Zendesk spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLZh-00000000Ct1-4231

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:40:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:40:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f69.google.com ([209.85.128.69]:46385)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woL3L-00000000MqH-1rZz

for sales@nk.ca;

Mon, 27 Jul 2026 07:07:39 -0600

Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-49554715277sf26376825e9.1

for ; Mon, 27 Jul 2026 06:06:44 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1785157597; cv=pass;

d=google.com; s=arc-20260327;

b=iZqLbvOSi5QeA3cjRf2w6xskENSuVR7YsqrED6lmYBXMgRY1S49ccBOm/gHB4E4ngB

f/vT61ZlB4FaJvYJ3UiSFbIa9Ao24r42czCCcgcuaWmuMWT7jQg3XHrCrRw8anGyNKMU

TXYNi19SsbA9eFrkXsxv6SZbjI1JOeg6LSCGlCGlzjkdYOBwC1Rk7nsQ+QC1XAjTT3mo

7SOUUfOBtKQ7BcS7yS4M5wzeZeYDFyto9n9368DVImMbsBuEzBUNDkj3zl3gfFjwvtfC

YGvu9f4hgrcC+/la0iqax/5V1DSo9o9032pAshD8KPZXVtmDx9d9t0wOxppzPS/ClX+m

cQzw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:auto-submitted

:content-transfer-encoding:mime-version:subject:references

:in-reply-to:message-id:cc:to:reply-to:from:date:sender

:dkim-signature;

bh=7xRig/6FLzdbSRTNwGIsX9eGHC/zmO74hqOyTDCCNx0=;

fh=5//sVv/5QgT6zfJ9qEgfaAp/ZaqR8cx48tOSDLVJU2M=;

b=EkqYzYpt2NaylijbGu0U5V2qvZfc0uq1aDXnt0wfqeyD1FED/x9m9vhslFKEYIeHs5

SK1KU8cSJzo7o/cynrA5HovbQm27AofV1kTgVGho47kNtv8yYBHAE6jP638xjVbDc0gM

dnem/c2uCst71omodYh047BB2zvFOZ8gzUokfDsWssTXcFI9VjmT/J4LfzgFUt1HEnYm

K70+zp0nEELIWRBURWRSybAagXQEhe7u39D6oqeNvyWg/hW63zy8apV0lwYC5ShC2W9v

6Ufr0AiV+3Lf9IPHLdHNyY+0cSZOTJ/u4PpBovdGodWtMbkhbjLT4gaA4cjq2+Nrw66R

btIA==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@zendesk.com header.s=zendesk2 header.b=R2vZLxMv;

spf=pass (google.com: domain of kontakt@silkyofficial.com designates 188.172.137.3 as permitted sender) smtp.mailfrom=kontakt@silkyofficial.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=silkyofficial.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=voguepolis.com; s=google; t=1785157597; x=1785762397; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:auto-submitted:content-transfer-encoding

:content-type:mime-version:subject:references:in-reply-to:message-id

:cc:to:reply-to:from:date:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=7xRig/6FLzdbSRTNwGIsX9eGHC/zmO74hqOyTDCCNx0=;

b=ezewKjc/k4MfV9d8TV67qsmpNwcR3ZwxBGwimNv7IVnpTEKj+DWIkiaR5TmZHAa/dA

JTFOyY+TvN7ChjpvXmQ2yEQl16d+KMnunJzyuNaZ4TAG2uHDvm/02oS0m+7S/Mficbz5

iW/Nq3AXDfZB6UVSCmb2xLJM+ghQBtD+HBxcM=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785157597; x=1785762397;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:auto-submitted

:content-transfer-encoding:content-type:mime-version:subject

:references:in-reply-to:message-id:cc:to:reply-to:from:date

:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=7xRig/6FLzdbSRTNwGIsX9eGHC/zmO74hqOyTDCCNx0=;

b=V9V9VkPCEauKAILmmp2ExH3sdNliRgeVST4Qht8aOIsglYB/P5md4zgkilkFPaj5TT

QKR3Is5GV+a89iB8c13YJVk3qlzjPKnNCJnRwVLaVPpXOSuSGa3TSWwPKPScCgTBlYkQ

05jmISQSKRpRkt8hZjVzJZb06GuiQJeMkSwBv5+/ZJszscdoKJVUGFyaMLwzT2TsacrD

DWVyqx9kBFM/vaVb4fS8bhfqhJlN4WbavVziGjWnNHowcpLDSetC/iIhj9bl2KJ6Yfq9

W0BjFy82wBjuEQcyXr/RJq2d7PGaAcgG70FTIZpSNBTnaD8TGmuDz7jdF9cPKZx6JFtq

D9Og==

Sender: k1@voguepolis.com

X-Forwarded-Encrypted: i=2; AHgh+RpoD+lUbJW60yXJxcRs71gSLfqdQNwd/+jzpgqdeksgD8T1vIzesW6lGrlPVaLWu9u9ISTo8A==@nk.ca

X-Gm-Message-State: AOJu0YyhXTwrvVKoGh/gk+i98h9XH0Hccp7084iSeL8gaq0sQ8Kv/UbN

9k1Q/Gpv255T5zwUZ9ULKn3M7RtC0Q55d2mrKY8u+MyFA1lOGppeg5fUNKBfs0iDpDg=

X-Received: by 2002:a05:600c:1f91:b0:496:c1f3:e8fb with SMTP id 5b1f17b1804b1-496c1f3ea6fmr21965805e9.8.1785157597252;

Mon, 27 Jul 2026 06:06:37 -0700 (PDT)

X-BeenThere: k1@voguepolis.com; h="Aa7YSPSjmKMWGTxXYuEpSSwF7YsJiXa5tSUGiREcDQEmX3oBuw=="

Received: by 2002:a05:600c:3ba4:b0:495:4d51:2d4f with SMTP id

5b1f17b1804b1-4966393b700ls6008795e9.2.-pod-prod-02-eu; Mon, 27 Jul 2026

05:58:40 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AHgh+RqOzQqa7SBGc5M2/WSV2GaWrGIQxJagDG4J9eSOULe0E90NLuCddJbup++vN4O3eNpfRg==@voguepolis.com

X-Received: by 2002:a05:600c:5253:b0:495:4182:4456 with SMTP id 5b1f17b1804b1-496b5fb6d60mr101031835e9.29.1785157119905;

Mon, 27 Jul 2026 05:58:39 -0700 (PDT)

X-BeenThere: sudfdfvvcvcvcvpport@voguepolis.com; h="Aa7YSPRwRRG97Y+2E6VccB4OYJcEkk0uwAu9c+GVmqkSR1SQsw=="

Received: by 2002:a05:600c:3ba4:b0:495:4d51:2d4f with SMTP id

5b1f17b1804b1-4966393b700ls6008305e9.2.-pod-prod-02-eu; Mon, 27 Jul 2026

05:58:38 -0700 (PDT)

X-Received: by 2002:a05:600c:1f8c:b0:496:bbce:fc with SMTP id 5b1f17b1804b1-496bbce01a7mr77174975e9.12.1785157118203;

Mon, 27 Jul 2026 05:58:38 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785157118; cv=none;

d=google.com; s=arc-20260327;

b=IBtMjqUrNDosinYm3KeHVXw2WDJ9aveSh098t9lV2tdaF5ZVcgBc1O++6CcO0gEESg

XzQxlNeWctvt6CQ+eqHbl8v4e7j2xttDQTFbPZyHwQp2h/hw4Yu/KHhQ0R0M+lAHPipz

Jtp6PZrMJm2CFZV1YScWzasy7XdBD/paCReT/EBzPXHUna8ZAiw5sg165QP8X/4K/38x

7lcnEaHLYHX4XphIsB9nWRhcYs+aMHOKGxlm+Blcrpythd3QN7ZtI8fGhvJTBPyHoU6A

BZnfqIZjIGT2KU9gHjEmfACErUiG2A4SVjB6m4GzsS9KVIz0bSgQPoZQTZsk/aGynEX9

rhWA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=dkim-signature:auto-submitted:content-transfer-encoding

:mime-version:subject:references:in-reply-to:message-id:cc:to

:reply-to:from:date;

bh=qloj0lBlxSgps+uPHveZpweamacD+wUD4zQMkATXC4M=;

fh=oDxeGfJHIf0exs7z8uCNfU9/deUdxXWd423wFku1yOI=;

b=DYryv+o/7NIfXguQW0DShLR20rvILtHA9m6mxJN4ha7bvviyVVr6AQYvAehiBAjdZX

VHwPSSUVvCOtCaQy4v3XlnRA81r445hxnwITbgV6cLmps6dcjne1RMT6HqPkN+ku4OdK

Bd7U5TRgO6Ds1Qp4SEUwbIE3FxjMS/X5U396PS+yEKGbLfPoK32I8h523V8HZY+vA56w

3L2lyPn9U33f2Yg4h4xP7QeJCFKYx5teJES8cksiCHRg7Z4gfT6QabF5Amam8U2d5UKX

0VT+t/yf/n9vMZHBlDdioKYnZ96jeJRCRT7tIJDcgILmBY8od9RLhTwNNNCcrK/FcswX

nncQ==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@zendesk.com header.s=zendesk2 header.b=R2vZLxMv;

spf=pass (google.com: domain of kontakt@silkyofficial.com designates 188.172.137.3 as permitted sender) smtp.mailfrom=kontakt@silkyofficial.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=silkyofficial.com

Received: from mta-out3.pod17.euw1.zdsys.com (mta-out3.pod17.euw1.zdsys.com. [188.172.137.3])

by mx.google.com with ESMTPS id ffacd0b85a97d-47f8fb70d0csi25406271f8f.355.2026.07.27.05.58.38

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 27 Jul 2026 05:58:38 -0700 (PDT)

Received-SPF: pass (google.com: domain of kontakt@silkyofficial.com designates 188.172.137.3 as permitted sender) client-ip=188.172.137.3;

Received: from zendesk.com (unknown [127.0.0.6])

by mta-out15.pod17.euw1.zdsys.com (Zendesk) with ESMTP

id 0fea1310-36c9-4385-99ba-5341cb7ff1c0;

Mon, 27 Jul 2026 12:58:37 +0000 (UTC)

Date: Mon, 27 Jul 2026 12:58:37 +0000

From: SILKY

Reply-To: SILKY

To: Contactus

Cc: Support

Message-ID:

In-Reply-To:

References:



Subject: Hey Contactus, [Anfrage eingegangen] / [Request received]

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6a6755fdc585e_bf1808613073";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-49189569619729

X-Zendesk-From-Account-Id: 76e22a9

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01KYHTFSQZ4NM9FQC4HP72XRGM

X-Original-Sender: kontakt@silkyofficial.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@zendesk.com header.s=zendesk2 header.b=R2vZLxMv; spf=pass

(google.com: domain of kontakt@silkyofficial.com designates 188.172.137.3 as

permitted sender) smtp.mailfrom=kontakt@silkyofficial.com; dmarc=pass

(p=NONE sp=NONE dis=NONE) header.from=silkyofficial.com

Precedence: list

Mailing-list: list k1@voguepolis.com; contact k1+owners@voguepolis.com

List-ID:

X-Spam-Checked-In-Group: sudfdfvvcvcvcvpport@voguepolis.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Support Ticket #188865 Hallo Contactus, vielen Dank für deine

Nachricht! Deine Anfrage ist erfolgreich bei uns eingegangen und unser Support-Team

kümmert sich innerhalb von 48 Stunden darum.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[188.172.137.3 listed in dnsbl.ahbl.org]

[188.172.137.3 listed in dnsbl.ahbl.org]

[188.172.137.3 listed in dnsbl.ahbl.org]

[188.172.137.3 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

[209.85.128.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[188.172.137.3 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[188.172.137.3 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[188.172.137.3 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[188.172.137.3 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[188.172.137.3 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

[209.85.128.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.69 listed in list.dnswl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: voguepolis.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: voguepolis.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: voguepolis.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: voguepolis.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.69 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.69 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Hey Contactus, [Anfrage eingegangen] / [Request received]





----==_mimepart_6a6755fdc585e_bf1808613073

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Support Ticket #188865



Hallo Contactus,

vielen Dank f=C3=BCr deine Nachricht!



Deine Anfrage ist erfolgreich bei uns eingegangen und unser Support-Team k=

=C3=BCmmert sich innerhalb von 48 Stunden darum.



Wir melden uns so schnell wie m=C3=B6glich bei dir.



Herzliche Gr=C3=BC=C3=9Fe

Clara





Hi Contactus

thanks for reaching out!



Your request has been successfully received and our support team will get b=

ack to you within 48 hours.



We=E2=80=99ll get back to you as soon as possible.



Best regards,

Clara



--------------------------------

This email is a service from SILKY.



















[G51GN9-5XK6W]



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@voguepolis.com.



----==_mimepart_6a6755fdc585e_bf1808613073

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable
















">


e',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">

Support Ticket
yofficial.zendesk.com/hc/requests/188865">#188865

Hal=

lo Contactus,
vielen Dank f=C3=BCr deine Nachricht!

De=

ine Anfrage ist erfolgreich bei uns eingegangen und unser Support-Team k=C3=

=BCmmert sich innerhalb von 48 Stunden darum.

Wir melden =

uns so schnell wie m=C3=B6glich bei dir.

Herzliche Gr=C3=

=BC=C3=9Fe
Clara

Hi Contactus
thanks for reaching o=

ut!

Your request has been successfully received and our s=

upport team will get back to you within 48 hours.

We=E2=

=80=99ll get back to you as soon as possible.

Best regard=

s,
Clara






e',Verdana,Arial,sans-serif; font-size: 12px; color: #aaaaaa; margin: 10px =

0 14px 0; padding-top: 10px; border-top: 1px solid #eeeeee;">

This email is a service from SILKY. Delivered by
.zendesk.co.uk/service/?utm_campaign=3Dtext&utm_content=3DLotus+Dream&a=

mp;utm_medium=3Dpoweredbyzendesk&utm_source=3Demail-notification" style=

=3D"color:black;" target=3D"_blank">Zendesk



=

[G51GN9-5XK6W]




splay:none">

hema.org/ViewAction">
al.zendesk.com/hc/requests/188865">
iew ticket">








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@vog=

uepolis.com.




----==_mimepart_6a6755fdc585e_bf1808613073--

carbinox phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLZa-00000000Cqm-3h5n

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:40:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:40:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f200.google.com ([209.85.167.200]:60639)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woL1i-00000000MiF-045q

for sales@nk.ca;

Mon, 27 Jul 2026 07:05:57 -0600

Received: by mail-oi1-f200.google.com with SMTP id 5614622812f47-4a4a7d0362esf3289205b6e.0

for ; Mon, 27 Jul 2026 06:05:03 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1785157497; cv=pass;

d=google.com; s=arc-20260327;

b=PBiJWzO9UdmLVSByz522wjg8AqykhhCy1/bAsUiO/8wTTRN4bvohBZSvl3yuFXk2fW

P0TuaJkHQQZyA08Ohkqh579mTZ5dAJcMMftBUubAcOyo/tpHbuV/2KNtt+0KgU0s/FnE

brNOTG+XX9W22dxuQsKflG4JwhgFiBqYnsRlITGr4C6XWB6EVcBkoKNhwr4F10/FvrfQ

6gIXLC3elkVmdY7KX39d/QELqh+GwzGX/ffbaRkHy8R10xgqEi7AUxbToyHlnqu4Ngli

UQ4c/W7BjHMTpX6Rq8Vs06z6GAcOpssW9qbo2BK/Nvi+qUPAVcefVhEDrzmgVnvU4Pe4

paBQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:auto-submitted

:content-transfer-encoding:mime-version:subject:references

:in-reply-to:message-id:cc:to:reply-to:from:date:sender

:dkim-signature;

bh=de60KwqiSpEbDhAJNzjx9uFx1gVz9847zLhV4eSKsU0=;

fh=iHS0wrKpSaDTRZOfh/faq9LlavhlzlL3v4BfvPg2doE=;

b=VzU+HtnSi6L7AXFAHAmv1VyaY0BPOFDg7J9tVDv7kb7kKSQtEpwijYEMXEo0LHtzGy

RIjbb9DyCeG2jL3AASG5xR1RZRvVMB1lS8rRv+4p4mwWD3InQD5G7atGIM2XelaTW7YK

kWuRKfyFKDsxw+ErJ+Wnlc9Qjoh/YwXmrrYu7OTU2tuOyBl1xJzuuZoO48lARP7fxVLu

Qfd66c3G3HzAZkW592b0HgKpMj3743JS9UA0IFyrS4Gl0QHRPTFuuciMD5vZks9l8ozj

9CBmP46jwERYIVCscbhyyIeNQtBGt3PcvlsVCBaEGzFJvu06wNaLhnv8odzT1lVdDrZy

lUmg==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@zendesk.com header.s=zendesk2 header.b=U9l1p4Sk;

spf=pass (google.com: domain of info@shopcarbinox.com designates 192.161.152.35 as permitted sender) smtp.mailfrom=info@shopcarbinox.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=shopcarbinox.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=voguepolis.com; s=google; t=1785157497; x=1785762297; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:auto-submitted:content-transfer-encoding

:content-type:mime-version:subject:references:in-reply-to:message-id

:cc:to:reply-to:from:date:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=de60KwqiSpEbDhAJNzjx9uFx1gVz9847zLhV4eSKsU0=;

b=Q3txJaYHBQ/EauHOi9JdtEIeSoFx8Hlu6uB8gaUOydRkyOqS3YkxDmAVy20kGTbw7z

Uem6vItxkty4Lo+FexFSq5ZgxJwCuNbxvvVReg8kqvFItpzYkTMCRt52q/wd6VZgQrSy

fksbfZUufvUEn8bARE1PMrF/61kS77tswIqEo=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785157497; x=1785762297;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:auto-submitted

:content-transfer-encoding:content-type:mime-version:subject

:references:in-reply-to:message-id:cc:to:reply-to:from:date

:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=de60KwqiSpEbDhAJNzjx9uFx1gVz9847zLhV4eSKsU0=;

b=bMFq8WpUOaWfALuNkJFL9DIX6kzPyl9m7aVHVU3eqbUXyDMmBlx0xPk9rtgJ9QKxeY

o6aQVAXVOap6ovWfxDVtQ+bPFxGfBC0/NZHTay5mBqNSw3jYcIyMqyJF/2uYNXiYeb+4

OTKSlBNlIRrBVC14vCsI/Uv9R4m0WRQKpLVf4E4YWJbKEO2bUO10NWUpPvM12OffrG10

T7qUDo3jRa77htMS8Wz58L02vcoDqYYGPU69IboISPL9Gzza2Tq+4Awvrxv+j2aCcpBf

pCPQCJ/J0YE9S3d9qSBFovKYk1HuTIjrFLyg+1xZK9Dg+/kgFbWYHhEDzcIDGYRNTb1Y

rzJw==

Sender: k1@voguepolis.com

X-Forwarded-Encrypted: i=2; AHgh+RpYCcbV3Jzo94d40OOnASwlrSV+gJu8iohu4fngAps5fnUkFybwl8rTK6PUu0GiMA+tA7jZiw==@nk.ca

X-Gm-Message-State: AOJu0YyA8M8n8oZ4elqXyXFsI+tlyq4+ceVr7ibpQil8CshoBNg0/dGx

gngpI0PJ3GI7JWnsQn7IidI62N9O22mEXKRxN4YwHUcwH7aULYzX9OHzzQYITgUZ9KM=

X-Received: by 2002:a05:6820:612:b0:6aa:f37e:8d35 with SMTP id 006d021491bc7-6aaffa5cdf3mr6212974eaf.62.1785157496846;

Mon, 27 Jul 2026 06:04:56 -0700 (PDT)

X-BeenThere: k1@voguepolis.com; h="Aa7YSPQzfcyD1yfLoZgF+p84ftUqFvo2F7UXLZhA2oTSj/LNcg=="

Received: by 2002:a4a:e9ea:0:b0:6aa:facd:4cc9 with SMTP id 006d021491bc7-6aafacd52b8ls1293963eaf.0.-pod-prod-09-us;

Mon, 27 Jul 2026 05:58:38 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AHgh+RpvK1WFQ604xh16TpPZXBhQWy+O0CiS5OdXqcoRoQiX8A/AmX/BSJVLx/bDZv9D6HV4MA==@voguepolis.com

X-Received: by 2002:a05:6820:1f07:b0:6aa:da48:42c7 with SMTP id 006d021491bc7-6aaff9bad13mr6715952eaf.47.1785157118295;

Mon, 27 Jul 2026 05:58:38 -0700 (PDT)

X-BeenThere: sudfdfvvcvcvcvpport@voguepolis.com; h="Aa7YSPQDh1URf8UpBVDjV3c/QvEtrn3LSAomhSe894ANnOlpgw=="

Received: by 2002:a05:6820:61e:b0:6a1:83eb:9108 with SMTP id

006d021491bc7-6aadfe531aals3345769eaf.2.-pod-prod-09-us; Mon, 27 Jul 2026

05:58:37 -0700 (PDT)

X-Received: by 2002:a05:6820:2d03:b0:6aa:f26e:7982 with SMTP id 006d021491bc7-6aaff9f638emr6019894eaf.48.1785157117621;

Mon, 27 Jul 2026 05:58:37 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785157117; cv=none;

d=google.com; s=arc-20260327;

b=L8topJPNIEK2klAdXIsOxikvWMe8SSRvYmfU+XScTBNJuxJyrLq89kUqzY3VThwKwV

NaYM50o43f6OzZ8/nUoS5hpRL9z6rpdEBL6qlZiIP5bCLCsArkf74u7TRk7WhJseuLmx

rzGtwXiBBVJ68DtiJkFYzl/8Ba/CwXquLrnLCo+7NMDVebtYYspK5dqtT6oLsyezkK7m

a77HU1hzbFLzaxW4QRr/QXOVJ68io++Lh6Jh1u9anKBj9f5zbE+JWv2X/DwadxKC4ZO5

IbjZ/UVrHkbRvNdweypb+NQfMYIwmIlckK1kj0nnAeaOMH8dL6qH4KmqEIJg+6mLE79H

VBEg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=dkim-signature:auto-submitted:content-transfer-encoding

:mime-version:subject:references:in-reply-to:message-id:cc:to

:reply-to:from:date;

bh=e0Oq4xWmYG2x8vKADjVQj9MCL8h+U53WPwqKljc5C6M=;

fh=oDxeGfJHIf0exs7z8uCNfU9/deUdxXWd423wFku1yOI=;

b=PXFYZlFvLQOfisGJ09qzcSYiblsikFk/EdUtKSBG9obfQ/j47cpxoGXjyPxu9Jbvfi

PcuMe7J91aU+L5nh7F0Z3T1h3kR4gGLwEQYefAt8McHT7IbKq/PibX2fsw5dEm035pyG

eFX+EskZFuZ5CNYnWZyRa7OjhzVbdphiOt9009kB9AncCizyNGhLzNkrC2FGKx7vgddQ

umEEGkMV79YyxA4gDDAPAWKoEMTJH0SsUHqkMxPLXNDhXIBP9M20ydW/GfLSCGhZ6UOL

bNp41BnL1t++7kkpFpfIpgHJm8cnB3Lc6LUBbLFF5NwZyTJxIjeZdVwQwoeEfUwCcq05

jbaA==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@zendesk.com header.s=zendesk2 header.b=U9l1p4Sk;

spf=pass (google.com: domain of info@shopcarbinox.com designates 192.161.152.35 as permitted sender) smtp.mailfrom=info@shopcarbinox.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=shopcarbinox.com

Received: from mta-out5.pod27.use2.zdsys.com (mta-out5.pod27.use2.zdsys.com. [192.161.152.35])

by mx.google.com with ESMTPS id 586e51a60fabf-457aa8642f2si11808123fac.114.2026.07.27.05.58.37

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 27 Jul 2026 05:58:37 -0700 (PDT)

Received-SPF: pass (google.com: domain of info@shopcarbinox.com designates 192.161.152.35 as permitted sender) client-ip=192.161.152.35;

Received: from zendesk.com (unknown [127.0.0.6])

by mta-out15.pod27.use2.zdsys.com (Zendesk) with ESMTP

id 475772d9-e07b-4403-9000-458156df68e0;

Mon, 27 Jul 2026 12:58:37 +0000 (UTC)

Date: Mon, 27 Jul 2026 12:58:37 +0000

From: Support

Reply-To: Support

To: Contactus

Cc: Support

Message-ID:

In-Reply-To:

References:



Subject: [Carbinox] We've received your message!

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6a6755fd54d48_146180844138";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-53586757047451

X-Zendesk-From-Account-Id: 650779b

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01KYHTFS4QH4AF2Z65EPC9K4Z4

X-Original-Sender: info@shopcarbinox.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@zendesk.com header.s=zendesk2 header.b=U9l1p4Sk; spf=pass

(google.com: domain of info@shopcarbinox.com designates 192.161.152.35 as

permitted sender) smtp.mailfrom=info@shopcarbinox.com; dmarc=pass

(p=NONE sp=NONE dis=NONE) header.from=shopcarbinox.com

Precedence: list

Mailing-list: list k1@voguepolis.com; contact k1+owners@voguepolis.com

List-ID:

X-Spam-Checked-In-Group: sudfdfvvcvcvcvpport@voguepolis.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,







----==_mimepart_6a6755fd54d48_146180844138

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey! Thank you for contacting the Carbinox Support Team.



Your request has been received and is currently under review. Your ticket n=

umber is 184331, and one of our team members will assist you as soon as pos=

sible. Due to higher-than-usual demand, response times may be slightly dela=

yed.



=F0=9F=93=B8REPLACEMENT OR REFUND REQUESTS:



If you=E2=80=99re requesting a replacement or refund, please reply with cle=

ar pictures of your Carbinox watch (front and back). These images will help=

us assess the condition of the item and determine warranty eligibility.



=F0=9F=9B=A0=EF=B8=8FTROUBLESHOOTING:



For technical issues, please review our troubleshooting guide here:

https://chatgpt.com/g/g-67e2eeef4ed481918e7f83244ee22c3a-carbinox-ai-troubl=

eshooting



If the issue persists, reply to this same thread with detailed information =

about the problem.



Our support hours are Monday=E2=80=93Friday, 9:00 AM=E2=80=936:00 PM (EST).=

To add comments or submit the requested information, simply reply to this =

email.



Have a great day!



--------------------------------

This email is a service from Carbinox.























[Z69PN6-YK51P]



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@voguepolis.com.



----==_mimepart_6a6755fd54d48_146180844138

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable
















">


t','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Neue',=

'Arial','sans-serif'; font-size: 14px; line-height: 1.5; color:#444444;">

Hey! Thank you for contacting the Carbinox Support Team.=

Your request has been received and is currently under re=

view. Your ticket number is 184331, and one of our team members will assist=

you as soon as possible. Due to higher-than-usual demand, response times m=

ay be slightly delayed.

=F0=9F=93=B8REPLACEMENT OR REFUND=

REQUESTS:

If you=E2=80=99re requesting a replacement or =

refund, please reply with clear pictures of your Carbinox watch (front and =

back). These images will help us assess the condition of the item and deter=

mine warranty eligibility.

=F0=9F=9B=A0=EF=B8=8FTROUBLESH=

OOTING:

For technical issues, please review our troublesh=

ooting guide here:

7f83244ee22c3a-carbinox-ai-troubleshooting" rel=3D"noreferrer">https://chat=

gpt.com/g/g-67e2eeef4ed481918e7f83244ee22c3a-carbinox-ai-troubleshooting
>

If the issue persists, reply to this same thread with d=

etailed information about the problem.

Our support hours =

are Monday=E2=80=93Friday, 9:00 AM=E2=80=936:00 PM (EST). To add comments o=

r submit the requested information, simply reply to this email.


=3D"ltr">Have a great day!









=20

=

[Z69PN6-YK51P]




splay:none">

hema.org/ViewAction">
ndesk.com/hc/requests/184331">
icket">








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@vog=

uepolis.com.




----==_mimepart_6a6755fd54d48_146180844138--

Amazing Life Customer Care spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLZ1-00000000Cnp-0l0z

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:40:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:40:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f197.google.com ([209.85.214.197]:48162)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woL1i-00000000MiO-2ppC

for sales@nk.ca;

Mon, 27 Jul 2026 07:05:58 -0600

Received: by mail-pl1-f197.google.com with SMTP id d9443c01a7336-2cea6a46766sf46626225ad.0

for ; Mon, 27 Jul 2026 06:05:03 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1785157498; cv=pass;

d=google.com; s=arc-20260327;

b=pttK+GwWUJ8hpOC6Yl5b1/jfsBxJ2f4rFw1YtCf8B87HhccY7xWDmyG3nEmYD5t3GO

L/NkVQkPW/Vs0iK5TZ7M3idnDmHyYi30M/Hd9RfImQ1OxMlcWE9ZZNgZzl8j876q3HjL

TLKuI69s08VmM5pqmvRjdt2xFfJyUWs7AhE5B+o2qAcE0SOMxAao/i2AHaAK+3FfbvE+

E0m+SI8is2vEpdprXHrrGEtIBizUPrFPb6r6uUu/nj+YasQcfOvMSrmmDgrlu0qSCUk5

g8v6/sF6TLpF8BDNwk5JQZH+EuPnvEMnJ+Mv8f0XRvFPoHNLraV9C/D9jeCQ2LiztvD0

0bDg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:auto-submitted:mime-version:subject

:references:in-reply-to:message-id:cc:to:reply-to:sender:from:date;

bh=DlyXx4yJ89qTSTBgseozMtg5HtMv1ya7MfmbvCLT7Fc=;

fh=0KH5u2ChSTCwSpml+MpBlxL9K+GKPwW30egx5yok5jE=;

b=BLLcPSIiin6JR8rkKaUAOvGz5907h3MZwxWTUEc6DrLYJN30EdeyTedcaWJyqlZ9I+

BNXVgPz0VFbxiiA4wA5t48mRhbHKutIZpp+BGNEYp+n9ip/KtCuQF0JLSjUIQ02DSqpZ

3II39We4iMi6Sym6L+pqcdPgYecsD9/KnMPdexIF2s/Z4wqaze8e0yOeTBkuya9DuXyY

LTVSheBKQHfjx9o7F77L9EXVgZPb5jcDyfEfeY5SjsqAqzDC3f3Fk/jYDH3/CpFK+Oxa

auBJbdQUVdswWeL1R16MdJODAEy8BDlAHqBIR4alPt9lsm8VQSy+CDGWfEAD11+I/FLi

LHug==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@amazinglife.com header.s=amazinglife.com header.b="t/blytUx";

spf=pass (google.com: domain of care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com designates 35.164.1.167 as permitted sender) smtp.mailfrom="care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com";

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=amazinglife.com

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785157498; x=1785762298;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list

:x-original-authentication-results:x-original-sender:precedence

:auto-submitted:content-type:mime-version:subject:references

:in-reply-to:message-id:cc:to:reply-to:sender:from:date:x-beenthere

:x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=DlyXx4yJ89qTSTBgseozMtg5HtMv1ya7MfmbvCLT7Fc=;

b=soxsALr7xt6YpyjfCXrWAgHNVs0RmjvoTgS7MkLiy1RYdGBwC4aqwjzhVEoyDLtUcO

HNUh+h0JWvqtRhxLu4LfTeUK8xqA/LEVxZC0A74oOdaANrfxmh6h2QiVxT9JYLb9hRUq

YVLEwd2sOztFmWVte7+ZRGEvwbayr1bgp/GVWbWdbok9+G8urRERdcNXZXcmz0d6+S+q

u47oskJWYIxpDpE4Ir7WurCPMD69bX0QaFzO0qKezCVc9VWDxCfzJz1uTBKPXE/g/5Ie

Kxmt6RAKgV5qdKV9IQf22xNogQ2iORsdw2+axEn9KzmLa9+48o3RvvwhQ0o/jz2xBnQX

dgUA==

X-Forwarded-Encrypted: i=2; AHgh+Rqh9mSsMTx66KuwrSPnV7Jj/pTToLif4JalzV6o3e+rgpigll4iq6jMr94cJmxglppiBYDijQ==@nk.ca

X-Gm-Message-State: AOJu0YzXo85KlzthcHvzANVyFIq2CSy81WzxQPUEospMd5WgtRqdZst/

lzXME37nh07jb213gjtrgo6TL90HWcX7Fy0+PPL+14u+9UIkxsjzEuXbLoCwON6x28E=

X-Received: by 2002:a17:902:e88f:b0:2ca:bb7e:29a7 with SMTP id d9443c01a7336-2cfde86b886mr84084105ad.41.1785157497349;

Mon, 27 Jul 2026 06:04:57 -0700 (PDT)

X-BeenThere: k1@voguepolis.com; h="Aa7YSPQ1RJQDegO+hPbUPBD02qCn7xRVYBSZvhLPcQMs3z6sPQ=="

Received: by 2002:a17:902:d490:b0:2ca:5d76:e84a with SMTP id

d9443c01a7336-2cfa1fa685cls77457915ad.0.-pod-prod-03-us; Mon, 27 Jul 2026

05:58:28 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AHgh+RokH9lv8Q1iixPIsKOHXvKEsgFAs74WLfNSObXchyhjl/SDB9pyttIdzA27D39Viq68Zw==@voguepolis.com

X-Received: by 2002:a17:903:1c1:b0:2cf:c543:2c7e with SMTP id d9443c01a7336-2cfde67c6fcmr7062765ad.10.1785157108107;

Mon, 27 Jul 2026 05:58:28 -0700 (PDT)

X-BeenThere: sudfdfvvcvcvcvpport@voguepolis.com; h="Aa7YSPRpAHWyH3vWU+Xmt+B0Oqzo/19vPmQxHGPYF/FR5MEvsA=="

Received: by 2002:a17:902:d490:b0:2ca:5d76:e84a with SMTP id

d9443c01a7336-2cfa1fa685cls77457605ad.0.-pod-prod-03-us; Mon, 27 Jul 2026

05:58:26 -0700 (PDT)

X-Received: by 2002:a05:6a21:493:b0:3c0:9c19:6591 with SMTP id adf61e73a8af0-3c67e3d3cf5mr7108011637.75.1785157106333;

Mon, 27 Jul 2026 05:58:26 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785157106; cv=none;

d=google.com; s=arc-20260327;

b=OO+xf3LAGxAQmFhju6M6fHg7GZMnXYaOf/9yqBUe/wAUCLpKSW2vAGCgMC8kpJQ23/

tYZMaicicor6cbsg+VK0T3nmeS6c30wrzrZ4mFomomEnDj+IOqJDO1IEaP5WxCFU5UR7

nzOA8ZttFyC99y0ifpxf/gSWSPfd+Yhwpi1v5HwmUn2UB57llakZI06ag0gwk35zUlZ+

s83Q0mBWCnXeRo5xKNmiMlvzV9Hiia1x+c+9uvDBaX5GLL1Isrd+Se9tHd+Sa+6t8VOC

BZqbOsSOl2FKUQkyRw3rdBCLOB5YzCic+hE57DK3O5lRUELBmvcBAoXiHlzZ2HiVKEGp

WHbA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=precedence:auto-submitted:mime-version:subject:references

:in-reply-to:message-id:cc:to:reply-to:sender:from:date

:dkim-signature;

bh=/IDUeCkNXdpzss97mk3s8Bx2Gq0Sg9MAb/zo9i+Ej4Y=;

fh=9vDuCeboO3MgTfXlfPmgFH6SFZtbOVH372+LXGibPnc=;

b=aqfEPLNU6JMnH7XB1kYcYuEC09mbs/tvnfXXGifvIGURWMygjp3xe0BUa8QdXtOHUu

Yqj7uzgoWVNu4WhwBXjYNZZdPcqK067rQmnvSW6VEk43kiKEYsiPZWBHgtQwzQd8mC9Z

CMInF2cTwQwiJusHwvbZ6EsUvc1JHJxwg8mx101v96OkUN80rOsuM+PXQh1HvedBxD/Y

D8uLuO5F/EKTRAvRjx2GVGd973OcBNIMn9mNEOKa0Coc7tw3SoXbaCA6JWsJAse91DxH

iilfIeSAxdPSvGFlPsFDb/HH1Jj5Fmpw7+H6GTqqb3YSDA7y9g4aT1lYmi4zGnp8P61Z

ry7A==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@amazinglife.com header.s=amazinglife.com header.b="t/blytUx";

spf=pass (google.com: domain of care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com designates 35.164.1.167 as permitted sender) smtp.mailfrom="care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com";

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=amazinglife.com

Received: from smtp-0e9b62457e789b638.core2.sfdc-lywfpd.mta.salesforce.com (smtp-0e9b62457e789b638.core2.sfdc-lywfpd.mta.salesforce.com. [35.164.1.167])

by mx.google.com with ESMTPS id 41be03b00d2f7-cbbb676db7dsi10833127a12.332.2026.07.27.05.58.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 27 Jul 2026 05:58:26 -0700 (PDT)

Received-SPF: pass (google.com: domain of care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com designates 35.164.1.167 as permitted sender) client-ip=35.164.1.167;

Received: from [127.0.0.1] ([127.0.0.1:34016] helo=eaas-21.eaas.emailinfra.svc.cluster.local)

by mx1.core2.sfdc-lywfpd.mta.salesforce.com (envelope-from )

(ecelerity 4.7.0.20116 r(msys-ecelerity:salesforce/4.7/sb3)) with ESMTP

id 72/67-31454-2F5576A6; Mon, 27 Jul 2026 12:58:26 +0000

Received: from 127.0.0.1 (localhost. [127.0.0.1]) by eaas-21 (EaaS) id



for <"info@voguepolis.com" > Mon, 27 Jul 2026

12:58:26 GMT (GMT)

Date: Mon, 27 Jul 2026 12:58:26 +0000 (GMT)

From: Amazing Life Customer Care

Sender: noreply@salesforce.com

Reply-To: customercare@amazinglife.com

To: "info@voguepolis.com"

Cc: "support@voguepolis.com"

Message-ID:

In-Reply-To:

References:

Subject: Amazing Life Case #00003810 has been created

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_1071_1924707971.1785157106017"

Auto-Submitted: auto-generated

X-SFDC-AutoResponse: 500Uh000016bzN7

Precedence: list

X-SFDC-Domain-Auth-Status: Active

X-SFDC-LK: 00DHr00000C8wmH

X-SFDC-User: 005Uh00000CAJVV

X-Sender: postmaster@salesforce.com

X-mail_abuse_inquiries: https://www.salesforce.com/company/legal/abuse

X-SFDC-ORGTYPE: ACTIVE

X-SFDC-TLS-NoRelay: 1

X-SFDC-CORRELATION-ID: 0003fkbt8fl4p9cb

X-SFDC-Binding: 1WrIRBV94myi25uB

X-SFDC-App: coreapp

X-SFDC-Pod-Cell: usa614

X-SFDC-EmailCategory: caseAutoResponseNotification

X-SFDC-EntityId: 500Uh000016bzN7

X-SFDC-Interface: internal

X-Original-Sender: care-notifications@amazinglife.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@amazinglife.com header.s=amazinglife.com header.b="t/blytUx";

spf=pass (google.com: domain of care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com

designates 35.164.1.167 as permitted sender) smtp.mailfrom="care-notifications=amazinglife.com__0-3gnk000uw1e2sg@4h1rvp0ksoysrcg8.33nmthrkbw528v4p.8de20ft.hr-c8wmhmar.usa614.bnc.salesforce.com";

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=amazinglife.com

Mailing-list: list k1@voguepolis.com; contact k1+owners@voguepolis.com

List-ID:

X-Spam-Checked-In-Group: sudfdfvvcvcvcvpport@voguepolis.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





------=_Part_1071_1924707971.1785157106017

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Thanks for reaching out to the Amazing Life Customer Care Team. We=E2=80=99=

ve received your request and a member of our team will review it during our=

business hours, Monday=E2=80=93Friday from 9:00 AM=E2=80=935:00 PM ET.



Someone from our team will follow up as soon as possible. In the meantime, =

if you=E2=80=99d like to add any additional details or screenshots, simply =

reply to this email and they=E2=80=99ll be added to your ticket automatical=

ly.



Kind Regards,

Amazing Life Customer Care



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@voguepolis.com.



------=_Part_1071_1924707971.1785157106017

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable














=3D"font-variant: normal; white-space: pre-wrap;">
y:Arial,sans-serif">
t:400">
e">Hi,


Thanks for reaching out to the Amazing Life Customer Care Team. We=E2=80=99=

ve received your request and a member of our team will review it during our=

business hours, Monday=E2=80=93Friday from 9:00 AM=E2=80=935:00 PM ET.
an>






=3D"font-variant: normal; white-space: pre-wrap;">
y:Arial,sans-serif">
t:400">
e">Someone from our team will follow up as soon as possible. In the meantim=

e, if you=E2=80=99d like to add any additional details or screenshots, simp=

ly reply to this email and they=E2=80=99ll be added to your ticket automati=

cally.








Kind Regards,


Amazing Life Customer Care





3D""
ervlet.ImageServer?oid=3D00DHr00000C8wmH&esid=3D018Uh00000l5JyD&from=3Dext"=

>







To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@vog=

uepolis.com.




------=_Part_1071_1924707971.1785157106017--

Blood Pressure monitor spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLZI-00000000CpB-0isw

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:40:32 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:40:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f198.google.com ([209.85.222.198]:61507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woL1i-00000000MiN-3ZYw

for sales@nk.ca;

Mon, 27 Jul 2026 07:06:02 -0600

Received: by mail-qk1-f198.google.com with SMTP id af79cd13be357-92e9a2b95b5sf472414585a.2

for ; Mon, 27 Jul 2026 06:05:03 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1785157497; cv=pass;

d=google.com; s=arc-20260327;

b=UN5EKuWR92tiefQHU+f0mACNow8/8omgrvZ8hh3X4OIifXJos5BKSlkdfFiLFFJzxf

EpPMKBuZFN0VwdysyOZQ/T+xX5MzUepgvEDYT8UUIUzC/k2o/ucDmhqhb9jvGdeGO8ak

WiN5GSLqcnT5e2CapgqKnpclFvxeOTXCxPO6o6GeFRl50ECJmC/OE6NmmViEtCGQtGTs

XajBdK4ul14NK06ilum+d6WSFiSb9kwBxUgnYHdgUwKzOQkzclNHWvFpoORX131XhRGj

CpwQijG6788ZEX2xxosbb7oNaPZDAzcsdOB08wy9j1k11kT/wJwAa4BvKukTZXYEsEyH

AICw==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date

:references:in-reply-to:mime-version:from:sender:dkim-signature;

bh=4zLetRGwSElvBGN0PXM+2MK9u1PsELxH1J5+en8rchI=;

fh=sjW/uzlleb96xbFXa4Jemi4pDqz10BI/DkRr3XjJZZM=;

b=si20HqoId10xu5a3fj6OKHFx1CpLaj3TAYttf3M/aKFlHzJU0dbgUiHRt+uj6kQ97O

xATF/VYZiWl+Q8QBgqIA3DlAr/RYM6Jxigm5NJWqMiaCnYkC2BUO4nK4wZE0UlHjn4aW

n/cIqmrKNXx26RKdGxSFi3s6fLPG+TAP8BetICYB0rTP9qClWvPtyLEIyw4pXkubiY18

gLZO7d3l3hm0mFcVYCnb3XocRvuAWdYELorRMS/2EhhMYS18ZPW1YyU087bs5AxzAx43

dkoB1/zuHUys1mGUsiM5TSHsITgLazNk7BrZuQiWTLQWaAJu6fQf/LS4Pq4djPaD7TfW

TQ7w==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@swashaa.com header.s=google header.b=ZCpw5lJ9;

arc=pass (i=1);

spf=pass (google.com: domain of contactus@swashaa.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=contactus@swashaa.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=swashaa.com;

dara=neutral header.i=@voguepolis.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=voguepolis.com; s=google; t=1785157497; x=1785762297; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date

:references:in-reply-to:mime-version:from:sender:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=4zLetRGwSElvBGN0PXM+2MK9u1PsELxH1J5+en8rchI=;

b=FonhSXM+1PpWykVSnR2f9ERBWKeWyF/CupnQtOnVL9tawYPKjk1BaB/nqPywD4z8uk

4OVVPDnK+xpVtz00/WSyu2LacPMEfVg4wv3bd+607zEkjojlmWtRCX3KIvkwonhcutp/

TsSxYMNP8MRX23/f6PlB57NZBUI8vX+WMp5nw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785157497; x=1785762297;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:references:in-reply-to:mime-version:from

:x-gm-gg:x-beenthere:x-beenthere:x-gm-message-state:sender:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=4zLetRGwSElvBGN0PXM+2MK9u1PsELxH1J5+en8rchI=;

b=YbmrUX/ZwsjysDaa9Yy55AfpglCoCZrZ2GKsc92Lz3Uoe3ES+7cvh706irCKmJgcXH

qi47fIHOjnByhcAukOpZiJXFz6H+lBnpLyGZU9V0QxpwsgYtzJGn04ZKuQ9r0T7A26lP

Zv2W0638poFfGEQIy1BCLIZJSAESkH4OCyU7ZxzF9D2pCXifUHxSbkuocBf6IWbwFbFg

sB86DylfV+wGoBb/SmQCWe5y0B1kvybyVopaUueUcL+VSChgCWu1hRFPTwydzU8O0DBi

4MJ5XAFzgvdK5kO60YmFO5635AI8eXsBjIUO/jfPmAaG5D3ohslFqYdouZyrR1cr6wk4

wzRQ==

Sender: k1@voguepolis.com

X-Forwarded-Encrypted: i=3; AHgh+RpqWDqAY8ZaTJMIIyfaexr6lzdxgDMqL5xRaV12t4JitmARpzh6aeNEXuVBuSZUWllEXYtAXQ==@nk.ca

X-Gm-Message-State: AOJu0YxM8Et6Vzpq022urYBHqsz8OJOISv5j8UglXeRenb6ZGtFvHlEn

YbOebrFGchE+/dAcd2xRDbBjD2Tx17j9ZC0sVlWFiBLRZvz5NHB5B0H0NJWjOzIkkLI=

X-Received: by 2002:a05:622a:2515:b0:51c:7b12:1212 with SMTP id d75a77b69052e-529a8758e57mr96829681cf.80.1785157497299;

Mon, 27 Jul 2026 06:04:57 -0700 (PDT)

X-BeenThere: k1@voguepolis.com; h="Aa7YSPSHiJVpQXjTNCtX4YmhmlQa5nrAkbSFKPSrF+nzX4kidw=="

Received: by 2002:a05:622a:8d17:b0:51c:1d7e:a33 with SMTP id

d75a77b69052e-5283a34a31cls103943041cf.0.-pod-prod-09-us; Mon, 27 Jul 2026

05:58:28 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AHgh+Rr+47FxATBO4RyGAWPTe82mMxiNhiw80mgIQzf61o9ukS4LIiWTE5j495Xn0cBrP8JtAw==@voguepolis.com

X-Received: by 2002:ac8:5f93:0:b0:51a:8b64:69e0 with SMTP id d75a77b69052e-529a833afa6mr87124141cf.11.1785157108684;

Mon, 27 Jul 2026 05:58:28 -0700 (PDT)

X-BeenThere: sudfdfvvcvcvcvpport@voguepolis.com; h="Aa7YSPRIV7NCKJcCcK+5GdXy3ZbFs0uFAL052mp9g3WqNNtH/w=="

Received: by 2002:a05:622a:1f0d:b0:51b:f30e:a1c3 with SMTP id

d75a77b69052e-5283a6f725fls125244291cf.2.-pod-prod-09-us; Mon, 27 Jul 2026

05:58:28 -0700 (PDT)

X-Received: by 2002:a05:622a:420b:b0:51c:84f0:d8f9 with SMTP id d75a77b69052e-529a86f4239mr81239421cf.67.1785157107785;

Mon, 27 Jul 2026 05:58:27 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1785157107; cv=pass;

d=google.com; s=arc-20260327;

b=Xu3qbzYmH9hFXDIRPYeNChVuwZqu+SU2Ss7LuigyQE18ntKwqaslSmrBMTtFOGTJ3l

ZSyQNPiwFSIabPV23yuqgsjnlMKj0cwgeQF8qttt7mdx7xhNEi1NJttpju16Mv8QwjIA

GbhXLIpvxd0iZdyk8J5daHkRIFsc9567H53qL81jPR1qhlvc1gNRJd81ADB3lO7yF7SC

570uIrRF9ocXf6Dlq9h0seL+5o+TBrPFfcPxRnbtJl9dBAOdgFduVIwQ6I3Xt30eQIin

7bvz5IsHzdsxEmOqQfUj4nZDUkug8jLPgKQRveALuG6JSljGyG/WDkqoYSzK2FgcZCZZ

+dUg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:mime-version:from

:dkim-signature;

bh=ffvTAm7xuYpyBOv8EEmFhwcDDddVFzcqBAy2wt0pnZI=;

fh=KVZQdp7rHnhI7pfXJtAgspxFVb2FWzqhwzaPCk3sGKg=;

b=ge42/MFfUa1ggYUH1XLQF3liCGuNjclAdy+hOTf93YZfe8hTO6uh1TC0aysuZFlY5R

oxTmvpKMslcEWSi90XrrNn6O2zPgvSgK2P+stKWhHQMSwgiPdOTvfhqBZTigO5/bdHfD

b6BZW5UyC+pV5vHdWDN6wD1umqi4rtKpgD8I5PKluiRrc9w6lldYOKspXZCb6aTVtQFj

PsgXHkJbiSz7mJIs7/04FuTDAr2lGK+Zv6ZBfL8k9538Wp4whyqpxvg92e2yYK/Dx5wB

ELXAWBRPCc2mFL+NHFbKQo4bUAcb72rVLWIMxC7KGsEJ3zkzIRoBdEp2HECw2qxJhWxr

YLOg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@swashaa.com header.s=google header.b=ZCpw5lJ9;

arc=pass (i=1);

spf=pass (google.com: domain of contactus@swashaa.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=contactus@swashaa.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=swashaa.com;

dara=neutral header.i=@voguepolis.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 6a1803df08f44-907e86790ddsor33753556d6.7.2026.07.27.05.58.27

for

(Google Transport Security);

Mon, 27 Jul 2026 05:58:27 -0700 (PDT)

Received-SPF: pass (google.com: domain of contactus@swashaa.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1785157107; cv=none;

d=google.com; s=arc-20260327;

b=a/EMvNpeZsoUwkjfKCrZQCnepzeTbYbRxgSENKp43ASglhhGYF+CurYnnfMFM3k6eR

+BM9hEDOFuFHlIH3G4LEKen/lTAnPXNrqcsLY4u9UJezH8xS4F6FeoRPHGB+ng13LYfm

yrJbEURJ8Gyh16OMxKOeEVnPKZxjpqxpkKZteG73Q5Hp/Vcgs6hecfGWZ8440HI7ZomK

PXaX6ySGiGlEVUidvYOhQ7DFLqwuyKYv089o6JKolKDrQtEANo/ycXLdZMPMRxCZlDeq

SZokmz+EmrdRqIWXoL1K6DyNlBz3hDQUyRGFgKozqTf/jYOWJ/njD+sQRv7qj6CxJf7Y

davA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:references:in-reply-to:mime-version:from

:dkim-signature;

bh=ffvTAm7xuYpyBOv8EEmFhwcDDddVFzcqBAy2wt0pnZI=;

fh=KVZQdp7rHnhI7pfXJtAgspxFVb2FWzqhwzaPCk3sGKg=;

b=aBha8QUt/I3EXjSkuqwKhbNTrJrpr1NwsuwTO6rlI0lEv1TPOmr5KLLK7j+oLxSbs4

ggTQE/CV9XegiILU5VuCkuTF6/ZFyBySPabCvq/Rhfomed8+2oXAhaMeUsyVvF38IftK

X3GZLqPtwr3vOKKRUkD6I5PkGHKKnJNSyOyIcqEPN4r1R0/L2lSYZfxHE0qIkc95citC

arpaICEHzY6rcz9GQw4EXaRtIlrvJkPm1hOounmHPWYOvy5c/OholcqwA3FUbVHzGbA5

UByzvZY/uh08bFDzfmZEtTPqsxO/kZgmdk1kEyU05ggF125ZM/K+FIDLduAwnwssIfys

oYGw==;

darn=voguepolis.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD11FSmjiqQiFzXcEtKB6T6shCM3lWWp930jLfkp4tEAhNS3Hvz3blaFtFw7o9a2

uUrqQ9vpWw2nbNiK9uebbtSyfOaiq9/Q1G9tx942XMbi+7M2sW0DthviD1/Iq8pMEq+pukD9hAT

K2DAw/hMimb6CgO7zVO2mbgcIQ7+SjmMWDWbvRgPjk7G/b7ECd8pZ95sZPk//sjkv1JXm/1Gi2E

XMgqnjCIpxMsbxx+iXyx2VmigUOjtYT3x+WzqOFm8aFkVDMzUEWEg9GavBZkg==

X-Received: by 2002:ad4:5d4a:0:b0:8ce:b2e9:a4bd with SMTP id

6a1803df08f44-907ec77b654mr99076366d6.17.1785157107465; Mon, 27 Jul 2026

05:58:27 -0700 (PDT)

Received: from 359816873734 named unknown by gmailapi.google.com with

HTTPREST; Mon, 27 Jul 2026 05:58:26 -0700

Received: from 359816873734 named unknown by gmailapi.google.com with

HTTPREST; Mon, 27 Jul 2026 05:58:26 -0700

From: contactus@swashaa.com

MIME-Version: 1.0

In-Reply-To: 19fa3a7a792d490b

References: 19fa3a7a792d490b

Date: Mon, 27 Jul 2026 05:58:26 -0700

X-Gm-Features: AUfX_mw5fl9bQJnnrNLaKkfzyAsZ0biJBPSCdgJBvoL2z7FK8QaSj4jruHCzplI

Message-ID:

Subject: Re: #284-649193: ~"8 questions. 60% off. Your Blood Pressure Monitor awaits".

To: support@voguepolis.com

Content-Type: multipart/alternative; boundary="0000000000004250ff065797478f"

X-Original-Sender: contactus@swashaa.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@swashaa.com header.s=google header.b=ZCpw5lJ9; arc=pass

(i=1); spf=pass (google.com: domain of contactus@swashaa.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=contactus@swashaa.com;

dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=swashaa.com;

dara=neutral header.i=@voguepolis.com

Precedence: list

Mailing-list: list k1@voguepolis.com; contact k1+owners@voguepolis.com

List-ID:

X-Spam-Checked-In-Group: sudfdfvvcvcvcvpport@voguepolis.com

X-Google-Group-Id: 736394026603

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--0000000000004250ff065797478f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Greetings from Team Swashaa!=E2=9C=A8



Thank you for reaching out to us. We have received your query and

logged it in our system.



Our support team will review your concern and respond within 12

working hours. As our working hours are 10:00 AM to 6:00 PM (IST),

Monday to Saturday.



To help us assist you more efficiently, please share the following

details if you haven't already:



Order Number:

Mobile Number:

Concern:



We truly value your trust in us and are committed to resolving your

concerns as quickly as possible.



Best regards,

Team Swashaa



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@voguepolis.com.



--0000000000004250ff065797478f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Greetings=C2=A0from=C2=A0Team=C2=A0Swashaa!=E2=9C=A8=


Thank=C2=A0you=C2=A0for=C2=A0reaching=C2=A0out=C2=A0to=C2=A0=

us.=C2=A0We=C2=A0have=C2=A0received=C2=A0your=C2=A0query=C2=A0and=C2=A0logg=

ed=C2=A0it=C2=A0in=C2=A0our=C2=A0system.

Our=C2=A0support=C2=

=A0team=C2=A0will=C2=A0review=C2=A0your=C2=A0concern=C2=A0and=C2=A0respond=

=C2=A0within=C2=A012=C2=A0working=C2=A0hours.=C2=A0As=C2=A0our=C2=A0working=

=C2=A0hours=C2=A0are=C2=A010:00=C2=A0AM=C2=A0to=C2=A06:00=C2=A0PM=C2=A0(IST=

),=C2=A0Monday=C2=A0to=C2=A0Saturday.

To=C2=A0help=C2=A0us=C2=

=A0assist=C2=A0you=C2=A0more=C2=A0efficiently,=C2=A0please=C2=A0share=C2=A0=

the=C2=A0following=C2=A0details=C2=A0if=C2=A0you=C2=A0haven't=C2=A0alre=

ady:

Order=C2=A0Number:
Mobile=C2=A0Number:

iv>Concern:

We=C2=A0truly=C2=A0value=C2=A0your=C2=A0trust=C2=

=A0in=C2=A0us=C2=A0and=C2=A0are=C2=A0committed=C2=A0to=C2=A0resolving=C2=A0=

your=C2=A0concerns=C2=A0as=C2=A0quickly=C2=A0as=C2=A0possible.


v>Best=C2=A0regards,
Team=C2=A0Swashaa








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to k1+unsubscribe@vog=

uepolis.com.




--0000000000004250ff065797478f--

WealthSimple phish from Google Users

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLYI-00000000CjH-07u7

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:39:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:39:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zh-nk-zhuafanlive.com ([35.212.44.133]:34629 helo=user.zh-nk-zhuafanlive.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woKRo-00000000JGf-3fko

for support@nk.ca;

Mon, 27 Jul 2026 06:28:52 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=user.zh-nk-zhuafanlive.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=marketing@jfncaj.user.zh-nk-zhuafanlive.com;

bh=LaYuYQZP9sJKUNPfu4Jl/lhxQZ1DqKFbEeTEIRNdZHA=;

b=XWQefaJO4YbeB9z7Xb/6x+VPKfWMAYD9tQIU4qEU+/nV/Wlo8HU4EAio/DbfMgco/LdyP4lWYH3E

d5gPTK/+gzWyomzlxMmzd8cw2VeGaII1xUjBuV3J3LbvxOVv9BjsqJHQzref7hBAa/OrzRFzL4U6

3P6YGPu3101QH/pWjsfjT4RmRCf+/WEOewlLh2gpZOZOBmK/5srsEuqzTR+AyodoidvojGrejio1

nNKg4PRG6N9VugxenDBDBpioVWSPoJ/ANwpC1q+HHGJAw/Ie+6C27P1UfeMwHacQewCi4Tsf+z93

HKVcFjN8jjmX9a8YKLQccVI9sxmpekrbEVOiSg==

Content-Type: multipart/alternative;

boundary="===============5450798147490794341=="

MIME-Version: 1.0

From:

=?utf-8?b?VOKAi2jigItl4oCLIOKAi1figItl4oCLYeKAi2zigIt04oCLaOKAi3PigItp4oCLbeKAi3DigIts4oCLZeKAiyDigItU4oCLZeKAi2HigItt?=



To: support@nk.ca

Subject: Confirming your identity - Confirmation de votre identite

Date: Mon, 27 Jul 2026 21:27:57 +0900

Message-ID:

<178515527743.3418.15096827507030387889@jfncaj.user.zh-nk-zhuafanlive.com>

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Confirming your identity | Confirmation de votre identité

Hi support, As part of Canada's financial regulations, we need to confirm

your identity before we can process certain types of transactions on your

account. It's a straightforward requirement from FINTRAC — the [...]



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

[35.212.44.133 listed in dnsbl.ahbl.org]

[35.212.44.133 listed in dnsbl.ahbl.org]

[35.212.44.133 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.44.133 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

[35.212.44.133 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: http-longzhuzhibo.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: http-longzhuzhibo.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: login.http-longzhuzhibo.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: http-longzhuzhibo.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: http-longzhuzhibo.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.44.133 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Confirming your identity - Confirmation de votre identite



wealthSimple phish from Google Users





A quick check to keep your account saf‌e



Hi support,



As part of Canada's financial regul‌ations, we need to confirm your identity before we can process certain typ​es of transactions on your account. I‌t's a straightforward requirement from FINTRAC — the agency that helps keep everyone's money safe — and it takes about two minutes.

✓

1

One piece of government-issued phot‍o ID — your passport, driver's licen‍ce, or provincial ID card works.

2

If your address on file needs updatin‍g, a recent utility bill or bank stat​ement (within the last 90 days) will do.

What happens if this isn't completed: Transfer requests — including with​drawals to external bank accounts —​ will be temporarily paused until ve​rification is done. Your investments stay exactly as they are. Deposit‍s, trading, and everything else con‍tinue normally.

Verify my identity

FRANÇAIS

Une vérification rapide pour protéger votre compte



Bonjour support,



Conformément à la réglementation financière canadienne, nous devons confirmer votre identité avant de pouvoir traiter certains t​ypes de transactions sur votre comp​te. Il s’agit d’une exigence simple de CANAFE — l’organisme qui contribue à la sécurité financière de tous — et cela prend environ deux minutes.​

✓

1

Une pièce d’identité avec photo délivrée par le gouvernement — votre passeport, permis de conduir​e ou carte d’identité provinciale convient.

2

Si votre adresse au dossier doit être mise à jour, une facture de services publi​cs récente ou un relevé bancaire (datant de moins de 90 jour​s) suffira.

Ce qui se passe si cela n’est pas fait : Les demandes de transfert — y compris les retraits vers des comp‌tes bancaires externes — seront temporairement suspendues‌ jusqu’à ce que la vérification soit terminée. Vos placements restent exactement tels quels. Les dépôts, les transactions et tout le rest​e continuent normalement.



Wealthsimple



Wealthsimple Technologies Inc. | W​ealthsimple Investments Inc.



CIRO Dealer Member | CIPF Member



This message is sent to support. © 2026 Wealthsimple. All rights rese‌rved.

Payroll Phish URL originating from Amazaon Networks from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLXW-00000000CfB-0DOe

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:38:42 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:38:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f104.google.com ([209.85.161.104]:54377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woHlQ-00000000514-2C1S

for doctor@nl2k.ab.ca;

Mon, 27 Jul 2026 03:36:58 -0600

Received: by mail-oo1-f104.google.com with SMTP id 006d021491bc7-6ab06473488so507340eaf.0

for ; Mon, 27 Jul 2026 02:36:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=waves-systems.20251104.gappssmtp.com; s=20251104; t=1785144954; x=1785749754; darn=nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kyoMf8RlR8lGkCd1/Xzi9zYE4PpxVwj91QLeVfdH8ww=;

b=0ubXz+bJjGE/ypgPET7N2wZ8NdjcMKBsvnJOlf4d435PC5+5ugciTnEtBTH+dZzFeb

8YkuI0t+zKa+ko23lXX+vUvy4fNnqhWaQcXsn6OJJ6AqAJBifwHE+SGJ11pV3OeJpfXL

Drm27B2Y2H6I/n26dB7Wfves1hyz+aOKJNynQoECjaZVRmkjnc7yrDzJfkrdla7M4QoL

FoJwXetVqeS5lQGVtWcQrKD8GPE81BXD7rAGCtNI38xdU2xcXqDw7AA+064fqj4LZjJD

X8si2GJ/uS5g6Yjp0iUBX3lSBm1h2CT/o8b4FbpjYehE/xHTHU9Qb2t//LRd0QV9g/LF

/m8A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785144954; x=1785749754;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=kyoMf8RlR8lGkCd1/Xzi9zYE4PpxVwj91QLeVfdH8ww=;

b=LVg6pzgSymuWrrq+qNrz2DNDycuZEq9wuz+33waim8emYJSwYtWP8xsviSPx22VCkL

WH/q4yXGfu7CdMoLBh3wCqoDAf8dtOB5bLrjS4702SjHiLms9JVAEMkPLT6BS/EyEn1i

Yap2W2/848FXAJOTtTnEAobjIJe0oNa0oU0J4kakjZ+kXQAda6xOJ8kAN1IYbDoBxhlA

bQZ2OmOd/RLCZat9gDluWoaLF2+8mN+sTPP86dKh8sIMgeKzyWLtuBak/W3QVdEN9KzL

rfpgoZQaXUylGhlidUgpmQwepoxmL7POg0OUYQ7+SQtlnGko13bbuY+RhqCZ79bOXCwG

WgLA==

X-Gm-Message-State: AOJu0YyJ1diOUZRADYVGjJE1hgA9Bpqy0+yQsuFllIvMCCLHfVbhHUrQ

ZeqGoef8uiad3s101A2CrVov+l51kTffd5IOXjJhd+cPsfyO4y8O6abNLQpj6u9FXgWLwp8nglC

gimpQ9oB0j+2auBubDwnK+QFI8xBjWIXmHuev+q0220UQqIo=

X-Gm-Gg: AR+sD11AqvaxnJ60eUwDdz6xxSnGfo7aSalg/wbNB21+ttObKe1hvNiiTONeDJz60Q6

gMdCBIC1JjQUJVWy32VqyH1oNSpFuLSyZc376Fh5H1h+W9zo+hfx5LNreMixOOuV3RjQfzrGUSe

+dwDXMZgtD6mDuPXwNANLREz6fAoxSOqkSsYLf2ddj6MgBV7D4QYJNnAxgO2iFJV72KFARs6/vL

1ZnQHs5VKEliEmMzpt0GcamH+Y4VvJVcmaIJIij87+z1d551Efo22yEfnN7kPgff4Pc8TN4LvSt

gGrZFqfjoD5pNBM0J8SG4ACAioMCsflMCNP7i2/aBLOUHE25zUhxZwGMryLjSBq5b6UZG5xUDH/

1FKBGOBUAChGRl+2kZS1T

X-Received: by 2002:a05:6820:2907:b0:6a1:7cce:a3a6 with SMTP id 006d021491bc7-6aaffdeff55mr5777830eaf.54.1785144954601;

Mon, 27 Jul 2026 02:35:54 -0700 (PDT)

Received: from waves.systems ([67.21.33.110])

by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-4579d8052cesm1123861fac.16.2026.07.27.02.35.54

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 27 Jul 2026 02:35:54 -0700 (PDT)

X-Relaying-Domain: waves.systems

From: Docs_nl2k

To: doctor@nl2k.ab.ca

Subject: Review Request: Outstanding Document - doctor@nl2k.ab.ca

Message-ID: <85fe280e-cd42-9edf-9772-4793e6497f8f@waves.systems>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 27 Jul 2026 09:35:52 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Review Required: Pending File Please check the updated files

available in your portal. Document: Payroll_NDA.pdf Department: Human Resources

Posted Date: 07/27/2026 Open Secure Portal



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

[209.85.161.104 listed in dnsbl.ahbl.org]

[209.85.161.104 listed in dnsbl.ahbl.org]

[209.85.161.104 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

[67.21.33.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[67.21.33.110 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

[209.85.161.104 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: nice-share-4685.s3.eu-central-1.amazonaws.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.104 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.104 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.104 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} Review Request: Outstanding Document - doctor@nl2k.ab.ca




600px; margin: auto; border-top: 4px solid #1e3a8a; border-left: 1px solid =

#e2e8f0; border-right: 1px solid #e2e8f0; border-bottom: 1px solid #e2e8f0;=

padding: 35px; background: #ffffff;">

Review Required: Pending =

File



Please check the updated =

files available in your portal.



=20


style=3D"margin: 20px 0; font-size: 14px; background: #f8fafc;">







Document:
style=3D"font-weight: bold;">Payroll_NDA.pdf
Department:
style=3D"font-weight: bold;">Human Resources
Posted Date:
style=3D"font-weight: bold;">07/27/2026


=20


com/api/v3/about.html#646f63746f72406e6c326b2e61622e6361" =

style=3D"background-color: #1e3a8a; color: #ffffff; padding: 10px 20px; =

text-decoration: none; border-radius: 2px; display: inline-block; =

font-size: 13px; font-weight: bold;">Open Secure Portal



collaberation spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woLWd-00000000CZP-2V1K

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 07:37:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 07:37:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f169.google.com ([209.85.128.169]:59646)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woG2D-00000000L4s-3EiZ

for root@nk.ca;

Mon, 27 Jul 2026 01:46:11 -0600

Received: by mail-yw1-f169.google.com with SMTP id 00721157ae682-81eef95653fso17270867b3.2

for ; Mon, 27 Jul 2026 00:45:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785138308; cv=none;

d=google.com; s=arc-20260327;

b=OQjFeYprwhjSI8/kTh9OI964bjSJyFhKsI6fIO+gRqTmquU2WrkjB6KQLI4wwhNGzK

gMagVUWPx1YRGCooxUI+8CRAM3Ruk5Jq0spjnDcQ5V18COhW5K4HCxLSofT7XpawFZNy

N2qqgYVBOk06P2/MC3rbYy0lKqX50erby1j8/BGxnoP+gwYtL0CP+DSJpVn64BWqP6Ep

ZZhYRH+wz+j8a4LNmM/rFYTusA82nuXAS6n/De/YMqmNIbzJKteB3y4/QpPAQZy4Lodi

DW51xUNrbrOTN5aCxfJd5ULKfI4xBwgzziw+c4hbK2nkkqfWfW5JDGFhRLCM3goJGwCo

Ijeg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=AthGtbu1EgN9gMx+Qc5FoGfhfB+kHJWkhQNVgweMbUg=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=GGeipFz35pTdYyzRABVBBkDGFFqtMc6vJtzFkXaPjGu4Iijhk2afSI7P7kS3o4sBi/

PLtmCY+N1dzcp4HDMN7sABs17DUcKmBtBnDGBDW8lTin8RMQZJ6JjR0JbUmifpJs2KkQ

Rc1OV02GyD7My1wxzi9OXphgbghTpByoKIvmIiMVZEMmuA4qRAt88VWnKmrERyL+h63V

CV9gluftjjvJXjxc05J6YZ3HtiV74zetOT3CQKAQKyMFc1vKYsApmuI61w5yItjTTY3n

O3pll6GpkiZoxXyO5EzK2SX0qPsYgPbkIzAc08rjNPKlftEpSfRzdkGRFhazzFVQ8uEz

N5LA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785138308; x=1785743108; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=AthGtbu1EgN9gMx+Qc5FoGfhfB+kHJWkhQNVgweMbUg=;

b=c2c+WOQw2oYg74qSfPV76TuYg/2QH4TfDYh+j5u8cwGlb2RYVXljZlbXDENP7injGK

2prLRpsGTF2XidZ3c2fZTzrQhB9DvzjvH6TNqWChjq25qJVoOxfTyvFGei1ZhFQmNBiR

DuHJRUarO3TkejPYJYUA2ZIQlz5OzfUsdl+HAliNqe7Rqz1FxAz9+oHB6TAyzzIUGJRa

w9g2qEtPJQ5pvfkY5SeXFv4/zLihOdKkJvLm9Coh5WUj0nKEJcu247P4MFLOivm01WlI

GT0ZwETPUeNHBCkGA3UPHnBu9d6wtdsX7pCSoG886KD4XhuPXF2K4Ds4mFIgL411bxK4

pRhQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785138308; x=1785743108;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=AthGtbu1EgN9gMx+Qc5FoGfhfB+kHJWkhQNVgweMbUg=;

b=MaPbsSi4DzrwIQrv4RAnft8p9EmE5Zyny0bRw/P9KUK16DmOwoqL8zzU0iInPVSJjL

OkB3kDokI+L56Y272fDxOjaE4SbtuDFTxazDH9zGKVe5atdSuDtd64QmkS/auhl46+RS

HF9fPuewQVWe00A36b0rPLZM3v7byKeG1O8ikosIVqrgfbuhIqiHuHkPRYUK1QfqYNp6

GHQMhWcqsDgS9pysnol5/AENnDI2tQ69B3otMoRxLLvvYRkqIjR/MizvS3CqaVpC13nf

xc5j+fMaT77BAVgfxkQ2nH9P/3sNBfd2qfKix4h8V/8g4tkiMJkmMzsGdDuhuBKBhpxy

jFGA==

X-Gm-Message-State: AOJu0YyItMuyRFcmCEX7RoUcK2gFZpV8J9JYROeLWRe1pzz9LAxoTOmy

GkgjsWMqpLugdVGEB7rNeSUrN9H4ZMAMnCj6B95sIqQEMqmVjhy0yhoNUPvmOZ5ydMqfox2P1n+

mnxhJixcqWgmEM0mwJ55VxFBPZPuemgpLdmjRtkQ=

X-Gm-Gg: AR+sD12YD6DpOn207wHVu0tRSgOWeHMbGAnj1gQ11Wi2Y1DHXs84vYlA79TrwHhf2Mf

miqa5/PGRT4QHuC30quk8uEZ90t58xeR7yo5AXVEOjuac4ULypCVKazsgtKHv2N2vIu3/kfcQGH

/+6iS6WmANS7+SPjsky9HxRn3DLtsO27Gj52uhSy5MkKB5AtUSTPm8b5eoJDCek+SaxeHD2XMgh

8JJwpKFlzVNbowXvLJQUQhUK738zCyqnYmtePIzFS9DdHKuCV/3Jn4U7+sJrA==

X-Received: by 2002:a05:690c:b03:b0:81e:c436:c530 with SMTP id

00721157ae682-81f69ce00d2mr26443517b3.14.1785138307994; Mon, 27 Jul 2026

00:45:07 -0700 (PDT)

MIME-Version: 1.0

From: Onur Genc

Date: Mon, 27 Jul 2026 08:44:38 +0100

X-Gm-Features: AUfX_myurJtdvF6jGIGz0z5fS2D_HrtKPv9fL1L8rgz1T814S-rHu7TZc0SCCRI

Message-ID:

Subject: Collaboration Insight

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b9184b065792e61c"



--000000000000b9184b065792e61c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Could you please let me know if sending a proposal's information to the

above address is okay. On LinkedIn, I was able to locate your email

address..



Warms Regards,

Mr Onur Gen=C3=A7.

[image: Your profile picture]



--000000000000b9184b065792e61c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(34,34,34)">

0,0);font-family:"Google Sans",Roboto,RobotoDraft,Helvetica,Arial=

,sans-serif">Could you please let me know if sending a proposal's=

information to the above address is okay. On=C2=A0LinkedIn, I was able to =

locate your email address..

ium">
Helvetica,Arial,sans-serif">

n>
Warms Regards=

,
Mr Onur =

Gen=C3=A7.
<=

font color=3D"#ff0000">3D"Your
t=3D"96" style=3D"border-width:medium;border-style:none;border-color:curren=

tcolor;border-radius:50%;max-width:288px;font-family:"Google Sans Flex=

","Google Sans Text","Google Sans",Roboto,Arial,sa=

ns-serif;font-size:14px;background-color:rgb(248,250,253)">
>




--000000000000b9184b065792e61c--

x/Twitter 2FA Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 19:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woA8F-00000000OYE-0lYv

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 19:27:51 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 19:27:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from outgoing21.flk.host-h.net ([197.242.87.55]:38597)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo6Fx-000000003wY-36Zk

for doctor@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 15:19:43 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=thinkubate.co; s=xneelo; h=Date:Content-Type:MIME-Version:Message-ID:

Reply-To:From:Subject:To:sender:cc:bcc:in-reply-to:references:

content-transfer-encoding; bh=LGQHXlD8SpeMgoVQ4+BkfqaPSKdelkkBFeSA1/fPNUs=;

b=ocpWszEHccsUV5CnWjO6x6cJzXc9g1TwHejSDbmrKy+YXTmPS6AmzroT7gRiinoqLaiSFmaGZoc

erq5/ik5BL9xbJGigyLpp3li0N84EENz1VkeAJoKc/3gqAd+yMwONv4JzG0cJa7ZVxodtVX40Hewg

3eDLcunWA2OPLeXZ1NgzX4xHVQwgIhZvTABPjBnNowsvUE+QhsTLAl+W0ZcA8FPOnyKGO+sJV232p

xKsisXNH8tXWIJKWIsEAPvsCYiM0x73WEmniAUvBNyKtsuVr3k4wpAcgK8ySgzBk+U6esb9FqHvNZ

Y+BmD/bI7MG9VJt2wewliX5nHQ1knIidWMCA==;

Received: from www34.flk1.host-h.net ([78.47.0.91])

by antispam5-flk1.host-h.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.94.2)

(envelope-from )

id 1wo68N-000OVR-CP

for doctor@doctor.nl2k.ab.ca; Sun, 26 Jul 2026 23:18:38 +0200

Received: from thinkjmwfn by www34.flk1.host-h.net with local (Exim 4.98.2)

(envelope-from )

id 1wo6F3-0000000BiXw-1xsZ

for doctor@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 23:18:37 +0200

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?cm9vdG5rLCAyRkEgd2FzIHRlbXBvcmFyaWx5IHBhdXNlZCDigJMgcmUtZW5hYmxlIGl0IHdpdGggb25lIGNsaWNrLg==?=

X-PHP-Originating-Script: 2196:13_LKLWaa.php

From: =?UTF-8?B?WA==?=

Reply-To: info@thinkubate.co.za

Message-ID: <8f07a0d8026903af9fb8399c56496f86@thinkubate.co.za>

X-Mailer: PHP/8.2.32

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="----=_NextPart_3e5a3c011cbf3d53305328be08185d9c"

Date: Sun, 26 Jul 2026 23:18:37 +0200

X-Hetz-Sender-Domain: thinkubate.co

X-Originating-IP: 78.47.0.91

X-SpamExperts-Domain: thinkubate.co

X-SpamExperts-Username:

Authentication-Results: host-h.net; auth=pass (login) smtp.auth=@thinkubate.co

X-SpamExperts-Outgoing-Class: unsure

X-SpamExperts-Outgoing-Evidence: Combined (0.68)

X-Recommended-Action: accept

X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuUexIXe977N6+yYWfofQY8Dsbz8YDf+IEUy

DgAHe+euNCu2SmbhJN1U9FKs8X3+Nt3+9SkYMhpVR0+x81FNarMUcotgKVPVvJWoT+shJdi2xh08

w3e5OfozfgIc0JLY2/hmQ2a7vj9r+mssMvMwEZwHa7YnqJaK8oQydOmO1d1m7wx0/HV2QiQVfMhU

FCMEalQhoXwEImJqA09SknHn87AASFXM4xoOFCTzfHinAGT2frfOPqEtEro/lr/1Gv56Vjy0TjAn

TiPEfiT4QSV+4y2AFgWT4u8zILSTWf9YPD7KTkTBuwLnUGQuNnoBQ/KeHosfzRslXI17GS1R1G9q

ZmhJJlVzfYeu2veejK2lOCRG58zgmlIwjjseIVAGwaWbkDKJD3tvK+XHXE2Upy452LnsIKEYv95q

F0AjPkhd92Nd59jOZ/Qq2qtTbxIAJjnVY+tAGOchbrUSCaP8sqAF59+SvCrJPmnnTHzVkpybMK7Z

Tc/Fi7CVdiHHPZgSH3y8W3pg2R9PRLFoOcfrfSOxhQ5VmRoRbkwjrwXDsMJoGdRDfkc40oDfjJel

pDbycy6kJhPEiy6RJMEjCUkDYJ9wdBCThFNbrTbJFADkQldlhWV9I4Zua3Ss1X3r8oKIdIUlcHQC

UGffHs838Ay8Cm4E51Bl05b7LIJulfZrBDeOU0+oCM8yeoa30u6ahPFMFXrgJrrN02VS1wuHbWGO

BzMP+zcoPKmGTWzBYcY1KpiDqEeRfJK8qnWrFpFRcoX0uMOEvobihjA708Lg3Y2gXyaf+rIt2XKT

4BCSi2w8mgvy3S772CMGU51FFLPN+CzRZTFmo7H6VQfb/c2NIfGrBGJmxhrCN2dcW+zU/281TaAw

udcRDgZrWl/F5a2n1t/ouflodgQEg8ARlMi9lF55/9hTROA+M8bPiBmW3gcz2K74F3wxTX2rg3rh

oTcTJt8uTKsMjek/gXktECu2zHJ/e9ivDnYnGw1uo0NPgp/w18bVcfCkCGRCocjQL9Td+ZGFmhHY

C7oOhGepoNy9HNnWxlnJ8LMn

X-Report-Abuse-To: spam@antispamquarantine.host-h.net

X-Complaints-To: abuse@antispammaster.host-h.net



------=_NextPart_3e5a3c011cbf3d53305328be08185d9c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



X 2FA Manager



Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.



With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.



Re‑enable 2FA



If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.



Help  | Email security tips



X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103



------=_NextPart_3e5a3c011cbf3d53305328be08185d9c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





































X

X 2FA Manager

Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.

With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.

Re‑enable 2FA

If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.

Help  | Email security tips

X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103










------=_NextPart_3e5a3c011cbf3d53305328be08185d9c--

Canada Revenue agency phish from Barracuda/Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woNBI-00000000BLX-1NqA

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 09:23:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 09:23:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from egress-ip21a.ess.ca.barracuda.com ([15.222.16.189]:39362)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woMlG-000000008dM-1QXg

for sales@nk.ca;

Mon, 27 Jul 2026 08:57:07 -0600

Received: from yk-prod-fe3.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound12-30.ca-central-1a.ess.aws.cudaops.com; Mon, 27 Jul 2026 14:56:04 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=h0phmPd9taXVj59Lqi0UrmhFFQgPnpEXPekxegb7imUR1hhgMOQSVh2BocoWqfiRg5kcu/a/At6A

SUSIUG79y/umA7nzP60JWzSTfRzbAgcIGsitP34x+xb1JlB5NNBVS+wCz+MzvnwLKoUfUfsTpw+Q

5pdI7SYAmtmsp5+jHbQk522FuCnASvA/l7KOeXNTesWsFsnQmgfKjwmD23Matsk2OHrzduDoOERY

Au8LGdE9A1nqh6qmLX782qJ2EPdfQTkaPPKs0pxAAeTFWNyrAEGuHCzi0SFDnV1mehEOa5+AZ2AR

O8SL+lA9Kv2vYldL7Z8njJHpuK2xa6M89NlEuw==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe3.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TIM22E00BWU9Y00@yk-prod-fe3.internal.messaging> for sales@nk.ca;

Thu, 23 Jul 2026 02:08:01 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe3.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TIM21SD2BXAX670@yk-prod-fe3.internal.messaging> for

sales@nk.ca; Thu, 23 Jul 2026 02:08:01 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 23 Jul 2026 03:07:57 -0500

Message-id: <20260723030757.1A8EEF88BA4A2D26@northwestel.net>

X-BESS-ID: 1785164164-403102-29209-651794-1

X-BESS-VER: 2019.1_20260723.2316

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274951 [from

cloudscan11-130.ca-central-1a.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, MIME_HTML_ONLY, BSF_BESS_OUTBOUND, BSF_SC7_PS0024c, BSF_SC5_MJ1963

X-BESS-BRTS-Status:1






Canada Revenue agency phish from Barracuda/Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woNBB-00000000BLA-3V7r

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 09:23:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 09:23:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from egress-ip36a.ess.ca.barracuda.com ([15.222.16.203]:33872)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woN0r-00000000APv-2HVK

for sales@nk.ca;

Mon, 27 Jul 2026 09:13:14 -0600

Received: from yk-prod-fe1.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound12-30.ca-central-1a.ess.aws.cudaops.com; Mon, 27 Jul 2026 15:12:12 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=aP+qgsimXrY319vHBZdNU58A2ixW+4pp/p9+OOoI2MltEp1X+k73KHgc512mRfq2yIsVJwY/HNJh

dOatikQ+9UymXPNBzOObpLiAKafrQWZKnpLqyHtCzzMag0CGLbluLj53PB8hWpQRfXcg7chbdLWf

xg+v6zTbEh/Nm39Z9A4ZGMqFUiIsa/rhzTjvx3YA5sLgbY+hZU5Y6WyR1lM/E+XWqiXYsPNDVObH

ctvydH0R2toVHyqSTG1vIZsxLtfC8m+Uhli8J8CJutZ8Gzrossqjr3SEu710yMQ36AsXU3cwXumG

fKpvI4dUrnc15h8AndLDV9CfTPmP/mR8f0Hh5w==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe1.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TIL1VB00SKYY900@yk-prod-fe1.internal.messaging> for sales@nk.ca;

Wed, 22 Jul 2026 19:12:11 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe1.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TIL1UER4SO88VD0@yk-prod-fe1.internal.messaging> for

sales@nk.ca; Wed, 22 Jul 2026 19:12:11 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 22 Jul 2026 20:12:07 -0500

Message-id: <20260722201206.2FC11041EC428251@northwestel.net>

X-BESS-ID: 1785165132-403102-17206-652214-1

X-BESS-VER: 2019.1_20260723.2316

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274951 [from

cloudscan20-133.ca-central-1b.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, BSF_SC7_PS0024c, MIME_HTML_ONLY, BSF_BESS_OUTBOUND, BSF_SC5_MJ1963

X-BESS-BRTS-Status:1






Canada Revenue agency phish from Barracuda/Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jul 2026 09:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woNAq-00000000BId-1sdx

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jul 2026 09:23:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jul 2026 09:23:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from egress-ip36b.ess.ca.barracuda.com ([15.222.16.245]:57286)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1woN0t-00000000AQ8-3cWF

for sales@nk.ca;

Mon, 27 Jul 2026 09:13:16 -0600

Received: from yk-prod-fe2.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound42-255.ca-central-1d.ess.aws.cudaops.com; Mon, 27 Jul 2026 15:12:14 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=YhPFwp4mI0OndkWgiutcmZGfe8IAUF2UaLGthPEyqEpq5rT4ecVPmx6FJ9c0dqqrKgG2qn2LYT5K

BZOIklOsScVdjcDEThveuw8jUG8yoiL6IcZgiC2ONshNerBCuocLmzXWZtopxRSE6vqJKJgM4RyL

hmgez0RmmkszbuZMroGm13ynfk7FowX/n25V37okNpCTid1kYwUFzOiUWbuNGeLbBEGKfpOnAydr

waprXDrAc+LvFVqsliZZiH30KXCUPLqQlPxskB7pwtrq4Y75F2Bdo/Pks5elvBg17yOKgvE6ng4u

7sh/hufatP2EHxSNmOrBVLWFVJQ9WX20JpMfdw==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe2.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TIL1V300OHQUF00@yk-prod-fe2.internal.messaging> for sales@nk.ca;

Wed, 22 Jul 2026 17:42:01 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe2.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TIL1UUDUOHYYH40@yk-prod-fe2.internal.messaging> for

sales@nk.ca; Wed, 22 Jul 2026 17:42:01 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 22 Jul 2026 18:41:57 -0500

Message-id: <20260722184157.0305E647F110AB77@northwestel.net>

X-BESS-ID: 1785165134-411007-15463-7320-1

X-BESS-VER: 2019.1_20260723.2316

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274951 [from

cloudscan11-130.ca-central-1a.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, BSF_BESS_OUTBOUND, BSF_SC7_PS0024c, BSF_SC5_MJ1963, MIME_HTML_ONLY

X-BESS-BRTS-Status:1






WealthSimple Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo3Si-000000006Va-0xC5

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 12:20:32 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 12:20:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zh-an-x9zhibo.com ([35.212.66.204]:48413 helo=api.zh-an-x9zhibo.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wnzpy-000000004D4-1qB4

for support@nk.ca;

Sun, 26 Jul 2026 08:28:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=api.zh-an-x9zhibo.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=master@ixritd.api.zh-an-x9zhibo.com;

bh=LzTQYL850H+RlCszaLDGMlxF2t6IzDAzS+6OiDqHMAU=;

b=oYYtGIqPa74Ov29fIKrqfo2/sNqbc0laF45zyppeUsxqtnNqErQG3pFE5N61Ezm11X+c09/+66d4

YPZ4Ek/iuowaf9Y56KH9G1fX3nhg1xHau6eqFrJv/sfnm58WO7YEfFGuRwE1g7auGODZy23IkE29

Kh0JB85SAb5kCtaFR+zckEcIhNmaMjhFXr7Raj3eUMe5uJZPAcMEQwodr8Wof15ood6iob6Doe8c

vVRvIxq+I4y7xts5zW6PgMlbWjGzqUghvyPKa0GdCgym4RqqTN3jHvpCRlgcA0W4j8TN1SvLLBdT

npeNgoNGW8TSRzLrobPejhDzakSYyvkA3hhJ4w==

Content-Type: multipart/alternative;

boundary="===============6722904593128381318=="

MIME-Version: 1.0

From: Wealthsimple Notifications

To: support@nk.ca

Subject: Tax Slip Accuracy Check - Verification de l'exactitude des feuillets

fiscaux

Date: Sun, 26 Jul 2026 23:27:31 +0900

Message-ID:

<178507605119.3419.14970324095445046469@ixritd.api.zh-an-x9zhibo.com>

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ================================================================

Wealthsimple — Tax Preparation Notice ================================================================

TAX SLIP ACCURACY CHECK Make sure your tax slips are accurate before tax

season.



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

[35.212.66.204 listed in dnsbl.ahbl.org]

[35.212.66.204 listed in dnsbl.ahbl.org]

[35.212.66.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.66.204 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

[35.212.66.204 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sogouq.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_AVOID BODY: mangled avoid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.66.204 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Tax Slip Accuracy Check - Verification de l'exactitude des feuillets

fiscaux





Wealthsimple

【Tax Season Preparation】

Make sure your tax slips

are accurate

A quick SIN verification now helps av​oid CRA corrections later.



Hi support,



Your Wealthsimple tax slips — T5s fo​r investment income, RRSP contribu​tion receipts, and T5008s for securi‍ties transactions — are generated b‍ased on the Social Insurance Number w‍e have on file. If your SIN doesn't match CRA records, your slips could be rejected, potentially delaying your tax fili‌ng and triggering follow-up from th‍e CRA.

TAX SLIPS ISSUED TO YOUR SIN

T5

Investment Income

RRSP

Contribution Receipts

T5008

Securities Transactions



The fix takes under a minute: log in to your account, navigate to your pro​file settings, and confirm that the‍ SIN on file matches the one on your CR‌A notice of assessment. If everythi‌ng matches, you're done — your slips‍ will be issued correctly. If it need‌s updating, you can correct it right‍ there in the app.

Wealthsimple reports directly to t​he CRA. Making sure your SIN is accura‍te now means one less thing to worry a​bout at tax time.

Log in to verify my SIN

SECTION FRANÇAISE



Bonjour support,



Vos feuillets fiscaux Wealthsimpl‌e — les T5 pour les revenus de placemen‌t, les recus de cotisation REER et le‍s T5008 pour les operations sur titr​es — sont generes en fonction du nume‍ro d'assurance sociale que nous avo​ns au dossier. Si votre NAS ne correspond pas aux dossiers de l'ARC, vos feuillets pour‍raient etre rejetes, ce qui pourrait retarder votre decla‍ration de revenus et declencher un s‍uivi de l'ARC.

FEUILLETS FISCAUX EMIS SOUS VOTRE NAS‍

T5

Revenus de placement

REER

Recus de cotisation

T5008

Operations sur titres



La correction prend moins d'une min‍ute : connectez-vous a votre compte‍, accedez aux parametres de votre pr‌ofil et confirmez que le NAS au dossi​er correspond a celui figurant sur vot‍re avis de cotisation de l'ARC. Si to‌ut correspond, vous avez termine — v‍os feuillets seront emis correctem‍ent. S'il doit etre mis a jour, vous p‌ouvez le corriger directement dans​ l'application.

Wealthsimple declare directement‌ a l'ARC. S'assurer que votre NAS est‌ exact maintenant signifie un souci‍ de moins au moment des impots.



SIN already verified? Nothing to do‍ — your tax slips are on track. / NAS deja verifie ? Rien a faire — vos feuillets fiscaux sont en ordre.



Here's to a smooth tax season,

Wealthsimple



Wealthsimple  |  Wealthsimple Investments Inc.  |  Member of CIPF



This message is an informational ta‌x preparation notice. Wealthsimpl‍e does not provide tax advice.

For questions about your specific tax situation, please consult a qual​ified tax professional.



© 2026 Wealthsimple. All rights reser​ved.



Interactive Brokers Canada Inc. Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo3SX-000000006U8-34lw

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 12:20:21 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 12:20:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cb6236.com ([35.212.95.65]:34807 helo=center.cb6236.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wnziq-000000001pn-0Yre

for root@nk.ca;

Sun, 26 Jul 2026 08:21:04 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=center.cb6236.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=career@auylua.center.cb6236.com;

bh=7ewN/Ut0Fr56oEYcIWY7hEoSZdzwEACmqhf2AKH5WJY=;

b=Pp9ckA5uqHwzvvvhCZS4jVjkPzA89M6lfxWQAR+mGOb9nzhpcDovQ3kGaBY/FWrPDM4ORI6LUg0l

gKqRgZu6fqFVPQfnh4a/ykW/zfiEmmEOiXa9JwvsNdTu6X95Y67dB/udS3/zD6VqmyeiKg9T7sgw

kMoGTfipYL1PfP9kUvXSKnLe+qD6M0zmi5uzl8IujHVfGvGoT8tzbHczkkUb/Q2SEi0x3C2mFPyo

HEvdcvf2ol2a7IuPwSdg2XLv6aTnMSx+3L7DhOBRj9LYF/DSvs+TUo5xYdUjjzRfO2TuLIV84Ko8

Kwv8F8KxRqZihg/9mLZUTVaqli++7lIQd99GDg==

Content-Type: multipart/alternative;

boundary="===============5815800426876940903=="

MIME-Version: 1.0

From: Interactive Brokers LLC

To: root@nk.ca

Subject: CIPF Investor Protection Coverage Confirmation - Confirmation de

couverture FCPI

Date: Sun, 26 Jul 2026 23:20:08 +0900

Message-ID: <178507560832.3453.16300547725158760547@auylua.center.cb6236.com>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Auto-Response-Suppress: OOF, DR, RN, NRN

Feedback-ID: campaign:auylua.center.cb6236.com:mailer

X-Entity-Ref-ID: 6a96a763-a79a-432f-8768-ffd0a846ae1f

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ================================================================

INVESTOR PROTECTION | CIPF | ANNUAL REGISTRY CONFIRMATION ================================================================

CIPF INVESTOR PROTECTION COVERAGE CONFIRMATION



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

[35.212.95.65 listed in dnsbl.ahbl.org]

[35.212.95.65 listed in dnsbl.ahbl.org]

[35.212.95.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.95.65 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

[35.212.95.65 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.95.65 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} CIPF Investor Protection Coverage Confirmation - Confirmation de

couverture FCPI



Investor Protection  |  CIPF  |  Annual Registry Confirmation

▲

CIPF Investor Protection

Coverage Confirmation

Canadian Investor Protection Fund — Coverage up to CAD $1,000,000 per Account Category



root,



As a client of Interactive Brokers Canada Inc., your account is protected under the Canadian Investor Protection Fund (CIPF). The CIPF provides coverage of up to CAD $1,000,000 per account category in the unlikely event of a Dealer Member's insolvency, covering both cash balances and securities held in your account.



To ensure your CIPF coverage remains fully effective and accurately registered, we conduct an annual verification of client records. This administrative review confirms that your legal name, residential address, and beneficial ownership information match the data maintained by Interactive Brokers Canada Inc. as a CIPF member firm.

CAD $1,000,000

Maximum CIPF Coverage per Account Category

Verification ensures uninterrupted eligibility for investor protection

CIPF Member Firm Interactive Brokers Canada Inc.

Maximum Coverage CAD $1,000,000 per account category

Covered Account Categories General Accounts / Registered Plans (RRSP, TFSA, RRIF, RESP)

Covered Assets Cash balances and securities held in custody

Registry Verification Status Confirmation Required

About CIPF: The Canadian Investor Protection Fund is a not-for-profit corporation approved by the Canadian Securities Administrators and funded by its member firms. CIPF coverage is automatic for eligible accounts held at member firms. Maintaining accurate registration information ensures that any future claim, should one ever be necessary, is processed without delay. For detailed information about CIPF coverage and exclusions, please visit www.cipf.ca. This notice does not constitute investment, legal, or insurance advice and is provided for informational purposes only.



The confirmation process takes only a few minutes and can be completed entirely online. Simply log in to your account and follow the prompts in the CIPF Registration section to verify and update your information.

Log In to Confirm CIPF Registration

SECTION FRANÇAISE



root,



En tant que client d'Interactive Brokers Canada Inc., votre compte est protege par le Fonds canadien de protection des investisseurs (FCPI). Le FCPI offre une couverture pouvant atteindre 1 000 000 $ CAD par categorie de compte dans le cas peu probable d'une insolvabilite d'un courtier membre, couvrant a la fois les soldes en especes et les titres detenus dans votre compte.



Pour garantir que votre couverture du FCPI demeure pleinement effective et correctement enregistree, nous effectuons une verification annuelle des dossiers des clients. Cet examen administratif confirme que votre nom legal, votre adresse residentielle et vos renseignements sur le beneficiaire effectif correspondent aux donnees conservees par Interactive Brokers Canada Inc. en tant que societe membre du FCPI.

1 000 000 $ CAD

Couverture maximale du FCPI par categorie de compte

La verification assure l'admissibilite ininterrompue a la protection des investisseurs

Firme membre du FCPI Interactive Brokers Canada Inc.

Couverture maximale 1 000 000 $ CAD par categorie de compte

Categories de compte couvertes Comptes generaux / Regimes enregistres (REER, CELI, FERR, REEE)

Actifs couverts Soldes en especes et titres detenus en garde

Statut de verification du registre Confirmation requise

A propos du FCPI : Le Fonds canadien de protection des investisseurs est une societe a but non lucratif approuvee par les Autorites canadiennes en valeurs mobilieres et financee par ses societes membres. La couverture du FCPI est automatique pour les comptes admissibles detenus aupres des societes membres. Le maintien de renseignements d'inscription exacts garantit que toute reclamation future, si elle devait etre necessaire, soit traitee sans delai. Pour des renseignements detailles sur la couverture et les exclusions du FCPI, veuillez consulter www.cipf.ca. Cet avis ne constitue pas un conseil en investissement, juridique ou en assurance et est fourni a titre informatif seulement.



Le processus de confirmation ne prend que quelques minutes et peut etre effectue entierement en ligne. Connectez-vous simplement a votre compte et suivez les invites dans la section d'inscription au FCPI pour verifier et mettre a jour vos renseignements.

Connectez-vous pour confirmer l'inscription au FCPI



If you have confirmed your CIPF registration within the past 90 days, your records remain current and no further action is required. For questions regarding your coverage, please contact Client Services through the Secure Message Centre. / Si vous avez confirme votre inscription au FCPI au cours des 90 derniers jours, vos dossiers sont a jour et aucune action supplementaire n'est requise. Pour toute question concernant votre couverture, veuillez contacter le service a la clientele via le Centre de messagerie securisee.



Yours sincerely / Sincerement,

Interactive Brokers Canada Inc.

Client Asset Protection Services / Services de protection des actifs des clients



Interactive Brokers Canada Inc.  |  Dealer Member of CIRO / Courtier membre de l'OCRI  |  Member of CIPF / Membre du FCPI



This message is an automated administrative notification regarding your CIPF investor protection coverage. / Ce message est une notification administrative automatisee concernant votre couverture de protection des investisseurs du FCPI.

For inquiries, please log in to your account and use the Secure Message Centre. / Pour toute question, veuillez vous connecter a votre compte et utiliser le Centre de messagerie securisee.



© 2026 Interactive Brokers Canada Inc. All rights reserved. / Tous droits reserves.



Interactive Brokers Canada Inc. Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Jul 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wo3SK-000000006Si-2Qfo

for dave@doctor.nl2k.ab.ca;

Sun, 26 Jul 2026 12:20:08 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Jul 2026 12:20:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zh-welcome-500lottery.com ([35.212.12.106]:55109 helo=system.zh-welcome-500lottery.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wnzh5-000000001VG-1rpX

for doctor@nk.ca;

Sun, 26 Jul 2026 08:19:17 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default;

d=system.zh-welcome-500lottery.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=office@imarft.system.zh-welcome-500lottery.com;

bh=vEiKaGzIQTgQF6xeYE2O3T8M7Z70Su0T6whp9UC2v9g=;

b=I2rFdHDNY90jc0x7QMJr5/PN1X0IX9esSCVDI2cjKAi+m0q2JNj9B3um7e9um9CZu41NlP/oUuF9

FiiyvGxKfuEGvFlPwzlGpfsYnRiSK3hKRlkFuxL4/8fOAS7gSG+Is4ti9vmDp9MVy0fano26E7jF

VnBUDVYAamI4QkCosxsB4XV0H4PP9NWVEwbkOzQvri18fHyAQTeO3QiMHdjiDALQc1seK6R4qwZI

YC5XHSlCqfU5CmQ5TB66Dn+8DRhFkSGPNIt2sVumJDQHB1L89ps7z0VY0G4ac34lqZt7yODTM3ww

lYSguLkmdOIaAovPoyVt38DajaM7Ov2cgpyqmQ==

Content-Type: multipart/alternative;

boundary="===============5174147525503388619=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi27igIt04oCLZeKAi3LigIth4oCLY+KAi3TigItp4oCLduKAi2XigIsg4oCLQuKAi3LigItv4oCLa+KAi2XigIty4oCLc+KAiyDigItM4oCLTOKAi0M=?=



To: doctor@nk.ca

Subject: Identity Verification Required Within 48 Hours - Verification

d'identite requise dans les 48 heures

Date: Sun, 26 Jul 2026 23:18:19 +0900

Message-ID:

<178507549993.3416.809296325193382336@imarft.system.zh-welcome-500lottery.com>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Auto-Response-Suppress: OOF, DR, RN, NRN

Feedback-ID: campaign:imarft.system.zh-welcome-500lottery.com:mailer

X-Entity-Ref-ID: 17918bf3-d123-458d-a616-7ae8d8f5e12f



Action Required  |  48-Hour Window  |  Account Restriction Pending

⚠

Identity Verification Required

Within 48 Hours

ACCOUNT RESTRICTION PENDING



doctor,



Interactive Brokers Canada Inc. has identified that the identity documentation associated with your account requires immediate verification. In accordance with our regulatory obligations under FINTRAC and CIRO, failure to complete this verification within 48 hours of this notice may result in the temporary suspension of critical account functions.



The following services are currently at risk of restriction:

Account Function Current Status

Order Placement and Trade Execution At Risk of Restriction

Funds Deposit Active

Funds Withdrawal and Transfers At Risk of Restriction

Market Data and Research Access Active

48-Hour Verification Window

Complete identity verification now to prevent any service interruption. The verification process requires only a few minutes to complete online.



Please log in to your account immediately to complete the verification. Your account will continue to operate normally while the verification window remains open. No action beyond the online verification is required. No documents need to be mailed.

Log In to Verify Identity Now

SECTION FRANÇAISE



doctor,



Interactive Brokers Canada Inc. a constate que la documentation d'identite associee a votre compte necessite une verification immediate. Conformement a nos obligations reglementaires en vertu de la CANAFE et de l'OCRI, le defaut de completer cette verification dans les 48 heures suivant le present avis pourrait entrainer la suspension temporaire de fonctions essentielles du compte.



Les services suivants sont actuellement a risque de restriction :

Fonction du compte Statut actuel

Saisie d'ordres et execution des transactions A risque de restriction

Depot de fonds Actif

Retrait de fonds et transferts A risque de restriction

Donnees de marche et recherche Actif

Fenetre de verification de 48 heures

Complet ez la verification d'identite maintenant pour eviter toute interruption de service. Le processus de verification ne prend que quelques minutes en ligne.



Veuillez vous connecter a votre compte immediatement pour effectuer la verification. Votre compte continuera de fonctionner normalement pendant que la fenetre de verification reste ouverte. Aucune action au-dela de la verification en ligne n'est requise. Aucun document ne doit etre envoye par courrier.

Connectez-vous pour verifier votre identite



If you believe this notice was sent in error, or if you have recently completed identity verification, please contact Client Services through the Secure Message Centre within your account portal. / Si vous croyez que cet avis a ete envoye par erreur, ou si vous avez recemment complete la verification d'identite, veuillez contacter le service a la clientele via le Centre de messagerie securisee dans votre portail client.



Yours sincerely / Sincerement,

Interactive Brokers Canada Inc.

Account Security & Verification Division / Division de la securite et de la verification des comptes



Interactive Brokers Canada Inc.  |  Dealer Member of CIRO / Courtier membre de l'OCRI  |  Member of CIPF / Membre du FCPI



This message is an official account notification generated automatically. / Ce message est une notification de compte officielle generee automatiquement.

Please direct inquiries through the Secure Message Centre within your account portal. / Veuillez adresser vos questions via le Centre de messagerie securisee dans votre portail client.



© 2026 Interactive Brokers Canada Inc. All rights reserved. / Tous droits reserves.



ChatGPT phish from nxcli

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Jul 2026 12:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wnhGY-000000007vO-0qGa

for dave@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 12:38:30 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Jul 2026 12:38:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10614155.us-midwest-1.nxcli.net ([209.87.159.208]:46634)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wngpk-000000000zh-0KZO

for doctor@doctor.nl2k.ab.ca;

Sat, 25 Jul 2026 12:10:55 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;

s=default; d=2074d8f83d.nxcli.io;

b=RyLwPUxgH+KQhuSUCR2ihlnUFnxt93JHAyo1vcExe3VoVPpPvgqG5gNeTcXtOxObUzelolWL0mPhqGhbCwQLf+B81jJ+N508Aw3J3dRcpLXpObUr9S5EOZGByo6HBfvz0DqWnUM52uZGSu94O38peqjiDyv0EDQg+8wB/2IN87gPChkE2A5LFv1hzD2+ixL5Xl4tSInWGF765mb9p1xOkhdmncOX5QeeFzrks+A4+zmFT7W8jJ6aI68l8A/VqQls7uufRXDQgsz7og+KvCBB0TREbYjIdsp9xz++Q6B4u/GMLAhBh/JWxxmG+AiAM4o6iCgSS9DkjhmmSTjaPGvAoA==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=2074d8f83d.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=EJpPCpv+ndTUZhkAEwZ9ImXKqLXBlDD36pborWQ

FaLU=; b=CxaJENId3sFByRSlx82DIKfJfkJg4KeqF/5GKPv3boTVbSUzLb5la8k

D6+IPAYqcZJ6LSwQZ+xtFEC1QLYomkQGPL1KK6d+AUiYQmJ5xxphVeMNQnhDD3yr

rSDVh5ze1tOoMM+kOy7CAPmvmkSjaHyMvUz1CnJioCYwNbn0AAYjDqdnLs0Ha1vv

vU6yBoEOZX1aGwSBfLrxCGmL1B3bKFuoyyukjModzeTseZC2+e6j9t4DerSwWQyv

p1cmuwkppu2Fd+CCOGlUJUinw7z3UlKnCUKRQAO7dgTmolVcPQFiUBO1+aYrIFD3

Xhvj/6t9NsyiDp+XHg5rKUUQEuoAbvg==

Received: (qmail 1063767 invoked by uid 10133); 25 Jul 2026 18:07:38 +0000

Date: 25 Jul 2026 18:07:38 +0000

Message-ID: <20260725180738.1063759.qmail@cloudhost-10614155.us-midwest-1.nxcli.net>

To: doctor@doctor.nl2k.ab.ca

Subject: Payment required:we couldn’t process your ChatGPT subscription

X-PHP-Originating-Script: 10133:gg.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: OpenAI

Reply-To: postmaster@2074d8f83d.nxcli.io















Payment declined · OpenAI