Docusign phish from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Aug 2026 21:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from)
id 1wz42q-00000000C6l-2H6p
for dave@doctor.nl2k.ab.ca;
Tue, 25 Aug 2026 21:11:20 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Aug 2026 21:11:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f229.google.com ([209.85.215.229]:57593)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from)
id 1wz3nK-000000001ie-1gte
for support@nk.ca;
Tue, 25 Aug 2026 20:55:28 -0600
Received: by mail-pg1-f229.google.com with SMTP id 41be03b00d2f7-cc11a905ba5so296056a12.2
for; Tue, 25 Aug 2026 19:54:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sabeng.it; s=google; t=1787712865; x=1788317665; darn=nk.ca;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=UQBt9cH7jgQFjbrRyg4OIRQN8lRpjah/w6H4Id8h/VE=;
b=DSGb6eWE9R6p0W3rppCDbIunq6D6SOW/B/45rKDKPcShmAfoRFLmmB1ywto0DvvCOh
iabewCgSRl9ETs06Cp9VZUyPbDFhk7QLPA7AGu7szj63hqiZmnJwRDmUWf2c60iM9y2c
gqCE8nd+Te8s3xMpWKSk7PSrTv9Y12HeNk3ug=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1787712865; x=1788317665;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=UQBt9cH7jgQFjbrRyg4OIRQN8lRpjah/w6H4Id8h/VE=;
b=WZnoCGNAEs5HIkANrsgnYzEEZekEMTObLvbMo5Y6OJ+wSj3adwun3qi/7GqoKvnSOt
XJPAhT38KxnWbehN5hERxrgpSsR9ofcFzaGCS6VdVlNzXWA0EmOWgn3877jBdETN0ivR
U/sn5eeO1Hro8DHKaxiohKeO/xrfpmTOqp21ul4Hk0lGKOc/hUNPgWEkzLQAedSiIjeP
Uouu7yhPamCniQorM7wk+xPVTrp3hN3ELI3K3vzfUD3jbQRzxb57P0AMpTVo8vkVwpjp
yzcMfc/73tL+oZRViTQKuVR4vmGJJmzuJN1V3yVZvkCuQznMBONBcHOYhRE2W46SjfIQ
Kg/g==
X-Gm-Message-State: AFuF++lZcmjASQi1wYatofp6K7hilkFYsn0vddchTuQogkDizfLGXdy3
+zaCfs4OPQalIdFlxwe2VoG6n3RCzuiu8KYM6WdWzKp2EEko4+Tmzu+FkYjy6TCLuKRi2StO6qy
cC3WUWoXl/GbdXNqwgv7QCkHGAuDXmGBWWUVne3rRa1YWv+4=
X-Gm-Gg: AR+sD10gAcN57zxIOwUGLto0zqEMg/Sxd5/SBatHNmzDHS79ej4fB5coznIInqz7qcY
USsw+98SPsoJ0Fs51sR+gS4iZlZyWIjGcnKxNq2ZwnxXrauB0u7c47Y5/LdQ5Creqoc2XJOp7oY
xdTpaqHqaAzxJJoOniTkINHW6fRiD+0GYNmOG3uCDPdrwPwZTZtclgYp0DGh3roXPFPG0syfdli
N2qrmOuxQz7NcdmybxkkyU2x7uuTBfYpb9EBwpH+E3U1HYdA5EKoW7NVVqEJmSUGToHZoL4J0TA
Uwd3urKKTsdTWT1ySOfR7SNDWwKJe0nyxsEalq2nJnK5dQa0Q8WlxVtIu20c8V0ALP7RrCrjBZC
rSEyyHJkWM3w=
X-Received: by 2002:a17:90b:4484:b0:38e:9ef9:eb97 with SMTP id 98e67ed59e1d1-3966d5bc8b2mr5614172a91.16.1787712865425;
Tue, 25 Aug 2026 19:54:25 -0700 (PDT)
Received: from sabprogetti.com ([192.210.236.148])
by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39674dc659dsm480267a91.11.2026.08.25.19.54.24
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 25 Aug 2026 19:54:25 -0700 (PDT)
X-Relaying-Domain: sabeng.it
From: Docusign Via Docusign
To: support@nk.ca
Subject: Your Document Is Ready for Review
Message-ID: <370e40b7-4157-e6d8-c3d1-65ecc1ca26c2@sabeng.it>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 26 Aug 2026 02:54:22 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 9.8
X-Spam_score_int: 98
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:  support@nk.ca Your electronic signature is required. REVIEW
THE DOCUMENTS
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
[209.85.215.229 listed in dnsbl.ahbl.org]
[209.85.215.229 listed in dnsbl.ahbl.org]
[209.85.215.229 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.229 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: kdjsuhd.es]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 TRACKER_ID BODY: Incorporates a tracking ID number
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.215.229 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.229 listed in bl.score.senderscore.com]
0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing
Subject: {SPAM?} Your Document Is Ready for Review
support@nk.ca Your electronic signature is required.
REVIEW THE DOCUMENTS
Please review and sign. Document can only be viewed by support@nk.ca
Thank you for choosing DocuSign.
Barbara:
No out of pocket.
Colleen M. Coleman
Paralegal to JOHN-PAUL A. SERRAO
AMICUS LEGAL GROUP, INC.
800 North Haven Avenue, Suite 205
Ontario, California 91764
Telephone No.: 909-906-9040
Facsimile No.: 909-906-9041
CONFIDENTIALITY NOTICE: This communication contains legally privileged and confidential information sent solely for the use of the intended recipient. If you are not the intended recipient of this communication, you are not authorized to use it in any manner, except to immediately destroy it and notify the sender.
From: Alvarado, Barbara
Sent: Tuesday, August 11, 2026 7:48 AM
To: Colleen Coleman
Subject: Claim No.: 260142784
Colleen,
Good morning. I am following up on out of pocket confirmation for your client so that we can move the property damage portion forward to completion.
Thank you,
Barbara Alvarado
MD Adjuster III
Allstate Insurance
PO BOX 1623 Winston Salem, NC 27199-1623
Direct (909) 941-5929 • Toll Free (833) 785-4391 • Fax (800) 924-0273
Email: I827218@allstate.com
signature_250147298
If you are emailing me a claim-specific communication, please send it to ALLSTATECLAIMS@NGIC.COM with the claim number in the subject line.
Note: The policy is underwritten by one of Allstate’s affiliates under the National General Insurance Group as shown above. However, in Texas, policies are administered by Direct General Insurance Agency, Inc., an Allstate managing general agency (Lic.1919020) and issued by Home State County Mutual Ins. Co. (an unaffiliated insurer). The claims under the applicable policy will be managed in accordance with the underwriting company’s applicable policies and procedures.
From: Alvarado, Barbara
Sent: Tuesday, July 28, 2026 11:54 AM
To: Colleen Coleman
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
Your clients are Fernando and Gerardo Farias and their vehicle is the 2019 Jeep Wrangler.
Thank you,
Barbara Alvarado
MD Adjuster III
Allstate Insurance
PO BOX 1623 Winston Salem, NC 27199-1623
Direct (909) 941-5929 • Toll Free (833) 785-4391 • Fax (800) 924-0273
Email: I827218@allstate.com
signature_250147298
If you are emailing me a claim-specific communication, please send it to ALLSTATECLAIMS@NGIC.COM with the claim number in the subject line.
Note: The policy is underwritten by one of Allstate’s affiliates under the National General Insurance Group as shown above. However, in Texas, policies are administered by Direct General Insurance Agency, Inc., an Allstate managing general agency (Lic.1919020) and issued by Home State County Mutual Ins. Co. (an unaffiliated insurer). The claims under the applicable policy will be managed in accordance with the underwriting company’s applicable policies and procedures.
From: Colleen Coleman
Sent: Tuesday, July 28, 2026 11:00 AM
To: Alvarado, Barbara
Subject: Re: Claim No.: 260142784
͏Who is our client? Colleen M. Coleman Paralegal to JOHN-PAUL A. SERRAO AMICUS LEGAL GROUP, INC. 800 North Haven Avenue, Suite 205 Ontario, California 91764 Telephone No. : 909-906-9040 Facsimile No. : 909-906-9041 CONFIDENTIALITY NOTICE: This ZjQcmQRYFpfptPreheaderEnd
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
Report Suspicious
ZjQcmQRYFpfptBannerEnd
Who is our client?
Colleen M. Coleman
Paralegal to JOHN-PAUL A. SERRAO
AMICUS LEGAL GROUP, INC.
800 North Haven Avenue, Suite 205
Ontario, California 91764
Telephone No.: 909-906-9040
Facsimile No.: 909-906-9041
CONFIDENTIALITY NOTICE: This communication contains legally privileged and confidential information sent solely for the use of the intended recipient. If you are not the intended recipient of this communication, you are not authorized to use it in any manner, except to immediately destroy it and notify the sender.
From: Alvarado, Barbara
Sent: Monday, July 27, 2026 12:02 PM
To: Colleen Coleman
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
We are working on finalizing the pd portion of the claim for this loss and are pending confirmation if your client had any out of pocket expense?
Thank you,
Barbara Alvarado
MD Adjuster III
Allstate Insurance
PO BOX 1623 Winston Salem, NC 27199-1623
Direct (909) 941-5929 • Toll Free (833) 785-4391 • Fax (800) 924-0273
Email: I827218@allstate.com
signature_250147298
If you are emailing me a claim-specific communication, please send it to ALLSTATECLAIMS@NGIC.COM with the claim number in the subject line.
Note: The policy is underwritten by one of Allstate’s affiliates under the National General Insurance Group as shown above. However, in Texas, policies are administered by Direct General Insurance Agency, Inc., an Allstate managing general agency (Lic.1919020) and issued by Home State County Mutual Ins. Co. (an unaffiliated insurer). The claims under the applicable policy will be managed in accordance with the underwriting company’s applicable policies and procedures.
From: Alvarado, Barbara
Sent: Saturday, March 7, 2026 8:38 AM
To: 'Colleen Coleman'
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
Just following up on previous email as we are working to finalize the pd portion of the claim. Can you please confirm if your client had any out of pocket expense so that we can move the claim forward?
Thank you,
Barbara Alvarado
Material Damage Claims Adjuster
P.O. Box 1623 | Winston-Salem, NC 27102
Office: (909) 941-5929
Fax: (800) 924-0273
Email: claims@ngic.com
PLEASE NOTE: We do not accept attorney correspondence or time sensitive documents via this email. All attorney correspondence or time sensitive documents should be sent to National General PO Box 1623 Winston-Salem, NC 27102-3199 -OR – Fax number 800-924-0273 or emailed to claims@ngic.com with the Claim Number in the Subject
Underwritten by:
Integon National Insurance Company
Integon Preferred Insurance Company
From: Alvarado, Barbara
Sent: Wednesday, March 4, 2026 9:15 AM
To: Colleen Coleman
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
I am working on the pd portion of the claim as demand from your client’s carrier has been received but we have a limit issue and need to confirm with you if your client had any out of pocket prior to moving claim forward?
Thank you,
Barbara Alvarado
Material Damage Claims Adjuster
P.O. Box 1623 | Winston-Salem, NC 27102
Office: (909) 941-5929
Fax: (800) 924-0273
Email: claims@ngic.com
PLEASE NOTE: We do not accept attorney correspondence or time sensitive documents via this email. All attorney correspondence or time sensitive documents should be sent to National General PO Box 1623 Winston-Salem, NC 27102-3199 -OR – Fax number 800-924-0273 or emailed to claims@ngic.com with the Claim Number in the Subject
Underwritten by:
Integon National Insurance Company
Integon Preferred Insurance Company
From: Colleen Coleman
Sent: Monday, February 2, 2026 3:50 PM
To: claims@ngic.com
Cc: Fernando Magana
Subject: Claim No.: 260142784
͏Sam: As you are aware, our office represents Mr. Farias for injuries sustained as a result of the auto accident on November 27, 2025. Please forward all correspondence to our attention and not to our client. Thank you. Colleen M. Coleman Paralegal ZjQcmQRYFpfptPreheaderEnd
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
Report Suspicious
ZjQcmQRYFpfptBannerEnd
Sam:
As you are aware, our office represents Mr. Farias for injuries sustained as a result of the auto accident on November 27, 2025. Please forward all correspondence to our attention and not to our client.
Thank you.
Colleen M. Coleman
Paralegal to JOHN-PAUL A. SERRAO
AMICUS LEGAL GROUP, INC.
800 North Haven Avenue, Suite 205
Ontario, California 91764
Telephone No.: 909-906-9040
Facsimile No.: 909-906-9041
CONFIDENTIALITY NOTICE: This communication contains legally privileged and confidential information sent solely for the use of the intended recipient. If you are not the intended recipient of this communication, you are not authorized to use it in any manner, except to immediately destroy it and notify the sender.
Note: Please be aware that unencrypted electronic mail is not secure. For this reason, please do not send any sensitive personal information such
as your address, driver license, policy number, Social Security Number, or claims information by unencrypted electronic mail. The information
contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient,
or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution
or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying
to the message and deleting it from your computer. Thank you.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Aug 2026 21:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from
id 1wz42q-00000000C6l-2H6p
for dave@doctor.nl2k.ab.ca;
Tue, 25 Aug 2026 21:11:20 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Aug 2026 21:11:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f229.google.com ([209.85.215.229]:57593)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from
id 1wz3nK-000000001ie-1gte
for support@nk.ca;
Tue, 25 Aug 2026 20:55:28 -0600
Received: by mail-pg1-f229.google.com with SMTP id 41be03b00d2f7-cc11a905ba5so296056a12.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sabeng.it; s=google; t=1787712865; x=1788317665; darn=nk.ca;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=UQBt9cH7jgQFjbrRyg4OIRQN8lRpjah/w6H4Id8h/VE=;
b=DSGb6eWE9R6p0W3rppCDbIunq6D6SOW/B/45rKDKPcShmAfoRFLmmB1ywto0DvvCOh
iabewCgSRl9ETs06Cp9VZUyPbDFhk7QLPA7AGu7szj63hqiZmnJwRDmUWf2c60iM9y2c
gqCE8nd+Te8s3xMpWKSk7PSrTv9Y12HeNk3ug=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1787712865; x=1788317665;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=UQBt9cH7jgQFjbrRyg4OIRQN8lRpjah/w6H4Id8h/VE=;
b=WZnoCGNAEs5HIkANrsgnYzEEZekEMTObLvbMo5Y6OJ+wSj3adwun3qi/7GqoKvnSOt
XJPAhT38KxnWbehN5hERxrgpSsR9ofcFzaGCS6VdVlNzXWA0EmOWgn3877jBdETN0ivR
U/sn5eeO1Hro8DHKaxiohKeO/xrfpmTOqp21ul4Hk0lGKOc/hUNPgWEkzLQAedSiIjeP
Uouu7yhPamCniQorM7wk+xPVTrp3hN3ELI3K3vzfUD3jbQRzxb57P0AMpTVo8vkVwpjp
yzcMfc/73tL+oZRViTQKuVR4vmGJJmzuJN1V3yVZvkCuQznMBONBcHOYhRE2W46SjfIQ
Kg/g==
X-Gm-Message-State: AFuF++lZcmjASQi1wYatofp6K7hilkFYsn0vddchTuQogkDizfLGXdy3
+zaCfs4OPQalIdFlxwe2VoG6n3RCzuiu8KYM6WdWzKp2EEko4+Tmzu+FkYjy6TCLuKRi2StO6qy
cC3WUWoXl/GbdXNqwgv7QCkHGAuDXmGBWWUVne3rRa1YWv+4=
X-Gm-Gg: AR+sD10gAcN57zxIOwUGLto0zqEMg/Sxd5/SBatHNmzDHS79ej4fB5coznIInqz7qcY
USsw+98SPsoJ0Fs51sR+gS4iZlZyWIjGcnKxNq2ZwnxXrauB0u7c47Y5/LdQ5Creqoc2XJOp7oY
xdTpaqHqaAzxJJoOniTkINHW6fRiD+0GYNmOG3uCDPdrwPwZTZtclgYp0DGh3roXPFPG0syfdli
N2qrmOuxQz7NcdmybxkkyU2x7uuTBfYpb9EBwpH+E3U1HYdA5EKoW7NVVqEJmSUGToHZoL4J0TA
Uwd3urKKTsdTWT1ySOfR7SNDWwKJe0nyxsEalq2nJnK5dQa0Q8WlxVtIu20c8V0ALP7RrCrjBZC
rSEyyHJkWM3w=
X-Received: by 2002:a17:90b:4484:b0:38e:9ef9:eb97 with SMTP id 98e67ed59e1d1-3966d5bc8b2mr5614172a91.16.1787712865425;
Tue, 25 Aug 2026 19:54:25 -0700 (PDT)
Received: from sabprogetti.com ([192.210.236.148])
by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39674dc659dsm480267a91.11.2026.08.25.19.54.24
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 25 Aug 2026 19:54:25 -0700 (PDT)
X-Relaying-Domain: sabeng.it
From: Docusign Via Docusign
To: support@nk.ca
Subject: Your Document Is Ready for Review
Message-ID: <370e40b7-4157-e6d8-c3d1-65ecc1ca26c2@sabeng.it>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 26 Aug 2026 02:54:22 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 9.8
X-Spam_score_int: 98
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:  support@nk.ca Your electronic signature is required. REVIEW
THE DOCUMENTS
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
[209.85.215.229 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
[209.85.215.229 listed in dnsbl.ahbl.org]
[209.85.215.229 listed in dnsbl.ahbl.org]
[209.85.215.229 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.215.229 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.229 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: kdjsuhd.es]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 TRACKER_ID BODY: Incorporates a tracking ID number
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.215.229 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.229 listed in bl.score.senderscore.com]
0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing
Subject: {SPAM?} Your Document Is Ready for Review
support@nk.ca Your electronic signature is required.
REVIEW THE DOCUMENTS
Please review and sign. Document can only be viewed by support@nk.ca
Thank you for choosing DocuSign.
Barbara:
No out of pocket.
Colleen M. Coleman
Paralegal to JOHN-PAUL A. SERRAO
AMICUS LEGAL GROUP, INC.
800 North Haven Avenue, Suite 205
Ontario, California 91764
Telephone No.: 909-906-9040
Facsimile No.: 909-906-9041
CONFIDENTIALITY NOTICE: This communication contains legally privileged and confidential information sent solely for the use of the intended recipient. If you are not the intended recipient of this communication, you are not authorized to use it in any manner, except to immediately destroy it and notify the sender.
From: Alvarado, Barbara
Sent: Tuesday, August 11, 2026 7:48 AM
To: Colleen Coleman
Subject: Claim No.: 260142784
Colleen,
Good morning. I am following up on out of pocket confirmation for your client so that we can move the property damage portion forward to completion.
Thank you,
Barbara Alvarado
MD Adjuster III
Allstate Insurance
PO BOX 1623 Winston Salem, NC 27199-1623
Direct (909) 941-5929 • Toll Free (833) 785-4391 • Fax (800) 924-0273
Email: I827218@allstate.com
signature_250147298
If you are emailing me a claim-specific communication, please send it to ALLSTATECLAIMS@NGIC.COM with the claim number in the subject line.
Note: The policy is underwritten by one of Allstate’s affiliates under the National General Insurance Group as shown above. However, in Texas, policies are administered by Direct General Insurance Agency, Inc., an Allstate managing general agency (Lic.1919020) and issued by Home State County Mutual Ins. Co. (an unaffiliated insurer). The claims under the applicable policy will be managed in accordance with the underwriting company’s applicable policies and procedures.
From: Alvarado, Barbara
Sent: Tuesday, July 28, 2026 11:54 AM
To: Colleen Coleman
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
Your clients are Fernando and Gerardo Farias and their vehicle is the 2019 Jeep Wrangler.
Thank you,
Barbara Alvarado
MD Adjuster III
Allstate Insurance
PO BOX 1623 Winston Salem, NC 27199-1623
Direct (909) 941-5929 • Toll Free (833) 785-4391 • Fax (800) 924-0273
Email: I827218@allstate.com
signature_250147298
If you are emailing me a claim-specific communication, please send it to ALLSTATECLAIMS@NGIC.COM with the claim number in the subject line.
Note: The policy is underwritten by one of Allstate’s affiliates under the National General Insurance Group as shown above. However, in Texas, policies are administered by Direct General Insurance Agency, Inc., an Allstate managing general agency (Lic.1919020) and issued by Home State County Mutual Ins. Co. (an unaffiliated insurer). The claims under the applicable policy will be managed in accordance with the underwriting company’s applicable policies and procedures.
From: Colleen Coleman
Sent: Tuesday, July 28, 2026 11:00 AM
To: Alvarado, Barbara
Subject: Re: Claim No.: 260142784
͏Who is our client? Colleen M. Coleman Paralegal to JOHN-PAUL A. SERRAO AMICUS LEGAL GROUP, INC. 800 North Haven Avenue, Suite 205 Ontario, California 91764 Telephone No. : 909-906-9040 Facsimile No. : 909-906-9041 CONFIDENTIALITY NOTICE: This ZjQcmQRYFpfptPreheaderEnd
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
Report Suspicious
ZjQcmQRYFpfptBannerEnd
Who is our client?
Colleen M. Coleman
Paralegal to JOHN-PAUL A. SERRAO
AMICUS LEGAL GROUP, INC.
800 North Haven Avenue, Suite 205
Ontario, California 91764
Telephone No.: 909-906-9040
Facsimile No.: 909-906-9041
CONFIDENTIALITY NOTICE: This communication contains legally privileged and confidential information sent solely for the use of the intended recipient. If you are not the intended recipient of this communication, you are not authorized to use it in any manner, except to immediately destroy it and notify the sender.
From: Alvarado, Barbara
Sent: Monday, July 27, 2026 12:02 PM
To: Colleen Coleman
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
We are working on finalizing the pd portion of the claim for this loss and are pending confirmation if your client had any out of pocket expense?
Thank you,
Barbara Alvarado
MD Adjuster III
Allstate Insurance
PO BOX 1623 Winston Salem, NC 27199-1623
Direct (909) 941-5929 • Toll Free (833) 785-4391 • Fax (800) 924-0273
Email: I827218@allstate.com
signature_250147298
If you are emailing me a claim-specific communication, please send it to ALLSTATECLAIMS@NGIC.COM with the claim number in the subject line.
Note: The policy is underwritten by one of Allstate’s affiliates under the National General Insurance Group as shown above. However, in Texas, policies are administered by Direct General Insurance Agency, Inc., an Allstate managing general agency (Lic.1919020) and issued by Home State County Mutual Ins. Co. (an unaffiliated insurer). The claims under the applicable policy will be managed in accordance with the underwriting company’s applicable policies and procedures.
From: Alvarado, Barbara
Sent: Saturday, March 7, 2026 8:38 AM
To: 'Colleen Coleman'
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
Just following up on previous email as we are working to finalize the pd portion of the claim. Can you please confirm if your client had any out of pocket expense so that we can move the claim forward?
Thank you,
Barbara Alvarado
Material Damage Claims Adjuster
P.O. Box 1623 | Winston-Salem, NC 27102
Office: (909) 941-5929
Fax: (800) 924-0273
Email: claims@ngic.com
PLEASE NOTE: We do not accept attorney correspondence or time sensitive documents via this email. All attorney correspondence or time sensitive documents should be sent to National General PO Box 1623 Winston-Salem, NC 27102-3199 -OR – Fax number 800-924-0273 or emailed to claims@ngic.com with the Claim Number in the Subject
Underwritten by:
Integon National Insurance Company
Integon Preferred Insurance Company
From: Alvarado, Barbara
Sent: Wednesday, March 4, 2026 9:15 AM
To: Colleen Coleman
Subject: RE: Claim No.: 260142784
Colleen,
Good morning.
I am working on the pd portion of the claim as demand from your client’s carrier has been received but we have a limit issue and need to confirm with you if your client had any out of pocket prior to moving claim forward?
Thank you,
Barbara Alvarado
Material Damage Claims Adjuster
P.O. Box 1623 | Winston-Salem, NC 27102
Office: (909) 941-5929
Fax: (800) 924-0273
Email: claims@ngic.com
PLEASE NOTE: We do not accept attorney correspondence or time sensitive documents via this email. All attorney correspondence or time sensitive documents should be sent to National General PO Box 1623 Winston-Salem, NC 27102-3199 -OR – Fax number 800-924-0273 or emailed to claims@ngic.com with the Claim Number in the Subject
Underwritten by:
Integon National Insurance Company
Integon Preferred Insurance Company
From: Colleen Coleman
Sent: Monday, February 2, 2026 3:50 PM
To: claims@ngic.com
Cc: Fernando Magana
Subject: Claim No.: 260142784
͏Sam: As you are aware, our office represents Mr. Farias for injuries sustained as a result of the auto accident on November 27, 2025. Please forward all correspondence to our attention and not to our client. Thank you. Colleen M. Coleman Paralegal ZjQcmQRYFpfptPreheaderEnd
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
Report Suspicious
ZjQcmQRYFpfptBannerEnd
Sam:
As you are aware, our office represents Mr. Farias for injuries sustained as a result of the auto accident on November 27, 2025. Please forward all correspondence to our attention and not to our client.
Thank you.
Colleen M. Coleman
Paralegal to JOHN-PAUL A. SERRAO
AMICUS LEGAL GROUP, INC.
800 North Haven Avenue, Suite 205
Ontario, California 91764
Telephone No.: 909-906-9040
Facsimile No.: 909-906-9041
CONFIDENTIALITY NOTICE: This communication contains legally privileged and confidential information sent solely for the use of the intended recipient. If you are not the intended recipient of this communication, you are not authorized to use it in any manner, except to immediately destroy it and notify the sender.
Note: Please be aware that unencrypted electronic mail is not secure. For this reason, please do not send any sensitive personal information such
as your address, driver license, policy number, Social Security Number, or claims information by unencrypted electronic mail. The information
contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient,
or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution
or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying
to the message and deleting it from your computer. Thank you.
