NetKnow Now In Netcraft's Top 17350 Part 2

Posted by Dave Yadallee on


TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow Now In Netcraft's Top 17350 Part 1

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 17328 from 16383 at Netcraft and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


    3. and
  3. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 3477 from 3470 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 5961 from 5780 and are hosted in Europe.



Government of Alberta



The Government of Alberta Website

ranks 14740 from 14669 by Netcraft and seems to hosted on Cloudfare.



Netknow again





We at Netknow are at 17328 from 18857 since the start of 2026.



City of Edmonton







The City of Edmonton ranks 36255 from 36550 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta ranks 49071 from 47450 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 320343 from 312886 who are the owners of

US Based Netzero at Netcraft Rank 81648 from 82874 .





NAIT / Northern Alberta Institute of Technology





NAIT ranks 122518 from 122953 hosted by Microsoft .





Grant MacEwen University





MacEwan ranks 142431 from 134653 .



TekSavvy



TekSavvy ranks 206913 from 218040 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 305878 from 324290 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Internet Centre / CCINet



Internet Centre

rank 349367 from 350549 . Their partner Rack Nine ranks > 2000000.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 482206 from 484085 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Distributel / 3Web / CIA



Cybersurf

is ranked 943163 from 952070 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

Canada Revenue Agency phish from OVH

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Jun 2026 12:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWeVd-000000007rk-36W6

for dave@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 12:15:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 Jun 2026 12:15:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.quickemail16.org ([57.131.43.70]:49274)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWcLA-00000000OZi-2lNM

for root@nk.ca;

Mon, 08 Jun 2026 09:56:49 -0600

Received: from vmi3337591 (vmi3337591.contaboserver.net [207.244.246.94])

by mail.quickemail16.org (Postfix) with ESMTPSA id B8DEF8007595

for ; Mon, 8 Jun 2026 15:55:59 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.quickemail16.org B8DEF8007595

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quickemail16.org;

s=202603; t=1780934160;

bh=HTqLaJRCcKgs+aPZoI61yGbAlL5Ahz2DzdPbWitPhc8=;

h=Reply-To:From:To:Subject:Date:From;

b=LIkmwn+dzxBM/VWyrnF/xkHnMNpOrTB+OTrGkRKqh/RWCaHrbv06ATYHR+OZ3L2J5

+n9MO76rFrZBQllH+vk1ChikX0qPwqLmqA5edhYQVHyFNVA+lM7p91M4lkPLvXAqaI

L4292JM+RHOiC/7x6p9tPE7Ay96Y8BP6TZ8RzpovAmVXatNsaf4efKsqym0b04+k5i

B99v4Wl0tEBzqZyOG64jbBy/JFf5TosIFSPQhl8tvPDuHUjOKeHjxfoL/LXnc1p6nh

VVs6KGBat5MmQVYA20ec3/VaF7De8fuevBYXy/oyEKCbM9FG9klcf7P/yPOCU8MbPm

E7/RfWJ+7dh1Q==

Reply-To:

From: "Canada Revenue Agency (MyCRA)"

To: "root"

Subject: New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada

Message-ID:

Date: Mon, 08 Jun 2026 17:53:09 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0001_89CC401B.724E6B4A"

X-Priority: 3

X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.quickemail16.org [0.0.0.0]); Mon, 08 Jun 2026 15:56:00 +0000 (UTC)

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Find Attached





Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[57.131.43.70 listed in dnsbl.ahbl.org]

[57.131.43.70 listed in dnsbl.ahbl.org]

[57.131.43.70 listed in dnsbl.ahbl.org]

[57.131.43.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[207.244.246.94 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[207.244.246.94 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[207.244.246.94 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[207.244.246.94 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

[57.131.43.70 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[57.131.43.70 listed in bb.barracudacentral.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: quickemail16.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[57.131.43.70 listed in bl.score.senderscore.com]

Subject: {SPAM?} New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada



This is a multi-part message in MIME format.



------=_NextPart_000_0001_89CC401B.724E6B4A

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_0002_F8FF8F97.4553704B"



------=_NextPart_001_0002_F8FF8F97.4553704B

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable







------=_NextPart_001_0002_F8FF8F97.4553704B

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



=0D=0A
TML>=0D=0A
001">=0D=0A=0D=0A

  Eng=

lish version *** La version fran=C3=A7aise suit ***

=0D=0A=

 

=0D=0A

Find Attached





------=_NextPart_001_0002_F8FF8F97.4553704B--



------=_NextPart_000_0001_89CC401B.724E6B4A

Content-Type: application/pdf;

name="CRA-Document shared with you Executive Mins Document.pdf"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename="CRA-Document shared with you Executive Mins Document.pdf"



...



------=_NextPart_000_0001_89CC401B.724E6B4A--



Canada Revenue Agency phish from OVH

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Jun 2026 12:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWeVX-000000007rR-49c5

for dave@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 12:15:31 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 Jun 2026 12:15:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.quickemail15.com ([51.210.105.103]:53494)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWcL2-00000000OYZ-3noq

for sales@nk.ca;

Mon, 08 Jun 2026 09:56:44 -0600

Received: from vmi3337591 (vmi3337591.contaboserver.net [207.244.246.94])

by mail.quickemail15.com (Postfix) with ESMTPSA id B11F150009EE

for ; Mon, 8 Jun 2026 15:55:50 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.quickemail15.com B11F150009EE

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quickemail15.com;

s=202604; t=1780934150;

bh=HTqLaJRCcKgs+aPZoI61yGbAlL5Ahz2DzdPbWitPhc8=;

h=Reply-To:From:To:Subject:Date:From;

b=KkbDNfqaBFCZSKDQneOo3Z3xexns/f7SD4fPTgTDzwBWbKZi1pvBBeT1zmnl9Lsn9

8kjVON01KQBBw5x8I9frfMgrltHaKRSEeVTRjqqmMl+7JZpX0FED50gI3Q4uEol0q9

vm34uPsfxhbuYihsHINJt79O3tTnFTkG4DyRyVN9+qbcH71OsRY6FJvWIvNvajckiK

BpxYw9i5SoRuqkJfX4nplWMRHwk4B+NvOt4v78jEtToHV7u1sy8GrTMtVhQtsGAYi8

SkOKCvui0wKo0YQrQsBtE+JddswUCl23JVLwN8G14XVNUODJppU7QXwgIc8y6O8fn4

/kCO9x+d0NuFw==

Reply-To:

From: "Canada Revenue Agency (MyCRA)"

To: "sales"

Subject: New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada

Message-ID:

Date: Mon, 08 Jun 2026 17:53:00 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0001_89CC401B.724E6B4A"

X-Priority: 3

X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.quickemail15.com [0.0.0.0]); Mon, 08 Jun 2026 15:55:50 +0000 (UTC)

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Find Attached





Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

[51.210.105.103 listed in dnsbl.ahbl.org]

[51.210.105.103 listed in dnsbl.ahbl.org]

[51.210.105.103 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: quickemail15.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.210.105.103 listed in bl.score.senderscore.com]

Subject: {SPAM?} New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada



This is a multi-part message in MIME format.



------=_NextPart_000_0001_89CC401B.724E6B4A

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_0002_F8FF8F97.4553704B"



------=_NextPart_001_0002_F8FF8F97.4553704B

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable







------=_NextPart_001_0002_F8FF8F97.4553704B

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



=0D=0A
TML>=0D=0A
001">=0D=0A=0D=0A

  Eng=

lish version *** La version fran=C3=A7aise suit ***

=0D=0A=

 

=0D=0A

Find Attached





------=_NextPart_001_0002_F8FF8F97.4553704B--



------=_NextPart_000_0001_89CC401B.724E6B4A

Content-Type: application/pdf;

name="CRA-Document shared with you Executive Mins Document.pdf"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename="CRA-Document shared with you Executive Mins Document.pdf"



...



------=_NextPart_000_0001_89CC401B.724E6B4A--



Canada Revenue Agency phish from OVH

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Jun 2026 12:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWeVS-000000007rA-3KIr

for dave@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 12:15:26 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 Jun 2026 12:15:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.quickemail15.com ([51.210.105.103]:45626)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWcL2-00000000OXb-3nso

for doctor@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 09:56:44 -0600

Received: from vmi3337591 (vmi3337591.contaboserver.net [207.244.246.94])

by mail.quickemail15.com (Postfix) with ESMTPSA id A76CB50009E8

for ; Mon, 8 Jun 2026 15:55:41 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.11.0 mail.quickemail15.com A76CB50009E8

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quickemail15.com;

s=202604; t=1780934141;

bh=HTqLaJRCcKgs+aPZoI61yGbAlL5Ahz2DzdPbWitPhc8=;

h=Reply-To:From:To:Subject:Date:From;

b=T/QzSDA3M8BVqWXVnG3dtp4lgicFc91lMV6th7a58Z1iriz2yErQhLBU1T89R6LMH

IYpgUJlf2BbgmirIAn1Eu/m6DsEoI+q0NWC8OSdwli5sAbSOEbqjS2uu4l4dUrFekP

kzjM4xaRCe0zrPpsGl9sBeKToQs6X7aJcXLkwuCRTNTh7wKEVpH15XGRMVyHG9w3YY

4ZV0C4E9SYJH5MfailMLib++P51E4ffhx9q2ptHomdy0yytI9i0ZIboE2x955pE+PA

iONP5nZa+XN0fWJESSV8nyJwdWy1QIk9whODPwzxYEzCj3iFVuuqOaEX2865oV1+vY

do7UCeOiFONog==

Reply-To:

From: "Canada Revenue Agency (MyCRA)"

To: "doctor"

Subject: New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada

Message-ID:

Date: Mon, 08 Jun 2026 17:52:51 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0001_89CC401B.724E6B4A"

X-Priority: 3

X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.quickemail15.com [0.0.0.0]); Mon, 08 Jun 2026 15:55:42 +0000 (UTC)

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Find Attached





Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

[51.210.105.103 listed in dnsbl.ahbl.org]

[51.210.105.103 listed in dnsbl.ahbl.org]

[51.210.105.103 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

[207.244.246.94 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.210.105.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[207.244.246.94 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

[51.210.105.103 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: quickemail15.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.210.105.103 listed in bl.score.senderscore.com]

Subject: {SPAM?} New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada







English version ** La version française suit **







Find Attached



------=_NextPart_000_0001_89CC401B.724E6B4A

Content-Type: application/pdf;

name="CRA-Document shared with you Executive Mins Document.pdf"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename="CRA-Document shared with you Executive Mins Document.pdf"



...



------=_NextPart_000_0001_89CC401B.724E6B4A--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Jun 2026 08:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWabs-00000000CtE-0h1X

for dave@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 08:05:48 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 Jun 2026 08:05:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f181.google.com ([209.85.128.181]:43070)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <33730@thenyeripoly.ac.ke>)

id 1wWZKY-000000001ay-36hd

for doctor@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 06:44:00 -0600

Received: by mail-yw1-f181.google.com with SMTP id 00721157ae682-7e053987001so41564167b3.0

for ; Mon, 08 Jun 2026 05:43:03 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1780922577; cv=none;

d=google.com; s=arc-20240605;

b=F0ja/zJViXaoXH8bloVSl4l+rQmpUSt5a05hMkVPMkUAQd0WJ5r6UInvlZhzXScLrX

ZZAKAIWqYSMKjpD8+0ITipxXzsGEQSzqRGbmouqZKv5kgExMTNY/WecJ3T9faiNLZVNW

Wl7opXb/bUaxj5cNJkNm59ZTzTmA8wAmxJcbHDB57riUsAGeQZddnje2hN3zsO2Q4iEH

dDmaQt5oCDpN7SGpxCXGwbo3IcEIgyq5C1W3uUVEIvC0F+9k4j46K7+oAgNirrx6n7i8

UbkSg1iGCi1E7EX/HDREaYPBOYpd/aXaXSzs1JXO18WQkyoG1rZdnHPGpvCEKHS71E9o

mI9g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=4pt9uZss9DsgZKjmowLcAjIv/ckfzFR3biD3x3Zz8DI=;

fh=Rj5azVp4Y1OvhQaDAZI99RrdY0D8kUwqygcw09xHFoU=;

b=C7K4WtW73eXhFvhsUV06wog4h1Mt6FVAg9F3NzsoJ9tVv2bxFoYl6yNry8GI85dtwu

Q12KzTVR5WQw+PeeOHejUsVWlSAabgT5A5vjGk6Xc1Q6NQWOTlYyomzF2YbCK33dN5ZF

/Ry+hOecLoUkfG/HygzpvCUT1mPHUbZ6TSlFLHaAURlOapHxfw0triNjOMlkfmx79ydY

+1TRBym8rJQVPLJle9ynOcSQo1VRzVgZDZlLKbdG25pukmDUSqyuwZbFWZAPzqZx+1UU

SZhbs0YJKs97nXySgcbnVvvz/DGZEP/iycrnXb3daINm5c7ZJiosrTj0j9bTvMQsLgW2

EUlg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thenyeripoly-ac-ke.20251104.gappssmtp.com; s=20251104; t=1780922577; x=1781527377; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=4pt9uZss9DsgZKjmowLcAjIv/ckfzFR3biD3x3Zz8DI=;

b=S+WyqL1oVsGPrhVQLjaJsKHl8ZrgWKZ112heHibm/MkPmGzTIvYn0gJrNGTW7XKcEI

Zn1g167sqrJ8vDxSGJWWYDSpZxH8X4AQhFf+2MwtTV7Ypq+PpU0BNfIzlX1f8h8kRVZT

IwUJyJqOseV/sMGG9VYZ4gImTJR/VipIcxEMxt4+bQFCpmmqLcjPDK9sVYzYUio3eRTV

WcgnHE7e/vKRy2N1PFqXFUgFWrIjQjs/1MwfLXNgwPHGo25Au9jfZKLJIsBPphDiz/jb

gmWadVN696YvVpJlMLDWIDLk6gjY/6bFSmeLo0Wn19LhUzbRtRzC5xmkWPf3tQ2aqYMf

tIVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780922577; x=1781527377;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4pt9uZss9DsgZKjmowLcAjIv/ckfzFR3biD3x3Zz8DI=;

b=SlO5b2k+gDLc/pN+CTOE1Een9ChplqA/zATDKxpZ8cABMv2LV8yOmsoLfTi/YGQkwu

8tdNVjNQ+0g5+hC1KFfxRPit0GGQKD7TTiYncwBlWHv7a2yhT8l117j/RuWkjywYxEI+

kvcZhhXMI2Ng4IckpPWxuMIGVm1zDvaL4UBbhbTT6eZzMYb9jqr0LFg8mRTciOWHwqev

+zuyf1HbDJTmC35spbcTaOG3ZVLQYrLf4RnXvvTa3caUWHpODW+H4PytFM5v7WkwEc0Q

62f3DYItCZZoeOUSqIouV9eJ2cqoZvLgXYHNfdPAjepgf+FDpR6fcMTTeLCTLYzvd8Ur

TTdw==

X-Forwarded-Encrypted: i=1; AFNElJ8rHyXy1su407Hy7EjUqvJknyHkqhlYk8N+1H+D/14H0ZaKQMh1j7n31iPMZGn20XY7GUvNUrQ=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwB+2hkM2298opRfHT6vj4BHktTY3eWUeLNhQASCJCi4YyDdmRO

gqgxOAU7lPmsslaNXApQFmAn2v5DIhjcr9CKaz36wj0YT2INYI9RYGznSIEcemvMBwDuURRx6UG

y9qFl4OQLq9mOeHGtq67Ckt6eMaXn5Fwzb4tMoS4WRQ==

X-Gm-Gg: Acq92OHrHJvCeZu9YeH13IkuEm8Of7oyJ/95C4m8KmHOWwOh9P8XHz3xuXC+MuC/wMI

47FWuS/rd9nUxzbh4C0TXhQ5+/v25ui8DDzHGIBBDVtld1IlYC1XLBJwWC8E07rIsezHUsZ3BX6

k7Fzi3qLCRtvHl8NII75uioD+mhem68MNFv5kyyfcE7vPl+z96JrnLluAFqU1Q3ph50+XRmoGcO

FS9oH3joa5jf3YgYWkZDp19etVMRPLQultNZyyIv2DG5tWSEduHUDoysGR3Uj+WfQ2DrA5NFB/3

FKxcyC1QQsqVW2EJ

X-Received: by 2002:a05:690c:c1d:b0:7d0:bc:3aac with SMTP id

00721157ae682-7ed50a723f7mr108763767b3.8.1780922577407; Mon, 08 Jun 2026

05:42:57 -0700 (PDT)

MIME-Version: 1.0

Reply-To: info.beateheist@gmail.com

From: Beate Heister <33730@thenyeripoly.ac.ke>

Date: Mon, 8 Jun 2026 05:42:44 -0700

X-Gm-Features: AVVi8Cc-GMoUVLpa1rI_pazgFJsePAXhhgq-nDz1xot-FT4yQibKgm5fZgdjuzM

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009960580653bd593f"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- *Congratulations, we are pleased to announce that you have

been selected to receive a donation money for us Please contact the following

email for further information on how to claim your funds! Email [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.181 listed in dnsbl.ahbl.org]

[209.85.128.181 listed in dnsbl.ahbl.org]

[209.85.128.181 listed in dnsbl.ahbl.org]

[209.85.128.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.181 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

[209.85.128.181 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.181 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.181 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.181 listed in wl.mailspike.net]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?}



--0000000000009960580653bd593f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



--=20













Congratulations, we are pleased to announce that you have been selected to

receive a donation money for us Please contact the following email for

further information on how to claim your funds! Email:

info.beateheist@gmail.com Best Regards,Mrs.Beate

HeisterCopyright =C2=A92026 The Beate Heister Foundation. All rights reserv=

ed.



--0000000000009960580653bd593f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--

-smartmail=3D"gmail_signature">



Congratulati=

ons, we are pleased to announce that you have been selected to receive a do=

nation money for us Please contact the following email for further informat=

ion on how to claim your funds! Email:
ail.com" target=3D"_blank">info.beateheist@gmail.com
Best Regards,
r>Mrs.Beate Heister
Copyright =C2=A92026 The Beate Heister Foundation. A=

ll rights reserved.




--0000000000009960580653bd593f--

Nigerian spam from Gogole Gmail Part 2

Posted by Dave Yadallee on
--000000000000aa98060653bd1905

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,

I hope this email finds you well.

My name is Williams Graham, and I am a banker based in the Republic of

Togo. I am contacting you regarding the estate of a former client who

passed away approximately ten years ago. This individual shared your

surname and was a citizen of the same country.

Since my client=E2=80=99s passing, I have made extensive efforts to locate =

his

surviving family members; however, these attempts have been unsuccessful.

Recently, The board of executives in our bank, notified me that the

account is at risk of being confiscated by the state due to prolonged

inactivity, these assets are worth millions of Dollars.

I am reaching out to discuss the possibility of you being presented as the

next of kin to claim these funds, Once the transfer is secured, we can

arrange for an equitable distribution of the assets.

Please contact me at your earliest convenience to discuss this matter

further.

Best regards,

Williams Graham



--000000000000aa98060653bd1905

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




rif;font-size:large">Greetings,

black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">I hope this email finds you wel=

l.

ize:large">
nt-size:large">My name is Williams Graham, and I am a banker =C2=A0based in=

the Republic of Togo. I am contacting you regarding the estate of a former=

client who passed away approximately ten years ago. This individual shared=

your surname and was a citizen of the same country.

t-family:"arial black",sans-serif;font-size:large">
"font-family:"arial black",sans-serif;font-size:large">Since my c=

lient=E2=80=99s passing, I have made extensive efforts to locate his surviv=

ing family members; however, these attempts have been unsuccessful. Recentl=

y, The board of executives in our =C2=A0bank, notified me that the account =

is at risk of being confiscated by the state due to prolonged inactivity, t=

hese assets are worth millions of Dollars.

quot;arial black",sans-serif;font-size:large">
ly:"arial black",sans-serif;font-size:large">I am reaching out to=

discuss the possibility of you being presented as the next of kin to claim=

these funds, Once the transfer is secured, we can arrange for an equitable=

distribution of the assets.

ck",sans-serif;font-size:large">
black",sans-serif;font-size:large">Please contact me at your earliest=

convenience to discuss this matter further.

:"arial black",sans-serif;font-size:large">
mily:"arial black",sans-serif;font-size:large">Best regards,
n>

ge">
:large">Williams Graham




--000000000000aa98060653bd1905--

Nigerian spam from Gogole Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Jun 2026 06:26:59 -0600

Received: from mail-ua1-f49.google.com ([209.85.222.49]:46264)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWZ3H-0000000018G-3Mkz

for dave@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 06:26:09 -0600

Received: by mail-ua1-f49.google.com with SMTP id a1e0cc1a2514c-963b70c2678so3218529241.0

for ; Mon, 08 Jun 2026 05:25:11 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1780921505; cv=none;

d=google.com; s=arc-20240605;

b=VO3Jshm++wjlpRXx4UpfXFpG58gULtDMHfUOWu2k7j0FA41/V3/5t1EFr6FI+0ps6Q

bLibjoj+unglwjNRtBk23VNiila2EwtGEuxbG0jCOgK+w01VkmcqUCFem6zRFpJuQwXb

cwoinRALxzn4hmpV5mzUclcjiNdsMb7V+OyuhW2p3hsR9zOGbZnscSKwZx2m+HbiXqjg

t1gewTUZNicYs2d+m1aqcAPTCOvW3ExvqdRa9katSwcp+VfF+Uma0wR1icynbXoTcGsG

zd/yPl6gboSdXP59ysglWZ/13+o/qOkuGj4TbQljhmcNvpfZXSqEOm43QW0OfqeUo1m2

pcng==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=gVuzvHD80rV2Ha0dS55NJ3sexQSLJOE1cKVTz0D1Nmo=;

fh=38r2CYuJfiWRXBU16NUFswz4RjBqW3mVSVe1GPTiipg=;

b=EyTZxqSZuKN0zolnepYfUS2v4uEKJrk+U6FIxcYp98pX4JGsa6wzcAh/Kn3Y65DIt3

i/5Y7HCLeQONUtnJXLVDt6zyj89V7CXWBT9IoVNqsRHlIXCG+nrvzjbCTOcRVD4Tta9X

ZyB5S/YFSLiZ9c7z4td3Ar8A0tN3bMy6ZefQxx50RLvpLVmnqsBpG+sdQWgOhpc7LA5J

RcwC8F3v4fEYaP8Sl1qYhxik8z5K/ohIIMI2VltPfogq/T32y80Ho394SXNPcDuu3KsG

/8AZ73Zk3ImMqQkkJTu/DT8mBVH3HAG0ocwGRKXnR8FhEldkEQ9XxuH7DhAB7Zh/Dn9z

S5Rg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1780921505; x=1781526305; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=gVuzvHD80rV2Ha0dS55NJ3sexQSLJOE1cKVTz0D1Nmo=;

b=AxxZRBHjFCe88RfNFQibUy4Rop7j1aYr+DbY0bFspi6SojcFkCkI1ZIbn57tvNcsSm

ERipN6y5ZvkXOWEEpImZM61xE4SuiY/vu2hvO9KwAlxwQf7jB9V1qwTkhEYfBJrGYFO2

ELT2Yck8aXWw4E6NkLdENL7IiZ5LKoDoUdj4Xt+UGTdm+52VMPuiL5PwNPFMN9cdOf0s

c74gSSweWOA/KwCAJZmpCOLrOQ9gkRSXdiPoMO6uTGTTyWkeRH3uKV2la+5wOMcWLDtt

0hsA4wmliDFEFGpVxuK45f1TDAFqkL6ar4EnY3A8BW8LDVMSynZC3frtYgaWp5vQVSc8

xjXg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780921505; x=1781526305;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=gVuzvHD80rV2Ha0dS55NJ3sexQSLJOE1cKVTz0D1Nmo=;

b=OCJ9XxEsGaFR2L1y0hagotZwbaZOfoZnhiIk5UszmGsyeDBJ+5QRyxPAAyfwRNaYJy

PlJlnj5subPzDhCe+d/OOoFHJNzgX4lqUyd4g9Jsjk6rXjAMG9s4/KYdT8IGQPzSnbiC

MgD5FNVKkdMOWsq+7sRCJ4iquJqR9t2xbFTq5uC73sneiTV0jwixIZqR5kFOAnduTEIy

Wyoqnwg2v18XIT/A81LqRk54wmFljsThOQcpllcG7g+a8KaXsk2EHcasD+UKOd2IC9CJ

z42eBGT2y5yhK373rNDjGE0vrzwtyGLne+GGgDCPyataHTDxaRvo+kVD3/sXZ3AdKEsN

ItxA==

X-Forwarded-Encrypted: i=1; AFNElJ89Eb3JLNoWpcaYbObVRTtlBFr3KnmGWpGlBkQoVXYHtFdhL5Ch3u0J2hOXPzMCjllGLyMH@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxdElQo7bWh57UPU+LN4MbKCBA3apbN82UkFS6rHeGC+RpzAXzN

NysA9IECvYRoh9zF/aH6X7BGLP59Jp8r5KroHCJjTpD/MeeOouPMCRh9OBKgzoLMr/500X9FRs1

KUHuoAkNyAd9iiFNX9q2bVWjgnlUkSUw=

X-Gm-Gg: Acq92OFwb+txWwCgz0S009PURx+H4u3zBuI3uMrs1Bjf9IN4tCKKmOwowUdv9gMewZY

UJiJsEH4x3ztZvZU/b9TPRINmAxG+usAmVvuoMg1Vdlem5H9IIpsUQZ9BRZyeNKCaYYoiN0yuOM

YZ4NeLnUpnUjZAIJGMAwx5SpKx4D9cpinNqNFipu3XOiISlyK+GP6BzkaMbip4DmkSGAClE49PT

p6RYKNCcehY+pKWyGJHIhXDHhFPYyVfgS4fxTuoT7yGfeYeEPavsfC8c5Nf6XxCDzGTQ5vR7RbD

VKnhnjQhqhjygmbBB/9VaZ8ra/Q=

X-Received: by 2002:a05:6102:2923:b0:631:2a82:111f with SMTP id

ada2fe7eead31-6fef90c7571mr7052841137.17.1780921504797; Mon, 08 Jun 2026

05:25:04 -0700 (PDT)

MIME-Version: 1.0

Reply-To: william2222graham@gmail.com

From: WILLIAMS GRAHAM

Date: Mon, 8 Jun 2026 05:24:50 -0700

X-Gm-Features: AVVi8Ce97LzXZ-ClV-lqItv2aOQF-RTs3pXksOIM1szAM7nCdFXJAQksIPJ33Yo

Message-ID:

Subject: PLEASE GET BACK TO ME AS SOON AS POSSIBLE

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000aa98060653bd1905"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I hope this email finds you well. My name is Williams

Graham, and I am a banker based in the Republic of Togo. I am contacting

you regarding the estate of a former client who passed away ap [...]



Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.49 listed in dnsbl.ahbl.org]

[209.85.222.49 listed in dnsbl.ahbl.org]

[209.85.222.49 listed in dnsbl.ahbl.org]

[209.85.222.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.49 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

[209.85.222.49 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.49 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.49 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.49 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dubailegalcouncils(at)gmail.com]

2.5 HK_SCAM_N2 BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 HK_SCAM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} PLEASE GET BACK TO ME AS SOON AS POSSIBLE

Aeroplan Phish Part 4 from sendgrid

Posted by Dave Yadallee on





t:1.8;">

Log in to your Aeroplan account today to review=

your balance and take action before your points expire.






t:1.8;">

Thank you for choosing Air Canada and Aeroplan.







Sincerely,


The Aeroplan Team
















:center;">


>

Aeroplan=AE Loyalty Program






aaaaa;">

This is an automated message. Please do not rep=

ly directly to this email.






aaaaa;">

=A9 2026 Air Canada. All rights reserved.






















Ke20dbI9Z6QIr6nElunvpA-2FLxtRW5jtTHZmSFtUBhOIdGZjRcS4CBklsU60CV1nCL1gJanph9=

ltuTo574mlOGaJlzU0dYkTzGxsBaXU1ctPDYDJSyUjxF0aUdLawQYReMWINYgPcoQZ590ETh9rz=

uhmyXLWaYL4DouYzMK-2Flx48-2FtJVnIyME-2FHdee0FO-2B26Q-2FCcBGN2bmKB1pV4b0etuU=

HKv5Y5-2FUcbxfq6cSMZ4y7nwyZa8pJehzIb3uMBjQFyuDaSiUvyDG4p8-2B-2FTeqhdE9hzOZo=

SlPRTio2YmwL72jtaA2z1KGxryz126IFvTKq8Gv1AmyxmA8r-2BzNHEFzoPRFqKIiR8dnyUzlar=

luds9-2FoUVkdeHhADrzF1w8x4fRSRrReUchr0BXcOtLgWZWy-2BW66BY2KpYhE78HKriPxlnH3=

1GdBjBAPyUrPUBruOE4NFlXAsOQLG15aGrgFIvfnNZE4f2nOYGq1lKS6NEzpHOThQBCMOrFsa3-=

2FfeszGeriuEUyEEflGf0BpoQ4ASEo7akZmXSi19A3bx-2Bcn5t-2FplXcvbF0frVMncctvSw15=

hrXuYcjGx-2BtMLBk8vLygGYTexI6o1IVTUbefQ5VQYM4LYcTkDttMZSInwIY350xSgtuTK5Zlb=

OI4rImeKoAqaOUeg-2Bv7RrYxgLKzBv-2FmdSTBuZ78Ke2qqNahq4RrRaazG9psXakzOonLEvHW=

8rPHkTQ-2FJ3AR2H4d0myxKJDykkLP5V9G6hlPzy9A3hxYN18qUIEf1rBET1zpCXaAmu1p5xFgT=

E-2FaKefRxhWju5uZw-2BOEiGflKeiFge9-2B6-2BewKRFmFtfkYLYOZ0OTvVq1wo6rvQs6eaqm=

uo2Z8tbO36aQNWZB3IUdSv9wmPzUCYT4" alt=3D"" width=3D"1" height=3D"1" border=

=3D"0" style=3D"height:1px !important;width:1px !important;border-width:0 !=

important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0=

!important;margin-left:0 !important;padding-top:0 !important;padding-botto=

m:0 !important;padding-right:0 !important;padding-left:0 !important;"/>
dy>



--3ecf18a42251f7d7fc8899f5362f611b67c2b53230bd3f1bdbb8308bddc7--

Aeroplan Phish from sendgrid Part 2

Posted by Dave Yadallee on
X-SG-EID:

=?us-ascii?Q?u001=2EkPCokVTLpzOQN11CnW+qjuyC87ChIBV2x=2FKAcbSrUrlmzytryEpTyvNZC?=

=?us-ascii?Q?qdbs=2Fv+cSB+rU=2FUfFQE5TMQLRNDAYR6tJ=2FRwHo9?=

=?us-ascii?Q?2y7rUj0PgYz=2FoiqBQGWo9Uaz+7HQLd6nxE8lZp5?=

=?us-ascii?Q?nVMOZGoxDjuM74aaPZDxy1XlxlW1Lj3sYIOMJsU?=

=?us-ascii?Q?Gn+u5l1nWsttrrx2dq+c9v4pXwpQYBK=2FDCmw7EA?=

=?us-ascii?Q?IykawNgkjlgclsZsc1PwLaaavUb9MlymY1HaXE0?= =?us-ascii?Q?4fZd?=

X-SG-ID:

=?us-ascii?Q?u001=2EXwhBPNhCejkv4+fVosb2QVfR16Qxp9CrA7PjDe5zzeI=2F0IZCBsPXtgHbA?=

=?us-ascii?Q?oGIj+RskLxA4N2rJjSWrHfgX07tLOm0v5BUQcd6?=

=?us-ascii?Q?w3knjorGi7Hwu0WCOA5AFSvy0=2FwlG32=2FxLUUrjg?=

=?us-ascii?Q?ZfnIaj1mQKcP2v20ARDmbmQCgzpN+jKMQlhYLCt?=

=?us-ascii?Q?FpRIDvUq9LUiL4f69CLqkXuwNKzI+cItHCeYI0j?=

=?us-ascii?Q?FVaP10PxHZ5BOpQ64ClDfRp7c=2Fop1fKNwI4Xv+a?=

=?us-ascii?Q?KO5q=2Fs61+1QI6tynXUaYz0UnRPQs7g6qzycAMB9?=

=?us-ascii?Q?8VFhBNHcDOzwcUBbwHU92Kr59os+q=2FyoM6Yv9tO?=

=?us-ascii?Q?aJg4glpbGsyTXs3EWpolYyVZdgRfTeLyRdhyIu2?=

=?us-ascii?Q?O=2FVkOTIfJQERt9xdykoaQrfWWowKkhy=2F+SRm=2F0T?=

=?us-ascii?Q?=2FykVxMEghl42Zl9RWSUHuzRNUyyuOg0cCVRwD2+?=

=?us-ascii?Q?SA52+gZriLNFsztcSOb4c6upalIq7Sy198PHlmH?=

=?us-ascii?Q?CL+gq7S9iC81hnID49MZejveOuOA5mQa7l3bdYs?=

=?us-ascii?Q?FvAVD52ZHloNccmaz0WB=2FT1bhR7CZJjLHxSnc+S?=

=?us-ascii?Q?jqrdvGNlvjm+ayrxRvVDAl=2Fg6v0ckGJNq1HYBn7?=

=?us-ascii?Q?GkwkkOQ1oWyrQg01jRsQq34xBkI=2F7=2Fit=2FWm7Efg?=

=?us-ascii?Q?wMGu3A8e80yfUpNX+GbHIK6QzO3EFWmHHfUnRcg?=

=?us-ascii?Q?L8XsrI41dygE3cb13npmH=2FK?=

To: doctor@netknow.ca

X-Entity-ID: u001.nmToPfqqhKmA3fR8DRUFDQ==

X-Spam_score: 33.4

X-Spam_score_int: 334

X-Spam_bar: +++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Aeroplan Points Are Expiring Soon Dear Valued Member,

We noticed that some of your Aeroplan points are scheduled to expire soon.

Don't miss the opportunity to make the most of your rewards.



Content analysis details: (33.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

[134.128.127.0 listed in dnsbl.ahbl.org]

[134.128.127.0 listed in dnsbl.ahbl.org]

[134.128.127.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[134.128.127.0 listed in bl.score.senderscore.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Aeroplan Points Are Set to Expire Soon



--3ecf18a42251f7d7fc8899f5362f611b67c2b53230bd3f1bdbb8308bddc7

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=iso-8859-1

Mime-Version: 1.0



**************************************

Your Aeroplan Points Are Expiring Soon

**************************************



Dear Valued Member,



We noticed that some of your Aeroplan points are scheduled to expire soon. =

Don't miss the opportunity to make the most of your rewards.



Available Balance: 3,250 Points



Expiry Date: June 09, 2026



To keep your points active, simply complete an eligible Aeroplan activity b=

efore the expiry date, such as:



Redeem points for flights

 Book hotels or rental cars

Earn points through Aeroplan partners

 Make purchases using an Aeroplan credit card



View My Aeroplan Account ( https://www.qxnxs.com )



Log in to your Aeroplan account today to review your balance and take actio=

n before your points expire.



Thank you for choosing Air Canada and Aeroplan.



Sincerely,

The Aeroplan Team



Aeroplan=AE Loyalty Program



This is an automated message. Please do not reply directly to this email.



=A9 2026 Air Canada. All rights reserved.

Aeroplan Phish Part 3 from sendgrid

Posted by Dave Yadallee on
--3ecf18a42251f7d7fc8899f5362f611b67c2b53230bd3f1bdbb8308bddc7

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Mime-Version: 1.0












0">

Your Aeroplan Points Are Expiring Soon






l,Helvetica,sans-serif;">




nd-color:#f4f6f9;padding:30px 0;">












=3D"background:#ffffff;border-radius:8px;overflow:hidden;">


































:center;">


font-weight:bold;">

Your Aeroplan Points Are Expiring Soon





t:1.6;">

Dear Valued Member,






t:1.8;">

We noticed that some of your Aeroplan points ar=

e scheduled to expire soon.

Don't miss the opportunity to make the most of =

your rewards.






lid #d71920;padding:20px;margin:30px 0;">


33;">

Available Balance: 3,250 P=

oints




r:#333333;">

Expiry Date: June 09, 2026








t:1.8;">

To keep your points active, simply complete an =

eligible Aeroplan activity before the expiry date, such as:






    ht:2;">

  • Redeem points for flights


  • Book hotels or rental cars


  • Earn points through Aeroplan partners


  • Make purchases using an Aeroplan credit car=

    d









/click?upn=3Du001.q5pvKeaCWXMrCX3nbb1R32KPw-2BLPcyx6mao2fJ4iTrw-3DFhE7_GyWe=

1RRaaz-2B-2B-2Bm2R4SiSUQ57G4dNiWrp95YUNftXm1NU9JnxzzpeHJ8zsBxSzn6sjLCLID-2B=

QLVXsFeavY-2FyIQ9VYrgk4pU07JTna5FGzu3AHUzf-2BEoeTEnCd1GvdZQtqMTYCqRlGVWfxIh=

HMzDpD2i2LzcovcQ-2B6zyVG0ROm0Sg3ecgItwgMgdFNYCNbrOGwWN2G9FrCJCE2NjmNGJzKxtw=

uox0IzB-2F5wuumXo4i1hpC-2BMPwnggV3YqiFmgpEnd92D00sE0FocmLzOaUG17d2DDm4kQSza=

QQH0qKk3tKMv3M-2BvLjDJ3tNs-2FM4cq1XWmkowjLttqmSyyLc8JyG4uwFOKAONSvu4NcP-2BA=

khax6g8hmUUQ31eef9cEoLe3ekxBgrrFRtS1bafpXM7K4Ye4kM0iPPa2ZnNrEYzS9aGE-2F1cC6=

9BKoj-2F7KVZH4y02vTPE2VdIjRGQxuflj0fM6bn-2BGM7hqAfeipFQXEQud44Eiya5baQ7m-2F=

g8kPGulXMOa7cgfqFMZJuaOMn31jBSTOclXWx1-2Bc3zYIDGLw9K-2Fbz8WjGjNm76yAmhiVKAP=

xTjkS3lH3365c25jnnsoAQJ2vCFQqNODsPMO5SofBPtk5l7sRHjwgBi6pj02KsedPZlOMspnxry=

yI-2Bi9ua1dxkX-2BMuAo9yyc-2BDOsCYmX-2FI9jZpf3U0Cwy1sposTc-2BtJrstbJwVUs5u5O=

r-2FlzuZnOdNkGlPe6GBKrK5SrXm5UWyu7Uxfb8B6-2FibUbtSqbI4bNgYaKaG1-2F45U4MECge=

6zMY-2Bb4t2a2vEqpxU3SwXROGeWWGbxwUf-2BI2PHgDgpGcUaCJYC0hn09uUl-2F3mdtVNJPRE=

zXothdYrNlkTpgqqjKC5QIoIL6fpY-3D"

style=3D"background:#d71920;

color:#ffffff;

text-decoration:none;

padding:15px 40px;

border-radius:4px;

font-size:16px;

font-weight:bold;

display:inline-block;">

View My Aeroplan Account



Aeroplan Phish from sendgrid Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Jun 2026 06:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWYne-000000000cR-0pGx

for dave@doctor.nl2k.ab.ca;

Mon, 08 Jun 2026 06:09:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 Jun 2026 06:09:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vsvhtfhh.outbound-mail.sendgrid.net ([134.128.127.0]:27130)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wWWSn-00000000ARW-00q9

for doctor@netknow.ca;

Mon, 08 Jun 2026 03:40:16 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zauvw.com;

h=content-type:date:from:mime-version:subject:reply-to:list-unsubscribe:

list-unsubscribe-post:to:cc:content-type:date:from:subject:to;

s=s1; t=1780911555;

bh=SiETd9U3O2nGiUuSVm0MBwlqzeEQjdFo+NS5W2ysRNA=;

b=W0L18WprZjAGGs0ZEcCgMLJgbMV4TzNqfZQBqmaldbfYRhyxchahqMKEAKcF0WZnXwDw

jNY+cRfwC442bDTepMEqSgDD1TvP4p8v/piteH5TGvjtufLnYv8gYDZCQI782Ui1w0OgPg

NJJCV+pAGSw3JGyEcoZpS7cC7sP0vfB+nA2WAD7D0CKzDLOokDNRUxhNeNeFb+9HFtRGdD

PdoROMUiLk/+jx5Ns6C42+wyoTLDvCF+oNBSs8oZijjJBpZryYRV9aSgrRgBImCD92J0FL

mH8ZbKTeBil5wR2WaiGAeg1ZF+wJdtOaAoS+C4XEWnu5Etl5qQA2geQxUDSL3/jQ==

Received: by recvd-5b677f5dcf-b99dn with SMTP id recvd-5b677f5dcf-b99dn-1-6A268DC2-59

2026-06-08 09:39:14.77445979 +0000 UTC m=+3499180.927907319

Received: from NTM3MzQ5MjY (unknown)

by geopod-ismtpd-7 (SG) with HTTP

id IUC9ZfdgRfaW8o3xqIHBJA

Mon, 08 Jun 2026 09:39:14.759 +0000 (UTC)

Content-Type: multipart/alternative; boundary=3ecf18a42251f7d7fc8899f5362f611b67c2b53230bd3f1bdbb8308bddc7

Date: Mon, 08 Jun 2026 09:39:15 +0000 (UTC)

From: Aeroplan Loyalty Programme

Mime-Version: 1.0

Message-ID:

Subject: Your Aeroplan Points Are Set to Expire Soon

Reply-To: aircanada@zauvw.com

List-Unsubscribe:

=?us-ascii?Q?=3Chttps=3A=2F=2Fu53734926=2Ect=2Esendgrid=2Enet=2Flu=2Funsubscribe=3Foc=3Du001=2EVpnv?=

=?us-ascii?Q?5PuXYejl5mfhV-gUhI=5Fsaz=5FxyIZSbVUGdSgJlZM?=

=?us-ascii?Q?HoSPFnR3QFjPm1mYa1L1BbjxtRqvX-mvsYL-X2G?=

=?us-ascii?Q?e=5F0IMCwczeCFuDjxQ2NbBMLlyvuATw4t-26eCBk?=

=?us-ascii?Q?XeaAvh=5FV1w4k8pArhOvUtVKOutYJebzdqRp8lCy?=

=?us-ascii?Q?xMxVkxnuS441PMTbww-kPp1JMLoipdbVE-gjNZD?=

=?us-ascii?Q?1tFBsGF=5FPjBjSKJLn7CYEkulQv4HfohqpaA8y6x?=

=?us-ascii?Q?CeXzylCsVB4-C3la=5FtTnOOySn68U=5FYw1-Af55np?=

=?us-ascii?Q?SaOZ2NTcuCFcRD2ezIRoJ0l2taIXrPmxv7HKjOk?=

=?us-ascii?Q?6U0FCVc9p0lUGV6cFCGriA5tAcvbUDWccWh-R2Q?=

=?us-ascii?Q?FXbfziVed7xrWYzRRW7PG93YSTYbcsiK=5F3xMl5x?=

=?us-ascii?Q?hPlipmycd74xv8OZVgLZDt3UHWew=5FZDBMHXrAHO?=

=?us-ascii?Q?KrJcVkWpJQ4TJM12Y6CVU2GoEbfQOlxWIqxQqcv?=

=?us-ascii?Q?kSLfSTsyoCpyBrdvTJHH=5FwRu8UY2D3i0i=5F5KSZY?=

=?us-ascii?Q?gEFYR4XmcUzzNYY8Y6fBPjFgEWRpZbj44P-Xacq?=

=?us-ascii?Q?ZyYWMv2WIoI7OdaBw28RDAIZin3dwpRiiFmnx6A?=

=?us-ascii?Q?iSKnlIblrBppAPf9kZqCTt-c=5FDUjcCFDunLW3WA?=

=?us-ascii?Q?bIjNBmm5MWz7-QtleyHeSAPEZPpCzscirOchIe3?=

=?us-ascii?Q?gcIJb30lw0xHDmu2pw6lvzvrj-qVs39z2Uxwjbt?=

=?us-ascii?Q?-ZHw9xiAKYump6fgHJeESNxnEMqt6GYE5aZr4jR?=

=?us-ascii?Q?IgWGhEj4I18nzqu2IPsgAjcLvC2JHrgEHVWLLog?=

=?us-ascii?Q?bLVN2IxmESsl1UqMhYD9Ky7Byg-=5FmA1yfJEE9DR?=

=?us-ascii?Q?6dAdq4E-SQVZSkneQSgMT5bVS4KVHaYqPdzj1RE?=

=?us-ascii?Q?6eU3XQrFiSFJjfPgjZsItwq6Ku4xe-jRVquuO09?=

=?us-ascii?Q?jEJx41ldPi2RrffI7EtRSuGWVvTVgrgBiVWqERA?=

=?us-ascii?Q?0X=5Fe0JjsBWOENIaOfbnhsEepqxW0QOBK5QOsGbK?=

=?us-ascii?Q?0aCIECst5O5oBwusY23kKQ3fQ-sq42V3L5vN6rR?=

=?us-ascii?Q?=5Ftqq=5FNG-cPTQqc6uUING243i=5F7RZMxeiixeR83m?=

=?us-ascii?Q?cH4qHhJsZTr1fabaayKHIiZj64Y7=5Fpa5b5BT85G?=

=?us-ascii?Q?uftsiD1vWP8tMwJq08-JuiNKrc5XHVTgmmT11oG?=

=?us-ascii?Q?Dp-nwaXwTrC-fx3C3MEy90GXoFSYMXjNEsQrTMK?=

=?us-ascii?Q?5Pm-c2pSNlLTfQhRsQDfTf8wHi5Mm5s9k914yAB?=

=?us-ascii?Q?eEd6xZDUxseP3G7=5FcOOg54yiwFnzkTww=5FqQuswl?=

=?us-ascii?Q?ATP--gWEXoIjZGX=5FzwMEY7W2E4ncqz2ZIQOYpB1?=

=?us-ascii?Q?2OdOw3G=5FAI4DHW9LLwuZwpwrU0NJ9xezzLxSlso?=

=?us-ascii?Q?cG5Bc9N1sfDadokaKIa3t2gBclYUcxvwl4Og=3E=2C=3C?=

=?us-ascii?Q?mailto=3Aunsubscribe=40em6895=2Ezauvw=2Ecom=3Fsub?=

=?us-ascii?Q?ject=3Dhttps=3A=2F=2Fu53734926=2Ect=2Esendgrid=2Enet=2F?=

=?us-ascii?Q?mt=2Fu=2Fu001=2Em1MLm09hL1w6WTwDSaEoguVPV6uCt?=

=?us-ascii?Q?plR4KKw8agj5dE=2F4rb=2Fu001=2EJLbZ4VS8=2Fu001=2Ez?=

=?us-ascii?Q?ZwgQwmJqkaWqtHWi6rhiboHbNc921EINTt9O4Qu?=

=?us-ascii?Q?awt2VxY9BcftbiSWoBF4ZdgzdtlFnJkVdwTL3q6?=

=?us-ascii?Q?CEXzKht83e5DLj7lBQFy27Dk7k-2F5nszBmvzse?=

=?us-ascii?Q?jdBqLq5ow9TW1tt7-2BwMKVJXkpjRmiK5sUsb-2?=

=?us-ascii?Q?FEVYOxJYcPkIIQa-2BNu5f7aBiKql97wO5j3tBK?=

=?us-ascii?Q?mUnlpaV4N4tQwWIc3zltvuS9ot9qe5RAPH1XOrU?=

=?us-ascii?Q?BnyyUZSSCWo9f7o2qbzCMPGEAtoLpPOwatCcImz?=

=?us-ascii?Q?wgALTUCrAhyqBxLRc6EHGl32zE7uFkr6W9tanuN?=

=?us-ascii?Q?8jwXH-2B7yDpxWRJsayL9uxu05Uf8ugyLAny7bn?=

=?us-ascii?Q?Mz-2FzGedPAjxqS8xNLPWw6YiJezI1ufEN8V-2B?=

=?us-ascii?Q?Qf7ThEOJXadp0qfQeOIK4wINQXtGmEO1PDmz7xM?=

=?us-ascii?Q?LnvFuHDH6XQSSP4ZFrKg7qUIy5Hb14-2Bu2lmp9?=

=?us-ascii?Q?aMwR20yMtWh0zZQuDt66ptCMHq3QyLDnihvtFze?=

=?us-ascii?Q?LXKpNR7f4WwFlYlGxbP-2FBTrEQ3L5CdwvcZyaZ?=

=?us-ascii?Q?jdTOLWvBE04rj5T7GakE6Akpdlga3DcrIj7XPZU?=

=?us-ascii?Q?XabNFDlOeiZFW0LZ1ln1ncCKHhF-2BUN98Wps56?=

=?us-ascii?Q?8qlo2klCENboTK0n934OzwSa4ZBgtIpUMNYi4ix?=

=?us-ascii?Q?PaYY2g9GG2rf-2FoaeXXtKK-2FJao533IvOZzYQ?=

=?us-ascii?Q?Md8I1nNfXgnYB8LfzoAD9f85wGwE8mbJJ6sWcxL?=

=?us-ascii?Q?fcQoLMdMZ4aVA4anN3ZdWkqklAdJk9RhVC6EHKU?=

=?us-ascii?Q?GM-2FEb4gGkEKk3atY-2BadMyRiiiVr-2FVwShT?=

=?us-ascii?Q?asIvB4Y4b67KeGRzE-2BiUYXy9P8odqsEt-2FqL?=

=?us-ascii?Q?BIBS5jujG0bPbe-2F6c6FT3o8GmJQWYHvycH9TM?=

=?us-ascii?Q?nbYJkkuCUHyX-2BrBMFA0R5bfsivDJg9R3YQ=2Fu0?=

=?us-ascii?Q?01=2ECsqdz2Ld=3E?=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Aeroplan Phish from sendgrid Part 4

Posted by Dave Yadallee on



t:1.8;">

Log in to your Aeroplan account today to review=

your balance and take action before your points expire.






t:1.8;">

Thank you for choosing Air Canada and Aeroplan.







Sincerely,


The Aeroplan Team

:center;">


>

Aeroplan=AE Loyalty Program






aaaaa;">

This is an automated message. Please do not rep=

ly directly to this email.






aaaaa;">

=A9 2026 Air Canada. All rights reserved.









6lC-2Fa4pTC8hcOX2OSb606MxQl1rL2Z5TTD-2F5uo4M8-2FMrvYLWem0EgjW3-2BBCEbVvzrq-=

2FUT0lv5LbETd3jXHZaC0kjwp6wfK3Xf0P-2FOkgfmNWndwuy9t5CriIaF0aMS2qHf-2FzvV39e=

qupffJUDRGiHw9-2BgZzSlHEaZnCP0zqpHqj492ZWFpcXKSnv9KyroEuzCTxP1MWv4eWLG2BwE9=

5IE-2BcSdUlu-2FiGwq-2BGt5wjOOSNBg9-2Biubr9FE9gzapeDdD8xk5oDAipIl1aXOdBT07L-=

2FdAIgmOHHPbiUOR8AWsL5-2FSnZzhhvGcZqIztf5YhbQiJwOzibLstXS4Oyvy9o-2FEJA0S3l7=

z-2BcQzW8cMx2fgNR-2BNrpcZhuXRlGYvn7CI0LhppevHvqJcspN-2FjBwndtnLHCwHdTTqZMvC=

RSUbyAexwaDk05geu-2FEx9t-2FvxfBMa3QN1pZ1HPStUh8VmuK4G5WPRGv-2BISNVScsaDbKst=

g9wPtANWhKHBZ-2BGXbUI5IqLwhU5THeunsVWV1ttA2IYTaxKSGvfMpfrBE7YaquYdOOSjW0MqU=

-2Fmu-2Bd2XinlKl-2FiGvKuQpECTn5fVOXEof0Td4jpSmxuEiEgOcVltVwT0NlrFGpKz-2BnIh=

REb5Fs-2FCMGqFB1Tp11AuR4JdIDJUCRx56S8DTAhrNVPTxFQ5bIuCES6ERq-2FHbw6vcoy2-2B=

fhMu54JvjH4uHIiNiZ6adNqD0BDSwU8P2l6IWbkrzfoHEDFKSZFkufPEUDb3VMj8Na8z8ZBUFcJ=

QhDwSXzbK3nChwan4-2F0RaW3GcLNgwmXUV1bW-2FxgIff7uVppFUKq7h1o-2BLTijtf7VQGVRS=

J-2BIK2xONWIT8Kt5PnOc9ubOrAxtcxN0rdRBPEtx87ZEoekg9o0C9" alt=3D"" width=3D"1=

" height=3D"1" border=3D"0" style=3D"height:1px !important;width:1px !impor=

tant;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !imp=

ortant;margin-right:0 !important;margin-left:0 !important;padding-top:0 !im=

portant;padding-bottom:0 !important;padding-right:0 !important;padding-left=

:0 !important;"/>



--4faadcd40408fdba171fad3d329651f91f6845decb0ef53244c500c19760--

Aeroplan Phish from sendgrid Part 2

Posted by Dave Yadallee on
List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-SG-EID:

=?us-ascii?Q?u001=2EkPCokVTLpzOQN11CnW+qjuyC87ChIBV2x=2FKAcbSrUrlmzytryEpTyvNZC?=

=?us-ascii?Q?qdbs=2Fv+PsowOyaxR6hCD3ibO934iyRxL1nmS9+D?=

=?us-ascii?Q?LpINQJvxSCMQ0EZNcrJXp=2F4qmhCbx62SdTFwcfh?=

=?us-ascii?Q?+=2FZKH4YhG8I8MqTvVPqPgn2q+jDSLtrwqKhhVRe?=

=?us-ascii?Q?AFLFaZJDAY62p1WRgM=2FeOUCN=2FfXAPptDa69TxON?=

=?us-ascii?Q?zOiTWDEwOBiJIOJZiD+N1ZOU8RLIUChFuSlkUMt?= =?us-ascii?Q?NVIc?=

X-SG-ID:

=?us-ascii?Q?u001=2EXwhBPNhCejkv4+fVosb2QVfR16Qxp9CrA7PjDe5zzeI=2F0IZCBsPXtgHbA?=

=?us-ascii?Q?oGIj+RskLxA4N2rJjSWrHfgX07tLOm0v5BUQcd6?=

=?us-ascii?Q?w3knjorGi7Hwu0WCOA5AFSvy0=2FwlG32=2FxLUUrjg?=

=?us-ascii?Q?ZfnIaj1mQKcP2v8PoL+ltOs4yvpwlXlYO3XTGuI?=

=?us-ascii?Q?tIdrJecjs=2F8UPnrhc6Ysxd8zvaim=2FyUPSikUVue?=

=?us-ascii?Q?WnGmSs9UKHGVL9=2FR0eOuiOkZee+u1pdhnpGk92X?=

=?us-ascii?Q?xJfnSvIx4=2FUS8yfSGtERr9I2M899KLlK6pCtzMc?=

=?us-ascii?Q?3bH6BheE4HWYPMFsGFAf2Byn5+TXRogb5frsvWF?=

=?us-ascii?Q?xKUalM7m6duA5u=2Fh5BWH8EMPVxss5zysYAMP73V?=

=?us-ascii?Q?faggqlQjXGdTXrk+SJ1vybDjTg8ix9ax5VycB=2Fz?=

=?us-ascii?Q?Tz71wa5GPciAhVCQgMUzB6QtxDEtqrZ7UMNQs7c?=

=?us-ascii?Q?dOG2zAPUUayac+iRhyJHxzTD1egVzeAuqoGGanS?=

=?us-ascii?Q?HY1V1POzmcbvSCTh1iLzlyCO6DFDFXmt174Qsrr?=

=?us-ascii?Q?=2FkRXYgzu28bOgmp42zukAiAGpsYbpe5vFT4=2FuTe?=

=?us-ascii?Q?YDn92Sl5CVWRESkQVcY9IFNNUkggR3eSjnCDgVe?=

=?us-ascii?Q?a0sdJfAdig9j2EWhDkWG=2FYPfOeMleiYyKlKKUSY?=

=?us-ascii?Q?wmZTfx2l2pN+vJZelwlJ+ePGEN8yUCV=2FBsHOhic?=

=?us-ascii?Q?=2FLSI0iAhbkvDnwvnTX6gFLY?=

To: www@nl2k.ab.ca

X-Entity-ID: u001.nmToPfqqhKmA3fR8DRUFDQ==

X-Spam_score: 33.9

X-Spam_score_int: 339

X-Spam_bar: +++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Aeroplan Points Are Expiring Soon Dear Valued Member,

We noticed that some of your Aeroplan points are scheduled to expire soon.

Don't miss the opportunity to make the most of your rewards.



Content analysis details: (33.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

[134.128.127.0 listed in dnsbl.ahbl.org]

[134.128.127.0 listed in dnsbl.ahbl.org]

[134.128.127.0 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[134.128.127.0 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

[134.128.127.0 listed in will-spam-for-food.eu.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[134.128.127.0 listed in bl.score.senderscore.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Your Aeroplan Points Are Set to Expire Soon



--4faadcd40408fdba171fad3d329651f91f6845decb0ef53244c500c19760

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=iso-8859-1

Mime-Version: 1.0



**************************************

Your Aeroplan Points Are Expiring Soon

**************************************



Dear Valued Member,



We noticed that some of your Aeroplan points are scheduled to expire soon. =

Don't miss the opportunity to make the most of your rewards.



Available Balance: 3,250 Points



Expiry Date: June 09, 2026



To keep your points active, simply complete an eligible Aeroplan activity b=

efore the expiry date, such as:



Redeem points for flights

 Book hotels or rental cars

Earn points through Aeroplan partners

 Make purchases using an Aeroplan credit card



View My Aeroplan Account ( https://www.qxnxs.com )



Log in to your Aeroplan account today to review your balance and take actio=

n before your points expire.



Thank you for choosing Air Canada and Aeroplan.



Sincerely,

The Aeroplan Team



Aeroplan=AE Loyalty Program



This is an automated message. Please do not reply directly to this email.



=A9 2026 Air Canada. All rights reserved.

Aeroplan Phish from sendgrid Part 3

Posted by Dave Yadallee on
--4faadcd40408fdba171fad3d329651f91f6845decb0ef53244c500c19760

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Mime-Version: 1.0












0">

Your Aeroplan Points Are Expiring Soon






l,Helvetica,sans-serif;">




nd-color:#f4f6f9;padding:30px 0;">








=3D"background:#ffffff;border-radius:8px;overflow:hidden;">


















:center;">


font-weight:bold;">

Your Aeroplan Points Are Expiring Soon





t:1.6;">

Dear Valued Member,






t:1.8;">

We noticed that some of your Aeroplan points ar=

e scheduled to expire soon.

Don't miss the opportunity to make the most of =

your rewards.






lid #d71920;padding:20px;margin:30px 0;">


33;">

Available Balance: 3,250 P=

oints




r:#333333;">

Expiry Date: June 09, 2026








t:1.8;">

To keep your points active, simply complete an =

eligible Aeroplan activity before the expiry date, such as:






    ht:2;">

  • Redeem points for flights


  • Book hotels or rental cars


  • Earn points through Aeroplan partners


  • Make purchases using an Aeroplan credit car=

    d









/click?upn=3Du001.q5pvKeaCWXMrCX3nbb1R32KPw-2BLPcyx6mao2fJ4iTrw-3DaOtT_wUJ6=

NoW6IEw19Z4-2Fpgsojpr9Dz-2FqMFn9xk-2BzFRcNUSU06CaYqfNAk4u-2BAPS3zhQ73e08mOl=

LOqWM-2Fgox1gzocXd1Sr-2BxPbVJhw6yG9Aiyw1awE9Xqk31LbKmA-2FBoFMarhHuuKWSAjOPS=

Pedzd0WWCNV6x3vaaeC9wpGaNQPqIYreWCe9qy-2B1havNECT0MWo-2F9THVsAIkWEy49VudTNk=

AKOV-2FZ9tLcW-2FlXfd4NLwoZz8225HXuJ9vLNUtf9nXSeyF90KszYYIn1pJrGMyOSWmjpyb-2=

FSEEy49mP1Zqqb6FWIzLNBVmgTFXB-2FiU2mPpcB0LZLe0yteG1gZfCkSNBM52uf1392eH13xbq=

reuuH5ning-2BhbqOMkv9-2FxcsivYr4byDRHUITcqXAELmSGPwD3DiS7DXm5o1U32TxY-2Bo-2=

F9rMLQkbCWwwyIBUzmET7PsykKaiWQ37b2-2FhZ0MZbNhvTxSEe7sCbsVLmFelR1YWE2UiG4is3=

71RS7E57O6VjfOHb3xWvvL3zI6gIrPudDRTgkDtN5eqhofQllUZJ245df0PCnpoHZm71OG8nSKG=

b4-2BCZkoBPROVijPrshIkHhNHbzkz6MPTwiDtjv9JW9JqfSfQ10UH6mvAHF6fr25LKD5eRLkDE=

vdfETg-2BLo8OmzZ8P01kLSkO141CUmsluW5du5nKCudm-2Bqeu3sIReOcdX17IyJA2ym4JnGjo=

hU6hrLrdp9yJ-2F9XFWU0uMoGZeMvwDrhxc-2BVjxN1-2FKGgOXdXuJSZOq2vFk3el2bvHhwrcc=

LXdgR3AG1mNB6MVFUFHOxcys9jAC7DWfwZOcvIVx9NKhVfXtvuH213YwmCbcSF-2FfyRBDE2Fpi=

57BFx8cfvhahgrCW-2B6o-2Bk-3D"

style=3D"background:#d71920;

color:#ffffff;

text-decoration:none;

padding:15px 40px;

border-radius:4px;

font-size:16px;

font-weight:bold;

display:inline-block;">

View My Aeroplan Account