Docusign Phish from Amazon Part 2



----_NmP-5d57c1e10feb6c21-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



EFT Payment Authorization Required.



Review Documents https://shared.=

ospreycharterfishing.ca/?t=3Dc2FsZXNAbmsuY2E



Do Not Share This Email



This email contains a secure link to Docusign. Please do not share this =

email, link, or access code with others.



This message was sent by nk.ca =

using DocuSign. If you wish to stop receiving emails, contact the sender.

----_NmP-5d57c1e10feb6c21-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable












initial-scale=3D1">






Helvetica,sans-serif;">






















style=3D"max-width:640px;">












































22px;background:#ffffff;">


0/email/emailLogo.png" alt=3D"Docusign" width=3D"118" =

style=3D"display:block;border:0;">




border=3D"0" bgcolor=3D"#260559" style=3D"border-radius:16px;">










.98.0/email/iconSign.png" alt=3D"" width=3D"48" height=3D"48" =

style=3D"display:block;border:0;margin:0 auto;">


0;color:#ffffff;">EFT Payment Authorization Required.






t=3Dc2FsZXNAbmsuY2E" style=3D"display:inline-block;background:#735AFF;color=

:#ffffff;font-size:15px;font-weight:700;text-decoration:none;border-radius:=

8px;line-height:44px;padding:0 24px;">Review Documents







13px;color:#130032;line-height:18px;">

Do Not Share This Email



This email contains a secure link to Docusign. Please do not =

share this email, link, or access code with others.




666;text-align:center;background:#f4f4f4;border:1px solid =

#e0e0e0;border-radius:4px;padding:11px 15px;">

This message was sent by nk.ca using DocuSign. If you wish to=

stop receiving emails, contact the sender.













----_NmP-5d57c1e10feb6c21-Part_1--

Docusign Phish from Amazon Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weDGV-00000000AjM-01fj

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 08:47:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jun 2026 08:47:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a9-156.smtp-out.amazonses.com ([54.240.9.156]:43349)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <0100019f13bb0fdc-cdb49eb2-bce9-42cf-8ef1-868caf3baf54-000000@send.mail.actforcanada.org>)

id 1weClP-000000006dw-1QTF

for sales@nk.ca;

Mon, 29 Jun 2026 08:15:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=mail.actforcanada.org; t=1782742454;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=bO7dDMwC/pgI3dSoNTvg569ieB75Kx4nOkXhCK/VIag=;

b=skFlG4cF5d+RCjw7e971oCimCaxJ64p9NnRXrenqTOCNESGKw3AuX2w4d6+cDGGR

axvXGgYZ7pgs2uf4SaUgTlr+584HyQINyE8sZJbSadz6a350uHmnQTDGDAJogeY2h+e

W5I4HvC922xlMvmIZfjQE0lMc2raEcmeRbBwuxCk=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1782742454;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=bO7dDMwC/pgI3dSoNTvg569ieB75Kx4nOkXhCK/VIag=;

b=Zo57p+F7CplcWTRlcTHmoKT2RsusuN24RAv/bHBqEOdxWRDorkttNu84mhABqr7W

9z/hxkBvGpIpf0yZAqLRxMGnwq48UCkTr/GcPf8tF/W+YvWBbvit0ZLFaTceRA1Nxpf

NpxUQUJgEC+/BiCOiACBgtwaILIZLkWp7mHfLQXQ=

From: DocuSign

To: sales@nk.ca

Subject: Review Document: EFT Payment Authorization Notice

Message-ID: <0100019f13bb0fdc-cdb49eb2-bce9-42cf-8ef1-868caf3baf54-000000@email.amazonses.com>

Date: Mon, 29 Jun 2026 14:14:14 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-5d57c1e10feb6c21-Part_1"

Feedback-ID: :1.us-east-1.Qbuke0KWFseNm4ZY5BZZcA857c7btUUKWdYGLfiVNfnNo1sjs/fTPiEEYfIL81lYM6M2fq+7rUQynMmcjRJhO6NTEDm15yorO7g/kF0uLWLFC4SvlmBpV70qbwlaFJeXLBwlAXNuUqELHhJxhzT5qSbM+zv1Trp3TaezYEQqdGA=:1.us-east-1.QSNtDRXSTq9sAuvRl56h5mypgasnQ5yDLNpVzTnziu0=:AmazonSES

X-SES-Outgoing: 2026.06.29-54.240.9.156

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: EFT Payment Authorization Required. Review Documents https://shared.ospreycharterfishing.ca/?t=c2FsZXNAbmsuY2E

Do Not Share This Email



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

[54.240.9.156 listed in dnsbl.ahbl.org]

[54.240.9.156 listed in dnsbl.ahbl.org]

[54.240.9.156 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.9.156 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.9.156 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.9.156 listed in wl.mailspike.net]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Review Document: EFT Payment Authorization Notice

Docusign Phish from Amazon Part 2



----_NmP-5d57c1e10feb6c21-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



EFT Payment Authorization Required.



Review Documents https://shared.=

ospreycharterfishing.ca/?t=3Dc2FsZXNAbmsuY2E



Do Not Share This Email



This email contains a secure link to Docusign. Please do not share this =

email, link, or access code with others.



This message was sent by nk.ca =

using DocuSign. If you wish to stop receiving emails, contact the sender.

----_NmP-5d57c1e10feb6c21-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable












initial-scale=3D1">






Helvetica,sans-serif;">






















style=3D"max-width:640px;">












































22px;background:#ffffff;">


0/email/emailLogo.png" alt=3D"Docusign" width=3D"118" =

style=3D"display:block;border:0;">




border=3D"0" bgcolor=3D"#260559" style=3D"border-radius:16px;">










.98.0/email/iconSign.png" alt=3D"" width=3D"48" height=3D"48" =

style=3D"display:block;border:0;margin:0 auto;">


0;color:#ffffff;">EFT Payment Authorization Required.






t=3Dc2FsZXNAbmsuY2E" style=3D"display:inline-block;background:#735AFF;color=

:#ffffff;font-size:15px;font-weight:700;text-decoration:none;border-radius:=

8px;line-height:44px;padding:0 24px;">Review Documents







13px;color:#130032;line-height:18px;">

Do Not Share This Email



This email contains a secure link to Docusign. Please do not =

share this email, link, or access code with others.




666;text-align:center;background:#f4f4f4;border:1px solid =

#e0e0e0;border-radius:4px;padding:11px 15px;">

This message was sent by nk.ca using DocuSign. If you wish to=

stop receiving emails, contact the sender.













----_NmP-5d57c1e10feb6c21-Part_1--

Docusign Phish from Amazon Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weDGV-00000000AjM-01fj

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 08:47:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jun 2026 08:47:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a9-156.smtp-out.amazonses.com ([54.240.9.156]:43349)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <0100019f13bb0fdc-cdb49eb2-bce9-42cf-8ef1-868caf3baf54-000000@send.mail.actforcanada.org>)

id 1weClP-000000006dw-1QTF

for sales@nk.ca;

Mon, 29 Jun 2026 08:15:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=mail.actforcanada.org; t=1782742454;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=bO7dDMwC/pgI3dSoNTvg569ieB75Kx4nOkXhCK/VIag=;

b=skFlG4cF5d+RCjw7e971oCimCaxJ64p9NnRXrenqTOCNESGKw3AuX2w4d6+cDGGR

axvXGgYZ7pgs2uf4SaUgTlr+584HyQINyE8sZJbSadz6a350uHmnQTDGDAJogeY2h+e

W5I4HvC922xlMvmIZfjQE0lMc2raEcmeRbBwuxCk=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1782742454;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=bO7dDMwC/pgI3dSoNTvg569ieB75Kx4nOkXhCK/VIag=;

b=Zo57p+F7CplcWTRlcTHmoKT2RsusuN24RAv/bHBqEOdxWRDorkttNu84mhABqr7W

9z/hxkBvGpIpf0yZAqLRxMGnwq48UCkTr/GcPf8tF/W+YvWBbvit0ZLFaTceRA1Nxpf

NpxUQUJgEC+/BiCOiACBgtwaILIZLkWp7mHfLQXQ=

From: DocuSign

To: sales@nk.ca

Subject: Review Document: EFT Payment Authorization Notice

Message-ID: <0100019f13bb0fdc-cdb49eb2-bce9-42cf-8ef1-868caf3baf54-000000@email.amazonses.com>

Date: Mon, 29 Jun 2026 14:14:14 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-5d57c1e10feb6c21-Part_1"

Feedback-ID: :1.us-east-1.Qbuke0KWFseNm4ZY5BZZcA857c7btUUKWdYGLfiVNfnNo1sjs/fTPiEEYfIL81lYM6M2fq+7rUQynMmcjRJhO6NTEDm15yorO7g/kF0uLWLFC4SvlmBpV70qbwlaFJeXLBwlAXNuUqELHhJxhzT5qSbM+zv1Trp3TaezYEQqdGA=:1.us-east-1.QSNtDRXSTq9sAuvRl56h5mypgasnQ5yDLNpVzTnziu0=:AmazonSES

X-SES-Outgoing: 2026.06.29-54.240.9.156

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: EFT Payment Authorization Required. Review Documents https://shared.ospreycharterfishing.ca/?t=c2FsZXNAbmsuY2E

Do Not Share This Email



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

[54.240.9.156 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

[54.240.9.156 listed in dnsbl.ahbl.org]

[54.240.9.156 listed in dnsbl.ahbl.org]

[54.240.9.156 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.9.156 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.9.156 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.9.156 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.9.156 listed in wl.mailspike.net]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Review Document: EFT Payment Authorization Notice

Docusign Phish from Amazon Part 2





----_NmP-1f72ff7c4ff28ae9-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



EFT Payment Authorization Required.



Review Documents https://shared.=

ospreycharterfishing.ca/?t=3Dcm9vdEBuay5jYQ



Do Not Share This Email



This email contains a secure link to Docusign. Please do not share this =

email, link, or access code with others.



This message was sent by nk.ca =

using DocuSign. If you wish to stop receiving emails, contact the sender.

----_NmP-1f72ff7c4ff28ae9-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable












initial-scale=3D1">






Helvetica,sans-serif;">






















style=3D"max-width:640px;">












































22px;background:#ffffff;">


0/email/emailLogo.png" alt=3D"Docusign" width=3D"118" =

style=3D"display:block;border:0;">




border=3D"0" bgcolor=3D"#260559" style=3D"border-radius:16px;">










.98.0/email/iconSign.png" alt=3D"" width=3D"48" height=3D"48" =

style=3D"display:block;border:0;margin:0 auto;">


0;color:#ffffff;">EFT Payment Authorization Required.






t=3Dcm9vdEBuay5jYQ" style=3D"display:inline-block;background:#735AFF;color:=

#ffffff;font-size:15px;font-weight:700;text-decoration:none;border-radius:8=

px;line-height:44px;padding:0 24px;">Review Documents







13px;color:#130032;line-height:18px;">

Do Not Share This Email



This email contains a secure link to Docusign. Please do not =

share this email, link, or access code with others.




666;text-align:center;background:#f4f4f4;border:1px solid =

#e0e0e0;border-radius:4px;padding:11px 15px;">

This message was sent by nk.ca using DocuSign. If you wish to=

stop receiving emails, contact the sender.













----_NmP-1f72ff7c4ff28ae9-Part_1--

Docusign Phish from Amazon Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weDGM-00000000Ail-0tP7

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 08:47:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jun 2026 08:47:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a14-57.smtp-out.amazonses.com ([54.240.14.57]:59545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <0100019f13ba4a94-b037d1e5-b836-40d7-a4c9-6f2bf62d0bf0-000000@send.updates.abodereader.com>)

id 1weCka-0000000064z-3C5r

for root@nk.ca;

Mon, 29 Jun 2026 08:14:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=updates.abodereader.com; t=1782742403;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=VLIdqf7k1ECf3AKHaixB3DeTGviheVApv14SLv1UhTU=;

b=PO5RXIglL9sQ3w0w2KtsUC/r8yDgqHVOF6rH12OZDyJpPO4KrxFFH/OmiULjyczZ

mCi2c2tz2ITBYTirmzKfrqOPEAqqJg2FtQw9RJdUxXPr1wDNVdKnlQj/cJnuxAVaf2v

A15obIMJVzWSK+czxMnuDfmDtOojp4NMu0QBNERg=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1782742403;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=VLIdqf7k1ECf3AKHaixB3DeTGviheVApv14SLv1UhTU=;

b=ViccElIl1YmE/qdtWAevNoOrVn8TLO6qFz3mGjfP8ttyhRrTc5PjgVTWAB+LuqfQ

p3GWqzRanOZ80VEes49QGa+ZZYZ/ZhkRtn9zpGkA0JPJv1iKv6ziysNmdKtXT1I+bK/

7y/BDEEa+i7ZC/QlG5XLZ1QBqES9HIRrKtVagDnM=

From: DocuSign

To: root@nk.ca

Subject: Review Document: EFT Payment Authorization Notice

Message-ID: <0100019f13ba4a94-b037d1e5-b836-40d7-a4c9-6f2bf62d0bf0-000000@email.amazonses.com>

Date: Mon, 29 Jun 2026 14:13:23 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-1f72ff7c4ff28ae9-Part_1"

Feedback-ID: :1.us-east-1.JjpWZXhkc+hAx/1QFiBBGfqtcUWSdRo6a3Sgkmv86ckHPV0LelUjeS8iu0mBcWOyykDqpHVwju04db6Aer9xzulXHbyGOB9gmHuKcfJdI6tp2bYT9osSWvhwtiHAVe9ogrY78eeHjESQ5sOfO7exZvZ/tkujmd9q0G6QVH4QBc0=:1.us-east-1.QSNtDRXSTq9sAuvRl56h5mypgasnQ5yDLNpVzTnziu0=:AmazonSES

X-SES-Outgoing: 2026.06.29-54.240.14.57

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: EFT Payment Authorization Required. Review Documents https://shared.ospreycharterfishing.ca/?t=cm9vdEBuay5jYQ

Do Not Share This Email



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

[54.240.14.57 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.14.57 listed in dnsbl.ahbl.org]

[54.240.14.57 listed in dnsbl.ahbl.org]

[54.240.14.57 listed in dnsbl.ahbl.org]

[54.240.14.57 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.14.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.14.57 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.14.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.14.57 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.14.57 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.14.57 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[54.240.14.57 listed in wl.mailspike.net]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

Subject: {SPAM?} Review Document: EFT Payment Authorization Notice

Docusign Phish from Amazon Part 2





----_NmP-523b8a454a848e68-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



EFT Payment Authorization Required.



Review Documents https://shared.=

ospreycharterfishing.ca/?t=3Dcm9vdEBubDJrLmNh



Do Not Share This Email



This email contains a secure link to Docusign. Please do not share this =

email, link, or access code with others.



This message was sent by nl2k.ca =

using DocuSign. If you wish to stop receiving emails, contact the sender.

----_NmP-523b8a454a848e68-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable












initial-scale=3D1">






Helvetica,sans-serif;">






















style=3D"max-width:640px;">












































22px;background:#ffffff;">


0/email/emailLogo.png" alt=3D"Docusign" width=3D"118" =

style=3D"display:block;border:0;">




border=3D"0" bgcolor=3D"#260559" style=3D"border-radius:16px;">










.98.0/email/iconSign.png" alt=3D"" width=3D"48" height=3D"48" =

style=3D"display:block;border:0;margin:0 auto;">


0;color:#ffffff;">EFT Payment Authorization Required.






t=3Dcm9vdEBubDJrLmNh" style=3D"display:inline-block;background:#735AFF;colo=

r:#ffffff;font-size:15px;font-weight:700;text-decoration:none;border-radius=

:8px;line-height:44px;padding:0 24px;">Review Documents







13px;color:#130032;line-height:18px;">

Do Not Share This Email



This email contains a secure link to Docusign. Please do not =

share this email, link, or access code with others.




666;text-align:center;background:#f4f4f4;border:1px solid =

#e0e0e0;border-radius:4px;padding:11px 15px;">

This message was sent by nl2k.ca using DocuSign. If you wish =

to stop receiving emails, contact the sender.













----_NmP-523b8a454a848e68-Part_1--

Docusign Phish from Amazon Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weDGI-00000000AiB-12Mg

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 08:47:02 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jun 2026 08:47:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a10-10.smtp-out.amazonses.com ([54.240.10.10]:60581)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <0100019f13b62e6d-f663af18-0d01-4c8f-8767-35fc98acd54e-000000@send.mail.drafft.site>)

id 1weCgH-00000000KyH-1CFc

for root@nl2k.ca;

Mon, 29 Jun 2026 08:09:57 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=mail.drafft.site; t=1782742134;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=MaZF8tYF7zkaIuSJp/iKaSl7M3o/1mku16leQTyWX58=;

b=6sljJi31jbB6yG1wi8WJ5zmo7e8UaOK8VqNgDe/HcdU0Zqin5ZfQyM/fzjFBISK3

E8VRig4HVqSCqlKpqeU4pdEHsToy3OPC66d5GkZXk7byuWf9klJiONbFTRg6NXVSa9V

qu15HQsPXgc4SpQcCW/AQ/skPxeswGxaw5hUoaFE=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1782742134;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=MaZF8tYF7zkaIuSJp/iKaSl7M3o/1mku16leQTyWX58=;

b=mvIln9oNpLAg0xIbSMiD7NiOycxgb/iiOaORMkvemNYQHETU1rR9ucObcj/sYMVl

2+C6cDOA4YP2/C0wIoFmRcW4iYcCzFojkcdgrtnTsiI8YgUcf1gyYyAfWuIeI4J3x6D

SeOYGRuHwtRssWZoVU7aSED7vrI9ILQPcwkr3ZJI=

From: DocuSign

To: root@nl2k.ca

Subject: Review Document: EFT Payment Authorization Notice

Message-ID: <0100019f13b62e6d-f663af18-0d01-4c8f-8767-35fc98acd54e-000000@email.amazonses.com>

Date: Mon, 29 Jun 2026 14:08:54 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-523b8a454a848e68-Part_1"

Feedback-ID: :1.us-east-1.024kA0Mzc16XjNTEGOXUSs+c/2RKCVLbTaL7GWXm6VYI/mhiu2ZfOLGoE/Olfpn4p1YoSmlzOJJommLzrQfbeV8VtZLAQtYAd9hA4kVhKrKTP8ZGzAvr8AWJNE8wsAOJSsBi+YSpgfgrXCkkG4XFG4Au7nEq17/IL1vgLhn9RLY=:1.us-east-1.epbACCJLarUaEI78XZoGREJ9LamRjxMH5pM2kZb64rA=:AmazonSES

X-SES-Outgoing: 2026.06.29-54.240.10.10

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: EFT Payment Authorization Required. Review Documents https://shared.ospreycharterfishing.ca/?t=cm9vdEBubDJrLmNh

Do Not Share This Email



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

[54.240.10.10 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.10.10 listed in dnsbl.ahbl.org]

[54.240.10.10 listed in dnsbl.ahbl.org]

[54.240.10.10 listed in dnsbl.ahbl.org]

[54.240.10.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.10.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.10.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.10.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.10.10 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.10.10 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[54.240.10.10 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.10.10 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

Subject: {SPAM?} Review Document: EFT Payment Authorization Notice

Docusign Phish from Amazon Part 2





----_NmP-cd5c0b696f96855a-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



EFT Payment Authorization Required.



Review Documents https://s3.us-east-2.=

amazonaws.com/adobedocumentsign.blob.core.windows.net.=

web1016754684231/index.html?s=3Dwww@nl2k.ab.ca



Do Not Share This Email



This email contains a secure link to Docusign. Please do not share this =

email, link, or access code with others.



This message was sent by nl2k.ab.=

ca using DocuSign. If you wish to stop receiving emails, contact the sender.

----_NmP-cd5c0b696f96855a-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable












initial-scale=3D1">






Helvetica,sans-serif;">






















style=3D"max-width:640px;">












































22px;background:#ffffff;">


0/email/emailLogo.png" alt=3D"Docusign" width=3D"118" =

style=3D"display:block;border:0;">




border=3D"0" bgcolor=3D"#260559" style=3D"border-radius:16px;">










.98.0/email/iconSign.png" alt=3D"" width=3D"48" height=3D"48" =

style=3D"display:block;border:0;margin:0 auto;">


0;color:#ffffff;">EFT Payment Authorization Required.






com/adobedocumentsign.blob.core.windows.net.web1016754684231/index.html?=

s=3Dwww@nl2k.ab.ca" style=3D"display:inline-block;background:#735AFF;color:=

#ffffff;font-size:15px;font-weight:700;text-decoration:none;border-radius:8=

px;line-height:44px;padding:0 24px;">Review Documents







13px;color:#130032;line-height:18px;">

Do Not Share This Email



This email contains a secure link to Docusign. Please do not =

share this email, link, or access code with others.




666;text-align:center;background:#f4f4f4;border:1px solid =

#e0e0e0;border-radius:4px;padding:11px 15px;">

This message was sent by nl2k.ab.ca using DocuSign. If you =

wish to stop receiving emails, contact the sender.













----_NmP-cd5c0b696f96855a-Part_1--

Docusign phish from Amazon Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 08:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weDFy-00000000AfI-16xd

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 08:46:42 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jun 2026 08:46:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a9-39.smtp-out.amazonses.com ([54.240.9.39]:52639)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <0100019f1391506a-fff84bac-f005-4ab4-abeb-205fe5540fab-000000@send.mail.relayza.com>)

id 1weC3H-00000000Fdv-2ci0

for www@nl2k.ab.ca;

Mon, 29 Jun 2026 07:29:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=mail.relayza.com; t=1782739718;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=dto4A12oJqxVR6ZHoyjDiX826UyVm2OSt6BDno5m1N8=;

b=jomUqGor6TblVScmiNXyqkhWrrUJ8t88PRtlt3+lhR2VrE+n7r8+RaqfppRD/fC7

9nY+YapccqTRYWCrO82SXlutkNgisC3si8mQvcvwNd5hMsIkO+txMaJLMxTuriVT4gx

AmZZ7ed7R81ooApef9N+esRPRWWCvgWE98MBor1Y=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1782739718;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=dto4A12oJqxVR6ZHoyjDiX826UyVm2OSt6BDno5m1N8=;

b=E7jGg5hPJwfRbsMIQIKCmlUaONZzVE8zw3G9UQ6aS69/KjCfIcfcY6f0kJ95IW+2

o33afXI49NPAe2BYqwHksWHZA1KTGt55vE6N5OFDKa+EJV1cvP+9D9FDvtavQIeJKMR

JIYBwnO8QokA7KGwldcbSxe6C1HgOy+W8jg0BHvQ=

From: DocuSign

To: www@nl2k.ab.ca

Subject: Review Document: EFT Payment Authorization Notice

Message-ID: <0100019f1391506a-fff84bac-f005-4ab4-abeb-205fe5540fab-000000@email.amazonses.com>

Date: Mon, 29 Jun 2026 13:28:38 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-cd5c0b696f96855a-Part_1"

Feedback-ID: :1.us-east-1.Ovct7LTmv/oD6KlfgKSgBWcjD4h08vDb249uZd+hxe52hfiAXJZ0GJLTCZ1XFQR7wFKW2yjK90PdW+N9+hrend/94faXJ54IoK9f5Lg8ROo2cqWckqgnouTiYQyp67wpiXxtTF8UWAxyURb19LFeAoyRMVk9ZL4oiKq3nbReH4g=:1.us-east-1.QSNtDRXSTq9sAuvRl56h5mypgasnQ5yDLNpVzTnziu0=:AmazonSES

X-SES-Outgoing: 2026.06.29-54.240.9.39

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: EFT Payment Authorization Required. Review Documents https://s3.us-east-2.amazonaws.com/adobedocumentsign.blob.core.windows.net.web1016754684231/index.html?s=www@nl2k.ab.ca

Do Not Share This Email



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

[54.240.9.39 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.9.39 listed in dnsbl.ahbl.org]

[54.240.9.39 listed in dnsbl.ahbl.org]

[54.240.9.39 listed in dnsbl.ahbl.org]

[54.240.9.39 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.9.39 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.9.39 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.9.39 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.9.39 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.9.39 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: relayza.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mail.relayza.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.9.39 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[54.240.9.39 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

Subject: {SPAM?} Review Document: EFT Payment Authorization Notice

Docusign phish from Amazon PArt 2



----_NmP-77cf8d388c9d9b24-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



EFT Payment Authorization Required.



Review Documents https://s3.us-east-2.=

amazonaws.com/adobedocumentsign.blob.core.windows.net.=

web1016754684231/index.html?s=3Droot@nl2k.ab.ca



Do Not Share This Email



This email contains a secure link to Docusign. Please do not share this =

email, link, or access code with others.



This message was sent by nl2k.ab.=

ca using DocuSign. If you wish to stop receiving emails, contact the sender.

----_NmP-77cf8d388c9d9b24-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable












initial-scale=3D1">






Helvetica,sans-serif;">






















style=3D"max-width:640px;">












































22px;background:#ffffff;">


0/email/emailLogo.png" alt=3D"Docusign" width=3D"118" =

style=3D"display:block;border:0;">




border=3D"0" bgcolor=3D"#260559" style=3D"border-radius:16px;">










.98.0/email/iconSign.png" alt=3D"" width=3D"48" height=3D"48" =

style=3D"display:block;border:0;margin:0 auto;">


0;color:#ffffff;">EFT Payment Authorization Required.






com/adobedocumentsign.blob.core.windows.net.web1016754684231/index.html?=

s=3Droot@nl2k.ab.ca" style=3D"display:inline-block;background:#735AFF;color=

:#ffffff;font-size:15px;font-weight:700;text-decoration:none;border-radius:=

8px;line-height:44px;padding:0 24px;">Review Documents







13px;color:#130032;line-height:18px;">

Do Not Share This Email



This email contains a secure link to Docusign. Please do not =

share this email, link, or access code with others.




666;text-align:center;background:#f4f4f4;border:1px solid =

#e0e0e0;border-radius:4px;padding:11px 15px;">

This message was sent by nl2k.ab.ca using DocuSign. If you =

wish to stop receiving emails, contact the sender.













----_NmP-77cf8d388c9d9b24-Part_1--

Docusign phish from Amazon PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 07:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weBvx-00000000Cnd-3YWf

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 07:21:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jun 2026 07:21:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a9-5.smtp-out.amazonses.com ([54.240.9.5]:48489)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <0100019f138886ce-ee79ee22-bfbb-49a8-9e07-f2b6ab7d6ae7-000000@send.information.glmilks.com>)

id 1weBu0-000000009Oa-2pEH

for root@nl2k.ab.ca;

Mon, 29 Jun 2026 07:20:04 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=information.glmilks.com; t=1782739142;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=1xCrO6sb1uqC3ZmA+l51/XYCISoVPSbTaCCBY83bbco=;

b=FByJwz9oynKmPqSzlgGKqwgfbQX42oZk61J81EuuNXb/nIYgzaAeoI01zOmW9uLp

GL6xoI+GiTLJdARzaAnBQ7aVALJDhSDKjW3PwcSZX9/a4PanUoofuXpcCgnsKNxWfM4

0XQEncjADAjtFcCL2fdw1bxMLpdeRTBhCoJRiGXM=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1782739142;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=1xCrO6sb1uqC3ZmA+l51/XYCISoVPSbTaCCBY83bbco=;

b=kcyUt8WVudnj8gijh9UZfs3RNJsXmaolC47cZDqJYsiPSnN46Hb40X3IAYczTA1d

hsSQNb5X/Dp6TMqcNJzH7S577EREXaMWi8h7LdV8QmzvR1DjyyNK9VQqhrYtgCu+kHM

hGCYrUPqzxOMUOkFpqB2duyXZwA9dtNtozUuUZtk=

From: DocuSign

To: root@nl2k.ab.ca

Subject: Review Document: EFT Payment Authorization Notice

Message-ID: <0100019f138886ce-ee79ee22-bfbb-49a8-9e07-f2b6ab7d6ae7-000000@email.amazonses.com>

Date: Mon, 29 Jun 2026 13:19:02 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-77cf8d388c9d9b24-Part_1"

Feedback-ID: :1.us-east-1.bfDW8J0E0fzOtTiMS2fA7GN7dkVlxWVCLISxkvBWw/g0ub/L5TYt33Vi/T67V/qoX3cDSAEPqjuPQrC7hejwGDknhFW0rWWxbqHfSDhNEhbDvfWJhO1eAVjypLJD8UI4Rg3ENDjrWLDC6YP/TD5yMSoxu3tNmy2CC/N4y1c+lWs=:1.us-east-1.epbACCJLarUaEI78XZoGREJ9LamRjxMH5pM2kZb64rA=:AmazonSES

X-SES-Outgoing: 2026.06.29-54.240.9.5

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: EFT Payment Authorization Required. Review Documents https://s3.us-east-2.amazonaws.com/adobedocumentsign.blob.core.windows.net.web1016754684231/index.html?s=root@nl2k.ab.ca

Do Not Share This Email



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

[54.240.9.5 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.9.5 listed in dnsbl.ahbl.org]

[54.240.9.5 listed in dnsbl.ahbl.org]

[54.240.9.5 listed in dnsbl.ahbl.org]

[54.240.9.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.9.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.9.5 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.9.5 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.9.5 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.9.5 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.9.5 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.9.5 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Review Document: EFT Payment Authorization Notice

Web/SEO/App spam from Microsoft Outlook PArt 2



--_000_SEYPR06MB5301D044809526EE1685EA86F2E82SEYPR06MB5301apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi there,



I was impressed by the design of your website during my review. However, so=

me errors are preventing it from performing well on Google.



Can I send screenshot of these error?



If Interested, May I send you SEO proposal & price list?



Kind Regards,



--_000_SEYPR06MB5301D044809526EE1685EA86F2E82SEYPR06MB5301apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi there,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I was impressed by the design of your website during my review. However, so=

me errors are preventing it from performing well on Google.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I send screenshot of these error?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

If Interested, May I send you SEO proposal & price list?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kind Regards,








--_000_SEYPR06MB5301D044809526EE1685EA86F2E82SEYPR06MB5301apcp_--

Web/SEO/App spam from Microsoft Outlook PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jun 2026 10:23:00 -0600

Received: from mail-japanwestazolkn19012048.outbound.protection.outlook.com ([52.103.66.48]:64175 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1weEk6-000000000Ei-40aK

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jun 2026 10:22:05 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=OQabNH7+tp3hqbIsyoTe3xYdr65pQHU20Ffdm6oJv+8/OPjxxQOSqOzfCYOFTu8ZyOrqMtzeyp7Msy4kKNWtqPQvCGGLtlvpTi+94wGLttpGFk/XwK/iRraAFBI74pIn9WMvm9b395Lzat/AsFOtVgPoysWFs7liGTmvacPnB9C4vLl1Ruw8JcqJbGngvqiHCLGhh/Yrw+4Ozfuex+TvoqrCeGvMyF8GJOGfi7LzH27m7Imybtq+OLEHbRrl7r4MSzqLQ1azWnglwXMpOj3LwX7bVqjJNxbX11mXwqagcSpIsUb2frOq90sZOb5YonrPa3XxKJ8efWkLT+VYrq75Eg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2R9qeFWt63i5xC7AgCRPqbFScXQPDu2YGbf0skp1JLk=;

b=jm8li6hkFq8kuLWD7ZFraL2V9BKdk1WWD/qfxtH/OxBaHSCm9TDGW1uN5EwjOdLfJ9NbSfchskMhlY31E78XH3p94eIasABQisy3qw4uGd/97CSywD2hVGW1TpZhYryoY806tQQqaFnF4Am4tJnvmIRpsvWb6toSDA1YVYKrLRuxlBqffjluYEwO1tJIXzxWp1kifrRNNFR+vhDmcGUF7j/8Ukyg4OSc1dt9ehYh1LaPno2UV1TteMKgySs2Ip6+kqRsE/Tv3cfyzF8r24c5ATRrNuJBuw/SSfzdxXtvJlqdPsJ34HY5B6POfTbh9P7BgSwITO7vx0r/eCctA5Sfbw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2R9qeFWt63i5xC7AgCRPqbFScXQPDu2YGbf0skp1JLk=;

b=maMQLMajjxDcAToc3EJ9WRKffVCaTI+UXTd+lD3oNghOnWJ2cmjl5wW34vJAb1RsiOvKdBIWVdd4K2/x/I02Y9OiIhzomUHqpSpRubSiSQhjwN3TeK1sEKPK/a8yTZRR/BB1/0oOxxCu/d4WFhxkFrRYHDV+nMs5Brbg5cJ+om7h8BUzWC8K4Jl2vN/KrJeXyjYpjg8+AKrpZYi3PMtyR23mgoy9RzpZ2ov4cVZ4XjNSji6EfPwH8IgDRdRFNftViuZpXGko+9xCSrwgTadK2pH6Ae3fJTTc4NzkFwg9JXBbn9qqPRA3hS0fDoKTQ8pLGVL5MM4tPtiL4240JANo3g==

Received: from SEYPR06MB5301.apcprd06.prod.outlook.com (2603:1096:101:82::8)

by SE3PR06MB8762.apcprd06.prod.outlook.com (2603:1096:101:330::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Mon, 29 Jun

2026 16:20:35 +0000

Received: from SEYPR06MB5301.apcprd06.prod.outlook.com

([fe80::d3c4:27db:dfc9:d165]) by SEYPR06MB5301.apcprd06.prod.outlook.com

([fe80::d3c4:27db:dfc9:d165%5]) with mapi id 15.21.0159.018; Mon, 29 Jun 2026

16:20:35 +0000

From: Sehbaj khan

To: Sehbaj khan

Subject: Re: Yes ?

Thread-Topic: Yes ?

Thread-Index: AQHdB+J1WSDgFtQr70eNuUgxsF6w6Q==

Date: Mon, 29 Jun 2026 16:20:35 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR06MB5301:EE_|SE3PR06MB8762:EE_

x-ms-office365-filtering-correlation-id: 853d3dc3-3b55-41da-35c8-08ded5fa5969

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|16051099003|8062599012|24021099003|19110799012|15080799012|15030799006|39105399006|37011999003|24121999003|22091999003|8060799015|2604032031799003|704163111799003|31061999003|55001999006|25010399006|4140399003|41105399003|39145399003|40105399003|18071099003|26104999009|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?zvrjSV9rLbtXQQp9w9/4AG+3FfuRg2Fa2VY3C192Bek87krgFr/nDzMNT8?=

=?iso-8859-1?Q?/8DUAnJbDvG4T2dec8ZWV8TR78CGM0sTY/OaD+SFJytJYVoxZPIE27x0ve?=

=?iso-8859-1?Q?YNO8tkA+9ct8sZlNiSwLNl8a9hSCzUazr8/Fli6BTU+rf0UXgjS5cbgTND?=

=?iso-8859-1?Q?qFWL0Q7mfsPbx9dZdqInTb0Y4gwb/VnbmCM/spCZTyE80lfwd+mTaSFnmg?=

=?iso-8859-1?Q?x44LZqPQuLvhnGPDh8lZMTimKfK7XyezUR216WfDIKpVHxHgq2sjI2gdPX?=

=?iso-8859-1?Q?1iC55q0vCOx4HFUUSQVVowaqGRMNi06gYLPbXJO9FhwA1kRadDM5LbFd42?=

=?iso-8859-1?Q?owusRi0r/g0geXcYT30XNVO26NRwfOTgYzS3Jdgf1OKW9o3ENJ8oVKwIic?=

=?iso-8859-1?Q?mCDD8ScDjAA0fOBX3BM/GYQJ3kKHyD0DAbR8L1d8SOwjX17p4OZGmUITn9?=

=?iso-8859-1?Q?6smutk6GB90/0YRQ47E66mzluLK2EKXsgizxw/kcSySNBsVsWA19rPHroB?=

=?iso-8859-1?Q?129jXkOYSzq3bC5z3pD9M19aVDlg9z0gBtOaNXZCtSO1CS99IE/eLGcOI+?=

=?iso-8859-1?Q?gakQ/F5ulWWhAtcIRypCqSFiXNT11r0c6Oh52AGbidKquGNmIsB8UzR/yP?=

=?iso-8859-1?Q?Y+qHvy0wWQscU8xq7iLgllJotX54R5CAEf86Dg/H/Mu9DCv2Xwt/uhORZz?=

=?iso-8859-1?Q?fokcXvY26dtI9oQeG3F+p4OqencNMSj2dmWtyAGxO0E4jGDIkM8xj/3dwe?=

=?iso-8859-1?Q?8kZ30+wgep1ixJ0iXSwHs9BHGPaEw6JdTpJQIFMrlWZwe8z3dCTWjnCYCA?=

=?iso-8859-1?Q?wrWZiVfkuEQk3qT8G/VVZ9HwDog9LZ7mgVujkvT9WgM8TYtsCDlAXufBYk?=

=?iso-8859-1?Q?410RnLxfwlHoflJC1L/+dojlOsoLIrO0kU/YL1mQK5eXX2BK0i6hCX5qUZ?=

=?iso-8859-1?Q?O9pH1Uzd9hq/rW53yv+iM7XTgHHT3+xBbJgtfmmMs9JzSGNUpKc7rmhs1G?=

=?iso-8859-1?Q?SNlHAHWVAxa1gkoiWLYTxlwb4mPPAekEqpf529nOSIZy8LtyhLoUYYU1TO?=

=?iso-8859-1?Q?WgBSb3LVgpOodsInlpGG59ecd95doLgxQXpS1VWMAd2a3zPq+3oBG2nHJ1?=

=?iso-8859-1?Q?VUC/l4o3+mELthls8Awcpmz02M9y+PbUEH8AkgQLddIg91l98dXZ/NtCfn?=

=?iso-8859-1?Q?2g/IYTlLOpFuKnCsNrzkVI+7xGVsvBH6JH7/IUFd1L4xXqbNTVLynVkSOj?=

=?iso-8859-1?Q?kGGqX9IfNqlPwy7ROZT7R2jeGR3jzTBC+Osf38DRy+JjBnLFFKlKZkbGhm?=

=?iso-8859-1?Q?2ZLCaXxXbRDjelOs6heOEAEhXUyyjU0KJ777GB4FrC7vxYvVJ5IHsUdJ0g?=

=?iso-8859-1?Q?9IqpZLyZ7Y/oFVnJZ9JG6jgqikfRhrEg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?V7fMHZcx1YyP/ofgB7Vy2WVk47pN1bZr89rIOAeu5H1hdiKjQi1KHuDslX?=

=?iso-8859-1?Q?wKe7m3kvCQUSlW/jnBVLQetSACfrmBGVpFokXiYj4GCg4OzJLht3yEqo7v?=

=?iso-8859-1?Q?srMiowWq0b1vB+b7Z2btgHwJiOaCWMXYHHT680nHPTBBcPmEMLX57KqB6S?=

=?iso-8859-1?Q?my3KqLa58O7qLYsWFaj4pDHgjYBuE1/3ast4DHQPt0/wQ/Fai3tkNXgid1?=

=?iso-8859-1?Q?bSD+U6E02yxOSyfkeUgu8btFSLFFyL4KpcCKE2k0SPJuXkXc0kodwuIuL0?=

=?iso-8859-1?Q?lzIa/7u4/HexLWvgnpeG3xTMwZrp5eetDcqtg4AZiFecxja5QUIBrURkmW?=

=?iso-8859-1?Q?N2emskGBGNdujZd6nCpClN0n3bpEnGYqWqnipCPoxQcAHq5J1nJbctHYU6?=

=?iso-8859-1?Q?7JekPLVvskeGzdjlUKLDlngc7ILimWd6YeZBlUMX3thqIYUhtB31EMYuDT?=

=?iso-8859-1?Q?LMEkm0P1zRXb1VoRZ+FD1TNNVVaGcCm5SS94Wgu2cP6L+NdnzVN3bgNuxc?=

=?iso-8859-1?Q?pV13ZK3u51Ag2vVdc8doYyhyw9/lKZ3QAG8pAYDZddAO+nRoQzQiSv7ogC?=

=?iso-8859-1?Q?5uERIGufRJOmENmd/g4Bd/rQvMe+f6DKFY0k4+/kKd7mpVTn3JnvdbDd0Q?=

=?iso-8859-1?Q?VPUBLhQLbcNImhKQmX2cq2RO+glesJIzaYaSW93HGw5GKH0za4SdQ7yudd?=

=?iso-8859-1?Q?deVPWACTlszxUPc/lQ1aolc2zmOOnjqGCBUh6Wl4X84FS4tsnB+iZFT8pT?=

=?iso-8859-1?Q?TY3jltGX0w9F8K3MUvyHydZLW7RD2jEDiVgwORgY5r9f1Grj0SZC8wyae3?=

=?iso-8859-1?Q?51T3kVUkJ1TQXrBGNAh0fzsjQ5y6/ZuLYZw1ZmaTLYCD7VC4wRc+zQnFxa?=

=?iso-8859-1?Q?NPwo137Y/ZPJuYQv5bQ8IJWsY3peIlD3qKv3KUFfPO73FnZQW1cGwa53zo?=

=?iso-8859-1?Q?1gGOSLlNz2shIzLbHbxjmjSPifDzR7ip7R91mU4RN7g406xnpu5yCvQWhU?=

=?iso-8859-1?Q?qneB44/3XkL6OG6ObE6+pQi+W+cIAprV/KvRwCirUFEiahlhumUa9FjzGU?=

=?iso-8859-1?Q?EF3qFp3ti7bBfZ6iBfg2rpniurINWlZTxbRohVVtVA0iFfe7ulKwP4m+oL?=

=?iso-8859-1?Q?IBNUDsEFGw6aMW+P79IAhF9527Ae+hudBDKcjhy2fWU8n2VLNvKOGM+oaF?=

=?iso-8859-1?Q?ahx4UK+JWsPe1kzq9LEiBZ7kifDbrNTDisWldpFkbm9phZTjEkwk4orm/6?=

=?iso-8859-1?Q?heBl96gx6ZyZ4BXZBYd02YtE5e+9qdk+O5ZZQLd/1TcqXsqsYcLPaJwqcI?=

=?iso-8859-1?Q?BDwWqK0hr0MRfyYud4uxRxuRKcjE4tVeES+U60OxRZOr1AhEK2cqXE7pt+?=

=?iso-8859-1?Q?hnF+Gew0teG/a6Oe7g7UEcy7o6a77asjEJwIkSjpgqWRmTS4fMTNmwFgrN?=

=?iso-8859-1?Q?inNxVE5NTRevHygck6YqPZiBXkBzMvdtRlJqvHxLcLM5wIq/6HRAyrteeo?=

=?iso-8859-1?Q?yuy3O045EQLhKTE9h0P/qv?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR06MB5301D044809526EE1685EA86F2E82SEYPR06MB5301apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR06MB5301.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 853d3dc3-3b55-41da-35c8-08ded5fa5969

X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2026 16:20:35.1415

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE3PR06MB8762

Web/SEo/App spam from Google Gmail Part 2





--0000000000006d00fb0655625337

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




rif">God day,


gia, serif">I wanted to follow up in case you missed my earlier email.
t>

Let=

me know if you'd like to review our packages and pricing.

p>

Best Regar=

ds,

Robert


<=

div class=3D"gmail_quote gmail_quote_container">

mail_attr">On Thu, Jun 18, 2026 at 8:28=E2=80=AFPM Robert <
ilto:r87284545@gmail.com">r87284545@gmail.com
> wrote:

kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:=

1px solid rgb(204,204,204);padding-left:1ex">

=3D"font-family:georgia,serif">Hi,


erif">

orgia,serif">I still have the notes I prepared on improving your search vis=

ibility.



mily:georgia,serif">Would you like m=

e to send over the details?

=

Kind regards,

font-family:georgia,serif">Robert=



_attr">On Wed, Jun 17, 2026 at 5:18=E2=80=AFPM <
545@gmail.com" target=3D"_blank">r87284545@gmail.com
> wrote:

v>

r-left:1px solid rgb(204,204,204);padding-left:1ex">


5,255)">Hi,


gb(34,34,34);font-size:small;background-color:rgb(255,255,255)">
=3D"tahoma, sans-serif">After reviewing your website, I found a few opportu=

nities that may help increase organic traffic and leads.


=3D"color:rgb(34,34,34);font-size:small;background-color:rgb(255,255,255)">=

Interested in seeing them?<=

/p>


,255,255)">Best regards,
Robert
=











--0000000000006d00fb0655625337--