Interactive Brokers Phish from Google Cloud

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlpq2-000000007Bk-2yM8

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 09:23:26 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 09:23:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vqpwz.com ([35.213.234.85]:41305 helo=service.vqpwz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlp6b-000000002Tx-4C8V

for sales@nk.ca;

Mon, 20 Jul 2026 08:36:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=service.vqpwz.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=webmaster@odpsbp.service.vqpwz.com;

bh=XNreG86DHP9quG2/zudRzSbFV5gWYfLGNOqnTOtSEVc=;

b=ASQEF2oKkybtiipLlxnrT/U9cmPwv6ftBwnlYTORcEoTC8KQGU96Ca5FIpUCrbLDidJjAkFmxJks

hdXPL8JtskIF4eiBeuvmdwk/5BPgZEBS2lWSAtNk4ivoowZLgRWE1Hof7ihTbsFTLQrhZGMoZWp1

WKpDdT3ROB+L5UniXnHTT/47nBwHxruXRNwc0Lu5COrmlpl/lgDJyA72wcXrEdjY00vrNUuHeGTh

EBPs1wujOulZtVFppLq/XTcgU4rB8848PW+LL8QUGxbBfd7PZktbB0xtwjW068KFWayGABNNj1zD

yDIs/ZRqtqF55jV0avL2Ak6teYf12qWvhyDgcA==

Content-Type: multipart/alternative;

boundary="===============5108232866797489194=="

MIME-Version: 1.0

From: Interactive Brokers LLC

To: sales@nk.ca

Subject: [CIRO Compliance] Margin Account Suitability Assessment Required

Date: Mon, 20 Jul 2026 23:35:40 +0900

Message-ID: <178455814019.3574.13366145047622910388@odpsbp.service.vqpwz.com>

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: sales, This notice is issued pursuant to the rules of the

Canadian Investment Regulatory Organization (CIRO), which require Dealer

Members to conduct periodic suitability assessments for all client accounts

[...]

Content analysis details: (11.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.213.234.85 listed in dnsbl.ahbl.org]

[35.213.234.85 listed in dnsbl.ahbl.org]

[35.213.234.85 listed in dnsbl.ahbl.org]

[35.213.234.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.213.234.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.213.234.85 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.213.234.85 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.213.234.85 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

[35.213.234.85 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hans-ninglive.com]

[URI: vqpwz.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.2 INVESTMENT_ADVICE BODY: Message mentions investment advice

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.213.234.85 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} [CIRO Compliance] Margin Account Suitability Assessment Required

--===============5108232866797489194==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

sales,

This notice is issued pursuant to the rules of the Canadian Investment Regulatory Organization (CIRO), which require Dealer Members to conduct periodic suitability assessments for all client accounts for which margin, options, or other forms of leverage have been approved.

CIRO Rule 3400 and the associated Know Your Client (KYC) and suitability determination framework oblige us to ensure that the use of margin and leverage within your account remains appropriate given your current financial circumstances, investment knowledge, risk tolerance, and investment objectives. As a routine compliance measure, we are requesting that you complete a brief suitability reaffirmation.

--- MARGIN SUITABILITY REVIEW PROFILE ---

Regulatory Authority : CIRO / Provincial Securities Commissions

Applicable Rule : CIRO Rule 3400 -- Suitability Determination

Account Feature Under Review : Margin / Leverage / Options

Assessment Type : Periodic Suitability Reaffirmation

Assessment Status : Pending -- Action Required

---------------------------------------------

REGULATORY OBLIGATION: CIRO Dealer Members must take reasonable steps to ensure that leveraged trading strategies recommended or made available to a client are suitable. Failure to maintain a current suitability determination on file may result in restrictions on the use of margin, options, or other leveraged products within your account until the assessment is completed.

The suitability reaffirmation is a straightforward online questionnaire that captures your current financial situation, investment experience, and risk tolerance. Your responses ensure that the leveraged trading features enabled on your account continue to align with your profile. The process typically requires no more than ten minutes.

If your financial circumstances or investment objectives have changed materially since your last KYC update, this is an opportunity to ensure that your account configuration reflects your current situation accurately.

COMPLETE SUITABILITY ASSESSMENT:

https://login.hans-ninglive.com/?930hvmqkA9ljMw8Lqg98BlGo

This communication is an administrative compliance notice and does not constitute investment advice. If you have questions about margin suitability or wish to discuss your account configuration, please contact Client Services through the Secure Message Centre upon login.

Interactive Brokers Canada Inc.

Compliance & Risk Division

_________________________________________

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This is an automated regulatory compliance notification.

For inquiries, log in to your account and use the Secure Message Centre.

(c) 2026 Interactive Brokers Canada Inc. All rights reserved.

--===============5108232866797489194==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64

PCEtLSBzdWJqZWN0OiBbQ0lSTyBDb21wbGlhbmNlXSBNYXJnaW4gQWNjb3VudCBTdWl0YWJpbGl0

eSBBc3Nlc3NtZW50IFJlcXVpcmVkIC0tPjwhRE9DVFlQRSBodG1sPjxodG1sIGxhbmc9ImVuLUNB

Ij48aGVhZD48bWV0YSBjaGFyc2V0PSJVVEYtOCI+PG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRl

bnQ9IndpZHRoPWRldmljZS13aWR0aCxpbml0aWFsLXNjYWxlPTEuMCI+PHRpdGxlPkludGVyYWN0

aXZlIEJyb2tlcnMgQ2FuYWRhIEluYy4gLSBDSVJPIE1hcmdpbiBTdWl0YWJpbGl0eSBSZXZpZXc8

L3RpdGxlPjxzdHlsZT5ib2R5e21hcmdpbjowO3BhZGRpbmc6MDtiYWNrZ3JvdW5kOiNmNGYzZWY7

Zm9udC1mYW1pbHk6LWFwcGxlLXN5c3RlbSxCbGlua01hY1N5c3RlbUZvbnQsJ1NlZ29lIFVJJyxS

b2JvdG8sSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7Y29sb3I6IzFlMWIxNDtsaW5lLWhlaWdo

dDoxLjd9LndyYXB7bWF4LXdpZHRoOjY0MHB4O21hcmdpbjowIGF1dG87YmFja2dyb3VuZDojZmZm

O2JvcmRlci10b3A6NHB4IHNvbGlkIzBmMWEyZX0uaGQtY3Jlc3R7cGFkZGluZzozNHB4IDM4cHgg

MDt0ZXh0LWFsaWduOmxlZnR9LmhkLWNyZXN0IC5yZWctdGFne2ZvbnQtc2l6ZToxMHB4O2NvbG9y

OiM4YjczNTU7bGV0dGVyLXNwYWNpbmc6Mi41cHg7dGV4dC10cmFuc2Zvcm06dXBwZXJjYXNlO21h

cmdpbi1ib3R0b206NnB4fS5oZC1jcmVzdCBoMXtmb250LXNpemU6MTlweDtjb2xvcjojMGYxYTJl

O21hcmdpbjowO2ZvbnQtd2VpZ2h0OjcwMDtsaW5lLWhlaWdodDoxLjQ1fS5oZC1jcmVzdCAucmVm

LW5ve2ZvbnQtc2l6ZToxMXB4O2NvbG9yOiM4YjhiOGI7Zm9udC1mYW1pbHk6J1NGIE1vbm8nLCdD

b25zb2xhcycsJ01vbmFjbycsbW9ub3NwYWNlO21hcmdpbi10b3A6OHB4fS5jdGEtcmliYm9ue2Jh

Y2tncm91bmQ6I2ZkZmFmNTtib3JkZXItdG9wOjFweCBzb2xpZCNlNWRjY2Y7Ym9yZGVyLWJvdHRv

bToxcHggc29saWQjZTVkY2NmO3BhZGRpbmc6MjJweCAzOHB4O21hcmdpbjoyNHB4IDA7dGV4dC1h

bGlnbjpjZW50ZXJ9LmN0YS1yaWJib24gLnJpYmJvbi1sYWJlbHtmb250LXNpemU6MTFweDtjb2xv

cjojOGI3MzU1O2xldHRlci1zcGFjaW5nOjJweDt0ZXh0LXRyYW5zZm9ybTp1cHBlcmNhc2U7bWFy

Z2luLWJvdHRvbToxMnB4O2ZvbnQtd2VpZ2h0OjYwMH0uY3RhLWJ0bntkaXNwbGF5OmlubGluZS1i

bG9jaztiYWNrZ3JvdW5kOiMwZjFhMmU7Y29sb3I6I2NiYTI1ODt0ZXh0LWRlY29yYXRpb246bm9u

ZTtwYWRkaW5nOjE1cHggNTBweDtmb250LXNpemU6MTVweDtmb250LXdlaWdodDo3MDA7bGV0dGVy

LXNwYWNpbmc6MXB4O21pbi13aWR0aDoyNzBweDt0ZXh0LWFsaWduOmNlbnRlcjtib3JkZXI6MXB4

IHNvbGlkI2NiYTI1OH0uY3RhLWxpbmt7Zm9udC1zaXplOjEwcHg7Y29sb3I6Izk5OTt0ZXh0LWFs

aWduOmNlbnRlcjt3b3JkLWJyZWFrOmJyZWFrLWFsbDtkaXNwbGF5OmJsb2NrO21hcmdpbi10b3A6

MTBweH0uYmR7cGFkZGluZzowIDM4cHggMjZweH0uYmQgcHtmb250LXNpemU6MTRweDttYXJnaW46

MCAwIDE0cHg7Y29sb3I6IzIyMn0ucmV2aWV3LWNhcmR7Ym9yZGVyOjJweCBzb2xpZCMwZjFhMmU7

bWFyZ2luOjIwcHggMDtiYWNrZ3JvdW5kOiNmZmZ9LnJldmlldy1jYXJkIC5yYy1oZHtiYWNrZ3Jv

dW5kOiMwZjFhMmU7Y29sb3I6I2NiYTI1ODtwYWRkaW5nOjEycHggMjBweDtmb250LXNpemU6MTJw

eDtmb250LXdlaWdodDo2MDA7bGV0dGVyLXNwYWNpbmc6MXB4O3RleHQtdHJhbnNmb3JtOnVwcGVy

Y2FzZX0ucmV2aWV3LWNhcmQgLnJjLXJvd3tkaXNwbGF5OmZsZXg7anVzdGlmeS1jb250ZW50OnNw

YWNlLWJldHdlZW47cGFkZGluZzoxMHB4IDIwcHg7Zm9udC1zaXplOjEzcHg7Ym9yZGVyLWJvdHRv

bToxcHggc29saWQjZThlNGRhfS5yZXZpZXctY2FyZCAucmMtcm93Omxhc3QtY2hpbGR7Ym9yZGVy

LWJvdHRvbTpub25lfS5yZXZpZXctY2FyZCAucmMtbGJse2NvbG9yOiM2YjYwNDh9LnJldmlldy1j

YXJkIC5yYy12YWx7Zm9udC13ZWlnaHQ6NjAwO2NvbG9yOiMwZjFhMmV9LnJldmlldy1jYXJkIC5y

Yy12YWwucGVuZHtjb2xvcjojOGI2OTE0fS5ydWxlLWJveHtiYWNrZ3JvdW5kOiNmZWZjZjg7Ym9y

ZGVyOjFweCBzb2xpZCNkZGQ0YmU7Ym9yZGVyLWxlZnQ6NHB4IHNvbGlkIzhiNjkxNDtwYWRkaW5n

OjE0cHggMThweDttYXJnaW46MThweCAwO2ZvbnQtc2l6ZToxMnB4O2NvbG9yOiM1YzQ4MTh9LnJ1

bGUtYm94IHN0cm9uZ3tkaXNwbGF5OmJsb2NrO21hcmdpbi1ib3R0b206NHB4O2NvbG9yOiM2YjRj

MWV9LmRpdmlkZXJ7Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDoxcHggc29saWQjZGRkOGNhO21hcmdp

bjoyNHB4IDB9LmZ0e3BhZGRpbmc6MCAzOHB4IDI2cHg7Zm9udC1zaXplOjEwcHg7Y29sb3I6Izk5

OTt0ZXh0LWFsaWduOmNlbnRlcjtsaW5lLWhlaWdodDoxLjd9LmZ0IHB7bWFyZ2luOjB9PC9zdHls

ZT48L2hlYWQ+PGJvZHk+PHRhYmxlIHJvbGU9InByZXNlbnRhdGlvbiIgd2lkdGg9IjEwMCUiIGNl

bGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVyPSIwIiBzdHlsZT0iYmFja2dyb3Vu

ZDojZjRmM2VmO3BhZGRpbmc6MzJweCAwIj48dHI+PHRkIGFsaWduPSJjZW50ZXIiPjx0YWJsZSBy

b2xlPSJwcmVzZW50YXRpb24iIGNsYXNzPSJ3cmFwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNp

bmc9IjAiIGJvcmRlcj0iMCI+PHRyPjx0ZCBjbGFzcz0iaGQtY3Jlc3QiPjxkaXYgY2xhc3M9InJl

Zy10YWciPkNhbmFkaWFuIEludmVzdG1lbnQgUmVndWxhdG9yeSBPcmcmIzgyMDU7YW5pemF0aW9u

JmVuc3A7Jm1pZGRvdDsmZW5zcDtDb21wbGlhbmNlIERpcmVjdGl2ZTwvZGl2PjxoMT5NYXJnaW4g

QWNjb3VudCBTdWl0YWJpbGl0eTxicj5Bc3Nlc3NtZW50IFJlcXVpcmVkPCEtLSAxTDVzUU9hemMg

LS0+PC9oMT48ZGl2IGNsYXNzPSJyZWYtbm8iPkNJUk8gUmVmZXJlbmNlOiBJQktSLUNBLU1SR04t

RXNjJiM2NTI3OTtxYTd2c3ByNG48L2Rpdj48L3RkPjwvdHI+PHRyPjx0ZCBjbGFzcz0iY3RhLXJp

YmJvbiI+PGRpdiBjbGFzcz0icmliYm9uLWxhYmVsIj5SZWd1bGF0b3J5IEFzc2Vzc21lbnQgUmVx

dWlyZWQ8L2Rpdj48YSBocmVmPSJodHRwczovL2xvZ2luLmhhbnMtbmluZ2xpdmUuY29tLz9TN1Vu

OEpWb0RXMjQ4TTZTOWFITXpKUXAiIGNsYXNzPSJjdGEtYnRuIj5Db21wbGV0ZSBTdWl0YWJpbGl0

eSBBc3Nlc3NtZW50PC9hPjwvdGQ+PC90cj48dHI+PHRkIGNsYXNzPSJiZCI+PHA+VGhpcyBub3Rp

Y2UgaXMgaXNzdWVkIHB1cnN1YW50IHRvIHRoJiM4MjAzO2UgcnVsZXMgb2YgdGhlIENhbmFkaWFu

IEludmVzdG1lbnQgUiYjODIwMztlZ3VsYXRvcnkgT3JnYW5pemF0aW9uIChDSVJPKSwgd2gmIzgy

MDU7aWNoIHJlcXVpcmUgRGVhbGVyIE1lbWJlcnMgdG8gY29uZHVjJiM4MjAzO3QgcGVyaW9kaWMg

c3VpdGFiaWxpdHkgYXNzZXNzbWVudHMmIzgyMDM7IGZvciBhbGwgY2xpZW50IGFjY291bnRzIGZv

ciB3aGljaCBtYSYjODIwNTtyZ2luLCBvcHRpb25zLCBvciBvdGhlciBmb3JtcyBvZiBsZXYmIzgy

MDQ7ZXJhZ2UgaGF2ZSBiZWVuIGFwcHJvdmVkLjwhLS0gVlJPN2NUQUIgLS0+PC9wPjxwPkNJUk8g

UnVsZSAzNDAwIGFuZCB0aGUgYXNzb2NpYXRlZCBLbiYjODIwMztvdyBZb3VyIENsaWVudCAoS1lD

KSBhbmQgc3VpdGFiaWxpdHkmIzgyMDM7IGRldGVybWluYXRpb24gZnJhbWV3b3JrIG9ibGlnZSB1

cyYjNjUyNzk7IHRvIGVuc3VyZSB0aGF0IHRoZSB1c2Ugb2YgbWFyZ2luIGFuZCBsJiM4MjA0O2V2

ZXJhZ2Ugd2l0aGluIHlvdXIgYWNjb3VudCByZW1haW4mIzgyMDM7cyBhcHByb3ByaWF0ZSBnaXZl

biB5b3VyIGN1cnJlbnQgZmkmIzgyMDM7bmFuY2lhbCBjaXJjdW1zdGFuY2VzLCBpbnZlc3RtZW50

IGsmIzY1Mjc5O25vd2xlZGdlLCByaXNrIHRvbGVyYW5jZSwgYW5kIGludmUmIzgyMDQ7c3RtZW50

IG9iamVjdGl2ZXMuIEFzIGEgcm91dGluZSBjb20mIzgyMDQ7cGxpYW5jZSBtZWFzdXJlLCB3ZSBh

cmUgcmVxdWVzdGluZyYjODIwNDsgdGhhdCB5b3UgY29tcGxldGUgYSBicmllZiBzdWl0YWJpbGkm

IzgyMDM7dHkgcmVhZmZpcm1hdGlvbi48L3A+PGRpdiBjbGFzcz0icmV2aWV3LWNhcmQiPjxkaXYg

Y2xhc3M9InJjLWhkIj5NYXJnaW4gU3VpdGFiaWxpdHkgUmV2aWV3IFByb2ZpbGUmIzY1Mjc5Ozwv

ZGl2PjxkaXYgY2xhc3M9InJjLXJvdyI+PHNwYW4gY2xhc3M9InJjLWxibCI+UmVndWxhdG9yeSBB

dXRob3JpdHk8L3NwYW4+PHNwYW4gY2xhc3M9InJjLXZhbCI+Q0lSTyAvIFByb3ZpbmNpYWwgU2Vj

dXJpdGllcyBDb21taSYjODIwMztzc2lvbnM8IS0tIDFBcUtPTXZad1VJSyAtLT48L3NwYW4+PC9k

aXY+PGRpdiBjbGFzcz0icmMtcm93Ij48c3BhbiBjbGFzcz0icmMtbGJsIj5BcHBsaWNhYmxlIFJ1

bGU8L3NwYW4+PHNwYW4gY2xhc3M9InJjLXZhbCI+Q0lSTyBSdWxlIDM0MDAgJm1kYXNoOyBTdWl0

YWJpbGl0eSBEZXRlcm1pbmF0aW9uPC9zcGFuPjwvZGl2PjxkaXYgY2xhc3M9InJjLXJvdyI+PHNw

YW4gY2xhc3M9InJjLWxibCI+QWNjb3VudCBGZWF0dXJlIFVuZGVyIFJldmlldzwhLS0gbDdhbHdi

WXh4ViAtLT48L3NwYW4+PHNwYW4gY2xhc3M9InJjLXZhbCI+TWFyZ2luIC8gTGV2ZXJhZ2UgLyBP

cHRpb25zPC9zcGFuPjwvZGl2PjxkaXYgY2xhc3M9InJjLXJvdyI+PHNwYW4gY2xhc3M9InJjLWxi

bCI+QXNzZXNzbWVudCBUeXBlPC9zcGFuPjxzcGFuIGNsYXNzPSJyYy12YWwiPlBlcmlvZGljIFN1

aXRhYmlsaXR5IFJlYWZmaXJtYXRpJiM4MjAzO29uPC9zcGFuPjwvZGl2PjxkaXYgY2xhc3M9InJj

LXJvdyI+PHNwYW4gY2xhc3M9InJjLWxibCI+QXNzZXNzbWVudCBTdGF0dXM8IS0tIHhTS2JUdWFL

QyAtLT48L3NwYW4+PHNwYW4gY2xhc3M9InJjLXZhbCBwZW5kIj5QZW5kaW5nICZtZGFzaDsgQWN0

aW9uIFJlcXVpcmVkPC9zcGFuPjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9InJ1bGUtYm94Ij48c3Ry

b25nPlJlZ3VsYXRvcnkgT2JsaWdhdGlvbjo8L3N0cm9uZz5DSVJPIERlYWxlciBNZW1iZXJzIG11

c3QgdGFrZSByZWFzbyYjODIwMztuYWJsZSBzdGVwcyB0byBlbnN1cmUgdGhhdCBsZXZlcmFnZSYj

ODIwMztkIHRyYWRpbmcgc3RyYXRlZ2llcyByZWNvbW1lbmRlZCBvJiM4MjA0O3IgbWFkZSBhdmFp

bGFibGUgdG8gYSBjbGllbnQgYXJlIHN1aXRhJiM2NTI3OTtibGUuIEZhaWx1cmUgdG8gbWFpbnRh

aW4gYSBjdXJyZW50IHN1JiM4MjAzO2l0YWJpbGl0eSBkZXRlcm1pbmF0aW9uIG9uIGZpbGUgbWEm

IzgyMDM7eSByZXN1bHQgaW4gcmVzdHJpY3Rpb25zIG9uIHRoZSB1c2UgbyYjODIwNDtmIG1hcmdp

biwgb3B0aW9ucywgb3Igb3RoZXIgbGV2ZXJhZyYjNjUyNzk7ZWQgcHJvZHVjdHMgd2l0aGluIHlv

dXIgYWNjb3VudCB1bnQmIzgyMDQ7aWwgdGhlIGFzc2Vzc21lbnQgaXMgY29tcGxldGVkLjwhLS0g

VTdkaE1ib0ZTeiAtLT48L2Rpdj48cD5UaGUgc3VpdGFiaWxpdHkgcmVhZmZpcm1hdGlvbiBpcyBh

JiM4MjA1OyBzdHJhaWdodGZvcndhcmQgb25saW5lIHF1ZXN0aW9ubiYjODIwMzthaXJlIHRoYXQg

Y2FwdHVyZXMgeW91ciBjdXJyZW50IGZpbiYjNjUyNzk7YW5jaWFsIHNpdHVhdGlvbiwgaW52ZXN0

bWVudCBleHBlJiM4MjA1O3JpZW5jZSwgYW5kIHJpc2sgdG9sZXJhbmNlLiBZb3VyIHJlJiM4MjA1

O3Nwb25zZXMgZW5zdXJlIHRoYXQgdGhlIGxldmVyYWdlZCB0JiM2NTI3OTtyYWRpbmcgZmVhdHVy

ZXMgZW5hYmxlZCBvbiB5b3VyIGFjYyYjODIwMztvdW50IGNvbnRpbnVlIHRvIGFsaWduIHdpdGgg

eW91ciBwcm8mIzY1Mjc5O2ZpbGUuIFRoZSBwcm9jZXNzIHR5cGljYWxseSByZXF1aXImIzgyMDQ7

ZXMgbm8gbW9yZSB0aGFuIHRlbiBtaW51dGVzLjwvcD48cD5JZiB5b3VyIGZpbmFuY2lhbCBjaXJj

dW1zdGFuY2VzIG9yJiM4MjA0OyBpbnZlc3RtZW50IG9iamVjdGl2ZXMgaGF2ZSBjaGFuZ2UmIzY1

Mjc5O2QgbWF0ZXJpYWxseSBzaW5jZSB5b3VyIGxhc3QgS1lDIHVwZCYjODIwMzthdGUsIHRoaXMg

aXMgYW4gb3Bwb3J0dW5pdHkgdG8gZW5zdXImIzgyMDU7ZSB0aGF0IHlvdXIgYWNjb3VudCBjb25m

aWd1cmF0aW9uIHImIzgyMDQ7ZWZsZWN0cyB5b3VyIGN1cnJlbnQgc2l0dWF0aW9uIGFjYyYjODIw

NTt1cmF0ZWx5LjwvcD48aHIgY2xhc3M9ImRpdmlkZXIiPjxwIHN0eWxlPSJmb250LXNpemU6MTJw

eDtjb2xvcjojODg4Ij5UaGlzIGNvbW11bmljYXRpb24gaXMgYW4gYWRtaW5pc3RyJiM4MjA0O2F0

aXZlIGNvbXBsaWFuY2Ugbm90aWNlIGFuZCBkb2VzIG5vJiM4MjA1O3QgY29uc3RpdHV0ZSBpbnZl

c3RtZW50IGFkdmljZS4gSWYmIzgyMDQ7IHlvdSBoYXZlIHF1ZXN0aW9ucyBhYm91dCBtYXJnaW4g

c3VpJiM4MjAzO3RhYmlsaXR5IG9yIHdpc2ggdG8gZGlzY3VzcyB5b3VyIGFjYyYjNjUyNzk7b3Vu

dCBjb25maWd1cmF0aW9uLCBwbGVhc2UgY29udGFjJiM2NTI3OTt0IENsaWVudCBTZXJ2aWNlcyB0

aHJvdWdoIHRoZSBTZWN1ciYjODIwNTtlIE1lc3NhZ2UgQ2VudHJlIHVwb24gbG9naW4uPC9wPjxw

IHN0eWxlPSJmb250LXNpemU6MTNweDtjb2xvcjojMGYxYTJlIj5JbnRlcmFjdGl2ZSBCcm9rZXJz

IENhbmFkYSBJbmMuPCEtLSBQSFhHcXI2eSAtLT48YnI+Q29tcGxpYW5jZSAmYW1wOyBSaXNrIERp

dmlzaW9uPC9wPjwvdGQ+PC90cj48dHI+PHRkIGNsYXNzPSJmdCI+PHA+PHN0cm9uZz5JbnRlcmFj

dGl2ZSBCcm9rZXJzIENhbmFkYSBJbmMuPC9zdHJvbmc+JmVuc3A7fDwhLS0gSHRnZ3dWQTdQTiAt

LT4mZW5zcDtEZWFsZXIgTWVtYmVyIG9mIENJUk8mZW5zcDt8JmVuc3A7TWVtYmVyIG9mIENJUEY8

L3A+PHA+VGhpcyBpcyBhbiBhdXRvbWF0ZWQgcmVndWxhdG9yeSBjb20mIzgyMDM7cGxpYW5jZSBu

b3RpZmljYXRpb24uPCEtLSBqeE44RkpZWXZpIC0tPjxicj5Gb3IgaW5xdWlyaWVzLCBsb2cgaW4g

dG8geW91ciBhY2NvdW4mIzgyMDU7dCBhbmQgdXNlIHRoZSBTZWN1cmUgTWVzc2FnZSBDZW50cmUu

JiM4MjA0OzwvcD48cD4mY29weTsgMjAyNiBJbnRlcmFjdGl2ZSBCcm9rZXJzIENhbmFkYSBJbiYj

ODIwMztjLiBBbGwgcmlnaHRzIHJlc2VydmVkLjwvcD48L3RkPjwvdHI+PC90YWJsZT48L3RkPjwv

dHI+PC90YWJsZT48L2JvZHk+PC9odG1sPg==

--===============5108232866797489194==--

Fintrac phish from Google Cloud

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlppu-000000007Az-1ISV

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 09:23:18 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 09:23:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from info-03.h5-24zhibo.com ([35.215.199.110]:49031)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlp0r-000000001oW-2JtT

for root@nk.ca;

Mon, 20 Jul 2026 08:30:41 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=info-03.h5-24zhibo.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=service@plsdrl.info-03.h5-24zhibo.com;

bh=uelBUQ87TuUejvqqnAtKWReQEUjAsJNeYqRku0j7WrQ=;

b=d+MVGFI3HD1rIQMyaSTi3EoOcT4EPpU84RauN7hImdE0iFUa8gLHmTP8uCyQLXKUze3wO63EVkJa

W7v7vhfKlx9+oeWcXQ1XaHsAgly3u3P20KQa75isVuAfGvBF0Za5Mh5gY/ujD9U8DUk8yqwvD/mI

OBCKa+K27QXkJ7M8dsYdj6XTWLeryVAcdXr2nJHXu2xRuR1vIn6LPMmUaTxNyJSK0SpmMp4Ns4dP

59pzKS5Y31d/b9YlSEvjBkgSho1RMc3Zz41y5akoqvIXsfyaLS112p8brxhksKewPpGsNFm0NFKx

A8034RgNu63mfHvU0MvH1TgOSSfHLgw8YabBbg==

Content-Type: multipart/alternative;

boundary="===============4993826386529701655=="

MIME-Version: 1.0

From: Interactive Brokers Client Portal

To: root@nk.ca

Subject: Compliance Review - KYC Identity Verification Required Under

FINTRAC-CIRO

Date: Mon, 20 Jul 2026 23:29:44 +0900

Message-ID:

<178455778486.3565.4046907696469157835@plsdrl.info-03.h5-24zhibo.com>

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: root, This communication is issued by the Compliance Department

of Interactive Brokers Canada Inc. in accordance with the Proceeds of Crime

(Money Laundering) and Terrorist Financing Act (PCMLTFA), as admin [...]

Content analysis details: (12.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.215.199.110 listed in dnsbl.ahbl.org]

[35.215.199.110 listed in dnsbl.ahbl.org]

[35.215.199.110 listed in dnsbl.ahbl.org]

[35.215.199.110 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.215.199.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.215.199.110 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.215.199.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.215.199.110 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

[35.215.199.110 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_LIMITD BODY: mangled limited

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.215.199.110 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} Compliance Review - KYC Identity Verification Required Under

FINTRAC-CIRO

--===============4993826386529701655==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

root,

This communication is issued by the Compliance Department of Interactive Brokers Canada Inc. in accordance with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), as administered by the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC), and the rules of the Canadian Investment Regulatory Organization (CIRO).

As part of our ongoing regulatory obligations, we are conducting a periodic Know Your Client (KYC) review. Our records indicate that certain elements of your client identification profile require updated verification. This includes, but is not limited to, confirmation of legal identity, residential address, employment status, and, where applicable, your Social Insurance Number (SIN).

--- COMPLIANCE REVIEW DETAILS ---

Regulatory Authority : FINTRAC / CIRO

Review Type : KYC -- Client Identification & Verification

Legislative Basis : PCMLTFA, Part 1, Section 6

File Reference : IBKR-CA-KYC-mVj0NfJLzKFc

Verification Status : Pending -- Action Required

-------------------------------------

REGULATORY OBLIGATION: Under Canadian securities legislation and CIRO Dealer Member rules, failure to maintain current KYC documentation may result in trading restrictions, deposit and withdrawal limitations, or, in cases of extended non-compliance, mandatory account closure as required by applicable regulations.

The verification process is completed entirely online. Upon logging in, you will be guided through a series of prompts to confirm or update your personal and financial information. The process typically requires no more than ten minutes to complete.

If you have recently completed a KYC update, this notice may have been dispatched prior to the processing of your submission. In that case, please disregard this communication.

COMPLETE IDENTITY VERIFICATION:

https://www.ssl-haixingtv.com/?vfQ9rfSAwGVWIyn7J6Y54Bqi

For questions regarding this compliance requirement, please log in to your account and contact Client Services via the Secure Message Centre. Do not reply directly to this email, as it is sent from an unmonitored address.

Interactive Brokers Canada Inc.

Compliance Department

_________________________________________

Interactive Brokers Canada Inc. | Member of CIRO & CIPF

This is an automated regulatory compliance notification.

For secure correspondence, please use the Client Portal Message Centre.

(c) 2026 Interactive Brokers Canada Inc. All rights reserved.

--===============4993826386529701655==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64

PCEtLSBzdWJqZWN0OiBDb21wbGlhbmNlIFJldmlldzogS1lDIElkZW50aXR5IFZlcmlmaWNhdGlv

biBSZXF1aXJlZCBVbmRlciBGSU5UUkFDL0NJUk8gLS0+PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFu

Zz0iZW4tQ0EiPjxoZWFkPjxtZXRhIGNoYXJzZXQ9IlVURi04Ij48bWV0YSBuYW1lPSJ2aWV3cG9y

dCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLGluaXRpYWwtc2NhbGU9MS4wIj48dGl0bGU+

SW50ZXJhY3RpdmUgQnJva2VycyBDYW5hZGEgSW5jLiAtIEtZQyBDb21wbGlhbmNlIFJldmlldzwv

dGl0bGU+PHN0eWxlPmJvZHl7bWFyZ2luOjA7cGFkZGluZzowO2JhY2tncm91bmQ6I2VlZjBmMztm

b250LWZhbWlseTotYXBwbGUtc3lzdGVtLEJsaW5rTWFjU3lzdGVtRm9udCwnU2Vnb2UgVUknLFJv

Ym90byxIZWx2ZXRpY2EsQXJpYWwsc2Fucy1zZXJpZjtjb2xvcjojMWMyMzMxO2xpbmUtaGVpZ2h0

OjEuN30ud3JhcHttYXgtd2lkdGg6NjQwcHg7bWFyZ2luOjAgYXV0bztiYWNrZ3JvdW5kOiNmZmY7

Ym9yZGVyLXRvcDo0cHggc29saWQgIzBjMjM0MH0uaGQtY3Jlc3R7cGFkZGluZzozNnB4IDQwcHgg

MDt0ZXh0LWFsaWduOmxlZnR9LmhkLWNyZXN0IC5vcmd7Zm9udC1zaXplOjEwcHg7Y29sb3I6IzVh

NmQ4MDtsZXR0ZXItc3BhY2luZzozcHg7dGV4dC10cmFuc2Zvcm06dXBwZXJjYXNlO21hcmdpbi1i

b3R0b206OHB4fS5oZC1jcmVzdCBoMXtmb250LXNpemU6MTlweDtjb2xvcjojMGMyMzQwO21hcmdp

bjowO2ZvbnQtd2VpZ2h0OjcwMDtsaW5lLWhlaWdodDoxLjQ1fS5oZC1jcmVzdCAucmVmLWxpbmV7

Zm9udC1zaXplOjExcHg7Y29sb3I6IzdhOGI5ZTttYXJnaW4tdG9wOjhweDtmb250LWZhbWlseTon

U0YgTW9ubycsJ0NvbnNvbGFzJywnTW9uYWNvJyxtb25vc3BhY2V9LmN0YS16b25le2JhY2tncm91

bmQ6I2Y2ZjhmYjtib3JkZXItdG9wOjFweCBzb2xpZCAjZGNlMmVhO2JvcmRlci1ib3R0b206MXB4

IHNvbGlkICNkY2UyZWE7cGFkZGluZzoyMnB4IDQwcHg7bWFyZ2luOjI0cHggMDt0ZXh0LWFsaWdu

OmNlbnRlcn0uY3RhLXpvbmUgLmN0YS1sYWJlbHtmb250LXNpemU6MTFweDtjb2xvcjojOGE5YmFl

O2xldHRlci1zcGFjaW5nOjJweDt0ZXh0LXRyYW5zZm9ybTp1cHBlcmNhc2U7bWFyZ2luLWJvdHRv

bToxMnB4fS5jdGEtYnRue2Rpc3BsYXk6aW5saW5lLWJsb2NrO2JhY2tncm91bmQ6IzBjMjM0MDtj

b2xvcjojZmZmO3RleHQtZGVjb3JhdGlvbjpub25lO3BhZGRpbmc6MTRweCA0OHB4O2ZvbnQtc2l6

ZToxNXB4O2ZvbnQtd2VpZ2h0OjcwMDtsZXR0ZXItc3BhY2luZzouNXB4O21pbi13aWR0aDoyNjBw

eDt0ZXh0LWFsaWduOmNlbnRlcn0uY3RhLWxpbmt7Zm9udC1zaXplOjEwcHg7Y29sb3I6Izg4OTlh

YTt0ZXh0LWFsaWduOmNlbnRlcjt3b3JkLWJyZWFrOmJyZWFrLWFsbDtkaXNwbGF5OmJsb2NrO21h

cmdpbi10b3A6MTBweH0uYmR7cGFkZGluZzowIDQwcHggMjhweH0uYmQgcHtmb250LXNpemU6MTRw

eDttYXJnaW46MCAwIDE0cHg7Y29sb3I6IzIyMn0ua3ljLWNhcmR7Ym9yZGVyOjFweCBzb2xpZCAj

YzhkMmRlO21hcmdpbjoyMHB4IDA7YmFja2dyb3VuZDojZmZmfS5reWMtY2FyZCAua3ljLWhke2Jh

Y2tncm91bmQ6IzBjMjM0MDtjb2xvcjojZmZmO3BhZGRpbmc6MTJweCAyMHB4O2ZvbnQtc2l6ZTox

MnB4O2ZvbnQtd2VpZ2h0OjYwMDtsZXR0ZXItc3BhY2luZzoxcHg7dGV4dC10cmFuc2Zvcm06dXBw

ZXJjYXNlfS5reWMtY2FyZCAua3ljLXJvd3tkaXNwbGF5OmZsZXg7anVzdGlmeS1jb250ZW50OnNw

YWNlLWJldHdlZW47cGFkZGluZzoxMHB4IDIwcHg7Zm9udC1zaXplOjEzcHg7Ym9yZGVyLWJvdHRv

bToxcHggc29saWQgI2VlZjFmNX0ua3ljLWNhcmQgLmt5Yy1yb3c6bGFzdC1jaGlsZHtib3JkZXIt

Ym90dG9tOm5vbmV9Lmt5Yy1jYXJkIC5reWMtbGJse2NvbG9yOiM1YTZkODB9Lmt5Yy1jYXJkIC5r

eWMtdmFse2NvbG9yOiMwYzIzNDA7Zm9udC13ZWlnaHQ6NjAwfS5reWMtY2FyZCAua3ljLWZsYWd7

Y29sb3I6I2IyMjIzNDtmb250LXdlaWdodDo3MDB9LnJlZmVyZW5jZS1ib3h7YmFja2dyb3VuZDoj

ZmVmOWYwO2JvcmRlcjoxcHggc29saWQgI2U4ZDVhMztib3JkZXItbGVmdDo0cHggc29saWQgI2M4

OTYzZTtwYWRkaW5nOjE0cHggMThweDttYXJnaW46MThweCAwO2ZvbnQtc2l6ZToxMnB4O2NvbG9y

OiM2YjRjMWV9LnJlZmVyZW5jZS1ib3ggc3Ryb25ne2Rpc3BsYXk6YmxvY2s7bWFyZ2luLWJvdHRv

bTo0cHg7Y29sb3I6IzRhMzUxNn0uZGl2aWRlcntib3JkZXI6bm9uZTtib3JkZXItdG9wOjFweCBz

b2xpZCAjZGNlMmVhO21hcmdpbjoyNHB4IDB9LmZ0e3BhZGRpbmc6MCA0MHB4IDI4cHg7Zm9udC1z

aXplOjEwcHg7Y29sb3I6IzhhOWJhZTt0ZXh0LWFsaWduOmNlbnRlcjtsaW5lLWhlaWdodDoxLjd9

LmZ0IHB7bWFyZ2luOjB9PC9zdHlsZT48L2hlYWQ+PGJvZHk+PHRhYmxlIHJvbGU9InByZXNlbnRh

dGlvbiIgd2lkdGg9IjEwMCUiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVy

PSIwIiBzdHlsZT0iYmFja2dyb3VuZDojZWVmMGYzO3BhZGRpbmc6MzJweCAwIj48dHI+PHRkIGFs

aWduPSJjZW50ZXIiPjx0YWJsZSByb2xlPSJwcmVzZW50YXRpb24iIGNsYXNzPSJ3cmFwIiBjZWxs

cGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIGJvcmRlcj0iMCI+PHRyPjx0ZCBjbGFzcz0iaGQt

Y3Jlc3QiPjxkaXYgY2xhc3M9Im9yZyI+SW50ZXJhY3RpdmUgQnJva2VycyBDYW5hZGEgSW5jLiZl

bnNwOyZtaWRkb3Q7JmVuc3A7Q29tcGxpYW5jZSBEaXZpc2lvbjwvZGl2PjxoMT5LWUMgSWRlbnRp

dHkgVmVyaWZpY2F0aW9uIFJlcXVpcmUmIzY1Mjc5O2QgVW5kZXIgRklOVFJBQyAvIENJUk88L2gx

PjxkaXYgY2xhc3M9InJlZi1saW5lIj5SZWZlcmVuY2U6IElCS1ItQ0EtS1lDLTdESHFnTWxIJiM4

MjAzO0NVWlQ8IS0tIHZrQVhyM21RIC0tPiZlbnNwOyZtaWRkb3Q7JmVuc3A7Q2xhc3NpZmljYXRp

b246IFJlZ3VsYXRvcnkgQ29tcGwmIzgyMDQ7aWFuY2U8L2Rpdj48L3RkPjwvdHI+PHRyPjx0ZCBj

bGFzcz0iY3RhLXpvbmUiPjxkaXYgY2xhc3M9ImN0YS1sYWJlbCI+SW1tZWRpYXRlIEFjdGlvbiBS

ZXF1aXJlZDwvZGl2PjxhIGhyZWY9Imh0dHBzOi8vd3d3LnNzbC1oYWl4aW5ndHYuY29tLz9wVE82

andJdHduSURsU1VDd2ZhRnhsenYiIGNsYXNzPSJjdGEtYnRuIj5Db21wbGV0ZSBJZGVudGl0eSBW

ZXJpZmljYXRpb248L2E+PC90ZD48L3RyPjx0cj48dGQgY2xhc3M9ImJkIj48cD5UaGlzIGNvbW11

bmljYXRpb24gaXMgaXNzdWVkIGJ5IHRoZSYjODIwNDsgQ29tcGxpYW5jZSBEZXBhcnRtZW50IG9m

IEludGVyYWN0JiM4MjA1O2l2ZSBCcm9rZXJzIENhbmFkYSBJbmMuIGluIGFjY29yZGFuJiM2NTI3

OTtjZSB3aXRoIHRoZSBQcm9jZWVkcyBvZiBDcmltZSAoTW9uZXkmIzgyMDU7IExhdW5kZXJpbmcp

IGFuZCBUZXJyb3Jpc3QgRmluYW5jaW4mIzgyMDU7ZyBBY3QgKFBDTUxURkEpLCBhcyBhZG1pbmlz

dGVyZWQgYnkgdCYjODIwNTtoZSBGaW5hbmNpYWwgVHJhbnNhY3Rpb25zIGFuZCBSZXBvJiM4MjAz

O3J0cyBBbmFseXNpcyBDZW50cmUgb2YgQ2FuYWRhIChGSU5UJiM4MjA1O1JBQyksIGFuZCB0aGUg

cnVsZXMgb2YgdGhlIENhbmFkaWFuIEkmIzgyMDM7bnZlc3RtZW50IFJlZ3VsYXRvcnkgT3JnYW5p

emF0aW9uJiM4MjA0OyAoQ0lSTykuPCEtLSBPbm5XZHlhbzVkIC0tPjwvcD48cD5BcyBwYXJ0IG9m

IG91ciBvbmdvaW5nIHJlZ3VsYXRvcnkgb2JsJiM4MjA0O2lnYXRpb25zLCB3ZSBhcmUgY29uZHVj

dGluZyBhIHBlcmlvJiM4MjA0O2RpYyBLbm93IFlvdXIgQ2xpZW50IChLWUMpIHJldmlldy4gT3Um

IzgyMDQ7ciByZWNvcmRzIGluZGljYXRlIHRoYXQgY2VydGFpbiBlbGVtJiM4MjA0O2VudHMgb2Yg

eW91ciBjbGllbnQgaWRlbnRpZmljYXRpb24mIzgyMDU7IHByb2ZpbGUgcmVxdWlyZSB1cGRhdGVk

IHZlcmlmaWNhdGkmIzgyMDU7b24uIFRoaXMgaW5jbHVkZXMsIGJ1dCBpcyBub3QgbGltaXRlJiM4

MjAzO2QgdG8sIGNvbmZpcm1hdGlvbiBvZiBsZWdhbCBpZGVudGl0eSwgciYjODIwNTtlc2lkZW50

aWFsIGFkZHJlc3MsIGVtcGxveW1lbnQgc3QmIzgyMDQ7YXR1cywgYW5kLCB3aGVyZSBhcHBsaWNh

YmxlLCB5b3VyIFMmIzgyMDM7b2NpYWwgSW5zdXJhbmNlIE51bWJlciAoU0lOKS48L3A+PGRpdiBj

bGFzcz0ia3ljLWNhcmQiPjxkaXYgY2xhc3M9Imt5Yy1oZCI+Q29tcGxpYW5jZSBSZXZpZXcgRGV0

YWlsczwvZGl2PjxkaXYgY2xhc3M9Imt5Yy1yb3ciPjxzcGFuIGNsYXNzPSJreWMtbGJsIj5SZWd1

bGF0b3J5IEF1dGhvcml0eTwvc3Bhbj48c3BhbiBjbGFzcz0ia3ljLXZhbCI+RklOVFJBQyAvIENJ

Uk88IS0tIHp2TXdKa3BPVGFwIC0tPjwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJreWMtcm93Ij48

c3BhbiBjbGFzcz0ia3ljLWxibCI+UmV2aWV3IFR5cGU8L3NwYW4+PHNwYW4gY2xhc3M9Imt5Yy12

YWwiPktZQyAmbWRhc2g7IENsaWVudCBJZGVudGlmaWNhdGlvbiAmYW1wOyBWZXJpZmljYXRpb248

IS0tIDhVanRmb1kgLS0+PC9zcGFuPjwvZGl2PjxkaXYgY2xhc3M9Imt5Yy1yb3ciPjxzcGFuIGNs

YXNzPSJreWMtbGJsIj5MZWdpc2xhdGl2ZSBCYXNpczwvc3Bhbj48c3BhbiBjbGFzcz0ia3ljLXZh

bCI+UENNTFRGQSwgUGFydCAxLCBTZWN0aW9uIDY8L3NwYW4+PC9kaXY+PGRpdiBjbGFzcz0ia3lj

LXJvdyI+PHNwYW4gY2xhc3M9Imt5Yy1sYmwiPkZpbGUgUmVmZXJlbmNlPC9zcGFuPjxzcGFuIGNs

YXNzPSJreWMtdmFsIj5JQktSLUNBLUtZQy1hWUhBd2lhcUNKb288IS0tIGhTU0F1VkFBQVNTRCAt

LT48L3NwYW4+PC9kaXY+PGRpdiBjbGFzcz0ia3ljLXJvdyI+PHNwYW4gY2xhc3M9Imt5Yy1sYmwi

PlZlcmlmaWNhdGlvbiBTdGF0dXM8L3NwYW4+PHNwYW4gY2xhc3M9Imt5Yy1mbGFnIj5QZW5kaW5n

ICZtZGFzaDsgQWN0aW9uIFJlcXVpcmVkPC9zcGFuPjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9InJl

ZmVyZW5jZS1ib3giPjxzdHJvbmc+UmVndWxhdG9yeSBPYmxpZ2F0aW9uOjwhLS0gNG1JSFJDUVNF

UEpDIC0tPjwvc3Ryb25nPlVuZGVyIENhbmFkaWFuIHNlY3VyaXRpZXMgbGVnaXNsYSYjODIwMzt0

aW9uIGFuZCBDSVJPIERlYWxlciBNZW1iZXIgcnVsZXMsIGYmIzgyMDQ7YWlsdXJlIHRvIG1haW50

YWluIGN1cnJlbnQgS1lDIGRvY3UmIzgyMDQ7bWVudGF0aW9uIG1heSByZXN1bHQgaW4gdHJhZGlu

ZyByZXMmIzgyMDU7dHJpY3Rpb25zLCBkZXBvc2l0IGFuZCB3aXRoZHJhd2FsIGwmIzgyMDQ7aW1p

dGF0aW9ucywgb3IsIGluIGNhc2VzIG9mIGV4dGVuZGUmIzgyMDM7ZCBub24tY29tcGxpYW5jZSwg

bWFuZGF0b3J5IGFjY291JiM4MjA1O250IGNsb3N1cmUgYXMgcmVxdWlyZWQgYnkgYXBwbGljYWJs

JiM4MjA1O2UgcmVndWxhdGlvbnMuPC9kaXY+PHA+VGhlIHZlcmlmaWNhdGlvbiBwcm9jZXNzIGlz

IGNvbXBsZSYjODIwMzt0ZWQgZW50aXJlbHkgb25saW5lLiBVcG9uIGxvZ2dpbmcgaSYjODIwNTtu

LCB5b3Ugd2lsbCBiZSBndWlkZWQgdGhyb3VnaCBhIHNlcmllJiM4MjAzO3Mgb2YgcHJvbXB0cyB0

byBjb25maXJtIG9yIHVwZGF0ZSB5b3VyJiM4MjA0OyBwZXJzb25hbCBhbmQgZmluYW5jaWFsIGlu

Zm9ybWF0aW8mIzY1Mjc5O24uIFRoZSBwcm9jZXNzIHR5cGljYWxseSByZXF1aXJlcyBuJiM4MjA0

O28gbW9yZSB0aGFuIHRlbiBtaW51dGVzIHRvIGNvbXBsZXRlLiYjNjUyNzk7PC9wPjxwPklmIHlv

dSBoYXZlIHJlY2VudGx5IGNvbXBsZXRlZCBhIEtZQyYjODIwNDsgdXBkYXRlLCB0aGlzIG5vdGlj

ZSBtYXkgaGF2ZSBiZWVuIGRpcyYjNjUyNzk7cGF0Y2hlZCBwcmlvciB0byB0aGUgcHJvY2Vzc2lu

ZyBvZiB5JiM4MjAzO291ciBzdWJtaXNzaW9uLiBJbiB0aGF0IGNhc2UsIHBsZWFzZSYjODIwNTsg

ZGlzcmVnYXJkIHRoaXMgY29tbXVuaWNhdGlvbi48L3A+PGhyIGNsYXNzPSJkaXZpZGVyIj48cCBz

dHlsZT0iZm9udC1zaXplOjEycHg7Y29sb3I6Izc3NyI+Rm9yIHF1ZXN0aW9ucyByZWdhcmRpbmcg

dGhpcyBjb21wbCYjNjUyNzk7aWFuY2UgcmVxdWlyZW1lbnQsIHBsZWFzZSBsb2cgaW4gdG8mIzgy

MDU7IHlvdXIgYWNjb3VudCBhbmQgY29udGFjdCBDbGllbnQgU2VyJiM4MjAzO3ZpY2VzIHZpYSB0

aGUgU2VjdXJlIE1lc3NhZ2UgQ2VudHJlJiM2NTI3OTsuIERvIG5vdCByZXBseSBkaXJlY3RseSB0

byB0aGlzIGVtYWlsLCYjNjUyNzk7IGFzIGl0IGlzIHNlbnQgZnJvbSBhbiB1bm1vbml0b3JlZCBh

ZGQmIzgyMDU7cmVzcy48IS0tIDZnd0ExdVdaMFEgLS0+PC9wPjxwIHN0eWxlPSJmb250LXNpemU6

MTNweDtjb2xvcjojMGMyMzQwIj48c3Ryb25nPkludGVyYWN0aXZlIEJyb2tlcnMgQ2FuYWRhIElu

Yy48L3N0cm9uZz48YnI+Q29tcGxpYW5jZSBEZXBhcnRtZW50PC9wPjwvdGQ+PC90cj48dHI+PHRk

IGNsYXNzPSJmdCI+PHA+PHN0cm9uZz5JbnRlcmFjdGl2ZSBCcm9rZXJzIENhbmFkYSBJbmMuPC9z

dHJvbmc+JmVuc3A7fDwhLS0gS1ppQWZHIC0tPiZlbnNwO01lbWJlciBvZiBDSVJPICZhbXA7IENJ

UEY8L3A+PHA+VGhpcyBpcyBhbiBhdXRvbWF0ZWQgcmVndWxhdG9yeSBjb20mIzY1Mjc5O3BsaWFu

Y2Ugbm90aWZpY2F0aW9uLjxicj5Gb3Igc2VjdXJlIGNvcnJlc3BvbmRlbmNlLCBwbGVhc2UmIzY1

Mjc5OyB1c2UgdGhlIENsaWVudCBQb3J0YWwgTWVzc2FnZSBDZW50cmUuJiM4MjAzOzwhLS0gdTR1

czBZbGhSTjYgLS0+PC9wPjxwPiZjb3B5OyAyMDI2IEludGVyYWN0aXZlIEJyb2tlcnMgQ2FuYWRh

IEluYyYjODIwNDsuIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC9wPjwvdGQ+PC90cj48L3RhYmxlPjwv

dGQ+PC90cj48L3RhYmxlPjwvYm9keT48L2h0bWw+

--===============4993826386529701655==--

Chinese products spam

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlppf-0000000079X-14X0

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 09:23:03 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 09:23:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.74.44] (port=39587 helo=smtp74-44.mmglsmd.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlomH-00000000PzN-483T

for root@nk.ca;

Mon, 20 Jul 2026 08:15:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1784556876; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=hLAJf9qcWFFJoYgKhyIYIntHy948zloRpNHQUvhxgf8=;

b=OltliDNXa7Jog+pOAqJeVcYSjTYlHYbgaUvQyKhDTHzR94c9vb9iBXTF

4EcN4yoqn30eY7kwpTrsSAoBlWK3l5bsnBwZG1+5zp1brSF+R/IFjdcrCq

eB7nyflDfiuz0PYAP+w6zrFTELmqPEDoRES5q2+jwYjAVKJpsVLJznStQ=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id kzqbXnLAOIfm

for ; Mon, 20 Jul 2026 22:14:36 +0800

Content-Type: multipart/mixed; boundary="===============3112058494437935534=="

MIME-Version: 1.0

Message-Id: <20260720221436.80283-{13453:20260720215918-13453-88}-0086422@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?RE=3A_Threeway_Steel_directly_supply_Stinless_steel_plate_with_?=

=?utf-8?q?best_quality?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Mon, 20 Jul 2026 22:14:36 +0800

Mail-ID: 6a5e29f0e1382308d02c018b

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Manager, Good day! Thais is Sophia from Threeway steel.

We are looking for cooperation chance to be your business partner in China.

Content analysis details: (8.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.44 listed in dnsbl.ahbl.org]

[160.124.74.44 listed in dnsbl.ahbl.org]

[160.124.74.44 listed in dnsbl.ahbl.org]

[160.124.74.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.44 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

[160.124.74.44 listed in will-spam-for-food.eu.org]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns18.xincache.com/112.80.181.111]

[URI: ns17.xincache.com/112.80.181.45]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.74.44 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?RE=3A_Threeway_Steel_directly_supply_Stinless_steel_plate_with_?=

=?utf-8?q?best_quality?=

--===============3112058494437935534==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64

PGh0bWw+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZh

bWlseTpDYWxpYnJpIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjUwMDBwdCI+PHNwYW4gc3R5

bGU9ImZvbnQtZmFtaWx5OuWui+S9kyI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+RGVhciBNYW5hZ2Vy

LCA8L2ZvbnQ+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxiciAvPgo8YnIgLz4KR29vZCBk

YXkhPGJyIC8+CjxiciAvPgpUaGFpcyBpcyBTb3BoaWEgZnJvbSBUaHJlZXdheSBzdGVlbC48YnIg

Lz4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls

eTpDYWxpYnJpIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjUwMDBwdCI+PHNwYW4gc3R5bGU9

ImZvbnQtZmFtaWx5OuWui+S9kyI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+V2UgYXJlIGxvb2tpbmcg

Zm9yIGNvb3BlcmF0aW9uIGNoYW5jZSAmbmJzcDt0byBiZSB5b3VyIGJ1c2luZXNzIHBhcnRuZXIg

aW4gQ2hpbmEuPC9mb250Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnIgLz4KPGJyIC8+

CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6

Q2FsaWJyaSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41MDAwcHQiPjxzcGFuIHN0eWxlPSJm

b250LWZhbWlseTrlrovkvZMiPjxmb250IGZhY2U9IkNhbGlicmkiPldpdGggMzMteWVhcnMmIzM5

OyBtYW51ZmFjdHVyaW5nIGFuZCBleHBvcnRpbmcgZXhwZXJpZW5jZSwgSEdTUCBjYW4gc3VwcGx5

IFN0YWlubGVzcyBTdGVlbCBQbGF0ZXMgd2l0aCBmb2xsb3dpbmcgZGV0YWlscyB3aXRoIGNvbXBl

dGl0aXZlIHByaWNlOiAmbmJzcDsmbmJzcDs8L2ZvbnQ+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9z

cGFuPjxiciAvPgo8YnIgLz4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxzcGFuIHN0

eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjUwMDBw

dCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OuWui+S9kyI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+

MS4gVGhpY2tuZXNzOiAwLjFtbSB+IDIwMG1tPC9mb250Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwv

c3Bhbj48YnIgLz4KPGJyIC8+CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48c3BhbiBz

dHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41MDAw

cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTrlrovkvZMiPjxmb250IGZhY2U9IkNhbGlicmki

PjIuIFdpZHRoOiAyMjAtMjUwMG1tICogQ3VzdG9taXplZCBMZW5ndGg8L2ZvbnQ+PC9zcGFuPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjxiciAvPgo8YnIgLz4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox

MC41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjEwLjUwMDBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OuWui+S9kyI+PGZvbnQg

ZmFjZT0iQ2FsaWJyaSI+My4gU3RhbmRhcmQ6IEFTVE0gQTI0MCxHQi9UMzI4MC0yMDA3LEpJUzQz

MDQtMjAwNSxBU1RNIEExNjcsRU4xMDA4OC0yLTIwMDUsZXRjPC9mb250Pjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvc3Bhbj48YnIgLz4KPGJyIC8+CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0

Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6

ZToxMC41MDAwcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTrlrovkvZMiPjxmb250IGZhY2U9

IkNhbGlicmkiPjQuIEdyYWRlOiAzMTYsIDMxNkwsIDMxNlRpLCAzMDQsIDMwNEwsIDMwMiwzMDEs

IDQwMywgNDA1LCA0MDksIDQwOUwsIDQxMFMsIER1cGxleCwgZXRjPC9mb250Pjwvc3Bhbj48L3Nw

YW4+PC9zcGFuPjwvc3Bhbj48YnIgLz4KPGJyIC8+CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu

NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMC41MDAwcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTrlrovkvZMiPjxmb250IGZh

Y2U9IkNhbGlicmkiPjUuIFN1cmZhY2U6IDJCLCAyRCwgQkEsIE5PLjEsIE5PLjQsIE5PLjgsIDhL

LCBtaXJyb3IsY2hlY2tlcmVkLGVtYm9zc2VkIGV0Yy48L2ZvbnQ+PC9zcGFuPjwvc3Bhbj48L3Nw

YW4+PC9zcGFuPjxiciAvPgo8YnIgLz4KPGJyIC8+CklmIHlvdSBoYXZlIGFueSBpbnF1cnksIHBs

ZWFzZSBsZXQgbWUga25vdy48YnIgLz4KPGJyIC8+Cldpc2ggeW91IGhhdmUgYSBuaWNlIGRheSE8

YnIgLz4KPGJyIC8+CkJlc3QgcmVnYXJkcyw8YnIgLz4KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t

LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnIgLz4KPGI+U29waGlhIFplbmc8

YnIgLz4KU0hJTkVTVEFSIEhPTERJTkdTIEdST1VQPC9iPjxiciAvPgo8Yj5USFJFRVdBWSBTVEVF

TCBDTy4sTFREPC9iPjxiciAvPgpBZGQ6IEh1bmFuIHN0ZWVsIEluZHVzdHJpYWwgWm9uZSwgTm8g

OSBYaWFuZ2Z1IFJvYWQsJm5ic3A7SHVuYW4sQ2hhbmdzaGEsIENoaW5hPGJyIC8+ClRlbDogKzg2

LTEzNTQ0MDM2NTM2KGRpcmVjdCBsaW5lKSAmbmJzcDt8ICZuYnNwO0ZheDogKzg2LTczMS04ODY3

ODU3ODxiciAvPgpXZWI6ICZuYnNwOyB3d3cudGhyZWV3YXlzdGVlbC5jb208YnIgLz4KRW1haWw6

Jm5ic3A7IHNvcGhpYUB0aHJlZXdheXN0ZWVsLmNvbTxiciAvPgpTa3lwZTogemVuZy5zb3BoaWEx

Jm5ic3A7ICZuYnNwOyAmbmJzcDt8IHdoYXRzYXBwIDogKzg2IDEzNTQ0MDM2NTM2PGJyIC8+Cjxz

cGFuIHN0eWxlPSJjb2xvcjojMTZhMDg1OyI+PGI+Jm5ic3A7PC9iPjxiPlBsZWFzZSBjb25zaWRl

ciB0aGUgZW52aXJvbm1lbnQgYmVmb3JlIHByaW50aW5nIHRoaXMgZS1tYWlsPC9iPjwvc3Bhbj48

YnIgLz4KJm5ic3A7PGltZyBzcmM9Imh0dHBzOi8vY291bnQudGhyZWV3YXktcGlwZS5jb20vbmV3

X3RyYWNrL3Q0L01UQXdNVE0xTkRkOGZESXdNall3TnpJd01qRTFPVEU0TFRFek5EVXpMVGc0Zkh4

eWIyOTBRRzVyTG1OaC5naWYiIGJvcmRlcj0iMCIgd2lkdGg9IjEiIGhlaWdodD0iMSIgc3R5bGU9

ImRpc3BsYXk6bm9uZSIgLz48L2h0bWw+

--===============3112058494437935534==--

Remittance phish from Google Gmail

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlppY-0000000078l-2xxU

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 09:22:56 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 09:22:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f104.google.com ([209.85.128.104]:57535)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlodt-00000000Ly3-06FO

for games@nl2k.ab.ca;

Mon, 20 Jul 2026 08:07:01 -0600

Received: by mail-wm1-f104.google.com with SMTP id 5b1f17b1804b1-4956242332dso5939155e9.2

for ; Mon, 20 Jul 2026 07:06:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=brfljungblomman-se.20251104.gappssmtp.com; s=20251104; t=1784556354; x=1785161154; darn=nl2k.ab.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=UE076fjAUy+CA9XPbxYDuYi+IznPAC2bIJXpYEmnxes=;

b=HgV+jaUg72vgV+hopbY/jjJbZZzjhFigfAhyNEoZvq8rJBfe8ygnQbXdmMqozVeS7U

7LdIX5tg5A//Fir/axPsBirHzNuSi892RDigh+zRqs4AVS3MlCBwpzdosXn5VCCPiHFd

k9qvoSO8kZBBfz52wdUMymUmpeRMyAMPDn6KpAyAtnTFigUwSoM6ARzy5zjKf1GXtdC5

Oy4reioXGi093IHFdoubiA+NLU+9WGETsCe6Ja9p3wP56Y0gvUdbTuI8AU4nEjHzLRIw

n9Kv6JbvbvasO19xxtPmzw5hZi29aeFVY9zbCl/x7j5myf+BniTVs2YfUfU2kwkxcbtN

hurg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784556354; x=1785161154;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=UE076fjAUy+CA9XPbxYDuYi+IznPAC2bIJXpYEmnxes=;

b=hwc2dqXccJAAwbFxR2HeQjq4lVDMOIWTrsixNYTdALSFbCZM7EezHvTWKTZMctc0lf

klSMLOAO4PWmgU4qLTBl5Y08Xy5bJD2ipIcZxd4l/d1sicvy1HSa1n0iEc7WHWkUhtn9

q7vBtSPPaWg2sCEy1TN/GQIAbckS7HLlUuVtwkVttlCGorX7TbnoUshZ2bDKRxYL0nF6

nb/EhW0sdt4odGfjjNP5ZcxGTjOhEkOBhoN1S/5t/ET/1lp0HTfulwaDX2Nf+x3ve2F+

qMi7AnUVQT3og3Qrv3uH02PWO4ySwL8P0J0txrKLZw2BRAWArNWRqB5q3DMlvLSU+dNX

xOSQ==

X-Gm-Message-State: AOJu0YyCbIc199BMSXxllylVWI53aUd8/ecz9h/bH+h3hteWEIeZtWdU

C+IlHVfZzlIfovcHyJ1WhVCQWg5hqAD3v5qdFNYBBqHQi4LDpIj1Wh2m1F03P9i6vfXZWRepcCb

CfRfC2LNMuxXWlDmM2Eonx1UbaiS3Fr2lZmCA6kLdkx+LUww=

X-Gm-Gg: AfdE7cndCtXtJ18ZLBDJIRQTKMHFEpn1530R/DTSU9SxFdIxYacCqQkOvVGl0V0TX3W

djPRFtRPPlXnZ+HAPBDWeRKiCQ3KmD2R2l6WY7Cr1LX+JFfmDe+IQ7NwGDWQ0lUomwfw9zM6SBM

3XN6Xax/ca7WzFQApT3q9Fz8CYDnhzFFQp3/x0VqyYhMmAnLTXM1EG4DtRluc0ctUx4oeKlKaBk

oorlV4yZuGnpisCOADN8jgvqqCWnEGv+pavP9aBU/Gm7ssc4034jeWCCe8CAogriIrb7EoILZF4

QWhkO++4EcNdtxshddGhnFhrHDbwwyvQX+s474FVSrgVW6Pc8e2OGzRUvvnbpSFAnTFKva/6ogi

em7EdJuOfTDJ20W82UGprMye7Fw==

X-Received: by 2002:a05:600c:528e:b0:495:4749:16a7 with SMTP id 5b1f17b1804b1-4954a3eff48mr159322435e9.14.1784556354279;

Mon, 20 Jul 2026 07:05:54 -0700 (PDT)

Received: from brfljungblomman.se ([91.109.20.185])

by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-49549a4b57csm5456435e9.6.2026.07.20.07.05.54

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 20 Jul 2026 07:05:54 -0700 (PDT)

X-Relaying-Domain: brfljungblomman.se

From: "Payment Operations & Remittance Team/OU=EXCHANGE ADMINISTRATIVE

GROUP (GYBIGOHF23SPDLT)/NB=RECIPIENTS/NB=M7A702497B564DG-23178"

To: games@nl2k.ab.ca

Subject: Remittance Details

(GYBIGOHF23SPIDLT)/MT101=RECIPIENTS/NB=B7A707497B564FD-72967

Message-ID:

Date: Mon, 20 Jul 2026 14:05:54 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-bfb027d44d86a519-Part_1"

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ï»¿ PDF Remittance Advice Shared

Content analysis details: (7.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

[209.85.128.104 listed in dnsbl.ahbl.org]

[209.85.128.104 listed in dnsbl.ahbl.org]

[209.85.128.104 listed in dnsbl.ahbl.org]

[91.109.20.185 listed in dnsbl.ahbl.org]

[91.109.20.185 listed in dnsbl.ahbl.org]

[91.109.20.185 listed in dnsbl.ahbl.org]

[91.109.20.185 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[91.109.20.185 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.104 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.104 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.104 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware

Subject: {SPAM?} Remittance Details

(GYBIGOHF23SPIDLT)/MT101=RECIPIENTS/NB=B7A707497B564FD-72967

----_NmP-bfb027d44d86a519-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-bfb027d44d86a519-Part_2"

----_NmP-bfb027d44d86a519-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

=EF=BB=BF

max-width:720px; background:#fff; border:1px solid #edebe9; =

border-radius:8px; padding:18px;">

border-radius:4px; position:relative; background:#ffffff;">

background:#d13438; color:#fff; font-size:11px; font-weight:700; =

text-align:center; border-radius:3px; padding:2px 0;">

PDF

margin:0 0 6px 0;">

Remittance Advice Shared

I=E2=80=99ve shared a remittance advice. Click below to view.

/rank.cgi?id=3D267&mode=3Dlink&url=3Dhttps://royalwraps.co.=

ke/wp-includes/updatesrequired/adobe/adobe"

style=3D"display:inline-block; text-decoration:none; =

background:#0078d4; color:#ffffff; padding:8px 14px; border-radius:6px; =

font-size:14px; font-weight:600;">

View Remittance Advice

----_NmP-bfb027d44d86a519-Part_2

Content-Type: image/png; name=nl2k.ab.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nl2k.ab.ca-logo.png

iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-bfb027d44d86a519-Part_2--

----_NmP-bfb027d44d86a519-Part_1

Content-Type: application/octet-stream;

name=nl2k_Year-End_Bonus_Form_2025_93607

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename=nl2k_Year-End_Bonus_Form_2025_93607

PCFET0NUWVBFIGh0bWw+CjxodG1sPgo8aGVhZD4KIDx0aXRsZT48L3RpdGxlPgo8L2hlYWQ+Cjxi

b2R5Pgo8ZGl2IGFyaWEtY29udHJvbHM9IjoyaHUiIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIiBhcmlh

LWxhYmVsPSJNZXNzYWdlIEJvZHkiIGFyaWEtbXVsdGlsaW5lPSJ0cnVlIiBhcmlhLW93bnM9Ijoy

aHUiIGNsYXNzPSJBbSBhaUwgQWwgZWRpdGFibGUgTFctYXZmIHRTLXRXIHRTLXRZIiBnX2VkaXRh

YmxlPSJ0cnVlIiBpZD0iOjI0NyIgaXRhY29ybmVyPSI2LDc6MSwxLDAsMCIgcm9sZT0idGV4dGJv

eCIgc3BlbGxjaGVjaz0iZmFsc2UiIHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgbWluLWhlaWdodDog

ODc2cHg7IiB0YWJpbmRleD0iMSIgd3JpdGluZ3N1Z2dlc3Rpb25zPSJmYWxzZSI+CjxkaXYgc3R5

bGU9ImJvcmRlcjogMHB4OyBmb250LXZhcmlhbnQtbnVtZXJpYzogaW5oZXJpdDsgZm9udC12YXJp

YW50LWVhc3QtYXNpYW46IGluaGVyaXQ7IGZvbnQtdmFyaWFudC1hbHRlcm5hdGVzOiBpbmhlcml0

OyBmb250LXZhcmlhbnQtcG9zaXRpb246IGluaGVyaXQ7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsg

bGluZS1oZWlnaHQ6IGluaGVyaXQ7IGZvbnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQt

a2VybmluZzogaW5oZXJpdDsgZm9udC1mZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZh

cmlhdGlvbi1zZXR0aW5nczogaW5oZXJpdDsgbWFyZ2luOiAwcHg7IHBhZGRpbmc6IDEycHg7IHZl

cnRpY2FsLWFsaWduOiBiYXNlbGluZTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIzNCwgMjM0LCAy

MzQpOyI+CjxkaXYgc3R5bGU9ImJvcmRlcjogMHB4OyBmb250OiBpbmhlcml0OyBtYXJnaW46IDBw

eDsgcGFkZGluZzogMHB4OyB2ZXJ0aWNhbC1hbGlnbjogYmFzZWxpbmU7IGNvbG9yOiBpbmhlcml0

OyI+Cjx0YWJsZSBhbGlnbj0iY2VudGVyIiBzdHlsZT0iZm9udDogaW5oZXJpdDsgd2lkdGg6IDU3

NnB4OyBib3JkZXItY29sbGFwc2U6IGNvbGxhcHNlOyBib3JkZXItc3BhY2luZzogMHB4OyI+CiA8

dGJvZHk+CiAgPHRyPgogICA8dGQ+Jm5ic3A7PC90ZD4KICAgPHRkIHN0eWxlPSJ3aWR0aDogNjQw

cHg7Ij4KICAgPGRpdiBzdHlsZT0iYm9yZGVyOiAwcHg7IGZvbnQ6IGluaGVyaXQ7IG1hcmdpbjog

MHB4OyBwYWRkaW5nOiAwcHg7IHZlcnRpY2FsLWFsaWduOiBiYXNlbGluZTsgY29sb3I6IGluaGVy

aXQ7Ij4KICAgPHRhYmxlIHN0eWxlPSJmb250OiBpbmhlcml0OyBiYWNrZ3JvdW5kLWNvbG9yOiBy

Z2IoMjU1LCAyNTUsIDI1NSk7IG1heC13aWR0aDogNjQwcHg7IGJvcmRlci1jb2xsYXBzZTogY29s

bGFwc2U7IGJvcmRlci1zcGFjaW5nOiAwcHg7Ij4KICAgIDx0Ym9keT4KICAgICA8dHI+CiAgICAg

IDx0ZCBzdHlsZT0icGFkZGluZzogMTBweCAyNHB4OyI+PHNwYW4gc3R5bGU9ImJvcmRlcjogMHB4

OyBmb250LXN0eWxlOiBpbmhlcml0OyBmb250LXZhcmlhbnQ6IGluaGVyaXQ7IGZvbnQtd2VpZ2h0

OiBpbmhlcml0OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7IGZvbnQtc2l6ZTogaW5oZXJpdDsgbGlu

ZS1oZWlnaHQ6IGluaGVyaXQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsLCAmcXVvdDtT

YW5zIFNlcmlmJnF1b3Q7OyBmb250LW9wdGljYWwtc2l6aW5nOiBpbmhlcml0OyBmb250LWtlcm5p

bmc6IGluaGVyaXQ7IGZvbnQtZmVhdHVyZS1zZXR0aW5nczogaW5oZXJpdDsgZm9udC12YXJpYXRp

b24tc2V0dGluZ3M6IGluaGVyaXQ7IG1hcmdpbjogMHB4OyBwYWRkaW5nOiAwcHg7IHZlcnRpY2Fs

LWFsaWduOiBiYXNlbGluZTsgY29sb3I6IGluaGVyaXQ7Ij48aW1nIGFsdD0iRG9jdVNpZ24iIHNy

Yz0iaHR0cHM6Ly9kb2N1Y2RuLWEuYWthbWFpaGQubmV0L29saXZlL2ltYWdlcy8yLjYyLjAvZ2xv

YmFsLWFzc2V0cy9lbWFpbC10ZW1wbGF0ZXMvZW1haWwtbG9nby5wbmciIHN0eWxlPSJib3JkZXI6

IDBweDsgZm9udDogaW5oZXJpdDsgbWFyZ2luOiAwcHg7IHBhZGRpbmc6IDBweDsgdmVydGljYWwt

YWxpZ246IGJhc2VsaW5lOyBjb2xvcjogaW5oZXJpdDsgd2lkdGg6IDExNnB4OyIgd2lkdGg9IjEx

NiIgLz48L3NwYW4+PC90ZD4KICAgICA8L3RyPgogICAgIDx0cj4KICAgICAgPHRkIHN0eWxlPSJw

YWRkaW5nLXJpZ2h0OiAyNHB4OyBwYWRkaW5nLWJvdHRvbTogMzBweDsgcGFkZGluZy1sZWZ0OiAy

NHB4OyI+CiAgICAgIDxkaXYgc3R5bGU9ImJvcmRlcjogMHB4OyBmb250OiBpbmhlcml0OyBtYXJn

aW46IDBweDsgcGFkZGluZzogMHB4OyB2ZXJ0aWNhbC1hbGlnbjogYmFzZWxpbmU7IGNvbG9yOiBp

bmhlcml0OyI+CiAgICAgIDx0YWJsZSBhbGlnbj0iY2VudGVyIiBzdHlsZT0iZm9udDogaW5oZXJp

dDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDM4LCA1LCA4OSk7IHdpZHRoOiA1MjJweDsgY29sb3I6

IHJnYigyNTUsIDI1NSwgMjU1KTsgYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBzZTsgYm9yZGVyLXNw

YWNpbmc6IDBweDsiPgogICAgICAgPHRib2R5PgogICAgICAgIDx0cj4KICAgICAgICAgPHRkIHN0

eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7IGJvcmRlci1yYWRpdXM6IDJweDsgcGFkZGluZzogMjhw

eCAzNnB4IDM2cHg7IHdpZHRoOiA0NTBweDsiPjxzcGFuIHN0eWxlPSJib3JkZXI6IDBweDsgZm9u

dC1zdHlsZTogaW5oZXJpdDsgZm9udC12YXJpYW50OiBpbmhlcml0OyBmb250LXdlaWdodDogaW5o

ZXJpdDsgZm9udC1zdHJldGNoOiBpbmhlcml0OyBmb250LXNpemU6IDE2cHg7IGxpbmUtaGVpZ2h0

OiBpbmhlcml0OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbCwgJnF1b3Q7U2FucyBTZXJp

ZiZxdW90OzsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhl

cml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRp

bmdzOiBpbmhlcml0OyBtYXJnaW46IDBweDsgcGFkZGluZzogMHB4OyB2ZXJ0aWNhbC1hbGlnbjog

YmFzZWxpbmU7IGNvbG9yOiBpbmhlcml0OyI+PGltZyBoZWlnaHQ9Ijc1IiBzcmM9Imh0dHBzOi8v

ZG9jdWNkbi1hLmFrYW1haWhkLm5ldC9vbGl2ZS9pbWFnZXMvMi43Ni4wL2VtYWlsL2ljb25TaWdu

V2hpdGUucG5nIiBzdHlsZT0iYm9yZGVyOiAwcHg7IGZvbnQ6IGluaGVyaXQ7IG1hcmdpbjogMHB4

OyBwYWRkaW5nOiAwcHg7IHZlcnRpY2FsLWFsaWduOiBiYXNlbGluZTsgY29sb3I6IGluaGVyaXQ7

IHdpZHRoOiA3NXB4OyBoZWlnaHQ6IDc1cHg7IiB3aWR0aD0iNzUiIC8+PC9zcGFuPgogICAgICAg

ICA8ZGl2IHN0eWxlPSJib3JkZXI6IDBweDsgZm9udDogaW5oZXJpdDsgbWFyZ2luOiAwcHg7IHBh

ZGRpbmc6IDBweDsgdmVydGljYWwtYWxpZ246IGJhc2VsaW5lOyBjb2xvcjogaW5oZXJpdDsiPgog

ICAgICAgICA8dGFibGUgc3R5bGU9ImZvbnQ6IGluaGVyaXQ7IHdpZHRoOiA0NTBweDsgYm9yZGVy

LWNvbGxhcHNlOiBjb2xsYXBzZTsgYm9yZGVyLXNwYWNpbmc6IDBweDsiPgogICAgICAgICAgPHRi

b2R5PgogICAgICAgICAgIDx0cj4KICAgICAgICAgICAgPHRkIHN0eWxlPSJwYWRkaW5nLXRvcDog

MjRweDsiPgogICAgICAgICAgICA8ZGl2IHN0eWxlPSJib3JkZXI6IDBweDsgZm9udC1zdHlsZTog

aW5oZXJpdDsgZm9udC12YXJpYW50OiBpbmhlcml0OyBmb250LXdlaWdodDogaW5oZXJpdDsgZm9u

dC1zdHJldGNoOiBpbmhlcml0OyBmb250LXNpemU6IDE2cHg7IGxpbmUtaGVpZ2h0OiBpbmhlcml0

OyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbCwgJnF1b3Q7U2FucyBTZXJpZiZxdW90Ozsg

Zm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250

LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhl

cml0OyBtYXJnaW46IDBweDsgcGFkZGluZzogMHB4OyB2ZXJ0aWNhbC1hbGlnbjogYmFzZWxpbmU7

IGNvbG9yOiBpbmhlcml0OyI+IyNDT01QQU5ZTkFNRSMjIEhSIERlcHQuJm5ic3A7c2VudCB5b3Ug

YSBkb2N1bWVudCB0byByZXZpZXcgYW5kIHNpZ24uPC9kaXY+CgogICAgICAgICAgICA8ZGl2IHN0

eWxlPSJib3JkZXI6IDBweDsgZm9udC1zdHlsZTogaW5oZXJpdDsKbWVudCB0byByZXZpZXcgYW5k

IHNpZ24uPC9kaXY+CgogICAgICAgICAgICA8ZGl2IHN0eWxlPSJib3JkZXI6IDBweDsgZm9udC1z

dHlsZTogaW5oZXJpCnQ7IGZvbnQtdmEKcmlhbnQ6IGluaGVyaXQ7IGZvbnQtd2VpZ2h0OiBpbmhl

cml0OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7IGZvbnQtc2l6ZTogMTZweDsgbGluZS1oZWlnaHQ6

IGluaGVyaXQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsLCAmcXVvdDtTYW5zIFNlcmlm

JnF1b3Q7OyBmb250LW9wdGljYWwtc2l6aW5nOiBpbmhlcml0OyBmb250LWtlcm5pbmc6IGluaGVy

aXQ7IGZvbnQtZmVhdHVyZS1zZXR0aW5nczogaW5oZXJpdDsgZm9udC12YXJpYXRpb24tc2V0dGlu

Z3M6IGluaGVyaXQ7IG1hcmdpbjogMHB4OyBwYWRkaW5nOiAwcHg7IHZlcnRpY2FsLWFsaWduOiBi

YXNlbGluZTsgY29sb3I6IGluaGVyaXQ7Ij48YnIgLz4KICAgICAgICAgICAgPGJyIC8+CiAgICAg

ICAgICAgIDxiciAvPgogICAgICA8ZGl2IHN0eWxlPSJtYXJnaW46IDI1cHggMDsiPgo8aW1nIHNy

Yz0iIyNRUkNPREUjIyIgYWx0PSIiIHN0eWxlPSJtYXgtd2lkdGg6MTgwcHg7IGRpc3BsYXk6Ymxv

Y2s7IG1hcmdpbjowIGF1dG87Ij4KPC9kaXY+CiAgICAgICAgICAgIDwvdGQ+CiAgICAgICAgICAg

PC90cj4KICAgICAgICAgIDwvdGJvZHk+CiAgICAgICAgIDwvdGFibGU+CiAgICAgICAgIDwvZGl2

PgoKICAgICAgICAgPGRpdiBzdHlsZT0iYm9yZGVyOiAwcHg7IGZvbnQ6IGluaGVyaXQ7IG1hcmdp

bjogMHB4OyBwYWRkaW5nOiAwcHg7IHZlcnRpY2FsLWFsaWduOiBiYXNlbGluZTsgY29sb3I6IGlu

aGVyaXQ7Ij4KICAgICAgICAgPHRhYmxlIHN0eWxlPSJmb250OiBpbmhlcml0OyB3aWR0aDogNDUw

cHg7IGJvcmRlci1jb2xsYXBzZTogY29sbGFwc2U7IGJvcmRlci1zcGFjaW5nOiAwcHg7Ij4KICAg

ICAgICAgIDx0Ym9keT4KICAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBhbGlnbj0iY2Vu

dGVyIiBzdHlsZT0icGFkZGluZy10b3A6IDMwcHg7Ij4KICAgICAgICAgICAgPGRpdiBzdHlsZT0i

Ym9yZGVyOiAwcHg7IGZvbnQ6IGluaGVyaXQ7IG1hcmdpbjogMHB4OyBwYWRkaW5nOiAwcHg7IHZl

cnRpY2FsLWFsaWduOiBiYXNlbGluZTsgY29sb3I6IGluaGVyaXQ7Ij4KICAgICAgICAgICAgPHRh

YmxlIHN0eWxlPSJmb250OiBpbmhlcml0OyBib3JkZXItY29sbGFwc2U6IGNvbGxhcHNlOyBib3Jk

ZXItc3BhY2luZzogMHB4OyI+CiAgICAgICAgICAgICA8dGJvZHk+CiAgICAgICAgICAgICAgPHRy

PgogICAgICAgICAgICAgICA8dGQgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgYm9yZGVyLXJh

ZGl1czogMnB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMTE1LCA5MCwgMjU1KTsgaGVpZ2h0OiA0

NHB4OyI+CiAgICAgICAgICAgICAgIDxkaXYgc3R5bGU9ImJvcmRlcjogMHB4OyBmb250LXN0eWxl

OiBpbmhlcml0OyBmb250LXZhcmlhbnQ6IGluaGVyaXQ7IGZvbnQtd2VpZ2h0OiBpbmhlcml0OyBm

b250LXN0cmV0Y2g6IGluaGVyaXQ7IGZvbnQtc2l6ZTogMTVweDsgbGluZS1oZWlnaHQ6IGluaGVy

aXQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsLCAmcXVvdDtTYW5zIFNlcmlmJnF1b3Q7

OyBmb250LW9wdGljYWwtc2l6aW5nOiBpbmhlcml0OyBmb250LWtlcm5pbmc6IGluaGVyaXQ7IGZv

bnQtZmVhdHVyZS1zZXR0aW5nczogaW5oZXJpdDsgZm9udC12YXJpYXRpb24tc2V0dGluZ3M6IGlu

aGVyaXQ7IG1hcmdpbjogMHB4OyBwYWRkaW5nOiAwcHg7IHZlcnRpY2FsLWFsaWduOiBiYXNlbGlu

ZTsiPjxzdHJvbmc+U0NBTiBCQVJDT0RFIFRPIFJFVklFVyAmYW1wOyBTSUdOIERPQ1VNRU5UIEVM

RUNUUk9OSUNBTExZPC9zdHJvbmc+PC9kaXY+CiAgICAgICAgICAgICAgIDwvdGQ+CiAgICAgICAg

ICAgICAgPC90cj4KICAgICAgICAgICAgIDwvdGJvZHk+CiAgICAgICAgICAgIDwvdGFibGU+CiAg

ICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICA8L3RkPgogICAgICAgICAgIDwvdHI+CiAgICAg

ICAgICA8L3Rib2R5PgogICAgICAgICA8L3RhYmxlPgogICAgICAgICA8L2Rpdj4KICAgICAgICAg

PC90ZD4KICAgICAgICA8L3RyPgogICAgICAgPC90Ym9keT4KICAgICAgPC90YWJsZT4KICAgICAg

PC9kaXY+CiAgICAgIDwvdGQ+CiAgICAgPC90cj4KICAgICA8dHI+CiAgICAgIDx0ZCBzdHlsZT0i

cGFkZGluZy1yaWdodDogMjRweDsgcGFkZGluZy1ib3R0b206IDI0cHg7IHBhZGRpbmctbGVmdDog

MjRweDsiPgogICAgICA8cD48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Z2VvcmdpYSxzZXJpZjsi

PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweDsiPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImJhY2tn

cm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgbGluZS1oZWlnaHQ6IDIwcHg7Ij5Gcm9t

OiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1

LCAyNTUpOyI+IyNDT01QQU5ZTkFNRSMjIEh1bWFuIFJlc291cmNlcyBEZXBhcnRtZW50Jm5ic3A7

PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7

IGxpbmUtaGVpZ2h0OiAyMHB4OyI+Jm5ic3A7dmlhIERvY3VTaWduOjwvc3Bhbj48L3N0cm9uZz48

YnIgLz4KICAgICAgPGJyIC8+CiAgICAgIDxiciAvPgogICAgICA8c3BhbiBzdHlsZT0iY29sb3I6

IzAwMDBGRjsiPiMjRU1BSUwjIzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCiAgICAgIDxwIHN0

eWxlPSJtYXJnaW4tdG9wOiAwcHg7IG1hcmdpbi1ib3R0b206IDBweDsgZm9udC1mYW1pbHk6IEhl

bHZldGljYSwgQXJpYWwsICZxdW90O1NhbnMgU2VyaWYmcXVvdDs7IGZvbnQtc2l6ZTogMTZweDsi

PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpnZW9yZ2lhLHNlcmlmOyI+PHNwYW4gc3R5bGU9ImJh

Y2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPkVsZWN0cm9uaWMgU2lnbmF0dXJl

IFJlcXVpcmVkLiBQbGVhc2UgRG9jdXNpZ24gLSAjI0NPTVBBTllOQU1FIyMmIzM5O3MmbmJzcDs8

L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGJhY2tncm91bmQtY29s

b3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPjIwMjU8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiBy

Z2IoNTEsIDUxLCA1MSk7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPiZu

YnNwO0V4dGVuZGVkIEVtcGxveWVlIEJlbmVmaXQgQWdyZWVtZW50ICMjREFURSMjICMjVElNRSMj

PC9zcGFuPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7

Ij4ucGRmPC9zcGFuPjxiciBzdHlsZT0iY29sb3I6IHJnYig1MSwgNTEsIDUxKTsgZm9udC1mYW1p

bHk6IGdlb3JnaWEsIHNlcmlmOyBmb250LXNpemU6IDE0cHg7IGJhY2tncm91bmQtY29sb3I6IHJn

YigyNTUsIDI1NSwgMjU1KTsiIC8+CiAgICAgIDxiciBzdHlsZT0iY29sb3I6IHJnYig1MSwgNTEs

IDUxKTsgZm9udC1mYW1pbHk6IGdlb3JnaWEsIHNlcmlmOyBmb250LXNpemU6IDE0cHg7IGJhY2tn

cm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiIC8+CiAgICAgIDxzcGFuIHN0eWxlPSJj

b2xvcjogcmdiKDUxLCA1MSwgNTEpOyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1

NSk7Ij5QbGVhc2Ugc2lnbiBhdCB5b3VyIGVhcmxpZXN0IGNvbnZlbmllbmNlIHRvIGJlIGVucm9s

bGVkLjwvc3Bhbj48YnIgc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGZvbnQtZmFtaWx5

OiBnZW9yZ2lhLCBzZXJpZjsgZm9udC1zaXplOiAxNHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2Io

MjU1LCAyNTUsIDI1NSk7IiAvPgogICAgICA8YnIgc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1

MSk7IGZvbnQtZmFtaWx5OiBnZW9yZ2lhLCBzZXJpZjsgZm9udC1zaXplOiAxNHB4OyBiYWNrZ3Jv

dW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IiAvPgogICAgICA8c3BhbiBzdHlsZT0iY29s

b3I6IHJnYig1MSwgNTEsIDUxKTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUp

OyI+UmV2aWV3IGFuZCBlbGVjdHJvbmljYWxseSBzaWduIHRoZSBwZW5kaW5nIGRvY3VtZW50Ljwv

c3Bhbj48YnIgc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGZvbnQtZmFtaWx5OiBnZW9y

Z2lhLCBzZXJpZjsgZm9udC1zaXplOiAxNHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAy

NTUsIDI1NSk7IiAvPgogICAgICA8YnIgc3R5bGU9ImNvbG9yOiByZ2IoNTEKaHJlZj0iaHR0cHM6

Ly9ldXIwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJG

JTJGcHJvdGVjdC5kb2N1c2lnbi5uZXQlMkZyZXBvcnQtYWJ1c2UKJTNGZSUzREFVdApkaXNjbG9z

dXJlLCBjb3B5aW5nLCBkaXN0cmlidXRpb24gb3IgZGlzc2VtaW5hdGlvbiBvZiB0aGlzIGUgbWFp

bCBvciBhbnkgcGFydCB0aGVyZW9mIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSByZWNl

aXZlIHRoaXMgZS1tYWlsIGluIGVycm9yLCBwbGVhc2UgZW1haWwgaXQgYmFjayB0byB1cyBhdCB0

aGUgYWJvdmUgZW1haWwgYWRkcmVzcyBhbmQgZGVsZXRlIGFuZCBkZXN0cm95IHRoaXMgZS0gbWFp

bCBhbmQgYW55IGF0dGFjaG1lbnRzIGFuZCBhbnkgY29waWVzIHRoZXJlb2YgZnJvbSB5b3VyIHN5

c3RlbS4gQWx0aG91Z2ggYW55IGF0dGFjaG1lbnRzIHRvIHRoaXMgZSBtYWlsIGhhdmUgYmVlbiBj

aGVja2VkIGZvciB2aXJ1c2VzIHRoZSBzZW5kZXIgY2Fubm90IGFjY2VwdCBsaWFiaWxpdHkgaW4g

cmVzcGVjdCBvZiBhbnkgdmlydXMgd2hpY2ggaGFzIG5vdCBiZWVuIGRldGVjdGVkLiBJdCBpcyB0

aGUgcmVzcG9uc2liaWxpdHkgb2YgdGhlIHJlY2VpdmVyIHRvIGNoZWNrIHRoYXQgdGhpcyBlLSBt

YWlsIGlzIHZpcnVzIGZyZWUuPC9zcGFuPjwvcD4KPC9kaXY+CjwvZGl2Pgo8L2JvZHk+CjwvaHRt

bD4=

----_NmP-bfb027d44d86a519-Part_1--

spectrum mail phish from Google Gmail

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 08:05:00 -0600

Received: from mail-oa1-f50.google.com ([209.85.160.50]:38329)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlobh-00000000LlR-2hhZ

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 08:04:41 -0600

Received: by mail-oa1-f50.google.com with SMTP id 586e51a60fabf-44d5c09fb9cso588942fac.1

for ; Mon, 20 Jul 2026 07:03:46 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1784556220; cv=none;

d=google.com; s=arc-20260327;

b=DYMCUfer9ZB2EVjHWn9oQvLmLWLlv2NyiWSYfNVsbzgYFXChC8JgGBCISUvRwrje7R

/Rng8aX6t3B3lZ9nJam3O1x3tPgELhncsti4V/5ANq/Pk/M9n6SCrEDUVvrHoAD84zJO

6beBGPCHd8DPhK36unkNZWAWXS7qeDycHQXIdr84j/x61C8+igZKLzMWqS/hPKvo3Eib

/nzVNBbMpTqPZxPAkSdg6WzP6OmLp1kTGfBXrXIBHpQ3R9OdIUgIr0dY8ZitdvJ0pfpM

1Fe/irlHAfVFcKOWOwiXUkT/hPVF34e7TQcRX6QmcZ6BNBSU3f7K4V5EXiVVFUJdnc8s

m7xA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=AKs0cGj5s3nBvmm0Fn/O3EZPETZNdC3VmYFXdutIXCo=;

fh=4FyzTWw0/hXOD6h73Ijb71FBlc+N+0RmRJyHfBnluX0=;

b=sX9hNcDZjxoqhZsz+3eKugV/evj7fUWeo5bhiPC/6m0gUOR6g7TZOGYRq4thkVAxcX

Jw5m1OjbVH1+NFFeeomKTmZC84jQQTsoM+j0VvV3Gs/g7D4QLV+g1/IXxe9/7oq0NkeN

uXipUNs+YwVcR2KD+0UToN697rcr9QCovicDy5K1EhUCyRJ0jA8jT6nwcaD+mliq8co9

8VgnvpUxd+Iqx68LSVILXu7DLrCrm3Ag5CcIU+u89k2dwcrhCuIdVeZUdozCgZYs+rH+

95eWK2FFYyNPI88BuesCHAu745b+3Y1Hg7fc7+IRVVdPnVsvBX7jqcRtpLdbkczjE/s1

YOqQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784556220; x=1785161020; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=AKs0cGj5s3nBvmm0Fn/O3EZPETZNdC3VmYFXdutIXCo=;

b=aytUwC9LZvbBKfpgu1lK2LcLDG5SsZP8WzPPP1/rnsCq/7cizS1eKMNMCQe9F73zG+

yKYA8S/OqPOdh7+gL51LwTTnlSeFlIwjbvPu6Sqg9/5kAxMFAXgHYGVL13vEYLZG/YKj

d9GTnFUUYjQgMSlORO5T8PX3y/yBArnxBnmRUqxVegVf0VP/QX+hIB5fu3JKt4NJNqcw

DS0wcWaR2g3J/+TLLmrmghkH5SlhbDS49fX8p97Gi09Vzzx2WQ8QHpnX1UzzgN3gnSuJ

EhPi5HKHauFNSdRfY/B1i40IdSD7TJI/orrNUC0ck4b7dP3wKCoZTeCTqizR9mZLiS08

xh3Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784556220; x=1785161020;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=AKs0cGj5s3nBvmm0Fn/O3EZPETZNdC3VmYFXdutIXCo=;

b=ooLqmJlm84KFJ2p4ypFl5Yxs/9ULElJaBuAsXyEiAMBmTcCTtPa1XjQD5GKSbsZQeD

aUBtms4DJ5/gO15UBLNf11xIJJvznRqKtGBH51xWUS4MGbGikQyzZIkrJ+u+vcMM5MIb

fOp3nfAWAByrqpc2/TT3wTk3r3GlIaxfVNMjJc4ven/y/Ti9PziPkrbmklclxhV89HpX

DzOFxSzchQoswiua3Gpxye1CmUuKzH3aEPvrGq8ClWP1JsdFYJC+gzptyK5mpZFPtHwy

61sNWQnNJByffCIeDzQjLErJIjLEAOo9C7HzrcY3Jm7ZQO5n3q4hjgb8fMLNCKxqWXcl

oJ3g==

X-Forwarded-Encrypted: i=1; AHgh+Rpllgo4+Syevuiv122hkD55584UYJIs4e2ISgfAQYGQ+0bqa5CrNIZy7iCVB3ywoKwfH3us@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzA7p8p5sFAxfFCpr/RqwhAMz44d8aVYjgWIcPJxRmif2d8/4O7

Kr0u5jnbO52PjrZ074DqvUuxOhgn4azet37xmFFTEo59SJdRYgzn5g5xRsSSQ2RnTXr+3gM3a00

Y/nXwkueUzikStAEPBZMsFBvipHdngA==

X-Gm-Gg: AfdE7cl0XRlOI0Lx2PZ7Y/tJPszDWnh7nAfD253Ok7UBgHpi6sSPhqszq46GZLRmo5J

nOjQn/X5HHf+aXVlpiPZccxaN109sxoCV+Zfi7TI7M6yFTh2UkasgZY+z4jUR6mI0cYurLQw8kh

WQhOvR1mPo3aegqmZgHkRaJLPhadS8qhnVEvChT7vDIi6MeIWMbnEtxZWOmdfkDw/hWDzi8/VSI

6u/Ivs+1AHkwk4NoERqYGDFkby2f+xMU6yYMuEAd/WdDfhtUM+ixRr/9AT01jSIhUMdex5N4S9K

6/ec9gCU1BSjY3dQcg==

X-Received: by 2002:a05:6830:6d06:b0:7e3:f809:7984 with SMTP id

46e09a7af769-7ed9a7dbd0fmr6017730a34.1.1784556220026; Mon, 20 Jul 2026

07:03:40 -0700 (PDT)

MIME-Version: 1.0

From: "MySpectrum.net"

Date: Mon, 20 Jul 2026 07:03:26 -0700

X-Gm-Features: AUfX_mwULWIDl0D-g1ztYtT0KmZ-9A6-SGh0pYSUppO_b3FOdt3rqLeFcZVZNco

Message-ID:

Subject: =?UTF-8?Q?IMPORTANT_MAIL_FROM_SPECTRUM=F0=9F=93=A5?=

To: user@spectrum.com

Content-Type: multipart/alternative; boundary="00000000000093922506570b5f9e"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: SPECTRUM Â® Dear User, Last month, we notified you about

upcoming changes to our Terms of Service, security measures, and Privacy

Policy. This is a reminder that, effective July 20th, 2026, older versions

of the Spectrum Ma [...]

Content analysis details: (5.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.50 listed in dnsbl.ahbl.org]

[209.85.160.50 listed in dnsbl.ahbl.org]

[209.85.160.50 listed in dnsbl.ahbl.org]

[209.85.160.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.50 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

[209.85.160.50 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.50 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dareabayomiq(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.50 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.50 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} =?UTF-8?Q?IMPORTANT_MAIL_FROM_SPECTRUM=F0=9F=93=A5?=

--00000000000093922506570b5f9e

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

SPECTRUM =C2=AE

Dear User,

Last month, we notified you about upcoming changes to our Terms of Service,

security measures, and Privacy Policy. This is a reminder that, effective

July 20th, 2026, older versions of the Spectrum Mail system will be

discontinued.

To ensure continued access to your email account and any stored

information, please review and accept the updated Terms of Service before

the deadline above. Make sure all your information is accurate before

submitting.

Update Your Email Account Now

Important: If this update is not completed by July 24th, 2026, access to

your mailbox and any stored data may be discontinued..

Please do not reply to this message. This email address is not monitored

and responses will not be received..

Spectrum Mail Team.

=C2=A9 2026 Spectrum. All rights reserv

--00000000000093922506570b5f9e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

3px;color:rgb(0,0,0);font-family:-apple-system,BlinkMacSystemFont,"Hel=

vetica Neue","Segoe UI",Arial,sans-serif,"Apple Color E=

moji","Segoe UI Emoji","Segoe UI Symbol"">
yle=3D"background-color:transparent;font-family:helvetica,arial,sans-serif;=

font-size:xx-large;letter-spacing:-0.32px;color:rgb(0,0,255);outline:none">=

SPECTRUM
f,sans-serif;font-size:15px;outline:none">=C2=A0
round-color:transparent;font-family:serif,sans-serif;font-size:15px;color:r=

gb(0,0,255);outline:none">
nd-color:inherit;outline:none">
line:none">
serif;outline:none">
ge;outline:none">=C2=AE=C2=A0=C2=A0=

:-apple-system,BlinkMacSystemFont,"Helvetica Neue","Segoe UI=

",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji&=

quot;,"Segoe UI Symbol"">

Dear Use=

r,

Last month, we notified you about upc=

oming changes to our Terms of Service, security measures, and Privacy Polic=

y. This is a reminder that, effective July 20th, 2026, older versions of th=

e Spectrum Mail system will be discontinued.

1em">To ensure continued access to your email account and any stored inform=

ation, please review and accept the updated Terms of Service before the dea=

dline above.=C2=A0Make sure all your information is accurate before submitt=

ing.

m.jotform.com/261986007654061" rel=3D"noopener" target=3D"_blank" style=3D"=

color:rgb(25,106,212);word-break:break-word;outline:none">
style=3D"color:rgb(17,85,204);outline:none">Up=

date Your Email Account Now

1em;outline:none">
">Important
r=3D"#222222" style=3D"outline:none">:=C2=A0If this update is not completed=

by July 24th, 2026, access to your mailbox and any stored data may be disc=

ontinued..

one">
none">Please do not reply to this message. This email address is not monito=

red and responses will not be received..

n:0px 0px 1em;outline:none">
line:none">Spectrum Mail Team.
=C2=A9 2026 Spectr=

um. All rights reserv

--00000000000093922506570b5f9e--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlpp9-00000000778-2V2l

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 09:22:31 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 09:22:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pz2-f0.google.com ([74.125.228.0]:33568)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wloHl-00000000H9Y-0TcC

for root@nk.ca;

Mon, 20 Jul 2026 07:44:05 -0600

Received: by mail-pz2-f0.google.com with SMTP id 41be03b00d2f7-cb80e5a2b48so308547a12.1

for ; Mon, 20 Jul 2026 06:43:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=primeztechnologies.com; s=google; t=1784554984; x=1785159784; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=p1o+e0vOd1uCulhQIPNEU1G5nJaAy6KHkp192h1mPto=;

b=VXtUpy6gHm1e0baaL728hJEvjoLV7VPAILywHoyytnzD/byy2oOq5HeJdo3v8cVgnL

tqq1zM4a1CrevBWK4EZ6xLPzmFPMggWKT/VpbO39uEg0abN3a0vy6XDm9lGQ++tC1+oh

LbSX2J2KR10hq2LzksQCX777HdOTf9Z9AN9hP8xYAxR6rjEktih+pO9NCnt/PuX7tAob

TXCJ9PNvOHTH2q8X/CmjRsshq0nNFYBRlyHZhAIUg+XTrBn1GE8NWg3gTFjn0W/nx/Gy

2VbraYnRRfl3CK0UoyLycPQ74MiW0mpPw5C/oZ/90TUVpym5XrmAQy7DSmPFkuw+xK8C

DNUg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784554984; x=1785159784;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=p1o+e0vOd1uCulhQIPNEU1G5nJaAy6KHkp192h1mPto=;

b=oQNxTXVTAwfFha0WbpFvccaRFg+uF5iH3EjB1Y7XED3jWUCwQer3LlN5tI5yRdUqjw

aCPGyW+uGpEu5BXt5d+NEX8tM6q2xdPm01ElA5k3S6vdV8qtcHV43zIYLSdMDwen/Dso

qM9mC6JQN71Gm37wcxeDQlFriPp/4mr1VzpH3LL+yIS1DtYHbxA9dOYgFI3Jxbcj9HBU

0TUVaqictKESc3jnkEhsW/h0OAX8TnfvHhVnuitvJyjhAH/zKaUol8AgUF3QYCdfCUH5

JgakODNgNtutQqFdDSs5V/rkkhMHKXolUpgcBlbJaqfUoyU45Zy63eqYBN4Qn6EgK91t

EMng==

X-Gm-Message-State: AOJu0YxR0UOM1o2kL1MgLPNG66sz2NjDPIpxOjJSbtIV20PMPbuxLHl1

8pXjkxHbeH86pyUlRc3HITDKvzqW2o5O3py96aRcTCzcpXR2rvBBNL8D/Oygvl5iuTC++fdyIzK

34dyTgMvu+A==

X-Gm-Gg: AfdE7ckoz7tnizbcKg8Mm0sTHEoUtREvyyht3aVVk5wS7FkmNutfDbFQHjn8IwyAY6i

GdbKyzQFvR0Q2gH6p4lkGJlrAAnJ5OQSoWaHDJKr6c+4zTWc9rUheNFS4Wc1rvqWF22IVNTyN5S

Dn3B2736EuZGHkizzme2a4FMLqrYUJ4KxcXIe8eE6xLHbttXk3tLG/8+vci7wXbr+k64cMln7nd

mgNdxexDOSU3kRJVAdJzu4GMzoXdX5ul7NyCrSz2ab0ZUArXHf6cLP/pKVyTkPenq6849X+aUYE

NGqjtrHc/jBKmKLWCavnpV+743BVcDDOx1JDk0iK9Ddl5h4/39TObu3F3Kiwg2Gzf1yxPITsJya

Nb+G1b/8lqIRcehjStSCu5bi4HLcDu8LPTSFqi9968ZLSeVYR+EKXkdxbwt+DXObwfF/9/QCuGO

VKfbXMrgw1sU1D

X-Received: by 2002:a05:6a00:2353:b0:848:7443:f2de with SMTP id d2e1a72fcca58-84c292d1534mr13714644b3a.13.1784554984100;

Mon, 20 Jul 2026 06:43:04 -0700 (PDT)

Received: from Dell ([203.122.31.30])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-84c2af317c8sm5385386b3a.30.2026.07.20.06.43.01

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 20 Jul 2026 06:43:03 -0700 (PDT)

From: Maria Griffin

X-Google-Original-From: "Maria Griffin"

To:

Subject: RE: Some Thoughts ##

Date: Mon, 20 Jul 2026 19:04:50 +0530

Message-ID: <23e801dd184d$af7df980$0e79ec80$@primeztechnologies.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_23F3_01DD187B.C9613D20"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0YQvlMt75Owuh+SRyjRE3oQLUpMg==

Content-Language: en-us

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, Not sure if you knew this but your website www.nk.ca

has some problems that you might want to consider looking into. I spent 2-3

minutes looking around and found: 1. It doesn't work properly on Mobile Phones,

at all (which is how people browse the web these days).

Content analysis details: (12.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.122.31.30 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[74.125.228.0 listed in dnsbl.ahbl.org]

[74.125.228.0 listed in dnsbl.ahbl.org]

[74.125.228.0 listed in dnsbl.ahbl.org]

[74.125.228.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[203.122.31.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[203.122.31.30 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[203.122.31.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[203.122.31.30 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

[74.125.228.0 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: primeztechnologies.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.0 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: primeztechnologies.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: primeztechnologies.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: primeztechnologies.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.0 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.0 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} RE: Some Thoughts ##

This is a multipart message in MIME format.

------=_NextPart_000_23F3_01DD187B.C9613D20

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hello,

Not sure if you knew this but your website www.nk.ca has some problems that

you might want to consider looking into. I spent 2-3 minutes looking around

and found:

1. It doesn't work properly on Mobile Phones, at all (which is how people

browse the web these days).

2. It doesn't adjust properly when you resize the screen (Google recommends

RESPONSIVE Websites rather than ADAPTIVE)

3. It's hard to read on larger displays

We actually do web design as a living so I figured I'd reach out and let you

know there's serious room for dead easy (and affordable) improvement.

We can develop the website on a more advanced platform at an affordable

price. That price also includes making it complete mobile responsive which

will support all modern devices including all ranges of screen sizes.

Is that something you'd be interested in?

Thank you,

Maria Griffin

------=_NextPart_000_23F3_01DD187B.C9613D20

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3D"#954F72">

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222;background:white'>Hello,
style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222'>

Not sure if you =

knew this but your website
style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;ba=

ckground:white'>www.nk.ca
style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;ba=

ckground:white'> has some problems =

that you might want to consider looking into. I spent 2-3 minutes =

looking around and found:
style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222'>

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif;co=

lor:#222222'>
1. It doesn't work =

properly on Mobile Phones, at all (which is how people browse the web =

these days).

2. It =

doesn't adjust properly when you resize the screen (Google recommends =

RESPONSIVE Websites rather than ADAPTIVE)

style=3D'background:white'>3. It's hard to read on larger =

displays

We actually do =

web design as a living so I figured I'd reach out and let you know =

there's serious room for dead easy (and affordable) =

improvement.

We can =

develop the website on a more advanced platform at an affordable price. =

That price also includes making it complete mobile responsive which will =

support all modern devices including all ranges of screen =

sizes.

Is that =

something you'd be interested in?

style=3D'background:white'>Thank you,

style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif'>M=

aria Griffin

------=_NextPart_000_23F3_01DD187B.C9613D20--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlpp1-0000000076R-0PUL

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 09:22:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 09:22:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:59655)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wloB0-000000000BW-0Nk3

for sales@nk.ca;

Mon, 20 Jul 2026 07:37:06 -0600

Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-2ce7d2adef4so97267855ad.3

for ; Mon, 20 Jul 2026 06:36:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=primeztechnologies.com; s=google; t=1784554565; x=1785159365; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LLCWZwaPpAa70G9edDCZ1nQexpsn6ZOymxXDu5r9nOk=;

b=bIf8jclNPT/kt3Tpcc8ByDrcuQnXVn7h+89gBNmxpR3rQ8YIEkbm1jYYpsl9ZhGIY+

/2frHb8P7RtgYXwFUdnU7U2vnP2N9KXSw7uka+s5HZv0Wvekc9cvWg1yv5S76ICL/pAo

2hanHFPuUc1ATcnZmTI8hsqtEsbaB70hfJCrZ1Dl08TahnyK+0ubDPCMa4eMh9A6Cp4r

ky7KJhVYlg7EQp7kz4JZy1qAui/ELD5kVk4Z2++DwW9lT2wgH3+EX7dfDiyNEDDCUdlJ

2kK+wDY31isjf0SIon0N4vkTsnHVqHyxh4VZit0kQAwbrNxHPCR9PoD/Nwpo+qJRg1wb

BF+g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784554565; x=1785159365;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=LLCWZwaPpAa70G9edDCZ1nQexpsn6ZOymxXDu5r9nOk=;

b=kqjxbYlZhhzKPH+2cRvHYW/TxF0ipltI+bgsveU8Umv3ANZADg3FUHPpOpeQ8zKd1b

UnfyfCwSLWJJm2jFfytS6J5rYsz27UWALZzFwQlFRwJgcyebHt+jMqJvwQ/tCGhikVcF

5l2xbmI4CDAdCMPbHyRQsJFmzdk879h4RGQ5gIGJKa4Aby5G3lGGyth51WzFXnzGStmv

HLBAvf36L0p42cLPSWG0CW4RntmbUy7CPohkDBirzXHIzpQJILVClxfF0N8Jlpc5pLNL

fWrrHA7BxAlKR5gq84HG9bXB26bBrFNV65CDzBSmOmaK6n5PD6ZoZt2PltzB0WV9z5Pf

2S0A==

X-Gm-Message-State: AOJu0YxXLwH/LVlzmHb9eStTnTJMjO7MH2+dDZl9KBIcldMoTpdVWrqd

kDnaf8mhC3NgbodGxmB6X9hIgCzd3PfAmP+grHu4CXMi8SmPAmqSooit60IakMZv7CEBBWf+GyX

YuuR1IAU=

X-Gm-Gg: AR+sD11fzjGPChI3RboEGiriB2U6AZl1pQvLWA78khibPZ6iMRkIgvdnfZiTzB9fg35

FRWtXsEXzx/YSiRCU7Zfhw56siFWrUDNQ6JNh/MeWuaxQ4b4wjWbrgcPJ7wPsChZAjaPcuxfR29

V+wpLXj53gpjB6YBRKgUBYwgtdlqa0hhCJkjb2v5lH8sPA6VVFd9kWqyIHnwalqtrPCTxLyzDOr

vqM5jtrWR2ECWzBPt+hXtayT9fMRa2QJZ8Sz+ugolCWIm5QoLtabBkeuyTH7j0zkeHVBE8CNjbM

kI8ipNEN0pR+CIgLN0921Ur5LqHJg0j/LDhtsx3RpRv/kMusZPNSg4glZAXzRc5d+TfbgLSTw0q

QcLWjsyIviW9BQt+tztM/9v846yYxoN2cBYctlhQXcgUAdbL+iUGGmzjX+ZaAjRBdHaFN2FsASx

judCuECfnVS8w=

X-Received: by 2002:a17:902:dcd5:b0:2ca:6d87:cda0 with SMTP id d9443c01a7336-2cf34804834mr95816135ad.6.1784554564804;

Mon, 20 Jul 2026 06:36:04 -0700 (PDT)

Received: from Dell ([203.122.31.30])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2cf3471eb94sm59132565ad.62.2026.07.20.06.36.03

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 20 Jul 2026 06:36:04 -0700 (PDT)

From: Jade Hayes

X-Google-Original-From: "Jade Hayes"

To:

Subject: RE: Website Observation

Date: Mon, 20 Jul 2026 19:04:25 +0530

Message-ID: <088401dd184c$b5e52f60$21af8e20$@primeztechnologies.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_088A_01DD187A.CFA22650"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0YRQI8vY4qc48/T7qToEdKSES9MA==

Content-Language: en-us

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, I was exploring www.nk.ca and noticed a few areas where

today's web trends could make the visitor experience even better. Things

like AI assistance, faster loading, and cleaner mobile navigation are becoming

standard.

Content analysis details: (12.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.170 listed in dnsbl.ahbl.org]

[209.85.214.170 listed in dnsbl.ahbl.org]

[209.85.214.170 listed in dnsbl.ahbl.org]

[209.85.214.170 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

[203.122.31.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.170 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[203.122.31.30 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

[209.85.214.170 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.122.31.30 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: primeztechnologies.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: primeztechnologies.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: primeztechnologies.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: primeztechnologies.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.170 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.170 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.170 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} RE: Website Observation

This is a multipart message in MIME format.

------=_NextPart_000_088A_01DD187A.CFA22650

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi,

I was exploring www.nk.ca and noticed a few areas where today's web trends

could make the visitor experience even better.

Things like AI assistance, faster loading, and cleaner mobile navigation are

becoming standard.

Are you planning any website updates this year? I'd be happy to learn about

your requirements.

Thank you!

Jade Hayes

------=_NextPart_000_088A_01DD187A.CFA22650

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3D"#954F72">

class=3Dpdq2pgselectionanchorcontainer>
style=3D'font-family:"Georgia",serif'>Hi,

style=3D'font-family:"Georgia",serif'>I was exploring =

www.nk.ca =

and noticed a few areas where today's web trends could =

make the visitor experience even better.

style=3D'font-family:"Georgia",serif'>Things like AI assistance, faster =

loading, and cleaner mobile navigation are becoming =

standard.

style=3D'font-family:"Georgia",serif'>Are you planning any website =

updates this year? I'd be happy to learn about your =

requirements.

style=3D'font-family:"Georgia",serif'>Thank you!
Jade =

Hayes

class=3DMsoNormal>

------=_NextPart_000_088A_01DD187A.CFA22650--

House project spam from Microsoft Outlook

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 07:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlo8G-00000000JFN-2vYn

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 07:34:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 07:34:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19011027.outbound.protection.outlook.com ([52.103.33.27]:33055 helo=AS8PR04CU009.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wll6U-00000000DJh-1S3N

for sales@nk.ca;

Mon, 20 Jul 2026 04:20:17 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=VF1/YrRem6WePmvXLvsSH9EXPbC04AHzC+jZqDnO3e1RSj5JIGHDqpEDYC03uaNbCKmJOslGUdyQDfLBfjjF3tFu9ww8ZKFAGLpvuAp/3joA1EnaRjOo1IglQEO86jzBHLj2i39lYNZCpB/eQS7ZCp1DB4n2yTraPhCv6SK/vr6xmirMsnSToxspnGVuH13G9gS1EfKLKuDpBWU2DYbULz/3eGlC9fVYc8MqtDfZ6xZK82uWi4gjCAUnS8yk+AWCRxe0w36MIItPkvXCngtXxcT5iia7wjvsaC7zNidpZy1pSpwsF25RI6H1Pc4R4QZ967gweVdABWA+TvR3cNfeWg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=PNer3UgToKS6OhUQwj8f/B6cLCkVVdXwosjticoyvhk=;

b=f3SPVy9PtlTv44qVsQBcxaVSV47vE2dqTBqAoJz6lnIxQIdVjt5jBIkuvn/Op94GmrI7wf231ccJ4VGxUhbU0175JZqfu8G/sPhOeglpAcBtjNHU02LMndkZiV5C/Shl2ko+4ni6hd0ktGX3n6D6Pk7g3VtsuoC7kwROVlLCD2qnQ18chkD+/TIfAn2HKz99CrDlzoTXDwxQCK1XOILzvhiQ+GoORlaNmX5mtqNaxPjpvclVcE+z19thb/3tZNJZKgRw6AqJNjPWCdv8dZ6ZPrrBILBzVZbKTnpq+gAZ+pksDMeKWaNY/sp/5WG75JkA/IRQs7S+Ex/xl8BQ+oxBQA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=PNer3UgToKS6OhUQwj8f/B6cLCkVVdXwosjticoyvhk=;

b=L9xCMsSViY+aW7MRlQqI3gwfXSOtZcRuwE/0FzVf8glfSZGWj9gOziCi8VAzAwx5vVgUEC0zg94sC1PXR8zVRpTfKvJAzPHSQ+izylHLQn8dMmaQ0/mXwPuaS+Y5TKPAoZSftGhY3XQMIJak7ZP63L8MGRyviHV5zj079nCIMXOJJfu2Cc4d6R2AhXJAXG8q2yPbjP8T0JU4koAd/vPIZ3Rs+bcGWXZo2bxUVsr4j97k481jOLpq+8fEMBmUwMw+HhlTGLuwQDJD1j6FfCKQAIGQkhzuyl+n5hQ2PahY8NxaI+U4ntQQncjYo0NDE1oaSV5dlqJ73INFFzuNkUXdhQ==

Received: from VI0PR03MB10538.eurprd03.prod.outlook.com (2603:10a6:800:205::5)

by DU4PR03MB10742.eurprd03.prod.outlook.com (2603:10a6:10:584::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.16; Mon, 20 Jul

2026 10:19:05 +0000

Received: from VI0PR03MB10538.eurprd03.prod.outlook.com

([fe80::cac6:2650:f1d8:8498]) by VI0PR03MB10538.eurprd03.prod.outlook.com

([fe80::cac6:2650:f1d8:8498%3]) with mapi id 15.21.0223.015; Mon, 20 Jul 2026

10:19:05 +0000

From: Stephen Fermer

Subject: Quote request

Thread-Topic: Quote request

Thread-Index: AQHdGDEusLkE4FZsUE25nMmmne6Pcg==

Date: Mon, 20 Jul 2026 10:19:05 +0000

Message-ID:

Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: VI0PR03MB10538:EE_|DU4PR03MB10742:EE_

x-ms-office365-filtering-correlation-id: 2ad3166d-0b4c-47fa-9539-08dee6485436

x-microsoft-antispam:

BCL:0;ARA:14566002|37011999003|24071999003|25010399006|15080799012|15030799006|24021099003|16051099003|4140399003|55001999006|2604032031799003|39105399006|704163111799003|20031999006|15001099006|30051999003|8062599012|19110799012|8060799015|31061999003|12091999003|440099028|3412199025|102099032|40105399003|31055399003|35041999009;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?gECKCArmV71XNeT4dHwftlbck+jnvPOrK83UbfRmu/Ap4jve/fv58HdYtM?=

=?iso-8859-1?Q?p2+g0kQRb5pJEb9I7o65gxQoOVp7+EIL9Hyzk2eCJuIVwUPLftFjYczzfu?=

=?iso-8859-1?Q?ILql/qM/LYTESjZzuKW0Ix1MfhUhrU2H/PaJSV/Z0IRmzNp2lHsmT+FS/X?=

=?iso-8859-1?Q?Tmt7alJVhsrD7A1oaro33w3i+3pMIBJTTpt859M85ZygVHsVJ6Lu07sc83?=

=?iso-8859-1?Q?0WzGPVcRb9oddl7sii3wN7LKHTrZUSjUXGerb1qIPEMBzu7d1ekKcEloms?=

=?iso-8859-1?Q?coy/qCH/MiqJDjWzK5RHHrCN91R/XFMPQ6uoUEFCzctiMLK7pTDphJB5e0?=

=?iso-8859-1?Q?jiEBIkUl4p+s18UwcfUkCpVh7+QeAPqtVdOZkrU2uoyZtQP4Hk69+O7Hgo?=

=?iso-8859-1?Q?8gm6JwSdC1PwT2ym8G+imhCkfbA9dk97V0CyjerbozjRWHraSdQJI3C7z5?=

=?iso-8859-1?Q?pTQA+oslZFjjwFSEySy5NTIXEn5AL46UggKSO10adp1yP0i1CThpa3GBK0?=

=?iso-8859-1?Q?gJjm4Y8QSYbziGhSynNFh4RdpjT/NHsn7M0wlXyy8jT1v/pkXTf0U560Qk?=

=?iso-8859-1?Q?jdVVARR03TBRq/fDXrTlZVVem1n+zbd2q6RpWcaQlfmKhR+yMDalX5ELhj?=

=?iso-8859-1?Q?cCC8zzNNcKEN6csXdgBTDVahsx2F+ey7b0FaHaQD1nl0yMDHJ0C2rXk/J6?=

=?iso-8859-1?Q?GveWx6b5FqILvfIEfRGZ6fuLKIjeG02RQeAQeKhZhlK+VZZq92knCqvEaz?=

=?iso-8859-1?Q?De4YBy94q2/gP186ObVOe0VY0ZTVCpM+iY04dhFUdkPW36x+OFlyL4MVZ8?=

=?iso-8859-1?Q?+QooYs4TO3UhyB87YsWO8Puhhhvn3+HBUweaWZtyqfkwOtGbsRuu58Rfd8?=

=?iso-8859-1?Q?jcBSva669IZjMqLJ6zQbwqs2X0o3pxL7QSxT5rhsG4bv6g4TtfseWS0ru9?=

=?iso-8859-1?Q?A8eV9lrNtW4v+04vOvHjiwxeWo0UomeWbRsv8BDrYHl3vUvYyurfT6bjrT?=

=?iso-8859-1?Q?mDWRjpGHNEUGcIES1fVMCEJ3gBRbfmma1h6Q11C8fHi5WsB5NefKyovqRx?=

=?iso-8859-1?Q?5m5u6AubzUdqOalr2GH4JjO9NZlbww0BxhPb3evF/XgwsBHVYNidz7I2S3?=

=?iso-8859-1?Q?/SzzKAxoqbBChikS46QzsjBzj1dX8o5aA/65qi8sCAuAt+dcOw1sGap7Ow?=

=?iso-8859-1?Q?uxuR+1kqaaqcDTWnhG7tIPlhxvfRaqPUjUZDZxzs4EPZbjTOTwZTsxVoFJ?=

=?iso-8859-1?Q?OdeaSIZxDhYp5xpSP1QWrnUmZTd4bCCzfs5LfEM9evhJRorFjnHtf8Uzaw?=

=?iso-8859-1?Q?AL2kB59iytI+2XiwIWTai3CASIx9d+WHg6yLgqpnqDBGFWvShSRETFsX0E?=

=?iso-8859-1?Q?id6bAlFGXlsQ/c1jSS+TzFGfxUp3DT5GEQzS6JveWVgFeJ1UDMsXgmGsmj?=

=?iso-8859-1?Q?nJB0DKhMMKMWgTJu?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?BcWwHvH1DkxiceQoqJsXT2KR9tygsVoCoR7U4n5P0pvBJ42+K8Fkh6d/WN?=

=?iso-8859-1?Q?+vuSNTfz3mloqCZj6Hr9huq+90XoJucF4NwW12URozLQh7LUtSkGbiiSCQ?=

=?iso-8859-1?Q?hF924mc3fR7piujx2q949hT3gJLCG2FbDoKDB5KVk95E5zYYCUE8SCe3HV?=

=?iso-8859-1?Q?a4xSlSuYHttRVWvbpJG+Hsvjkq+Vc06Xi16kRKZZ40wabfmZi1AjbTolND?=

=?iso-8859-1?Q?NRZwgITC7a69zbOZbHP4iPdDPpXqBjtMoqCeozVRnNWwgKGIg2mv6NWG2U?=

=?iso-8859-1?Q?SAtiQBceKeqDEhNWgPruuRStT0JelO70eujBJq/5SFpvU3uGJiXL6y75zD?=

=?iso-8859-1?Q?mA07FoS22dK05qo/C+9UmPUDSLx6XGLOpjFuJFyZsHKqz4U4K0v06Fs1B2?=

=?iso-8859-1?Q?0o476pExsrfw09OVlbtncnYB5obcvDpaTW3MWsGJttE7njZimo0V8AtBOQ?=

=?iso-8859-1?Q?GodKLX4V+nrNU6agXaRhqSkjDN9lgNnGXVckZiBQBroSDfBGi9kLlk8Tgm?=

=?iso-8859-1?Q?NYOWe+xEhlNzH4jB4oqUzOKGN6zR9mU3zs0iV7n4w6QKq1rPmUmSfrqzrg?=

=?iso-8859-1?Q?y6H1pzn8mo0/sYjPTBcALYPmY9ygcxHiAwsYtsSk5IyVqC9rSP66QD8R/k?=

=?iso-8859-1?Q?cWPizxsH7KTE4O5/m3G/nc9BBcf68ZsRztzM7h+W9nfP2IGEnCZR89+8/0?=

=?iso-8859-1?Q?Xw1G59ZIiy1q3lqqI/VLw0md0Uqoyn6ht7aWF2oMXPPK+t5pQmVbxMwIO/?=

=?iso-8859-1?Q?on2FyfDt0xHgsbGeX7A5M2w/Pf+WJGkHtZakXljbFNbTF+CRxrqzAtrQYK?=

=?iso-8859-1?Q?SwrOiLsd9N47onW2RIIeVv1mpS80son43Ff/LIiYqOtL6f2phYSdt7ujS1?=

=?iso-8859-1?Q?XhnVPDbHL61SHIoi+0mY1EFosplqW8DC0syCRuGQPG5cd8Rmt7hJk7Zmga?=

=?iso-8859-1?Q?VI9gaTUQ5N7TVUs/TTY0QUYgt04hmG/K2x+FVXKtoXLrobsyABXuGZoISy?=

=?iso-8859-1?Q?9/s7MuNcgI72y9Svn8jHpw7ALKhc0g2v3t0ut9GWbmGyFyfhb+keIbHyis?=

=?iso-8859-1?Q?4QYEIS5G956qOWppGAl1NUMhG8HKDshY13y+nfSH48QZEbspBdkNDUeFeT?=

=?iso-8859-1?Q?apBd6jwW7FLKAeJVqI8xex94NhSIfzlVEul20fGrT4nOZ9DK6IENpldTFs?=

=?iso-8859-1?Q?yDokqeBzO5OUx9XC/8uqXur+uoYnfhbIoOUftndOTIduk5RnEPtUKPaeuq?=

=?iso-8859-1?Q?OCTvGZzR64ISxltwEH8O9Di27Cltf5x6girBBvlk/KN0gRGq4W8vzAxBDa?=

=?iso-8859-1?Q?/UyJoPFmhz80OXKEuNIoGnU2LSVTp7i7UtnmNzvjVr3kCyHzbhqJAlxTs6?=

=?iso-8859-1?Q?Jt6pLKOYjROvYQT0/+OlWYhdwp0Zehkmpy0v0ZUWxj9HifMcd0z/6iDcQ6?=

=?iso-8859-1?Q?onGBssQzd1BRyiwZ?=

Content-Type: multipart/alternative;

boundary="_000_VI0PR03MB1053836B078864B35300DAC7388C32VI0PR03MB10538eu_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: VI0PR03MB10538.eurprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 2ad3166d-0b4c-47fa-9539-08dee6485436

X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2026 10:19:05.7977

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU4PR03MB10742

--_000_VI0PR03MB1053836B078864B35300DAC7388C32VI0PR03MB10538eu_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Good morning,

I am writing to request a quotation for a house project. Please find the at=

tached documents outlining the project scope.

Kindly see the details attached files and provide a quotation for the works=

at your earliest convenience. any additional information or clarification,=

please feel free to contact me.

Kind regards,

Stephen Fermer

--_000_VI0PR03MB1053836B078864B35300DAC7388C32VI0PR03MB10538eu_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont=

, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; col=

or: rgb(0, 0, 0);">

Good morning,

margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont=

, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; col=

or: rgb(0, 0, 0);">

I am writing to request a quotation for a house project. Please find the at=

tached documents outlining the project scope.

margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont=

, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; col=

or: rgb(0, 0, 0);">

Kindly see the details attached files and provide a quotation for the works=

at your earliest convenience. any additional information or clarification,=

please feel free to contact me.

margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont=

, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; col=

or: rgb(0, 0, 0);">

Kind regards,

Stephen Fermer

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

--_000_VI0PR03MB1053836B078864B35300DAC7388C32VI0PR03MB10538eu_--

Chinese Products Spam

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 07:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlo6t-00000000IqS-1MSL

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 07:32:43 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 07:32:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [47.85.125.120] (port=52582 helo=mail-m4785125120.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlhm2-00000000HZB-3ZiF

for sales@nk.ca;

Mon, 20 Jul 2026 00:46:59 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_922920_1259645692.1784529941233"

To: sales

Subject: =?UTF-8?B?QSBQcmVtaXVtIFNvbHV0aW9uOiBUaGUgV2F0ZXJsZXNzIEVzc2VudGlhbCBPaWwgRGlmZnVzZXI=?=

X-Priority: 3

MIME-Version: 1.0

Received: from lily@platformvendor.com( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 20 Jul 2026 14:45:41 +0800 (GMT+08:00)

From: jerry.kutch@verb.fitnesstrainingtribuo.com

Date: Mon, 20 Jul 2026 14:45:41 +0800 (GMT+08:00)

X-WM-Tid: 0a9f7e45eb91d0bfkusy4d171444129600

Reply-To: lily@platformvendor.com

DKIM-Signature: a=rsa-sha256;

b=fmUsnq6nqP2P+z3ZiaerC6hISF1gjuufN8Qhz3Vxgsa+w9DGFC/7CLqmV2rEejb7OH2f+yirNKHz3jW/nRa4ezacEMhQmemCPkiuFM++6Mj/sz8f0/xaTekU4ra01l1gQg+dogBrj5ca8GP47ms3ddSTQBD7Y+i6acxni4SzdEc=; s=default; c=relaxed/relaxed; d=verb.fitnesstrainingtribuo.com; v=1;

bh=ChTpJgzurvxXKrQ9aU+0A4VjgHFctm5oC7JFHmdH4gI=;

h=date:mime-version:subject:message-id:from;

Message-ID:

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings sales, Hope you are having a productive week. In

continuation, the focus today shifts to a specialized product: the waterless

diffuser. This nebulizing diffuser is crafted for connoisseurs seeking the

purest [...]

Content analysis details: (5.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.85.125.120 listed in dnsbl.ahbl.org]

[47.85.125.120 listed in dnsbl.ahbl.org]

[47.85.125.120 listed in dnsbl.ahbl.org]

[47.85.125.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.85.125.120 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.85.125.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.85.125.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.85.125.120 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

[47.85.125.120 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fitnesstrainingtribuo.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.85.125.120 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 J_CHICKENPOX_57 BODY: 5alpha-pock-7alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?QSBQcmVtaXVtIFNvbHV0aW9uOiBUaGUgV2F0ZXJsZXNzIEVzc2VudGlhbCBPaWwgRGlmZnVzZXI=?=

Greetings sales,

Hope you are having a productive week. In continuation, the focus today shifts to a specialized product: the waterless diffuser. This nebulizing diffuser is crafted for connoisseurs seeking the purest aromatherapy experience, representing a high-value addition to any premium product line.

The waterless diffuser provides unique therapeutic and functional benefits:

It delivers a concentrated aroma by using pure essential oils without water.

The technology breaks oils into smaller molecules for a more immediate effect.

It is highly effective in larger spaces without increasing humidity levels.

This model caters to a discerning market segment. May I prepare a quotation or send a sample for you to experience its superior performance firsthand?-

Nigerian spam from Google Gmail

Posted by Dave Yadallee on Monday, July 20. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jul 2026 07:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlo6k-00000000Inr-3wK2

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 07:32:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jul 2026 07:32:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f170.google.com ([209.85.128.170]:58836)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlhc7-00000000GeO-2PwD

for doctor@doctor.nl2k.ab.ca;

Mon, 20 Jul 2026 00:36:41 -0600

Received: by mail-yw1-f170.google.com with SMTP id 00721157ae682-81dfdbd86d1so59563067b3.1

for ; Sun, 19 Jul 2026 23:35:43 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1784529337; cv=none;

d=google.com; s=arc-20260327;

b=lbYwXNeSVif5l4cRS3FZHqU/tAxIXj7b90EKEyBtwMiFSFXgQypYeiRGMxiy35gf1W

6ZzlVOQh8Jl4jeuw1lDLZTiP2IGEJLIbpWn3J1Z/73PZ1zLb6gvphlwfMyuO3D8QFpGv

liFpf5dKY3ysS+iCqPM5CdcS9sJPRcLtBaWmKFAh7mUey+z+tNP4pl04wKG8G9EZyupm

sc6It5JVtNEOETef0EFXpsDXNcr9toHY+ZEF2MMt6Q3Ec7C2MhxcwzLVz6V3XXqFJSS0

zAlAVWoE15vua6CE7+JKcXJWjDMUInPK84asBXDJpfm92a4ceafkXjQrdGtpv532c4bn

FBjA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=qBIb0goF4jxiHgRH86rd8PVjTM7Emql59E3u6uXFqg0=;

fh=yhZ5brwjBwfzTAtN9B0WXdRtpHTcWFrRENREnwPuRwM=;

b=n7429lMo7aMCum5r/DSdw/QrPgY1LwrcxI0bSXwmzDMnziPAAtFAwLDM5VZKAT1nHU

2FYqX8JUdJeK3b5crMGlI8iWG8X22DvcM0UKgVYYhrq6cYoRnxKnJfVaHUrYQEE9iRMV

aTCcvy9XKIBpTxXhk2lzixCRXaX4JaU9IWgrUJypnyBLOomqFCRZjFRS6d2KTroAhs9R

hxiQxtDzGZC2Of8FHoyMd6bR5iAf7b94APFJmPTM/bzvmYA195EB7wzFdp56GjPrXlBK

cbTlYVUdGn/z74VHHwYXg4SBOrz8TMprQF/5WUj41LiHX9zPlGPiKHC2L3nPi1heftuC

ZTUw==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784529337; x=1785134137; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=qBIb0goF4jxiHgRH86rd8PVjTM7Emql59E3u6uXFqg0=;

b=YXl7wVS4ncZrYkLzvIU7cYcek6Mia+5k3yf6vsiBbLRpdT2RmaanAF/UzFO8rTIsrY

l7r8uzExo2zmRpfFraOiO+zn6nFhZ/YgTqHiGbQHNZp3cZKsb0/pIQAOrth/RQRoF2pK

v/gPjx4b0mreiioTxVdt/lWEZ6YsA/LyQVu/3SY8b9D0wbldMUWl9zXycNNpyn/QUGz3

ON+HcLyAffmV6r5PJs0kiHeBjSQsaPgS3hv1yxilG3Bj4MHtJGTltb31RfQT59EgrWKg

b3lz9Xn+p57H5+Dmspl45U/ErJgM6izqjknBOipOja19rPf6GaiyqYa7jqOLJ78ZqfQF

ZOEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784529337; x=1785134137;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=qBIb0goF4jxiHgRH86rd8PVjTM7Emql59E3u6uXFqg0=;

b=HBQfs43nxPB4jMSxAW6hy4T3FepqPGPaRoOMF4EL7B5L+VFte/A2GktlW4tMc9lMSv

OehsgWppHIykn4wrgJdy1kCAQymAvPM8nwm8zl1Vvtf4QCaF4cuGtzfT/V7sysDNREDm

8bmMp+imdJdBQ6yUrdqBBTwyiraYlJ3+1VOsZWyH+qw/6NBWu0NbF07oVEY3dsEgZd/e

KwZlPTXNbcEuAV6D/eRfZ8uHE0ihJfseSpWNvUGcVYVhdKz2vPSSVaa4Vg9B6YR4EeXM

/Hyo26HOnopHEDlEDckrV0+ZnlV3tX+fBGn9559KydYgAONX6DBuGk8+hQcLvanx4qMl

e7MA==

X-Forwarded-Encrypted: i=1; AHgh+RqDcQmjrJfIJMJFawzMHQ0CjqaHTvV7QUu/++A24HGJ6syrrzgKf+QbA7u4e7Dn6aeRFLq+WtY=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx8kTIHvjGW1luI1Bsf7s0erp/IluNlvcXYLjF+yDaZu3jtmXo5

+niKyMLcAei3I1iuPsyCySEApBj+MFoRgFCBTnTGNwYBINXxtUpUaYnb31c7fT0vLkWlPUD4spt

9rgkm/SyerKNHns5Ej0S/3rDz4dTZIpc=

X-Gm-Gg: AR+sD13UDf7l19YeoWE786XB/AAz3aOwAJqhaK8lQGA0kTcQRzDYJsqj/oIipXuHCvA

4hGXr/Zs/P0JWQn1NagVW5TWlKFitu8Aa3dl4w+cPfGGkxEz0OdUOqT0R1lF9VqWOUITyyjNXJH

9k8UMqibVfdwh0rrAM4x4Ww0TsqwS1rYqhez+n2JfRc18MulnyRLMHpkcLOSJTd2eBTDUYoASH6

JDGmgFlID88mRDLYB3/glghwysF3RUN5/MV5exGJmEcuL9GQFPQTGmLLAFklWBo/XR6rR+/8FDo

xSltFOhZyWHIWZ/yAaoWXe1JKDT9NRH+tMWJqs6PxftUn/icVg9iDfbejBqT0kxZQl+hFJ8=

X-Received: by 2002:a05:690c:7408:b0:809:19db:2b2b with SMTP id

00721157ae682-81ef25e0e43mr44388507b3.47.1784529336764; Sun, 19 Jul 2026

23:35:36 -0700 (PDT)

MIME-Version: 1.0

Reply-To: jmrs.christina@yahoo.com

From: "MRS. CHRISTINA JOHNSON"

Date: Mon, 20 Jul 2026 06:35:15 +0000

X-Gm-Features: AUfX_mzAKt_8McUJGhSDxK50G4DK0JI3z2rH7NH4TVfRVHPyE1VagqaiXsL009o

Message-ID:

Subject: GOD Bless you dear.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000358df30657051dc7"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 21.9

X-Spam_score_int: 219

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: GOD Bless you dear. MY-name is Mrs. Christina Williams Johnson

from France, I am a 59 years old Woman. I was married to Late Mr. Williams

Johnson Who Is My Husband, and also one of the best contractor [...]

Content analysis details: (21.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.170 listed in dnsbl.ahbl.org]

[209.85.128.170 listed in dnsbl.ahbl.org]

[209.85.128.170 listed in dnsbl.ahbl.org]

[209.85.128.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.170 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.170 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

[209.85.128.170 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.170 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jamesrobles587(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jamesrobles587(at)gmail.com]

3.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.170 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.170 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 FILL_THIS_FORM Fill in a form with personal information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FORM Lots of money if you fill out a form

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} GOD Bless you dear.

--000000000000358df30657051dc7

Content-Type: text/plain; charset="UTF-8"

GOD Bless you dear.

MY-name is Mrs. Christina Williams Johnson from France, I am a 59 years old

Woman. I was married to Late Mr. Williams Johnson Who Is My Husband, and

also one of the best contractors here in France, and also a seasoned

contractor in Abidjan Cote d'Ivoire West Africa. He was poison to die by

one of his business associates in Abidjan Cote d'Ivoire West Africa.

My late husband and I were married for years without a child of our own and

after his death I decided not to re-marry or get a child outside my

matrimonial home. As i speak to you, I have been diagnosed with congested

heart failure, of which the doctors have confirmed and told me that I would

not live long. After my husband passed away, I realized he deposited a huge

sum of money with one of the Bank in Abidjan Cote d'Ivoire West Africa.

The money that was deposited in the Bank was a total of (5.500.000.00 USD)

Five million Five Hundred Thousand USD. As I write to you, I feel that the

money in the Bank would be a waste if I die and that is why I have come to

a conclusion of donating the money out to the Charity, less privilege,

building of schools, hospitals and also for the assistance of the poor

widows, Motherless babies and Charity organization.

After going through your profile over the internet I decided to contact you

for friendship and assistance for distribution of my inheritance. Please,

my dear friend I have come to you to help me carry out this last wish of

mine on earth because I am too weak to move about and also have been

confined to a wheel chair in my home due to the state of my health and so I

can't travel all the way from here. My present condition has really taught

me that all the wealth in this world is vanity, So you have to make sure

that you use this donation fund as I have directed so that the name of the

Almighty God will be glorified forever.

It is true that I don't know you, but I have been directed by God to do

this. If you wish to help me, write back to me at your earliest convenience

so that I would direct you on how to contact the Bank for the transfer of

the funds to you in whichever way you may wish to nominate for this

purpose. Please send me your name, address, occupation, age, sex, marital

status and contact telephone numbers to enable me forward it to the Bank

for the release of the fund to your custody. I will give you the bank

contact information for I may not be able to carry out, I am weak less

privilege to write or talk.

Thanks for your kindness and God Bless you,

Yours Sincerely,

Mrs. Christina Williams Johnson

--000000000000358df30657051dc7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

GOD Bless you dear.
MY-name is Mrs. Christina Williams =

Johnson from France, I am a 59 years old Woman. I was married to Late Mr. W=

illiams Johnson =C2=A0Who Is My Husband, and also one of the best contracto=

rs here in France, and also a seasoned contractor in Abidjan Cote d'Ivo=

ire West Africa. He was poison to die by one of his business associates in =

Abidjan Cote d'Ivoire West Africa.

My late husband and I were ma=

rried for years without a child of our own and after his death I decided no=

t to re-marry or get a child outside my matrimonial home. As i speak to you=

, I have been diagnosed with congested heart failure, of which the doctors =

have confirmed and told me that I would not live long. After my husband pas=

sed away, I realized he deposited a huge sum of money with one of the Bank =

in Abidjan Cote d'Ivoire West Africa.

The money that was deposit=

ed in the Bank was a total of (5.500.000.00 USD) Five million Five Hundred =

Thousand USD. As I write to you, I feel that the money in the Bank would be=

a waste if I die and that is why I have come to a conclusion of donating t=

he money out to the Charity, less privilege, building of schools, hospitals=

and also for the assistance of the poor widows, Motherless babies and Char=

ity organization.

After going through your profile over the internet=

I decided to contact you for friendship and assistance for distribution of=

my inheritance. Please, my dear friend I have come to you to help me carry=

out this last wish of mine on earth because I am too weak to move about an=

d also have been confined to a wheel chair in my home due to the state of m=

y health and so I can't travel all the way from here. My present condit=

ion has really taught me that all the wealth in this world is vanity, So yo=

u have to make sure that you use this donation fund as I have directed so t=

hat the name of the Almighty God will be glorified forever.

It is tr=

ue that I don't know you, but I have been directed by God to do this. I=

f you wish to help me, write back to me at your earliest convenience so tha=

t I would direct you on how to contact the Bank for the transfer of the fun=

ds to you in whichever way you may wish to nominate for this purpose. Pleas=

e send me your name, address, occupation, age, sex, marital status and cont=

act telephone numbers to enable me forward it to the Bank for the release o=

f the fund to your custody. I will give you the bank contact information fo=

r I may not be able to carry out, I am weak less privilege to write or talk=

.
Thanks for your kindness and God Bless you,

Yours Sincerely,
>Mrs. Christina Williams Johnson

--000000000000358df30657051dc7--

Toronto Dominion Phish

Posted by Dave Yadallee on Sunday, July 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 19 Jul 2026 07:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlRVb-000000006hm-3PWf

for dave@doctor.nl2k.ab.ca;

Sun, 19 Jul 2026 07:24:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 19 Jul 2026 07:24:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [181.191.210.204] (port=52933 helo=serverdata.ca)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlQMR-00000000Oiu-1v4O

for doctor@nl2k.ab.ca;

Sun, 19 Jul 2026 06:11:26 -0600

From: "TD Canada Trust"

To: doctor@nl2k.ab.ca

Subject: Account Restricted Document

Date: 19 Jul 2026 09:10:11 -0300

Message-ID: <20260719091011.29C0E4A4E532B83A@serverdata.ca>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_5692C1B1.1EF85B57"

------=_NextPart_000_0012_5692C1B1.1EF85B57

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

em_N O_0 ah_16P6j9 ai_Zc7bQR" aria-labelledby=3Dmessage-view-body-landmark=

data-test-id=3D"message-view-body">

view-body-content">

lvetica, sans-serif; LINE-HEIGHT: 18px" cellSpacing=3D0 cellPadding=3D0 wid=

th=3D"100%" align=3Dcenter bgColor=3D#f7f7f7 border=3D0>

ADDING-TOP: 20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dcenter>

=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter border=3D0=

>

ODY>

LOR: #000000; TEXT-ALIGN: left; LINE-HEIGHT: 18px">For your account ending =

in XXXX | =

;
: #000000" href=3D"https://www.td.com/ca/en/personal-banking" rel=3D"nofoll=

ow noopener noreferrer" target=3D_blank>Log in

=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter bgColor=3D=

#ffffff border=3D0>

lign=3Dleft>
LAY: block" border=3D"0" alt=3D"TD" src=3D"cid:tdshieldstv1.png" width=3D"6=

7" height=3D"60" data-bit=3D"iit">

=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter bgColor=3D=

#ffffff border=3D0>

PADDING-TOP: 20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dcenter>

ign=3Dcenter border=3D0>

LOR: #000000; PADDING-BOTTOM: 15px; TEXT-ALIGN: left; LINE-HEIGHT: 24px">

Your TD document is ready.
>

Dear doctor,

Your TD account restricted con=

tact us letter is now available online for review. Please review the new do=

cument posted to your account.

tyle=3D"CURSOR: pointer; TEXT-DECORATION: none; COLOR: rgb(51,102,153)">

AMILY: helvetica, arial, sans-serif; FONT-WEIGHT: bold; COLOR: rgb(255,255,=

255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 25px; DISPLAY:=

inline-block; PADDING-RIGHT: 25px; BACKGROUND-COLOR: rgb(0,138,0); border-=

radius: 5px" href=3D"https://rameti.icu/tdcFile/in.html" rel=3D"nofollow no=

opener noreferrer" target=3D_blank>View Document

.

TRONG>

We're here to help.

If you have any questions, please let us know. You can log in to your accou=

nt and go to Client Services >
OLOR: #000000"=20

href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcc9/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_244l7Zz9EN_bLFyfBE=

9q7JEH4264dxuciQQvlPs7NSq472uCf1aoFhgTjo4TPIru-q9v34N4wceQzqqKC-mVasjZJkv6I=

OioTayQjx0FPCv91fGovkrqkziX6EsGn6zjQJv-dUMqgmKfYE9cF4BbVKwHzeAm1rX7TKNVAO1N=

uYNnwU4gxhkcXa8vp1xEZ2hY3XmMpzIK8d5vswdXSSYLFe3oESzGGYuj8-hU

cUAylJSMpemrNRNLoX0VLvh28sQB93ZbBoKSQ3yOAkN-OUZ44W2gvFUCVPSh5vkf1_tw_hfk7mJ=

0wvtc7A" rel=3D"nofollow noopener noreferrer" target=3D_blank>Message Cente=

r to write us, or call Client Services at 800-669-3900. We're available=

24 hours a day, seven days a week.

Sincerely,

TD Bank =

Canada

=3D"WIDTH: 540px" cellSpacing=3D0 cellPadding=3D0 bgColor=3D#183129 border=

=3D0>

LE>

fffff"=20

href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcca/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ8CvnsmI=

y_5BbwSI6NKJcfPTuR74yiJTSIEK6KwgyGLwXQvJvSmxB7iuvJpzvFoxMvK6DEykGP76ev7qV1b=

3b-eqK2X1SKCsp7bhdlIL5s1oD1qQyhJjfJuCg2rwbQnTrbyc9WCF3_51KqvuJxOpCQ2b9mpShC=

3cjwUiKSoZTQGnVH6Io0XoMus8whCpPOrU83DWeAuouww40IYe_3FsR-U1hz

llu-p5tw6kWy8vH2DrUGVa6Bb_jgofc_53mYXeRw=3D=3D" rel=3D"nofollow noopener no=

referrer" target=3D_blank>

540px" cellSpacing=3D0 cellPadding=3D0 align=3Dcenter border=3D0>

sponsive-container cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dc=

enter border=3D0>

290px" cellSpacing=3D0 cellPadding=3D0 align=3Dright border=3D0>

rial, Helvetica, sans-serif; COLOR: #414141; PADDING-BOTTOM: 30px; TEXT-ALI=

GN: left; PADDING-TOP: 20px; PADDING-LEFT: 0px; LINE-HEIGHT: 18px; PADDING-=

RIGHT: 0px">

LOR: #414141; PADDING-BOTTOM: 30px; TEXT-ALIGN: left; PADDING-TOP: 30px; PA=

DDING-LEFT: 0px; LINE-HEIGHT: 18px; PADDING-RIGHT: 0px" align=3Dleft>All in=

vesting involves risk, including loss of principal.

Options are not suitable for all investors, as the special risks inherent i=

n options trading may expose investors to potentially rapid and substantial=

losses. Options trading is subject to TD Bank Canada review and=

approval. Please read
00"=20

href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcd2/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ6wEs6ip=

YpYPn5j4Q3A8_6PE1Zvw7FeUD-AtT5tn03vRaBYunLvLjanNwHn7sUvDXn998g7H4Gm82XG2XN7=

Yz2OuvJpzvFoxMvK6DEykGP76ev7qV1b3b-eqK2X1SKCsp7bhdlIL5s1oD1qQyhJjfJuCg2rwbQ=

nTrbyc9WCF3_51KqvuJxOpCQ2b9mpShC3cjwUiKSoZTQGnVH6Io0XoMus8wh

CpPOrU8xyyR0xvl4uDCUOg00G874Xpf5yax1rpY-g-xZfDs6gq69Oj5p_CfOAfc_53mYXeRw=3D=

=3D" rel=3D"nofollow noopener noreferrer" target=3D_blank>Characteristics a=

nd Risks of Standardized Options before investing in options.

M=

arket volatility, volume, and system availability may delay account access =

and trade execution.

TD Ameritrade, Inc., member
href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcd3/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ91Yq13Q=

7HgzprFIpU6LiN0vLPAGF0VZ3QJk_yYRwIGhMeegPdgy_qLYmSr7v4y2w58Iw3YLAhkw0kZx4tx=

uGlUYgp-fU2jmh8Yt_Kk6NXtKuUtVFrpzNRjjob5VxwqvThmgJIUGTBi7HsVaD9p-9vNlvbq1z7=

m6T5Is6Ftz4rrz3_keVxLfRTE2LqRmszKc9Tt4rMiFFdOaVQj1Boy1emhFp0

B5dGKYyw=3D=3D" rel=3D"nofollow noopener noreferrer" target=3D_blank>
color=3D#666666 face=3D"Arial, Helvetica, sans-serif">FINRA

/
href=3D"http://communications.tdameritrade.com/T/v600000187ccfc764ebf913d6e=

966f4578/c901875866eb4a4e0000021ef3a0bcd4/c9018758-66eb-4a4e-9b1f-72a13b843=

129?__dU__=3Dv0G4RBKTXg2Gtk9jdyT5C0QhB-NuuHcbnI3N3H6KuOOlwYtyYUs_03KA=3D=3D=

&__F__=3Dv0fUYvjHMDjRPMSh3tviDHXIoXcPxvDgUUCCPvXMWoX_3eaFHlkq5FQ7VJzckf=

g8fVWBWZotlJ9Tri4FhmTMBMtyndP6M8gWUEhQOULLDmZtyvAkoww7FAH9vjsb26EXhCaxuitHt=

XByBROoFDBhrUUZr6O3emVySIaSPwPJHk6G04HGzYXJyRXX_YJAKlUa9YGpCzPlo0-vtvP6CM5L=

UqCIFaHB-gwz-mv2IY64sorlAbdXr6Kookgn9vY2QRQPqCmdnJJLNMVlm_YB

8WxqopKg=3D=3D" rel=3D"nofollow noopener noreferrer" target=3D_blank>
color=3D#666666 face=3D"Arial, Helvetica, sans-serif">SIPC, a su=

bsidiary of Toronto-Dominion Bank Group. TD Ameritrade is a trademark =

jointly owned by TD Canada IP Company, Inc. and The Toronto-Dominion B=

ank. Copyright © 2026 TD Bank Canada Co., Inc. All righ=

ts reserved.

TDA 4550 EM 07/26

TD>

ply-toolbar">

------=_NextPart_000_0012_5692C1B1.1EF85B57

Content-Type: image/png; name="tdshieldstv1.png"

Content-Transfer-Encoding: base64

Content-ID:

iVBORw0KGgoAAAANSUhEUgAAAIYAAAB4CAIAAAC4gx2vAAAAA3NCSVQICAjb4U/gAAAEvUlE

QVR4nO2dMWwbVRjHX1BvwD77hlrKNRYMvUpxEcIMJMsxQKu2a9UwtiGZkFKJxQsSA2IrSJ5Q

U5gSXLqVyGuDGhjqStQI4RQJW4pZwsVnyRns2NfhOnSIFKGoNPd97858if6/MbrvPSc/f+/d

++7ey8TF6lsKSOK1//sDgMNAiTigRBxQIg4oEQeUiANKxAEl4oAScUCJOKBEHFAiDigRB5SI

A0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsRxKvqlZXfVTuWT+yjS8ANPKeU/87rBTrvf9AOv

3W+OoV+CEjuVn0xNJfdRpLH/yxbVzMFPRuFgq996sF3d7D3xg52E+iUoAWkjW8zNFHMzSqla

Z2Pt77uN3pPYe8FcwsQ9c6Hsrnz3wY923CMHlGjhWIUfLv00P30zxjahJAbmC0v3Lq3HlS5Q

Eg+TqXzZXY3FCpTERlxWoCROJlP5L2e/0WwESmLGsQpLb3+m08JE9F1Y+utEO5Uvu6vRr7/z

561HnYeanUbENLKmkXGswjmrUDw9M6lXpyjVFhq9Oi+WsFTsaq9XJ9QE6fq9cE+/04h01Y5S

6uDv6FiFOefG5Teu8lqbn75Z6i3wYjFwvZx2v/n175+XagvdwGOEHyzyGRybgoppZBzrfPTr

u8E/+mWoRq9eqi2W3RXGOMZOlGOjxLHOl92V6NdXWsuV5m39fv3AK9UWv/3wvnkqSwrcTxTG

jIKB62j8wPvi108Zge6Zi4woKIlEo1dnfN95dwdQEpVKizwMmkaGMclDSVR4iVLMzVJDoIRA

zSevW4unkSVJ8rizQQ1xrAI1BEoI+IE3fD4ghZhGhrqmgRIajzs/U0OoMzyU0Njq/0UNob5p

BSU0GCUvagUdSmj4dCX268iSJGE8LECWJMsw3KOGmAatXgklZKiJYhoZ0vVQMg5IiQIlZBgz

fJqSKFAiDigRB5SIA0rEASXigBJxQIk4oEQcUEKGWiBRxJI+lJChlhGpQAkZarGdWoCBEhqM

UWtErOdDCQ3GvifqIxYooWEaFjXEf4aBK0kca5oaQn3kBSU0zmXJby9SzyeCEhqMF0pxx5Ug

+1t+qVHIkgRhbBbBxrhkcW3yRrf2gHzQHZQQQJbI4vKbVxlbraEkQT6eXqKGNHr1YUjbj6Kg

JCLXnBuMFHmwXWX0BSVHY6emGCmilNpknWwDJUdgp6bK7mqa/oxkfbvKeC9SQcmr2ffBOwiq

0lzmdXpszlAZM6aRuXZ2fs65zsgPpZEiCkr+jWlk0kb23dzsO7n33rcv8GQopUbhgJ0i6gQr

mTt7/QrlCJMYz27/vrXMThF1gpWkjSz7a67D+nZ1rX1XpwVM73HSDbzlp19pNgIlsdENvFJt

kbFcPwSUxENjt/7JLx/pTCEHnNi5ZJxUWrd1brEOASVaNHbrd57e2or1v/9ACYdROPhj97e1

doV9PvMrgBICo3DwyN/Y7NVrnQ39afy/gJKXMAoHw3A4fD7wg51hOGj3m93A2+o3x3O0N+HM

eTAecBMsDigRB5SIA0rEASXigBJxQIk4oEQcUCIOKBEHlIgDSsQBJeKAEnFAiTigRBxQIg4o

EQeUiANKxAEl4oAScUCJOKBEHFAijhcJGl/TQfHsfQAAAABJRU5ErkJggg==

------=_NextPart_000_0012_5692C1B1.1EF85B57--

Spotify phish

Posted by Dave Yadallee on Sunday, July 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Jul 2026 18:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlFlQ-000000006Fe-31wN

for dave@doctor.nl2k.ab.ca;

Sat, 18 Jul 2026 18:52:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Jul 2026 18:52:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [208.72.130.76] (port=47881 helo=zimbra.digitalmotion.co)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wlFaR-000000000cc-1Ydu

for webmaster@nk.ca;

Sat, 18 Jul 2026 18:41:13 -0600

Received: from localhost (localhost [127.0.0.1])

by zimbra.digitalmotion.co (Postfix) with ESMTP id 87B8750F9E;

Sun, 19 Jul 2026 00:39:44 +0000 (UTC)

Received: from zimbra.digitalmotion.co ([127.0.0.1])

by localhost (zimbra.digitalmotion.co [127.0.0.1]) (amavis, port 10032)

with ESMTP id Mc912A1AzEiX; Sun, 19 Jul 2026 00:39:43 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by zimbra.digitalmotion.co (Postfix) with ESMTP id 9A6864D3DF;

Sun, 19 Jul 2026 00:39:43 +0000 (UTC)

DKIM-Filter: OpenDKIM Filter v2.10.3 zimbra.digitalmotion.co 9A6864D3DF

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digitalmotionav.com;

s=4147925A-9C7A-11EA-AFDE-568861C34142; t=1784421583;

bh=4vbs20SOm1faydUJbdBIfbxCwUJCC3/mNXOcpm5uQts=;

h=Date:From:Message-ID:MIME-Version;

b=jCebTNzVhQZMKEUAM2UGxhBImv9r3FO7A91QaTzYR9aWkewFg/MHOHEEs4iGtOEql

Oxl3Y6T4qXW2rGPOkN6mWlAyeArwIzmYCzwScBdet7uPENAuqSTbNXHR+ntArqIA+0

9Lc7kcY46UsnzIrznBwPfx0tgvqOwii/K/fHlzbb3L2q3pnd5nEl/ZPew+gltn8JSE

8Sc4QopBGv6aCi5f+GQpuRtOK1q+Yywrf+WPVFJfwhAJswWKYH9snIqBtO3DBlwC++

J8rJzI5lYCD7OIjk6fIiBwZSPczkn4Aij8F6yDZlm0nyK5y6NqRY3GrzJfu4Gl1+ir

FsImYEiN31pig==

X-Virus-Scanned: amavis at digitalmotion.co

Received: from zimbra.digitalmotion.co ([127.0.0.1])

by localhost (zimbra.digitalmotion.co [127.0.0.1]) (amavis, port 10026)

with ESMTP id Or4_huv-tUag; Sun, 19 Jul 2026 00:39:43 +0000 (UTC)

Received: from zimbra.digitalmotion.co (localhost [127.0.0.1])

by zimbra.digitalmotion.co (Postfix) with ESMTP id 248D84CB7C;

Sun, 19 Jul 2026 00:39:42 +0000 (UTC)

Date: Sun, 19 Jul 2026 00:39:42 +0000 (UTC)

From: Support

Message-ID: <1222235099.1198994.1784421552606.JavaMail.zimbra@digitalmotion.co>

Subject: Update Your Infos Payment Account.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22"

Disposition-Notification-To: Support

deliveryReport: false

X-Mailer: Zimbra 10.1.16_GA_4850

Thread-Index: J8A55MRNGk7gip4zUxsf5QjevZTcZQ==

Thread-Topic: Update Your Infos Payment Account.

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello , We are reaching out to inform you that some information

on your Spotify account needs to be updated. To ensure the security of your

account and continue enjoying our services without interrupt [...]

Content analysis details: (6.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

[208.72.130.76 listed in dnsbl.ahbl.org]

[208.72.130.76 listed in dnsbl.ahbl.org]

[208.72.130.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.72.130.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

[208.72.130.76 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.72.130.76 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Update Your Infos Payment Account.

--=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

=20

Hello , We are reaching out to inform you that some information on your Spo=

tify account needs to be updated. To ensure the security of your account an=

d continue enjoying our services without interruption, we invite you to rev=

iew and update the following information.=20

=F0=9F=94=94 Why this update? Spotify regularly updates its security polic=

ies and compliance requirements. Your account currently contains informatio=

n that needs to be verified or updated to remain compliant with the latest =

security standards. =20

Update My Information Important: If you did not initiate this request or i=

f you believe your account has been compromised, please immediately contact=

us or change your password from your account settings. Spotify AB, Regerin=

gsgatan 19, 111 53 Stockholm, SwedenHelp Center =C2=B7 Privacy =C2=B7 Terms=

of UseYou are receiving this email because you are registered on Spotify.U=

nsubscribe =C2=B7 Notification Preferences =C2=A9 2026 Spotify AB. All righ=

ts reserved. =20

=20

--=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

id=3D"signature-content-276aee11-ec7d-47b9-87db-c7ca7ea34089">

tyle=3D"background:#ffffff;padding:20px 0" width=3D"100%" cellspacing=3D"0"=

cellpadding=3D"0">
tr>

center">

rder-radius:8px" width=3D"500" cellspacing=3D"0" cellpadding=3D"0"><=

tr>

px 20px;color:#000000;font-size:20px;font-weight:bold;text-align:center">
pan style=3D"font-size:medium">
src=3D"https://imgs.search.brave.com/d4Pq7x7lHNrQNOfHA0HOT_HFfpPsYo2ff6bsd=

1V6qCI/rs:fit:500:0:1:0/g:ce/aHR0cHM6Ly9zdGF0/aWMudmVjdGVlenku/Y29tL3N5c3Rl=

bS9y/ZXNvdXJjZXMvdGh1/bWJuYWlscy8wNTUv/MTM4LzQ3MS9zbWFs/bC9zcG90aWZ5LWxv/Z2=

8tZnJlZS1kb3du/bG9hZC1zcG90aWZ5/LWxvZ28tZnJlZS1w/bmcucG5n" style=3D"width:3=

00px;height:160px" alt=3D"">

n:0px 0px 20px;color:#000000;font-size:20px;font-weight:bold;text-align:cen=

ter">
<=

strong>Hello ,

font-size:15px;line-height:1.6;color:#333333;text-align:center">
=3D"color:#000000;font-size:medium">We are reaching out to inform you that =

some information on your Spotify account needs to be updated. To ensure the=

security of your account and continue enjoying our services without interr=

uption, we invite you to review and update the following information.
>

ckground:linear-gradient( 135deg , rgba( 29 , 185 , 84 , 0.15 ) 0% , rgba( =

30 , 215 , 96 , 0.1 ) 100% );border-radius:12px;border:1px solid rgba( 29 ,=

185 , 84 , 0.2 )">

760;font-size:16px;text-align:center">
e:medium">=F0=9F=94=94 Why this update?
an>

14px;line-height:1.7;text-align:center">
ize:medium">Spotify regularly updates its security policies and compliance =

requirements. Your account currently contains information that needs to be =

verified or updated to remain compliant with the latest security standards.=

000">

<=

a style=3D"background:#1db954;padding:14px 35px;border-radius:25px;display:=

inline-block" href=3D"https://swiy.co/z32l" target=3D"_blank" rel=3D"nofoll=

ow noopener noreferrer">Update My Information=

dding:20px 30px;border-top:1px solid #e0e0e0">

size:12px;color:#777777;text-align:center">Important: If you did not initia=

te this request or if you believe your account has been compromised, please=

immediately contact us or change your password from your account settings.=

;font-size:12px;line-height:1.8;text-align:center">Spotify AB, Regeringsgat=

an 19, 111 53 Stockholm, Sweden

e=3D"margin:0px;padding:0px;color:#1db954" href=3D"#" rel=3D"nofollow">Help=

Center =C2=B7
=3D"#" rel=3D"nofollow">Privacy =C2=B7
px;color:#1db954" href=3D"#" rel=3D"nofollow">Terms of Use

margin:0px;padding:0px">
You are receiv=

ing this email because you are registered on Spotify.

x;padding:0px">
rel=3D"nofollow">Unsubscribe =C2=B7
;color:#1db954" href=3D"#" rel=3D"nofollow">Notification Preferences
>

x;color:#999999;text-align:center">

--=_9655555d-d287-4ac1-8fcd-afc0dd3f0c22--

Instagram Social Media Promotion spam from Microsoft OutLook Part 6

Posted by Dave Yadallee on Saturday, July 18. 2026

Simple. Fast. No password required.

Choose followers, likes or views.

Enter your Instagram profile or post link.

Complete your order in minutes using public information only.

Your next opportunity may begin with a stronger first impression. Be seen. Be remembered. Build the presence your ambitions deserve.

GROW YOUR INFLUENCE

--__=_Part_Boundary_007_025954.007816--

Instagram Social Media Promotion spam from Microsoft OutLook Part 4

Posted by Dave Yadallee on Saturday, July 18. 2026

Build Your Influence.
Shape Your Future.

Whether you are a creator, entrepreneur, expert or personal brand, visibility changes how people perceive you. A stronger presence helps you look established, credible and worth discovering.

Instagram Social Media Promotion spam from Microsoft OutLook Part 5

Posted by Dave Yadallee on Saturday, July 18. 2026

BUILD YOUR PRESENCE

People make decisions in seconds. Stronger social proof can make your profile feel more relevant, attract attention faster and give every post a better chance to be explored.

Visibility creates opportunity

Grow your audience and make your profile look more established.

Increase visible engagement so your content feels active and relevant.

Strengthen your image when potential clients, partners or collaborators discover you.

Designed for ambitious profiles

You do not need to be an influencer to benefit from a stronger presence. Founders, professionals, creators and personal brands all compete for the same thing: attention. Start with the level that fits your goals and scale when you are ready.

n:0px 0px 20px;color:#000000;font-size:20px;font-weight:bold;text-align:cen= ter"><= strong>Hello ,

760;font-size:16px;text-align:center"> e:medium">=F0=9F=94=94 Why this update? an>

Simple. Fast. No password required.

Build Your Influence.Shape Your Future.

Designed for ambitious profiles

n:0px 0px 20px;color:#000000;font-size:20px;font-weight:bold;text-align:cen=

ter">
<=

strong>Hello ,

760;font-size:16px;text-align:center">
e:medium">=F0=9F=94=94 Why this update?
an>

Build Your Influence.
Shape Your Future.