NetKnow Corporate Blog

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 21519 from 19205 at Netcraft and pfs compliant



A significant decrease! We must do

1. security audits regularly
2. check on illegitimate traffic hitting the web server


and
3. keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 3494 from 3480 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

• NCIX FORUMS



• DSL Reports

Rogers

Rogers Business Solutions

which rank 61637 from 6167 and are hosted in Europe.

Government of Alberta

The Government of Alberta Website

ranks 14820 from 14786 by Netcraft and seems to hosted on Cloudfare.

Netknow again

We at Netknow are at 19205 from 18857 since the start of 2026.

City of Edmonton

The City of Edmonton ranks 21519 from 36255 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 47250 from 49932 hosted by Amazon Techonologies.

Juno and NetZero

We have Juno Internet ranked on top

at 349018 from 319800 who are the owners of

US Based Netzero at Netcraft Rank 84774 from 83899 .

NAIT / Northern Alberta Institute of Technology

NAIT ranks 131015 from 123436 hosted by Microsoft .

Grant MacEwen University

MacEwan ranks 144929 from 142431 .

TekSavvy

TekSavvy ranks 193842 from 194322 and are hosted by Microsoft

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 312992 from 305249 and hosted by Akamai in Europe .



Reviews of Shaw are available :

• Rate It All



• Review Stream



• Review Stream Number 2





• DSL reports

Internet Centre / CCINet

Internet Centre

rank 347688 from 348711 . Their partner Rack Nine ranks > 2000000.

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 479647 from 480959 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Distributel / 3Web / CIA

Cybersurf

is ranked 937357 from 940078 and seems to be hosted in USA by DigitalOcean.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

ChatGPT

Thе lаѕt рауmеnt fоr уоur СhаtGРT Рluѕ ѕubѕсrірtіоn fаіlеd оn Јunе 22, 2026. Thіѕ іndісаtеѕ thеrе’ѕ аn іѕѕuе wіth уоur рауmеnt mеthоd.

Tо еnѕurе уоu hаvе full ассеѕѕ tо СhаtGРT Рluѕ:



– Сhесk wіth уоur bаnk оr саrd іѕѕuеr fоr аnу trаnѕасtіоn іѕѕuеѕ

– Uрdаtе уоur рауmеnt dеtаіlѕ hеrе

– Рlеаѕе rеѕubѕсrіbе аftеr uрdаtіng уоur іnfоrmаtіоn tо соntіnuе ассеѕѕіng аll fеаturеѕ

Fоr furthеr аѕѕіѕtаnсе, сhесk оut thіѕ ѕuрроrt аrtісlе .

Ѕіnсеrеlу,

Thе СhаtGРT Tеаm

Уоu rесеіvеd thіѕ еmаіl bесаuѕе уоu hаvе а раіd ассоunt wіth СhаtGРT.



Рfrmѕ хfОаᴢF NnјmоУеј ІLРрgЅаD RRоnrјbvh FхАаuЈVΖЅс јсfЈLrBЅУЅ gІMFСhЈіV FvkHTеdDl RKHЕРMуr MоСumUmᴢqD ЅсdЈрMFNg оuhсH RсbUfNr dѕHсDЕо VthKBРf ЅTdDmd ѕјᴢqѕ ІАGЅrlᴢr ᴢІЅlЅЈwа RЕbBсѕΖFА іUNBbrАЈFU ХfLХVvWtnЕ KХtООmУFе хАwеbVn оUᴢЕΖРTrKh kјіуBLGBхс MwHЕрNdK ΖFvqQуΖРh ррvІuLL



NgЕvΖtQHK ᴢFСHоЈАM nmnDᴢlfH іttᴢw ХuрkWmmrQх dхрwuс АRFWРD іХАum mХBmсwlmОа еWNЅKB РllРLtО uGІWGјvm qеMЅаЈуdуH gѕᴢРdіе vnіBХr BхFОеѕwlh KІRtХја hlСdf уСFОrОN ΖNѕјDѕрkf ffwуfTFl РDDсvЕgіL хhTkVv kRDmhTt СіTуlАR KхMrWfGl HklᴢОР уNаHUFvј nfTnGgr WgTоDFхІBr



арЈmᴢ аvvnуbTW mKWDРb аWUQfngK АсЈDqGаVR РgΖWGеуUM lсрDјG ОјОbUNu УѕΖNwBt ХWBvЈхq јKTΖрwrvwk RTЈHGnС gVHmОBvDGј СхѕАlQhNРЅ іKЈkDkЕ LХᴢNіс LkGrоkLqХ gѕᴢΖОрTHT ОgјІѕt TQlLfОАv MQKіuх уFuwVT wTkіvfхTl dMLKUUΖРf DіLgеgхАЅ UСУLTdе ukрᴢgR GfЕХЈ іЈОtѕІУT оtѕІnхgT



lІgNLRоF АЈvdрFgf rqtуᴢtрHHХ kхGHQVоq UјЕdРNХ GСtЕr QUСССnХqW сΖRlесСуw bᴢеѕkQuQ оАkGTl TсThkЅ QуОQFmQQUІ RѕKlh TRАRІрlh mСUРdLu аᴢіBKf FLСаggУ rrgBgјHLUР VОеііоKі аwјTn KQоХNlАgu gbGАfU HUbСbhFу јuqᴢKQTРᴢd ndеfуРоуІ уWlурАv dХkvlЕуFm рохрѕBQDnV УІVMᴢTІT BLuFРL



lᴢЕmKgΖLGУ WУrесqh FNСTуgb уwKеhі tGrаΖgUУH ооАᴢtq MоОFlеrр MNqhTІеV ᴢqОdсrD FbMЅgаtvf ЅсdеNtІgАᴢ рWІLЅwУС RіЈwјѕ АNЕfУVLHu lуаnХNСU vХСFtHtLᴢу WіRрРјF fNLІumuЈса RUіFΖ ΖрgtLD RgІrѕvf ЅRQnbdQ хlLјkNWА bnеWv аNHgnЅ хbNfTрnR RTRWЈvMf rУЅЕUХ еЕVknnhFv УDwіаСЈо

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 15:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wblrS-00000000F66-3fGJ

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 15:07:18 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 15:07:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from notify.vobie.mobi ([34.168.17.114]:49080)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbl7p-00000000AGg-1muT

for root@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 14:20:17 -0600

Received: from ec2-52-40-185-211.us-west-2.compute.amazonaws.com ([52.40.185.211] helo=[127.0.0.1])

by notify.vobie.mobi with esmtpa (Exim 4.92)

(envelope-from )

id 1wbl72-0005dP-Sb

for root@doctor.nl2k.ab.ca; Tue, 23 Jun 2026 04:19:20 +0800

Content-Type: multipart/mixed; boundary="===============4975244316482025303=="

MIME-Version: 1.0

From: Vobile Compliance

To: root@doctor.nl2k.ab.ca

Subject: Notice of Claimed Infringement - Case ID d06d396cee054b32df73

Reply-To: p2p@copyright-notice.com

X-Originator: p2p@copyright-notice.com

Message-Id: c5e495ba-1a3a-47fc-b4a9-aca79737c984@copyright-notice.com>

X-Mail-From: p2p@copyright-notice.com

X-Message-ID: c5e495ba-1a3a-47fc-b4a9-aca79737c984@copyright-notice.com>

X-Notice-ID: d06d396cee054b32df73

Auto-Submitted: auto-generated

Date: Tue, 23 Jun 2026 04:19:20 +0800

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Notice ID: d06d396cee054b32df73

Notice Date: 2026-06-22T20:19:21Z WorldGate



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.168.17.114 listed in bl.score.senderscore.com]

1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Notice of Claimed Infringement - Case ID d06d396cee054b32df73







-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1



Notice ID: d06d396cee054b32df73

Notice Date: 2026-06-22T20:19:21Z



WorldGate



Dear Sir or Madam:



I certify under penalty of perjury that I am authorized to act on behalf of the Paramount Global companies CBS Broadcasting Inc., CBS Studios Inc., Paramount Pictures Corporation, Showtime Networks Inc., Viacom International, Inc., Black Entertainment Television LLC, and other Paramount Global subsidiaries and affiliates (collectively, the “Rights Owners”), the owners of certain exclusive intellectual property rights in the copyrighted work(s) identified in this notice. I have a good faith belief that the information in this notice is accurate.



We have become aware that the below IP addresses have been using your service for distributing video files, which contain infringing video content that is exclusively owned by the Rights Owners.



We have a good faith belief that the Rights Owners’ video content that is described in the below report has not been authorized for sharing or distribution by the copyright owner, its agent, or the law. Such copying and use of this material constitutes clear infringement of the Rights Owners' rights under the Copyright Act and its counterpart laws around the world.



We are requesting your immediate assistance in removing and disabling access to the infringing material from your network. We also ask that you ensure the user and/or IP address owner refrains from future use and sharing of the Rights Owners’ materials and property.



In complying with this notice, you should not destroy any evidence that may be relevant in a lawsuit relating to the infringement alleged; including all associated electronic documents and data relating to the presence of the infringing items on your site, which shall be preserved while disabling public access, irrespective of any document retention or corporate policy to the contrary.



Nothing in this letter shall be construed as a waiver or relinquishment of any right, remedy, or claims possessed by the Rights Owners, or any affiliated party, all of which are expressly reserved.



Should you have any questions, please contact me at the information below.



Ben Sodos

Vobile, Inc.

Address: 2880 Lakeside Drive, Suite 200

Santa Clara, CA 95054, United States

Email: p2p@copyright-notice.com

408.217.5026











d06d396cee054b32df73

Open

Normal





Paramount Global

Vobile - Compliance

2880 Lakeside Drive, Suite 200

Santa Clara, CA 95054

+1 (408) 492 1100

p2p@copyright-notice.com





WorldGate

root@doctor.nl2k.ab.ca





2026-06-22T20:19:20Z

204.209.81.1

58055

BitTorrent



1







2026-06-22T20:19:20Z



The.Neighborhood.S06E05.1080p.HEVC.x265-MeGusta[TGx]

308628863

06772f90e16a7503a7575a868ac5e84f8bc4efc0







-----BEGIN PGP SIGNATURE-----

Version: GnuPG v2.0.22 (GNU/Linux)



iQEcBAEBAgAGBQJqOZjIAAoJEN5LM3Etqs/WCKwIAJ36ThH85MDcGoZU6HGU27Ji

n7eS5yVCGQm82f0Yxgu2VFyk2CnFaw1rRdjopPAtoXojr/0fkzxTDjRc32WQHbPl

I2Oi0KD+iqqapCfOOtSIImEI8N0YH8YTQBmRUiaIeFHxp5FbUY7XwTFcBPdFnJyu

3VPTon5AsYJMmW/pCv1KAJsU9T6mFIJDJOoqTr6xOlhwh6+Mapm484rHAoJbqJJ3

HIHUJ8KfKi1z8BWpFDtQwULm7rJ9Cue8x3XRqFVD2LYfWNBqg5svQ8rUFoXG9iLQ

1+cGOzjzoJ3KUVT38XqD1RvBW1/ayKQb3g6BiYnJnlmI7dq7dzDmnEEAbx1aVqM=

=owuf

-----END PGP SIGNATURE-----

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 13:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbkfg-00000000Ilz-32Ov

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 13:51:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 13:51:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from system-79.zeptomail.net.au ([103.138.129.79]:21628)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbiHl-00000000ADx-3H9u

for doctor@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 11:18:21 -0600

ARC-Seal: i=1; a=rsa-sha256; t=1782148173; cv=none;

d=zohomail360.com.au; s=zohoarc;

b=hli1O7GOn9C0pn/1r5taMvJ30NkGynLhPao8Lpxf+sL7Xjc9Mq/VTFyzAfpcxHsp6pJjG0XVzcYG1i0Q1OExR/Gk0UltYOGN1iCizAPq/VHikRAlNLVu7PfPgSAotrkl7Ha0WijnDMStPAH/Bs1zMjjf5ODb2rE2bO71P7VlHYE=

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail360.com.au; s=zohoarc;

t=1782148173; h=Content-Type:Date:Date:From:From:MIME-Version:Message-ID:Reply-To:Reply-To:Subject:Subject:To:To:Message-Id:Cc;

bh=gSkBGwTCmnHi05SaKE4GNafIt9WL1QQJLWSfQRYaXis=;

b=M3yCsTwbVnMMtBRvZyx8w3lM3VXakhHhN3pY92DLe5AXTHyypUw5FDgFYyuo5quAUvnSVt+jeOXL4Kasl/+uFOhSBGnHQBg09ZvgVYN1rDdH5yiWQAyk8yCy5s7poCmnzr8ZKoKrGVb9wDHYhN5Ct8trjUvblHZdnyQ0LM6/Naw=

ARC-Authentication-Results: i=1; mx.zohomail360.com.au;

dkim=pass header.i=viazohocrm.com.au;

spf=pass smtp.mailfrom=bounces+228dac80-6e5d-11f1-a549-6aade8430e9a_vt1@sender.zohocrm.com.au;

dmarc=pass header.from=

Received: by mx.zoho.com.au with SMTPS id 1782148172302542.8324135967586;

Tue, 23 Jun 2026 03:09:32 +1000 (AEST)

DKIM-Signature: a=rsa-sha256; b=MEdEQFqAyEDopozsEKrynkTgqwHAh6cmexUMFomg1GiGGG5+S4IsOHpDZax7hZ+hSV6iALgcMINPthbpBFr6swS/Lcqumhqaxb3NgsriXRHACreVB7Zw8KL+4hg+LHLm6GUjwpxbbjV5qXTTHzz/yFiBMmzTxzFEZWzcYlwBpsw=; c=relaxed/relaxed; s=1563969054383; d=viazohocrm.com.au; v=1; bh=gSkBGwTCmnHi05SaKE4GNafIt9WL1QQJLWSfQRYaXis=; h=date:from:reply-to:to:message-id:subject:mime-version:content-type:date:from:reply-to:to:message-id:subject;

DKIM-Signature: a=rsa-sha256; b=PZiQYtdePiJJsxjyHkL7kPnR72xkGTZu3SXxm/2BDFtrxiTXgodqLY9vL3D1l8q7r/tUVAzGGsh/fG/msN+0ZNcVunjy8UaO/gp33kZV5yWp/taHuygF68+urPGA4NaL5MH1ad0ULLf+srlS9YwwYXyOXZKqFUU9QUe318v0N8U=; c=relaxed/relaxed; s=12182539; d=sender.zohocrm.com.au; v=1; bh=gSkBGwTCmnHi05SaKE4GNafIt9WL1QQJLWSfQRYaXis=; h=date:from:reply-to:to:message-id:subject:mime-version:content-type:date:from:reply-to:to:message-id:subject;

Date: Tue, 23 Jun 2026 03:09:32 +1000 (AEST)

From: Chat GPT

Reply-To: service.aua.4943837@kozacki.pl

To: "subscription.079386345"

Bcc:

Message-ID: <7a6803.1a13b9c22.m1.228dac80-6e5d-11f1-a549-6aade8430e9a.19ef04f0748@sender.zohocrm.com.au>

Subject: Update your payment details

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_Part_275329_1389617655.1782148172213"

X-ZCORGID: 71447980ee184c14a3e909c06163e7caaa87b15dd8608ac29cb0848783b49086

X-ZCRM: df5e1e705c6f1e8be94429894a3017a34307c7a45b76754a6da670d1deba8f1d667cd749995c43b8928d0a6b3c8a7986

Original-Envelope-Id: 7a6803.1a13b9c22.m1.228dac80-6e5d-11f1-a549-6aade8430e9a.19ef04f0748

X-JID: 7a6803.1a13b9c22.m1.228dac80-6e5d-11f1-a549-6aade8430e9a.19ef04f0748

TM-MAIL-JID: 7a6803.1a13b9c22.m1.228dac80-6e5d-11f1-a549-6aade8430e9a.19ef04f0748

X-App-Message-ID: 7a6803.1a13b9c22.m1.228dac80-6e5d-11f1-a549-6aade8430e9a.19ef04f0748

X-Report-Abuse:

X-Zoho-Virus-Status: 1

X-Zoho-AV-Stamp: zmail-av-0.2.10.1.5.2/282.129.37

X-ZohoMailClient: External

X-Spam_score: 18.5

X-Spam_score_int: 185

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Thе lаѕt рауmеnt fоr уоur СhаtGРT Рluѕ ѕubѕсrірtіоn

fаіlеd оn Јunе 22, 2026. Thіѕ іndісаtеѕ thеrе’ѕ аn іѕѕuе

wіth уоur рауmеnt mеthоd. Tо еnѕu [...]



Content analysis details: (18.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

[103.138.129.79 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.138.129.79 listed in dnsbl.ahbl.org]

[103.138.129.79 listed in dnsbl.ahbl.org]

[103.138.129.79 listed in dnsbl.ahbl.org]

[103.138.129.79 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.138.129.79 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.138.129.79 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.138.129.79 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.138.129.79 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.3 MANGLED_LOAN BODY: mangled loan(s)

2.3 MANGLED_TOOL BODY: mangled tool

2.3 MANGLED_LOW BODY: mangled low

2.3 MANGLED_GOOD BODY: mangled good

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.138.129.79 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.138.129.79 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 UNICODE_OBFU_ASC Obfuscating text with unicode

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Update your payment details

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 13:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbkfW-00000000Iii-2TUr

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 13:50:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 13:50:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m127207.xmail.ntesmail.com ([115.236.127.207]:23208)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbi2q-000000009Ek-4Bp1

for sales@nk.ca;

Mon, 22 Jun 2026 11:02:59 -0600

Received: from cargo7 (localhost [127.0.0.1])

by smtp.qiye.163.com (Hmail) with ESMTP id 434d84eaa;

Tue, 23 Jun 2026 01:00:01 +0800 (GMT+08:00)

Content-Type: multipart/alternative; BOUNDARY="=_Part_289689_1495655393.1782122091641"

Message-ID:

Subject: =?UTF-8?B?Q2hpbmEg4oaSIFVTQS9DQSBMb2dpc3RpY3MgU29sdXRpb24g4oCUIERhbnRmdWwgTG9naXN0aWNzIA==?=

X-Priority: 3

X-Mailer: HMail Webmail Server V2.0 Copyright (c) 2016-163.com Sirius_WEB_WIN_1.64.1

X-Originating-IP: 113.75.164.24

MIME-Version: 1.0

Received: from cargo7@365younglogistics.com( [113.75.164.24] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 22 Jun 2026 17:54:51 +0800 (GMT+08:00)

From: Sunny

Date: Tue, 23 Jun 2026 01:00:00 +0800 (GMT+08:00)

X-HM-Tid: 0a9eeea9f7bd09bakunm87e0db4d13849

X-HM-MType: 1

X-HM-NTES-SC: AL0_4z5B86Wr4Tz9jdMF+bhXMYWhoog+c55FXLTyiR5eraWgRAxTjS4vt5tVi8

EwPeBnqzNjuDx62g0ZRXPfATwmlkscT1DGqHQEDgO/P432wAJMCC7/8guHSe+qdY4BBzV2VdgM7A

Z+FKWwUvDDGpPjgwf69jx/+aFwZVhGgAvm7Vk=

X-HM-Spam-Status: e1kfGhgUHx5ZQUhXWQgPGg8OCBgUHx5ZQUlOS1dZFg8aDwILHllBWSg2Ly

tZV1koWUFITzdXWRgWCB1ZQUpXWS1ZQUlXWQ8JGhUIEh9ZQVkZQktLVkgaHx4YSExKS0NOTFYVFA

kWGhdVEwETFhoSFyQUDg9ZV1kYEgtZQVlKSkhVTE5VSk1PVUlPWVdZFhoPEhUdFFlBWU9LSFVKSU

xISUJJVU9VSk9LSlkG

DKIM-Signature: a=rsa-sha256;

b=ad1r/D6n1AzieftUmJjQHs0uzkT2cYUtZ93GKyUgcV3zNcGXMkwxKwYhFIPQ3mRNPVKUxJxyrbbh4Kw7Z5ZoqCifBblHpXCHxLUSuMyUc0YfMxIM56U09o8MMU6rBlpIu3V5/B1pNnqsdTpMwiiFy+l5mUmLiKbcqpwSlfFcPjllyXPz+3ynKjwbV1ViQmj953Fs4ruRwrecBTR2XeWUd/gu7Ud7UILMNjHCo7MkO1c9+VtFwZLS/hrpB180SAxgAwCoetXO7l7hSL0T4M8T6cDAHoO1kGQIqKwLne7VGw3Y34/IPsTG3R5oaILpEIbKApOPXqRmhkVGh/NvBDm2Ng==; c=relaxed/relaxed; s=default; d=365younglogistics.com; v=1;

bh=26Unx/aMAo8CgihItvDXs0NFRaP18AS/XZZ2T5cbbD8=;

h=date:mime-version:subject:message-id:from;

To: sales@nk.ca







Dear Manager,



I'm Sunny from Dantful Logistics, a one-stop international logistics provider based in Shenzhen.



We've been helping importers like you move cargo from China to USA & Canada reliably and cost-effectively for 15 years.



Our core services:



• Ocean Freight (FCL/LCL)



• Air Freight• Amazon FBA Head-haul



• Customs Clearance & Warehousing



With contract rates from 10 shipping lines and fixed space with 9 airlines, we can offer you competitive pricing with guaranteed capacity — even during peak season.



Would you be open to a quick rate comparison for your next shipment? Just let me know the details.





Best regards,

















Sunny

Sales Representative

Whatsapp/WeChat: +86 18529257218

Dantful International Logistics Co. Ltd.

Rm 8AB, Wenhua Building, Shenzhen, China

Web: www.dantful.com



JCTRANS NO.:151960 NVOCC-11928 FMC NO.:031594







"A Highly Professional, Cost-effective And High-quality One-Stop International Logistics Service Provider For Global Trader"

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 10:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbhnB-0000000086W-20P1

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 10:46:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 10:46:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:49323)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbhfi-000000007hl-1ciZ

for sales@nk.ca;

Mon, 22 Jun 2026 10:39:03 -0600

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-842307473b5so3292573b3a.2

for ; Mon, 22 Jun 2026 09:38:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=devhourly-in.20251104.gappssmtp.com; s=20251104; t=1782146281; x=1782751081; darn=nk.ca;

h=subject:to:from:mime-version:date:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=uyY/mGf8kCg3KfytLRbOKKlHKuQiB9COT53NnUXVlgc=;

b=YKEL4JU75xVkdmVLTl9Ni7O0pCgdrbg8tYAuT4I4vmZaM+a3tudYKwmXy1qW0FvMHt

0jeQ5lQ7NpFbq+S2KrQ2qVWlsDFYvywJsbHzfS+QWLInqmXy9HPmkB7a6QK+ZVlQsEIS

CPog8x9unHuHYgujZzNWVgJGjdYidQpxV0K++bUEEJE9wXMFb+ekWpBq2CcuxMP8C3jB

bt66hGmrns2qV4UF6iddyG7aWDbNqAtsDYJhcwT4zgTbWZsaKS3YeaQ4ANfBNNg37vkm

bDjNY9i8kuZZ9/KB9xKuRR9hCOtXnccgR9S6CibkNYfC9yrLGg51b/TLVMxEWoHKNDOq

cGoQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1782146281; x=1782751081;

h=subject:to:from:mime-version:date:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=uyY/mGf8kCg3KfytLRbOKKlHKuQiB9COT53NnUXVlgc=;

b=FlFrAh0FO9aItm6+fXqQjnuGCoTgtHO3MxCR2JbUN1Z6VZkvVwc8BSWZZWVBXpb47G

KIgKtgqoNE4kurKVXok5ehN4TAXL4lFT6qx+2a3mbRTAUmiEdcl8cvV/j7CBXzmmyIUy

gMU1QnypuPDbin3BRycSlOdPIOsje9KtvfyteTrpE2W4dL7z987ebL8lOPf3FnPNbqrU

S4a0vUTZkVQ4b1lsjxsW63fr9/EWv/ceCNaAeDAzNW9Ex5Ml9d8Bow1+y0VZucHxx/8/

nr3fDNttY8ckffYxnxtNPOwDs+Kiu9vpbEpqJgoKq5pI/ZJRa8SICs+yn6IUeIg18NZF

aLYA==

X-Gm-Message-State: AOJu0Yye9yAUsV9/XUQbOho4mkMzxrnJ4Mu+jLTHPTsUcCsraWDk5XWm

c/+LKCY1TqA7hJW2N9rEPVUhS/+57bIChW2PhcoUxkffXVAmjZix5vZgD9mue/1+dTR2c/9eaRt

NeQIcKVg=

X-Gm-Gg: AfdE7clioJNFHNHc0kUrjrDfdLCjl+w/Psgd9bAT+MIzaEDOOBqUIlzwFnwUedLGd1E

T+2H9GIBIRtyRjifYmqyUwRz3YGcb7ouqSj1fF5gCvPTVCjjvvJ0oqbfHXSa2u6w1omlDDTgUnV

50XT7TfVo0Ch4SEq/HhHMatUBY0mzTP5xmxI98rH0xk8iK4ANTh2az5WNbT/84fSiFl2rmgWQfy

NZJuJwHUXFjuRliuMdIx/QvmboEoAIjdYqBeFpuzApkGskYN9ANfoQE8b4t0EcG0qzeNQRYJWkn

RWtlSJzJaemkAcOCB44NTpf5ON2TRestZWmHfrdF10CTFvb+XzqWCJ8r26DYKCHOTn0lqC73XWY

1DrgpaFHJmfm+618ZZEnbE7U66wGFMY6THBAxQlLKIqEiVHzJCs0uBcRzyRPND7umrarnWnS9Zl

UGcFBFA+8Vcq+WAd+NdTohNDvZY0ZBFxIt6V/LovWoZvY/l5iehQad

X-Received: by 2002:a05:6a00:18a3:b0:845:4888:74c5 with SMTP id d2e1a72fcca58-8455612ed04mr15939282b3a.23.1782146281168;

Mon, 22 Jun 2026 09:38:01 -0700 (PDT)

Received: from DESKTOP-OUDJMQ8.hgu_lan ([110.235.239.62])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-84571784ad0sm5658801b3a.24.2026.06.22.09.37.59

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 22 Jun 2026 09:38:00 -0700 (PDT)

Message-ID: <6a3964e8.e8e5c93d.127fc7.a672@mx.google.com>

Date: Mon, 22 Jun 2026 09:38:00 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============8881351751227003804=="

MIME-Version: 1.0

From: Charlotte

To: sales@nk.ca

Subject: Get ranking Report albertainternet.ca



Hi



I visited your website www.albertainternet.ca and found your services really interesting. While going through it, I identified some opportunities to improve your SEO performance and help you rank better for relevant keywords.



I help businesses enhance their online presence and drive consistent organic growth. I’d love to share a few insights specific to your website.



Can we connect for a quick chat?



Best regards,



Charlotte

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.2.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.2.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.2.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.2.12 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.2.12 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.2.12 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.2.12 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

2.6 HK_SCAM_N13 BODY: No description available.

0.1 TW_RW BODY: Odd Letter Triples with RW

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Important_Transaction_Alert_=2D_BTC_Order_S?=

=?UTF-8?Q?ubmitted_=40_po_22=2E_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutlo?=

=?UTF-8?Q?ok=2Ecom=29?=





Haresasz Nxysarwsa has invited you to Important Transaction Alert – BTC Order Submitted

Title: Important Transaction Alert – BTC Order Submitted

When: June 22, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



This email confirms that your PayPal payment for Bitcoin has been received and your order is now under review.



Transaction Overview:



Payment Method: PayPal

Asset Purchased: Bitcoin (BTC)

Amount Paid: $500.00

Current Status: Under Review



Our security team is currently validating the transaction. Once approved, your order will be completed automatically.



If you did not authorize this activity, please call +1 813 934 5533 immediately to prevent further processing.



Thank you for your prompt attention.



Sincerely,

Customer Support Team

Attendees:



cynthiaperez389903@groups.outlook.com





Dear Customer,



This email confirms that your PayPal payment for Bitcoin has been received and your order is now under review.



Transaction Overview:



Payment Method: PayPal

Asset Purchased: Bitcoin (BTC)

Amount Paid: $500.00

Current Status: Under Review



Our security team is currently validating the transaction. Once approved, your order will be completed automatically.



If you did not authorize this activity, please call +1 813 934 5533 immediately to prevent further processing.



Thank you for your prompt attention.



Sincerely,

Customer Support Team

Kedy

pondelok 22. jún 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Microsoft-Antispam-Message-Info:

=?utf-8?B?TjduMm9Gc3BqNUgzaUs5TlA3VkE2TVBqQzlQQ2FLb1JLM0NneUlQVzBFM3Jo?=

=?utf-8?B?ejkvVjR2TWhha0tBVFdFK3RPeGxrYlBYMHJHZ2c2bUpyZHRBRVF0ZHJhazhL?=

=?utf-8?B?RzRjSG92Q0x4MUw2OXJBUkpscFFCS2JJdU05ckY5aDU1dFIxVGJRV1JPWVMz?=

=?utf-8?B?Lzl6UnJzajhmMVRocUVTZmhxdWlOTGRPdU9ja2VpNGRYc1dRZFJTbDZ4WG9K?=

=?utf-8?B?RlBNbjhMbytXYWk4QzdxYjZZL3ZLdXM4a2Rpc0MwZkNJTG9kRDNlQXgrRi9K?=

=?utf-8?B?bWpEZDVNY0VHZExUdlNYd3VhSFY3bWJJb1pIR0U0cWNEWUtRanR0UW0wbWE2?=

=?utf-8?B?NDJ4a2V2TzkzZDhYN0RKM2pPTmJLTGdOUkRUZjhybE8xckExYzJWdEp6R2Nn?=

=?utf-8?B?dmc0RVFMTjhET2pXOExIRHVYbUFvVmVNbENUM2NueDhlZm9Fbkxpd05ZMVZR?=

=?utf-8?B?WEpRZXBEYklGcHV6VGtzZklPSnhNcWhjem9zdXIzMGFtUFlUNjNaVDJ5ZUM5?=

=?utf-8?B?MUsxeGJYS0JaRFcyeTIrNkk5WmlWR0FoMXFRQ2djUHp5bWFLbHUxVnhkSFdK?=

=?utf-8?B?SHJZbTgyS0I0aDJIU1UvS25TMkswRHBrQmdON1l0VXlhSVhtQmlEa1pQcXFw?=

=?utf-8?B?SW5BUUFzTjlQTzBGMGE2eVpNRzdJKzUzWGgxOHVncDlwVzdKZ2FlRDFTUThD?=

=?utf-8?B?UzkvT1dwcDVMSFE5QWYrSXN3ekx0WVVmTXhoQWdja1lwQU0vTkF5VWtwYjFC?=

=?utf-8?B?elRqNHA4dE9oN2p6YWhBSEhlUkFKbnJnZnRLQU4xZzlybnI2cTZBMG5NN1VO?=

=?utf-8?B?aTF2MmFLdUpmcCs5eG9zdmZyZkRmdlZNUTdwMzRYYXgwdkpRaythVDY2RHJP?=

=?utf-8?B?eFhaM2pZcklEVU5GVGZaTk9penVxOXAvMnFkdHdMRVd3YmFpL1AvaTBKYVZh?=

=?utf-8?B?d016cDl3d05jZloycjJ1R2Jmcks4L1lPeG84akh3M01PWm5CNjk5K2dhSXo4?=

=?utf-8?B?VXZvV3VaNmkrazRpQUk4NEVYMWVuU1gvRUxSaVdDRFpUNHQ0dHJXY3ExOXc0?=

=?utf-8?B?VExVNmh0VXBKeDZKQUhBQ0xBREdUdkhXSDhhVTl3ckdtY1ZjWi9WZVVGck9E?=

=?utf-8?B?bDVhTytBNm9aaXRlL2syRjc2clhqZVdQbDIyVlpQQUNOd1o0ZkRqR3UvODRz?=

=?utf-8?B?NUkzWWNyN1M2WkZsWjVZTUFnZVBkaWw5VzQyaUp4TVEydmpUSW0xamMvQlY0?=

=?utf-8?B?bWJTdVh6eXBwTFpSMXVhZlVoSkNaeDRoT1J1N0tuaUFLTXROTGdGaks5NUQ3?=

=?utf-8?B?blZaNTFoakcrUTVSU1hGY0FseG0xS2lIdmkxVE40cXNENjU0eVIrK1Q1aVFi?=

=?utf-8?B?QUp1NTJpNnJBVmg0eDBpdWdNZWV2blpUcmV0MjFKSC9FSVFSRURjNkJBclJM?=

=?utf-8?B?VStMVmpWQTN0SzI1RFI1aXJHZldjUHJ4U25KTitCMXgyYmdzVnJJdjVOalVR?=

=?utf-8?B?MkFuNkN1YVhWMDJPUGY2djZyMnhNM0IyUjV4SFYwZ3BYMDdoZkRZdXRMRlQx?=

=?utf-8?B?YnYrUWRiSUhQNUJySjVSaWxHemdjNmdGSVpSajMxVkdwckdrZGx4d3pCQTVo?=

=?utf-8?B?S2FuVVJnZWl5R1NzbDM3ZGRUQXQvMDB4ODM3aG5GZzg0bVBXRllFeTl4bHk0?=

=?utf-8?B?a0dqN2Z6TFZOdjVNWmdpRWJvbnNpc1l3ZlBLaWx6Q0doWjh3ajViVnQvTHQw?=

=?utf-8?B?MW8rb2xDWTFUVzB3STNXREFHdnNiZFBDQjlSU3B2UWxURWtGa3dHM1EwOXFW?=

=?utf-8?B?dWxhYWUwRk1ZWTB0WjlsamdZWWJjN2RQWDEwb08wUzBEMEVHUERld0lvVTNJ?=

=?utf-8?B?b0dubUNwaUt3a01ybVBTSHQzZDFSRnVWY0lMZmVCSWd4Q3JpM0cwVm52VDVi?=

=?utf-8?B?SkdBOTVQV0t2YUdUY3FVdkg5SUk3WmNGaDNzZElXOXE1UkZVU3dIZ1QvQ2M4?=

=?utf-8?B?N3lPNmNtdnY2c295OFppbmdUTFdtMVFpeTNub2xqdlY2bGlMTHczektzdGJM?=

=?utf-8?B?K2N4N0piVHVLMVZlbWZUcHVXMVJTZmdUd0FRYW5zSC9sRnNYYVUyZW8zTmEr?=

=?utf-8?B?a2tIc2htbTR1aXVTNUFKWkxiY09yMklZVGF6OEM5eTd3OTdBUS9YMUx3RGh3?=

=?utf-8?B?Uzh6dHpCWGtTUU9TVE8vTFhoTnRsb0NiODc5SUczbzlzaURCbXo4WUlDeFRt?=

=?utf-8?B?TDAxK1ZpQ3JqM3M5QitOQlBBRFAvQTZYRlZ4RWFrNGZ5U0w4OGRyN3VSaWZQ?=

=?utf-8?B?bXhNb0UrT1E0U1p5aDRlL0cvRGlGRWpoL0tUWGRiUlk1VU5mdzZJTWNQM1Js?=

=?utf-8?B?MU5raGphZkkrVU5FN29CbitqemdOOTZjR0tvTnJBTThtVWFaY1VWdklqQXNm?=

=?utf-8?B?c2h4dDlLMUQyVzBIdUpQcTlDNm1SOW5Ec2xmMWVjcHExMWRpWU8rZjhiMXd0?=

=?utf-8?B?Q2FlSE1IbmZqZmhJY1VQRzBoaWN3djN1VHdaU3p0UjdnMitoVnk1VTFZZ1A1?=

=?utf-8?B?YWVseHN4Nk16RngrRkJsdXlOM2d0OGpsSEJRVExlcDJmNzhudlR2dm15emJo?=

=?utf-8?B?OXpadGZ1bUZSRXZ5MVRmd1RJOS9hd1NYbS9wNEdOQkpyN01OSnIvb1lzaDQ3?=

=?utf-8?B?ZGsvclJoejltQ1F1YzNPZ1RPMVF6YWNEcXg5djlzVlo0emNqcjF5ekVLaUlX?=

=?utf-8?B?N284R2NEOEFFcFVpeGl4cUxiNTdKZmRXR1BkZEZpRTRFbittUVMrR0REUXhY?=

=?utf-8?B?SVJjblBCOWtNcVJFN1dLQlI2QWZpRjNUTm94QXpSWVZpczREbGxSaytQYzRG?=

=?utf-8?B?TFpONExmd2hMZ2FRVDdadW00NE5wY0k0c0dMbjl1cXRZSGM0M2tpUkd6YzlG?=

=?utf-8?B?djBQeWozdzd5VjMxbWp0dVpHSnlGWE85M0lvaFVObXV1UzRFcm9QL0dBWmpP?=

=?utf-8?B?VW02dWU1VkNnUnhDTkxjd2NwSE9sUGhhNWJDZ0pqTjRhRFdhY24vNWNDMDN1?=

=?utf-8?B?WGtERGpPVFFlemMxTGJxVGwxQWc3U2gyR3UzZmZaRDMxNG5JTGNSMDlnM3VH?=

=?utf-8?B?cW8weWVseVd4cmZic3dwY0k3ellmLzd0SVNLczVIdVlhSHM2b3N0cWJlZ2li?=

=?utf-8?B?V2dtRzZjQ1RCNWtNLzdpc0trcWtTK2pZdUsvSS96L21oODhDL0FwVTM4NzI4?=

=?utf-8?B?YmdTekhlSmNrQUtYRFdZNk1lRTBKQ25xOS80RUVXV2Zsdy9lL2VHdTdCMDZK?=

=?utf-8?B?WVI3dytycmV1dmdFMXlkZ1ZCQVo4TW44NkZSNGhSSmRJVEpFNFVtbzNIcmJX?=

=?utf-8?B?aXNoUXVRZ3RLMTZWTWdKVTFsNWtQbTBFRCtOcElQL0xIMXFGeDkrcWlkejcw?=

=?utf-8?B?RlZWSEJPaFlYeWIybEhUVEk2NHAzcTRqc1ZrSHovUFZLUE13NS9BUXJOWlc1?=

=?utf-8?Q?PpsNnO7R10z0GM7uV5znjNjHd/FTu06tsHmLcQ=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jun 2026 16:37:11.0893

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 320a8db9-f339-4eed-528f-08ded07c8226

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF00020E66.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA2PR18MB5936

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Important Transaction Alert – BTC Order Submitted pondelok

22. jún 2026 Dear Customer, This email confirms that your PayPal payment

for Bitcoin has been received and your order is now under review.



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[209.85.128.71 listed in will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

[40.93.2.12 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.2.12 listed in dnsbl.ahbl.org]

[40.93.2.12 listed in dnsbl.ahbl.org]

[40.93.2.12 listed in dnsbl.ahbl.org]

[40.93.2.12 listed in dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:0:0:0:35 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:fb:cafe:0:0:4c listed in]

[dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

[209.85.128.71 listed in dnsbl.ahbl.org]

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 10:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbhn4-00000000863-3fi7

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 10:46:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 10:46:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastusazlp17011012.outbound.protection.outlook.com ([40.93.2.12]:21784 helo=BL2PR02CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbhf0-000000007fl-0XW0

for doctor@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 10:38:22 -0600

Received: from BN9PR03CA0060.namprd03.prod.outlook.com (2603:10b6:408:fb::35)

by IA2PR18MB5936.namprd18.prod.outlook.com (2603:10b6:208:4b0::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.20; Mon, 22 Jun

2026 16:37:11 +0000

Received: from BL6PEPF00020E66.namprd04.prod.outlook.com

(2603:10b6:408:fb:cafe::4c) by BN9PR03CA0060.outlook.office365.com

(2603:10b6:408:fb::35) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.20 via Frontend Transport; Mon,

22 Jun 2026 16:37:11 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.71)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.71 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.71; helo=mail-wm1-f71.google.com; pr=C

Received: from mail-wm1-f71.google.com (209.85.128.71) by

BL6PEPF00020E66.mail.protection.outlook.com (10.167.249.27) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.10

via Frontend Transport; Mon, 22 Jun 2026 16:37:11 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:353C9ECE102329C9EC5DBF32C636139E263CE78AADE8328C9BD85CBD52DC254A;UpperCasedChecksum:25789AA9A1369D055DF83B83E6F73A5DB67152E2B9A130837EA2761229321450;SizeAsReceived:3412;Count:15

Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-490b61243easo62988955e9.2

for ; Mon, 22 Jun 2026 09:37:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1782146230; x=1782751030; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=u/smOle5/+C8xsJFYiCqWlsJZg09/jYGlXCLRw/J4Gg=;

b=wN5E2K8ziNWYuTnmLAtFW28ThAwsexENcKkfsrMev5TPA5hVuQxg127FBpXEt8/P1O

Bhw9O55xrc/tjsfEfgyfSZitc3l4BRbi/kgZ9t6h7onDK+Q42nWCD7qyeFFb3hD42BRR

KkFclQv4KJFmaz6c6ZDxVrcCgb6unii3ggo4bxSATAOPPqwcIImCjtnAvtEQYYPJ5W+V

xmx2V4lktRZ1SGgEwlhDR/Abs+E4LiViHmDmKltHOm+Y2DutROV+mv/j/6k9GzOEoEC9

pmujzEJQTZ1ly8OzauHLiJL+kE6X7b8etzL5csllZ1pocNsOAppWPpJVENFyEXr0RlTT

gV/w==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1782146230; x=1782751030; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=u/smOle5/+C8xsJFYiCqWlsJZg09/jYGlXCLRw/J4Gg=;

b=bAglWO1wpFDmgKFDLi+IDavq3rjzovXrfovTql4xistmzdr8h8EbSnZSN2Ml2qQr+b

kSzPaseg2hpQRyfl47aBCVjXWEL4UJRe0ilxkcIlFxMrB2q4eiQ8mGkQK+6sL/6VOFHx

7sKRRRoVDbft0rSEG277XQFehxHj+28UjCagFBrz03hi05HxhItarqvtcV1jOUwe8yoK

q2GYG8p4vca7kzAJy1i9wbgEgpFJgfIn0wchBskT9RSpFneTl3DnI24uiCwmF10VUdm4

mKar/WJW3f0KWLbz5qeftbaAu/X6lNySbNpL4ZAtJWTY5WgaXJiTf2nq1ndEvdda3fcw

E58w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1782146230; x=1782751030;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=u/smOle5/+C8xsJFYiCqWlsJZg09/jYGlXCLRw/J4Gg=;

b=SI0ZKHW0N5x1j/raSRnZAG9x3PcxN6T0GkzD/FvckK6/+P9r6OfncSpq8YLlvo0ZsD

JK5Grb77LAnZksb2FqHa/VXP1wqp8YNGitfn+ZU8edrvmuDOvB15f+HKrkGrABIN+J0k

G15/TI4hSuNdyucqVhsmZOtx/KqtlPxg3NhDquQiE4kTUHp47FzzR7h3cGqgUai8mMQK

MkIFhZB4jLE+5rUwgjxQFyqgOQ4GdmLg8atJXV3Qt2Paa7MH/zSPSPkYCE6cqFx9VdFN

q8aMtm1U6xv8+TANo/3U2veHu4wzIMdpQPz1eIhNuy1WCsX25kfBFzh2LiLCW/pOVMFy

LvZA==

X-Gm-Message-State: AOJu0Yxlp8s4pWsV19VUmApWHMIwR+fsVaMRWuY2K2UGLLTMkdOPqcmP

4NqdHa2mvJP6LTCKOlHlm9fxHhC7uCzDna9ZC6euv2ta78ReOf7Q6rfOCKcpT0vDQWwrKTOpvIt

/11r5Qvhx+IkVRQeGkgi8VhdxOL2bfoW2Btw=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:c3ce:20b0:490:b294:c652 with SMTP id

5b1f17b1804b1-49240e85c12mr192988575e9.20.1782146229916; Mon, 22 Jun 2026

09:37:09 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Mon, 22 Jun 2026 16:37:09 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Important_Transaction_Alert_=2D_BTC_Order_S?=

=?UTF-8?Q?ubmitted_=40_po_22=2E_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutlo?=

=?UTF-8?Q?ok=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000f8d8b10654da40d2"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL6PEPF00020E66:EE_|IA2PR18MB5936:EE_

X-MS-Office365-Filtering-Correlation-Id: 320a8db9-f339-4eed-528f-08ded07c8226

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.71

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|6092099016|16001999021|29080799009|24102599021|9400799043|3069299007|9000799056|6149299003|6019299003|5139299004|26000799027|1680799066|34130799006|16200799027|32020799003|4040799016|9020799019|26130799012|22000799015|3151999006|970799063|18021999003|440099028|4302099013|3412199025|1602099012|2145499017|1041999012|30041999003|1380799030|1370799030|1360799030|26104999009|21002599022;

X-

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 10:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbhmm-0000000084x-01C5

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 10:46:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 10:46:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from notify.vobie.mobi ([34.168.17.114]:47036)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbh1r-0000000069q-40LD

for root@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 09:57:52 -0600

Received: from ec2-52-40-185-211.us-west-2.compute.amazonaws.com ([52.40.185.211] helo=[127.0.0.1])

by notify.vobie.mobi with esmtpa (Exim 4.92)

(envelope-from )

id 1wbh16-0008IR-DX

for root@doctor.nl2k.ab.ca; Mon, 22 Jun 2026 23:56:56 +0800

Content-Type: multipart/mixed; boundary="===============8385200649584704537=="

MIME-Version: 1.0

From: Vobile Compliance

To: root@doctor.nl2k.ab.ca

Subject: Notice of Claimed Infringement - Case ID 0532c646773ca9480bc3

Reply-To: p2p@copyright-notice.com

X-Originator: p2p@copyright-notice.com

Message-Id: e7a32fb1-dc93-44b2-92cd-73735100693f@copyright-notice.com>

X-Mail-From: p2p@copyright-notice.com

X-Message-ID: e7a32fb1-dc93-44b2-92cd-73735100693f@copyright-notice.com>

X-Notice-ID: 0532c646773ca9480bc3

Auto-Submitted: auto-generated

Date: Mon, 22 Jun 2026 23:56:56 +0800

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Notice ID: 0532c646773ca9480bc3

Notice Date: 2026-06-22T15:56:56Z WorldGate



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.40.185.211 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.168.17.114 listed in bl.score.senderscore.com]

1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Notice of Claimed Infringement - Case ID 0532c646773ca9480bc3



-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1



Notice ID: 0532c646773ca9480bc3

Notice Date: 2026-06-22T15:56:56Z



WorldGate



Dear Sir or Madam:



I certify under penalty of perjury that I am authorized to act on behalf of the Paramount Global companies CBS Broadcasting Inc., CBS Studios Inc., Paramount Pictures Corporation, Showtime Networks Inc., Viacom International, Inc., Black Entertainment Television LLC, and other Paramount Global subsidiaries and affiliates (collectively, the “Rights Owners”), the owners of certain exclusive intellectual property rights in the copyrighted work(s) identified in this notice. I have a good faith belief that the information in this notice is accurate.



We have become aware that the below IP addresses have been using your service for distributing video files, which contain infringing video content that is exclusively owned by the Rights Owners.



We have a good faith belief that the Rights Owners’ video content that is described in the below report has not been authorized for sharing or distribution by the copyright owner, its agent, or the law. Such copying and use of this material constitutes clear infringement of the Rights Owners' rights under the Copyright Act and its counterpart laws around the world.



We are requesting your immediate assistance in removing and disabling access to the infringing material from your network. We also ask that you ensure the user and/or IP address owner refrains from future use and sharing of the Rights Owners’ materials and property.



In complying with this notice, you should not destroy any evidence that may be relevant in a lawsuit relating to the infringement alleged; including all associated electronic documents and data relating to the presence of the infringing items on your site, which shall be preserved while disabling public access, irrespective of any document retention or corporate policy to the contrary.



Nothing in this letter shall be construed as a waiver or relinquishment of any right, remedy, or claims possessed by the Rights Owners, or any affiliated party, all of which are expressly reserved.



Should you have any questions, please contact me at the information below.



Ben Sodos

Vobile, Inc.

Address: 2880 Lakeside Drive, Suite 200

Santa Clara, CA 95054, United States

Email: p2p@copyright-notice.com

408.217.5026











0532c646773ca9480bc3

Open

Normal





Paramount Global

Vobile - Compliance

2880 Lakeside Drive, Suite 200

Santa Clara, CA 95054

+1 (408) 492 1100

p2p@copyright-notice.com





WorldGate

root@doctor.nl2k.ab.ca





2026-06-22T15:56:53Z

204.209.81.1

55714

BitTorrent



1







2026-06-22T15:56:53Z



The.Neighborhood.S06E08.HDTV.x264-TORRENTGALAXY[TGx]

181901647

9084b7f589e00191999a8ad05e806128373d6f08







-----BEGIN PGP SIGNATURE-----

Version: GnuPG v2.0.22 (GNU/Linux)



iQEcBAEBAgAGBQJqOVtIAAoJEN5LM3Etqs/WDYsH/jhcJ/skdNcKfUhUKq2E/Vxw

YAIhzQZ1GKgz8j2mNMg0pY3xNw9goKceSC3cnplf1Dr62Rt4xm/dttKleS9zSUP9

QzrQsr8SxOWtND3EOAWVPi2anoAwNqxA1mJEjwR8U5ONBrB6KiU3sP69OWIgngSL

m61qk3SqrNFyK6EmYCTsMODx2zRf/oVOT6mZuT2YjUNqdr9qaVbKmBrhbGbPPcV+

lL+XoPpTlBuWUbpHFd/8pefvLNu+j5GtXoSD926LnLa0rTpUEPHvNH4g3n0GUb8a

zab7WfMo+HO92hCEK84ofpsj7tE18puGKfinKbzzkXgasCgVC4WxVykYZCQ7LrA=

=ntX7

-----END PGP SIGNATURE-----

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 10:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbhmV-0000000083L-3zFh

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 10:45:55 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 10:45:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from notify.vobie.mobi ([34.168.17.114]:54080)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbglp-000000002J4-0wr3

for root@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 09:41:17 -0600

Received: from ec2-52-40-185-211.us-west-2.compute.amazonaws.com ([52.40.185.211] helo=[127.0.0.1])

by notify.vobie.mobi with esmtpa (Exim 4.92)

(envelope-from )

id 1wbgl0-0001CJ-1M

for root@doctor.nl2k.ab.ca; Mon, 22 Jun 2026 23:40:18 +0800

Content-Type: multipart/mixed; boundary="===============9172095869058102498=="

MIME-Version: 1.0

From: Vobile Compliance

To: root@doctor.nl2k.ab.ca

Subject: Notice of Claimed Infringement - Case ID 6b3a13769cbab28b9bc4

Reply-To: p2p@copyright-notice.com

X-Originator: p2p@copyright-notice.com

Message-Id: d097014a-e6e2-4790-b980-73b767ef4f55@copyright-notice.com>

X-Mail-From: p2p@copyright-notice.com

X-Message-ID: d097014a-e6e2-4790-b980-73b767ef4f55@copyright-notice.com>

X-Notice-ID: 6b3a13769cbab28b9bc4

Auto-Submitted: auto-generated

Date: Mon, 22 Jun 2026 23:40:18 +0800

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Notice ID: 6b3a13769cbab28b9bc4

Notice Date: 2026-06-22T15:40:18Z WorldGate



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[52.40.185.211 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

[34.168.17.114 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[34.168.17.114 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

[52.40.185.211 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.168.17.114 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.168.17.114 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.168.17.114 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.168.17.114 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.168.17.114 listed in bl.score.senderscore.com]

1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Notice of Claimed Infringement - Case ID 6b3a13769cbab28b9bc4



-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1



Notice ID: 6b3a13769cbab28b9bc4

Notice Date: 2026-06-22T15:40:18Z



WorldGate



Dear Sir or Madam:



I certify under penalty of perjury that I am authorized to act on behalf of the Paramount Global companies CBS Broadcasting Inc., CBS Studios Inc., Paramount Pictures Corporation, Showtime Networks Inc., Viacom International, Inc., Black Entertainment Television LLC, and other Paramount Global subsidiaries and affiliates (collectively, the “Rights Owners”), the owners of certain exclusive intellectual property rights in the copyrighted work(s) identified in this notice. I have a good faith belief that the information in this notice is accurate.



We have become aware that the below IP addresses have been using your service for distributing video files, which contain infringing video content that is exclusively owned by the Rights Owners.



We have a good faith belief that the Rights Owners’ video content that is described in the below report has not been authorized for sharing or distribution by the copyright owner, its agent, or the law. Such copying and use of this material constitutes clear infringement of the Rights Owners' rights under the Copyright Act and its counterpart laws around the world.



We are requesting your immediate assistance in removing and disabling access to the infringing material from your network. We also ask that you ensure the user and/or IP address owner refrains from future use and sharing of the Rights Owners’ materials and property.



In complying with this notice, you should not destroy any evidence that may be relevant in a lawsuit relating to the infringement alleged; including all associated electronic documents and data relating to the presence of the infringing items on your site, which shall be preserved while disabling public access, irrespective of any document retention or corporate policy to the contrary.



Nothing in this letter shall be construed as a waiver or relinquishment of any right, remedy, or claims possessed by the Rights Owners, or any affiliated party, all of which are expressly reserved.



Should you have any questions, please contact me at the information below.



Ben Sodos

Vobile, Inc.

Address: 2880 Lakeside Drive, Suite 200

Santa Clara, CA 95054, United States

Email: p2p@copyright-notice.com

408.217.5026











6b3a13769cbab28b9bc4

Open

Normal





Paramount Global

Vobile - Compliance

2880 Lakeside Drive, Suite 200

Santa Clara, CA 95054

+1 (408) 492 1100

p2p@copyright-notice.com





WorldGate

root@doctor.nl2k.ab.ca





2026-06-22T15:40:14Z

204.209.81.1

53401

BitTorrent



1







2026-06-22T15:40:14Z



The.Neighborhood.S06E05.1080p.x265-ELiTE

438846401

cee4335763650adc7ccf82b723aa401505b89628







-----BEGIN PGP SIGNATURE-----

Version: GnuPG v2.0.22 (GNU/Linux)



iQEcBAEBAgAGBQJqOVdhAAoJEN5LM3Etqs/WPdcIAJ5yT3p/1poaS2thnlLGRfur

jWR8P02qaHfktJzhkJBrVqihs9p1KDOvayFGNrbWOjCo6SXKPjFNAu5TmHmcDOUy

OyC3pMFGgVZMqpYVu8oGkmxQnEz7Z5+GkYgjdFaep1IbwLno7mkLZBHknx3b0o0f

VrMpBDeVRKH6Tx6ivkJ12vGJbpqDXOAuVul76KxIJfpp6cKkzjajHqCNyggcPX78

dTnlQwCmbXvvSo/zHVHGuHYigiBBW2edQd076oc/y44eA7bGrhhMzLx7d+ZDuvGA

NmTnOlOhjqKzBWitmpQrO4vsQohwo1ZmyB+LCRDxs3vywEtSIcWgzXwtDsrAs2Y=

=AjD3

-----END PGP SIGNATURE-----

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 09:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbgd8-000000000JA-38RA

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 09:32:10 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 09:32:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82213642.xmail.ntesmail.com ([8.221.36.42]:48936)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbgVx-00000000PVP-06b7

for sales@nk.ca;

Mon, 22 Jun 2026 09:25:00 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1644124_946528744.1782141825398"

To: sales

Reply-To: nancy@lei-ou.com

Subject: =?UTF-8?B?UmU6UU1NIFNPQ0sgU09MVVRJT04gRlJPTSBDSElOQQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from nancy@lei-ou.com( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 22 Jun 2026 23:23:45 +0800 (GMT+08:00)

From: Nancy

Date: Mon, 22 Jun 2026 23:23:45 +0800 (GMT+08:00)

X-WM-Tid: 0a9eefee30b8d0c0kusycda64a192102f1

DKIM-Signature: a=rsa-sha256;

b=hB+SoWBcffG1J40vNINf9IpXcD30spswwhFaAe78uEq/Rt4EmGXFGrnJKCoKV9/o+kHcpDUeBV/uxjPY7il3Zsd+jeZqMvRmHuR3+UCpI5KYT/zFfJyz0QUD2HkHT3vOw94dUvhdQuwd8wUKzWMxMeUaXH75rTTLayKG3NynGImtg/sJrCp/MEyxxNzweAmrNX1wJiZ2gtznpUut51bSEaBHsad8AUr2v90eU2ZqX7bLKNzjyY+ut37CcD6bRi3p4OrUI3UOAN5dOa4wJFvlkXn0y5fMb8Au2KI8Gv7HKk1fVZm4Vs4VqodAyk/2Sy+K48zqNm8dAoLYJXuOluPgVQ==; s=default; c=relaxed/relaxed; d=lei-ou.net; v=1;

bh=XAJlDnXEGH9tTywBKgWaxzcWna1EZUTIoGCS7O2emAk=;

h=date:mime-version:subject:message-id:from;

Message-ID:



Hi sales,

I hope this email finds you well.

Thank you for subscribing to our newsletter. We're thrilled to have you on board!

I am excited to inform you that we are currently offering a special promotion on our products.If you have any needs, please let me know as soon as possible so I can secure a discounted spot for you.

Thank you for your attention, and I look forward to hearing from you soon.

Best regards,







Enable premium notifications for product growth via . Keep My Alerts Active



To override these emails, visit Tweak Email Delivery.









Nancy Huang

General Manager

Hangzhou Qing Mian Mian Accessory Co Ltd

nancy@qmmapparel.com

www.qmmapparel.com









在2026-06-17，Nancy Huang 写道:



-----原始邮件-----

发件人： Nancy Huang

发件时间: 2026年06月17日 周三

收件人： [sales ]

主题： QMM SOCK SOLUTION FROM CHINA









Maintain your entry to exclusive updates by selecting . Continue Getting Alerts



To discontinue these messages, visit Refine Delivery Settings.







Hi Sales,



I'm Nancy Huang from Hangzhou Qing Mian Mian Co., Ltd (QMM), a specialist in sock manufacturing with 20 years of expertise. We partner with global brands to develop innovative footwear solutions across three core categories: pediatric, women's, and men's functional socks.



Our technical focus includes:

- Diabetic-friendly socks with enhanced circulation support

- Coolmax® moisture-wicking technology for active lifestyles

- Dairy Compression socks

- Waterproof outdoor socks

-Seamless Pants and Bra

-Legging and Thermal Tights



Should HEALTHCARE & REHAB SPECIALTIES require assistance in product development or market expansion strategies, I'd be pleased to arrange a consultation at your convenience.



Best regards,

Nancy Huang

nancy@lei-ou.com

General Manager

QMM Sock Solutions

www.lei-ou.com



















Nancy Huang

General Manager

Hangzhou Qing Mian Mian Accessory Co Ltd

nancy@lei-ou.com

www.lei-ou.com

Anouluck Wilms has invited you to Your Malwarebytes Subscription Renewal is Paid































































Your Malwarebytes Subscription Renewal is Paid

Malwarebytes Upgrade Confirmation Upgrade Date: Monday, 22 June 2026 23:21:40 Upgrade ID: SUEUT7VFB87N8 Account Reference: NA351XR1S Premium Support: +1 (810) 210-5434 Congratulations! Your account





Malwarebytes Upgrade Confirmation



Upgrade Date: Monday, 22 June 2026 23:21:40

Upgrade ID: SUEUT7VFB87N8

Account Reference: NA351XR1S

Premium Support: +1 (810) 210-5434



Congratulations!



Your account has been successfully upgraded to Malwarebytes. The upgrade fee of $199.99 USD has been processed and confirmed.



This upgrade unlocks premium protection features and enhances your account security level. All services are now active without any further action required.



Upgrade Summary



Account ID: G4R93MD3AX

New Plan: Premium Plus

Subscription Type: Full Coverage

Features: Real-Time Protection + VPN + Advanced Firewall

Device Coverage: Up to 5 Devices

Billing Cycle: Annual

Upgrade Charge: $199.99 USD

Payment Status: Completed

Security Token: 1c3b4bca-3130-413b-aa3b-3385f97a64b1



Additional Information



Your license has been securely linked to your account. Future updates and protection patches will be applied automatically. No manual configuration is required from your side.



If you did not request this upgrade or need assistance, please contact support immediately.



Support Contact: +1 (810) 210-5434



Thank you for choosing Malwarebytes.



Cheers,

Malwarebytes Team

When

Tuesday Jun 23, 2026 ⋅ 12:21am (Eastern Time - New York)

Organizer

Anouluck Wilms

anouluckwilms@hissbet.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 09:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbgd4-000000000Ik-1LxH

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 09:32:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 09:32:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f70.google.com ([209.85.161.70]:54601)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbgU9-00000000PRT-3VyW

for doctor@nl2k.ab.ca;

Mon, 22 Jun 2026 09:23:03 -0600

Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-6a0e15d07e6so3794861eaf.1

for ; Mon, 22 Jun 2026 08:22:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1782141721; x=1782746521; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=W+m7aVCqqlXw8+iHwlf5ruI0yNkPvZfQ4BoP6Xra2v4=;

b=CW8gLVFBz2rQJaXU3RdgRuwdVPnof3M5Fx+/jAAeuwskkGSQVVFVYWBZDknz1I+AJn

UFjRkB6pT4o0/ogxearHHUEy0GMw5XUnDbo1+xrxzLwXDyVcbpLF4ly4qF/2ICKw6rfD

jUqA6qQ7HZINxcX9Q3J3xwLbhj/w971JaE4c1hX2GM2iibjc2NRPfITZqEIEdokcICcI

f8jX9lOc6RRJswZnuZRX4FI2zNDpBfRivgDywFTmzxqGbRAAhcXyNq9igwMUqtLVnKJe

KLeOS+RYcy9kBffsIP/3zL+NmfQl/UE0gi875nLq1KB9HzyaapFLbpvw6omHGQvdNzPf

JdsA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hissbet-com.20251104.gappssmtp.com; s=20251104; t=1782141721; x=1782746521; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=W+m7aVCqqlXw8+iHwlf5ruI0yNkPvZfQ4BoP6Xra2v4=;

b=qRfaR7n94QyJx++7JooPVKSPB72i6WHGqV/HOV4IDicJIQSPSMTEdSyZ8c6sFx7Gm/

CDMjgwFwXlMgN0TnqDq0HZ8XzcqdbPdQQtYuSF79Jb3qYBvIUoAm1aeWkyaTrHO5XIeY

qWrcMU+Rc7jmbtur2LP5e7iCvxIQPTkXHoVN1BdSxjVz4fFNB9+hySUPVw5pjf4LAWL2

IPD4h3FGRcUgHtnJeK1kflkzJYiXGk9NaOnsbWAbUNXT8Muesu7hINuA9Mx1DJUQX58f

smHad0qooGk6H56NA72lzYxI5+Tso0rHCbXeDlhr3eQMKajMhgf5H/QKceeZIcOpQidd

INow==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1782141721; x=1782746521;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=W+m7aVCqqlXw8+iHwlf5ruI0yNkPvZfQ4BoP6Xra2v4=;

b=KMC6rjpdeHawo+dfS8bXl4uYmey8ce1c2pl6IKEpH5jZ3j/xPz7uxGzS60BGkPNLGY

ITKTvX+wVZbmBzh7C0XqJn0d5RdhP9CQarFBfvo4lU9R976gcxDOEjkgPNLw2UFFrxXe

C3mEscOP4U33/wkcDksOaKzHqNvu3CEloO/VLcKbVJviIkAXIDYhGBbL9g5nB2J4vp7U

JwgkhKvUN+lTCK28LnXIn7ef1PnefZHR1cyLsxlDo/NJ27lmKdGQFdorKX9tQEABHdNQ

/61sHRzTu9eAPrUez/4mm9jwdpING8KEXW9u0SUzmpj/FgDZBQZhctz172ghjPsmwrRa

kDeQ==

X-Gm-Message-State: AOJu0YzA7AtwQyoOAdXy6rkw/WeAgGcsaY5UAYAO6QCk5gXSzspNqf4i

iqNKh3NkLJdF2KnN9EaacfTuMnldK3oXwPKrVqnqTG3njEojWHnG6HdXLZaK6Y2wSaRzlsKePiS

mOtMuAy78aAzflkBzWThdcg/bcef/b/c5PDTBOUGAnCcVZskqc7P2hoGY

MIME-Version: 1.0

X-Received: by 2002:a4a:ec44:0:b0:69e:3563:4424 with SMTP id

006d021491bc7-6a0d88b4be3mr10823403eaf.24.1782141720718; Mon, 22 Jun 2026

08:22:00 -0700 (PDT)

Reply-To: Anouluck Wilms

Sender: Google Calendar

Message-ID:

Date: Mon, 22 Jun 2026 15:22:00 +0000

Subject: Invitation: Your Malwarebytes Subscription Renewal is Paid @ Tue Jun

23, 2026 12:21am (GMT-4) (doctor@nl2k.ab.ca)

From: Anouluck Wilms

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="00000000000033f42b0654d934b4"

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Malwarebytes Subscription Renewal is Paid Tuesday Jun

23, 2026 â‹… 12:21am Eastern Time - New York Malwarebytes Upgrade Confirmation

Upgrade Date: Monday, 22 June 2026 23:21:40 Upgrade ID: SUEUT7VFB87N8 Account

Reference: NA351XR1S Premium Support: +1 (810) 210-5434 Congratulations!

Your account ha [...]



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.70 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.70 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Your Malwarebytes Subscription Renewal is Paid @ Tue Jun 23, 2026 12:21am (GMT-4) (doctor@nl2k.ab.ca)

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jun 2026 09:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbg9o-00000000NGB-3nGM

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jun 2026 09:01:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jun 2026 09:01:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta43-63.mmglsmd.net ([103.37.43.63]:55053)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wbfGe-00000000C1A-1CeX

for root@nk.ca;

Mon, 22 Jun 2026 08:05:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1782137042; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=PlUEGZPBM4N1vYDzWpb65I9mLJap8TAY4nC8Q7uuXZE=;

b=cdDGWqNHOqhg2hfLvanGMHleFA6Lo5MOrsBlv90eFIvuhl63V2VXgAo8

kgQ2gDXDfxwCpi+T4I2p5QqS9Uqb6DGMj/VkHfqUoNQhw3ZGAvqdaP0RpR

p9NLTcQbq8yFF4pMxJL7cfJiCkHcptG8EQakjNJpj6vyyP7usj2t2T278=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id qGokpPBHmexl

for ; Mon, 22 Jun 2026 22:04:02 +0800

Content-Type: multipart/mixed; boundary="===============3627567543641820540=="

MIME-Version: 1.0

Message-Id: <20260622220402.99860-{13453:20260622220231-13453-19}-0048485@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Mon, 22 Jun 2026 22:04:02 +0800

Mail-ID: 6a3940bee1382308adf08436

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

[103.37.43.63 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.37.43.63 listed in dnsbl.ahbl.org]

[103.37.43.63 listed in dnsbl.ahbl.org]

[103.37.43.63 listed in dnsbl.ahbl.org]

[103.37.43.63 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.37.43.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.37.43.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.37.43.63 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.37.43.63 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.shinestarsteel.com]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.37.43.63 listed in bb.barracudacentral.org]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.37.43.63 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=







Dear Purchasing Manager,



Good day !



This is Sophia from Threeway steel .



We understand Canadian buyers are facing steel import quota restrictions (only 20%-50% of 2024 levels).



To help you navigate this, we offer specialty steel pipes that are less commonly produced in North America:



High-strength alloy: P620 / P690 / 10CrMo9-10



Sour service: API 5L X65/X70 with NACE/HIC/SSC



Marine grade pipes (ABS/DNV/Lloyd's certified)



Our products are not subject to standard TRQ competition. We can provide EN 10204 3.2 and work with your EPC requirements.



Do you have any upcoming projects requiring non-standard grades? A brief call might be valuable.



Best regards,





















If you have any inquiry, pls keep me posted. Thank you.



Wish you have a nice day.



Best regards,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China