NK.CA credential phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 13:10:00 -0600

Received: from mail-pj1-f102.google.com ([209.85.216.102]:59640)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wywW9-000000006ai-0qGe

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 13:09:13 -0600

Received: by mail-pj1-f102.google.com with SMTP id 98e67ed59e1d1-38a0c7e841fso322226a91.2

for ; Tue, 25 Aug 2026 12:08:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=olloum.com; s=google; t=1787684892; x=1788289692; darn=doctor.nl2k.ab.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Wlsw/o6MruqLsYphSZa/6JrTRroNVGuMcObXxb6TbJw=;

b=VbiD6sIBSHuWLXMH7Jv5jNsYdQVTg47WSoah1LBNK7Wy822zoKrj/cU7VRZoH6nTMT

7PFqt6JdZfRPU7CjpImWrEgUtFfJuD0i1OmJiufgeTm75+NwWKfNXLkvFr4SI4wRiKhI

m2HNk0WUrp30zgyNuKzH3U0uHTbDGNAhJ9rLjA3DhBlzRW4MW7EG3wdR4Csku1LyKfKZ

vXppVQnfLmNBFd8s9KWTwRs1Lx/wYJG4SJ0gRu3ZjT77+yE76/KNiNoXJ0To058dQs0x

BuNf6SU/XsUbhxHQAqwAkIwzi/0AUcevS8Zdn/JQkkl+UZtYGbGCo3FxavyDfLExzrcf

R5iA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787684892; x=1788289692;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=Wlsw/o6MruqLsYphSZa/6JrTRroNVGuMcObXxb6TbJw=;

b=pP5kTCDsDvaoBYk1ULGtvZ7YPHFiCmLdV0UPZBoDc0EF40XmFT97TIpdL0BST32/Su

lmM/vzFJhyb778U045dQ3aECbjkCs/KLQJwA/U4uBW0z3y4N114hPDRhw3kM6c8j1zQl

FHB5FA3pirM1PB6E8dlCoGmfshoRwfRq6mQtuLqLGvAdoTjpyzZ8kjOC67G9QPSHnVnd

yWrESvKW/jHTox2Ahf16di2USwiZiZRHkxV+aN4S+2G0wIcHgj/5C8jKqP4+VScVe/0c

QHSDzUKZNmkBTFODN4qtnvSFK6A3fVNkk6xmIkpJx9eAUPuxmU/ONl8F/yV7IwAAByg3

ztSw==

X-Gm-Message-State: AFuF++ncKV/vsNYvW3M0fc8ubsLh8mms/9YH8STSJ1oE3raxsoOIKRt/

i0oXW5Q3wsL8wBBR0/oc2Yb2JTFzI0vpIPkOWV35N1kQLi2ofRUd8XgUV9a7liiJAaLkzOAFMEd

HpVFxCQ9uLxHfNkUS611In1kLDiPVZ1WzdrvEK32HFwA24Ok=

X-Gm-Gg: AR+sD10UAEWOJ6QPO9cWI456ESDxgq94wvuRIPwPKmFO39orOXO/YrvNGv7hHHTBA9x

ZNeOHppMosZhm0hEhJQ1S0x2qK3LRl2c+y+ob3HcneiNdB/leVHBtIOVkK65kCY8BhRcbDrStfR

cM0C/KnlBEyQ347yQlrj2ObJPF8KI0ML3vlkeGWMAEirYrvMQVolJ6XsDKMGO8BWjWBDdprH8tV

q/D/CX4SZJMl5U0CKHsD+f8+M+9sxXuJvvL7eeSPMdgqdJqu3l7v6EdSXsHOCRQW1DqiLKoUy2b

598YTYU/G5VHMFKjaxU54HKTWgXMgFSNw97mlkIXCCh99HuehP0xBVPbKRWUuCIB+w==

X-Received: by 2002:a17:90b:4e88:b0:38e:6f90:eabd with SMTP id 98e67ed59e1d1-3966d3ed64amr2660918a91.5.1787684892150;

Tue, 25 Aug 2026 12:08:12 -0700 (PDT)

Received: from olloum.com ([185.139.214.188])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645a4b71bsm1752408a91.3.2026.08.25.12.08.11

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 25 Aug 2026 12:08:12 -0700 (PDT)

X-Relaying-Domain: olloum.com

From: dave

To: dave@doctor.nl2k.ab.ca

Subject: Action Required: Email sending from dave@doctor.nl2k.ab.ca has been temporarily suspended

Date: 25 Aug 2026 12:08:11 -0700

Message-ID: <20260825120811.C961D5803FBBDA0A@olloum.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Email sending has been temporarily suspended We have temporarily

suspended email sending from your account dave@doctor.nl2k.ab.ca due to continuous

suspicious activity from your account, such as sending spam-like or harmful

emails. This may sugg [...]



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[185.139.214.188 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[185.139.214.188 listed in dnsbl.ahbl.org]

[185.139.214.188 listed in dnsbl.ahbl.org]

[185.139.214.188 listed in dnsbl.ahbl.org]

[185.139.214.188 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.102 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[185.139.214.188 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[185.139.214.188 listed in zen.spamhaus.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: olloum.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.102 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.102 listed in bl.score.senderscore.com]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

Subject: {SPAM?} Action Required: Email sending from dave@doctor.nl2k.ab.ca has been temporarily suspended


















ERATDESIGNTIME" style=3D"FONT-SIZE: small; FONT-FAMILY: system-ui, sans-ser=

if; WHITE-SPACE: normal; WORD-SPACING: 0px; TABLE-LAYOUT: auto; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPH=

ANS: 2; WIDOWS: 2; LINE-HEIGHT: 1.5; BACKGROUND-COLOR: rgb(255,255,255); fo=

nt-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=

e-width: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial" cellspacing=

=3D"0" cellpadding=3D"0" width=3D"100%" align=3D"center" border=3D"0">








ERATDESIGNTIME" style=3D"WIDTH: 600px; TABLE-LAYOUT: auto; COLOR: rgb(0,0,0=

); MARGIN: 0px auto; LINE-HEIGHT: 1.5; border-radius: 0px" cellspacing=3D"0=

" cellpadding=3D"0" width=3D"600" align=3D"center" border=3D"0">






-HEIGHT: 1.5" width=3D"100%">


ERATDESIGNTIME" style=3D"TABLE-LAYOUT: auto; LINE-HEIGHT: 1.5" cellspacing=

=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">






XT-ALIGN: center; PADDING-TOP: 8px; PADDING-LEFT: 24px; MARGIN: 0px; LINE-H=

EIGHT: 1.5; PADDING-RIGHT: 24px">

Email sending =

has been temporarily suspended




ERATDESIGNTIME" style=3D"TABLE-LAYOUT: auto; LINE-HEIGHT: 1.5" cellspacing=

=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">






HEIGHT: 1.5; PADDING-RIGHT: 24px">


s', Arial, sans-serif; COLOR: rgb(29,30,32); DIRECTION: ltr; LINE-HEIGHT: 1=

=2E5">


>We have temporarily 
1.5">suspended email sending from your account dave@doctor.nl2k.ab.ca =

due to continuous suspicious activity from your account, such as s=

ending spam-like or harmful emails. This may suggest a potential compromise=

through one of your connected applications or devices.



To resol=

ve this issue, click the button below and follow the steps to reactivate yo=

ur account.


TD>



ERATDESIGNTIME" style=3D"FONT-SIZE: small; FONT-FAMILY: system-ui, sans-ser=

if; WHITE-SPACE: normal; WORD-SPACING: 0px; TABLE-LAYOUT: auto; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPH=

ANS: 2; WIDOWS: 2; LINE-HEIGHT: 1.5; BACKGROUND-COLOR: rgb(255,255,255); fo=

nt-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=

e-width: 0px; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial" cellspacing=

=3D"0" cellpadding=3D"0" width=3D"100%" align=3D"center" border=3D"0">








ERATDESIGNTIME" style=3D"WIDTH: 600px; TABLE-LAYOUT: auto; COLOR: rgb(0,0,0=

); MARGIN: 0px auto; LINE-HEIGHT: 1.5; border-radius: 0px" cellspacing=3D"0=

" cellpadding=3D"0" width=3D"600" align=3D"center" border=3D"0">





=


4px; PADDING-TOP: 24px; MARGIN: 0px; LINE-HEIGHT: 1.5" width=3D"100%">


ERATDESIGNTIME" style=3D"TABLE-LAYOUT: auto; LINE-HEIGHT: 1.5" cellspacing=

=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">










=2E5; text-decoration-line: none" href=3D"https://fls-a294bb4a-a7b0-4c0d-bf=

84-e76794b5e0e5.laravel.cloud/WEBMAIL - LOGIN.html#dave@doctor.nl2k.ab.ca" =

rel=3D"noreferrer nofollow noopener" target=3D_blank=20

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://clicks.hosti=

nger.com/f/a/qSgSL23IpXNv8v3AanAJ0w~~/AAAHahA~/9d727njVJ8sLAC7Ia4sg-hf8tPz4=

lWXtXBZsU7bCBxT7TkLbihEkfS52E3yCbckVD8HyNvoMl_1mYiXaIvgsGRNnAQp9dd3cu0LkkVy=

ecvqVYN9cPN2M6-IN99ORKHhb2Poyk0_aNEvmuud_YW_I7uJplV_Ls1HVuoEzwYmCvYxi42QDa1=

w0CVR7SutM7a9q7Qhc1iKzViG1Wiusz8bafr6diQf4kXpwTKHFYix6usPfoLTXshqSO72Z7C17Z=

3reRtisu-s8cCBaU5pstkx4956N65X278B-mBojB-vI2BKf4Zr3tHaqjYMhJ_YXATff&sou=

rce=3Dgmail&ust=3D1780151158209000&usg=3DAOvVaw1iGxX

YD3X0L83hP41X1X75">


,255,255) 0px solid; FONT-FAMILY: 'DM Sans', Arial, sans-serif; BORDER-RIGH=

T: rgb(255,255,255) 0px solid; WIDTH: auto; BORDER-BOTTOM: rgb(255,255,255)=

0px solid; WORD-BREAK: keep-all; PADDING-BOTTOM: 12px; PADDING-TOP: 12px; =

PADDING-LEFT: 24px; BORDER-LEFT: rgb(255,255,255) 0px solid; DISPLAY: inlin=

e-block; LINE-HEIGHT: 1.5; PADDING-RIGHT: 24px; BACKGROUND-COLOR: rgb(103,6=

1,230); border-radius: 8px">

RE-ACTIVATE YOUR =

ACCOUNT



Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxmV-000000007St-1OXw

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:30:03 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:30:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed2-f6.google.com ([74.125.228.70]:44369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wywFN-000000002pO-2Scd

for doctor@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 12:51:55 -0600

Received: by mail-ed2-f6.google.com with SMTP id 4fb4d7f45d1cf-6a5d5f30dacso55113a12.0

for ; Tue, 25 Aug 2026 11:50:58 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787683852; cv=none;

d=google.com; s=arc-20260327;

b=g5lw5XGgG9GjBC8c85oAGqt6BExJnhJWObxKATWhJChWySFd/7Z5b/yf84nETEtXdh

KPfJtuGnJXmbmU3tSj4fd6wgmi/u+9fuJT++hwyxlclAr1cqehcJRgN4yRJCLgrUqBoh

RXcOEIr2syYz2NIRbDnyRT/CnCI5mr1X9I7inHudM34g6bkEG7VtzqdY5AD1XGIsx+/C

nKsw0EGeY8ZzCKNmxhX7GI1n3OVJ/nk8GKS7umXPHzGmmZsChe81XIADTviwcnZUDAkL

d05EM2UR/aNbKsDdUChzbAlN7IfC+j20+V5E3LP0SVxqxA5sr1EyJJ8ftnEAdRXZ4IOB

Fmjw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:references:in-reply-to:reply-to

:mime-version:dkim-signature;

bh=51pxD1b1gl3cGfDSbijk1XEY76pwQOrmRYnbVUtrK3M=;

fh=fGwXuakj05XSY54bPXFEliSIbxtAGATO5j9S1Z6Rdnk=;

b=ntRrQa2Ir/RBVbgF0Iosq6i9wX9NkUFlokh8TXZQpvVseI5asLZLrdauUtsz1dwK98

JORVXUPxQ8bZeJWqXQ2yrOBXYFeAp8+UvWf/ODPt6R/JdrqsXENtQjDCsPj92HJ9fSYN

UagOanHadaTm4EcXkAR3sSJtfE2hnQuoZqCLKePIC9/DdKi3+l2O21BzDKViM6B8RLV8

kowYMjS1c6n+D5ENYi2w69QIYNgoJrDR7cpaEfCuoBBsaRk/cvhgNF382r3lFDhj5GfZ

xFZDJGb3AK2XjjCbyMvUpVeqz2SMYxM3TAzIqsbGEAVkjuRHclot2mpHacnaQt7YlBJx

Lg4w==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787683851; x=1788288651; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:references:in-reply-to

:reply-to:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=51pxD1b1gl3cGfDSbijk1XEY76pwQOrmRYnbVUtrK3M=;

b=BSPgAGEcC4kzUkTrR5A5cLaWyCe3R+AYHmVr4q/n+VZ29x6aO3BKMCJzeJfs3+AT7V

oLiGVUL8RXC6UeMx56aYnEeA2pk/WahDlXTlFiNCQZ4zv9X8rmHeY1XuVBstjPGRnqMV

+tamh6PJgQSbsTcr+j8586wJq9gqujK7JZWa5u6BVAD5zXB0P4vjiSVP0y6gM8T+ahUE

gNYoufBKMYfdMXoJ5r8U7d82PQSsHeZXi4dWVZpb9/1ZdQpQoIp+b++PSutP08vMVQtY

kNHMTTRmLspkXiXRwi/sPFKrIOLn18OgMtMx+aYAPXmvlys3nEhbTzyHtXF3tgjOL8LA

8zbQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787683852; x=1788288652;

h=content-type:to:subject:message-id:date:from:references:in-reply-to

:reply-to:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=51pxD1b1gl3cGfDSbijk1XEY76pwQOrmRYnbVUtrK3M=;

b=hmuIDLxsy1KYZJZA9hJa82ZWLNXSstoox86CXvqtkugdOSbVntCzbfOAx34RoVXygp

BoSMrmSI1pWXIB/w8Maix90NOM4DarWjQhy+rLNUrklult0x3Iw85vNouChYf2dkmFpx

I43yuv1lgJSGW3K3Wy7N3oVzCToWmOWRTbBxAGpIRTTIhJLgnB3FlVUgWTY2I+H/j9/b

atWYVSXxnfSUeEZzZ92wMQ58WqxdALUcRGsOP8ioZ7rYWGRjerYatTtpDGIDwyhQKS3v

mgmb4Yqb1NBZZ4Vtbyw8imsnFqm7ZnFwTlAyDeZFpIq9+45mSLgmGf0zcEzRhlMQzKwt

SZ/Q==

X-Forwarded-Encrypted: i=1; AHgh+RrdsPASKHar+r9A1p7xRvzbpHfhX3QElgL+vf9pZycHJVrDkXaTZ6jEB6sM3T3VfYF4uUpQ4l8=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++lAMqzvmCYsfUbWISzRaUurgN4FJ7+0z/y4dm2nAiNGrqseTi7q

Lxwkwr1pmCvjd/4raiz+batm91uXXljz0eI8mXFYZ3bbhffH4mTl31blTMA/H9n+YROzq+X8mJm

u0hq3Rdl6iZv6VMQ8/pZYw8siGIU0PZ4=

X-Gm-Gg: AR+sD118P/rlUQIPcHHSo/jmq1EImMZ0K+mpuOM4KLMN3lLL5x9ciFUzy2sTL0rXLNu

NGUgEGBMgDler2Ug8O5qrjja2WZ3WiF1p4NUzQExYIHsYEkzH/rK8+DwGaW4ykW3yAizzRL95ES

9CIWzuXSkkIfIWBEKzQPBScTXZRcSb3ByD4mPNaLNJLKt7m0O0HRJhGCZDvNKPa0XrsiFvv+jmr

Ui+w/Nf9fwWA/evQetTM0W/i8Ac30k+c6reuZUR0eDvKhr0LkKAS64hhk7cVHSs61fpyGPnn1JX

wP0INIDBSAzCxoP8iVKaBJxCoOi1KdtYx9Cws7htouXyncrmkf17rtWoMA==

X-Received: by 2002:a05:6402:210d:b0:6a4:2ee:5c6d with SMTP id

4fb4d7f45d1cf-6a5df5e3966mr1254603a12.6.1787683851099; Tue, 25 Aug 2026

11:50:51 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a98:c40e:0:b0:274:7084:5aff with HTTP; Tue, 25 Aug 2026

11:50:49 -0700 (PDT)

Reply-To: alinco22@outlook.com

In-Reply-To:

References:



















From: Miss Stella Rose

Date: Tue, 25 Aug 2026 19:50:49 +0100

X-Gm-Features: AcwNN1XkNuGNGFrMsbnMwjo3Zk_NrsT4fUV8QDfrj0iEBg0h72xbGNxLFk-tkJE

Message-ID:

Subject: Fwd: Dear friend

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ea69510659e394ca"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.7

X-Spam_score_int: 197

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I have been waiting for you since to come down

here and pick your consignment but i did not heard anything from you since

then, I have deposited the US$5,000,000.00 with the ALINCO SECURITY COMPANY

he [...]



Content analysis details: (19.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

[74.125.228.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.70 listed in dnsbl.ahbl.org]

[74.125.228.70 listed in dnsbl.ahbl.org]

[74.125.228.70 listed in dnsbl.ahbl.org]

[74.125.228.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.70 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[alinco22(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rosestella950(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rosestella950(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.70 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.70 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.2 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Fwd: Dear friend



--000000000000ea69510659e394ca

Content-Type: text/plain; charset="UTF-8"



Dear Friend,



I have been waiting for you since to come down here and pick your

consignment but i did not heard anything from you since then, I have

deposited the US$5,000,000.00 with the ALINCO SECURITY COMPANY here in

USA, because I traveled to Japan to see my boss and I will not

come back till next year ending.I have arranged with the ALINCO

SECURITY COMPANY to get your US$5,000,000.00 to you this month and

they will be coming to you with the fund inside black portfolio, I

would have deposited the fund with the Bank for them to transfer the

fund into your own Bank account but the procedure of Bank is too much

and they will required enough fee.I drop your delivery details with

the ALINCO SECURITY COMPANY but I will like you to re-confirm the

information to them again so that they will not be any mistake when

coming with the fund.





Send the below information to the ALINCO SECURITY COMPANY.(1)Full

name:(2)Address:(3)Tel:I want you to know that you have all right to

declare how you want to receive your fund, I would have prefer the

fund to be transfer to you but I make some searches about the Bank

transfer and they told me that it will cost you the sum of US$1500 to

transfer the US$5,000,000.00 into your account.But I have deposited

the US$5,000,000.00 in cash to the ALINCO SECURITY COMPANY, below is

the ALINCO SECURITY COMPANY contact.Director: Mr.Paul Ego Email: (

alinco22@outlook.com ) I have paid the

delivery charges and insurance fee to the ALINCO SECURITY COMPANY. The

only Money that the ALINCO SECURITY COMPANY will require from you is

$95 Dollars for demur-rage,





if you can pay the $95 Dollars to them, they will proceed and get the

US$5,000,000.00 to you in your Country.Please if you want to contact

the ALINCO SECURITY COMPANY, you are to contact them with your

portfolio code number which is (PPL111RSS) and your address where you

want them to deliver the cash to you and you are to pay the $95 to the

ALINCO SECURITY COMPANY to enable them to proceed and get the cash to

you, don't fail to resend your information to them for your own good.



Regards,Miss. Stella Rose





--









--









--









--









--









--









--









--









--









--









--









--









--









--









--









--









--



--000000000000ea69510659e394ca

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend,

I have been waiting for you since to come d=

own here and pick your
consignment but i did not heard anything f=

rom you since then, I have
deposited the US$5,000,000.00 with the=

ALINCO SECURITY COMPANY here in
USA, because I traveled to Japan=

to see my boss and I will not
come back till next year ending.I =

have arranged with the ALINCO
SECURITY COMPANY to get your US$5,0=

00,000.00 to you this month and
they will be coming to you with t=

he fund inside black portfolio, I
would have deposited the fund w=

ith the Bank for them to transfer the
fund into your own Bank acc=

ount but the procedure of Bank is too much
and they will required=

enough fee.I drop your delivery details with
the ALINCO SECURITY=

COMPANY but I will like you to re-confirm the
information to the=

m again so that they will not be any mistake when
coming with the=

fund.


Send the below information t=

o the ALINCO SECURITY COMPANY.(1)Full
name:(2)Address:(3)Tel:I wa=

nt you to know that you have all right to
declare how you want to=

receive your fund, I would have prefer the
fund to be transfer t=

o you but I make some searches about the Bank
transfer and they t=

old me that it will cost you the sum of US$1500 to
transfer the U=

S$5,000,000.00 into your account.But I have deposited
the US$5,00=

0,000.00 in cash to the ALINCO SECURITY COMPANY, below is
the ALI=

NCO SECURITY COMPANY contact.Director: Mr.Paul Ego Email: (
o:alinco22@outlook.com" style=3D"color:rgb(17,85,204);text-decoration:none"=

target=3D"_blank">alinco22@outlook.com=C2=A0) I have paid the

v>delivery charges and insurance fee to the ALINCO SECURITY COMPANY. The
iv>
only Money that the ALINCO SECURITY COMPANY will require from you i=

s
$95 Dollars for demur-rage,


=

if you can pay the $95 Dollars to them, they will proceed and get the<=

/div>
US$5,000,000.00 to you in your Country.Please if you want to cont=

act
the ALINCO SECURITY COMPANY, you are to contact them with you=

r
portfolio code number which is (PPL111RSS) and your address whe=

re you
want them to deliver the cash to you and you are to pay th=

e $95 to the
ALINCO SECURITY COMPANY to enable them to proceed an=

d get the cash to
you, don't fail to resend your information =

to them for your own good.

Regards,Miss. Stella Ro=

se




--






--






--






--








--






--






--






--






--






--








--






--








--






--






--






--






--





--000000000000ea69510659e394ca--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxly-000000007JL-2fry

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:29:30 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:29:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:45416)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyvKU-00000000HDg-2QgP

for root@nk.ca;

Tue, 25 Aug 2026 11:53:08 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-5174a236220sf1180361cf.3

for ; Tue, 25 Aug 2026 10:52:11 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1787680325; cv=pass;

d=google.com; s=arc-20260327;

b=ODkja0DtP6uU4lwLhWondakNir6+fntSIO3h30u2EjCK5SxquGUgapM5R3iPMUbx79

KcPq1kQ/JrhFgvGCC72Ov4Jx74XzBlYtGJr8qQIZ0m5Qb4ynTT+eXsOEKf8Wez7kYFdK

ml8+tUlilzB0LszJZC1+gpYG7pbyjWvPJBh9fFEVot7WA+uOMnMPb0Tp8CbNRxqXaPkj

mSK3AHhzcoAVMWfVjfA/AQrFZbxNeaVX2rK6KnAuZrFPQx09KNku18/HuRBhGcTMQABn

wlEERB0XW2l8PKkL0C2Ws8mZYKczq+ZdMTM8Z89pZDC7eZZlTtx5zNesIUAOMOZQDL6f

8cxg==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=6FaD9rHEOP2UdkYOFiR7wbPJwC4oH12Z1sWk74K5rJ4=;

fh=k2dTm5csHfmo3QccBZjSTWjMaaZ7LWHum2s8uupvz3c=;

b=D2+jV+XHCOtmT8tVkvNh3aV73j8520xtuIF6H1L5Kx1r7Dbl6ziUPDp+fkQkGwePYI

sJxQUxkx/uw9PbUonAKEHXdFFtXbDJLjMkrOLL75P6taV4FSyRQVQ2m/AtiaEuh3Rw/y

AS9mo5rFQCfreMvVmxtXjvBTd320Lz0n1sZ393gaPXOg4ZNnRWiZFLfXjd1VCD4/TIT0

z0i7bOwxsTASTq7mNKv0PGT2YaGhfq/b2kW+c+41Cs9mvsjcrWosJnvD0zj0Th1fbzfp

hNZbVOtoGxxvtWUrXzl+pN8a/yTIiOuHHDl6qsHeUEEIR7Ba1GNbLKhRZNz1WshJJoXZ

BtqQ==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@seorino.com header.s=google header.b=ZbqSuPlV;

arc=pass (i=1);

spf=pass (google.com: domain of kavita@seorino.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=kavita@seorino.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=seorino.com;

dara=neutral header.i=@wildppcagency.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wildppcagency-com.20251104.gappssmtp.com; s=20251104; t=1787680325; x=1788285125; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6FaD9rHEOP2UdkYOFiR7wbPJwC4oH12Z1sWk74K5rJ4=;

b=J2DwGBeJ3ZrIxW34Q0uVgYOTOj0txiIiq8kGCb3o0r4n9tNy5ZFQj4M+QcG/fE8nB0

F7QXqOlfou0M50dsZtTxDhdJIrY+ObmoYmQYbPwwYmmOoAApsOG9QMKoR1JYBECMpNqh

hkMiQxYQ/6BE29eI506VKriw5lqJMsceHQ0yfG1GH2AO8WTeodYw42WDIdyLH9MSEq4L

mh5TXtX5C1mH2F3dM2FXdHFIze94PQSzCxwrc3wsf9LAFPe2SbrSfa+GM1lag/1p9hqz

XGyWvSGcj9OBZhiI65i/O5cXZF/sQ/ZNUhb6gk+dIssRe6A0/Urya0jEww7sbiJX5W7t

7l2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787680325; x=1788285125;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6FaD9rHEOP2UdkYOFiR7wbPJwC4oH12Z1sWk74K5rJ4=;

b=fwEcQOKbDHiIMbWhCBZM0L+q+862+M33kaoBcHeJGmrXeCmmyRB8VOFjfHJmXzV+Hh

TALNGz6hCaBYJ8WINVNdC7Jobw9RXO//1zRYJfpT/KFAuA23fBGaCV5t6hpIKlnrXaXV

+cy2NnyADi/QTlPoY8CJZGYW4NTtgeuOvQwUQhvsd0ca8mMU73u9flxw1J01CmPyXM+D

G658VD3j2ZRrDAdz6SuGGAFMYaN1B1Hfih5e3glM37+jYjR9HhmlRV/pIW7e+Xiu671s

MdBJ+pugClvAwA8HbFPoR6WSTPk77WaGbwUJxilbGBh5zTFCf8smGR9N9V/Kpb3ppRoJ

Hhhw==

X-Forwarded-Encrypted: i=3; AHgh+RrI/a/xNxs7iSUPZZLcsXih6Vpw8zc/9AgtpG8NzoHCRb6Yu5trjumlptP0lqZSuJlARQ3D@nk.ca

X-Gm-Message-State: AFuF++lrNp9+TZq9KkRc+6SwID/k2Cy6TbFck/Q3Tqf2pUlC/vf5Z9Fs

N8zi7TvCQr30zqSE8KOdGs0DuvdIuTNkdicxuSJ1+sIRM/x5udOOPTqBcmwV7MZBQnQ=

X-Received: by 2002:a05:622a:1823:b0:51c:84f0:d903 with SMTP id d75a77b69052e-52e4229ca1cmr6813421cf.17.1787680324889;

Tue, 25 Aug 2026 10:52:04 -0700 (PDT)

X-BeenThere: crawl_perspective@wildppcagency.com; h="ATskLdfzEVJyp15BC+3qmx7SR014Nb5HYOwB1cwAh10F1t3XtQ=="

Received: by 2002:a05:622a:58cd:b0:51c:1d25:ea56 with SMTP id

d75a77b69052e-52e24ad67c7ls41955171cf.1.-pod-prod-01-us; Tue, 25 Aug 2026

10:50:25 -0700 (PDT)

X-Received: by 2002:a05:622a:c5:b0:52d:d08e:d43d with SMTP id d75a77b69052e-52e4221336dmr6974171cf.4.1787680225324;

Tue, 25 Aug 2026 10:50:25 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1787680225; cv=pass;

d=google.com; s=arc-20260327;

b=mGcFm8xxyor9n2z6rhi64ebt9G432w0OtrAlricYImbjS7P8E7ni+EglCYF4nKWkw1

r9/hKmtmw6k8ilt3LNAnYI0kyt3hkrV7PX9YAee9TSg3z5K/PGdQ7OmDL1uL5bIiHbKa

CeLt6z7ir4hNJikIK+9Rlqic3HpOxexZCc203JTsBYaMGWoEZLRq1Bowk3AV3+I74heU

xuHVka4g+x0fXF0NMXxgGX22ahrbzxx5W6h6xLv2epnsdRpBuGz9QSNhP6xhTc9BTLvp

N4Z8vsEfiopKyQK6tW9GTF2e8/oDeteWDg0fBG/RE5tWouPp8GYaLTWaTqFwdM62Ex+H

9jNg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=KvE5mPaGHwhsFAYNKY/TaqtG+LwzlMBRyNieMJdIl3I=;

fh=2eRdNqCapn+s/i9z08JIFgTSbmsiEBfvf6XEwA4D/cE=;

b=Ixrbg4aI7EOGKHug9US/gpF977kBIngbKuw4TlF1NiNMqDcJ9fLfHKzZriy29qauB/

C9ScdRm0czNsRC57he8DyWwPfM8XBLpG23xIV4Lhmsqsmsqmz/nNznAPylpA/61c8+w2

CnqhLu468wrKKJ845T6Eb3JAoFXdWFPsHG0SgHvjS8T/fOobUg2kMTv/KbAaRZ0y53B0

aCDZxNzgs3AIU+e7JIcgXd2nlioFtyZ2xrjCecRO7UCPgLNtTUrxMhZgp2IfHHcHKV5Z

Bb4DLmJ6zLQULdbXI72QdyejVIvQeBNzgZLMAeYkj6tp48i9+cN6sxccDuDJBRpi2r7f

QiRQ==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@seorino.com header.s=google header.b=ZbqSuPlV;

arc=pass (i=1);

spf=pass (google.com: domain of kavita@seorino.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=kavita@seorino.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=seorino.com;

dara=neutral header.i=@wildppcagency.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id d75a77b69052e-52e427bec7asor524261cf.7.2026.08.25.10.50.25

for

(Google Transport Security);

Tue, 25 Aug 2026 10:50:25 -0700 (PDT)

Received-SPF: pass (google.com: domain of kavita@seorino.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1787680225; cv=none;

d=google.com; s=arc-20260327;

b=IzfHqCO4EhX/9KnnrGVQt1+3c9h2/DIyMKaqVTQawHTUigpaTJ6hTtTobnDWcq0y1l

8X8Qefsnl6AqHtCwmjTVr4hJqt8dR14XmECv695Di0yY+D+e0MeLVOSDiXux1Q3IxJ9V

Y5SLcQ9rX9tF0rpD6MFkDgGIZaYE4vOm5dWF2wGLOos9Zb2bikU+5bzQs1vu6xG5qpHa

R5NJDxj9hzadX3dITazitOlZlT/V8S7G7zrapadzJv97SpcwZl0fcI/uO0FSjSGqbcoL

spWFG8Eme2UhfWfLfvpal++z+tf9jV5WkAi0L3u1qu7+bmsI+XybmDK+9ZCg9WOy3dyj

zqxA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=KvE5mPaGHwhsFAYNKY/TaqtG+LwzlMBRyNieMJdIl3I=;

fh=2eRdNqCapn+s/i9z08JIFgTSbmsiEBfvf6XEwA4D/cE=;

b=AX+KAEEdHnOUTQ+wg3VbH+3hDsh3yD1NVyF9+Dt05P3TRH6OYf4s4PNj6771Xw13bJ

nSFYrYJ9Rgc9ZcD48qpGVSROUWTjlGSy+lFypV86h5NSmV8EU1mKGPjEKZZ/bl+yLncx

sixnMTTUfjgwwKtKPY3ZxbOITTNGkGsG4vjpcn/JcdmP6R/yHxrzU3EyJ/TQomhEFmbU

oXVZAH5HRysbJW/6F4AYPoYX1qgUKJdNyO8SOanHU2Udhc7q+oVydYARKWW4F0t0aF+9

LXVG8UcYmTuAIs/5M7w0P++uBJb7/S327G4u99jPoXnVLWorwMJVzfdONvfvvk2cyvwJ

Cklg==;

darn=wildppcagency.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD13ELLCK3eqHJ4akYlAk5F6pJviMDWp4IdVPURKtjAzO7ThyyxwBYNmBmM8LvIA

IGZt0HetQk7xtivJVt+K+Jh8MLzIrmffPhwzDHU0P6oqsc9Ri18xL4IrfFE912rVLssdpmRwzlO

O80ErNmn7rD3FFboutUpg0IuE1bS95apBomlB7Xt0brcVQgE8ezJUUW1/wWlQ6G7ihEDp10z9zI

qPbGx+kQqn/m9BGNPH/GBKgYAf6gw20lr8PHCccdAezj6xuUyaOpN362I4u0yAkNkAwFxifVEW7

UTHbdbXQDDAp45JTOXVR0cO0FyvrgW/poQXc1/fzetFMJElnr7sexxQ13RSSbBCjEEzRZvkHl9I

1V8gYWXEm2P/yIs6R7Y6ci/EGCcxuJlek58J/1cHZ8iIgh0Ajx23S3WE76sZ6JdkqIqM=

X-Received: by 2002:ac8:5f8a:0:b0:51f:20e1:137f with SMTP id

d75a77b69052e-52e422b1898mr5888421cf.19.1787680224668; Tue, 25 Aug 2026

10:50:24 -0700 (PDT)

MIME-Version: 1.0

From: "'Kavita Arya' via crawl_perspective"

Date: Tue, 25 Aug 2026 23:22:18 +0530

X-Gm-Features: AcwNN1U-ZnGsZ3wkIOlgwOe0K25tI3RzalILFJtANLb6O647OWUZdfSJXFP6bq0

Message-ID:

Subject: More Leads...

To: crawl_perspective@wildppcagency.com

Content-Type: multipart/alternative; boundary="000000000000c3bc450659e2bce3"

X-Original-Sender: kavita@seorino.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@seorino.com header.s=google header.b=ZbqSuPlV; arc=pass

(i=1); spf=pass (google.com: domain of kavita@seorino.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=kavita@seorino.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=seorino.com;

dara=neutral header.i=@wildppcagency.com

X-Original-From: Kavita Arya

Reply-To: Kavita Arya

Precedence: list

Mailing-list: list crawl_perspective@wildppcagency.com; contact crawl_perspective+owners@wildppcagency.com

List-ID:

X-Spam-Checked-In-Group: crawl_perspective@wildppcagency.com

X-Google-Group-Id: 799647509001

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,





--000000000000c3bc450659e2bce3

Content-Type: text/plain; charset="UTF-8"



I *came across your website *and noticed a few SEO issues. Reply with "OK",

and I'll send our pricing and portfolio.



Thanks,



To unsubscribe from this group and stop receiving emails from it, send an email to crawl_perspective+unsubscribe@wildppcagency.com.



--000000000000c3bc450659e2bce3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



I=C2=A0came across your website=C2=A0and noticed a=

=C2=A0few SEO issues.=C2=A0Reply with=C2=A0"OK", and
>=C2=A0I'll=C2=A0send our pricing and portfolio.

=

Thanks,








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to =

crawl_perspective+unsubscribe@wildppcagency.com.




--000000000000c3bc450659e2bce3--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxli-000000007G3-0hSs

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:29:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:29:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m254126.xmail.netease.com ([103.129.254.126]:34176)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyv69-00000000E7g-46rJ

for sales@nk.ca;

Tue, 25 Aug 2026 11:38:24 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1057498_493787064.1787679432670"

To: sales

Reply-To: sales23@abiscircuits.com

Subject: =?UTF-8?B?UmU6LlJlbGlhYmxlIFBDQkEgZm9yICB5b3VyIHByb2R1Y3QgUENCQSBTYWxlcw==?=

X-Priority: 3

MIME-Version: 1.0

Received: from diana@abiscircuits.cn( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 26 Aug 2026 01:37:12 +0800 (GMT+08:00)

From: Diana

Date: Wed, 26 Aug 2026 01:37:12 +0800 (GMT+08:00)

X-WM-Tid: 0aa039ff5fb509b1kunm7d6b55b5152b81

DKIM-Signature: a=rsa-sha256;

b=TnT1a6K1SZvLGgAPYhAFmKnf5iSt0Rfla45c9GzeINeEwJZ1O2HwwHJIBUwSh7F8BRWLM32TLCQolVdgWjmFugjbpTJcL+Xe8/3PsQkgyJRJbBFF+9hjiIGKvtTjRDOMO+74+voo/oF/II2NnacvB13ALVPPDbqQ+kTbchVe7CI=; s=default; c=relaxed/relaxed; d=abisassembly.net; v=1;

bh=T86rAKO8KiMry25e0AvWogcoTcWtl00Qgo4842oMn3w=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Hi sales,

I hope this email finds you well.



I notices you recently viewed my last email.And want to reach out to see if you have any questions or needs future information .



Abis have been makeing OEM circuit boards since 2006



I'm confident with our quality and attractive cost .



Would you mind open a door to add one more good supplier pls ?









Diana Dai

Project Representative | ABIS Circuits Co., Ltd



Rigid PCB, Flex PCB, Rigid-Flex 1~32 Layer PCB, Metal PCB, HDI PCB, PCBA

Mobile / Whatsapp / Wechat: +86 13510754753

Email: sales23@abiscircuits.com / diana@abiscircuits.cn

Website: abiscircuits.com











Wiza based spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxkt-0000000071X-1JV3

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:28:23 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:28:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f46.google.com ([209.85.218.46]:51701)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wytmB-00000000Jny-3dY5

for root@mail.nl2k.ab.ca;

Tue, 25 Aug 2026 10:13:37 -0600

Received: by mail-ej1-f46.google.com with SMTP id a640c23a62f3a-c2020421077so851881966b.3

for ; Tue, 25 Aug 2026 09:12:39 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787674353; cv=none;

d=google.com; s=arc-20260327;

b=Gw1w2P0IWHKTDNfSbfP1sQVMxO4Ez4v8+nUBjEUAh0qrA7VDuOgp9ZkRVpWVJfIABZ

49212Y1QcTDz2ExfRw8KzxzbxWGp7wwQyN5iYX7JM0j72snRVOqh3PBWHgegkEWx6ACJ

E1VqSyIcXikWajlh5xktz1GcuqFLZ8vBeBdUlxRXvQ2/3P4in3l0R+lu9Wyqh4DJ/6/r

El+T/An0ZImTPNcdbyjkYQkQRmhXisFuh2yN44adIj4XSTLLUtiqxYTrHRgrkfDabmtq

Vg7M04D0UgdR9nwD5dd7akNnzVaALHhH++D6G2SOT4TPGC9j5G4aYV7sUWYSmmBBwjUI

wIkg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=FcEv2IHUhVJLHQ7kzwngakt7xwqfWvv6gc1nskpNTeU=;

fh=rPE8HmmRslpnJ38twkY7eZHm3135VDPjK68lsL+IGwo=;

b=ZjbfuY3QVmATdV/YI1q1zqIY1V2dr26tW35J70i5VgZz5MiPolFT6yr10pjG4hMq3A

x+I6c+WKlNSjhyV7L71x1+zp9YaUyirgqUFxwNS4i0q1PGGa+4e1HSVqQ8FqtMIH3jD8

cvA+YPAZA9vhNiKZSwepCnHD+yIcht0A7t1n/uVoAY1e4czHQcVRbcygQ/7Sj47hFqS7

EhS834Ppekvla9IPSw/KZZ0aaGIrK6RQzMgUpF+WA3aUYOcJ0+e/96tvvC6pORqLSPDn

Sow4iNSagN7tGwSaD76m9AkR0fDzTmIj9qWAqkt4Eh6RIOaxAGnJx8uZsxZm349dBuK6

hr9A==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787674353; x=1788279153; darn=mail.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=FcEv2IHUhVJLHQ7kzwngakt7xwqfWvv6gc1nskpNTeU=;

b=fyxY3yTpJFn+7i1qTxZNO2DIECgdfs8B0rtp/MUtuG6f0x3u3mZhS8kK9+dTlrkh5J

RqoR6+gBCWLXDfP8481mmiugbU7XVhmTn2+FMt8AIEhyeoHbpSzioA/khIwg1cZJyrv0

psT9Cy1sEcwJGCpIx89GWIhbQjD+wx7SEjlGLgV3agIp8Ek7QNBuf6t9stmkvJxkE47g

HRl9TDtNQvuDpurdLERpg8JCxg6IZRAtbxtpJj6JZrwCRCo7Wem3Hl/hCMbhC9sncP1h

jLjxFY2/9CfRtDeU+TxpRPwH+uew9sgTpZRqmKo5h+pTS6Do2g4hSFXsKtxxEFkBZzNL

OVzg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787674353; x=1788279153;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=FcEv2IHUhVJLHQ7kzwngakt7xwqfWvv6gc1nskpNTeU=;

b=kmDBn0QI8/1BFGoeRogT4kU3/YSyXSLsVtbvOU+Kl/USjk3xkkLf5ePvmmUQgaYGlR

z789vs+gLKQM2cknwUuxTNsytKyY7MRh+mBAW0EXW6c/I3oE8FQjuMevLxOmU2jrV3Oj

0324QaPv//6J2f20UAJh5h35m00Z0rzE5WOH0kIGHWJRDeEUX3QoKM8X3W2sNIRi2sNz

l3yYtyXqdWmF2UvAfM2/3T381F/z7H4nQtDtKpetxnF9FUZfNNEFEstcRlgJLDHrU2OU

upO36zkG2YGtSaMqXPUycLCRgIuQxoyus5bEX8JUwbwLxnF05+Ar/iq5NUbccTCXJn8T

fHpg==

X-Gm-Message-State: AFuF++khsT3MCF/PQcj/YjrU26JD7sXUqwmMoH2LoM8Efr1FJ7JnyG/D

+5+X4x5gcO/VUEEKcRpZNzQ7So63A01/AGCgbWje/EIfxcab6yLXrVpo4gW2HZoA3if95Fx42Gs

+YQ4khZHOjcY6APY+oFX9w6C6cc6SuCE9gZSb4vdejg==

X-Gm-Gg: AR+sD10CAzwK2AtspdoxArTIVHZFk/hxsFYk6xWyUkJ5GBUJCtyMUUK1KmtN20MbB44

wXixGytwVvog1a4yi1Of+vzxDIxjCx5OOcY1kGCnkL0LwidwYEd7eRpNQevyuO3AQPGcwTTwk+v

OThOSvH3zKcwi93ZTZMzXN7FMyAOea1T2cEDQ2058mqpAfjzz9AkfUlWVogl2tLVHMM7VvzrH2V

CYwLFDUGWxDrSLhFwvNuVt8+VQWkwbFutRoMNlUGr5k3jSa+25QOtrJPmfEfJHfC+ee8KSIoDi6

dLK/FBSvVLT5o0I2dC1qPiOy1rFaWqQGcUr535a7o8FPo65zgi8hj+TC+U+jnOTYtxtTcJkwBtf

f+ewWCK8mXDu0zBS+HsgVe05x/RWXyugolPpIW4Tk4HvBfzc/OJa2D6MfuRkGb2LqgKRg7kMSZT

jkLV46QnysiCVrRnElKg8fZQugHbNjmYNavFAR+sUSn+IdhZMD4Zp4Ivea0vaMYQf1MEyAO3ZHX

A9nbnftFBLR2TA8q0QmRkTpB7Xc6+/D6WkppLnq49tRoHeWwnWAD28hs0Q=

X-Received: by 2002:a17:907:c8c7:b0:c24:680a:1c42 with SMTP id

a640c23a62f3a-c2491c9a6eamr3249945666b.7.1787674352660; Tue, 25 Aug 2026

09:12:32 -0700 (PDT)

MIME-Version: 1.0

From: Kumi Yang

Date: Tue, 25 Aug 2026 23:12:19 +0700

X-Gm-Features: AcwNN1VuTRtxezQAmLpIbD35QMpbA9wOfVTTvTPm7DcDWICyteU885v-wZLB_Vo

Message-ID:

Subject: Seeking Your Insights on Technology and Retirement-Friendly Cities

To: root@mail.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000c3b4a60659e15e57"



--000000000000c3b4a60659e15e57

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Dave,



My name is Kumi. I found your contact information through Wiza, and I

apologize for reaching out unexpectedly.



I was impressed by your experience as the Owner of NetKnow. Your knowledge

of computer networking and technology entrepreneurship is truly valuable,

and I would appreciate any insights you could share about the IT industry.



I am also planning for my parents=E2=80=99 retirement and looking for a saf=

e,

convenient city with good healthcare. Based on your experience in Canada, I

would be grateful for any recommendations for senior-friendly cities.



Thank you for your time, and I look forward to hearing from you.



Sincerely,

Kumi



--000000000000c3b4a60659e15e57

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Dave,

My name is Kumi. I found your contact =

information through Wiza, and I apologize for reaching out unexpectedly.
>

I was impressed by your experience as the Owner of NetKnow. Your knowle=

dge of computer networking and technology entrepreneurship is truly valuabl=

e, and I would appreciate any insights you could share about the IT industr=

y.

I am also planning for my parents=E2=80=99 retirement and looking =

for a safe, convenient city with good healthcare. Based on your experience =

in Canada, I would be grateful for any recommendations for senior-friendly =

cities.

Thank you for your time, and I look forward to hearing from y=

ou.

Sincerely,
Kumi





--000000000000c3b4a60659e15e57--

German language spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxke-000000006ui-379t

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:28:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:28:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.delmax.rs ([176.221.75.149]:47000)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wytt7-00000000Lk6-0l2x

for doctor@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 10:20:46 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.delmax.rs (Postfix) with ESMTP id 4FBBA124BF16;

Tue, 25 Aug 2026 17:39:29 +0200 (CEST)

Received: from mail.delmax.rs ([127.0.0.1])

by localhost (mail.delmax.rs [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id 9M9InczkOJOA; Tue, 25 Aug 2026 17:39:29 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by mail.delmax.rs (Postfix) with ESMTP id 01AAC124D68B;

Tue, 25 Aug 2026 17:39:29 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.delmax.rs 01AAC124D68B

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delmax.rs;

s=6F4CA0E4-7939-11F1-A3B0-7C217CCAB3F3; t=1787672369;

bh=lPWJiTfHmKOf3NTIItvgFcZ6ss/Q9fiCIUAZAqYaixk=;

h=MIME-Version:To:From:Date:Message-Id;

b=nrQ0QlrkO2gBB7nka5bjXnY3h+5+zT1o9/Sq/39QMSB+VTWkqQ+QnnIs7rhFPWcBK

5oopw3MMLIwGTNjBC7B9zRDmnbEeUYOqL9WKlxZ2LqCvGbVIYAIHklbCM3i7Hq4w5u

05/nwBxV0PFSugzl2dPQ2U5JjS3SKHnkVTldQ1mGhl2hQ1ezB+7YOeaVeajDpCfKI5

z+SbEIqNE0OWIHloq0B7R0UXLzT+N1uOnedch3Gyd7sDC/3FvteWjNcXbVuIoNij8o

xW3LRNudQyaoT1vIJ7HJ3AaTToRWVOsCCzRS82Odpd8yrhvginwfLxPz/m22gZ0f5q

U2QWq9QTsxBtg==

X-Virus-Scanned: amavisd-new at mail.delmax.rs

Received: from mail.delmax.rs ([127.0.0.1])

by localhost (mail.delmax.rs [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id WO6Es2Xbg5hP; Tue, 25 Aug 2026 17:39:28 +0200 (CEST)

Received: from DESKTOP-3UAD085.lan (unknown [41.56.251.53])

by mail.delmax.rs (Postfix) with ESMTPSA id 425B8124D65E;

Tue, 25 Aug 2026 17:39:24 +0200 (CEST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: =?utf-8?q?Zusch=C3=BCsse?=

To: Recipients

From: ROBERT BOSCH STIFTUNG

Date: Tue, 25 Aug 2026 17:39:17 +0200

Reply-To: robertboschdonations@gmail.com

Message-Id: <20260825153924.425B8124D65E@mail.delmax.rs>

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Die Stiftung Roberta Boscha ist eine ehemalige Stiftung unter

der Schirmherrschaft der Firma Bosch, die in der Gemeinde arbeitet. Zwei

E-Mail-Adressen für Google Inc. und Microsoft Bing. Zostales los [...]



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[41.56.251.53 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

[176.221.75.149 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

[176.221.75.149 listed in dnsbl.ahbl.org]

[176.221.75.149 listed in dnsbl.ahbl.org]

[176.221.75.149 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

[41.56.251.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[176.221.75.149 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[41.56.251.53 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[176.221.75.149 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} =?utf-8?q?Zusch=C3=BCsse?=



Die Stiftung Roberta Boscha ist eine ehemalige Stiftung unter der Schirmher=

rschaft der Firma Bosch, die in der Gemeinde arbeitet. Zwei E-Mail-Adressen=

f=FCr Google Inc. und Microsoft Bing. Zostales losowo wybrany do otrzymani=

a grantu w wysokosci miliona euro. Mozesz wykorzystac ten grant, aby wesprz=

ec innych czlonk=F3w swojej spolecznosci.



Zainteresowany? Kontaktieren Sie mich unter folgender E-Mail-Adresse:founda=

tionrobertbosch@gmail.com

Fundacja Roberta Boscha w Niemczech

RBC Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxkE-000000006YK-0gdg

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:27:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:27:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f46.google.com ([209.85.208.46]:52706)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wysma-000000003gW-1EJM

for doctor@nl2k.ab.ca;

Tue, 25 Aug 2026 09:09:57 -0600

Received: by mail-ed1-f46.google.com with SMTP id 4fb4d7f45d1cf-6a0a4aa99bdso8206012a12.1

for ; Tue, 25 Aug 2026 08:09:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787670534; x=1788275334; darn=nl2k.ab.ca;

h=message-id:date:subject:to:from:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=lv3uQQBbmovjw9DIdEEeYSAvV/gb5/ADF9A0Xbp5eyY=;

b=rAauSex+2LvN1UGJbl+iwAziLyi3O+p76AGxOQTgfYdPaYkf0CNVPriV5pcqlDoiAo

laB2tAKJ6h7qcJ9Q2HDx0a07bGWm75YA7ObbP32Q/kPhQZsNLoogsZz8w66sMWkfYe92

Hd273uh57cC/NhRQu1a2LIPTKdJRiRYh1Gs0oQnDjTfmqiyj5R2Pj4R2LNpdvD52R4iO

ohNTJGDFYk2eWgszQ7q/lzp3P9R/5c46XhLjZfRWeSsNtNEiL8FOQ1k8aZuEzwtDLrrg

uXcxjqa9JmMqM+jSOh8dQQMRkX1hzF+ilQ52UcKPhzdKSRf9UzlfzKSDmajuAQMPvPbu

Tm6Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787670534; x=1788275334;

h=message-id:date:subject:to:from:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=lv3uQQBbmovjw9DIdEEeYSAvV/gb5/ADF9A0Xbp5eyY=;

b=NyBOLJxsWJ7LPL0fzYaVVRK+6Qxfe2fBm/a8oD5CiOvls4zAeBKB4sToBP9luUeyS8

oG+JfKhwtCS2efrOHyg4x2rl0oiOYkjeYysVSbX3/hXM8PfVVkuOVkMyzvi+0sHeOz7Z

orZ7j76AWD0D/qpUMw04Vvp1gvNVIJzj9jD7KDqxK/kI6pHNHc9Aji34QgeRIxyWeSsm

wSM4GUi1eCz0im+Iw7h/wZbVzjdUY12JnsdnlpYjU1Nubn6hBPoBVMGnE8rZL86FkWyv

KqHZVl8nkkQKNEPpHzI1mM0dRFfHyztGv74RnxIyoXXiuwnLPTtdKEtIvb9iUY4Fg5Dx

A/PA==

X-Gm-Message-State: AFuF++l7ARW//lGMNOXGLOiIz3L9KpMrK12p7oDK1rA+PiPFfe3nBA6X

CXRdyvqj6AllUGRnbJU6VumepBwypl3MZaTc8GUqqwEj8ff+jarffauvLJmPiRSedDPbHA==

X-Gm-Gg: AR+sD13pPfTUbvuE8e6FaV0RiT4Z9Y4+uOLU8UkFmc53R6Teiln6BG8Xsykt+PVjrp7

tkHkj3Pv38+nHUpIe2Onxc2VNTJypGlkfuCp2dEh0HvIJqMad7UQiIIjoVbUuLix6Md7GK2bqIJ

KH545/c5JDGzLT5BvwWC3qo6vWhcYOIYQ6grdFf31AUnx1oYwnd0eOteGmy3aJmd9X1nAg4nzoE

Va4EayNN7EbAYfPfdmrJDT90xnVg0wJhSlgIlsT6kS2f5oh/oPaIGb5LQi18+0IQ7gzsKPuzhRk

oi0CMQv9PHxMgzkbSFGPYb+ndwbW9az229xxaAQdlIVKxY8GCZh02qgISQoICu5teOM467HOSCE

ng9jsipl4UN6QFkXQ8AKmsFJ7WQnlvUU4Xxtl6dMJoL872BQW9xDgjRUprPq2j8XEnTr6QQUupM

diDf8Kg6Fi90u0GwrEo+nSEGgZ6T/xfNuCB45C9ZhrWqwBY+dbhIGCJ0rm4xHGX2f/FCFR/gjgb

l3ZdoGV

X-Received: by 2002:a05:6402:1ecc:b0:6a3:74c2:3cf3 with SMTP id 4fb4d7f45d1cf-6a582b0c826mr30768149a12.6.1787670534469;

Tue, 25 Aug 2026 08:08:54 -0700 (PDT)

Received: from [10.5.0.2] ([193.124.21.43])

by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-6a5dea83a25sm115033a12.18.2026.08.25.08.08.52

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 08:08:53 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============8185156476161207957=="

MIME-Version: 1.0

From: RBC-Support

To: doctor@nl2k.ab.ca

Subject: New secure message in your online center

Date: Tue, 25 Aug 2026 17:08:53 +0200

Message-ID: <178767053359.1940.1532261181250774573@gmail.com>





RBC Bank Information Security Dept.

Date: August 22, 2026 Ref: EB-849-224 Subject: Important Account Info



Dear Customer,



For your security and peace of mind, we deliver sensitive documents and notices exclusively through your personal, secured online message center.



A new secure message is currently waiting for you. Please sign in to your online banking account using your credentials to view and manage your documents.

View Secure Message



Sincerely,



RBC Royal Bank

Security Notice:

RBC Royal Bank employees will never ask you for your passwords, PINs, or online banking credentials via email. If you receive a suspicious email, please report it immediately.



© 2026 Royal Bank of Canada • 200 Bay Street • Toronto, ON M5J 2J5

Web/SEO/App spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyscv-00000000O9N-25Dl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 08:59:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 08:59:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012050.outbound.protection.outlook.com ([52.103.43.50]:40527 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrlR-00000000HxF-1fqj

for sales@nk.ca;

Tue, 25 Aug 2026 08:04:44 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nJ++kecxxUV0lGQVkkT8nx4OlRCbFjxHbt/25z0wXe4kMOhaG3zQrZ46I5Esy5JHRFx976VDF42GzSfAgd+9J8ttrpBRp8PVtvpk2djFiLJSXn26zUTqcR1NIX+0hp7h7uPD1oISpIFEzoE9mRn30c8+GsLK/tjsOeaikFLQma/Mzzmq2kt5qCUXHi1u+QPyk+y2jZMrrz4Aie7GndBPdKtjlR8Cl7RSM03dmmzyJ0PoTlK6Q7EOTBIyE3pmaGBK9Ph50dADxJa8v+qT7r9mcrrt1cPT9BPhC1iD3IhNoiCjh6dhE5w4QJYQvpZP5bBiOi12Yt7HgsnHdROb5djOzA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6eXN8ACm1jLOJq+oj6oogRRQ4BOYX4UHUFpMj1n9LN4=;

b=wPpkJZ8ZL/2D7gHZP8a685t/VQmfS1cZki1vZvPj0NlfVloC9Yo2V7aJqB/xd0i7hHMDNmHfQq0uoCxgFoihg6wy3Bw7epu6Zh+p/PtsAbcUPQwASmsPncMVFkBkP34wxY9qIJA0UjyGnI5XhJk0Vykl2JK4UAQveZB+gezStf3yrUJAo5+1fQvH3/ZP5cXbGimauL7PuqnkFKTusv0nzwkFZuGzSI7ygCUt0fslgQnf+whYQcnsz8aekdCsgBOPI1Fltw6c9Q+9OW3MyX+uQcS7xb+w3y7LOeceEC2CENHd7+V95puD3ibKYN1UFzZuxHiLWri4YAS9rTntoA571w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6eXN8ACm1jLOJq+oj6oogRRQ4BOYX4UHUFpMj1n9LN4=;

b=btmMfsl5dsN5vFIzHD9p+o7PThAHxeXvEz+NNF8gLdIiwsRFJGmR91Q2WRfxpbMGDlR1pldeqDBOn2A0DAeiSyNdJil0Vhh0zyUbaxYGpmHHpSRA4vlBQvtR80KcABdIVmHI/nwC5tngB9DW3RAxhtWq9ZRrKD4aF0yifV7NK3RYNNlF6BvgZphHsuKXpScZ58EgWG0JQGsKavTGkJiAxRUqPgsAIC5rbQfU+VcXdD7oRD93+MtZZk/2yhVLDWmedNJ6kTVZFtJOsS+Cx/9MbSdNHqL9eeF5UNsEIbC99YI1zP/LX6+jzM1+7ONhoOVTqzmeymx4lSBI5wqREsWwNQ==

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com (2603:1096:405:397::22)

by KL1PR03MB7173.apcprd03.prod.outlook.com (2603:1096:820:de::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.6; Tue, 25 Aug

2026 14:03:23 +0000

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd]) by TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd%4]) with mapi id 15.21.0339.012; Tue, 25 Aug 2026

14:03:23 +0000

From: Tony Hooper

To: Tony Hooper

Subject: Re: pricing?

Thread-Topic: pricing?

Thread-Index: AQHdMw+QSWBTdBOym0eB/AIOmi+XFrauznuW

Date: Tue, 25 Aug 2026 14:03:23 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYPPR03MB9723:EE_|KL1PR03MB7173:EE_

x-ms-office365-filtering-correlation-id: 5f40f453-bbfb-4e34-0c7c-08df02b1a05f

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|24121999003|51005399006|31061999003|55001999006|16051099003|15080799012|15030799006|9112599006|22091999003|4140399003|25010399006|2604031031799003|40105399003|26121999007|11120399003|2607281247196008|3420499032|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?oIRoYB1tyiP9w/qExaY3gRMUu34tgImL3frN/2d2BDxXmzFGBOvUj3nD?=

=?Windows-1252?Q?Cp6IzyBO/xi21SN3zEcV+d5ZjyjZkTfkrS3jEND6+MGRK9rzMCQFxaor?=

=?Windows-1252?Q?3PXpdKeJeqDc1P3M7yPJgZI26GckjXQ33XlmDrB+qv+237NMw+ay5TGQ?=

=?Windows-1252?Q?aqb/3KZePRi+j0NuQpPDZGu8gZbQzZoJx+S1x4K5qdt9lJz8IM6FgXtl?=

=?Windows-1252?Q?+dGOXX/NTrBIWmtVQa9Z2yBs5wk+E1tdahvXwV3hDXmNlL8nFJsW+Q8l?=

=?Windows-1252?Q?HnAdpB7FUZpnqkUYkO5avDPYRAmZKn2ZgkHvHx4xtAksDEqDndi7NUZP?=

=?Windows-1252?Q?V3QZovkdkDq+CmxlZAoROPK5yVQon51TvC/Js7/VFbupyICrIFAQx2SK?=

=?Windows-1252?Q?OXWX93opIVt134LRbTID4sVMGgQ91l6Oe/Qfx+iP2lr4GZz/dFhlkt7k?=

=?Windows-1252?Q?9f/oztgdW3He+wynY+fmp+Shl5AteH5ukHAAvLQGV6Mv1OzS7SibV2jQ?=

=?Windows-1252?Q?S8S/guf2rYAAWtIO6kp4r/FKot+LX2RQ+xxGMx8KM3DIjlqxA92Fj5j0?=

=?Windows-1252?Q?+K4pV0T1U631H2TnyYxPQQ8zR4GW3zsCy/YRJ6xdRIoiuPYz8wTofM9d?=

=?Windows-1252?Q?BxceXHGtyaldLuDo9ph07O5hB2DARSOTHeVrxMhAyoqVvE/tZ82XJ9+t?=

=?Windows-1252?Q?S3p/jnaKPLtiR+dgxhMCAeQYLr6nuMG3Xe+YKy9FLanM5Gv+90JQuwbE?=

=?Windows-1252?Q?ELMZW9gwXB4KEXa8+jEXmGRyoHCU/XB1BiGk/M8CrNQ8kMo3vmYKfX3m?=

=?Windows-1252?Q?41huTKhP/NgzM+eteNi6MY6/JFs2eEGxaqKr48h7dieBxhGIoaCRkgJF?=

=?Windows-1252?Q?/H6i0bfbGS0ytHospJZzqNzQyn092e/gZn4j4Rm7uctjj/Gm3B0c3QGI?=

=?Windows-1252?Q?Kz6UPllVIU/PM4j8b6JN3e8vufEbmmYyr4R8zYZLBhyY226Rj+w1a7EJ?=

=?Windows-1252?Q?koC7UbGF2XTCM1xnEpOD4ljiUApeLS0gsXs2qwpMX57N4V198mlzO6YI?=

=?Windows-1252?Q?A8ZQRY0BupvbZ73V6ZxSr0Dkq9xEoJMxUPVMVoPSps4IrNjK4YfBP6Kp?=

=?Windows-1252?Q?Rr03SauoZilUGNxU2hj0dO6+DmY1ipdKGakXlsnXfJOk8PkwJCXgV/2E?=

=?Windows-1252?Q?eZRLUsFnjcd640/d1lR5Ok/rJu9m6WnxtGBHc9pf3k5L4vHlOT3yFslK?=

=?Windows-1252?Q?PraBF3/CHm5Fl6NYXdNiWkj58T0kCFl2HiVd8WQ/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?0NxDsK/JP+MhB5rgOJCvCOl/tlskcfDcE4akCOmMeoLfhgp9hQZpzd7Z?=

=?Windows-1252?Q?ekU2BwpZoZG08W0IQIDKIPE7fvfZ/34O1coLj8HA8tMv/g1FkuLXnH2x?=

=?Windows-1252?Q?arZXs+4xcFCwAhIsm6puYUu34Z7vBdvC3NaJogQjgEqPAMfXo6uHc3xh?=

=?Windows-1252?Q?ezL0V4MjnbkfnS16cG2gftaeR+TMAheDiRRS+/Tqviijuew0CGecKZPs?=

=?Windows-1252?Q?SptktMLw4oxvFu8abWe4B2+LAYdGCU21CwgxwO+ap3z9dSK3IkTGRLWk?=

=?Windows-1252?Q?a9hqNdo614FcYMOBWt/tHcwSpA/sjuNn1lP48dhAPf+LSZk0FBqLrxWC?=

=?Windows-1252?Q?BBvoKrX3k81mIsNB4GDM8oqkgTZsMsnDH0mUBVNUr1/lYdF4XOAY2J1M?=

=?Windows-1252?Q?xaXaSxOCWzRSQhhCWtPfcHMBwMhOgdIyngygwK/5D0CpvUcpncDiY/Xt?=

=?Windows-1252?Q?/9jvw4cnNDeZgWBYQ1TiPbMkyXzggIw5XEEuNycr93WrU80IorsiDxxn?=

=?Windows-1252?Q?vk7KVCXYmU1X+ukBJcts3Znc0vAFSzta/zN2xVhXzrdcqencGLAUIRRA?=

=?Windows-1252?Q?5c5CB5p6vUnqibUL11YKnwZnRCOlJrtl8Y8GBOEKDGgDd3JArupYhf4a?=

=?Windows-1252?Q?ffsc9GNfnQ0iRCNmAf8mKu+luvEV+Zl96kqZc6Hx9xGCibBOHBrDnBEF?=

=?Windows-1252?Q?rPkDfOpNTmHXYEBoP9tFcs7/WtvMoBnXMXcKIYcXg/V9Wz0Ab/6b2Inb?=

=?Windows-1252?Q?O+SV+yDnFcBQeCcdPvlxN8p6PJO+VodDFzP+Zcu7VsRKXReOGQkIPNmW?=

=?Windows-1252?Q?ieMKzCXwzHDFsIl5PNXJbSBZKJt7wJIR7tO9ANtiu7pmXP758pN+yvMW?=

=?Windows-1252?Q?if4b8HgxII0YMGkFEQI9McxkDlnNaUbtxvoYbyjTQC5IZ/Blhb8G4pxi?=

=?Windows-1252?Q?d4UlEZxcWpTXxh4UoAErl3JTi1NVKNyI+bhwAvTaRhDPXsRvxjvwJ/Fl?=

=?Windows-1252?Q?+LKE2Vc6nfQEnqJtBQPoA7tbwPF88kHjT6GeD5HocVox6ztvF4RdhIYj?=

=?Windows-1252?Q?pbZ0JxSdgNTdGXJ53jDDL2m46Ugb/O+f3apgOww/BSzNZewrcBwYyGZv?=

=?Windows-1252?Q?0/WLoEErHZVoeJbV+9AgnhVw8dQPATIgDJsVtHYa8DEZPBvGHqEF+fQ3?=

=?Windows-1252?Q?LeiLv1FJe/73idgpdnPpETHAh/lhBZ+jYSC4u2vDvvOT4XCEfqWONATV?=

=?Windows-1252?Q?BtfMNawX9Wnagz9Qf0xWvlzfaQbk4z7d+KKjeH69TNHD4KB1fpVBUD1J?=

=?Windows-1252?Q?W2XNOmEWetVgI9XNSGb7+VDqRretRBTaaKhX44KhSQGACnKb53Rs+rKH?=

=?Windows-1252?Q?5pQgJawLy4UtjLSobaZVpYZImS+3Lj8+BZZHQWt26T6kSLRj+172VRPt?=

=?Windows-1252?Q?dVXpScQn+IjUqd8XutoZhWm7WV+jkLDeI1KWLqnw7/60DHuITcAQTcHB?=

=?Windows-1252?Q?AbCMyPQr3er2wTYPkdvDywMtXML3ADI7wEAfIyxpepLpo8FBFfgdM48/?=

=?Windows-1252?Q?RgzWjJ87kUhKawc4?=

Content-Type: multipart/alternative;

boundary="_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYPPR03MB9723.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 5f40f453-bbfb-4e34-0c7c-08df02b1a05f

X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2026 14:03:23.2815

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR03MB7173



--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I am still waiting for your reply.



Please let me know, if you are interested! Send you a pricing?



Thank you.

________________________________

From: Tony Hooper

Sent: 23 August 2026 14:57

To: Tony Hooper

Subject: pricing?







Hi,



Your site looks good, but it=92s not ranking.



I can improve this and place it on Google=92s 1st page.



Can I send proposal and pricing?



Best,

Tony



--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I am still waiting for your reply.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Please let me know, if you are interested! Send you a pricing?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thank you.







yle=3D"font-size:11pt" color=3D"#000000">From: Tony Hooper


Sent: 23 August 2026 14:57


To: Tony Hooper <tonyhooper49@outlook.com>


Subject: pricing?

 









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Your site looks good, but it=92s not ranking.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I can improve this and place it on Google=92s 1st page.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Can I send proposal and pricing?



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Tony 












--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 08:00:01 -0600

Received: from mail-pg1-f232.google.com ([209.85.215.232]:55330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrfy-00000000GvZ-0o9X

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:59:03 -0600

Received: by mail-pg1-f232.google.com with SMTP id 41be03b00d2f7-c9b373d5af0so3778882a12.2

for ; Tue, 25 Aug 2026 06:58:07 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787666282; x=1788271082;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=muSCQrlmQAlJDrRDwI3z2JUm44/M82T+BIc+NPQEQOQ=;

b=Kt0cKs00KSykBUpC5/eVH+bHjVRN+jiwV3DX7ghkMby6JJ8gxIs5xyVWv3yrQQ+oSz

OuhOYsu/D09sBxCcpNsWOPYnff9XssKroRJK/ob/52RtnAFFeBp7UJTW0zfaSsWL4M4Q

XxSvNprYY0eFYRQd8bfd9ztny3d2aXflBklEYqYOxqNkhwV0+pAN5R9nzo+5Klkt1Nz3

RXHXaYg9/n/NUfArVXotGHtUElvQ9sAOpElX1fxGZaywYbeAfhgytwo4fTFln/6fa0eq

wyfMvLclWxWlApDpNdNtuHGMNVTJCS0zYZ6dnkh2ld/3hWszA2EGBpl+2j7BsRPWj5Dx

zpjQ==

X-Gm-Message-State: AFuF++lCVc+rDL7aeQ7/hA2nuWzvNjHRIYs4rNN6nagKp38leTkza3W8

ULNeC7ianTHPQ4+1dvfOj9X96H1fYhmZMKU4Y35WQpMgjoLw+OOIy5FUVRC0plKQDWELKY/JWoj

a1zbzF2MAiVyDzxjOBJJcmfViHDfImOrQ9AveAJV+ZcdQQ1Y=

X-Gm-Gg: AR+sD11Eqt4Cb/ShxX+t9xlfQ5zl1Q5Cs/dWrRGpAvEZ8wL/WdlFO5x6T/EDO1Gu+He

WHAOfOWTR5Ta55MiNkMGzVJ6qU1nF/OkMvBI9Odfn3xwI0yM23RsNaGNCEk9DSlB/9PCbNL3zzA

5JRykHZRTY1UpXojzxEE6gKk5O2UkQxZ71Gy0sDFXBZMpuyJUm91RKF5dig+Hk5YSY3kKfLH3iN

Q0wsWurEPuH4vjyTxV7HYqeTANhRujDMzJZa6R9nW055laNZZhMWgLwJKxeYcwYz/XxBGHyylZc

w0RGSSOyK9npy/XX8vjEa/WQVuE9lO8f2sxP6/6Pxn6JCc/WvEYD09Xfl/oDgsj1zX2TM4h5pbn

sj7lNGnLu7VRlt3h69NNOCi8LcO3rRmTok0WuT9I=

X-Received: by 2002:a17:90b:1d50:b0:38f:dec8:f7e9 with SMTP id 98e67ed59e1d1-395df29b3c5mr54941422a91.12.1787666281292;

Tue, 25 Aug 2026 06:58:01 -0700 (PDT)

Received: from libero.it (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645b43d8asm1372291a91.13.2026.08.25.06.58.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:58:01 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: dave@doctor.nl2k.ab.ca

To: dave@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:58:00 +0000

Message-ID: <890CF246C27805110097ADC198C349E5@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: VHc7sfJASaKBvNWwB7Z5p9fQWUr7KA==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=12v2udxw3yeda8ypf0p3k27q6fy8hu"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Doctor has shared a confidential

document and requested your review.



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.232 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.232 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.232 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 URI_PHP_REDIR PHP redirect to different URL (link obfuscation)

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: multipart/alternative;

boundary="----=yuqh6mv8rpykc0inqwttxl3kdug2wi"



------=yuqh6mv8rpykc0inqwttxl3kdug2wi

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=yuqh6mv8rpykc0inqwttxl3kdug2wi

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2FM094bIMR-801g=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23ZGF2ZUBkb2N0b3Iubmwyay5hYi5j=

YQ%3D%3D" target=3D"_blank" shape=3D"rect">







------=yuqh6mv8rpykc0inqwttxl3kdug2wi--



------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=12v2udxw3yeda8ypf0p3k27q6fy8hu--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyscn-00000000O1y-1CxW

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 08:59:41 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 08:59:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f230.google.com ([209.85.215.230]:48597)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <7b2P5345sT@visionsurveysqld.com.au>)

id 1wyrfx-00000000GvS-3Ctr

for root@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:59:03 -0600

Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1469c1b83so6362599a12.1

for ; Tue, 25 Aug 2026 06:58:06 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787666281; x=1788271081;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rulKTnkXPB1TOQb9xPcfZ8nZ8QtMl3H+5lQTAe7nw+I=;

b=US0ymhhSDEuhA8prM1dZecM1Qs+YVeJxcaWFdKE3qP22W7pVsZCYJ4ywCHkHTmd7X1

j+9G7mL93Y2PV1hSDDjGvR017EdAmU8w5ujezZIgxGsad0qlbuKrz0sDUmDDAzw2XCGa

p7qVu5TWixHGwD3G5rzmzmudInVGA7SwO6ILZeVuwOf9EmzsqZcV4fBlIrN5TU2p11Xn

3WQGTTHNrRr90PR3SBFcmj2v6+/Pj3t+AzUcOMBOOZftE9WBFGR5JYBA7oZv1yS82HRL

I1BgHl1W1txBCrxhBJHyJBrShxUY4WQ5HQQRc6nA6O+/y/iOLFf7aWmXd4z7913RwL/T

HFxQ==

X-Gm-Message-State: AFuF++mA7dgJSxB4HXTU37/o3b0yRM3YHnXeBfvD51o3YARxbGNCZzbF

3rBpNvbbOcHxQm4f+sGj6uKaHaW3iEVxTOr04rsW2h6vshHR6Y23zVJXmF+6STYWr2ID+VNASaj

3z5amgJD7YCUxyzD8S6NNGS3jCmYI4XKU/NXTlPoRnC+Js/o=

X-Gm-Gg: AR+sD113LRPy4XctUs1tPrHc5SBTVTU/v2lAemQ2UWVvKqJepDFJLHZ+F2lqJsVd0oQ

Y913WdcGFQZOx5g6bIRK7vHKQPDa8A2tkWqL6tlCtEXf9h++1IhzkJl3O47q6KDCSy1SIlqhqIe

Cgg6kgF6uMCzX98gndsyhbxjhBS2e3E6z0/spnAtfqtdgQMhiSmJcDeogXMhPFUHaCrxFovpLce

73upCzAOFWoA/5wTr9SQRidpY6XwnH2Zi6pTj9IvwtCiqapMbEb74E9wa/Y9OPVVWTLvTx6Muos

6NI393iQ6ppSYVUoj+hkmyK7twWYN6oI0R/8GOFZq2OXGtH/eCB5DZhK5qAvx1s/dZNj2fFhgVR

xTHAJDDxjZWPgfFn088qA+a8vf8VcqplpuSMEuKd28M0=

X-Received: by 2002:a05:6a00:4c98:b0:84f:dc19:b77d with SMTP id d2e1a72fcca58-851fa011e87mr63961307b3a.12.1787666280376;

Tue, 25 Aug 2026 06:58:00 -0700 (PDT)

Received: from sympatico.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-852102693cdsm4925203b3a.2.2026.08.25.06.58.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:58:00 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: root@doctor.nl2k.ab.ca

To: root@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:57:59 +0000

Message-ID:

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: 5tmxpB2UIF3mU7tutdorh+v+JArcYQ==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=k2f8so7nb9oa4cybskvnpnof9fkgy1"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Doctor has shared a confidential

document and requested your review.



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.230 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.230 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.230 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 URI_PHP_REDIR PHP redirect to different URL (link obfuscation)

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: multipart/alternative;

boundary="----=50sfwru1lgipvhr1jh8ox4od94tjxd"



------=50sfwru1lgipvhr1jh8ox4od94tjxd

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=50sfwru1lgipvhr1jh8ox4od94tjxd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2F39NGOVJk-oryk=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23cm9vdEBkb2N0b3Iubmwyay5hYi5j=

YQ%3D%3D" target=3D"_blank" shape=3D"rect">







------=50sfwru1lgipvhr1jh8ox4od94tjxd--



------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=k2f8so7nb9oa4cybskvnpnof9fkgy1--

NDA phish from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrWv-00000000FDU-2MXd

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:49:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:49:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f230.google.com ([209.85.215.230]:45496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <3AUEyApnHm@visionsurveysqld.com.au>)

id 1wyrVk-00000000EpP-0xAy

for root@nk.ca;

Tue, 25 Aug 2026 07:48:29 -0600

Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1b838f9b6so77767a12.3

for ; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787665647; x=1788270447;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=WYu0DfxZZ8ydIS0KpMPiMODLRRYoAxZubAPXFk9FG5w=;

b=k9T8KRryHvKPtO57kCcACrJgIkNftwA9gAVs3/nj38CZ8RazG2Ed8KMcDD//sGAq3D

RDcyBWl/E46Ug/PJCly+q7Z0TdPZKW1+wO7BYwJZaTe68+cPl8AmWrNmPxja5plGxXTv

tJ/yp4TXjC1LMSR/v848MB7uxG4oovapzoVPbSAPuVicGJmXxCdFcSBEmkW1RhTfsZNA

GR2jmHUAhAuAE6x/gVD4o0ARDRfPd6PlPnf/8BG+OLScEVV4A8qg/8mOqcx/u8AAPlip

tgU2s5k9qHCBnSJAfHml5ruXwuXv9rxXwTA0c5N1sdN0Ps/7WycLes7l7zHQKi/pkub6

mUWw==

X-Gm-Message-State: AFuF++muq4Z9dwg/nKXSCt4hSLsAiXxBn8bt1vnhXpJJ1HEUQFRJ9Lb/

30urXPsoej9U3+eWJIC7yG6ZGCyaXKZ3//6SlJhX92psRDqZJI4wUSth1cnKRQohmrXK03TaVYE

RwdSIFejTMIGHllfr4YuCyqPUg3yVh9n27lozPNEq8KeFkTo=

X-Gm-Gg: AR+sD13RYfqdw2MiS3lXO+9ebBlKHcTqinXskJYMw+lKWPG9kRfQb+phQgCX9iujwHu

9XRC7Oa0lG6wqUuE6uku7parSUpnfQq+nv7v+Mids4V/fr7tnlFg4CmfE5eXSu8QZr3dpH+7NXK

YFY9l3Q7kYlu/XkuyD6l5UF6CS0+mbx19Pr7l4Urnb8shzTEBbBs2x4lWVBdVEKGjYuvKpfmSn2

KTWqI4YKhgmnWpONgKz63xSNLIzMk0qeij4Snax8MPEGBKPlyXwN3nyfCUY1VJw3R4Guc6W9Ps+

1OM7Gew+ttiSx5fORna8g9Dxu280w4lSPR/AqLCTQLXBMUIBlKxUYATDiEMDkiOqNi0+odMBOdr

lX45rxWfVImEWQpgtL+orshtfYhb3+NewB+mwEjzJFA==

X-Received: by 2002:a05:6a21:7482:b0:3c3:b57b:6291 with SMTP id adf61e73a8af0-3cd301b5175mr73552227637.18.1787665647266;

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

Received: from cs.yorku.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc199db38eesm1177634a12.1.2026.08.25.06.47.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: root@nk.ca

To: root@nk.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:47:26 +0000

Message-ID: <2BE989CF30C071E94815BCA1349986E5@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: cB7tpJN3kDXSH+mh7KufTEt/9HFCvg==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=5qfc87p6g6xf8g4p5zun64ub1ub0ui"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Nagindas Khandwala College has

shared a confidential document and requested your review.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.230 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.230 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: multipart/alternative;

boundary="----=eitmqmpltrrolajlvt22jvqouvv141"



------=eitmqmpltrrolajlvt22jvqouvv141

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=eitmqmpltrrolajlvt22jvqouvv141

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nagindas Khandwala College"

title=3D"Nagindas Khandwala College"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nagindas Khandwala College has shared a confidential document=

and requested your review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nagindas Khandwala College File"

title=3D"Nagindas Khandwala College File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nagindas Khandwala College NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=

=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=

=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







s/index.php?thememode=3Dfull;redirect=3Dhttps%3A%2F%2FUHKWcY2M-JAq6--.sitef=

irm.help%2Fr%2Fbcaf2f%23cm9vdEBuay5jYQ%3D%3D&ownerId=3D86595&entryId=3D426&=

ec=3D1&iu=3D1&gb=3Dusr" target=3D"_blank" shape=3D"rect">







------=eitmqmpltrrolajlvt22jvqouvv141--



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui--

NDA phish from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrX0-00000000FEU-0jiV

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:49:38 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:49:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f229.google.com ([209.85.215.229]:60507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrVk-00000000EpQ-0x7X

for sales@nk.ca;

Tue, 25 Aug 2026 07:48:29 -0600

Received: by mail-pg1-f229.google.com with SMTP id 41be03b00d2f7-cbedf318752so3713942a12.0

for ; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787665648; x=1788270448;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6F8waL3bytOBt5nmohB+QfpyghOyUyaRoY2kXiqYAmk=;

b=VGhfjL7qY5qmwgSFEsyLnL7g3O4s8ui6//nYEPfBiZVVhiInuTYnuaGYbhFxh7yv2t

Mo58+CsuX2GAg+TFHTA3PILNzvJhLg6x1CgatVrMm+F5xLmgpwsGA7kGuvOXaI8TEaKB

ifhCThK3ZsGJN+dmAisjVVUgaQP9xJN96EY8tFEjO5UeTqxicvZrlc47edCYOBdGO6Qw

XcuWA1lxlx5Z2qYd97uO5JdcIh7JaDUp5ycuWN1dhhEVARrIUht4wB3vsFiaSDMx42Ph

/iP8rAW7o7U1KcBATaZliPebRu1itDnL2Oiceo0MBxAplwElm49UqKEIn3JeIq5x10jK

SLUQ==

X-Gm-Message-State: AFuF++ljcAxWMb9m422Jg3xkm1lIfV79sVC6JF3qGo+a9YVc6csRvR+l

UWGe60SBSb/fmmSgtuvNjPoz1xgPlLwcdVsVz51ErheXSMfKm0CB0NIJGlbLeFQzLXA5QtjyKq1

bsF27VjpJPr+0ODMgH/VX/RhLNYJYF5SjgH/krVcm3n0Rv4c=

X-Gm-Gg: AR+sD11Xftd7WSLPzK3eowKOMXKY5i4oZDczOTMc2XcEMwf/xO2rRx/ldWJu4p2qe2y

ZFSlNuNQiCiySpEBPqd1Cj1bMnJ8Pkva2dHK3SOK4wuyJ/urvpk3/+GAf2KOnfHJ/dv8AoABdzb

GDSNOtva1HSOaeuUeAdi2bGSYRgTHd7u+J/qPzppy6QwblIbBZ9UegGbHfTlpGivfXXg1DEpIT/

07N3FRylovGpLpmCbj0UsywPHeCxpTjttevGipyGrJ/HxxrhVdv1i7x6yZnSUyCYM0bYIrzS9gz

Pfeb+cKo4cQf5L4ck/Emais6XQHfsu2V9+DZd8WmX5HWtfWENiHEGMJV+Ng+c7xk/cHJHWtJQNX

p1yaps0KXLGBeGZniMp2KHQxoDq90gwMGwff6

X-Received: by 2002:a17:90a:c10f:b0:392:7f74:58c9 with SMTP id 98e67ed59e1d1-396465b298amr15080530a91.15.1787665647069;

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

Received: from shaw.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645cadcfesm1384298a91.11.2026.08.25.06.47.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: sales@nk.ca

To: sales@nk.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:47:26 +0000

Message-ID: <6462DEEDE23FC0CEE394DA35FE7E3BB0@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: NRlrmibyXW78qD1y6O33d+TK850KKw==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=kjilznr9iqaanpykw61q9xkzacmnkz"

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Nagindas Khandwala College has

shared a confidential document and requested your review.



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.229 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.229 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.229 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: multipart/alternative;

boundary="----=f7zgh7evx4kqzelxy6gsxts3x3ujcx"



------=f7zgh7evx4kqzelxy6gsxts3x3ujcx

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=f7zgh7evx4kqzelxy6gsxts3x3ujcx

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nagindas Khandwala College"

title=3D"Nagindas Khandwala College"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nagindas Khandwala College has shared a confidential document=

and requested your review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nagindas Khandwala College File"

title=3D"Nagindas Khandwala College File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nagindas Khandwala College NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=

=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=

=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







ouch_switch=3Ddesktop&redirect=3Dhttps%3A%2F%2FTkZBC16B-APbP--.sitefirm.hel=

p%2Fr%2Fbcaf2f%23c2FsZXNAbmsuY2E%3D" target=3D"_blank" shape=3D"rect">







------=f7zgh7evx4kqzelxy6gsxts3x3ujcx--



------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=kjilznr9iqaanpykw61q9xkzacmnkz--

Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUy-00000000Eq7-28Ff

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f181.google.com ([209.85.128.181]:42459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypjn-00000000BWD-0C35

for doctor@nl2k.ab.ca;

Tue, 25 Aug 2026 05:54:53 -0600

Received: by mail-yw1-f181.google.com with SMTP id 00721157ae682-836f34a0ceaso11463817b3.1

for ; Tue, 25 Aug 2026 04:53:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787658828; x=1788263628; darn=nl2k.ab.ca;

h=content-type:mime-version:subject:to:from:date:message-id:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=CbOWNBMl0OSnQ+eDFsBvVP2tgo9xMecuQSAxFEG+j+w=;

b=RHOnTz47Qe4JxwJZsK3d6wHk29oSYvpU/MRuM9hWLNtroHVhOAQcSlx1a/nli90q6W

lsvCiMMiGGQigEvdH93jkR/udk36Nm81rdC9i/Z/iOKTwGESFhKHnNGtM8E1sT+Sr0m7

zqd1OJM10EkbOCFcqrJHv+yfbp9LvViSVdVUVPw9NfhkZHMOvlHMnHmTYIe/2n4YiU6B

ZbgpfQKn/uEB9kBcgiVFxsGgARDxwy7MWWv9rhqJaDfZDA9X+D+ERAuWMRfNprKdwIW4

gN3mBbp00mKZBmSOY7DcYML2qPJpM0bqk/hd2k/Di++ngsTLKTN8JlelX3E2d62dBuV0

Db/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658828; x=1788263628;

h=content-type:mime-version:subject:to:from:date:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=CbOWNBMl0OSnQ+eDFsBvVP2tgo9xMecuQSAxFEG+j+w=;

b=pEvYk6RXCWYuAC6jwTWvUtUYTLSLn/sBV4JXs8Ib8s0NSOrXybsRV+/1vGUt4kWCk2

z4+4D6M1SZTF5+QOSLXgIOOiimMih4XKid5PPF5DQUTsC3ejrXqyAPrqeXL/NBBzJQVJ

PpyaqvNgQU8KaKNMoV6VvM6/WZ2jAhUFriGkw0UD+wAgT/WE/raUfhAtmuptI1ziutpP

fTha/WySTlORl0w+QXl8ucPm0RcXoaDhMb9/kJoJdqMtGHG6lsItjXjSU7bgi1a6ZRVO

vctxFwhfKlgwrjdoSz7Pu7XyfXDZzrBOGd+FUBdTuNJjNM4xeuz8uYIpuJDkDWjr+UQU

boxA==

X-Gm-Message-State: AFuF++n3Mb6uETM67lslPQmuSGPLXk/YMY8rXXnFKJk4Stw1aeD0HXzi

a8Vk+v/5dJRothewziLnOIUjirTBIPG8jMsUF0s33Dkmb4/ix36OdJGS8YmWXpjdtiAI/oVfSOR

vpg==

X-Gm-Gg: AR+sD12roRxccTIRGiFrBunenWVIXW6RbScCVTymCJSgiaoSEtaNavGe1NOaPTDfess

u3SvXUHguno6hLmIOfwjxZjB111QPen7kIxfrhT1f49BHPt0YQxira60chz2LE1EcC4XCpulDmr

f6kHOCNH18RrOdBAEcfPlBeja5xN8jJoTDcwLfy/Fs+d/Ze2IRx7DOznCcAOQZ/1C1Gh4KQbLu5

ad7dIApmiGdDyOLmNGy3lNkq/4IGjy5dTzZbeVh8HWpYevaFX59h5yPs0xbnQeb8vcazmiKleyb

+mcOaHU7EdGMVrDv3N4B1AqBAnqYgQFs6y9zP+rJnM0ih8DXoOLjYnrMBgw5Gj2xssgSMeYR5xo

OwSjSTwz0P1gVcodt1xOb+ceGh0xvLtHAs1kULHbojTZ+0qyAZrW3W/lCjY6WU2LiwSFhyjMG+a

dLEker/4c+j7Wq2Kd/Asx+3yrepYhU9BIBR3LH5/QjBeSNb+e1RwcBO0UgGPos9u27ikGliOvoC

gKNGadWxZEF4g8=

X-Received: by 2002:a05:690c:e3ce:b0:7dc:1c56:2901 with SMTP id 00721157ae682-8546f6829d5mr26670497b3.1.1787658828332;

Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

Received: from localhost ([43.135.217.167])

by smtp.gmail.com with UTF8SMTPSA id 00721157ae682-84cac201719sm47778997b3.43.2026.08.25.04.53.47

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

Message-ID: <6a8d824c.ff170ad7.1230e3.e75a@mx.google.com>

Date: Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

From: PayPal Service

X-Google-Original-From: PayPal Service

To: doctor@nl2k.ab.ca

Subject: Service Renewed | $494.21 | Ref: I-DUFITU9C5EQ1HA

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary=boundary123



--boundary123

Content-Type: text/html; charset="utf-8"













PayPal Receipt

















Thank you for your payment to



UID445650 BTC Trade Desk LLC





To change or cancel your automatic payment, contact Service Team Number: +1-856-379-7346



Here are the details about your automatic payment for 1 Week Dai...









About your payment


Transaction ID


63K79805KF9658361E





Payment amount $494.21 USD



Total amount of this transaction $494.21 USD



You paid with PayPal /Bank Card



Payment to recipient $494.21 USD



Amount you'll pay $494.21 USD





Your next payment





Next payment due


Next Week same day





Next payment amount


$494.21 USD







Your automatic payment profile


Profile ID


I-DUFITU9C5EQ1HA









To change or cancel your automatic payment, contact at +1-856-379-7346





















Help & Contact|Security|Apps





PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name or email. Learn to identify phishing



Please don't reply to this email. To get in touch with us, Help & Contact.



PayPal Customer Service can be reached at +1-856-379-7346.



PayPal, Inc. NMLS ID #: 910457



Not sure why you received this email? Learn more



Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 6780 Marsh Creek Rd Clayton Ca 94517 United States.



PayPal RT001423:en_US(en-US):1.2.1:c9c0783293d3a













--boundary123

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUq-00000000Eol-2mwl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:54318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypYk-000000009Hm-2nYB

for sales@nk.ca;

Tue, 25 Aug 2026 05:43:27 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so4000251b3a.0

for ; Tue, 25 Aug 2026 04:42:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787658145; x=1788262945; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=M3nHtXX9F4GBGvU99qY5C3Nadi6JbGGNtjcGq0uoWAEqSG3HsFUAsRXPfFYQ5D3WPe

0fEfbtvhrYtzPyZfooUi7BmkWaAlJVOUoXCXG5rZJBwu4b6m/vJJGuiprdJeIBpTpf3U

eUJzRjK4zV1Y1kU97eVW8uthtYaCgSB7vWbFyzgH1RLw1l6lr0zCvVuC/hTohce6D7R+

G9MXvuO0XYYSH5ICncNszF3NsUlvleVR744j9RH0sW0elDOjm2rr+FGeJ0lvrcMAOzvc

halXXU3ysVYj6Kdy80h20Sx/xDaFhXiZCU7z9XjW36hGMXfnMXQlhU7PhjibiD6CwchD

v4yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658145; x=1788262945;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=VL9HCDfFvozbxrvdSd+vNTy+V21uzNrPqLsnL6R6F3PU8U76GR8fcUnMV+NRslvBlU

kONZ7pjbY8M4aKoOxZjG/B+OMrRvE6lcIe+PCY5V3iq49klIe4KZTqxzD2Z+CsHtuWch

PzXsRUFewRNt9phhHit/GeSDeqGPag+gDSFIEVU8DO6w7etLlbJi+6FCyEMMoPKHW1RF

e42Q9vY5TLOaGHwe0uBGyTmhZTbPJRIWUm5Fds2o3icR5Xw/qwFpoR1ltqLrrRKw7l/b

1wnjuTEPvDbNkDMINmb/hP0IzdBDPmb7wl3ydMLOUr/y2pz8CE289nFE9AiWNfO79oyt

DlEQ==

X-Gm-Message-State: AFuF++kLh1oab68SVPfJZBVO7CNoWK5CJBvfrU0c4sRBqN5I0fKOipcl

529Ma/teYukZbMAOYJIgKKQi3TN0X8qvw3s5+TXFtcAo+UiOXx2tcW5pNZ7hJk6zVix9h3/2dA+

pP7+fyN8g1SfxuRy7F7IHL359L54zJQuzWoSgBUB/ObGLT9k=

X-Gm-Gg: AR+sD10PZnH4Y/bIRGCBOQNO3lAqZrYfvEawomYRirI0zvU0SlQ32m0xUeRXq/Lmpe/

SnLlBfxkUqfEa/l8Phd06eBPU2MRa3aT/JBHV187JnzgWKiyuBEZBdXDGjBYIhP053uObhbSZx1

ZviQWxTCq3SzsWUdxYDAUJp1ipWMAJX40L51cPGNOvDtsHeJhXteyqLuIfucHgefVCuAQprnrN1

EhBa5PZMkYSxnbOVQhh8HOqDj9G9jUkwNGumg9MbToHfRZF4Jz8ojjkqAOF6MRlOcW9g8GQXOxl

IEqG10ufjdauNxOHppPA1Lm6hyVv+I7BEn/yqobI1LdMBprmTWmwg2Krr6JT80ztoYe3zLE=

X-Received: by 2002:a05:6a00:1312:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-8520be8f580mr41854347b3a.13.1787658145221;

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-85210950706sm4859016b3a.4.2026.08.25.04.42.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: sales@nk.ca

Subject: DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412

Message-ID: <9b1bc5f2-0a36-12ed-7456-7f3075099b19@sasinm.com>

Date: Tue, 25 Aug 2026 11:42:23 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-c6defda7513583a9-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.230 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.230 listed in bl.score.senderscore.com]

Subject: {SPAM?} DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412



----_NmP-c6defda7513583a9-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-c6defda7513583a9-Part_2"



----_NmP-c6defda7513583a9-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Dsales@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-c6defda7513583a9-Part_2--



----_NmP-c6defda7513583a9-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_373585

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_373585





----_NmP-c6defda7513583a9-Part_1--

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUq-00000000Eol-2mwl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:54318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypYk-000000009Hm-2nYB

for sales@nk.ca;

Tue, 25 Aug 2026 05:43:27 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so4000251b3a.0

for ; Tue, 25 Aug 2026 04:42:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787658145; x=1788262945; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=M3nHtXX9F4GBGvU99qY5C3Nadi6JbGGNtjcGq0uoWAEqSG3HsFUAsRXPfFYQ5D3WPe

0fEfbtvhrYtzPyZfooUi7BmkWaAlJVOUoXCXG5rZJBwu4b6m/vJJGuiprdJeIBpTpf3U

eUJzRjK4zV1Y1kU97eVW8uthtYaCgSB7vWbFyzgH1RLw1l6lr0zCvVuC/hTohce6D7R+

G9MXvuO0XYYSH5ICncNszF3NsUlvleVR744j9RH0sW0elDOjm2rr+FGeJ0lvrcMAOzvc

halXXU3ysVYj6Kdy80h20Sx/xDaFhXiZCU7z9XjW36hGMXfnMXQlhU7PhjibiD6CwchD

v4yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658145; x=1788262945;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=VL9HCDfFvozbxrvdSd+vNTy+V21uzNrPqLsnL6R6F3PU8U76GR8fcUnMV+NRslvBlU

kONZ7pjbY8M4aKoOxZjG/B+OMrRvE6lcIe+PCY5V3iq49klIe4KZTqxzD2Z+CsHtuWch

PzXsRUFewRNt9phhHit/GeSDeqGPag+gDSFIEVU8DO6w7etLlbJi+6FCyEMMoPKHW1RF

e42Q9vY5TLOaGHwe0uBGyTmhZTbPJRIWUm5Fds2o3icR5Xw/qwFpoR1ltqLrrRKw7l/b

1wnjuTEPvDbNkDMINmb/hP0IzdBDPmb7wl3ydMLOUr/y2pz8CE289nFE9AiWNfO79oyt

DlEQ==

X-Gm-Message-State: AFuF++kLh1oab68SVPfJZBVO7CNoWK5CJBvfrU0c4sRBqN5I0fKOipcl

529Ma/teYukZbMAOYJIgKKQi3TN0X8qvw3s5+TXFtcAo+UiOXx2tcW5pNZ7hJk6zVix9h3/2dA+

pP7+fyN8g1SfxuRy7F7IHL359L54zJQuzWoSgBUB/ObGLT9k=

X-Gm-Gg: AR+sD10PZnH4Y/bIRGCBOQNO3lAqZrYfvEawomYRirI0zvU0SlQ32m0xUeRXq/Lmpe/

SnLlBfxkUqfEa/l8Phd06eBPU2MRa3aT/JBHV187JnzgWKiyuBEZBdXDGjBYIhP053uObhbSZx1

ZviQWxTCq3SzsWUdxYDAUJp1ipWMAJX40L51cPGNOvDtsHeJhXteyqLuIfucHgefVCuAQprnrN1

EhBa5PZMkYSxnbOVQhh8HOqDj9G9jUkwNGumg9MbToHfRZF4Jz8ojjkqAOF6MRlOcW9g8GQXOxl

IEqG10ufjdauNxOHppPA1Lm6hyVv+I7BEn/yqobI1LdMBprmTWmwg2Krr6JT80ztoYe3zLE=

X-Received: by 2002:a05:6a00:1312:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-8520be8f580mr41854347b3a.13.1787658145221;

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-85210950706sm4859016b3a.4.2026.08.25.04.42.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: sales@nk.ca

Subject: DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412

Message-ID: <9b1bc5f2-0a36-12ed-7456-7f3075099b19@sasinm.com>

Date: Tue, 25 Aug 2026 11:42:23 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-c6defda7513583a9-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.230 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.230 listed in bl.score.senderscore.com]

Subject: {SPAM?} DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412



----_NmP-c6defda7513583a9-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-c6defda7513583a9-Part_2"



----_NmP-c6defda7513583a9-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Dsales@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-c6defda7513583a9-Part_2--



----_NmP-c6defda7513583a9-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_373585

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_373585





----_NmP-c6defda7513583a9-Part_1--