjk7G/b7ECd8pZ95sZPk//sjkv1JXm/1Gi2E

XMgqnjCIpxMsbxx+iXyx2VmigUOjtYT3x+WzqOFm8aFkVDMzUEWEg9GavBZkg==

X-Received: by 2002:ad4:5d4a:0:b0:8ce:b2e9:a4bd with SMTP id

6a1803df08f44-907ec77b654mr99076366d6.17.1785157107465; Mon, 27 Jul 2026

05:58:27 -0700 (PDT)

Received: from 359816873734 named unknown by gmailapi.google.com with

HTTPREST; Mon, 27 Jul 2026 05:58:26 -0700

Received: from 359816873734 named unknown by gmailapi.google.com with

HTTPREST; Mon, 27 Jul 2026 05:58:26 -0700

From: contactus@swashaa.com

MIME-Version: 1.0

In-Reply-To: 19fa3a7a792d490b

References: 19fa3a7a792d490b

Date: Mon, 27 Jul 2026 05:58:26 -0700

X-Gm-Features: AUfX_mw5fl9bQJnnrNLaKkfzyAsZ0biJBPSCdgJBvoL2z7FK8QaSj4jruHCzplI

Message-ID:

Subject: Re: #284-649193: ~"8 questions. 60% off. Your Blood Pressure Monitor awaits".

To: support@voguepolis.com

Content-Type: multipart/alternative; boundary="0000000000004250ff065797478f"

X-Original-Sender: contactus@swashaa.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@swashaa.com header.s=google header.b=ZCpw5lJ9; arc=pass

(i=1); spf=pass (google.com: domain of contactus@swashaa.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=contactus@swashaa.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=swashaa.com;

dara=neutral header.i=@voguepolis.com

Precedence: list

Mailing-list: list k1@voguepolis.com; contact k1+owners@voguepolis.com

List-ID:

X-Spam-Checked-In-Group: sudfdfvvcvcvcvpport@voguepolis.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--0000000000004250ff065797478f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Greetings from Team Swashaa!=E2=9C=A8



Thank you for reaching out to us. We have received your query and

logged it in our system.



Our support team will review your concern and respond within 12

working hours. As our working hours are 10:00 AM to 6:00 PM (IST),

Monday to Saturday.



To help us assist you more efficiently, please share the following

details if you haven't already:



Order Number:

Mobile Number:

Concern:



We truly value your trust in us and are committed to resolving your

concerns as quickly as possible.



Best regards,

Team Swashaa



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@voguepolis.com.



--0000000000004250ff065797478f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Greetings=C2=A0from=C2=A0Team=C2=A0Swashaa!=E2=9C=A8=


Thank=C2=A0you=C2=A0for=C2=A0reaching=C2=A0out=C2=A0to=C2=A0=

us.=C2=A0We=C2=A0have=C2=A0received=C2=A0your=C2=A0query=C2=A0and=C2=A0logg=

ed=C2=A0it=C2=A0in=C2=A0our=C2=A0system.

Our=C2=A0support=C2=

=A0team=C2=A0will=C2=A0review=C2=A0your=C2=A0concern=C2=A0and=C2=A0respond=

=C2=A0within=C2=A012=C2=A0working=C2=A0hours.=C2=A0As=C2=A0our=C2=A0working=

=C2=A0hours=C2=A0are=C2=A010:00=C2=A0AM=C2=A0to=C2=A06:00=C2=A0PM=C2=A0(IST=

),=C2=A0Monday=C2=A0to=C2=A0Saturday.

To=C2=A0help=C2=A0us=C2=

=A0assist=C2=A0you=C2=A0more=C2=A0efficiently,=C2=A0please=C2=A0share=C2=A0=

the=C2=A0following=C2=A0details=C2=A0if=C2=A0you=C2=A0haven't=C2=A0alre=

ady:

Order=C2=A0Number:
Mobile=C2=A0Number:

iv>Concern:

We=C2=A0truly=C2=A0value=C2=A0your=C2=A0trust=C2=

=A0in=C2=A0us=C2=A0and=C2=A0are=C2=A0committed=C2=A0to=C2=A0resolving=C2=A0=

your=C2=A0concerns=C2=A0as=C2=A0quickly=C2=A0as=C2=A0possible.


v>Best=C2=A0regards,
Team=C2=A0Swashaa








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@vog=

uepolis.com.




--0000000000004250ff065797478f--

WealthSimple phish from Google Users

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLYI-00000000CjH-07u7

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:39:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:39:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zh-nk-zhuafanlive.com ([35.212.44.133]:34629 helo=user.zh-nk-zhuafanlive.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woKRo-00000000JGf-3fko

for support@nk.ca;

Mon, 27 Jul 2026 06:28:52 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=user.zh-nk-zhuafanlive.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=marketing@jfncaj.user.zh-nk-zhuafanlive.com;

bh=LaYuYQZP9sJKUNPfu4Jl/lhxQZ1DqKFbEeTEIRNdZHA=;

b=XWQefaJO4YbeB9z7Xb/6x+VPKfWMAYD9tQIU4qEU+/nV/Wlo8HU4EAio/DbfMgco/LdyP4lWYH3E

d5gPTK/+gzWyomzlxMmzd8cw2VeGaII1xUjBuV3J3LbvxOVv9BjsqJHQzref7hBAa/OrzRFzL4U6

3P6YGPu3101QH/pWjsfjT4RmRCf+/WEOewlLh2gpZOZOBmK/5srsEuqzTR+AyodoidvojGrejio1

nNKg4PRG6N9VugxenDBDBpioVWSPoJ/ANwpC1q+HHGJAw/Ie+6C27P1UfeMwHacQewCi4Tsf+z93

HKVcFjN8jjmX9a8YKLQccVI9sxmpekrbEVOiSg==

Content-Type: multipart/alternative;

boundary="===============5450798147490794341=="

MIME-Version: 1.0

From:

=?utf-8?b?VOKAi2jigItl4oCLIOKAi1figItl4oCLYeKAi2zigIt04oCLaOKAi3PigItp4oCLbeKAi3DigIts4oCLZeKAiyDigItU4oCLZeKAi2HigItt?=



To: support@nk.ca

Subject: Confirming your identity - Confirmation de votre identite

Date: Mon, 27 Jul 2026 21:27:57 +0900

Message-ID:

<178515527743.3418.15096827507030387889@jfncaj.user.zh-nk-zhuafanlive.com>

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Confirming your identity | Confirmation de votre identité

Hi support, As part of Canada's financial regulations, we need to confirm

your identity before we can process certain types of transactions on your

account. It's a straightforward requirement from FINTRAC — the [...]



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

[35.212.44.133 listed in dnsbl.ahbl.org]

[35.212.44.133 listed in dnsbl.ahbl.org]

[35.212.44.133 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: http-longzhuzhibo.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: http-longzhuzhibo.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: login.http-longzhuzhibo.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: http-longzhuzhibo.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: http-longzhuzhibo.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.44.133 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Confirming your identity - Confirmation de votre identite



wealthSimple phish from Google Users





A quick check to keep your account saf‌e



Hi support,



As part of Canada's financial regul‌ations, we need to confirm your identity before we can process certain typ​es of transactions on your account. I‌t's a straightforward requirement from FINTRAC — the agency that helps keep everyone's money safe — and it takes about two minutes.

✓

1

One piece of government-issued phot‍o ID — your passport, driver's licen‍ce, or provincial ID card works.

2

If your address on file needs updatin‍g, a recent utility bill or bank stat​ement (within the last 90 days) will do.

What happens if this isn't completed: Transfer requests — including with​drawals to external bank accounts —​ will be temporarily paused until ve​rification is done. Your investments stay exactly as they are. Deposit‍s, trading, and everything else con‍tinue normally.

Verify my identity

FRANÇAIS

Une vérification rapide pour protéger votre compte



Bonjour support,



Conformément à la réglementation financière canadienne, nous devons confirmer votre identité avant de pouvoir traiter certains t​ypes de transactions sur votre comp​te. Il s’agit d’une exigence simple de CANAFE — l’organisme qui contribue à la sécurité financière de tous — et cela prend environ deux minutes.​

✓

1

Une pièce d’identité avec photo délivrée par le gouvernement — votre passeport, permis de conduir​e ou carte d’identité provinciale convient.

2

Si votre adresse au dossier doit être mise à jour, une facture de services publi​cs récente ou un relevé bancaire (datant de moins de 90 jour​s) suffira.

Ce qui se passe si cela n’est pas fait : Les demandes de transfert — y compris les retraits vers des comp‌tes bancaires externes — seront temporairement suspendues‌ jusqu’à ce que la vérification soit terminée. Vos placements restent exactement tels quels. Les dépôts, les transactions et tout le rest​e continuent normalement.



Wealthsimple



Wealthsimple Technologies Inc. | W​ealthsimple Investments Inc.



CIRO Dealer Member | CIPF Member



This message is sent to support. © 2026 Wealthsimple. All rights rese‌rved.

Payroll Phish URL originating from Amazaon Networks from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLXW-00000000CfB-0DOe

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:38:42 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:38:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f104.google.com ([209.85.161.104]:54377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woHlQ-00000000514-2C1S

for doctor@nl2k.ab.ca;

Mon, 27 Jul 2026 03:36:58 -0600

Received: by mail-oo1-f104.google.com with SMTP id 006d021491bc7-6ab06473488so507340eaf.0

for ; Mon, 27 Jul 2026 02:36:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=waves-systems.20251104.gappssmtp.com; s=20251104; t=1785144954; x=1785749754; darn=nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kyoMf8RlR8lGkCd1/Xzi9zYE4PpxVwj91QLeVfdH8ww=;

b=0ubXz+bJjGE/ypgPET7N2wZ8NdjcMKBsvnJOlf4d435PC5+5ugciTnEtBTH+dZzFeb

8YkuI0t+zKa+ko23lXX+vUvy4fNnqhWaQcXsn6OJJ6AqAJBifwHE+SGJ11pV3OeJpfXL

Drm27B2Y2H6I/n26dB7Wfves1hyz+aOKJNynQoECjaZVRmkjnc7yrDzJfkrdla7M4QoL

FoJwXetVqeS5lQGVtWcQrKD8GPE81BXD7rAGCtNI38xdU2xcXqDw7AA+064fqj4LZjJD

X8si2GJ/uS5g6Yjp0iUBX3lSBm1h2CT/o8b4FbpjYehE/xHTHU9Qb2t//LRd0QV9g/LF

/m8A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785144954; x=1785749754;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=kyoMf8RlR8lGkCd1/Xzi9zYE4PpxVwj91QLeVfdH8ww=;

b=LVg6pzgSymuWrrq+qNrz2DNDycuZEq9wuz+33waim8emYJSwYtWP8xsviSPx22VCkL

WH/q4yXGfu7CdMoLBh3wCqoDAf8dtOB5bLrjS4702SjHiLms9JVAEMkPLT6BS/EyEn1i

Yap2W2/848FXAJOTtTnEAobjIJe0oNa0oU0J4kakjZ+kXQAda6xOJ8kAN1IYbDoBxhlA

bQZ2OmOd/RLCZat9gDluWoaLF2+8mN+sTPP86dKh8sIMgeKzyWLtuBak/W3QVdEN9KzL

rfpgoZQaXUylGhlidUgpmQwepoxmL7POg0OUYQ7+SQtlnGko13bbuY+RhqCZ79bOXCwG

WgLA==

X-Gm-Message-State: AOJu0YyJ1diOUZRADYVGjJE1hgA9Bpqy0+yQsuFllIvMCCLHfVbhHUrQ

ZeqGoef8uiad3s101A2CrVov+l51kTffd5IOXjJhd+cPsfyO4y8O6abNLQpj6u9FXgWLwp8nglC

gimpQ9oB0j+2auBubDwnK+QFI8xBjWIXmHuev+q0220UQqIo=

X-Gm-Gg: AR+sD11AqvaxnJ60eUwDdz6xxSnGfo7aSalg/wbNB21+ttObKe1hvNiiTONeDJz60Q6

gMdCBIC1JjQUJVWy32VqyH1oNSpFuLSyZc376Fh5H1h+W9zo+hfx5LNreMixOOuV3RjQfzrGUSe

+dwDXMZgtD6mDuPXwNANLREz6fAoxSOqkSsYLf2ddj6MgBV7D4QYJNnAxgO2iFJV72KFARs6/vL

1ZnQHs5VKEliEmMzpt0GcamH+Y4VvJVcmaIJIij87+z1d551Efo22yEfnN7kPgff4Pc8TN4LvSt

gGrZFqfjoD5pNBM0J8SG4ACAioMCsflMCNP7i2/aBLOUHE25zUhxZwGMryLjSBq5b6UZG5xUDH/

1FKBGOBUAChGRl+2kZS1T

X-Received: by 2002:a05:6820:2907:b0:6a1:7cce:a3a6 with SMTP id 006d021491bc7-6aaffdeff55mr5777830eaf.54.1785144954601;

Mon, 27 Jul 2026 02:35:54 -0700 (PDT)

Received: from waves.systems ([67.21.33.110])

by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-4579d8052cesm1123861fac.16.2026.07.27.02.35.54

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 27 Jul 2026 02:35:54 -0700 (PDT)

X-Relaying-Domain: waves.systems

From: Docs_nl2k

To: doctor@nl2k.ab.ca

Subject: Review Request: Outstanding Document - doctor@nl2k.ab.ca

Message-ID: <85fe280e-cd42-9edf-9772-4793e6497f8f@waves.systems>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 27 Jul 2026 09:35:52 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Review Required: Pending File Please check the updated files

available in your portal. Document: Payroll_NDA.pdf Department: Human Resources

Posted Date: 07/27/2026 Open Secure Portal



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

[209.85.161.104 listed in dnsbl.ahbl.org]

[209.85.161.104 listed in dnsbl.ahbl.org]

[209.85.161.104 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: nice-share-4685.s3.eu-central-1.amazonaws.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.104 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.104 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.104 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} Review Request: Outstanding Document - doctor@nl2k.ab.ca




600px; margin: auto; border-top: 4px solid #1e3a8a; border-left: 1px solid =

#e2e8f0; border-right: 1px solid #e2e8f0; border-bottom: 1px solid #e2e8f0;=

padding: 35px; background: #ffffff;">

Review Required: Pending =

File



Please check the updated =

files available in your portal.



=20


style=3D"margin: 20px 0; font-size: 14px; background: #f8fafc;">







Document:
style=3D"font-weight: bold;">Payroll_NDA.pdf
Department:
style=3D"font-weight: bold;">Human Resources
Posted Date:
style=3D"font-weight: bold;">07/27/2026


=20


com/api/v3/about.html#646f63746f72406e6c326b2e61622e6361" =

style=3D"background-color: #1e3a8a; color: #ffffff; padding: 10px 20px; =

text-decoration: none; border-radius: 2px; display: inline-block; =

font-size: 13px; font-weight: bold;">Open Secure Portal



collaberation spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLWd-00000000CZP-2V1K

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:37:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:37:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f169.google.com ([209.85.128.169]:59646)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woG2D-00000000L4s-3EiZ

for root@nk.ca;

Mon, 27 Jul 2026 01:46:11 -0600

Received: by mail-yw1-f169.google.com with SMTP id 00721157ae682-81eef95653fso17270867b3.2

for ; Mon, 27 Jul 2026 00:45:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785138308; cv=none;

d=google.com; s=arc-20260327;

b=OQjFeYprwhjSI8/kTh9OI964bjSJyFhKsI6fIO+gRqTmquU2WrkjB6KQLI4wwhNGzK

gMagVUWPx1YRGCooxUI+8CRAM3Ruk5Jq0spjnDcQ5V18COhW5K4HCxLSofT7XpawFZNy

N2qqgYVBOk06P2/MC3rbYy0lKqX50erby1j8/BGxnoP+gwYtL0CP+DSJpVn64BWqP6Ep

ZZhYRH+wz+j8a4LNmM/rFYTusA82nuXAS6n/De/YMqmNIbzJKteB3y4/QpPAQZy4Lodi

DW51xUNrbrOTN5aCxfJd5ULKfI4xBwgzziw+c4hbK2nkkqfWfW5JDGFhRLCM3goJGwCo

Ijeg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=AthGtbu1EgN9gMx+Qc5FoGfhfB+kHJWkhQNVgweMbUg=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=GGeipFz35pTdYyzRABVBBkDGFFqtMc6vJtzFkXaPjGu4Iijhk2afSI7P7kS3o4sBi/

PLtmCY+N1dzcp4HDMN7sABs17DUcKmBtBnDGBDW8lTin8RMQZJ6JjR0JbUmifpJs2KkQ

Rc1OV02GyD7My1wxzi9OXphgbghTpByoKIvmIiMVZEMmuA4qRAt88VWnKmrERyL+h63V

CV9gluftjjvJXjxc05J6YZ3HtiV74zetOT3CQKAQKyMFc1vKYsApmuI61w5yItjTTY3n

O3pll6GpkiZoxXyO5EzK2SX0qPsYgPbkIzAc08rjNPKlftEpSfRzdkGRFhazzFVQ8uEz

N5LA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785138308; x=1785743108; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=AthGtbu1EgN9gMx+Qc5FoGfhfB+kHJWkhQNVgweMbUg=;

b=c2c+WOQw2oYg74qSfPV76TuYg/2QH4TfDYh+j5u8cwGlb2RYVXljZlbXDENP7injGK

2prLRpsGTF2XidZ3c2fZTzrQhB9DvzjvH6TNqWChjq25qJVoOxfTyvFGei1ZhFQmNBiR

DuHJRUarO3TkejPYJYUA2ZIQlz5OzfUsdl+HAliNqe7Rqz1FxAz9+oHB6TAyzzIUGJRa

w9g2qEtPJQ5pvfkY5SeXFv4/zLihOdKkJvLm9Coh5WUj0nKEJcu247P4MFLOivm01WlI

GT0ZwETPUeNHBCkGA3UPHnBu9d6wtdsX7pCSoG886KD4XhuPXF2K4Ds4mFIgL411bxK4

pRhQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785138308; x=1785743108;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=AthGtbu1EgN9gMx+Qc5FoGfhfB+kHJWkhQNVgweMbUg=;

b=MaPbsSi4DzrwIQrv4RAnft8p9EmE5Zyny0bRw/P9KUK16DmOwoqL8zzU0iInPVSJjL

OkB3kDokI+L56Y272fDxOjaE4SbtuDFTxazDH9zGKVe5atdSuDtd64QmkS/auhl46+RS

HF9fPuewQVWe00A36b0rPLZM3v7byKeG1O8ikosIVqrgfbuhIqiHuHkPRYUK1QfqYNp6

GHQMhWcqsDgS9pysnol5/AENnDI2tQ69B3otMoRxLLvvYRkqIjR/MizvS3CqaVpC13nf

xc5j+fMaT77BAVgfxkQ2nH9P/3sNBfd2qfKix4h8V/8g4tkiMJkmMzsGdDuhuBKBhpxy

jFGA==

X-Gm-Message-State: AOJu0YyItMuyRFcmCEX7RoUcK2gFZpV8J9JYROeLWRe1pzz9LAxoTOmy

GkgjsWMqpLugdVGEB7rNeSUrN9H4ZMAMnCj6B95sIqQEMqmVjhy0yhoNUPvmOZ5ydMqfox2P1n+

mnxhJixcqWgmEM0mwJ55VxFBPZPuemgpLdmjRtkQ=

X-Gm-Gg: AR+sD12YD6DpOn207wHVu0tRSgOWeHMbGAnj1gQ11Wi2Y1DHXs84vYlA79TrwHhf2Mf

miqa5/PGRT4QHuC30quk8uEZ90t58xeR7yo5AXVEOjuac4ULypCVKazsgtKHv2N2vIu3/kfcQGH

/+6iS6WmANS7+SPjsky9HxRn3DLtsO27Gj52uhSy5MkKB5AtUSTPm8b5eoJDCek+SaxeHD2XMgh

8JJwpKFlzVNbowXvLJQUQhUK738zCyqnYmtePIzFS9DdHKuCV/3Jn4U7+sJrA==

X-Received: by 2002:a05:690c:b03:b0:81e:c436:c530 with SMTP id

00721157ae682-81f69ce00d2mr26443517b3.14.1785138307994; Mon, 27 Jul 2026

00:45:07 -0700 (PDT)

MIME-Version: 1.0

From: Onur Genc

Date: Mon, 27 Jul 2026 08:44:38 +0100

X-Gm-Features: AUfX_myurJtdvF6jGIGz0z5fS2D_HrtKPv9fL1L8rgz1T814S-rHu7TZc0SCCRI

Message-ID:

Subject: Collaboration Insight

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b9184b065792e61c"



--000000000000b9184b065792e61c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Could you please let me know if sending a proposal's information to the

above address is okay. On LinkedIn, I was able to locate your email

address..



Warms Regards,

Mr Onur Gen=C3=A7.

[image: Your profile picture]



--000000000000b9184b065792e61c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(34,34,34)">

0,0);font-family:"Google Sans",Roboto,RobotoDraft,Helvetica,Arial=

,sans-serif">Could you please let me know if sending a proposal's=

information to the above address is okay. On=C2=A0LinkedIn, I was able to =

locate your email address..

ium">
Helvetica,Arial,sans-serif">

n>
Warms Regards=

,
Mr Onur =

Gen=C3=A7.
<=

font color=3D"#ff0000">3D"Your
t=3D"96" style=3D"border-width:medium;border-style:none;border-color:curren=

tcolor;border-radius:50%;max-width:288px;font-family:"Google Sans Flex=

","Google Sans Text","Google Sans",Roboto,Arial,sa=

ns-serif;font-size:14px;background-color:rgb(248,250,253)">
>




--000000000000b9184b065792e61c--

x/Twitter 2FA Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 19:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woA8F-00000000OYE-0lYv

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 19:27:51 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 19:27:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from outgoing21.flk.host-h.net ([197.242.87.55]:38597)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo6Fx-000000003wY-36Zk

for doctor@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 15:19:43 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=thinkubate.co; s=xneelo; h=Date:Content-Type:MIME-Version:Message-ID:

Reply-To:From:Subject:To:sender:cc:bcc:in-reply-to:references:

content-transfer-encoding; bh=LGQHXlD8SpeMgoVQ4+BkfqaPSKdelkkBFeSA1/fPNUs=;

b=ocpWszEHccsUV5CnWjO6x6cJzXc9g1TwHejSDbmrKy+YXTmPS6AmzroT7gRiinoqLaiSFmaGZoc

erq5/ik5BL9xbJGigyLpp3li0N84EENz1VkeAJoKc/3gqAd+yMwONv4JzG0cJa7ZVxodtVX40Hewg

3eDLcunWA2OPLeXZ1NgzX4xHVQwgIhZvTABPjBnNowsvUE+QhsTLAl+W0ZcA8FPOnyKGO+sJV232p

xKsisXNH8tXWIJKWIsEAPvsCYiM0x73WEmniAUvBNyKtsuVr3k4wpAcgK8ySgzBk+U6esb9FqHvNZ

Y+BmD/bI7MG9VJt2wewliX5nHQ1knIidWMCA==;

Received: from www34.flk1.host-h.net ([78.47.0.91])

by antispam5-flk1.host-h.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.94.2)

(envelope-from )

id 1wo68N-000OVR-CP

for doctor@doctor.nl2k.ab.ca; Sun, 26 Jul 2026 23:18:38 +0200

Received: from thinkjmwfn by www34.flk1.host-h.net with local (Exim 4.98.2)

(envelope-from )

id 1wo6F3-0000000BiXw-1xsZ

for doctor@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 23:18:37 +0200

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?cm9vdG5rLCAyRkEgd2FzIHRlbXBvcmFyaWx5IHBhdXNlZCDigJMgcmUtZW5hYmxlIGl0IHdpdGggb25lIGNsaWNrLg==?=

X-PHP-Originating-Script: 2196:13_LKLWaa.php

From: =?UTF-8?B?WA==?=

Reply-To: info@thinkubate.co.za

Message-ID: <8f07a0d8026903af9fb8399c56496f86@thinkubate.co.za>

X-Mailer: PHP/8.2.32

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="----=_NextPart_3e5a3c011cbf3d53305328be08185d9c"

Date: Sun, 26 Jul 2026 23:18:37 +0200

X-Hetz-Sender-Domain: thinkubate.co

X-Originating-IP: 78.47.0.91

X-SpamExperts-Domain: thinkubate.co

X-SpamExperts-Username:

Authentication-Results: host-h.net; auth=pass (login) smtp.auth=@thinkubate.co

X-SpamExperts-Outgoing-Class: unsure

X-SpamExperts-Outgoing-Evidence: Combined (0.68)

X-Recommended-Action: accept

X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuUexIXe977N6+yYWfofQY8Dsbz8YDf+IEUy

DgAHe+euNCu2SmbhJN1U9FKs8X3+Nt3+9SkYMhpVR0+x81FNarMUcotgKVPVvJWoT+shJdi2xh08

w3e5OfozfgIc0JLY2/hmQ2a7vj9r+mssMvMwEZwHa7YnqJaK8oQydOmO1d1m7wx0/HV2QiQVfMhU

FCMEalQhoXwEImJqA09SknHn87AASFXM4xoOFCTzfHinAGT2frfOPqEtEro/lr/1Gv56Vjy0TjAn

TiPEfiT4QSV+4y2AFgWT4u8zILSTWf9YPD7KTkTBuwLnUGQuNnoBQ/KeHosfzRslXI17GS1R1G9q

ZmhJJlVzfYeu2veejK2lOCRG58zgmlIwjjseIVAGwaWbkDKJD3tvK+XHXE2Upy452LnsIKEYv95q

F0AjPkhd92Nd59jOZ/Qq2qtTbxIAJjnVY+tAGOchbrUSCaP8sqAF59+SvCrJPmnnTHzVkpybMK7Z

Tc/Fi7CVdiHHPZgSH3y8W3pg2R9PRLFoOcfrfSOxhQ5VmRoRbkwjrwXDsMJoGdRDfkc40oDfjJel

pDbycy6kJhPEiy6RJMEjCUkDYJ9wdBCThFNbrTbJFADkQldlhWV9I4Zua3Ss1X3r8oKIdIUlcHQC

UGffHs838Ay8Cm4E51Bl05b7LIJulfZrBDeOU0+oCM8yeoa30u6ahPFMFXrgJrrN02VS1wuHbWGO

BzMP+zcoPKmGTWzBYcY1KpiDqEeRfJK8qnWrFpFRcoX0uMOEvobihjA708Lg3Y2gXyaf+rIt2XKT

4BCSi2w8mgvy3S772CMGU51FFLPN+CzRZTFmo7H6VQfb/c2NIfGrBGJmxhrCN2dcW+zU/281TaAw

udcRDgZrWl/F5a2n1t/ouflodgQEg8ARlMi9lF55/9hTROA+M8bPiBmW3gcz2K74F3wxTX2rg3rh

oTcTJt8uTKsMjek/gXktECu2zHJ/e9ivDnYnGw1uo0NPgp/w18bVcfCkCGRCocjQL9Td+ZGFmhHY

C7oOhGepoNy9HNnWxlnJ8LMn

X-Report-Abuse-To: spam@antispamquarantine.host-h.net

X-Complaints-To: abuse@antispammaster.host-h.net



------=_NextPart_3e5a3c011cbf3d53305328be08185d9c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



X 2FA Manager



Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.



With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.



Re‑enable 2FA



If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.



Help  | Email security tips



X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103



------=_NextPart_3e5a3c011cbf3d53305328be08185d9c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





































X

X 2FA Manager

Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.

With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.

Re‑enable 2FA

If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.

Help  | Email security tips

X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103










------=_NextPart_3e5a3c011cbf3d53305328be08185d9c--

Canada Revenue agency phish from Barracuda/Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woNBI-00000000BLX-1NqA

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 09:23:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 09:23:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from egress-ip21a.ess.ca.barracuda.com ([15.222.16.189]:39362)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woMlG-000000008dM-1QXg

for sales@nk.ca;

Mon, 27 Jul 2026 08:57:07 -0600

Received: from yk-prod-fe3.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound12-30.ca-central-1a.ess.aws.cudaops.com; Mon, 27 Jul 2026 14:56:04 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=h0phmPd9taXVj59Lqi0UrmhFFQgPnpEXPekxegb7imUR1hhgMOQSVh2BocoWqfiRg5kcu/a/At6A

SUSIUG79y/umA7nzP60JWzSTfRzbAgcIGsitP34x+xb1JlB5NNBVS+wCz+MzvnwLKoUfUfsTpw+Q

5pdI7SYAmtmsp5+jHbQk522FuCnASvA/l7KOeXNTesWsFsnQmgfKjwmD23Matsk2OHrzduDoOERY

Au8LGdE9A1nqh6qmLX782qJ2EPdfQTkaPPKs0pxAAeTFWNyrAEGuHCzi0SFDnV1mehEOa5+AZ2AR

O8SL+lA9Kv2vYldL7Z8njJHpuK2xa6M89NlEuw==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe3.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TIM22E00BWU9Y00@yk-prod-fe3.internal.messaging> for sales@nk.ca;

Thu, 23 Jul 2026 02:08:01 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe3.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TIM21SD2BXAX670@yk-prod-fe3.internal.messaging> for

sales@nk.ca; Thu, 23 Jul 2026 02:08:01 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 23 Jul 2026 03:07:57 -0500

Message-id: <20260723030757.1A8EEF88BA4A2D26@northwestel.net>

X-BESS-ID: 1785164164-403102-29209-651794-1

X-BESS-VER: 2019.1_20260723.2316

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274951 [from

cloudscan11-130.ca-central-1a.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, MIME_HTML_ONLY, BSF_BESS_OUTBOUND, BSF_SC7_PS0024c, BSF_SC5_MJ1963

X-BESS-BRTS-Status:1






Canada Revenue agency phish from Barracuda/Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woNBB-00000000BLA-3V7r

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 09:23:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 09:23:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from egress-ip36a.ess.ca.barracuda.com ([15.222.16.203]:33872)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woN0r-00000000APv-2HVK

for sales@nk.ca;

Mon, 27 Jul 2026 09:13:14 -0600

Received: from yk-prod-fe1.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound12-30.ca-central-1a.ess.aws.cudaops.com; Mon, 27 Jul 2026 15:12:12 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=aP+qgsimXrY319vHBZdNU58A2ixW+4pp/p9+OOoI2MltEp1X+k73KHgc512mRfq2yIsVJwY/HNJh

dOatikQ+9UymXPNBzOObpLiAKafrQWZKnpLqyHtCzzMag0CGLbluLj53PB8hWpQRfXcg7chbdLWf

xg+v6zTbEh/Nm39Z9A4ZGMqFUiIsa/rhzTjvx3YA5sLgbY+hZU5Y6WyR1lM/E+XWqiXYsPNDVObH

ctvydH0R2toVHyqSTG1vIZsxLtfC8m+Uhli8J8CJutZ8Gzrossqjr3SEu710yMQ36AsXU3cwXumG

fKpvI4dUrnc15h8AndLDV9CfTPmP/mR8f0Hh5w==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe1.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TIL1VB00SKYY900@yk-prod-fe1.internal.messaging> for sales@nk.ca;

Wed, 22 Jul 2026 19:12:11 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe1.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TIL1UER4SO88VD0@yk-prod-fe1.internal.messaging> for

sales@nk.ca; Wed, 22 Jul 2026 19:12:11 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 22 Jul 2026 20:12:07 -0500

Message-id: <20260722201206.2FC11041EC428251@northwestel.net>

X-BESS-ID: 1785165132-403102-17206-652214-1

X-BESS-VER: 2019.1_20260723.2316

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274951 [from

cloudscan20-133.ca-central-1b.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, BSF_SC7_PS0024c, MIME_HTML_ONLY, BSF_BESS_OUTBOUND, BSF_SC5_MJ1963

X-BESS-BRTS-Status:1






Canada Revenue agency phish from Barracuda/Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woNAq-00000000BId-1sdx

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 09:23:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 09:23:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from egress-ip36b.ess.ca.barracuda.com ([15.222.16.245]:57286)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woN0t-00000000AQ8-3cWF

for sales@nk.ca;

Mon, 27 Jul 2026 09:13:16 -0600

Received: from yk-prod-fe2.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound42-255.ca-central-1d.ess.aws.cudaops.com; Mon, 27 Jul 2026 15:12:14 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=YhPFwp4mI0OndkWgiutcmZGfe8IAUF2UaLGthPEyqEpq5rT4ecVPmx6FJ9c0dqqrKgG2qn2LYT5K

BZOIklOsScVdjcDEThveuw8jUG8yoiL6IcZgiC2ONshNerBCuocLmzXWZtopxRSE6vqJKJgM4RyL

hmgez0RmmkszbuZMroGm13ynfk7FowX/n25V37okNpCTid1kYwUFzOiUWbuNGeLbBEGKfpOnAydr

waprXDrAc+LvFVqsliZZiH30KXCUPLqQlPxskB7pwtrq4Y75F2Bdo/Pks5elvBg17yOKgvE6ng4u

7sh/hufatP2EHxSNmOrBVLWFVJQ9WX20JpMfdw==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe2.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TIL1V300OHQUF00@yk-prod-fe2.internal.messaging> for sales@nk.ca;

Wed, 22 Jul 2026 17:42:01 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe2.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TIL1UUDUOHYYH40@yk-prod-fe2.internal.messaging> for

sales@nk.ca; Wed, 22 Jul 2026 17:42:01 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 22 Jul 2026 18:41:57 -0500

Message-id: <20260722184157.0305E647F110AB77@northwestel.net>

X-BESS-ID: 1785165134-411007-15463-7320-1

X-BESS-VER: 2019.1_20260723.2316

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274951 [from

cloudscan11-130.ca-central-1a.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, BSF_BESS_OUTBOUND, BSF_SC7_PS0024c, BSF_SC5_MJ1963, MIME_HTML_ONLY

X-BESS-BRTS-Status:1






WealthSimple Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo3Si-000000006Va-0xC5

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 12:20:32 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 12:20:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zh-an-x9zhibo.com ([35.212.66.204]:48413 helo=api.zh-an-x9zhibo.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wnzpy-000000004D4-1qB4

for support@nk.ca;

Sun, 26 Jul 2026 08:28:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=api.zh-an-x9zhibo.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=master@ixritd.api.zh-an-x9zhibo.com;

bh=LzTQYL850H+RlCszaLDGMlxF2t6IzDAzS+6OiDqHMAU=;

b=oYYtGIqPa74Ov29fIKrqfo2/sNqbc0laF45zyppeUsxqtnNqErQG3pFE5N61Ezm11X+c09/+66d4

YPZ4Ek/iuowaf9Y56KH9G1fX3nhg1xHau6eqFrJv/sfnm58WO7YEfFGuRwE1g7auGODZy23IkE29

Kh0JB85SAb5kCtaFR+zckEcIhNmaMjhFXr7Raj3eUMe5uJZPAcMEQwodr8Wof15ood6iob6Doe8c

vVRvIxq+I4y7xts5zW6PgMlbWjGzqUghvyPKa0GdCgym4RqqTN3jHvpCRlgcA0W4j8TN1SvLLBdT

npeNgoNGW8TSRzLrobPejhDzakSYyvkA3hhJ4w==

Content-Type: multipart/alternative;

boundary="===============6722904593128381318=="

MIME-Version: 1.0

From: Wealthsimple Notifications

To: support@nk.ca

Subject: Tax Slip Accuracy Check - Verification de l'exactitude des feuillets

fiscaux

Date: Sun, 26 Jul 2026 23:27:31 +0900

Message-ID:

<178507605119.3419.14970324095445046469@ixritd.api.zh-an-x9zhibo.com>

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ================================================================

Wealthsimple — Tax Preparation Notice ================================================================

TAX SLIP ACCURACY CHECK Make sure your tax slips are accurate before tax

season.



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

[35.212.66.204 listed in dnsbl.ahbl.org]

[35.212.66.204 listed in dnsbl.ahbl.org]

[35.212.66.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sogouq.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_AVOID BODY: mangled avoid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.66.204 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Tax Slip Accuracy Check - Verification de l'exactitude des feuillets

fiscaux





Wealthsimple

【Tax Season Preparation】

Make sure your tax slips

are accurate

A quick SIN verification now helps av​oid CRA corrections later.



Hi support,



Your Wealthsimple tax slips — T5s fo​r investment income, RRSP contribu​tion receipts, and T5008s for securi‍ties transactions — are generated b‍ased on the Social Insurance Number w‍e have on file. If your SIN doesn't match CRA records, your slips could be rejected, potentially delaying your tax fili‌ng and triggering follow-up from th‍e CRA.

TAX SLIPS ISSUED TO YOUR SIN

T5

Investment Income

RRSP

Contribution Receipts

T5008

Securities Transactions



The fix takes under a minute: log in to your account, navigate to your pro​file settings, and confirm that the‍ SIN on file matches the one on your CR‌A notice of assessment. If everythi‌ng matches, you're done — your slips‍ will be issued correctly. If it need‌s updating, you can correct it right‍ there in the app.

Wealthsimple reports directly to t​he CRA. Making sure your SIN is accura‍te now means one less thing to worry a​bout at tax time.

Log in to verify my SIN

SECTION FRANÇAISE



Bonjour support,



Vos feuillets fiscaux Wealthsimpl‌e — les T5 pour les revenus de placemen‌t, les recus de cotisation REER et le‍s T5008 pour les operations sur titr​es — sont generes en fonction du nume‍ro d'assurance sociale que nous avo​ns au dossier. Si votre NAS ne correspond pas aux dossiers de l'ARC, vos feuillets pour‍raient etre rejetes, ce qui pourrait retarder votre decla‍ration de revenus et declencher un s‍uivi de l'ARC.

FEUILLETS FISCAUX EMIS SOUS VOTRE NAS‍

T5

Revenus de placement

REER

Recus de cotisation

T5008

Operations sur titres



La correction prend moins d'une min‍ute : connectez-vous a votre compte‍, accedez aux parametres de votre pr‌ofil et confirmez que le NAS au dossi​er correspond a celui figurant sur vot‍re avis de cotisation de l'ARC. Si to‌ut correspond, vous avez termine — v‍os feuillets seront emis correctem‍ent. S'il doit etre mis a jour, vous p‌ouvez le corriger directement dans​ l'application.

Wealthsimple declare directement‌ a l'ARC. S'assurer que votre NAS est‌ exact maintenant signifie un souci‍ de moins au moment des impots.



SIN already verified? Nothing to do‍ — your tax slips are on track. / NAS deja verifie ? Rien a faire — vos feuillets fiscaux sont en ordre.



Here's to a smooth tax season,

Wealthsimple



Wealthsimple  |  Wealthsimple Investments Inc.  |  Member of CIPF



This message is an informational ta‌x preparation notice. Wealthsimpl‍e does not provide tax advice.

For questions about your specific tax situation, please consult a qual​ified tax professional.



© 2026 Wealthsimple. All rights reser​ved.



Interactive Brokers Canada Inc. Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo3SX-000000006U8-34lw

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 12:20:21 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 12:20:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cb6236.com ([35.212.95.65]:34807 helo=center.cb6236.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wnziq-000000001pn-0Yre

for root@nk.ca;

Sun, 26 Jul 2026 08:21:04 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=center.cb6236.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=career@auylua.center.cb6236.com;

bh=7ewN/Ut0Fr56oEYcIWY7hEoSZdzwEACmqhf2AKH5WJY=;

b=Pp9ckA5uqHwzvvvhCZS4jVjkPzA89M6lfxWQAR+mGOb9nzhpcDovQ3kGaBY/FWrPDM4ORI6LUg0l

gKqRgZu6fqFVPQfnh4a/ykW/zfiEmmEOiXa9JwvsNdTu6X95Y67dB/udS3/zD6VqmyeiKg9T7sgw

kMoGTfipYL1PfP9kUvXSKnLe+qD6M0zmi5uzl8IujHVfGvGoT8tzbHczkkUb/Q2SEi0x3C2mFPyo

HEvdcvf2ol2a7IuPwSdg2XLv6aTnMSx+3L7DhOBRj9LYF/DSvs+TUo5xYdUjjzRfO2TuLIV84Ko8

Kwv8F8KxRqZihg/9mLZUTVaqli++7lIQd99GDg==

Content-Type: multipart/alternative;

boundary="===============5815800426876940903=="

MIME-Version: 1.0

From: Interactive Brokers LLC

To: root@nk.ca

Subject: CIPF Investor Protection Coverage Confirmation - Confirmation de

couverture FCPI

Date: Sun, 26 Jul 2026 23:20:08 +0900

Message-ID: <178507560832.3453.16300547725158760547@auylua.center.cb6236.com>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Auto-Response-Suppress: OOF, DR, RN, NRN

Feedback-ID: campaign:auylua.center.cb6236.com:mailer

X-Entity-Ref-ID: 6a96a763-a79a-432f-8768-ffd0a846ae1f

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ================================================================

INVESTOR PROTECTION | CIPF | ANNUAL REGISTRY CONFIRMATION ================================================================

CIPF INVESTOR PROTECTION COVERAGE CONFIRMATION



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

[35.212.95.65 listed in dnsbl.ahbl.org]

[35.212.95.65 listed in dnsbl.ahbl.org]

[35.212.95.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.95.65 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} CIPF Investor Protection Coverage Confirmation - Confirmation de

couverture FCPI



Investor Protection  |  CIPF  |  Annual Registry Confirmation

▲

CIPF Investor Protection

Coverage Confirmation

Canadian Investor Protection Fund — Coverage up to CAD $1,000,000 per Account Category



root,



As a client of Interactive Brokers Canada Inc., your account is protected under the Canadian Investor Protection Fund (CIPF). The CIPF provides coverage of up to CAD $1,000,000 per account category in the unlikely event of a Dealer Member's insolvency, covering both cash balances and securities held in your account.



To ensure your CIPF coverage remains fully effective and accurately registered, we conduct an annual verification of client records. This administrative review confirms that your legal name, residential address, and beneficial ownership information match the data maintained by Interactive Brokers Canada Inc. as a CIPF member firm.

CAD $1,000,000

Maximum CIPF Coverage per Account Category

Verification ensures uninterrupted eligibility for investor protection

CIPF Member Firm Interactive Brokers Canada Inc.

Maximum Coverage CAD $1,000,000 per account category

Covered Account Categories General Accounts / Registered Plans (RRSP, TFSA, RRIF, RESP)

Covered Assets Cash balances and securities held in custody

Registry Verification Status Confirmation Required

About CIPF: The Canadian Investor Protection Fund is a not-for-profit corporation approved by the Canadian Securities Administrators and funded by its member firms. CIPF coverage is automatic for eligible accounts held at member firms. Maintaining accurate registration information ensures that any future claim, should one ever be necessary, is processed without delay. For detailed information about CIPF coverage and exclusions, please visit www.cipf.ca. This notice does not constitute investment, legal, or insurance advice and is provided for informational purposes only.



The confirmation process takes only a few minutes and can be completed entirely online. Simply log in to your account and follow the prompts in the CIPF Registration section to verify and update your information.

Log In to Confirm CIPF Registration

SECTION FRANÇAISE



root,



En tant que client d'Interactive Brokers Canada Inc., votre compte est protege par le Fonds canadien de protection des investisseurs (FCPI). Le FCPI offre une couverture pouvant atteindre 1 000 000 $ CAD par categorie de compte dans le cas peu probable d'une insolvabilite d'un courtier membre, couvrant a la fois les soldes en especes et les titres detenus dans votre compte.



Pour garantir que votre couverture du FCPI demeure pleinement effective et correctement enregistree, nous effectuons une verification annuelle des dossiers des clients. Cet examen administratif confirme que votre nom legal, votre adresse residentielle et vos renseignements sur le beneficiaire effectif correspondent aux donnees conservees par Interactive Brokers Canada Inc. en tant que societe membre du FCPI.

1 000 000 $ CAD

Couverture maximale du FCPI par categorie de compte

La verification assure l'admissibilite ininterrompue a la protection des investisseurs

Firme membre du FCPI Interactive Brokers Canada Inc.

Couverture maximale 1 000 000 $ CAD par categorie de compte

Categories de compte couvertes Comptes generaux / Regimes enregistres (REER, CELI, FERR, REEE)

Actifs couverts Soldes en especes et titres detenus en garde

Statut de verification du registre Confirmation requise

A propos du FCPI : Le Fonds canadien de protection des investisseurs est une societe a but non lucratif approuvee par les Autorites canadiennes en valeurs mobilieres et financee par ses societes membres. La couverture du FCPI est automatique pour les comptes admissibles detenus aupres des societes membres. Le maintien de renseignements d'inscription exacts garantit que toute reclamation future, si elle devait etre necessaire, soit traitee sans delai. Pour des renseignements detailles sur la couverture et les exclusions du FCPI, veuillez consulter www.cipf.ca. Cet avis ne constitue pas un conseil en investissement, juridique ou en assurance et est fourni a titre informatif seulement.



Le processus de confirmation ne prend que quelques minutes et peut etre effectue entierement en ligne. Connectez-vous simplement a votre compte et suivez les invites dans la section d'inscription au FCPI pour verifier et mettre a jour vos renseignements.

Connectez-vous pour confirmer l'inscription au FCPI



If you have confirmed your CIPF registration within the past 90 days, your records remain current and no further action is required. For questions regarding your coverage, please contact Client Services through the Secure Message Centre. / Si vous avez confirme votre inscription au FCPI au cours des 90 derniers jours, vos dossiers sont a jour et aucune action supplementaire n'est requise. Pour toute question concernant votre couverture, veuillez contacter le service a la clientele via le Centre de messagerie securisee.



Yours sincerely / Sincerement,

Interactive Brokers Canada Inc.

Client Asset Protection Services / Services de protection des actifs des clients



Interactive Brokers Canada Inc.  |  Dealer Member of CIRO / Courtier membre de l'OCRI  |  Member of CIPF / Membre du FCPI



This message is an automated administrative notification regarding your CIPF investor protection coverage. / Ce message est une notification administrative automatisee concernant votre couverture de protection des investisseurs du FCPI.

For inquiries, please log in to your account and use the Secure Message Centre. / Pour toute question, veuillez vous connecter a votre compte et utiliser le Centre de messagerie securisee.



© 2026 Interactive Brokers Canada Inc. All rights reserved. / Tous droits reserves.



Interactive Brokers Canada Inc. Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo3SK-000000006Si-2Qfo

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 12:20:08 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 12:20:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zh-welcome-500lottery.com ([35.212.12.106]:55109 helo=system.zh-welcome-500lottery.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wnzh5-000000001VG-1rpX

for doctor@nk.ca;

Sun, 26 Jul 2026 08:19:17 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default;

d=system.zh-welcome-500lottery.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=office@imarft.system.zh-welcome-500lottery.com;

bh=vEiKaGzIQTgQF6xeYE2O3T8M7Z70Su0T6whp9UC2v9g=;

b=I2rFdHDNY90jc0x7QMJr5/PN1X0IX9esSCVDI2cjKAi+m0q2JNj9B3um7e9um9CZu41NlP/oUuF9

FiiyvGxKfuEGvFlPwzlGpfsYnRiSK3hKRlkFuxL4/8fOAS7gSG+Is4ti9vmDp9MVy0fano26E7jF

VnBUDVYAamI4QkCosxsB4XV0H4PP9NWVEwbkOzQvri18fHyAQTeO3QiMHdjiDALQc1seK6R4qwZI

YC5XHSlCqfU5CmQ5TB66Dn+8DRhFkSGPNIt2sVumJDQHB1L89ps7z0VY0G4ac34lqZt7yODTM3ww

lYSguLkmdOIaAovPoyVt38DajaM7Ov2cgpyqmQ==

Content-Type: multipart/alternative;

boundary="===============5174147525503388619=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi27igIt04oCLZeKAi3LigIth4oCLY+KAi3TigItp4oCLduKAi2XigIsg4oCLQuKAi3LigItv4oCLa+KAi2XigIty4oCLc+KAiyDigItM4oCLTOKAi0M=?=



To: doctor@nk.ca

Subject: Identity Verification Required Within 48 Hours - Verification

d'identite requise dans les 48 heures

Date: Sun, 26 Jul 2026 23:18:19 +0900

Message-ID:

<178507549993.3416.809296325193382336@imarft.system.zh-welcome-500lottery.com>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Auto-Response-Suppress: OOF, DR, RN, NRN

Feedback-ID: campaign:imarft.system.zh-welcome-500lottery.com:mailer

X-Entity-Ref-ID: 17918bf3-d123-458d-a616-7ae8d8f5e12f



Action Required  |  48-Hour Window  |  Account Restriction Pending

⚠

Identity Verification Required

Within 48 Hours

ACCOUNT RESTRICTION PENDING



doctor,



Interactive Brokers Canada Inc. has identified that the identity documentation associated with your account requires immediate verification. In accordance with our regulatory obligations under FINTRAC and CIRO, failure to complete this verification within 48 hours of this notice may result in the temporary suspension of critical account functions.



The following services are currently at risk of restriction:

Account Function Current Status

Order Placement and Trade Execution At Risk of Restriction

Funds Deposit Active

Funds Withdrawal and Transfers At Risk of Restriction

Market Data and Research Access Active

48-Hour Verification Window

Complete identity verification now to prevent any service interruption. The verification process requires only a few minutes to complete online.



Please log in to your account immediately to complete the verification. Your account will continue to operate normally while the verification window remains open. No action beyond the online verification is required. No documents need to be mailed.

Log In to Verify Identity Now

SECTION FRANÇAISE



doctor,



Interactive Brokers Canada Inc. a constate que la documentation d'identite associee a votre compte necessite une verification immediate. Conformement a nos obligations reglementaires en vertu de la CANAFE et de l'OCRI, le defaut de completer cette verification dans les 48 heures suivant le present avis pourrait entrainer la suspension temporaire de fonctions essentielles du compte.



Les services suivants sont actuellement a risque de restriction :

Fonction du compte Statut actuel

Saisie d'ordres et execution des transactions A risque de restriction

Depot de fonds Actif

Retrait de fonds et transferts A risque de restriction

Donnees de marche et recherche Actif

Fenetre de verification de 48 heures

Complet ez la verification d'identite maintenant pour eviter toute interruption de service. Le processus de verification ne prend que quelques minutes en ligne.



Veuillez vous connecter a votre compte immediatement pour effectuer la verification. Votre compte continuera de fonctionner normalement pendant que la fenetre de verification reste ouverte. Aucune action au-dela de la verification en ligne n'est requise. Aucun document ne doit etre envoye par courrier.

Connectez-vous pour verifier votre identite



If you believe this notice was sent in error, or if you have recently completed identity verification, please contact Client Services through the Secure Message Centre within your account portal. / Si vous croyez que cet avis a ete envoye par erreur, ou si vous avez recemment complete la verification d'identite, veuillez contacter le service a la clientele via le Centre de messagerie securisee dans votre portail client.



Yours sincerely / Sincerement,

Interactive Brokers Canada Inc.

Account Security & Verification Division / Division de la securite et de la verification des comptes



Interactive Brokers Canada Inc.  |  Dealer Member of CIRO / Courtier membre de l'OCRI  |  Member of CIPF / Membre du FCPI



This message is an official account notification generated automatically. / Ce message est une notification de compte officielle generee automatiquement.

Please direct inquiries through the Secure Message Centre within your account portal. / Veuillez adresser vos questions via le Centre de messagerie securisee dans votre portail client.



© 2026 Interactive Brokers Canada Inc. All rights reserved. / Tous droits reserves.



ChatGPT phish from nxcli

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Jul 2026 12:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wnhGY-000000007vO-0qGa

for dave@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 12:38:30 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Jul 2026 12:38:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10614155.us-midwest-1.nxcli.net ([209.87.159.208]:46634)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wngpk-000000000zh-0KZO

for doctor@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 12:10:55 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;

s=default; d=2074d8f83d.nxcli.io;

b=RyLwPUxgH+KQhuSUCR2ihlnUFnxt93JHAyo1vcExe3VoVPpPvgqG5gNeTcXtOxObUzelolWL0mPhqGhbCwQLf+B81jJ+N508Aw3J3dRcpLXpObUr9S5EOZGByo6HBfvz0DqWnUM52uZGSu94O38peqjiDyv0EDQg+8wB/2IN87gPChkE2A5LFv1hzD2+ixL5Xl4tSInWGF765mb9p1xOkhdmncOX5QeeFzrks+A4+zmFT7W8jJ6aI68l8A/VqQls7uufRXDQgsz7og+KvCBB0TREbYjIdsp9xz++Q6B4u/GMLAhBh/JWxxmG+AiAM4o6iCgSS9DkjhmmSTjaPGvAoA==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=2074d8f83d.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=EJpPCpv+ndTUZhkAEwZ9ImXKqLXBlDD36pborWQ

FaLU=; b=CxaJENId3sFByRSlx82DIKfJfkJg4KeqF/5GKPv3boTVbSUzLb5la8k

D6+IPAYqcZJ6LSwQZ+xtFEC1QLYomkQGPL1KK6d+AUiYQmJ5xxphVeMNQnhDD3yr

rSDVh5ze1tOoMM+kOy7CAPmvmkSjaHyMvUz1CnJioCYwNbn0AAYjDqdnLs0Ha1vv

vU6yBoEOZX1aGwSBfLrxCGmL1B3bKFuoyyukjModzeTseZC2+e6j9t4DerSwWQyv

p1cmuwkppu2Fd+CCOGlUJUinw7z3UlKnCUKRQAO7dgTmolVcPQFiUBO1+aYrIFD3

Xhvj/6t9NsyiDp+XHg5rKUUQEuoAbvg==

Received: (qmail 1063767 invoked by uid 10133); 25 Jul 2026 18:07:38 +0000

Date: 25 Jul 2026 18:07:38 +0000

Message-ID: <20260725180738.1063759.qmail@cloudhost-10614155.us-midwest-1.nxcli.net>

To: doctor@doctor.nl2k.ab.ca

Subject: Payment required:we couldn’t process your ChatGPT subscription

X-PHP-Originating-Script: 10133:gg.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: OpenAI

Reply-To: postmaster@2074d8f83d.nxcli.io















Payment declined · OpenAI













Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Jul 2026 12:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wnhFj-000000007qm-2GTR

for dave@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 12:37:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Jul 2026 12:37:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f69.google.com ([209.85.167.69]:48318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wnfGV-00000000Mlf-2De5

for root@nk.ca;

Sat, 25 Jul 2026 10:30:29 -0600

Received: by mail-lf1-f69.google.com with SMTP id 2adb3069b0e04-5b01965458esf952238e87.0

for ; Sat, 25 Jul 2026 09:29:31 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1784996964; cv=pass;

d=google.com; s=arc-20260327;

b=sc00IznX65uQkU9QX2acnzzVM4Pa9QQPoa2QsUxJTsD35AcIa3Rkbry0wu6wK5GFgh

W2/3FAnmy476t65uoG0/DKhL39Y1emssrpJMEgHhQBSvDoJ5UWs/DHma+NPw5XPiElZg

3ULFfEetUAMVS4XSaz5nqdLj/93e4uJsS3NNnvVE/J5u67zI83AFf2xaUTmOIKTDYVBL

HLelQWH3FLqm/3OXJ7cJzAatlG5adl3hIWt3i+CN0r1NAaAnCyPuxOo/UXLWM/qIRN03

32p/VEp8Rt8Qf+d804Ng7AluBn+mqUU3l8MJxc+/gSgU2nShbZHeBCW5sOcykfuDmwSP

aeow==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=gQVIRcy8lqxy4to+BYi5VCi3At96IC3rEQ6B/RATix8=;

fh=NpMxMNoH9j17hkqxGXsFkQSTWOm9aBmIK2PdTD20MAg=;

b=qMIIENNLWaBrx7PcPXG/7No3US7spMHlWgYRbpDihdEFDCx0ZspC+i4Sa40mIV+hlB

qNLw9+I16mXMYl4qIPLQpbgZnYRggqVuRS02CSty+aibXR8Ee8NUYfHCvNjzucOw6z4R

c/1nuoNbGpR0ZpuLz52SvCUIpb2zDEh66GbkJ4M99TX9XTEpGZsukA4/dAuPaGZ8Qpob

jZFLYDQH40yFmiucuLuN7BFqrOemhbXThAwKhVGUH8U0e+ZnupCyQGy8wiaejbAnVJDX

Gvd+H11utrKdVrNdQRRMXzA2ptRuslA6+2zFO351F4T0mmHBc0GVcFwrYHM8qmTdOcPn

H12g==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=iHJJV9eo;

arc=pass (i=1);

spf=pass (google.com: domain of anaya.singh3226@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=anaya.singh3226@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rankbeacon.xyz; s=google; t=1784996964; x=1785601764; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:sender:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=gQVIRcy8lqxy4to+BYi5VCi3At96IC3rEQ6B/RATix8=;

b=ZhMhr7w/WduM7sRSlCl8K601l46CCWtBLZJpH0D4nvg1QiQ6vGSM+BkSvKKfR2Aj0q

lrG7MZKje0QX9isb5EtjpK8m4mn6VbooeagD0lxw9WbO9rL+oRXRr5JcDFA+lbOFKk8c

UINauCd2CkpOnCwC4/yvzoIZDA24OnzcLjqCtfxruDnPTCc17NGn9glVUy15SEVKVc1m

wAHKJdu+gGTQid3g2bPM8erjeB56mY4E2V0sVzn53usimVUxqPsQrNXO7SFsyp0Chf/S

EVBqbN0IiUgUJ70DkkwAlKbNNPm1sHxd/CfHCN6o69h4P/7aRN3KLN+m3WMrD/BqL3ay

FxjA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784996964; x=1785601764;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=gQVIRcy8lqxy4to+BYi5VCi3At96IC3rEQ6B/RATix8=;

b=jBgLoTv1shPiGJARfKBEG6gShbrlue2biyHD6bmXVCeOYZGyN5LI/YdwU5kCqWJo0X

I7+QeAOEZQ7WTXfHxtptCUuI7d1XCzXw4VQsrQjnnFiAKb68MHdu+wd1sGQvA4yatJmf

mj/6iRgJpzXF5PDNZjMIEEf2YcvdQ+r2mvAwUQ9piDWX4qOFGYMH6SCUFwkxsueWgmbY

6EoD90/EYQABO81kAkeJrVmZh+5I9bxKhooAeAfz9XREvY/FORV/BO/bk/7SN+6pZU0g

NoFAKIwBt3hc9xLJHPUL+KHF/QkPkfAdVvWDfGYzyGvNa172RC3m4Fhm1/qE/Ju60FO0

Cxfw==

Sender: google_seo@rankbeacon.xyz

X-Forwarded-Encrypted: i=3; AHgh+RoXBql3r6mGyRyPFeJodimy6clahwyJ3LGBW4NmuBEH7XC2AVbkfVG5yxNPrqp1D0hNWI8Q@nk.ca

X-Gm-Message-State: AOJu0YwQRF4B/ypeo7nwyqto3ddC/JjlH1q+jkx0n1LNTMa9TSOe5eij

iU0TATwmMM0cJ8nG7Oajw2D8irf7WT/fvQyCJ4+O8U6SWwQBS4WtoWWpo1lYKj+BYSw=

X-Received: by 2002:a2e:b8d2:0:b0:39c:7200:b9b9 with SMTP id 38308e7fff4ca-39f2880973cmr4706691fa.13.1784996964450;

Sat, 25 Jul 2026 09:29:24 -0700 (PDT)

X-BeenThere: google_seo@rankbeacon.xyz; h="Aa7YSPRSG7kGVJx1K1RzpMkOfROOJIOdziaC/PzTUsfimnqHyg=="

Received: by 2002:a05:651c:3146:b0:39c:63ce:34ac with SMTP id

38308e7fff4ca-39f064a1f12ls10243831fa.1.-pod-prod-03-eu; Sat, 25 Jul 2026

09:27:16 -0700 (PDT)

X-Received: by 2002:a05:6512:31cf:b0:5ae:b7d4:7ddb with SMTP id 2adb3069b0e04-5b2c1b13969mr491563e87.26.1784996835642;

Sat, 25 Jul 2026 09:27:15 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1784996835; cv=pass;

d=google.com; s=arc-20260327;

b=EE2fQR7KOkhSqEOHXSJNAkoViis0B6t64lGQW9OcXE/FPiFHGbbuBFVotMuSj42F2c

A+fuRs1QoEeS3HGoNJijAsy5vuf/IiTGdOhfIKOG1F1G8ir5sMQJ7eTkFAXPPApZ/16W

SRl8ySq6aCSlsdaxTwDZ96BIGgkYT0haPAf2wpFSNxW2Ldw98oPc6Vx4/29eFLYfUaDy

NFxd9pNWMvWZ7O4oPLk5jmLAatdbFJP//Py5ncEeYMw8RGa0PVZbr+hK31Mh+ndVBjZH

MV6hmeRk91bEf6Jm6TKD+OAWmoNV2i+pLMLWvBpwmrOoH2BePM0LZtBy8x7ao0hHkqPV

+xvQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=g8eXVDs7lSOLFQ7ZfT588MqrehbWhf6HkiuaB0l6euk=;

fh=PWSUFaEq1CkbsfShP2jell5RPg3MDtCYx7KzhsUuaJc=;

b=hury3/Uj92h7wGtXF7X5iWLoqzOnSaJq9D2zplD2B3GNfNG9hwCxrbfPZjfQrxQGze

TrmOnvtaVBA2mlseFlKAK932ycqBJCANljVQPVrXUgDMfPMSS8tssjvFgR5CbqtztoaB

+vYoJa0E8ZiCUW3nbKgS4ZM+5BKWCXAItNM/sr7JytFR015UxcZqVjf1Txjym4YBDJ8k

wYdm+b7onpgAGgnS0VbWhYeXk+y2xwvfsGEJPbs2PHXGOdhpg+RcSQiAVR9Is/PoGJH/

9IE2KMHK5J10MxLDRcjweEuY/DJzYPZHELEyh0Fo2o0hT7BCnmaolvJULneTJAdgsMpf

jXMg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=iHJJV9eo;

arc=pass (i=1);

spf=pass (google.com: domain of anaya.singh3226@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=anaya.singh3226@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])

by mx.google.com with SMTPS id 2adb3069b0e04-5b2be078844sor364516e87.4.2026.07.25.09.27.15

for

(Google Transport Security);

Sat, 25 Jul 2026 09:27:15 -0700 (PDT)

Received-SPF: pass (google.com: domain of anaya.singh3226@gmail.com designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;

ARC-Seal: i=1; a=rsa-sha256; t=1784996835; cv=none;

d=google.com; s=arc-20260327;

b=oSnncrwxSXNLhsl5skgD8+IRq0BGfwdPdHTRxWLKUBfSQz17ZBUnBg+tB5DX9NdUtO

GWXWzXL8SxS08oPlbhJzouiUo/uVXxr6x1cAZzvrXd0U23eeoIbzNhmeIUAD7dVWv4HZ

sCJ4amlP/b8aj0x9NJN1R0iYszaWLSzEFJd/DyEoS39/nRVk1tR3BJOke1YnG9MHGgbR

gQS6XKrO1jjKheUTkL0aTKCoDN942Sk4Z2cZC9HMSCdGCrEF9O3T1LtARhHE652uikyL

Uyalr+5M6VCMMgC6Ch/8pDahol2nBy1j+YvyapSJAVTWppIy2swJ5f5/9ayioDdyZTa9

TLag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=g8eXVDs7lSOLFQ7ZfT588MqrehbWhf6HkiuaB0l6euk=;

fh=PWSUFaEq1CkbsfShP2jell5RPg3MDtCYx7KzhsUuaJc=;

b=NFJPPmyVh5FaoY7NDfThybIOn0G+uutbfh2b5c+hRYGKTpkU+8tDczXyHrz6ks78Xk

3FQkfiaFaECwZ3F9aNwlDH7IZL+PcaMZa7SS3wE+w6OYOS3WexaLjY2mwCdIyoAyvFO8

bMtyh0wDL0QRgVwGnBOtDhDZok6Z5nMSSWwuXQ0Pqp+TY+eQuTt01PYBV96TINpXKiIv

LF1Oeg/MjlWkmkfaf/vy7ndTxz8WuPyjWjU7BrwHeYC2F+KKszApD7N+6msHsG2OXNJ3

DWnjAgveUJU93reJ55Mewi35WCBhORNUS0GBex08VHRFLXzk13ek0femNJF5hjEMoTmF

bIrQ==;

darn=rankbeacon.xyz

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD12Myt3X5EU+ujsnvhNUG/YIlYfq/Bo1yeX1GHLzmWPGatEf0RIYZK60k8X/14l

61ycFi7SOCEHl4sDE6lSZFXNx10zQdisN1rMUIYn4csx8cAKJhJsbj+LHxuY5Utz4jtWgpBFkWL

nvWR5St0sdYNelUg26T+AJWPnoeRi1Yr5wgNVlCQD1nIqWYsSe4Y2phR9nDazm7gzqq1gtdz3ug

5bZpzT30v/yEEocmLkN5N2mrO6Q+s7oyY4fxI0NyEJ+9pN3WotZa35AxA6SMBjOipx4afxRDbcB

sI2zdK3RKAa6v1MxXeI=

X-Received: by 2002:a05:6512:318c:b0:5b0:141d:ec5a with SMTP id

2adb3069b0e04-5b2c1afb57amr507480e87.13.1784996835033; Sat, 25 Jul 2026

09:27:15 -0700 (PDT)

MIME-Version: 1.0

From: Anaya Singh

Date: Sat, 25 Jul 2026 21:59:07 +0530

X-Gm-Features: AUfX_mwJiw5ICiewWCE2vVdJJ92q258JpppwV4ZfFyXcPlXRB72sI0edyldyq6U

Message-ID:

Subject: Few improvements for your website !!!

To: google_seo@rankbeacon.xyz

Content-Type: multipart/alternative; boundary="000000000000470473065771f6a4"

X-Original-Sender: anaya.singh3226@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b=iHJJV9eo; arc=pass

(i=1); spf=pass (google.com: domain of anaya.singh3226@gmail.com

designates 209.85.220.65 as permitted sender) smtp.mailfrom=anaya.singh3226@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

Precedence: list

Mailing-list: list google_seo@rankbeacon.xyz; contact google_seo+owners@rankbeacon.xyz

List-ID:

X-Spam-Checked-In-Group: google_seo@rankbeacon.xyz

X-Google-Group-Id: 1054195051699

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--000000000000470473065771f6a4

Content-Type: text/plain; charset="UTF-8"



Hi,



Many local businesses are missing opportunities because they're not visible

enough online.



We help businesses generate more calls, inquiries, and customers through

Google.



Reply "Sure" and let's connect.



Thanks,



To unsubscribe from this group and stop receiving emails from it, send an email to google_seo+unsubscribe@rankbeacon.xyz.



--000000000000470473065771f6a4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Many local businesses are missing opportunities=

because they're not visible enough online.

We help businesses g=

enerate more calls, inquiries, and customers through Google.

Reply &=

quot;Sure" and let's connect.

Thanks,








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to google_seo=

+unsubscribe@rankbeacon.xyz.




--000000000000470473065771f6a4--

Dragonfly/ Intelcom phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Jul 2026 12:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wnhFW-000000007pw-3pxl

for dave@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 12:37:26 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Jul 2026 12:37:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps.fslocal.com ([199.83.208.249]:38494)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wnefj-000000000aT-3MOe

for sales@nk.ca;

Sat, 25 Jul 2026 09:52:32 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=laravel.perksona.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:

List-Archive; bh=sDNfpZErZvXaokLFnuFHft4Svn7KnO6x598cSskuhiQ=; b=WOb8573tcfXy

yfFBeRyehPOmjhj7pHHMRpYv4ZovwIMT1eMmJYj30fFhSDuJ5efF0VnoLJcXONv0vac8CEDzXyqCm

mLe2KAXht7/+6H7XB4sSoXN5BLGV0Xqec0wjzPjAleIi8owx2f0xW6THfd4d7rj0axNvPL1x4QzV9

JSS7kGoa2BCF8nUeGk0mrn7F4K0lKpPo2tiMNVhbcF+GGJj32Odo1mdyvbwj2Wbidbfo1ushmpdU1

nlHNklYnDmhpTXPTNhOhOaKsNsnSPkqjVAIwuFFvSZDEO2vJVSswlwx5Iza8wypQHk5Ca/IoYh95n

4dcB/PwoUHur7AUUFAfy9A==;

Received: from [196.75.60.176] (port=58404 helo=[127.0.0.1])

by vps.fslocal.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.4)

(envelope-from )

id 1wnees-0000000CRul-28gD

for sales@nk.ca;

Sat, 25 Jul 2026 11:51:26 -0400

Content-Type: text/html

From: Intelcom

To: sales@nk.ca

Subject: Intelcom Delivery Notification

Message-ID: <02d5530f-76eb-e8f7-1afb-7f71cfe8e477@laravel.perksona.com>

Content-Transfer-Encoding: quoted-printable

Date: Sat, 25 Jul 2026 15:51:24 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps.fslocal.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - laravel.perksona.com

X-Get-Message-Sender-Via: vps.fslocal.com: authenticated_id: info-mjqu@laravel.perksona.com

X-Authenticated-Sender: vps.fslocal.com: info-mjqu@laravel.perksona.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom Delivery Update



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.75.60.176 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.60.176 listed in dnsbl.ahbl.org]

[196.75.60.176 listed in dnsbl.ahbl.org]

[196.75.60.176 listed in dnsbl.ahbl.org]

[196.75.60.176 listed in dnsbl.ahbl.org]

[199.83.208.249 listed in dnsbl.ahbl.org]

[199.83.208.249 listed in dnsbl.ahbl.org]

[199.83.208.249 listed in dnsbl.ahbl.org]

[199.83.208.249 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.60.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.60.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.60.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.60.176 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[196.75.60.176 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

[199.83.208.249 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[199.83.208.249 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Intelcom Delivery Notification
















MARGIN: 30px auto; border-radius: 10px; box-shadow: 0 4px 10px rgba(0,0,0,0=

.08)">


center; PADDING-TOP: 20px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

Intelcom










TEXT-ALIGN: center; PADDING-TOP: 30px; PADDING-LEFT: 30px; PADDING-RIGHT: =

30px">

Delivery Update





Your package is currently being processed and =

requires a small fee for customs handling.






18px; FONT-WEIGHT: bold; COLOR: #04ab94">Amount due: 2.96 CAD





Please confirm your delivery =

details to ensure a smooth delivery experience.




BACKGROUND: #04ab94; MARGIN-TOP: 20px; FONT-WEIGHT: bold; COLOR: #ffffff; =

PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-LEFT: 25px; DISPLAY: =

inline-block; PADDING-RIGHT: 25px; border-radius: 6px">Manage My Delivery =








#f1f1f1; COLOR: #888; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; =

PADDING-TOP: 20px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

This is an automated message. Please do not reply.=





© 2026 Intelcom Express











Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Jul 2026 09:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wneXY-00000000B4p-0l0u

for dave@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 09:43:52 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Jul 2026 09:43:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:52582)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wne2D-000000001hI-2Jgl

for root@nk.ca;

Sat, 25 Jul 2026 09:11:39 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-38ea32e57e2sf2675951a91.1

for ; Sat, 25 Jul 2026 08:10:42 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1784992236; cv=pass;

d=google.com; s=arc-20260327;

b=aW/4e9TYzg4gObpeY/RR+efTQgcGkNWlRJtNiC2Lqwrt6K/WerDAhcr+mrvZ85t86h

pLGnTf9ZBmDW2CYTP+an0gojCMU0PJ6aPXNAIxR+H73ZPcnjWFXLUW+ODPh2eew0l4WL

GywdkswkKBsAGqTRIc3nFHNlr/2jeGIrlUP5Mj035ip+QZcY38eaDqc9WGVPjg/5jeOi

7pmWDXyS75XktU0dO5mhUV7VprCJJ0W5jrD56H8Eij1qJzaqsqRSCLQL0FTJQfUixTUm

pQqRtIFyXapRNzver+GtRAF+H3NSA+6zrAFLHhiTw9ZxXsml9lW/42fdl9Iq57Qp1X31

NnqA==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=7+Tf5i57NiUOeuQ2JVL47eK4odYUOp+NpDW4vYpAuuI=;

fh=GSTS1F8Fs2MHWutf7v3ey04JwL5MZunFLi5/yLoq8LA=;

b=rDwTmarPmL5Z6YZnkz4FI0wo+cDWxBqznZjTiJZAcNAXbc1bYgBpcj93rF8Wt7yolp

lFyIOfTMy6U9Iqs2OfMCKN6KCmXWZ72iITsa2OG72CF7yRA3/6+toNLP/+TvoawH/1Y8

w3h64iqkS2o3e3edsLMDDWJUMjOSeXq4nbwpCuAotp/dM7GCaADDKgPG+k/8dxmT4WPp

MkgPM4Yigs8T/zEEBVCCjug0rLwGtuD+VdzCA91WjaYWjrtHI0haclR28BvzAY7RFk9Q

+f05vun6IKwp2YY9RzQCno/FTxUXNQ2363aLch1NG1Yt6+6UIHdfvJm6h1SO1F3Poj5B

1urQ==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=XLkoDbx7;

arc=pass (i=1);

spf=pass (google.com: domain of ella.white3180@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=ella.white3180@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rankbeacon.xyz; s=google; t=1784992236; x=1785597036; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:sender:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=7+Tf5i57NiUOeuQ2JVL47eK4odYUOp+NpDW4vYpAuuI=;

b=JHKHSG9oEpH8VIvwtdmNz5RRMBD5nFEs9cAgiqbZHnKMt//OSoNRt6YH8hyJMrjJk+

So+e1cx+kGGQWaym1U8Qa1v3d01S2/ghGubdYpkiFv5/SqTSmvOK3PDlbOMY1pd9bnIW

6fLFQPATWJTCzFlCvUL7+3FOck4hBQQLAZFogaXLwQHm+9tzFNQZHkxg2Nw0MS9uARyj

COjZaJxlncNG34pqaeYlsG8Nowh98IwOoVTtEQSNVViERx9ZDQ3q22/VWITldMITcm8M

xivR0ce6FVUYE3urwvA+8bLMRRaCDXIGSVIF/WL2QfoK00uyi6F0p+9mVLYT9rkWxHG/

3mmQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784992236; x=1785597036;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=7+Tf5i57NiUOeuQ2JVL47eK4odYUOp+NpDW4vYpAuuI=;

b=Ce23sCayQtqsVFSMUcAzjv/laKS6nKjDFM7duQthPOAx64dwuUlFVe/jzMQdZt5cFt

D09SK+IOmHIckq1FCck3A/hPA2f8IQeXb9tiI5/y2udQ3XgY1fhRMwrj2y2bhGhY1CNO

6km+72Us/G4G97e/rdJwXBrmAgSGkTjeJ92YSPS+yqP7KF37yBudec46EwyHuWM9bKrz

YVA/zc1bU10dzbtOmosx4vjL1hexhJj3Sdoz34MrUmPFMKqEYij1jjBmSQzWb7fF8Vtm

WA08SYQAGj+aPuqsFzOlRCUtECk0JZR1HhKYL2pq/99Z7sol9ONIUSaKiFCj4G4NH10U

SXhg==

Sender: google_seo@rankbeacon.xyz

X-Forwarded-Encrypted: i=3; AHgh+Rpm2MxIGY4hoKfLf2JFcEx/P5fSZSeCf16f//T59PKtzcLjTyJ/Hv0A15IhJqBev7zCwI5s@nk.ca

X-Gm-Message-State: AOJu0YwAdtJVMACGwXniw/GPzD+6HjZziQwE5yOaiCY89Y2Oo3iNvDrG

D7yPG2rRLarCViT41RUa+vo0o7YYreGchdNs3mFuRsAL7Rv0kRDxuBhF811az2icyv8=

X-Received: by 2002:a05:690e:e81:b0:666:3936:98fa with SMTP id 956f58d0204a3-668c7a37615mr625053d50.4.1784991853093;

Sat, 25 Jul 2026 08:04:13 -0700 (PDT)

X-BeenThere: google_seo@rankbeacon.xyz; h="Aa7YSPQO0PozLsMCmhkdLWjDSIpn/H5s0YjmsGY+M6bjZG4xPQ=="

Received: by 2002:a05:690e:1286:b0:668:85e9:dcf0 with SMTP id

956f58d0204a3-668a1631950ls1870702d50.0.-pod-prod-05-us; Sat, 25 Jul 2026

08:03:12 -0700 (PDT)

X-Received: by 2002:a05:690e:1543:20b0:667:bd13:2f63 with SMTP id 956f58d0204a3-668c7bb98dbmr487896d50.59.1784991792212;

Sat, 25 Jul 2026 08:03:12 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1784991792; cv=pass;

d=google.com; s=arc-20260327;

b=dwHX1cDsKnVSDL7lPt3XqV644FmPxVaC3OGuWsAQl3ShFjVXJO5eCyIagAKAj4ESsA

YXiQbNec8qu7VFlsWCR0JQF7JJUeZc82XXmc1fZ0C9VDdyyPqNr1uu030lGpsmZe09hH

DYHG+6nWcOT3WuEpuRXZji0vioSMsEyh6XEA3p4Q5RvhwqJE0Ee75ZRFjUYC97ZCpqq2

JMXVILG2b8n0Plv59AtcyWJg/NAsy7KCjFTCdruPTGf7q8ODTPS2vTD+tRqAWdojuG8N

tArWc0Jm6iSMS+/J1MO/OSPt/tvTAPkP/3q/G2Ym6lDMn31O+uHNwXcR1kRQi8oZ46P6

1+sw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=s4V2XHaG9aRw7mWETWp4rc5Clk2cejwUFX4Kt2V3XFg=;

fh=PWSUFaEq1CkbsfShP2jell5RPg3MDtCYx7KzhsUuaJc=;

b=bLxbG/LuZkqeMlzMc4K8bkJG///xa38FFuXsxR5Ji7cD31yaqKB76XcrfsY/ehiFnd

X0eWAGlwi/RQnjSn3u7zXVOiVpJ4G6guDD2Ri2Cwju/1vA8obWKmx9REN2VHDfIUhp57

pFyBMlaZZZkxrSICwrUANzbM5RzzlS2xO0I6dUyIcQs9gTjf9+iK/icQ7djxpcYgb9pJ

S6c9irUUoTdqZVKw8KJvKnx91gQsXtKZoVXMPI4Uifbkp+HVraolu20Uj175j9xmSMYT

1W4uMl0OIxFDOcagpnft4TFSUYPyL2QpMJ+f1WQVC7Yacik36Ndne0i8nwc4pIyYAMKs

ZIOg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=XLkoDbx7;

arc=pass (i=1);

spf=pass (google.com: domain of ella.white3180@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=ella.white3180@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])

by mx.google.com with SMTPS id 956f58d0204a3-668c70054c0sor1475273d50.10.2026.07.25.08.03.12

for

(Google Transport Security);

Sat, 25 Jul 2026 08:03:12 -0700 (PDT)

Received-SPF: pass (google.com: domain of ella.white3180@gmail.com designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;

ARC-Seal: i=1; a=rsa-sha256; t=1784991792; cv=none;

d=google.com; s=arc-20260327;

b=DxCpifMeMes9iRMf7jeW+a50x5kCzJKojGcmOFmHV73d921Q5rRIMqdbmzaXinFPA9

1zTavF7UpXN/6/H4GYoyQO6Qtj5dgiZ7E4VFlbHVY6NuV4fzRXGLnxuwst54PBckG/Q0

HNt4q+cKiNIvNG/VRia7XedtRJ7mlM3OHyTDmkC+21HweTqCxBqd9Kp+mmy52EoIcW7b

4bM3s1iGykyTp+ipi3hKsQF8RsJXWlxfc0CkBVsE3x0gvjmPC6zGTOyTpVWuLChWp8vU

DxGRrYngMm6wy1lpYh1LbiVaHhP9to4lf91eiNLkzthVIkmYBv4gHXE9FlOyEwsXVU07

vCww==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=s4V2XHaG9aRw7mWETWp4rc5Clk2cejwUFX4Kt2V3XFg=;

fh=PWSUFaEq1CkbsfShP2jell5RPg3MDtCYx7KzhsUuaJc=;

b=UyL/FDieunP9c9u+zzfOB2H2cEw+D4Ed7TPZLVMmtzHZM+rJB8gpTGIUse6rM5gKf6

EzEoVQmJstlncieLdMZO3HAFPZQmvd/5T/RvepTi98e+tiWAHdRuQegTkrxbIl6I/D0z

YyF/Dw06fOZyFKYs+Kq5ER2cDfB+tAMpftffb1Jz4swQW0E9KFM9zfi0t5zwhpEdDu34

8U5OPkFW4EEOAk6+rbCnetpBRSOpFf9YKQ7/C+HHlxtB//YICsSin8xpaa5wKKzFYS4l

HcJmHFbtiX59hNgqgdZRSTcOVggTcSwAKrPddYt1I9u6+hiAVr8+BlN+ikGBhuCLE/eo

4FWA==;

darn=rankbeacon.xyz

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD13d0z4kEP2HXSbGo0pydEKUqHIw/TpMzXTEbqmcDZFKa2+B307ruOdCj3UIE3N

/0JixMEL7cu/gW2o4V41YDJzM0wH0m3e3LCXTAVO2LskqkWwGMIOuHz4vU85if8/godLL9Qgs9+

OuWdl62BwVvfd6BLCNiu+WVr5sg5GLxPZ4jLiCBiooeE0baUzuMRwQGHiqLLJX4ISGj7R4c0iUj

0r7HSQQLroByqmA3xypuO1M2iOe8+CqHC8bRvo0QX+/HWRTq0ijRqsL9U2KSI+7+/tLvqdqYhF8

z+B2Z2MyXRkNPtuJrz0=

X-Received: by 2002:a05:690e:bcb:b0:668:9148:17ef with SMTP id

956f58d0204a3-668c7a72322mr594870d50.24.1784991791727; Sat, 25 Jul 2026

08:03:11 -0700 (PDT)

MIME-Version: 1.0

From: Ella White

Date: Sat, 25 Jul 2026 20:35:05 +0530

X-Gm-Features: AUfX_mwsnMH0st646LdFKrtAY1jGZZmfbVPRIQ_NCaFouNqDL1Oupcv29gHPPho

Message-ID:

Subject: I Found a few opportunities on your website

To: google_seo@rankbeacon.xyz

Content-Type: multipart/alternative; boundary="000000000000ac46ce065770c9d7"

X-Original-Sender: ella.white3180@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b=XLkoDbx7; arc=pass

(i=1); spf=pass (google.com: domain of ella.white3180@gmail.com

designates 209.85.220.65 as permitted sender) smtp.mailfrom=ella.white3180@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

Precedence: list

Mailing-list: list google_seo@rankbeacon.xyz; contact google_seo+owners@rankbeacon.xyz

List-ID:

X-Spam-Checked-In-Group: google_seo@rankbeacon.xyz

X-Google-Group-Id: 1054195051699

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--000000000000ac46ce065770c9d7

Content-Type: text/plain; charset="UTF-8"



Hi there,



I noticed a few things on your website that may be affecting how

visitors engage with it.



I documented a* few recommendations* that could help improve results.



Should I* send them over?*



Thanks,



To unsubscribe from this group and stop receiving emails from it, send an email to google_seo+unsubscribe@rankbeacon.xyz.



--000000000000ac46ce065770c9d7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi there,

I noticed a few things on your =

website that may be affecting how visitors engage with it.

r>I documented a few recommendations that could help improve resu=

lts.

Should I send them over?

Thanks,








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to google_seo=

+unsubscribe@rankbeacon.xyz.




--000000000000ac46ce065770c9d7--