Dash One Phish From Google Gmail Part 2

Posted by Dave Yadallee on
Auto-Submitted: auto-generated

X-ZohoSupport-Notification: system-generated

X-Auto-Response-Suppress: All

Original-Envelope-Id: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

X-JID: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

TM-MAIL-JID: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

X-App-Message-ID: 2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3

X-Report-Abuse:

TM-Message-ID: <2d6f.39a6dc9.m1.dbf1f430-76f8-11f1-897d-963d1902c9da.19f28b95af3@desk-mailer.zohodesk.com>

X-Zoho-Virus-Status: 1

X-Zoho-AV-Stamp: zmail-av-0.2.10.1.5.2/283.63.57

Feedback-ID: zu08091226a2044efa8b97632d3f5711e10000d2decc9db979aaa588214d5dfbab9e3d8abe4d15ca107a28:ZohoMail

X-Zoho-CM-AccountID: bb06324efe2d273515a2966e4b62e1f1d02de3b720ecec2d31f8bb23a83fdf21

X-ZohoMailClient: External

X-Original-Sender: support@thetouchpointsolution.zohosupport.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@zohosupport.com header.s=1522905413783 header.b=Vd0oMETq;

arc=pass (i=1 spf=pass spfdomain=desk-mailer.zohodesk.com dkim=pass

dkdomain=thetouchpointsolution.zohosupport.com dmarc=pass fromdomain=thetouchpointsolution.zohosupport.com>);

spf=pass (google.com: domain of bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com

designates 135.84.80.55 as permitted sender) smtp.mailfrom=bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=zohosupport.com

Precedence: list

Mailing-list: list g1@eyluldiler.com; contact g1+owners@eyluldiler.com

List-ID:

X-Spam-Checked-In-Group: servicedfdfdfrdff@eyluldiler.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi 'CTS Service Center' via atun66s3ccccccccdddd! We've received

your message (#149607) and our customer experience team is working hard to

address all inquiries as quickly as possible.Please note, we’re a small

but mighty team, and while inquiries [...]



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

[135.84.80.55 listed in dnsbl.ahbl.org]

[135.84.80.55 listed in dnsbl.ahbl.org]

[135.84.80.55 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[135.84.80.55 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.198 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[135.84.80.55 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eyluldiler.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 VOWEL_TOCC_7 To or Cc header with 7+ consecutive vowels

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.198 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.198 listed in bl.score.senderscore.com]

Subject: {SPAM?} Thanks for getting in touch! (#149607)





Hi 'CTS Service Center' via atun66s3ccccccccdddd!





We've received your message (#149607) and our customer experience team is working hard to address all inquiries as quickly as possible. Please note, we’re a small but mighty team, and while inquiries sent over the weekend will be reviewed promptly, they will be addressed during the business week. We appreciate your patience!





In the meantime, please visit our FAQ page for helpful information that may answer your question(s). While you're waiting, you can also take a look at our Encyclopedia of Uses and learn how to use TouchPoints in a variety of situations!







Thank you again for your email, and we will be in touch as soon as we can!







Sincerely,





Team TouchPoint



ilovetouchpoint.com





*TouchPoints™ are neuroscientific consumer devices. They are not a substitute for medical treatment nor are they intended to cure any medical condition.







Dash One Phish From Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 11:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfhrx-000000008Ff-3NCK

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 11:40:05 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 11:40:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f198.google.com ([209.85.210.198]:45517)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfgVr-00000000KmB-2MMs

for sales@nk.ca;

Fri, 03 Jul 2026 10:13:19 -0600

Received: by mail-pf1-f198.google.com with SMTP id d2e1a72fcca58-8479b45ad08sf1157110b3a.3

for ; Fri, 03 Jul 2026 09:12:25 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1783095139; cv=pass;

d=google.com; s=arc-20260327;

b=SQPmbn8C49tVDzan31q1940HhhlHYmnVffjIH+TD1xlEFYUlSYwb207n7UJjOyDVcL

rh0bDlFqf5akeh7UeN5kcJi5lzdJVBNr+ioT1uT88S1J4OUCPN5Ly5OMqzM87ESLpb/f

nxCViQAzOkk24OOILmZH0pvJT1Vk0WH2Tiq5W2O2d4kshEeOwHUoBvNKqM/ginF8KzG8

/9CvK34zeOAYcN13/Krf+tatllTRHT01JpG2e/+c/PaxgnqiLc/l7XMUALzZGKG1kR2s

t35ibl6OhRu+rh1dTwG7BSdNfTJMlMHy8LJ0lwLqFIKbmNtLnhkxwahV50psS+w1r8yx

AxXw==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:feedback-id:tm-message-id

:tm-mail-jid:original-envelope-id:auto-submitted:mime-version

:subject:message-id:to:from:date:sender:dkim-signature;

bh=Pfc6daB2W/Fp6V6cH/2ekq9aigC1i996GgdDI4wtUkw=;

fh=Odu7IP0QcmtiMWsXYMj/bJZE4f517AJsmR6DEWKsu/s=;

b=sqwDAevc/ex7vB3f7t6PYvWJwrFVHOuc8FnrH0P21+snD/VWj/yGt8Cjcr6/hQMQHZ

E1oatZNN5KUH7dGZ8sjQwxWQesAWO2Z2mTD3ym+AE2r70gZs3rCDcUXU1GPha8+r6VAP

JiOxHEKc362PGcrG7xn407GPN6b/+gn2Y7P6hgelgVvtKyrSQwLGvssKMWB43Nqoh/Os

CZmhW2lcgIFyeiM2odMq/NuP+eOmzIT6Aapir+avU0UC0X1qDNhE8P3Bw27BxhmWG7Pi

wn0dD8skW/0AaO0+D9twqb199tsUUxz8v/Q4PfVF36j1JLiM+KvlQbbpoELi50/DdTyy

3dhA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@zohosupport.com header.s=1522905413783 header.b=Vd0oMETq;

arc=pass (i=1 spf=pass spfdomain=desk-mailer.zohodesk.com dkim=pass dkdomain=thetouchpointsolution.zohosupport.com dmarc=pass fromdomain=thetouchpointsolution.zohosupport.com>);

spf=pass (google.com: domain of bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com designates 135.84.80.55 as permitted sender) smtp.mailfrom=bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=zohosupport.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eyluldiler.com; s=google; t=1783095139; x=1783699939; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:feedback-id:tm-message-id:tm-mail-jid

:original-envelope-id:auto-submitted:mime-version:subject:message-id

:to:from:date:sender:from:to:cc:subject:date:message-id:reply-to;

bh=Pfc6daB2W/Fp6V6cH/2ekq9aigC1i996GgdDI4wtUkw=;

b=dsx7wS6SEBHTF8+oYK60CbgBWElEl9yCIMz20fFoZ7nPcfIjcpGCjoPzWOPzX4d5g1

U/JxTsQoh7Qw++Qa7uDlcvf/Fknh1uh9Q/jZfoiyBH3antKOSR7Wy6bdwKs5/UY8joJA

NZCg0X6n/rpelm7jGx8XRKryP8zoyslmGbTRc=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783095139; x=1783699939;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:feedback-id

:tm-message-id:tm-mail-jid:original-envelope-id:auto-submitted

:mime-version:subject:message-id:to:from:date:x-beenthere

:x-beenthere:x-gm-message-state:sender:from:to:cc:subject:date

:message-id:reply-to;

bh=Pfc6daB2W/Fp6V6cH/2ekq9aigC1i996GgdDI4wtUkw=;

b=SZDXxL4cSh/P2wD98mRzT7KUXq8YAsD2qLkwUcvaMuqw1J29hmjBLs8r0aNELPydK8

FX7ZGugAEGTf9OOrQhh9yGOBBRYzGyWvDPodXirBXCMeHzpGm7bWxvz0ujg9geMEKxBb

w9SunzOZ/NyWlQeH1HKz8YfeMUwykwlJWdPlf8m3TGn2hlsW/w8+pEij7VKKivfQvAbd

zZWVvHaQqprv4jvJvYTTm7TrvJtDsXBhTx4R1s0apTWVITs1b2LZndkQG/ogQTleMejr

CGqLYLft+egKkjaDQb/sO/b9MWtgKqfNaXBQyAtoa5Cwv4qqxi1mYkroJbzDHKaJ9s2W

7fdA==

Sender: g1@eyluldiler.com

X-Forwarded-Encrypted: i=3; AFNElJ9hVV6vRAQ6Jm/Ngd62Zb/nxdHaWIioleJ7yU0RINgytLo7G7Jln7bWxlzi8foQx1obsmHvPw==@nk.ca

X-Gm-Message-State: AOJu0Ywu0slrz9KzCkngXMHhqXAONgTyBdIGGHOM9Pfsjxv2ggRdeZmG

HuBNqabMFjVIKaLH0clZ6de3dP2iaL5j9RjeRutRGsu51yLDEb/gZHPf60HBgDXVhE8=

X-Received: by 2002:a05:6a00:4f92:b0:847:8f34:cb00 with SMTP id d2e1a72fcca58-847f6f698bbmr165871b3a.51.1783095139079;

Fri, 03 Jul 2026 09:12:19 -0700 (PDT)

X-BeenThere: g1@eyluldiler.com; h="AX0PUUfZNH/lMJV6lL84SnwkQTI4/bHYpmiuuijcF3JSgMHRtA=="

Received: by 2002:a05:6a00:2295:b0:842:49d1:49d8 with SMTP id

d2e1a72fcca58-847b547d475ls5075057b3a.2.-pod-prod-01-us; Fri, 03 Jul 2026

09:04:29 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AFNElJ/y1tZ846hGKymSWyVTmbaGyUIZkBgMgkolo4SgB3gQm9bMcz5FDefzZ1FA7K2N0cTz/A==@eyluldiler.com

X-Received: by 2002:a05:6a00:1884:b0:845:e7e9:b57a with SMTP id d2e1a72fcca58-847f6faf1admr105315b3a.61.1783094669381;

Fri, 03 Jul 2026 09:04:29 -0700 (PDT)

X-BeenThere: servicedfdfdfrdff@eyluldiler.com; h="AX0PUUcranadBmiDqxsgd0cyuognHaR6EIiT2JCD+5CbRToypQ=="

Received: by 2002:a05:6a00:4c0d:b0:847:9055:ec0a with SMTP id

d2e1a72fcca58-847b53f5332ls4873945b3a.1.-pod-prod-01-us; Fri, 03 Jul 2026

09:04:27 -0700 (PDT)

X-Received: by 2002:a05:6a00:1881:b0:845:ebbf:e7be with SMTP id d2e1a72fcca58-847f6dd3dd7mr131069b3a.23.1783094666878;

Fri, 03 Jul 2026 09:04:26 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1783094666; cv=pass;

d=google.com; s=arc-20260327;

b=s3QcZrjF3WZb5Lw9GYv+7R9yW/gzBdEDnVVju3kwm9VfsrK6OQf7pz1phWajU2yIdl

I3t06ur9yTVsUkyyaTPS1zacmJKkw6jM58TtlRfzVMEs3YjEfecHA+yGdgOJe8PfxAEn

/phc5jBTonyucIFKCKftPt1cyzQkqI36MTNF9zonBFklH3ZPwiHL7SPtdsPRUyRYbfIo

RF+oPmGdzaCLwlekMpXSEcoDvoJFtpnj0dJGaQjrY5RCAdETc2vw3zGG6813RoTP5bZ3

19m81ZAZroxtFO331nvWE1vVCD47hGIjqGDGSJkxDUaWul8Ic6MbVggidqsfLu9mQ61e

PYyw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=feedback-id:tm-message-id:tm-mail-jid:original-envelope-id

:auto-submitted:mime-version:subject:message-id:to:from:date

:dkim-signature;

bh=hbmp9sw+9asVvskc2t869X/9yif6sVjT1Nrmi5JNd00=;

fh=0Oms6vQRJQkFUmxSW5bQxXQBU4o6PbFGrb3uBDl9Tu8=;

b=clhgxa2UMx6Z0vzNYESwLW8sb4Kxl/dpw0kCD8wkKdMF7nd1oMBGCM4hST1xueIwRQ

cTU2hiI2+W5gdLLXrQOjSbUdrcmCjT5VDZ90sFtLKcjco+Hno2FWdcgH+PgfAMBJrZea

lj0sH8/xYHucg6KGMvt33BAD9JrrTSsssQcPk1iecd0n4k8jxvZYeiU+qASclVJp+sVT

4dusvrlNHYVf+qx3xNbDLC2Ds8fTs0/VbJ0N3laz47FV0uLuHF1Hne31CJh8azYly+0A

+7O0E79qEhPXTQkQPFInRe2QXpjBzDPliHQ8TeEnfSiWC9yOKou0jSo+ZZ8L2khIFfGY

T3sQ==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@zohosupport.com header.s=1522905413783 header.b=Vd0oMETq;

arc=pass (i=1 spf=pass spfdomain=desk-mailer.zohodesk.com dkim=pass dkdomain=thetouchpointsolution.zohosupport.com dmarc=pass fromdomain=thetouchpointsolution.zohosupport.com>);

spf=pass (google.com: domain of bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com designates 135.84.80.55 as permitted sender) smtp.mailfrom=bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=zohosupport.com

Received: from optin-55.transmail.net (optin-55.transmail.net. [135.84.80.55])

by mx.google.com with ESMTPS id d2e1a72fcca58-847f6bdd453si248931b3a.82.2026.07.03.09.04.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 03 Jul 2026 09:04:26 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com designates 135.84.80.55 as permitted sender) client-ip=135.84.80.55;

ARC-Seal: i=1; a=rsa-sha256; t=1783094666; cv=none;

d=us.zohomail360.com; s=zohoarc;

b=h+hH80zLGn8CJKkyXrh/MsdnHz5hrS51b62MCJPC2YoC42rsQ01rOLi+XQfOizx05nOQTguulS8QxWRIg2+odG6cC5rPzPTkgny3AatJiQn893VDCMIIs9JX6YcOMdcAkEdVCO1FV314vd1BMewV0pKgLtaUfRYuookM+eH2dcg=

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=us.zohomail360.com; s=zohoarc;

t=1783094666; h=Content-Type:Date:Date:From:From:MIME-Version:Message-ID:Subject:Subject:To:To:Message-Id:Reply-To:Cc;

bh=hbmp9sw+9asVvskc2t869X/9yif6sVjT1Nrmi5JNd00=;

b=Dg0+DUwa4rpU+Bu+ZZYXGvETMFzJKQlM5GpT1kQ+rWobEXj95ZC98RZth7UZOehdZ7mYqW9tQ7Inom+YyzNcphcJaTuMGpdRt18o6t2le2J8pBZXDj52Q6wNPFk7xlrcUJEmXgijYrJXiJNlcYCwEwmbz2bfjBpViI246VPJKKk=

ARC-Authentication-Results: i=1; mx.us.zohomail360.com;

dkim=pass header.i=thetouchpointsolution.zohosupport.com;

spf=pass smtp.mailfrom=bounces+dbf1f430-76f8-11f1-897d-963d1902c9da_vt1@desk-mailer.zohodesk.com;

dmarc=pass header.from=

Received: by mx.zohomail.com with SMTPS id 1783094664355402.1361695097654;

Fri, 3 Jul 2026 09:04:24 -0700 (PDT)

Date: Fri, 3 Jul 2026 09:04:24 -0700 (PDT)

From: The TouchPoint Solution



To: "'CTS Service Center' via atun66s3ccccccccdddd"



Message-ID:

Subject: Thanks for getting in touch! (#149607)

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_Part_55047686_1229547098.1783094664286"

Dash One Phish FRom Google Gmail Part 2

Posted by Dave Yadallee on


ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@figliving-com.20251104.gappssmtp.com header.s=20251104 header.b=Av5Qblfa;

arc=pass (i=1);

spf=permerror (google.com: permanent error in processing during lookup of care@figliving.com: dc-aa8e722993._spfm.figliving.com not found) smtp.mailfrom=care@figliving.com;

dara=neutral header.i=@eyluldiler.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id ada2fe7eead31-742619dd984sor2089137.7.2026.07.03.09.03.57

for

(Google Transport Security);

Fri, 03 Jul 2026 09:03:57 -0700 (PDT)

Received-SPF: permerror (google.com: permanent error in processing during lookup of care@figliving.com: dc-aa8e722993._spfm.figliving.com not found) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1783094637; cv=none;

d=google.com; s=arc-20260327;

b=jOniwDQAf3JGLIoWrnZ9VNR+DrKUjqyfOh+nb/bGDSZ0m1QPsVtyvkFXZcrXuhGkW6

NMoy+OCSRqcn44BL5M7bkLhFGlsnLlPDGGtGa/VdrhIw4uFuEjdjgcRwWZ4DF73J56CB

VDUv2gMuuTMB3e5wyDMOp4a/jWCqKETDYRc/af5CSZJJuGTk46FI8XpbLDN83KD0J8uN

ALfL0Yak7IErMm4xsT4KuHt1faS0Xj9zYViMxDJDK/GY6e9PDrj/DeF8SFBFQ0sr/EqL

pR2NywMVhlrMRdmPF4AGAs14aqvXDO2D1m9TtRLThwXZTXAatEQ6SDT6CzBLg2D+arqp

fg2Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:mime-version:from

:dkim-signature;

bh=h8qr5fipr1obTOtBipNcBknNTwH5TeszgFDEkJrLWtg=;

fh=opgbel46GfzlAlUPCviZnFtOC/3+rwQvcUIN9ncZ8mE=;

b=VClOJaDzyGp308ZPTBDj5TJZYFKDj/0TDzZ+N/wDl+HxHvoDlgNnsoOKCfkLg6kRrH

/qCwDCZGSkFnxKaCEA0Ao3TnV3UhlEV60qr1Np0rcIELteB0eBNwLIr4ir/4PM2uaQ/I

01GCSDGcS+MY3costGpgTtAt0V9LjUZRODOMdBGJGln7rsKbXVm7FNHhK+b+QPrYy3G9

DLZoxo9U08xTWhUQUNLg1Kyun4Kj0f3Q8QQ4BetbS6qRSkHrasSBwrbt+Zy72x0p+bY6

A6jazCyzA+yKthuFg+R6tBNSRLz6mGekqXvVlIabFKRZvCjerHUEzLzY01aJqLx3XbRv

eegA==;

darn=eyluldiler.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AfdE7cn6ggs9g8wjiu4fuO6prMIXaxf54B+rT1cjMKvhOObQyv0MblAREaoVtIsrRUE

9u101FhKWOam/6j7Ttf10Ir9gd9uMvEc9/iW1PdLRnAxE1/dDUvV1RydiuYp1g+hnoz1/T84VTL

0+kRShNzorDowyd7UUCnJOrdprcxB2QbtuHS4UkTYL+SuaTl9P0ZGbMjmTNj8psTPBBygsHY9fe

6hXFubr91/GS458uNVJPp6dnGWnmam0S01qou7l8f0j/yx02P3B8XzLk7i5/3T8hbQKEFKrlA==

X-Received: by 2002:a05:6102:5e98:b0:631:26f6:701a with SMTP id

ada2fe7eead31-74207bf21d5mr234514137.29.1783094636285; Fri, 03 Jul 2026

09:03:56 -0700 (PDT)

Received: from 359816873734 named unknown by gmailapi.google.com with

HTTPREST; Fri, 3 Jul 2026 12:03:55 -0400

Received: from 359816873734 named unknown by gmailapi.google.com with

HTTPREST; Fri, 3 Jul 2026 12:03:55 -0400

From: care@figliving.com

MIME-Version: 1.0

In-Reply-To: 19f28b8d686a5ef2

References: 19f28b8d686a5ef2

Date: Fri, 3 Jul 2026 12:03:55 -0400

X-Gm-Features: AVVi8CeP3Q1hD1ypfeO5PUy2XjnCBQWcGrQhmSgDMB7MSSWsBCenzFKyH6MC7V0

Message-ID:

Subject: Re: Request Received: Complete our 8-question survey for 60% off

DashOne Pro / Ticket #830334

To: service@eyluldiler.com

Content-Type: multipart/alternative; boundary="00000000000065ab010655b7120f"

X-Original-Sender: care@figliving.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@figliving-com.20251104.gappssmtp.com header.s=20251104

header.b=Av5Qblfa; arc=pass (i=1); spf=permerror (google.com:

permanent error in processing during lookup of care@figliving.com:

dc-aa8e722993._spfm.figliving.com not found) smtp.mailfrom=care@figliving.com;

dara=neutral header.i=@eyluldiler.com

Precedence: list

Mailing-list: list g1@eyluldiler.com; contact g1+owners@eyluldiler.com

List-ID:

X-Spam-Checked-In-Group: service@eyluldiler.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--00000000000065ab010655b7120f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey there!



Thanks for reaching out. We=E2=80=99re currently catching some well-earned

rest after a long day of creating beautiful things. But don=E2=80=99t worry=

=E2=80=94

we=E2=80=99ve seen your message and will get back to you first thing tomorr=

ow

at 9AM.



If it=E2=80=99s something urgent, feel free to drop us a line at care@figli=

ving.com.



Thanks for your patience and love,

Team FIG =F0=9F=92=9B





--00000000000065ab010655b7120f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdj5IZXnCoHRoZXJlIcKgPC9kaXY+PGJyPjxkaXY+VGhhbmtzwqBmb3LCoHJlYWNoaW5nwqBv

dXQuwqBXZeKAmXJlwqBjdXJyZW50bHnCoGNhdGNoaW5nwqBzb21lwqB3ZWxsLWVhcm5lZMKgcmVz

dMKgYWZ0ZXLCoGHCoGxvbmfCoGRhecKgb2bCoGNyZWF0aW5nwqBiZWF1dGlmdWzCoHRoaW5ncy7C

oEJ1dMKgZG9u4oCZdMKgd29ycnnCoOKAlMKgd2XigJl2ZcKgc2VlbsKgeW91csKgbWVzc2FnZcKg

YW5kwqB3aWxswqBnZXTCoGJhY2vCoHRvwqB5b3XCoGZpcnN0wqB0aGluZ8KgdG9tb3Jyb3fCoGF0

wqA5QU0uPC9kaXY+PGJyPjxkaXY+SWbCoGl04oCZc8Kgc29tZXRoaW5nwqB1cmdlbnQswqBmZWVs

wqBmcmVlwqB0b8KgZHJvcMKgdXPCoGHCoGxpbmXCoGF0wqA8YSBocmVmPSJtYWlsdG86Y2FyZUBm

aWdsaXZpbmcuY29tIj5jYXJlQGZpZ2xpdmluZy5jb208L2E+LjwvZGl2Pjxicj48ZGl2PlRoYW5r

c8KgZm9ywqB5b3VywqBwYXRpZW5jZcKgYW5kwqBsb3ZlLDwvZGl2PjxkaXY+VGVhbcKgRklHwqDw

n5KbPC9kaXY+DQoNCg==

--00000000000065ab010655b7120f--

Dash One Phish FRom Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 11:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfhrc-000000008DA-372T

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 11:39:44 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 11:39:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f199.google.com ([209.85.160.199]:54774)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfgVB-00000000Khr-0PlB

for sales@nk.ca;

Fri, 03 Jul 2026 10:12:37 -0600

Received: by mail-qt1-f199.google.com with SMTP id d75a77b69052e-517e054fe07sf13548121cf.1

for ; Fri, 03 Jul 2026 09:11:42 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1783095096; cv=pass;

d=google.com; s=arc-20260327;

b=HKqDJ6RSJqzod98ORbwJNg63P8i/RxVwxKwHPwua3ngy1XFQaEaJykbDAhO1L24GbW

rzfoypwtk0UClXbxBOOxlTBiJAS8rnU1s8kFfY4FITWGA8x9NDkEnsfu0EzpE0gekQDR

omzBydraCUdAU/RjD4mUghzlH4Fy3loKpr/fD4vlmW76860bWDUggz3+CtieTggiJgL4

e1zaOdyCdGciB5eWaPeYxKvD6YlPL+OBE8+/pOvsgxZu7Ubc/AB9TarbNN8vrqMYGG1l

WvqB4+dGcz6WnYk3oclJi7oFk9idTRPaZseLvxeO4KexZNCdc6s2zePZYyJedey2fCce

Cy7A==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date

:references:in-reply-to:mime-version:from:sender:dkim-signature;

bh=l2w7fUJzemgBikWMmSDucN1woDvjh+HiTQMo0eDj3vU=;

fh=gcMcpLQ4UvBwD6hOkC6OAkWE7CIjlaVadXWHvHdWe5I=;

b=hcwz/wZlJp/jRxge04RDjDQhD92kKuL8BYdUVycB+F+C/vqTDAHnLRa07WngYaEafW

5mZrUhJnPaLM5UPp0u7gxuFl7OkUVbm4hBj1BQGKpd5gsgCsHuA6syYz6QPo/SXB22qe

7t+0aBDHqLjLIecw4KwcMJS1HfpDp79SNliGrr9n97JHR72XESsYQMKfT5CaRptXoB/h

iPMjt42TzZBNo3HV8oK3314zq2WJ+qjm+lxEwWyeCww5qT910bDU6EgpWRMj4R2kAcww

8xXBHBlxxeENIjIEBbW++NsuJ7HUWJvzyGovuoy4OhfFawN+ebrGvi+V038Ucp6MCnbm

PFdQ==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@figliving-com.20251104.gappssmtp.com header.s=20251104 header.b=Av5Qblfa;

arc=pass (i=1);

spf=permerror (google.com: permanent error in processing during lookup of care@figliving.com: dc-aa8e722993._spfm.figliving.com not found) smtp.mailfrom=care@figliving.com;

dara=neutral header.i=@eyluldiler.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eyluldiler.com; s=google; t=1783095096; x=1783699896; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:references:in-reply-to

:mime-version:from:sender:from:to:cc:subject:date:message-id

:reply-to;

bh=l2w7fUJzemgBikWMmSDucN1woDvjh+HiTQMo0eDj3vU=;

b=E7b/cUuIN2w+5iQKt5ZukgyjgGszwkdYJ16hpTplNPzq3eG6/VrXJCUeiuh9zqKS2O

/TJS3Qa1hWKwu9zYJ3bFfnAvQfY10y55lZrbVwb+z4NrpY4Q6kLcw9Qz7568D8jiBHIi

xmIxC7r2LbthVOtxG6lQQMigfCe8w24I+HLYM=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783095096; x=1783699896;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:references:in-reply-to:mime-version:from:x-gm-gg

:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc

:subject:date:message-id:reply-to;

bh=l2w7fUJzemgBikWMmSDucN1woDvjh+HiTQMo0eDj3vU=;

b=pq7KOhxgoCMOE/XFenxUBGqsEvHj+HwRxoAEqOlVleBAFKP19HHxL1ZDFp05LbUkc0

p7EGovIAirfMOVnpdHJ5RfznVJ8BF15DlUVaXXizlNLci86HfyKp0Fjzo6U/JFjLRu/z

Ru04/7AHafUSkLQjYZFwTOBwrtW0uYs4eblfqqTWfsV84EZJxXD9ngcrOpkQ95Rb0Ams

M2BLiFmrT/Pwez72ZzMlKzXUMkgt/2z6pD8ZWkK3+zrYykdr1f/uwiaATpJoKw4YhzKq

40ZscKADKGy0Dyi88dOpcNYkHfZETcO36iemS4DLzAi+6xw8QhcekNqunRUcNvD+MrdR

pqOg==

Sender: g1@eyluldiler.com

X-Forwarded-Encrypted: i=3; AHgh+RoL0yPIHorYCnO6hxFEKRdVAHEXROVGSRW8zoWJZgnLn3RGqINa5JBkq+LtJejlEKNBntirhw==@nk.ca

X-Gm-Message-State: AOJu0YydJ3m6ZBUa+Ya+5DlRkaoP5kspEmqyeOe0nnAT5Gc6e2TNaq1e

r3hKbzOvXz21eAo73WfYsz2qpcFsvwizct0JJGN7e6XJmLg3+DvTM80aprHT8bOk5+A=

X-Received: by 2002:a05:6214:2a8a:b0:8e9:f5de:d611 with SMTP id 6a1803df08f44-8f3c92e72a6mr148637126d6.48.1783095095028;

Fri, 03 Jul 2026 09:11:35 -0700 (PDT)

X-BeenThere: g1@eyluldiler.com; h="AX0PUUcGylzIj8W+cN4VFIBCnV039OQ9LMngrHlqPyzHCH+0Fg=="

Received: by 2002:a05:6214:764:b0:8ac:a471:c7d8 with SMTP id

6a1803df08f44-8f33f759b85ls74185236d6.0.-pod-prod-06-us; Fri, 03 Jul 2026

09:03:58 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AHgh+RrRtSMledFAH6Rrsj4mLqc4imNEoZW5he+0LiVSyiKJLZRkTq3lF8hDoWQ5cmw9cDBNoQ==@eyluldiler.com

X-Received: by 2002:a05:6102:598e:b0:737:d2e8:d644 with SMTP id ada2fe7eead31-741f9b00a6dmr232875137.20.1783094638499;

Fri, 03 Jul 2026 09:03:58 -0700 (PDT)

X-BeenThere: service@eyluldiler.com; h="AX0PUUcNlCN6Y0u2HUjVxNGDw3QbVTbUQy+pnloL9JpKQ9+VBw=="

Received: by 2002:a05:6214:252f:b0:8f0:6c24:4aa with SMTP id

6a1803df08f44-8f344311267ls66845996d6.2.-pod-prod-06-us; Fri, 03 Jul 2026

09:03:57 -0700 (PDT)

X-Received: by 2002:a05:6102:424e:b0:73e:9fae:5848 with SMTP id ada2fe7eead31-741f77351dfmr321905137.12.1783094637407;

Fri, 03 Jul 2026 09:03:57 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1783094637; cv=pass;

d=google.com; s=arc-20260327;

b=rKpWJ5LmM2iWRDedMfCmYckC9H+B+oD7Dal4ib27deI6Y3MQ2P5D7CNyFdUyQBE/4C

ZTS7j8R+S+zoG7bUodlMO1jI+5GqQri4sAD1P0T7N1ONzssnGbAiYoo1ybjVnWWh/7n8

zQmhPnavRxRAL3rCC81ryxYeT+sLA7XEnYx3S5IYkxFebloVNcvGNmu8BohDgnqp/MtF

PdW8RQ0Xa3rraH10gO5LjyTbVVphhHW61KUkqJ9HUptBF/CND2B3nOJ8YMbrwEvJ6tIh

403HS1o++o8dfle3qe+6F4S7fCrmK7LbVjO1mkRTHgXASbV7OMzOjeAHWrwgCgkAHubZ

TDjg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:mime-version:from

:dkim-signature;

bh=h8qr5fipr1obTOtBipNcBknNTwH5TeszgFDEkJrLWtg=;

fh=opgbel46GfzlAlUPCviZnFtOC/3+rwQvcUIN9ncZ8mE=;

b=Y6jZeCysyJ81u3nHHe72E8fNOqUn9/pN1HntceGYHlP3VC4qVRdKP3wpbyugPfPlgQ

cWCNPjl3mYxdrV0ekU5WiG+qkiQJ116YlZpqAqcoGOmiqjooYzIPVZndc0N12MIWzadV

uuXhHGO7oH4rhMLdp1+rziYFBQAdaTdsCLb0F02wu9vhfjDpwFjwNgzgqplooQjTU410

1FH9lKOgN4aHObtI1ckUCTxgrbu5KCqK0VPFC1Bd2oIZO5S86yRJi8zjQuoG5vi6UwfN

hRjzKi73UDQlZdDvIRBhgKRe/QRCkKBmHiv93AZbwSfr62CabEUo4PXtD4o5nLCwmjoS

44Ow==;

dara=google.com

Dash One Phish FRom Google Gmail Part 4

Posted by Dave Yadallee on





-family:Roboto,Arial,sans-serif!important;font-size:14px;" border=3D"0" cel=

lpadding=3D"0" cellspacing=3D"0" contentEditable=3D"false" unselectable=3D"=

true">

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"font-size:14px;b=

order:none;background-color:#FFFFFF;margin:auto;line-height:1.38;letter-spa=

cing:normal; width:600px!important; padding-bottom:16px;">
align=3D"left" style=3D"text-align:left;">

color:#000000;font-size:24px;font-weight:bold;padding:16px 16px 0px 16px;ma=

rgin:1;text-align:left;">
=3D"0">

align:left;line-height:28px;">Discussion

layout:fixed;font-size:16px;" width=3D"100%" border=3D"0" cellpadding=3D"0"=

cellspacing=3D"0">=


0;margin:1;padding:0;border-bottom-style:solid;border-bottom-width:7px;bord=

er-bottom-color:#FFFFFF;">

ble id=3D"avatar" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=

=3D"0" style=3D"width:100%!important;font-size:14px;padding-top:16px;">

nowrap;margin:1;">
spacing=3D"0" style=3D"width:100%!important;font-size:14px;margin-top:4px;p=

adding-right:6px;">

text-align:right;color:#212121;padding-bottom:1px;white-space:nowrap;margin=

:1;">contact@eyluldiler.com

ign:right;padding-top:1px;white-space:nowrap;margin:1;">7/3/2026 12:03 PM-<=

/td>

x;color:#FFFFFF;width:32px;margin:1;">
32" height=3D"32" style=3D"border-radius:50%;width:32px;height:32px;"/>

e=3D"padding:16px;text-align:left;word-break:break-word!important;overflow-=

wrap:break-word;color:#212121;">
er.com/*">DashOne Pro Dash Cam






568px;" src=3D"https://na.myconnectwise.net/v4_6_release/api/newinlineimage=

s/charterts/93d24960-c93d-42f9-bc76-fc4122703f20/09bf6e7d-8263-400d-9982-05=

2951f70b57" alt=3D"[fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png]" />

 











=20

=20

















----boundary_1416_0726f270-54d3-4620-be8f-16b589406eca

Content-Type: image/jpeg; name=image1.jpeg

Content-Transfer-Encoding: base64

Content-ID:

Content-Location: cid:image1.jpeg



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAARn

QU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAGxSURBVFhHxZctd8IwFIYj

kZP8hMlJJLISiZxEIiL4B5PImZ6znzA5yU+YnBwOOYlr9tzkjn5AadbS8JyTkzQf931v

SEtrYimKYkZ5oXy6KzD+RdlSMl06DGLOu0TbYN031UJD/Q8WTgnw7iMNhDg7qkcN3Q2T

n9T9zSDeD1X3bsgkJh/9qnHYqNQ5DErmY4p70FiqZAn98pvfdNvbkCQpM5UO0HGTAxeL

Jjvx4jQWvjcxmFh7AzR63edDQfcg2c/DZTc7a5xsmDHWyY1dY587Hn1+3J4NtiPZb7Xd

SWmA0lQZYCD65NcMNIX6GtA6iqYBk+Vur2NpDVjrrIpluVpIawCFnQ1tkznvIbmB6rX8

FPcwUMs6v4cB2OdZ6KuUpAaw4PJsgAGeA/KiEMVlA3A6kP0MvGm7k1YDcBrrYWCp7bsg

Z2CCiUO4TAu6R3bM/x2vtS8p6G69AdqyC0nfCSR7qqk3INAhXz6jv5BWeFbpEgysdHBU

0AlbfwkGX3XeKBD/gyq8jLbBpFEOpSZ3XfwPJsoXUvRT8hrEke+AlYaOh7UPLJRP8t6H

k7WSdXnaaxjzC/5rDi0liFmEAAAAAElFTkSuQmCC

----boundary_1416_0726f270-54d3-4620-be8f-16b589406eca--



----boundary_1415_e352a41b-3a4b-4b21-9ae7-465d66892f2b--





Dash One Phish FRom Google Gmail Part 2

Posted by Dave Yadallee on
X-Original-From: "CTS Service Center"

Reply-To: "CTS Service Center"

Precedence: list

Mailing-list: list g1@eyluldiler.com; contact g1+owners@eyluldiler.com

List-ID:

X-Spam-Checked-In-Group: service@eyluldiler.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 23.1

X-Spam_score_int: 231

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
--REPLY above this line to respond--

PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
xmlns="http://www.w3.org/1999 [...]



Content analysis details: (23.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[203.31.36.117 listed in dnsbl.ahbl.org]

[203.31.36.117 listed in dnsbl.ahbl.org]

[203.31.36.117 listed in dnsbl.ahbl.org]

[203.31.36.117 listed in dnsbl.ahbl.org]

[209.85.160.69 listed in dnsbl.ahbl.org]

[209.85.160.69 listed in dnsbl.ahbl.org]

[209.85.160.69 listed in dnsbl.ahbl.org]

[209.85.160.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[203.31.36.117 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[203.31.36.117 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[203.31.36.117 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[203.31.36.117 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[203.31.36.117 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

[209.85.160.69 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eyluldiler.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.69 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SMTPCO1 Received contains spammer id (smtpco)

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.69 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.69 listed in wl.mailspike.net]

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Request Received: Complete our 8-question survey for 60% off

DashOne Pro / Ticket #830334





----boundary_1415_e352a41b-3a4b-4b21-9ae7-465d66892f2b

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




--REPLY above this line to respond--

DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-tra=

nsitional.dtd">
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" /> <=

title>


ily:Roboto,Arial,sans-serif!important;font-size:14px;" width=3D"100%" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" contentEditable=3D"false" unsel=

ectable=3D"true">






t-size:14px;border:none;background-color:#FFFFFF;margin:auto;line-height:1.=

38;letter-spacing:normal;width:600px;" width=3D"600" border=3D"0" cellpaddi=

ng=3D"0" cellspacing=3D"0">

=20




;"><=

tr>


=09





Dear=E2=80=AF, 





Thank you for contacting CTS, we look forward to this opp=

ortunity to assist you! 






">Between 7:30am =E2=80=93 6pm on a weekday=

, you can count on us to contact you shortly.=E2=80=AFOutside of those hour=

s your ticket will be queued up to be handled as soon as we are back at wor=

k.=E2=80=AF However, if you need urgent help please call 866-399-3230. =

;





Thank you, 





















CTS Service Center Team





t: 866.399.3230 option 2


132 32nd Street, Suite 310, Brooklyn, NY 11232


CharterTS.com
3D"CTS"
tps://charterts.com/email-sig/cts-email-sig.jpg" title=3D"CTS" width=3D"200=

">




 





Initial Request 






-family:Roboto,Arial,sans-serif!important;font-size:14px;" border=3D"0" cel=

lpadding=3D"0" cellspacing=3D"0" contentEditable=3D"false" unselectable=3D"=

true">

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"font-size:14px;b=

order:none;background-color:#FFFFFF;margin:auto;line-height:1.38;letter-spa=

cing:normal; width:600px!important; padding-bottom:16px;">
align=3D"left" style=3D"text-align:left;">

color:#000000;font-size:24px;font-weight:bold;padding:16px 16px 0px 16px;ma=

rgin:1;text-align:left;">
=3D"0">

align:left;line-height:28px;">Discussion

layout:fixed;font-size:16px;" width=3D"100%" border=3D"0" cellpadding=3D"0"=

cellspacing=3D"0">=


0;margin:1;padding:0;border-bottom-style:solid;border-bottom-width:7px;bord=

er-bottom-color:#FFFFFF;">

ble id=3D"avatar" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=

=3D"0" style=3D"width:100%!important;font-size:14px;padding-top:16px;">

nowrap;margin:1;">
spacing=3D"0" style=3D"width:100%!important;font-size:14px;margin-top:4px;p=

adding-right:6px;">

text-align:right;color:#212121;padding-bottom:1px;white-space:nowrap;margin=

:1;">contact@eyluldiler.com

ign:right;padding-top:1px;white-space:nowrap;margin:1;">7/3/2026 12:03 PM-<=

/td>

x;color:#FFFFFF;width:32px;margin:1;">
32" height=3D"32" style=3D"border-radius:50%;width:32px;height:32px;"/>

e=3D"padding:16px;text-align:left;word-break:break-word!important;overflow-=

wrap:break-word;color:#212121;">
er.com/*">DashOne Pro Dash Cam






568px;" src=3D"https://na.myconnectwise.net/v4_6_release/api/newinlineimage=

s/charterts/93d24960-c93d-42f9-bc76-fc4122703f20/09bf6e7d-8263-400d-9982-05=

2951f70b57" alt=3D"[fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png]" />

 











=20

=20

















----boundary_1415_e352a41b-3a4b-4b21-9ae7-465d66892f2b

Content-Type: multipart/related; type="text/html";

boundary=--boundary_1416_0726f270-54d3-4620-be8f-16b589406eca





----boundary_1416_0726f270-54d3-4620-be8f-16b589406eca

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




--REPLY above this line to respond--

DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-tra=

nsitional.dtd">
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" /> <=

title>


ily:Roboto,Arial,sans-serif!important;font-size:14px;" width=3D"100%" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" contentEditable=3D"false" unsel=

ectable=3D"true">






t-size:14px;border:none;background-color:#FFFFFF;margin:auto;line-height:1.=

38;letter-spacing:normal;width:600px;" width=3D"600" border=3D"0" cellpaddi=

ng=3D"0" cellspacing=3D"0">

=20




;"><=

tr>


=09





Dear=E2=80=AF, 





Thank you for contacting CTS, we look forward to this opp=

ortunity to assist you! 






">Between 7:30am =E2=80=93 6pm on a weekday=

, you can count on us to contact you shortly.=E2=80=AFOutside of those hour=

s your ticket will be queued up to be handled as soon as we are back at wor=

k.=E2=80=AF However, if you need urgent help please call 866-399-3230. =

;





Thank you, 























CTS Service Center Team





t: 866.399.3230 option 2


132 32nd Street, Suite 310, Brooklyn, NY 11232


CharterTS.com
3D"CTS"
tps://charterts.com/email-sig/cts-email-sig.jpg" title=3D"CTS" width=3D"200=

">




 





Initial Request 

Dash One Phish FRom Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 11:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfhrT-000000008C4-40vu

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 11:39:35 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 11:39:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f69.google.com ([209.85.160.69]:59564)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfgVF-00000000KiF-22pv

for sales@nk.ca;

Fri, 03 Jul 2026 10:12:41 -0600

Received: by mail-oa1-f69.google.com with SMTP id 586e51a60fabf-44ce386fe90sf749314fac.2

for ; Fri, 03 Jul 2026 09:11:46 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1783095100; cv=pass;

d=google.com; s=arc-20260327;

b=HSwCfrZuURH1WD1UWHmXpy0ApO4c3vja2E0qCUTxtYsvFLQI9tZdWImMieHy1sd0xi

xXxign/jXNL9ecHSmNFxJcdfMh4uuZOYnByis6cC4O6Q2RWXRP+5lNPQSks4p6r4GzP0

wxIH6dVBW+pfm9AeLR69KEuQRhebsgG36XMLEZKkQSfQcflBDVcL7Ntz2USvYqM0+oHR

bQQ63b0x4XmBl4/7ULiHQ5x99LyTI9tAKD9STGNIjFQ7gvieA7QfZ+FbFc4UbqLcgwYT

1wkx6XGjmD89B7bqKVO2biJ9FNifvQiqrLvtR4MKTzwyAQ11Dfc3GazFgv8Vu+tznFan

KJkA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:reply-to:feedback-id:message-id

:subject:date:to:from:mime-version:dkim-signature;

bh=mBqyQAivVZeu+c40y050AZETlmAwFc4yMJ9QfLHTYGg=;

fh=gRxadjvmAPUIsi4Lba1909XiElZQGZFOQmUZ2ET7r8c=;

b=ZmbjzqqRku5vDa8JIPIsGinGo1crx2TrlR86tgnaLv32ygdozqU1sUagbyeUe+sXaQ

foQ3vumQ4WQnZnluAqJmp4cUGciASG9jMhQdJmKsCqU6BBpYMKe7FboED9NhkLTbFCDk

zop/8Aa3UdzLO1MzXcZucmXJ86+EdoE9XDclKtwyQzFY2/03RJ8m5fG9bf1G9u2cj18x

Zza/sEb+KdOqTglVJxeA+Qp+/3Pk+3S4lLegcwB0W5Ses7OEgkY6lRymeXcxUv6dM7Qe

aT0glCBCKgb2YaSvmgvRBOfStmYmvqbOT8pSsyBZzT5Pqn3ngd7xjZbPDISgshPdPP1I

xohg==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@charterts.com header.s=s318306 header.b=AUG0R56h;

spf=pass (google.com: domain of bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com designates 203.31.36.117 as permitted sender) smtp.mailfrom="bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com";

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=charterts.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eyluldiler.com; s=google; t=1783095100; x=1783699900; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:feedback-id

:message-id:subject:date:to:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=mBqyQAivVZeu+c40y050AZETlmAwFc4yMJ9QfLHTYGg=;

b=uEOJzcJftnTorPHuXQn/Xa4jiu0Avs6k8tg9zP8M+MwT4aRf4R7cAfFgLQur+YJAmz

eefBLGnclPNT9UvedW2amGqPh32Qbr9LoJeEZzuBQUVRAIJ7/8ZyaoM1GgddZNfgs9Pz

51DpiM1m6sIHVnQoD9ZbycN6gfu28YSnzI31Q=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783095100; x=1783699900;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:feedback-id

:message-id:subject:date:to:from:mime-version:x-beenthere

:x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=mBqyQAivVZeu+c40y050AZETlmAwFc4yMJ9QfLHTYGg=;

b=JLFDFuZstGIJ3bF8j5WCAmtUYZMv9irfxPVTSHvU+ViVPI+HD4BgyG2jfzCEv73cKi

Oly6SymPWHCcy+KHYsMJsnUL8fCTwNxZB/JXrvjVHC89kC7ybg7QDJQkUL4NHiXyscot

epzOlKMuSe6b+fExCbZR0TSDTfyqbvU4rmdx1VWZYO7cg0MOh7OYNW8QeZhb16CpCIl0

NC7Kl0TGDfEqU/tSO4g8lUFwJcyRcJ7RJubNj81ZFS4yclGwZQYIpvkAPigWKHgmcwL2

BZ7pD/PW0rrRa9G6CioTjT/AR0B0seJ+EH+u1RKnf8Ls4H1ynx9fzZlL60H+0/814K4Q

BbwA==

X-Forwarded-Encrypted: i=2; AFNElJ/bUgbsL7gvsehiFQbjnN2hJDANkXrr25DYBWe+930TYWtMn885ARYDo2Apn2sjm5bGetIwCw==@nk.ca

X-Gm-Message-State: AOJu0YyobStRBQipVnjVQCC2OyuYRqvGfCrHwbDCwgTE4Vw1Br1N5108

r1uiF7y68ajMxsn+9KNu1cND73Zb5K7MUa8ygxPhj9Wq9Gu+pCNdCwS20fStELaAxAw=

X-Received: by 2002:a05:6870:b3eb:b0:447:29d9:cf22 with SMTP id 586e51a60fabf-44d17f3d9ddmr60681fac.9.1783095100012;

Fri, 03 Jul 2026 09:11:40 -0700 (PDT)

X-BeenThere: g1@eyluldiler.com; h="AX0PUUdvEFVmgtV6eOQNTkQ64DjLohHzJ4YT4IZ6R2ja+CslVw=="

Received: by 2002:a05:6870:c0e:b0:448:3eb1:dba1 with SMTP id

586e51a60fabf-44c3868774cls3486361fac.1.-pod-prod-08-us; Fri, 03 Jul 2026

09:03:26 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AFNElJ/qmOJFYXt6NqDpF3kH0IONN2NvUzKoox+Gci3Ver4iHBDL23+M/qDoxuNOyH/elGWsSA==@eyluldiler.com

X-Received: by 2002:a05:6830:6ae8:b0:7db:b7ae:ef0b with SMTP id 46e09a7af769-7eb7ff48ffamr31143a34.24.1783094605998;

Fri, 03 Jul 2026 09:03:25 -0700 (PDT)

X-BeenThere: service@eyluldiler.com; h="AX0PUUfuxqoJlt26bJ2cHw+ifUXFuzoPS39fQ+V/x/sYb2dBWw=="

Received: by 2002:a05:6870:c0e:b0:448:3eb1:dba1 with SMTP id

586e51a60fabf-44c3868774cls3486306fac.1.-pod-prod-08-us; Fri, 03 Jul 2026

09:03:25 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AFNElJ8gKMieCHxP5RzxgU/w117RMSHh0iO7BCQJafNyb9kUuZz1VbBW/dA+frSBj5ybB8i6rgQUGo+0@eyluldiler.com

X-Received: by 2002:a05:6808:15a4:b0:48b:1e49:24a8 with SMTP id 5614622812f47-4962d75e616mr6366483b6e.11.1783094604800;

Fri, 03 Jul 2026 09:03:24 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783094604; cv=none;

d=google.com; s=arc-20260327;

b=C4rbsA5xn3/h5V1fU2c1Gou7grtEI44xEAxtW9TyCOiX9RLdSsbOXOKV7B1LP6SNVx

aoCgaO8Jkal5bL1FgfnvExig0u84RC0BOgvLG+T37a1S+Xs0n/zmYq0Ps8gYmSeJB6nN

WP73qapSiAeIanMxxvUdryAIn4Bdintuz1DSBaRcCf7uYhc80wej92i9I7mPcymtEeaN

y2kBcK3Baxii12ijphi4b6OxsMvtOQo5gFzhJdTSCU+AYtnVrBnYks15EFHl22t2JxoA

IPoK4n4Zory+FT7E4tyHEaVpsoMloXZLEvAt+o1GhIIUe0AniKFg5ou5Hb7qpL5tkeIk

4V4w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=feedback-id:message-id:subject:date:to:from:mime-version

:dkim-signature;

bh=zgAitw9DZGVTC+tsokLrWHHwc2YiVPEEQkhqHtnHpK8=;

fh=a1YKKo/9Ipv+BgPlvvJ87m4kPk8FpxNHYrWLMUILX7Q=;

b=IYvXhzS423+fbvwlzSTdvc+djuq4aYCH79Sa4n7JGdkY4RwQe55q5c48w1WRcqgFe3

6AMMS/dzg5ZznCn6qECFYeKZu8WP568lfyznrzTgK3aDzw+Er2G4PuBqZeGvjJpwFdW5

ZYETqzwXIp3QC4sfZPMVr2/4WW4EWjTQULI02JluPUz8NQL9F8EbAP9aGjI3hMw23klm

+EhI0IKs+fBI1xyESdx8NB3EY9D1eejCQ3qjY/KFn3Uh+dsOi2BjsCCznHcOu0u9pu1G

N3zE1+CjKF1gzpHyYM/0cE9gKSzYWrueTPwuhgFYujq5EME333sD0vP0ECT6W5s8hbh8

sOHA==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@charterts.com header.s=s318306 header.b=AUG0R56h;

spf=pass (google.com: domain of bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com designates 203.31.36.117 as permitted sender) smtp.mailfrom="bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com";

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=charterts.com

Received: from a3i117.smtp2go.com (a3i117.smtp2go.com. [203.31.36.117])

by mx.google.com with ESMTPS id 5614622812f47-497d1846dabsi4241054b6e.40.2026.07.03.09.03.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 03 Jul 2026 09:03:24 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com designates 203.31.36.117 as permitted sender) client-ip=203.31.36.117;

Received: from [10.17.236.164] (helo=na-smtp04)

by smtpcorp.com with esmtp (Exim 4.99.4)

(envelope-from )

id 1wfgMI-AIkwcC8mv1p-FWr0;

Fri, 03 Jul 2026 16:03:18 +0000

Received: from IP-0A0A02AB (ip-10-10-4-200.ec2.internal [10.10.4.200])

by na-smtp04 (Postfix) with ESMTP id 23D1113918F;

Fri, 3 Jul 2026 12:02:41 -0400 (EDT)

Received: from IP-0A0A02AB ([127.0.0.1]) by IP-0A0A02AB with Microsoft SMTPSVC(10.0.20348.1);

Fri, 3 Jul 2026 12:03:17 -0400

X-CW-CompanyID: charterts

MIME-Version: 1.0

From: "'CTS Service Center' via atun66s3ccccccccdddd"

To: contact@eyluldiler.com, service@eyluldiler.com

Date: 3 Jul 2026 12:03:17 -0400

Subject: Request Received: Complete our 8-question survey for 60% off

DashOne Pro / Ticket #830334

Content-Type: multipart/alternative;

boundary=--boundary_1415_e352a41b-3a4b-4b21-9ae7-465d66892f2b

Message-ID:

X-OriginalArrivalTime: 03 Jul 2026 16:03:17.0721 (UTC) FILETIME=[76399490:01DD0B05]

X-Report-Abuse: Please forward a copy of this message, including all headers, to

Feedback-ID: 318306m:318306a0_KGy1:318306sBMsNNHn3T

X-smtpcorp-track: x8uNtT10r3L-.zIqudKynUIPi.6hvmXwSrNze

X-Original-Sender: servicecenter@charterts.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@charterts.com header.s=s318306 header.b=AUG0R56h; spf=pass

(google.com: domain of bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com

designates 203.31.36.117 as permitted sender) smtp.mailfrom="bounce.sz1okoumznlzbi8=9oha8le5g2jq=zpupx6807c0f5i@em318306.charterts.com";

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=charterts.com

Dash One Phish from Google Gmail Part 3

Posted by Dave Yadallee on
----==_mimepart_6a47dd369df0_16a31a8261376f5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable










">


.tron/vite/assets/mailer-e57c98f5.js" as=3D"script" crossorigin=3D"">

=20





=

This is a notification from the Help Desk.


--=

Reply above this line to add a comment --








3D"header
ogo" src=3D"https://on.spiceworks.com/rails/active_storage/blobs/redirect/e=

yJfcmFpbHMiOnsiZGF0YSI6MjEwMjI3NjM0LCJwdXIiOiJibG9iX2lkIn19--f1b6633ad0f19e=

0d0ef89d786e89578ee601ad52/DQMH_Badge_Consortium-shadow.png">





=20







Hi service@eyluldiler.com,






The IT team has received your request a=

nd will get back to you. Meanwhile, you can reply to this email if you have=

any additional questions or details.

Sincerely,
IT Team


>









contact@eyluldiler.com made 2 updates.=20







#3704 Compl=

ete our 8-question survey for 60% off DashOne Pro













contact@eyluldiler.com wrote:

created with attachments








3D"fff=<br
ffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png" src=3D"https://on.spiceworks.com=

/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsiZGF0YSI6MjE5OTE1NzgzLC=

JwdXIiOiJibG9iX2lkIn19--7a7533a4e537b85188859faafe7759e830490404/fffffg9tuv=

nbjgdfdf44697d7fcbvdfdfr6bbbvb.png">







>


ler__ticket-notification-activity">



contact@eyluldiler.com wrote:

*DashOne Pro Dash Cam <https://www.eyluldiler.com/*>*

>

[image: fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png]
<https=

://www.eyluldiler.com/*>



















Ticket Attributes



























Creator contact@eyluldiler.com
Assignee

























1TNr77S4l3SKCcY7zeOWgXXsPfl0eLjsv9w4yoW4hrLDrKVykGrUbW-2B5An6RCvEAYj8L1NR7w=

wKpv0fPZjYiUOHSTnQoiVAc36CK-2BUyCIEnh34iMWthDZcM-2BhUJDV9n8O2gzya-2FuY2CFob=

3xTDh4POxChucXSKnnSRUihlNBlPm2xA7e0uRUchDHtxGFjQdjWgzM2ZXLGLb5g-3D-3D" alt=

=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;=

width:1px !important;border-width:0 !important;margin-top:0 !important;marg=

in-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;p=

adding-top:0 !important;padding-bottom:0 !important;padding-right:0 !import=

ant;padding-left:0 !important;"/>







----==_mimepart_6a47dd369df0_16a31a8261376f5--

Dash One Phish from Google Gmail Part 2

Posted by Dave Yadallee on
header.i=@on.spiceworks.com header.s=s1 header.b="osuH/go3"; spf=pass

(google.com: domain of bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com

designates 167.89.82.157 as permitted sender) smtp.mailfrom="bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com";

dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=dqmh.org

Precedence: list

Mailing-list: list g1@eyluldiler.com; contact g1+owners@eyluldiler.com

List-ID:

X-Spam-Checked-In-Group: service@eyluldiler.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 36.9

X-Spam_score_int: 369

X-Spam_bar: ++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is a notification from the Help Desk. -- Reply above

this line to add a comment -- header logo Hi service@eyluldiler.com,



Content analysis details: (36.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

[167.89.82.157 listed in dnsbl.ahbl.org]

[167.89.82.157 listed in dnsbl.ahbl.org]

[167.89.82.157 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.82.157 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.70 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[167.89.82.157 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eyluldiler.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.70 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.70 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} [Ticket #3704] Complete our 8-question survey for 60% off DashOne Pro





----==_mimepart_6a47dd369df0_16a31a8261376f5

Content-Type: text/plain; charset="UTF-8"



This is a notification from the Help Desk.

-- Reply above this line to add a comment --



header logo

-----------



Hi service@eyluldiler.com,



The IT team has received your request and will get back to

you. Meanwhile, you can reply to this email if you have any

additional questions or details.



Sincerely,

IT Team



contact@eyluldiler.com made 2 updates.



#3704 Complete our 8-question survey for 60% off DashOne Pro



contact@eyluldiler.com wrote:

created with attachments



fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png



contact@eyluldiler.com wrote:

DashOne Pro Dash Cam



[image: fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png]





Ticket Attributes

-----------------



Creator

contact@eyluldiler.com



Assignee



Why did you receive this email?



Glad you asked! We're using the Spiceworks Cloud Help

Desk

to track issues and get all your requests sorted in a

snap. Have a concern? Just reply to this

email, and we'll be in touch. Thanks!



Terms of Use ( https://www.ziffdavis.com/terms-of-use/ )

|

Privacy Policy ( https://www.spiceworks.com/privacy/ )

|

Cookie Policy

( https://www.spiceworks.com/privacy/cookies/ )

|

Security Details

( https://www.spiceworks.com/support/security-center/ )

Dash One Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 11:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfhrN-000000008BN-3t6P

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 11:39:29 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 11:39:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:49554)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfgVo-00000000Km0-0R7Q

for sales@nk.ca;

Fri, 03 Jul 2026 10:13:15 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-381120d6d62sf1244889a91.3

for ; Fri, 03 Jul 2026 09:12:21 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1783095136; cv=pass;

d=google.com; s=arc-20260327;

b=Wv1wygzo8HyZZ6BfAXJqyURSvnvF23xcyk80sjgIat/iZErb9B5xR3+73wtrlz24qN

k6CCElWwf1STa7AKS+ruHbozasVpgQqwtoyVQa94lVUSbKr05EcUjtFD1s3ECygpVi7u

zNHznEPSo0aa1G05g5i2BN0JDwd7zCYSp4FK9oy9n9eA3o/+Xv7FxYf3v9FHMTepOCOd

HCfgBOLjrqGvelcNFk2AfZtn0MYFKh/HUVYv/Fpc+xhAaqs8z4RSRRm+2EV1FHXuieH4

QDqxoemgnOkuE/H+omSaFvJQqJDwTNlVedpKOR/k6Uiq852TGvmiAtLsUPsMui8c3imk

alxg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:content-transfer-encoding:to

:reply-to:mime-version:subject:message-id:from:date:sender

:dkim-signature;

bh=wV8UcoZ3VsYelRVolsWBA09zV7mBfW1HZvSVGBT/6lY=;

fh=fmzEO8OXERETlevtRH+L7Gb5jXgyCm1RaBvQz9VwkJU=;

b=Y98rvqjwR80kkUW5YVaZldwL8/uvoeRE/sDldFFxecsnueyta9sWt9YuOJh1VHjMdW

RaELY1kS9jdH4YPW9hStfSzkpRTzasyiAy2stxlty8rKg+0a1+a/PU70jvCQBhxTs27W

EWK/f9RomyBn94xigxflXIhSrhSAFbjmrRo21nkhJeKHpGUA159x35taXIQwkry6pALe

JBqP5X1WsIn8Ln8o6q42jUOTE9bz0qcxhI90ta3ECh30aEzWhyZk9GgwWc8K+nsS7gJt

jA4zvzp1b0I1g4XBJzw66Aj99Gg0kcBOYzJnukQr9sgmYR8sswQilmAOz00av4kzPwCJ

UNXg==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@on.spiceworks.com header.s=s1 header.b="osuH/go3";

spf=pass (google.com: domain of bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com designates 167.89.82.157 as permitted sender) smtp.mailfrom="bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com";

dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=dqmh.org

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eyluldiler.com; s=google; t=1783095136; x=1783699936; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-transfer-encoding:to:reply-to

:mime-version:subject:message-id:from:date:sender:from:to:cc:subject

:date:message-id:reply-to;

bh=wV8UcoZ3VsYelRVolsWBA09zV7mBfW1HZvSVGBT/6lY=;

b=r2m8SmhjJx4ZdG41B/13dizqdfLMUAqhrIBXMeDL5AiYQolxEIZr4XflfZZnKErsOm

JvkfTFyw0sJyH1876o+iAcDYw59h1SB2FLs7aATyyhWif21eKP+iWQpRF4+cBH+bH+NB

0vaL+nPnLtDPujMYtzN6ocNpgKTMW1eFQdGBY=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783095136; x=1783699936;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender

:content-transfer-encoding:to:reply-to:mime-version:subject

:message-id:from:date:x-beenthere:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=wV8UcoZ3VsYelRVolsWBA09zV7mBfW1HZvSVGBT/6lY=;

b=Hpr5shpY1UkgKS7CC3ezgSPwDLuMaKkojWaN+pIowMvyWDF23r3rHXLLl9rNaNyDm/

LQXc3WtuzWUIdWxS3Y6KkcMQiyeteN2vnAMIcKAOYPsbyjN0+967Ly46NzxL4t6N7k7x

9d9Wtc6hFXVnoWtIFUs9mSXr5Oa5UIJ/+flBVdnPnQbkUVRTT+DQ1aNgZhYM4VjQLyTr

cI5A7/ero1SseclY7TbzSI7lHgv9VQHHS63x8J29VmqCiK74LsxsR6Kqu0Hn9Qr2a0nU

ylwiERqBsj/4INXnJ4o3kA5Mlb33tlU8i+Rx7wl+l+q0ZwanvSFIqwORK7k4uVnDdGxU

lAow==

Sender: g1@eyluldiler.com

X-Forwarded-Encrypted: i=2; AHgh+RrICZZElftFRXYS0npmd08Fc07uG7NzkAsW6RcYg44HKluqZBtGMLXUmtISJI4aG7s1EfZYbw==@nk.ca

X-Gm-Message-State: AOJu0YyegGfGuCz+xz4FX8+zaTwLj7OpsrzYqrkWvHDY08YpAG/BzCwF

josRu56ocjP2shcw3v38F+Ops5QRFGWuuxjtChPxDeMWw2wM1gqS2kgLcCHzN7vP9Js=

X-Received: by 2002:a17:90b:4b05:b0:36a:fcf5:64bd with SMTP id 98e67ed59e1d1-382807a9d55mr167175a91.2.1783095135667;

Fri, 03 Jul 2026 09:12:15 -0700 (PDT)

X-BeenThere: g1@eyluldiler.com; h="AX0PUUdKY+tMU6HBC4r/D/+o13QZMOhh1TnOXmqK/Z9sfnFqrw=="

Received: by 2002:a17:90b:17c7:b0:380:1e7:ca89 with SMTP id

98e67ed59e1d1-3809828e16bls4973874a91.2.-pod-prod-03-us; Fri, 03 Jul 2026

09:03:05 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AHgh+Rrme/a7QCSR7hngqNmiGzwPgQnRAwD4a0iVryBryF6ZVcKcClw8uEDNpEMBGVQuNpnyyQ==@eyluldiler.com

X-Received: by 2002:a17:90b:1e48:b0:37f:d262:1e0a with SMTP id 98e67ed59e1d1-38280d999c9mr141061a91.12.1783094585676;

Fri, 03 Jul 2026 09:03:05 -0700 (PDT)

X-BeenThere: service@eyluldiler.com; h="AX0PUUdvxn+CPpBJYZpx6TGFM3G9twmATpwk4FdIZM90YhW91w=="

Received: by 2002:a17:90b:17c7:b0:380:1e7:ca89 with SMTP id

98e67ed59e1d1-3809828e16bls4973857a91.2.-pod-prod-03-us; Fri, 03 Jul 2026

09:03:04 -0700 (PDT)

X-Received: by 2002:a05:6a21:6e8f:b0:3bf:6c08:fba4 with SMTP id adf61e73a8af0-3c03e589ab3mr10087637.56.1783094584224;

Fri, 03 Jul 2026 09:03:04 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783094584; cv=none;

d=google.com; s=arc-20260327;

b=DyCKbKO497YsD+/D9o56FMv9/EKIq2Wr+jaavVLs9x24KppvfYzQKA/XRY9lsju/do

86lJ03K78VgcOHFBOZqldWku4RE7tgp3BVh34cUGdgpYgOcxUDVo1RB3bBDjIAy8lk/i

J+iSe7Z0gU2Z5+sgLH24onrecJFV34DOMXmq+62vVfbCaBCoHwxv1N6QlKDKRpx4huKC

+Xb92piRJ0Wh18rY0lTp/+2NCPppulFQAr8IptcTlzcCenMWs13PmRwrJIVdX3PCrOtg

G7qSoxn3ZxaFFv81eekbYGlkG9jSqANr4RQE6snxaYmAmLK5L4+1BxemwUpAm8ZjKqzj

IPUw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=content-transfer-encoding:to:reply-to:mime-version:subject

:message-id:from:date:dkim-signature;

bh=nCdVF9z3C2yemFoaPPpZbGkOv02mXwJMqHqL9dF1wyI=;

fh=opgbel46GfzlAlUPCviZnFtOC/3+rwQvcUIN9ncZ8mE=;

b=oCuYsI6LT+VKcknydiBdcJIRppYmRCADuqPH+3aJdcP1v3p4DWLHd//0yequck3Orm

TOpxBjYb1xFLmaErztFpM/GKUB2W7+ZYKA6dUIilsXIyqNEB+4rHCmGE0r9ASI2/Oy20

93dLJoJu5bOiYnZJBmidMjSO9cTXhTsESK1fTWseQ56iLaxsZZpJRR5ppY8nhF3jP+Ih

EU57xme607MdqmeytgdvRYt8Qhy1ag+OyyXTdDqC3GPNbjqZEZc/ykhXsRR3cTQ8hIsJ

xN3BVXuqEwjFynjR8w52RQaTT1aeL8xtYOb2W/94TQ4NkH2PWCWxfGIlvaGB9P5DW4D3

2hSA==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@on.spiceworks.com header.s=s1 header.b="osuH/go3";

spf=pass (google.com: domain of bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com designates 167.89.82.157 as permitted sender) smtp.mailfrom="bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com";

dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=dqmh.org

Received: from o1678982x157.outbound-mail.sendgrid.net (o1678982x157.outbound-mail.sendgrid.net. [167.89.82.157])

by mx.google.com with ESMTPS id 41be03b00d2f7-c9e8e920d56si10577822a12.26.2026.07.03.09.03.03

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 03 Jul 2026 09:03:04 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounces+2752257-a127-service=eyluldiler.com@email.on.spiceworks.com designates 167.89.82.157 as permitted sender) client-ip=167.89.82.157;

Received: by recvd-9c4fc5d56-xtsvx with SMTP id recvd-9c4fc5d56-xtsvx-1-6A47DD36-B4

2026-07-03 16:03:02.292923955 +0000 UTC m=+925396.106017427

Received: from on.spiceworks.com (unknown)

by geopod-ismtpd-47 (SG)

with ESMTP id mE62iUgTTZWNsxe_0D39JA

for ;

Fri, 03 Jul 2026 16:03:02.236 +0000 (UTC)

Date: Fri, 03 Jul 2026 16:03:02 +0000 (UTC)

From: DQMH Consortium

Message-ID: <6a47dd36aa3a_16a31a82613778b@helpdesk-ticket-outbound-email-jobs-5dfbf97949-p877h.mail>

Subject: [Ticket #3704] Complete our 8-question survey for 60% off DashOne Pro

Mime-Version: 1.0

Reply-To: DQMH Consortium

X-SG-EID: =?us-ascii?Q?u001=2EQC0beqY3oXfZzN5pp+L7+Pupxrv71yqgo2LomstDYJYxSL6g4CDLX+S9Q?=

=?us-ascii?Q?Sp+p0M6uzYrsNJKqShHRyo3GkeEIf+Ep8bxGOO0?=

=?us-ascii?Q?+914cUDDM+lT10z7BOPy8MuoDApYG+56s=2FPyOhG?=

=?us-ascii?Q?4p98cctL+beMXqE8qpsXwAUmdyuh=2FoyBwjXKdSY?=

=?us-ascii?Q?VM8y8e16ruH5TeK+frw1LB6urZZqryVFq6Dpp1F?=

=?us-ascii?Q?m5uMyPR5bvIEkau2upcyFg=3D?=

To: service@eyluldiler.com

X-Entity-ID: u001.gmpV4gFpr9jxF52dwbVvCQ==

Content-Type: multipart/alternative;

boundary="--==_mimepart_6a47dd369df0_16a31a8261376f5"

Content-Transfer-Encoding: 7bit

X-Original-Sender: info@dqmh.org

X-Original-Authentication-Results: mx.google.com; dkim=pass

Canadian Tire Dash One Phish from Google Gmail Part 2

Posted by Dave Yadallee on
From: DashOne Pro Dash Cam

Date: Fri, 3 Jul 2026 16:01:46 +0000

X-Gm-Features: AVVi8CffCaCaU7VRpvpf5RRzn3xbHnZmAznhAgbRoCeQEBvCzGFDqChldD7iB2A

Message-ID:

Subject: Complete our 8-question survey for 60% off DashOne Pro

To: service@eyluldiler.com

Content-Type: multipart/related; boundary="00000000000060d87b0655b70b1e"

X-Original-Sender: contact@eyluldiler.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@eyluldiler.com header.s=google header.b="BWID/0M1"; arc=pass

(i=1); spf=pass (google.com: domain of contact@eyluldiler.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=contact@eyluldiler.com;

dara=neutral header.i=@eyluldiler.com

Precedence: list

Mailing-list: list g1@eyluldiler.com; contact g1+owners@eyluldiler.com

List-ID:

X-Spam-Checked-In-Group: service@eyluldiler.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DashOne Pro Dash Cam [image:

fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png]

DashOne Pro Dash Cam



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.200 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: eyluldiler.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: eyluldiler.com]

[URI: www.eyluldiler.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eyluldiler.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.3 LONGWORD BODY: Uses overlong words

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.200 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.200 listed in bl.score.senderscore.com]

Subject: {SPAM?} Complete our 8-question survey for 60% off DashOne Pro



DashOne Pro Dash Cam







fffffg9tuvnbjgdfdf44697d7fcbvdfdfr6bbbvb.png

Canadian Tire Dash One Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 11:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfhrA-000000008Ad-3sLV

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 11:39:16 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 11:39:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:47463)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfgb8-00000000LDP-1bdn

for sales@nk.ca;

Fri, 03 Jul 2026 10:18:47 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-7f582244e9esf18271247b3.3

for ; Fri, 03 Jul 2026 09:17:50 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1783095464; cv=pass;

d=google.com; s=arc-20260327;

b=E1n49hoz6hOZJtvcW/wmBv72btH7n7gTKB9epitOntcni7aErGo4lUroQHdgmEifBL

G9r3Qw5mHV6gT036u6IG+VnS3wb2c9J8RHjrF15QQkI2q43cboBpVC5U+5E3nbMDJNJw

MevrCUMDjbuczI+pCqWaG64ngLOKsnA+DA2uGUYd2Q8GXcEBboYjHUBKv+kbRGqYKnai

ZwK6/WL6pdo/2iFB5VbLksMMWaCo9k1mNw5KpJjsDDC17iRrcDRfdrjklAH5j5pkWRCK

5t9dlawbkCRr0df6oCVEwHVvwSZ7qoeYHfvzgTaATshHcqKVc0ykrFVk/CcDxMSjtqCe

tMQA==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=thueuRLmYzSo2WjyJM2EjMeezGoWo7mgZtiXX0P3qKI=;

fh=b/PVdyX+hF5AUFXQABuyUgqNzP9vzN/7LStv2E3Jwvw=;

b=hhtt1G/1tGhIVIwPzX85eSuakMahpymG1aSKXpyL6S02fdpvtJeQ4bEuw/d0rFsMyU

YhYPiGANhfGPnMKiwBKmDYdjFfSvmmC082cxIgnIUuhOeKslnLp/OH/EtW8n8trwGM6H

xh0Trjf8CGAeYsMjOTdPucKkdRLbdWdDFMryli9/bvSyUbGb37FN8q0z3x0A4GvHIKuL

Rlz96TgDcpQ+A1ETkHxGE87KjZg9BLDv0ZX6PzaHOC3ziprYssFSxgodawIsiC2ucas2

S09/YbwmcE91HxGwPjWAConx3KO8oaMoMl3tzqXj8V9BqPRqfilP8JUlDyeGTeAtBleD

7rOA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@eyluldiler.com header.s=google header.b="BWID/0M1";

arc=pass (i=1);

spf=pass (google.com: domain of contact@eyluldiler.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=contact@eyluldiler.com;

dara=neutral header.i=@eyluldiler.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eyluldiler.com; s=google; t=1783095464; x=1783700264; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=thueuRLmYzSo2WjyJM2EjMeezGoWo7mgZtiXX0P3qKI=;

b=VJVf2W7DNeCOIIrSGgSoh7ZXeiBNtVx9GoDNn+N4tNjZBGCc3695F0AFaxYgI10WpP

xUWPC3XsZEpLPIZqBTSeFsEV6zI5Iph8W9B5WiA5I2tIgJRKo4CBGunDBJMyYdb/rncr

nJQiBpISyQBZnoqBriqBl0EWtvopo3DF1goE4=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783095464; x=1783700264;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=thueuRLmYzSo2WjyJM2EjMeezGoWo7mgZtiXX0P3qKI=;

b=YsRAr3K/uReMImNyAqxXwiUaPCr+OI06peT9ecfbH+YA2kVgfex8R3X6GoISTw2cii

K1uknxH4YRTuNKCQun7l2iDgFDJv8xANTKH1Ga9ENzoBHyHl+sHO1g1ITQMMnawcAO6u

Re5p5s5NgQnoz3uI46dj//CzPKTlahU/7fg6iazMXH6LavyZp5J1Yp5Z2T+4oVA6Ono/

i6+iijNQmveWuGWrt8vQ8EMrf5daPBPdZrcAwiEMIAJOJiQBYFjenU4giEVatMBuoyHQ

1ys0tqpftn8kS9uiRsFLn4UlX6boLusrK0hi6RW0OJm2/LWhW9WhPNlCCDpApBnhIiKB

StOA==

X-Forwarded-Encrypted: i=3; AHgh+RofmJwLnfvqq/yP+rSAtakfKDyx3K0edxHRduF0YO8olJA9HEEFQWUSK/+VfRzqjNk/oOQhpQ==@nk.ca

X-Gm-Message-State: AOJu0Ywo4iEK/3XAgLqWuce31/AvSP5bbPyWOg1B+3Holnh3k2KcV0Ly

82xl0Cw0s8hBxKj/6tLqO8M6b0iveM+Pjcu8GNms2Z7m+HpvObS1+BfNyPVjbu382cI=

X-Received: by 2002:a05:690e:1516:b0:665:a0c:658d with SMTP id 956f58d0204a3-66650d071fdmr443100d50.28.1783094947745;

Fri, 03 Jul 2026 09:09:07 -0700 (PDT)

X-BeenThere: g1@eyluldiler.com; h="AX0PUUdCahs+afwK75SC5jX7mFa/Zu3P7q38MOIGh1FBiGNWtQ=="

Received: by 2002:a05:690e:1909:b0:663:7153:562f with SMTP id

956f58d0204a3-66518933befls4665915d50.2.-pod-prod-02-us; Fri, 03 Jul 2026

09:02:06 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AHgh+Rp5kWA0/DMF8TGxG/2PyftwhAM680kdwVpG1I186biA7fzheotiC206eEjlt1IHc7iqrg==@eyluldiler.com

X-Received: by 2002:a05:690c:998b:b0:80c:85b6:7660 with SMTP id 00721157ae682-81720fb9e39mr3239537b3.69.1783094526268;

Fri, 03 Jul 2026 09:02:06 -0700 (PDT)

X-BeenThere: service@eyluldiler.com; h="AX0PUUcbM5M/ZaQOawPJv+uu9Im0elVVShlHSrZaMP1Dl84Q3g=="

Received: by 2002:a05:690e:1909:b0:663:7153:562f with SMTP id

956f58d0204a3-66518933befls4665894d50.2.-pod-prod-02-us; Fri, 03 Jul 2026

09:02:05 -0700 (PDT)

X-Received: by 2002:a05:690c:370a:b0:7fe:1413:f6b7 with SMTP id 00721157ae682-817200e100emr3122887b3.48.1783094524611;

Fri, 03 Jul 2026 09:02:04 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1783094524; cv=pass;

d=google.com; s=arc-20260327;

b=AkiAFllxz3ZImkvfybSpShHB4xSf15WcioumFi3O7ZWc9gOrDC3N5jri0sjXys31no

dC+vTMRxlTS0Q/epv1GPnhaBeQFyiPkN9BDBbbtxjIbWSV25xXSTtq48iFIBY0trFOFa

QAskvn0XbNbmOe0s0binALGxN1TfGps4jULEnNlVqj6jUr6ZgTD0sQQBKEQTJQtU0es5

cr/y0Juyrr4Upjcj75l80HtHm1X6f0h5nMWZ+PeqzBeHx2gAUK+xl55xaoNpYbxefs9V

xO6CfSXYCs+NMTYvyxl+tKaoHmO6gv3jq579kftZKVcU7acs0cMXd2B7zzcjUA4Rf24o

5VyQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=2un2D+bel4P9a40NcY3rclmEgX09LOFHK4HuYsqh7kw=;

fh=opgbel46GfzlAlUPCviZnFtOC/3+rwQvcUIN9ncZ8mE=;

b=KMN1a4nXRZZjPL8JXBXLfO9+/CD2iwQZpzyTX9z2Y8uDU/Sy79AlmWsDKshDiyhy8e

n7D9TGb5fb/7KG+GxmiGo/ogA6x1WHGvvE+esZ/qK/Eo47VfLB1h+6gdFB9JyWqSbraH

GlCA1aE73kyoOL5040/3mULNwv8Uj/D3vGxLorOUAw6M6T0IAZ6Spzd7MPnWUtYEVD6L

fYKRevq5kYYinuV4DtzRgLfH2mMdXiGwplmXHZWU+HwFbx3qnTeusGqF0D8osXeorlLA

NHSokpxQPvPT4xMNgfloubZl4x2QpIbIDV4YWaDq80DbdbiCb1eY9zj8pPnemX5NT/kI

+RLg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@eyluldiler.com header.s=google header.b="BWID/0M1";

arc=pass (i=1);

spf=pass (google.com: domain of contact@eyluldiler.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=contact@eyluldiler.com;

dara=neutral header.i=@eyluldiler.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 00721157ae682-8163b9daf38sor36224847b3.8.2026.07.03.09.02.04

for

(Google Transport Security);

Fri, 03 Jul 2026 09:02:04 -0700 (PDT)

Received-SPF: pass (google.com: domain of contact@eyluldiler.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1783094524; cv=none;

d=google.com; s=arc-20260327;

b=Y7XzB0WUchpXRGEVwjrCKjbBC4tp24XrfrIAvJT913Zw+x1nj7Y3wJQU5K1p5K/nHr

0oVIj9n5LRxYygqNnRkyKQuG5dSGS3mYfLmO+5oU1lufFwad61Mq7+qeaCt8DwLE3xi3

yv/igVpD56SZynhrl9Vn1r+OXwr+zsNcLF0qSziJuxkKCC6ZZjx6V4lXr+6TRvG7YA1K

9ol07o0PFO+H3NpwtcLYQPjmbYSQiYOt9XSD30LNJdp243WZ7lKBXVWp2Ek9wC3FTXKe

gcjfMOaXV6SmhnRFwYSRq5uxnUCW7PZNgkmQBERyMUMEnGjaN3oiCRxd0TeqPUpS7btp

ccug==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=2un2D+bel4P9a40NcY3rclmEgX09LOFHK4HuYsqh7kw=;

fh=opgbel46GfzlAlUPCviZnFtOC/3+rwQvcUIN9ncZ8mE=;

b=jkjvB4GTFZ9cDfwqIuLLfBPzOUNFDHLJwKievEjiNkT2kHBHEqDMhz8t5yJwjGiXM6

IBLrraZfxBC87FkHmiINVRe/Pe0gSSTZW+ESOEK4m1lUgUPMCFnZGYBHiM1RqwDsFYtZ

a8DapHWHRc32DywRBh/O6eOXKqfTHMlS/X0f5DI+apkzD6DrkwlOy3Bv7g5QtRD8DtZB

2aqZkgRWwtyf7h34L6DZb0zFJgChc5nFG209EOyItcPkfM5y3edgr2T2XR4xE86YUxRv

Gvm5EqCR/09qBx26+EDnCielwY6TuKDbfzmRfdhshUPyVdXYv5JdIW/XXmozWDfaktCh

y9qQ==;

darn=eyluldiler.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AfdE7cla3/olF9BGN/IP+1eGRMZ8Kr/Dyx28hiL11Dm2GJwlhKb4s1ZbfV7wiSnLpcw

vT3aez8mahdV43KJdX/nkxnCitlXpz0HusQ5OZ/6h2qJNlT4Ns5GLekazIkrTc0E+uNR5Qb2xOF

+E+wDxG/PV+xCBPcitWbhXdYpUs+wWKwKPAk6WTJrb9L7F2lJXKYgL7eDQ66dyqiVu84G81qRdp

rlqdcvfagImEYc8u64G+oCAh5ld75G8JOPhA0C4c7DLsh1jk73NAbcNMh622Dtgpnzs6hYOYeCb

WEHFX9fVbheWfYb0yVUkTmEkQhWBK2FtU9XQTT20h3lKEj7ySjfFVw==

X-Received: by 2002:a05:690c:4b8e:b0:80c:c7f1:96f4 with SMTP id

00721157ae682-817201e72b3mr2847807b3.51.1783094518457; Fri, 03 Jul 2026

09:01:58 -0700 (PDT)

MIME-Version: 1.0

Bookkeeping / Accounting services spam from Microsoft OutLook Part 2

Posted by Dave Yadallee on




--_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



Hope you're well.



Are you interested in hiring a remote Accountant or Bookkeeper on a full-ti=

me or hourly basis at a competitive cost?



We offer bookkeeping, accounting, payroll, financial reporting, and tax ser=

vices.



Please let me know if you'd like to discuss further.



Regards,

Jaisal Andrews



From: Jaisal Andrews

Sent: Tuesday, June 23, 2026 4:39 PM

To: jaisalandrews.webconsultant@outlook.com
ant@outlook.com>

Subject: RE: Bookkeeping / Accounting Services?





Hi,







Do you currently need support with Accounting, Bookkeeping, Payroll, Tax, C=

FO Advisory, or FP&A? We help businesses improve finance operations efficie=

ntly and cost-effectively.







Open to a brief conversation?







Best regards,



Jaisal Andrews



From: Jaisal Andrews

Sent: Thursday, June 18, 2026 5:17 PM

To: jaisalandrews.webconsultant@outlook.com
ant@outlook.com>

Subject: Bookkeeping / Accounting Services?



Hii,



I wanted to connect to see if your firm ever considers remote accounting, b=

ookkeeping, or tax support during busy periods.



We specialize in Accounting, Bookkeeping, Tax Preparation, Tax Planning, Fi=

nancial Reporting, Accounts Payable & Receivable Management, Bank Reconcili=

ations, Payroll Processing, and other back-office accounting services. Our =

team is available on demand to support your operations efficiently and cost=

-effectively.



Would you be available for a quick call to discuss how our remote accountin=

g and bookkeeping services could support your business at your convenience?



Many thanks for your attention, Jaisal Andrews



Note: If this isn't relevant, feel free to reply "Opt-out"



--_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">



Hi,
n>



 
span>



Hope you're well.
:p>



 
span>



Are you interested =

in hiring a remote Accountant or Bookkeeper on a full-time or hourly basis =

at a competitive cost?



 
span>



We offer bookkeepin=

g, accounting, payroll, financial reporting, and tax services.
span>



 
span>



Please let me know =

if you'd like to discuss further.



 
span>



Regards,=



Jaisal Andrews=



 
span>






0in 0in">


e">From: Jai=

sal Andrews




Sent: Tuesday, June 23, 2026 4:39 PM


To: jaisa=

landrews.webconsultant@outlook.com


Subject: RE: Bookkeeping / Accounting Services?
>





 



Hi,



 



Do you currently need support with Accounting, Bo=

okkeeping, Payroll, Tax, CFO Advisory, or FP&A? We help businesses impr=

ove finance operations efficiently and cost-effectively.



 



Open to a brief conversation?



 



Best regards,



Jaisal Andrews



 
span>






0in 0in">


e">From: Jai=

sal Andrews




Sent: Thursday, June 18, 2026 5:17 PM


To: jaisa=

landrews.webconsultant@outlook.com


Subject: Bookkeeping / Accounting Services?







 



Hii,



 



I wanted to connect to see if your firm ever conside=

rs remote accounting, bookkeeping, or tax support during busy periods.=



 



We specialize in Accounting, Bookkeeping, Tax Prepar=

ation, Tax Planning, Financial Reporting, Accounts Payable & Receivable=

Management, Bank Reconciliations, Payroll Processing, and other back-offic=

e accounting services. Our team is available

on demand to support your operations efficiently and cost-effectively.
>



 



Would you be available for a quick call to discuss h=

ow our remote accounting and bookkeeping services could support your busine=

ss at your convenience?



 



Many thanks for your attention, Jaisal Andrews<=

/o:p>



 



Note: If this isn’t relevant, feel free to rep=

ly “Opt-out”











--_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_--

Bookkeeping / Accounting services spam from Microsoft OutLook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jul 2026 08:04:32 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfeVG-00000000Kd8-3dpX

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jul 2026 08:04:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jul 2026 08:04:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19011030.outbound.protection.outlook.com ([52.103.66.30]:5809 helo=OS0P286CU010.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wfbuL-00000000Dqd-1f3g

for root@nk.ca;

Fri, 03 Jul 2026 05:18:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=TYgrchaqMtzlcMorE3CbqKViWSyKZ4boezWYvwt/bmSQrIrRikorWpw19HPgr/iZ5b0uEfNLDGqFvsxKn36uT0vTYOOgREBzy4ad+MmgKwUXSVDoo6RpWNngiGaUN+Rfc3m87re445mV2L4Xxqs61I9IAPP3VsXur+OVilL8HEpfqscHk4JQ07hl5wMk5WWQ+BdjwEaUMlKGqYQ98ZuhKSjmHFijbYghAY2TjnhQfCg7qq/Miu05WZIqVlr3boVU6pSD5sXWDJxbuooe4wEFN7qqz3SNWgfHIExWvuzGp19o4Cxeq6D5uis5rVxOn9brWVYnqnpeaqF/HkkXN0RXOw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Da/L2cPPgjlewv5xwpqtZkuH67H9COXn15V9k43bzwo=;

b=PNlI5laGLCuHM95bmSK+KzOIlTvHV4J5zXaqMlCmEIfWj+xn2RQ+NXXTL72cCHoHRXzw/lGSzZMe1A0OVPx+iYnpfJMXQw55Swo1JuINZmH54AnsaYn9H57g1QO+vsksNTy6g/hvK6Vufos8J7Bdvn99SeUc9RP8AOkcBttzAxiZHyfvpemG2rOyEqCmV4+m7Jczsa1pXQHs+DLHUpUFg8nRpdtyF2lroCuUJWfiOiaow+L85nIBZSjIfVeXFIK49+6Naucu8gePqcoXvQSW3DLFplv7nVb1qLMdPeDwSzL527zQSIVmVGyWuwFjCszzu8AGEvOchz3/Io6xYoTRaA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Da/L2cPPgjlewv5xwpqtZkuH67H9COXn15V9k43bzwo=;

b=TO4bJmFCBa4waMgGO46qtZdALivIyYTAkGuPcFn/sXd/FbUNON6tiNcr5v65simv5IxfgBRxw20YhDJ+jXcomAQUY+G26A+WkHCZeMEG1jjbBvTW2OMJw1hRcaodfx1xstgZNYidbXqRbF1EsZ4173BQQ7nOT3oSEZMy3/IzbjP9wUFfurDnnFQtATUOwMbw5t2hYiHhc0F1JIiDBM/jqhOSgvYpIkVx+3vxmK+kVHfew6QrG3e3TbCETJicw8lfmRw99PQ2p/evnf1ImRsEJwrwCQwVIi2SRuV98yUdkVca30payrFvE9ffD6JvsbSpKw7UQl4JRMJzWAmmDcIJyw==

Received: from TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM (2603:1096:405:297::13)

by TY5P301MB2137.JPNP301.PROD.OUTLOOK.COM (2603:1096:405:3e8::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.18; Fri, 3 Jul

2026 11:16:39 +0000

Received: from TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM

([fe80::c03e:a5a7:c0da:7fe4]) by TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM

([fe80::c03e:a5a7:c0da:7fe4%4]) with mapi id 15.21.0181.010; Fri, 3 Jul 2026

11:16:39 +0000

From: Jaisal Andrews

To: Jaisal Andrews

Subject: RE: Bookkeeping / Accounting Services?

Thread-Topic: Bookkeeping / Accounting Services?

Thread-Index: AQHc/xgyiNRUpR/hM0C4fUSAarCbd7ZL2ngAgASPsKCABj0GoIABy5/AgALlHzA=

Disposition-Notification-To: Jaisal Andrews



Date: Fri, 3 Jul 2026 11:16:38 +0000

Message-ID:



References:











































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY4P301MB1524:EE_|TY5P301MB2137:EE_

x-ms-office365-filtering-correlation-id: 7953066f-3660-46d9-dcd0-08ded8f48da6

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|4140399003|704163111799003|2604032031799003|25010399006|37011999003|22091999003|24121999003|12121999013|12050799012|39105399006|8062599012|19110799012|13091999003|31061999003|8060799015|16051099003|24021099003|55001999006|12091999003|56899033|440099028|3412199025|102099032|41105399003|39145399003|40105399003|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?V8DXUaqft0AmrFc0WpuSKgHRT7YnGB1Ve98z2mYBXrMR33m+SCkdKq2dATLR?=

=?us-ascii?Q?2COrt/6oLiA2L6bWIxobnTCSTxeSY+WdQpeXR28e5/pcke24Dpde89kI6eeq?=

=?us-ascii?Q?5E/+38UddH/CFwg0bjzydMzqDYw91GoV9Dxmn5wUMp0YcVZLrCOLyfoUO4wM?=

=?us-ascii?Q?zinds+pnqCbYNNZ7gR5aStevLw51I04bw9HtpQxacXe719qth+aIuNhn8UHE?=

=?us-ascii?Q?24ce9vwCjZ4wv0u49TqlLQpZE8dFIWsCTCvn+x+qG3QGinmrybDJci7NluNl?=

=?us-ascii?Q?RZc/QRlXhHFxe5MnBwMmnIWXP0FaWHEGD2fiyeODASY3uqNVWl2KUDlpNtKf?=

=?us-ascii?Q?agNgQ7NgmSW433fT3cX5D8oqpdf7AwGIfoaEl7r+a5FXWK7lyalY5MDKsgxm?=

=?us-ascii?Q?nt0GGHgM+Dbf3gmSNBxdmm3fTb37/KWZ/cI3xlXr/zYLuvcROdPZrJ620CMt?=

=?us-ascii?Q?/WbCDykj3X2C1DdXdedChPhbA7IdctA6pf9qIlfbLuytSP9XnRO8ozqn6a9J?=

=?us-ascii?Q?OaUKGsDsV5U7MYv/Go/aKQrLoM4QOIl7T70fzBw8gKHR/pjKZRTLw/EzCX7r?=

=?us-ascii?Q?NHq0CfkACf9/+wwShRT8nGtjA7gcxG+2XH4qH9ycmBLCXOD72AFopYhmLuOQ?=

=?us-ascii?Q?KuQ7D6Z2VHeWIkytAep+wenibjc4B2PVI6bOKjHJZ4VVqEh6XCbDeH+3CxBR?=

=?us-ascii?Q?CpEiblLiaHilvIAoEQsqRQvnPIPhXzWQ3vo3J0tC027biw+e7T6frgUTBckD?=

=?us-ascii?Q?p7YqWAHIe1af/ioYkwPUccR4ISJfMF36YhPh89bnJYWJdnc+qIvrAKwQSPgi?=

=?us-ascii?Q?w1kXhNJHhdIESJb3l0uqd4hL5MIdkyJbwkK61py7JzeoqW359wiX0k3mrbKl?=

=?us-ascii?Q?qzaTh+K65rkIcgo2x4p6GXLSsJCiJqYU0QZxQ8cKPR47+5LbPMwhtU2ht7ql?=

=?us-ascii?Q?qE2EkrdZsnH1yOxIJijWjipvAtRQoacJB3maiM44wIGVKknNLSo1PXqRREnF?=

=?us-ascii?Q?YDb6FWYMF7Vg8d6cS6FEs34OwR7RucHslurvOwcC1Ri7uQJzHnVQBsOFBPf6?=

=?us-ascii?Q?xcJcFlKWHpUuQcXgjoPsGSvlVmUe6bMxplKvjVBgi26siG2Y4bCC7zmBA20h?=

=?us-ascii?Q?4CA6RVh4H/juXhLMQVrKsDxagfaB7VSRdCti2dGn6H+1+eqqPsAyeGlVb88z?=

=?us-ascii?Q?1yVjV1tawqbeK47+8GnnOiajlnXY+UxrsgryF/+VO/yvORCaOYSEc2cgHmBJ?=

=?us-ascii?Q?3mrbUrm0lViBWLibdVtMxOHs4ota3Sb3q/NtyJcsoRbRHMOhiq0mAoRjPR6a?=

=?us-ascii?Q?YeZSkXajuFuk/vn/YBAihGqEuYwhwwJR5XqL4exfigRCdRQ3MrbkkvRqau+Y?=

=?us-ascii?Q?I6syyC2is2+1kCaVja2oTcZB6pwt7AGvpucXqf8ihMG7oAKUe5beFi5GgDgz?=

=?us-ascii?Q?Pbq8jm6dp9I=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?GOHw4QvgDJxbfXD19gbQrddH1gOAm++5bhkWFRJQQv2YpSOGxqc1Ot6rt0Ln?=

=?us-ascii?Q?4efevTOcHkbgtecs66FHzHCKoStgpL6/73wYrVhre0jOBnXMZDjXEwaA2+LO?=

=?us-ascii?Q?KWsWqyyVzArpb711jRKUljr4ykYDhPP6oMVAZhDwS3OJk75Mrjh701GqMP40?=

=?us-ascii?Q?X6flIlRtFyIZ4gK5+Pw71UM1+UBAU6o6/utnxRmVQexbPkuZdtUj4G3MW+cB?=

=?us-ascii?Q?PkL9h8Xi58m0HMXa+s1TCl1Z4KmUW1IBKzsimkX4UAEj1jQ0pnPATdklbtz9?=

=?us-ascii?Q?h2E12sy1S7US6X/7mizYfPLCwncAysb+IdfOFpNAvoz41dNtk5iMuG2jhWYQ?=

=?us-ascii?Q?DGBo+U6mdwH09ww94pbU9Tvep/UBkDt7XF1GIIgBhf6WCO8/+OOXf0YFBXKJ?=

=?us-ascii?Q?afeezPBXPC20t95Cv9AJlwSJdsUoT7fK1jjNUmHLOqmEHrKNViEobY3iuvGP?=

=?us-ascii?Q?F7opiJi+0JnqHcu9FG1tse0LtSDLZVYNCMDptCfkCut+JbNdQOGv5JgHGkYG?=

=?us-ascii?Q?toLP6mpYpr+elMXDPe7iCKsUNOOCqdtWp5xk0yduLkRTM/1VHWmmLgw5flyY?=

=?us-ascii?Q?5jKYsp35bQ8U/yUSrTzzSS+8xM7wT79/dkvfKi8ohz/t1FAjp/zmgVE3PRPC?=

=?us-ascii?Q?mx7tSyQn+Fu3DT6JMplEfuM+8i/dpy78VYnc1sfjGLqb5k8uyyZ/lZw4/67v?=

=?us-ascii?Q?DR3SlfyMqiJMh/316/Ca2SvxGMACPxRA1GBSJ8kilY9B9MflhfcuiUkHh/+M?=

=?us-ascii?Q?HWIOQvHh9iAGxNI4Np3luHcrR6/Jq3ph/r0xe20d9Szc+ZjSttFae7nmxF0w?=

=?us-ascii?Q?Svy9pDoC6rlfiJ/UrK+jASI+TVAu6TaTTJmen6rFeQj8QKqnSQRPAs9eLN1d?=

=?us-ascii?Q?TQExlVe8W4WvrGQ7sjYLMlRHG9qB0F15GRK9MR4sg8wytUz+TBjZ123WiJof?=

=?us-ascii?Q?njmLHbLr5Q530gIShof9M59FS2YbCKKa4M+y0RqEEfO6Gvy/NI5LG82OHQNR?=

=?us-ascii?Q?A7isLm3jfVURQLNJmQImHY0FQVdxKjRBUzJrDz7bibbYDrF1bcwcUQwJf5H7?=

=?us-ascii?Q?YVwAOz72WAs73rrMoIERbqGUUq8OJra/ULmFqHyTw+htG+sUAEn0kAeSHc9D?=

=?us-ascii?Q?9hc/NCfI9zvOY5Jo+miIHIGtLcxXhQwco148fTsjE9teuGplk33pUyx95q7s?=

=?us-ascii?Q?0lvjoSiBJCyDN6mEAtbUtqFKA5Vya7dboNFUzzkqN4yMbn6z0vhpm9HWSbWh?=

=?us-ascii?Q?IATVTNE7nMQxVb9xvfKbjhV76rtWxwIhA7Xlg7i3sFwsf6AN9AFq688hr1cW?=

=?us-ascii?Q?Ko7DDwEUs10m9UX4cV/Zw4ha9AQ6ejUewvw+DV2rn/DdAK5DQdX4iFeYfQ6G?=

=?us-ascii?Q?0R7d8p5ovlZXxnffSg8c7VTyQx6PzO79IC/eEvkaqiaditpqvexNVy7iDCd+?=

=?us-ascii?Q?JOq78sXkz0s=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY4P301MB1524148A7B8CB8EF7716892FE1F42TY4P301MB1524JPNP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY4P301MB1524.JPNP301.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 7953066f-3660-46d9-dcd0-08ded8f48da6

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2026 11:16:38.6221

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY5P301MB2137