Canada post phish part 3

Posted by Dave Yadallee on


 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 

















If you no longer wish to receive these emails,


style="color: #999999; text-decoration: underline;">

click here to unsubscribe






 





 





 







--===============0086468229306231895==--



--===============8157430855939824018==

Content-Type: image/png

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="111.png"



...



--===============8157430855939824018==--

Canada post phish part 2

Posted by Dave Yadallee on
--===============8157430855939824018==

Content-Type: multipart/alternative; boundary="===============0086468229306231895=="

MIME-Version: 1.0



--===============0086468229306231895==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

















 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 





 

Try again to complete your payment!








Hi there!




Looks like a recent payment attempt for your account salahkarim has failed. Please double-check your payment details or try a different payment method.







































Transaction ID: 10000097867149










If your recharge failure is caused by a payment timeout, this may result in a delay in receiving the email. If you have already successfully made the payment in other transaction, please disregard this email.





View Transactions











 






 





 





 





 



Canada post phish part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Jun 2026 04:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waWM0-000000009Pk-15vf

for dave@doctor.nl2k.ab.ca;

Fri, 19 Jun 2026 04:21:40 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Jun 2026 04:21:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp-out-4.mail.aquaray.com ([95.128.42.235]:53981)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waPYT-00000000Fot-1E8w

for sales@nk.ca;

Thu, 18 Jun 2026 21:06:19 -0600

Received: from mail.aquaray.com (mail-proxy1.aquaray.com [95.128.42.70])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits))

(No client certificate requested)

by smtp-out-node-1.mail.aquaray.com (Postfix) with ESMTPS id 7A6BF652B1

for ; Fri, 19 Jun 2026 04:31:52 +0200 (CEST)

Received: from [111.90.159.34] (unknown [111.90.159.20])

(Authenticated sender: yoan.jamardo@te83.fr)

by mail.aquaray.com (Postfix) with ESMTPA id 88D0C61411

for ; Fri, 19 Jun 2026 04:31:51 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mounir.fr; s=ar1;

t=1781836312; bh=R7Tr3sxbnf+hJHyDhZV2rnvFnev/FyFQnhYVjvBdWcw=;

h=From:To:Subject:Date;

b=JD+n6qaSog456SFuPvRRZdXPoZgz5T0C97o2bmBMh8vJ/bvQ0cRFLSBFQDsnlr34B

8NAdjwTb7cyEi1IEoC4M+fMD71Jjtp4efpOJFJ1f0C3lZcVn/4d4r23mn8c1Yem41c

VWMnYG+aOic4DKtqGhmBgfxMzOCQl4h8Acg5cbS3zLN/TybfPhi/78kW9FZMEga/bT

Gn+Plb7mgvJVH1J4gdwbgoFBsVUNGyG/CrfJyy5MeWYDEexHXv77LavAbDsFZZcepN

BLhQws5rZqzbG0hhFmNyrjUwPpwgkFEOzMNcUBdcqsvfMAL7huvybwE30gwix9xvia

NnI+mvhAky1cA==

Content-Type: multipart/related; boundary="===============8157430855939824018=="

MIME-Version: 1.0

From: Delivery

To: sales@nk.ca

Subject: =?utf-8?q?=EF=BB=BF=EF=BB=BFCanadaPost=3A_Your_package_could_not_be_delivered!?=

Message-Id: <20260619023151.88D0C61411@mail.aquaray.com>

Date: Fri, 19 Jun 2026 04:31:51 +0200 (CEST)

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Try again to complete your payment! Hi there!



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[111.90.159.20 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.70 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

[95.128.42.235 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[111.90.159.20 listed in dnsbl.ahbl.org]

[111.90.159.20 listed in dnsbl.ahbl.org]

[111.90.159.20 listed in dnsbl.ahbl.org]

[111.90.159.20 listed in dnsbl.ahbl.org]

[95.128.42.70 listed in dnsbl.ahbl.org]

[95.128.42.70 listed in dnsbl.ahbl.org]

[95.128.42.70 listed in dnsbl.ahbl.org]

[95.128.42.70 listed in dnsbl.ahbl.org]

[95.128.42.235 listed in dnsbl.ahbl.org]

[95.128.42.235 listed in dnsbl.ahbl.org]

[95.128.42.235 listed in dnsbl.ahbl.org]

[95.128.42.235 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[111.90.159.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[111.90.159.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[111.90.159.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[111.90.159.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[111.90.159.20 listed in sbl-xbl.spamhaus.org]

[111.90.159.20 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[111.90.159.20 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[95.128.42.235 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[95.128.42.235 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?=EF=BB=BF=EF=BB=BFCanadaPost=3A_Your_package_could_not_be_delivered!?=

Instagram phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMbs-00000000Gba-0TOc

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:57:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:57:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f198.google.com ([209.85.214.198]:54484)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMHj-00000000AKo-0UuX

for sales@nk.ca;

Thu, 18 Jun 2026 17:36:42 -0600

Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2c725d3e886so550895ad.0

for ; Thu, 18 Jun 2026 16:35:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781825742; x=1782430542; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=mkYzyBpP+4jIiRghpElggA8c6beR+nQkQBLvocy9p+E8ZZPS6W2iD4viP7HpVqFPZq

uVeFV7TbwkAQ/DcAN9GkdAXoW5Bqq6EVh1Ltf1JzBwQP3vLtvjvjx7mtkJzaSV323Rya

TCEcgl5YZOamowfs1kjTOBYYCfxNWtpnb2vsuHwVpvABWPhOEtn+tsL5ZxEKX9sxFTka

jAYNMuDjNFD1Lu1WeNVnqYw7AMbjeGnz3iP5IO0+lr9X80K5aY52ncZXDPyYZ4kTjPIE

zKpDIW8yEaASVjd9FPtRZS5WAwaIYm+uyHETOyPw7mVWZtFzLN5vCrRBulbTJPKl7F8w

mSlw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781825742; x=1782430542;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=qJ/Qq3A5WNSvXin/y38XPWzLm7DBEwewSlQkMEFlUJKlFpdg0JmtEPr4KYA0l0AuCx

two+wGlAEQfoFEl6+3WQbImMMufnEpTZXkvtoNL57oHWjrWFwetWocU7Zvm0RMXz2+IB

mGDJZUKgAduSBR/h92vqn9qGwdVUaIPf83/YKYIZTLE0vbLCJ0WT3vWnNv9cXUOWyJ1X

xQgIZzaYjyWqHUnTm/xdNOcgXDv33FWc/PoffZrGv1syDWCRh8r+HRZ887t77Iipuyr/

q9LGB3fphM5nEUs93fBKp1NlCvLSMDpkJS22c+yKxDkGMLdB0FtpgOrYVByAuZSQP0UB

CjXw==

X-Gm-Message-State: AOJu0YylvRLbnCcrUqKlaYnQO6JZV7irjRG8MWEkELbBbkffCTegx+f/

HEHsbEns6gxXIf/6fHtjLKZt/Jpzwh5g1tgeRf0DXw6T1xiiSLRkXYyIcoYdYXCgmAuLYPvbRA9

ykEgy9g==

MIME-Version: 1.0

X-Received: by 2002:a17:902:d4d2:b0:2c2:25d8:d5a3 with SMTP id

d9443c01a7336-2c718c765c1mr12979285ad.3.1781825742533; Thu, 18 Jun 2026

16:35:42 -0700 (PDT)

Message-ID:

Date: Thu, 18 Jun 2026 23:35:42 +0000

Subject: Netknow Internet Service, Get More 100,000 Instagram Followers

From: finideika@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.





Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: instatool.site]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[finideika(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.198 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.198 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service, Get More 100,000 Instagram Followers





Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/store/free/?netknowyeg ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Instagram phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMbs-00000000Gba-0TOc

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:57:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:57:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f198.google.com ([209.85.214.198]:54484)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMHj-00000000AKo-0UuX

for sales@nk.ca;

Thu, 18 Jun 2026 17:36:42 -0600

Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2c725d3e886so550895ad.0

for ; Thu, 18 Jun 2026 16:35:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781825742; x=1782430542; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=mkYzyBpP+4jIiRghpElggA8c6beR+nQkQBLvocy9p+E8ZZPS6W2iD4viP7HpVqFPZq

uVeFV7TbwkAQ/DcAN9GkdAXoW5Bqq6EVh1Ltf1JzBwQP3vLtvjvjx7mtkJzaSV323Rya

TCEcgl5YZOamowfs1kjTOBYYCfxNWtpnb2vsuHwVpvABWPhOEtn+tsL5ZxEKX9sxFTka

jAYNMuDjNFD1Lu1WeNVnqYw7AMbjeGnz3iP5IO0+lr9X80K5aY52ncZXDPyYZ4kTjPIE

zKpDIW8yEaASVjd9FPtRZS5WAwaIYm+uyHETOyPw7mVWZtFzLN5vCrRBulbTJPKl7F8w

mSlw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781825742; x=1782430542;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=qJ/Qq3A5WNSvXin/y38XPWzLm7DBEwewSlQkMEFlUJKlFpdg0JmtEPr4KYA0l0AuCx

two+wGlAEQfoFEl6+3WQbImMMufnEpTZXkvtoNL57oHWjrWFwetWocU7Zvm0RMXz2+IB

mGDJZUKgAduSBR/h92vqn9qGwdVUaIPf83/YKYIZTLE0vbLCJ0WT3vWnNv9cXUOWyJ1X

xQgIZzaYjyWqHUnTm/xdNOcgXDv33FWc/PoffZrGv1syDWCRh8r+HRZ887t77Iipuyr/

q9LGB3fphM5nEUs93fBKp1NlCvLSMDpkJS22c+yKxDkGMLdB0FtpgOrYVByAuZSQP0UB

CjXw==

X-Gm-Message-State: AOJu0YylvRLbnCcrUqKlaYnQO6JZV7irjRG8MWEkELbBbkffCTegx+f/

HEHsbEns6gxXIf/6fHtjLKZt/Jpzwh5g1tgeRf0DXw6T1xiiSLRkXYyIcoYdYXCgmAuLYPvbRA9

ykEgy9g==

MIME-Version: 1.0

X-Received: by 2002:a17:902:d4d2:b0:2c2:25d8:d5a3 with SMTP id

d9443c01a7336-2c718c765c1mr12979285ad.3.1781825742533; Thu, 18 Jun 2026

16:35:42 -0700 (PDT)

Message-ID:

Date: Thu, 18 Jun 2026 23:35:42 +0000

Subject: Netknow Internet Service, Get More 100,000 Instagram Followers

From: finideika@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.





Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.198 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: instatool.site]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[finideika(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.198 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.198 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service, Get More 100,000 Instagram Followers





Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/store/free/?netknowyeg ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Chinese Products spam Part 2

Posted by Dave Yadallee on
中国发加拿大整柜价格 5.15-5.31



Hi 家人们

我是深圳市云松跨境物流有限公司的Julin，



我们专注于美加欧澳墨西哥国际物流13年，能做CIF,FOB ,DDU,DDP,LDP等条款.







请问本周有整柜发加拿大吗？



我们有很好的整柜价格，可以为您节省成本，



目前我们帮单一客户节省了30万美元的成本。



我们擅长DDU,DDP,LDP等贸易条款，可以合理的帮您优化物流成本，减少支出。



欢迎扫码加微信，随时详聊!



祝您万事如意，生意兴隆，货如轮转，财源滚滚。



整柜价格

起运港 目的港 价格（40HQ） 备注

深圳/广州/宁波/上海/义乌/青岛/天津/长沙/郑州/佛山/中山/泉州 温哥华 2830 这个是海运价格

埃德蒙顿 4000

卡尔加里 4000

多伦多 5015

蒙特利尔 5015

温尼泊 5500















Obtain the latest product info by choosing . Keep My News Flow



Need to pause messages? Go to Opt Out Settings.





Miss Julin



深耕美加专线13年



DDU/DDP双清专线,让您省心省力省钱



Shenzhen Yunsong Cross-border Logistics Co.,Ltd



Room 2806, 28th Floor, Building 1, Evergrande Metropolis Plaza, Bantian Street, Longgang District,



Shenzhen City, Guangdong, China



深圳市龙岗区坂田街道马安堂社区环城南路15号



恒大都会广场1栋2806



Phone : 13798412845



Email: julin@yunsongfreight.com











在2026-06-13，Julin 写道:



-----原始邮件-----

发件人： Julin

发件时间: 2026年06月13日 周六

收件人： [sales ]

主题： 加拿大FOB/DDP/LDP ，一箱也能发



加拿大FOB/DDP/LDP ，一箱也能发

Hi 亲们



我是深圳市云松跨境物流有限公司的Julin，



我们专注于美加欧澳墨西哥国际物流13年，能做CIF,FOB ,DDU,DDP,LDP等条款.

下面是不同的重量发加拿大的价格，一箱也能发，几百元就到加拿大，双清包税到门。

欢迎扫码加微信，随时详聊!DDU/DDP双清专线让您省心省力省钱。

祝您万事如意，生意兴隆，货如轮转，财源滚滚。





散货价格

起运港 目的港 价格（40HQ） 备注

深圳/广州/宁波/上海/义乌/青岛/天津/长沙/郑州/佛山/中山/泉州 温哥华 8.3 散货包含海运费，清关，关税，派送

埃德蒙顿 7.5

卡尔加里 7.5

多伦多 8.1

蒙特利尔 8.1

温尼泊 8.2







Maintain your product-savvy edge with . Stay Updated on News



If you prefer to exit, choose Review Communication Options.





Miss Julin



深耕美加专线13年



DDU/DDP双清专线,让您省心省力省钱



Shenzhen Yunsong Cross-border Logistics Co.,Ltd



Room 2806, 28th Floor, Building 1, Evergrande Metropolis Plaza, Bantian Street, Longgang District,



Shenzhen City, Guangdong, China



深圳市龙岗区坂田街道马安堂社区环城南路15号



恒大都会广场1栋2806



Phone : 13798412845



Email: julin@yunsongfreight.com













Chinese Products spam Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMbZ-00000000Gav-1EZz

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:57:05 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:57:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m478512566.xmail.ntesmail.com ([47.85.125.66]:54139)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waKXz-00000000EXv-0Tyu

for sales@nk.ca;

Thu, 18 Jun 2026 15:45:39 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1065700_1471597565.1781819055566"

To: sales

Reply-To: julin@yunsongtrans.com

Subject: =?UTF-8?B?5Lit5Zu95Y+R5Yqg5ou/5aSn5pW05p+c5Lu35qC8wqA1LjE1LTUuMzE=?=

X-Priority: 3

MIME-Version: 1.0

Received: from julin@yunsongtrans.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 19 Jun 2026 05:44:15 +0800 (GMT+08:00)

From: Julin

Date: Fri, 19 Jun 2026 05:44:15 +0800 (GMT+08:00)

X-WM-Tid: 0a9edcb11d6003c0kunmb25dfaaa154102

DKIM-Signature: a=rsa-sha256;

b=YgTahRGhzYT4kDEwlMYdEzJeYkWsmWm3XZ8nsYkcpAqgAqU98GWjLdiM0vJ2Z/SSxpPKg8YMQ5qKufBGAzRwt7PlUI0i2y8aodV/CfwQWW77hL0siFkCyQ4z9mIH9N1fqE9ORr1JbHnKxTGlnF4IcoNDFzFeNhunRfnxER570q4MnIqXGRStf9wUFazr9WoaufhqPgl1fPGdcDIufXPwftLXYkWtgpMPCOHuC54mAp7LdBhFjJpFYkLQfhP4FskeIusb5nGf7w0VnLp7xdeUuz9nQMIZC5lGkbCRuW6fQs+NAHFRZGKRAKfOHLt4EvHuH9lqGgtFGQligQ+6MX6v6Q==; s=default; c=relaxed/relaxed; d=yunsongfreight.cn; v=1;

bh=8qSRtOsCN9W7+ujB507ZPAFqQlcwjSxEquMDD1p5se0=;

h=date:mime-version:subject:message-id:from;

Message-ID:

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ä¸­å›½å‘åŠ æ‹¿å¤§æ•´æŸœä»·æ ¼ 5.15-5.31Hi 家人们 我是深圳市云松跨境物流有限公司的Julin，

æˆ‘ä»¬ä¸“æ³¨äºŽç¾ŽåŠ æ¬§æ¾³å¢¨è¥¿å“¥å›½é™…ç‰©æµ13年，能做CIF,FOB ,DDU,DDP,LDP等条æ¬

[...]



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

[47.85.125.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.85.125.66 listed in dnsbl.ahbl.org]

[47.85.125.66 listed in dnsbl.ahbl.org]

[47.85.125.66 listed in dnsbl.ahbl.org]

[47.85.125.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.85.125.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.85.125.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.85.125.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.85.125.66 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.85.125.66 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 OPT_OUT BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?B?5Lit5Zu95Y+R5Yqg5ou/5aSn5pW05p+c5Lu35qC8wqA1LjE1LTUuMzE=?=

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMbM-00000000GaM-1vVO

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:56:52 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:56:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.neevetech.com ([162.144.232.138]:59804)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waJml-00000000B32-1dsw

for root@nl2k.ab.ca;

Thu, 18 Jun 2026 14:56:36 -0600

Received: from [64.77.244.139] (port=47226 helo=streamscape.com)

by server.neevetech.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1waJly-0000000016v-3VIO

for root@nl2k.ab.ca;

Thu, 18 Jun 2026 16:55:36 -0400

Reply-To: autosibila@vip.hr

From: "MA"

To: root@nl2k.ab.ca

Subject: 1 - 138 / Important Message for: root@nl2k.ab.ca

Date: 18 Jun 2026 13:55:35 -0700

Message-ID: <20260618135535.24ED4C2C782E31E7@streamscape.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.neevetech.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - streamscape.com

X-Get-Message-Sender-Via: server.neevetech.com: authenticated_id: differers@streamscape.com

X-Authenticated-Sender: server.neevetech.com: differers@streamscape.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I am looking to engage you in profit oriented

ventures, I have the directive of SHK Mubarak from Qatar to look for a foreigner

that is capable of managing 200,000,000 U.S.D held abroad. If you are interested,

kindly get back to me for further discussion.



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[64.77.244.139 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

[162.144.232.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[162.144.232.138 listed in dnsbl.ahbl.org]

[162.144.232.138 listed in dnsbl.ahbl.org]

[162.144.232.138 listed in dnsbl.ahbl.org]

[162.144.232.138 listed in dnsbl.ahbl.org]

[64.77.244.139 listed in dnsbl.ahbl.org]

[64.77.244.139 listed in dnsbl.ahbl.org]

[64.77.244.139 listed in dnsbl.ahbl.org]

[64.77.244.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[162.144.232.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[162.144.232.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[162.144.232.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[162.144.232.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[64.77.244.139 listed in sbl-xbl.spamhaus.org]

[64.77.244.139 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[64.77.244.139 listed in zen.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[162.144.232.138 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[162.144.232.138 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} 1 - 138 / Important Message for: root@nl2k.ab.ca









Greetings,
I am looking to engage you in profit orient=

ed ventures, I have the directive of SHK Mubarak from Qatar to look for a f=

oreigner that is capable of managing 200,000,000 U.S.D held abroad.<=

/P>

If you are interested, kindly get back to me for further =

discussion.



Best regards,
MA.

--
This message has been s=

canned for viruses and dangerous content by MailScanner, and is believed to=

be clean.



Canada REvenue Agency Phish From Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMb2-00000000Ga4-2I83

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:56:32 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:56:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f177.google.com ([74.125.82.177]:46286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waIp3-000000006sr-2DC5

for root@nk.ca;

Thu, 18 Jun 2026 13:54:57 -0600

Received: by mail-dy1-f177.google.com with SMTP id 5a478bee46e88-30bbe98c3f0so1032091eec.0

for ; Thu, 18 Jun 2026 12:53:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781812430; x=1782417230; darn=nk.ca;

h=mime-version:list-unsubscribe:from:to:reply-to:message-id:subject

:date:from:to:cc:subject:date:message-id:reply-to;

bh=x82L/I0DuoFbL065S96y5jk6N6J/alfz4jMr+xQtI+M=;

b=SYO5AErZSgzdZ8tIwefhrIPFPCqyElXocNfoETj1PkAu/39CCz4xnMya/0ss1gqPnK

v41sDSJcRASAaNXcqKVJH0UbLwrXAjeerFEeSHs+3Ev3VCzpSbQqvtWUqSrxgyL4dtkN

T+W2ApxHPHclzeokfVng+sApSzdPP5zAYV4GZD3DyxQKIueBb5aySbc4ZBP8X5KLMqDv

3BAonD8cbmoAR5bdPKL8N7HZSi6HBvdwtrmUBXKUaWJZrbUeYc8Tld+AKkgM/lm7d9JU

iwzxKg+vugJU7jmSd2B+FftaSOfkArXml9co36aWUl5vz3kEKZjlQNkA/pPDR0iAcI4q

39sQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781812430; x=1782417230;

h=mime-version:list-unsubscribe:from:to:reply-to:message-id:subject

:date:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=x82L/I0DuoFbL065S96y5jk6N6J/alfz4jMr+xQtI+M=;

b=BfM/d6tr7t9PZQfl/lgfn8VHjcSY3gCP/RMDhFPiBwasI+yB3Qu4yckrDJtWnbDSB4

2PQg/W2GItXTlp0EQZT/yLUZUTi4AR/zckp/vl27yDukUSS9+FtfIdULlx9ChK/4NslJ

qrWbiYh18ph/zM1l05zJnZaSk2pC7JpsUxU/jei+GX83VLQ8Vkc+A22bmXzV5CDIYbhs

sFjVYCOE5HZhhSMY3r7fNko9JhirCkdzr7PNqaaXxOQI36UaCWht+VS6B3p1jSKsPsEq

LpTYWFhm3D8ThZWd6xQZn8pR8sUNihNFSsQNZ/QkR5bGb8VTUEKAe5dTEHBjDA0v4Dr/

FSmg==

X-Gm-Message-State: AOJu0YxK8HoI1VYKfMfKvdKp9MiLYRQmi0lGXxrYKWPEZvyYSqkMByy+

kgvEb5wZym6+I82F0U9x3f5vfmD2YpkqBGUeEL4TL7LnahpBZ7CPF4dw9drF06X6zQo=

X-Gm-Gg: AfdE7cmHnDN6kCl+DWQROa5/KqAOBuU7FrXf0tAFYz+mCVCtIPnfFb//oB59MkjYnrP

X8LeBXbqj/U+KZ25t1AJFSbPPeREw4cpYbyx9CHETYfKubsd95s3buRE8qw/4BYgnar8F9W+QG6

JuXjUet7ozpp/gpmpQ0I6+nN2W5EC5RaP6tncy4iJHswYqPreqbh6/0/5+tj5bcLHfwTn0AXW+6

L3Ld+0MqljkPjpmGbDng4Ix592+pOysfq+Rcns4tY5v6FkM+W6rpFDgjWl4PbuWC1sMYrZuNIP8

CulYeV72P2+g568BXOAAFxVVx5SM1YsxAWES0FYrsIspfpRbd3p2NYwri6o7lXEYV2qrLBaMnEm

+JSAieQvPPgot06pXMLNOfAxjeR/yXiRoYbHjUsonmINPJQLAPQs6tj+xwKL4IDtQulAL68lZNL

7b39wSQpnPP80h4v7Cqignjn3gt7VBTAcDLJjW36bS+UYkvFgB1NtsZdWEhTtvV2DAncqjJg+f1

4JVPMEieDgImrHRdiY9CMwJKfUNvLifJP9ShG56juBJbxD8JyNK4KNbltkAIvsHnY3gvVt1Qqdz

x1YuDLXrdw==

X-Received: by 2002:a05:7300:641a:b0:30b:d344:abcf with SMTP id 5a478bee46e88-30c06fb6c1fmr692095eec.5.1781812429515;

Thu, 18 Jun 2026 12:53:49 -0700 (PDT)

Received: from EC2AMAZ-8JRQ46R (ec2-13-52-220-91.us-west-1.compute.amazonaws.com. [13.52.220.91])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-30c06d5c0adsm412443eec.27.2026.06.18.12.53.48

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 18 Jun 2026 12:53:48 -0700 (PDT)

Date: Thu, 18 Jun 2026 19:53:48 +0000

Subject: Please Review Your Updated T4 Summary [Ref: 22D93]

Message-Id:

Reply-To: Canada Revenue Agency / Agence du Revenu du Canada

To: root@nk.ca

From: Canada Revenue Agency / Agence du Revenu du Canada



X-Mailer: Microsoft Outlook 16.0

List-Unsubscribe:

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="=-51+5WgXdnCBqgODjuL/5og=="



--=-51+5WgXdnCBqgODjuL/5og==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 8bit



                   English version ** La version française suit ***



The Canada Revenue Agency (CRA) sent 7742810 0235 RT0701 new mail online called:

Notice of collection

This mail require your attention.



view "Mail/PDF Attached" to read your mail.

If you signed up to receive mail online but don't have My Business Account, use the attached pdf to see your statements.




This is an automated email message. Please do not reply.



Version française ** The English version precedes ***



--=-51+5WgXdnCBqgODjuL/5og==

Content-Type: application/pdf; name=CRA-41028318-2026-6-18.pdf

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=CRA-41028318-2026-6-18.pdf



...



--=-51+5WgXdnCBqgODjuL/5og==--

WEb/SEo/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on


--_000_PUWP216MB25772A6D5B91E961425F31EBF7E32PUWP216MB2577KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



I hope you're having a great day.



I wanted to see if improving your website's online visibility is something =

you're currently considering.



I can send our SEO packages and pricing if you're interested.



Best regards,



Jack Smith





From: Jack Smith



Sent: Tuesday, June 16, 2026 8:49 AM



To: sales@nk.ca



Subject: Jack - Reach High Value Prospects







Hello,





I hope you're doing well.





I=92m writing to introduce our affordable professional services that can he=

lp your business stay ahead of the competition. Whether you need to improve=

your online visibility or enhance your brand image, we have the right solu=

tions for you.





We focus on providing high return on investment (ROI) strategies that fit b=

usinesses of all sizes.





Can I send you a quick overview of our services and special packages?





Best regards,



Jack Smith



Business Development Executive



--_000_PUWP216MB25772A6D5B91E961425F31EBF7E32PUWP216MB2577KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">





Hello,



I hope you're having a great day.



I wanted to see if improving your website's online visibility is somethi=

ng you're currently considering.



I can send our SEO packages and pricing if you're interested.



Best regards,



Jack Smith








From: Jack Smith



Sent: Tuesday, June 16, 2026 8:49 AM



To: sales@nk.ca <sales@nk.ca>



Subject: Jack - Reach High Value Prospects



 



Hello,








I hope you're doing well.








I=92m writing to introduce our affordable professional services that can=

help your business stay ahead of the competition. Whether you need to impr=

ove your online visibility or enhance your brand image, we have the right s=

olutions for you.








We focus on providing high return on investment (ROI) strategies that fi=

t businesses of all sizes.








Can I send you a quick overview of our services and special packages?
>






Best regards,



Jack Smith



Business Development Executive









--_000_PUWP216MB25772A6D5B91E961425F31EBF7E32PUWP216MB2577KORP_--

WEb/SEo/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMZu-00000000GYO-2UFz

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:55:22 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:55:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011028.outbound.protection.outlook.com ([52.103.74.28]:18864 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waEhG-000000003pE-1ar1

for sales@nk.ca;

Thu, 18 Jun 2026 09:30:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=xonEsZa7Rwwcoo6YjVeJfCPNbDKl62KcPN1IY0WMDiS1ZvRoZyCmxZjkh6wbra4JyBBuFK70Wsq4K1c31hAJtWLzGJGmqwH5WDM+B4X/9T6913d/Y3mXmMRa5VkS2B6u2u5Bjldi3duTMfxwqEu1r2LDMyVL05TFH3niNNFHt6YszEEI02zlKcT622kI+jppKsoUM4x2T0xCJPStmg9QWt12+wqeVwmMruYqRNQ/oV6IaVtdgMxeYXto84eXg7A3K3CwwG39d43AAm46uNjWus5qP1OURLfF/M7GIkVnB0ZtlZgWCK20foGIr96yDSpIgSTgTI5pppX4LTs1BBCRzQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=FTSfSDTV9NDKIbNPZ8x9wmVtu9fAUSgkte7YmdIN63o=;

b=VRcEVRGPY/pyGyb+/rb4FLhpfdMOpbNohObBOLqp/RKQzs5Ql/nnyUDu4DcfpbuCJ7YAc/sCpdZr4nWuTvw0HUe8mxNDD6U9QW94F15dMUQcij+JufTn3ijeQ2Dd4xZknR/kt42eb9hTiQFBEvy9k9pgPO7+AZYECGmhkJNJE8Hhwze3Tp7PHSZG30XsCuS2mctZHhYbkGrzVX5tMgx9IL3bF4DnEBjWGrH0ME1MpidVc8XXsBJSekT3utARout9B7tFdAmDQGiO0OnQKHy9MEypdvToCIL8/Kkza3UphW4NOY62EUwSzkPTUVj3lY4+ASiFMmjliHr1F/MrYiBvAg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=FTSfSDTV9NDKIbNPZ8x9wmVtu9fAUSgkte7YmdIN63o=;

b=e+msM31bAQt8xYmtFOUqaDeJ4ezZw/Xj2tL5tvMxujTPzhZIG67hndqhuf9QMeowLRKQVfesPk1iqiX/WMJE+IO/Cuw4oJJDeChQyLZsSYRNR4fOYlLzFot7MSy7QEAKuuv+JDHvHyjGbRmhY96r6xcgOU1ykItfGvQu1MBFNLz0biT3BHPAaZooRImu8moBst82KFPTUIkCrGY5S3ZR1ccJJMSaeY1esVarpNkeayr9WDVjwCYLpwP9+MmJNLo3+Dp96zpzvFJrFdd7GqSihF5THjxC2yKHOq7CypONamgLNXOyElCiXb/xCOBqco9dn6Qmrlb1p77j4KV9QpPbFA==

Received: from PUWP216MB2577.KORP216.PROD.OUTLOOK.COM (2603:1096:301:13a::14)

by SE2P216MB2294.KORP216.PROD.OUTLOOK.COM (2603:1096:101:11a::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.13; Thu, 18 Jun

2026 15:29:29 +0000

Received: from PUWP216MB2577.KORP216.PROD.OUTLOOK.COM

([fe80::7503:ac5f:adae:31bd]) by PUWP216MB2577.KORP216.PROD.OUTLOOK.COM

([fe80::7503:ac5f:adae:31bd%7]) with mapi id 15.21.0139.011; Thu, 18 Jun 2026

15:29:29 +0000

From: Jack Smith

To: "sales@nk.ca"

Subject: Jack - Reach High Value Prospects

Thread-Topic: Jack - Reach High Value Prospects

Thread-Index: AQHc/zdA34E/bJV/P0mO+JElDlYVkQ==

Date: Thu, 18 Jun 2026 15:29:29 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUWP216MB2577:EE_|SE2P216MB2294:EE_

x-ms-office365-filtering-correlation-id: e28d2ae6-abb3-4e0b-b891-08decd4e635d

x-ms-exchange-slblob-mailprops:

r0r+tuOiQNAxdqLXcZLaSDNItCbBorGx/8SQjaIaF0EAPot/RUN8pJ7+xh+coLLcq9d0RdTPD9JnKr8EIwAK1DKpV/D8RL7o4zIOF5rCbO3k8NQ8YjKLZFbsN3+5pTmbPRsB46m8tbxKDeCDIxhUYtg10V7nJ/aCPga/f4E/bXDGwjIDRIWthNzai38BrXHbKted7aJnMEim0wcbDjJ29F+6po/qd3Awj8q4Yzx343KB/0144kCdV4iS7r9a0T8/6KnotR/aDZFP0mUrliEgbqIAK+juJex3a/Q15v9ccNH7dI66mMK766C7F2fzulTSWPstlVpMwhUPMIVGzwtJA6l9Uk5DelixlmxLQFMxdnRyGg6V3kwRst3rmuiYFibHyC4IVOz3lLM9HHV/0NIlJBdGKIZvAgOMVxIT4/1ViHzRrQVhcpZARV9v1i3YpRVLa+jqmYrexkFp9rkGYRhNzPQjID5KZ0zHT9mOyLzyK5zuCnNhTcSOGfizhhIuv+k82t7ZABghPJ62tlEhAFpXCZm+I9b/tpZ6h1PT7atDdHEJALAsy/yK7ltbkfWghWtpiXhAuJptENhPEOoBdaI+uuOTDGC69PSuzkEXeIgAKwxwGo0X4ptWotUWY60+j+34XSJEKyEaWgo31lHP3CrT1Ki4c6dCsAqtTzoxHxAXaSY=

x-microsoft-antispam:

BCL:0;ARA:14566002|25031999004|24121999003|22091999003|31061999003|37011999003|12121999013|19110799012|8060799015|5062599005|15080799012|55001999006|16051099003|38102599003|51005399006|8062599012|2604032031799003|15001099006|704163111799003|19101099003|41001999006|40105399003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?sckJyyqrg7bS28sQ4/jiMXScD4bkp/SxaeDwioLzEO3hv5nejLLYjrkv?=

=?Windows-1252?Q?rKSUbBUmxGaImwL6a14G5FCUcFIflKWvwnU93bXWeRX5hUodsCkqDlch?=

=?Windows-1252?Q?wFssxuA7sim0ZqHjnO7QrSHbW8xkbEaaAoFsJOHvS12NHSFVGvDXafn0?=

=?Windows-1252?Q?CKEV9pr8Ne6yfuCilka4xNfhCDndG+bEr6bwhbZyTVzMtWzzRmwYol9E?=

=?Windows-1252?Q?C4WsdTka+sbvWYKCUXzCduaeuEjodx2V6K4IPPJ5faGusLNofjFNST+k?=

=?Windows-1252?Q?1EbXNKPWpNBfPehO3l7xHy5pir9CusWpgK/iLxeXsErZruMNrWF4RNWv?=

=?Windows-1252?Q?mFgg0w8SWtyLN4iLsuwDkFIbNqJFJGQIuTOaxldl0P0uqG5dTHY+Lk8u?=

=?Windows-1252?Q?XZ4TI9olrZ9Ij5klJV5fKbU0aTPdtTij2RjX9SGqiam5W8sDCmPT/XWo?=

=?Windows-1252?Q?d/JuZRdpDwvIvDmnQ/Zlaf9t8zqhQqjfH2p99biPUCU7hKs0gwN0BRCz?=

=?Windows-1252?Q?jJTIWw0UWc+/Ysdco9IHFIeGpwkvhuTrJJfxRjSWPzEfpsTFrEPgDFX0?=

=?Windows-1252?Q?HB7l8nA3HFhVIxKs1GaYTgNYlsovCin48i4cvGkbH+pzzfyTD+cdyNrr?=

=?Windows-1252?Q?zmclQCBhknLG3PVU/xzzlbpwqY63NHwH1Pc6S2PlkGVQiZM23sbbmAHZ?=

=?Windows-1252?Q?u12ycdlXPhFhA/C0buFsWdtq8PQ9S70ugup3zN+RdO6Aw9tFH8pQcknp?=

=?Windows-1252?Q?4Q2CI3zmfd6r+AfN21SULXzN6u+Pohrfgib8DQCYkSE1MmtcORClhqTq?=

=?Windows-1252?Q?rG2qmbREXFDJamiWqzIicTrXb5fVgEB5oYenIE8oCcXWSyAq5VO5szqh?=

=?Windows-1252?Q?i0W8d6UYubTAc1Hxt7FimjoyxhUQYV8AJJCuEsaN33WmLamgXej7676M?=

=?Windows-1252?Q?bar4fbJ7lvS8Mcio9z6BqUc2U1nKqb3C6FiUrlmO0TXzsuVu7SJ7hshU?=

=?Windows-1252?Q?wo87qj5HkY7K7ysztI83t0qi9D68WS9ZQTy/uh4tTsXmZGLXwpN2+Pd7?=

=?Windows-1252?Q?vXuq3Qw66pj+asQDHQhKiuN/qapx6TYQF8huuSuAKyZdh151rmyz6ehQ?=

=?Windows-1252?Q?WKI3dZ/13664z+EWlewNAWe9Sfae+po8dmMz7vbeK54BQlXMOVC4xsxe?=

=?Windows-1252?Q?JHeD+9wpiIqxhEMofHooTgfH8rAbwxlzE9zPaodCj72q670t1FIem3K4?=

=?Windows-1252?Q?lEKvVLc3reX70WCv8yQZs4CVdsAoyExMWd6/rt4FNJqmH234elYROYod?=

=?Windows-1252?Q?tqsMG0Iv4zlqONuDTZa6YZ/sR++H0WN1MdcvrKkAlzJKkxwan4nxRVTF?=

=?Windows-1252?Q?H4Qq3f8GPVfkyJcLdzJ360r1BBFFBH0l7x+PZogVjNyui7YCl2AH8+0p?=

=?Windows-1252?Q?d5B80UtgU36zZn40zHes3X7eTPgcuRZlEuwlcaXU+rkrvVpjYsM4V6AC?=

=?Windows-1252?Q?prca8KTH?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?cxSXK8td4UUEPFj/ojpg4DjgEmNBSc++VRGG1cIwCOV06MkDX81AXmn4?=

=?Windows-1252?Q?ZPLAvbnYxZdUcXozYslIeJkQ6IxmCC99xAO2a205Lfd3b56aUomCq/bv?=

=?Windows-1252?Q?Zonurm1CkrKmBosR6QTwxlx+g0GA+nMLMLOiPsaI4DPH34aXBiUJtK3e?=

=?Windows-1252?Q?uycJ56GjKLUsSKO/CxPw9KxvGJmONA00hms+7x+OnDghyQZEWole9nJL?=

=?Windows-1252?Q?2cH9boXFP321MleHeRexE67rV69iJu2Z/r8PL3ZmxO3zTzy3AD8x/xes?=

=?Windows-1252?Q?V5dJyGhvXv+VINvZ6RL5jCqbaFYjXKD5pDyVIl3TdHotzKdk74JD5PfX?=

=?Windows-1252?Q?4RjyxcB9Db8GZfjZUkTdCBpwTlmmaEj0IKIUn4e4+Xva6i2em/kxQfNC?=

=?Windows-1252?Q?UCxUC1hUWDdswbhIT/3rqjAiahvFjptW09WbjT2AopFGhvHPSuRVXylh?=

=?Windows-1252?Q?7TXB4lkv76lCa20ZaKavTD4JSo0Fl0rrQDM4Vvo+WaFMQiJ4L+hDmYqX?=

=?Windows-1252?Q?6rGY1vGt7OU4gGPtKihQVk2MvCCGfm+ibvV9hHZQL9unvj+Od11eiAMu?=

=?Windows-1252?Q?ibIBl7T2l3HM66wghRVDiVHdNkWumKIxNmD6GmCEWj3InzdLd7mJryt8?=

=?Windows-1252?Q?k0SjYg2Yz1Xi/rdMZwYNjnvOLiinZITX8gq2SzRB4NU7qAjI81mDQCEZ?=

=?Windows-1252?Q?8cdbkLYwzFiYkIuRttJp30X/L+r63SiazOAF2WCDEYNQt4fElXMLj+rb?=

=?Windows-1252?Q?uPkk27orUAsEZ5Dn/QDI4OdVL9JpMIoQD3XhbVICwSbeyMsJSolIHZn9?=

=?Windows-1252?Q?z4wi+m2rwuDuAvF2Z+KtFvZs7mGBX3ZBCkrW6znowbX9/5KfP/NCERp1?=

=?Windows-1252?Q?fHdPdCl5r2LM3YOGLvZIPv2sZssMnbgjf6G9IN0ZyCx4eugmSocr3uev?=

=?Windows-1252?Q?6IW/ADaQLBsd3Phc/2EdZdI/u7JQhBFO1geQoE2MT/Qcvcy5hawRjl8o?=

=?Windows-1252?Q?ThnFTErAiS06DDavhkdrt+0VuhGLTiFJdfRuTG6U2v46XEaJK+AaWb92?=

=?Windows-1252?Q?yoOF2/4l8hzNcdWKYpX/EbYd1E6L7W2LX/ES4KY4wG84YvYa6kAmZ5IG?=

=?Windows-1252?Q?i9QkS7jTeqjZS0jzjFg8J5usSrMSKMlhh/j0iSzHyCrOgW/I+CCEiFMx?=

=?Windows-1252?Q?rn66oKa/UHfQBvRklQCDK2uS6JlANLzKIqlF/dwbtNKuKbFErfck2daj?=

=?Windows-1252?Q?fIx8b+By0qp/WXWpE42zKrTWuqkPdZrXPAsfy+A9IwkX//Vx9NOaaTn3?=

=?Windows-1252?Q?DDZ+PeoiINWmaNgR8ygIwbfSDDe1aXBzhVgL1yng66zjN/xxCQli/Dyv?=

=?Windows-1252?Q?gRAM5O7mOCSu2ILhkiIBFEP3FiA54xM+5zCWTHHZlGV3/MEeEoAuMzaQ?=

=?Windows-1252?Q?JS4+V3ompJik4EtwYfC/CuqZs7BGbO9kpoYL1sq2iIorKWyz19T5IZtP?=

=?Windows-1252?Q?niZzdCaVeJtl0BOQ7Sp7Pgl8SeY/BA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PUWP216MB25772A6D5B91E961425F31EBF7E32PUWP216MB2577KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUWP216MB2577.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e28d2ae6-abb3-4e0b-b891-08decd4e635d

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jun 2026 15:29:29.1363

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE2P216MB2294

WEb/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jun 2026 17:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waMZg-00000000GYA-1k4S

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jun 2026 17:55:08 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Jun 2026 17:55:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f54.google.com ([74.125.82.54]:48625)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1waEDY-000000000eQ-2f3V

for sales@nk.ca;

Thu, 18 Jun 2026 08:59:53 -0600

Received: by mail-dl1-f54.google.com with SMTP id a92af1059eb24-13981833e13so1250887c88.1

for ; Thu, 18 Jun 2026 07:58:57 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1781794731; cv=none;

d=google.com; s=arc-20240605;

b=HDcmAkYfeVauXsLunXNC5PdUQnsCZsUL0VVYV7E2pG+bNkVmTwiVCVwjmmmxjWFNEf

w9mAD9gs6Xpmb3P4bs8rikX1qtkz8SXq1qvZolX0vJAY5gquxxlUOjYWm/QF7ImYFgye

k1uEVs+yUfkz0hySJR09xHB4+t0xC5I6ZZJpU/x2o5ujs8xlEtuLxX1L+Ya8IRuw4b3D

b6VXrevnG6seYVCyDUB6l8kZpg/8NV1QZUle9W5/Mdq+25djK6u+sCrbtI69RrGAHycm

KoDg/8DyLi6NKd+lnv9alNhJCXU3xHA08u62pnC1UxKWmvO+aLbGbIF6gkwahflYHyr2

H+tA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=zZbih3IKUn1EZ2Bq4Sqzq08eVcDh/31YcC635/EDCtI=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=X9zL6K/AmpvjrsY70DRKRaVBBzpUN8NzlsAJ88ktZ2IsmV4Gkx+BVMtpLmc36l7oCu

7THP1ACeTWnptJZvjSP6mpPGNEXRZl2UEYIu7t3JP5hj8XaHd2HcBWMes/5RUvs9nPJ4

Oa5fqXesRAv5+m4L6TwV0gVHWYYaaZkH3GVpPBa0xjwY0JlYPIaMnLlAlTuvQA70wRv3

RxJ2jvm9ZhctXP1pFIuCmalLE54jSHgUjhcer6Lmr9e1FMfKrAnzVFM9L26VeiostN7b

kfxPSI8asYMttW4lLnxzJmhwxMN/DojXyOKK1ETzOFGpY0TqUcDsUQWZ4O1GuCGm5F43

x4nA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781794731; x=1782399531; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=zZbih3IKUn1EZ2Bq4Sqzq08eVcDh/31YcC635/EDCtI=;

b=KjJvnl1qEApBbSyzU8PLKmKSQwysCDHs+OpqAHaNxh1JBdgwhBLO2dIg2hs9VTv3s4

10ydjkGqpJ+zT6utd8TFmNvHhULMJwY4Zy3rGj/dF/U9s6QZeLbFDWPZqXBugC8phl9t

RP+AFZVyByV/b9SnzHkwDdaFMzC8n0indwimIDDrrI6bNyg2nvRpmEj+W4yR8aUEr4zS

IUBHruX/xKNsnRYSkgZW1Hn8plpJ316FL11QUQ7+4dVGrl/lLTXFNoKn6IDRgog8Kdtk

EA0SQCNWOctSRHEYgFto/huufFHsURFDFfxPsO0KKtBV+22crzta0gXB8FUIsqfItXP6

ypEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781794731; x=1782399531;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=zZbih3IKUn1EZ2Bq4Sqzq08eVcDh/31YcC635/EDCtI=;

b=H6RzeyyzGIPZHiHrFU8b97sQVI7OfhdHxEa19Jzb7bz0OGehtU+ymGTzm0lLyFUpoN

XTIxFQ73I6FRlcLSM/xHBp6wCpNP0MrrJ6TV8uz5nWOUC95SN0JMhr7dZN/loJKCPIZt

JKm1d9Ny8GiJZxY2WAUBke2GklS/GLiptM225Ual0iRUzvho+HRBCfOa4KY6tFh09f7T

hsje/kGQmJN1PFStwVBNEBmdzByFQHfo2hfw2pv2N1K4yndMiFDXSmVMPP91tVe7sXw8

PGOHvMaZMP8vhTXjp5k1CM0a/3h7bLHDOGmGXE4i5Ad+WpwHS19OWgDX8zVng2/GHtAQ

OyJQ==

X-Gm-Message-State: AOJu0YzIM99Ibt26ZgYDDTscDrrh0pJCPpQk4zp9zcwigg5710nqEZ9o

gFcCaejNpGpglRONqB17EvFpil+jBxK4tbQrN6hk+fGMQzHpgbho5VKxw+CO19YJ5Y5YGbu76SS

ibJGF168kaH8yd9j0qE91PSAy6hUnBJ6U6NOUtX9Mv0ujOUM=

X-Gm-Gg: AfdE7ckrq65rKkqYgZmChULhUrm016nf9aJ7LdOC7BYl76ebae3NzauU2NKa1pSBfVj

cCnvG5sccs1BsP1I6ROFtl70LRyOdNBes3s0HnwGdL76JHxenDIPRy1b/U2n4qq6kdO7cyWqseO

4XqMGDVaO/A474tj7yQOBYVh7FHVljtGZccf04JpWXtpfVaEWdqseGrrTFU4WkrbSoxYdBKX4KQ

7DQgDdHBe8gnX9KpwT7r0gAE51KnYx2tazFJlhGyzssugjQ3Ydq+RGgFrtWq35kCHnAVTsuJh68

TB6y4vLV6zyo1Fbh5ZT4uq9thxkCDa/b/QTTejABsDFtkhI8N7q2OXQ=

X-Received: by 2002:a05:7022:e995:b0:138:48d0:b3c7 with SMTP id

a92af1059eb24-1398f6b427dmr4441512c88.28.1781794731351; Thu, 18 Jun 2026

07:58:51 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Robert

Date: Thu, 18 Jun 2026 20:28:39 +0530

X-Gm-Features: AVVi8CcZ0g1vwgN2-vgzAzQBOlAiQcIZV2MsxCOwXr4KbXJv9XkCNhMzY9skd0E

Message-ID:

Subject: Re:

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000006605c0654886a38"



--00000000000006605c0654886a38

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



I still have the notes I prepared on improving your search visibility.





Would you like me to send over the details?

Kind regards,

Robert



On Wed, Jun 17, 2026 at 5:18=E2=80=AFPM wrote:



> Hi,

>

> After reviewing your website, I found a few opportunities that may help

> increase organic traffic and leads.

>

> Interested in seeing them?

>

> Best regards,

> Robert

>



--00000000000006605c0654886a38

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

yle=3D"font-family:georgia,serif">
<=

span style=3D"font-family:georgia,serif">I still have the notes I prepared =

on improving your search visibility.

,serif">

rgia,serif">Would you like me to send over the details?


"font-family:georgia,serif">Kind =

regards,

family:georgia,serif">Robert


l_quote_container">
On Wed, Jun 17, 20=

26 at 5:18=E2=80=AFPM <r87284545@=

gmail.com> wrote:

=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=

-left:1ex">


5,255)">Hi,


gb(34,34,34);font-size:small;background-color:rgb(255,255,255)">
=3D"tahoma, sans-serif">After reviewing your website, I found a few opportu=

nities that may help increase organic traffic and leads.


=3D"color:rgb(34,34,34);font-size:small;background-color:rgb(255,255,255)">=

Interested in seeing them?<=

/p>


,255,255)">Best regards,
Robert=









--00000000000006605c0654886a38--

Bitcoin PAypal phish from Microsoft Outlook Part 4

Posted by Dave Yadallee on




0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

2.6 HK_SCAM_N13 BODY: No description available.

0.1 TW_RW BODY: Odd Letter Triples with RW

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Important_Transaction_Alert_=2D_BTC_Order_S?=

=?UTF-8?Q?ubmitted_=40_=C5=A1t_18=2E_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutl?=

=?UTF-8?Q?ook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to Important Transaction Alert – BTC Order Submitted

Title: Important Transaction Alert – BTC Order Submitted

When: June 18, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



This email confirms that your PayPal payment for Bitcoin has been received and your order is now under review.



Transaction Overview:



Payment Method: PayPal

Asset Purchased: Bitcoin (BTC)

Amount Paid: $500.00

Current Status: Under Review



Our security team is currently validating the transaction. Once approved, your order will be completed automatically.



If you did not authorize this activity, please call +1 805 330 7959 immediately to prevent further processing.



Thank you for your prompt attention.



Sincerely,

Customer Support Team

Attendees:



cynthiaperez389903@groups.outlook.com





Dear Customer,



This email confirms that your PayPal payment for Bitcoin has been received and your order is now under review.



Transaction Overview:



Payment Method: PayPal

Asset Purchased: Bitcoin (BTC)

Amount Paid: $500.00

Current Status: Under Review



Our security team is currently validating the transaction. Once approved, your order will be completed automatically.



If you did not authorize this activity, please call +1 805 330 7959 immediately to prevent further processing.



Thank you for your prompt attention.



Sincerely,

Customer Support Team

Kedy

štvrtok 18. jún 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Bitcoin PAypal phish from Microsoft Outlook Part 3

Posted by Dave Yadallee on
Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

[40.93.6.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.6.74 listed in dnsbl.ahbl.org]

[40.93.6.74 listed in dnsbl.ahbl.org]

[40.93.6.74 listed in dnsbl.ahbl.org]

[40.93.6.74 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:77:cafe:0:0:80 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.6.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.6.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.6.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.6.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.6.74 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.6.74 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.6.74 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

Bitcoin PAypal phish from Microsoft Outlook Part 2

Posted by Dave Yadallee on
X-Microsoft-Antispam-Message-Info:

=?utf-8?B?ZDB5d0luTzdBellSTTZZUEMxUXBVQTdldWtuc2xSQjY1N3JOSDZsNnBKSTBv?=

=?utf-8?B?b1FhYkM5WVZhVi8xaHV2cUFodXc2bDdDb05hRGgrUmFOTWRrWHlFZWJ6WW44?=

=?utf-8?B?RHVBNWRmMG4vMUZwMjN2OUVZc1cvZjNYNm10Y3FYQ1Y3ZTMzVGtET0E4SkxG?=

=?utf-8?B?ZnZTdVJWcDEraWZZMHRBcUlCNU5SaGpRZkpjaURLTUdSemxRQUZ6aGd6TUV0?=

=?utf-8?B?a0dqeXI2K2ozRDRUZTFweGp3aDQ1d2wvK2J3NlZCTjgyd2lPVHlzdFdmaWNr?=

=?utf-8?B?bjFCeWhadUxLM0NnaDN1VVlOTXlPV2VuN0ZsdXB0cGlJZmVQTUQySHlCMFJl?=

=?utf-8?B?U2JrNjJoUk1uL25pUFFFRHBZK1VtbFFFbDR2VnJIeTdmNWN5OXVxVG9jRTNx?=

=?utf-8?B?V1VwQ0xOSTM2RFZCbHVVYUZvSE1waU5ZOVZnYjl4SDlpNy9XandRRVMyY1dN?=

=?utf-8?B?UkxwOGFzT3V0b2tpVzQvcDRrQTFWYUpLTUVmbDJoOUFHSWVVczFmNFI3Qm9D?=

=?utf-8?B?Smx4T01rM1ZlelZ5bVRMdUpRcUdzQnRDODA4ZmFkUkgzdzZOaVp4S2YxUjlC?=

=?utf-8?B?eTBETXNpTjZxekZwQTBPMkNrSkIxNnFJMXZhRHNuOVJEYVZ3V3JsaC9TUVZs?=

=?utf-8?B?VnI5d0JRUGQ1VFh5bnJreDNRZ21CSDFzUHNjZkNEY2ZMc0lPbGxGNC9LM2M5?=

=?utf-8?B?TlVhd3B3Rmg5UzIvWkJOUERrSm5XaU5jVmlIcmFtQzJTTG56eGdzbm51MUdB?=

=?utf-8?B?bjY3RWUyNmRyMmpVNVdvOEgxVWx3eDNhQ1FPVi9NTVhBY3NyL1ZrT2ZiOUt5?=

=?utf-8?B?L2ZDZWZvbzZZUzVBWnIydFg3QjdlNFdjaml5L2VyUmNmYUN3Wk9IQlNpY3RK?=

=?utf-8?B?dVArMm9TcUJnMmZUNTl3WWtkRUtrU2pYMlRxdWgvQnpjZ2MrSE16M3FHZWtL?=

=?utf-8?B?QVVuVE45V3IrbWhOSU5NdVFWZFQvVGJRbE91R0Vkeno2UVIwUi9lS0tweUZR?=

=?utf-8?B?WDlmd21iREZ3VXhJVWgxOVlmVm5hMWM0SkNlUkRuSWhSYnVYNkpXL3BWa2Zo?=

=?utf-8?B?bHh3YVo4VEhoakZjQWtWdVo1Mk16VGlENEFWMlhvMEFwdHBabWlsRUtTdU9J?=

=?utf-8?B?VEdJYWx0RndIUUxRSXZhOXlmOTR3VjlyOWhnK2JmcTI1Rm1lSE9FdUFoWHJQ?=

=?utf-8?B?QzhHc1U2QWpTb3ZWc0VmOFpvbUVicVhDaktDSzhvODBGQk81NGJ3UWFZc2lq?=

=?utf-8?B?Qi9RNzNkNC9XQzQrd2phd2N5cW9ZeUJqRjhiYUxzSm55MnB0U1poK1h6cmZO?=

=?utf-8?B?VkdhYzBJRVRLMHh2NkdxZ3dUdEdHL0pvTmxjWDBYc1haanVJMVVDUTlSbFJz?=

=?utf-8?B?c3NuWkhTRzNYUEZuL0tMdlJtWGlMbnBHNHNmNHJ1MUZGTWNtZWRRUWdneUdE?=

=?utf-8?B?eGVMY1NUbCtMSENxM2NEU0huNU5CaDl3ZEJvakJIVURqbFlBcTlQYXY1TXBY?=

=?utf-8?B?ZWJlN0YrRW8wS1puZzZtVXJzZGtwNExVQ09jRmkvZFpweENmMmdONlh6ckJk?=

=?utf-8?B?TnM1d0dJYzRsZ0hFdkFkekx1Wm9Obm9QSVFQeGxWNnZMTVlhZWZUM2hRUVA2?=

=?utf-8?B?R0Zxa2h4azBacWpnV1ZXSWtmdU1rbFZqM3hjcjZyY3VsOW9GdFhITkdBbU41?=

=?utf-8?B?a1BBY2dmbzFnQWNNaWU2aDZGRmNJcEhmcUpYZERVTE1OUlNEUjNRZlNZdXc5?=

=?utf-8?B?Qk5kcVdWRkthNzZNbmh2UHRCaFBPcXcxZG9PM2pXNGQyZjNScHE2M1dWYUVu?=

=?utf-8?B?ZFJhSXZjRERRaytsa0htRjN0NE9DQjg5c1BTQSt3blpXSGdOekcxSHY1OVdr?=

=?utf-8?B?YlNLWDYxOUpEYVBSMFd1VU5NWTJVcTB0aWU3a0t6SFQ4R01jRC9aNlNCUElQ?=

=?utf-8?B?RENGYTNSNmtLaXZGQlMyeFRuaHZ4aHhFMXZiQ0tJRTZ3Z0tRU2VWUGpxcVVo?=

=?utf-8?B?ZnEvSTB0UXVnYzJHYzhzTTZGMnd2bUUzVEVpZHRScW1oMnBkcmVjQlNOZSt5?=

=?utf-8?B?ajh4cWx2VVhpMFpWS09YcmFJeXFnWC9YSndUazlQMTN6TXovTDlFNTdobUxN?=

=?utf-8?B?N1BiQXlRSXZkNVk2RC9oaDBCNkM0dXhyajZjUEh0TjQxM2JoNmp4SE9UdGJv?=

=?utf-8?B?b1dSSHZoQnU3ckM2NWU3VXMzdkFJdVVuUUR0NkJwZVhocEo0dXNkVHZXZjNX?=

=?utf-8?B?RStCQ2M0ZGZObDc4MEZnODM0MXhRakFUVWhsNENhOHg2QytqSjdLRVFqNnFO?=

=?utf-8?B?U2IrUzZnRkw0YTZCbUpEa3dmWDEyaUJNQy9KY1daREh6akFDZGVOaU5HTThY?=

=?utf-8?B?NjZicnBCRDVxMSt1b0JmRlFvbVlXcENGOFh2eW43Q2tNOHVHYmMyUGhVOHFn?=

=?utf-8?B?NlZRbEsrR2JaUE51L3hjMCtCNUlhY0JiWExqMlpNZEhuS3FoZmdZcjJwN3JM?=

=?utf-8?B?dVMyNG1QVHNQWEhKZkU3c3E1YmNDc1VpQ2h1UjRXVXNrS1dtTERjNVRpNlZv?=

=?utf-8?B?dFluNVkySXRKMVJTOVBBaWFrbU03b3ZReGN0M2JIL3hzTkMwQmtpeXg4NjBh?=

=?utf-8?B?UGQwV0VwaGE3NEVGR1U3Q1JmSGQyZEJuMnNPYUkwdkR2VWxlSmZZZTFjYmo4?=

=?utf-8?B?T3FDakFGYkNoRDJ6cHpoeTkzc1YxQU5mU3BLQVNSc2I0Qmd1WUg4ZDJpemhn?=

=?utf-8?B?WmljRnhENzhVc2FNblFDOEpwa3Y2Qld1U1RlcU9GSGp4N0svMjJ2NWFOc1JM?=

=?utf-8?B?d2Jqc3A1RUxYa1luTmxaanRPWmtnMWw4Nlc1L2M4NnpWMENOZ0dEUmV6dUJR?=

=?utf-8?B?VWJyVzl4VTB0RmVOZ3lLc3FNLytqVjVmbkhrNmVIVksrN1ZZK3JOUDFNRDRY?=

=?utf-8?B?cWFramdyaVVHa3UzMENxVWxWMVVPYnpIT1J6cHhidXg2bGZBWHJmeE9uMGVI?=

=?utf-8?B?SmJKaGJ2UmovVE8zZU5tZ0hrK3NEcVJHSFpuL2ZqUnlISnNjL0dwekRKbGVD?=

=?utf-8?B?RktiYlVKVzl0eXh2aE5iQVQyMjZqMTY0ckttdkVpRW9BN2hScmlsT1Z6QkM0?=

=?utf-8?B?bGkrUFkwOW1nY25leTM2Q2dZdHVCeTg1ZmxGa3lrc0lHdUU4ZGRiQ21FMUp3?=

=?utf-8?B?K2w4R2VoSEF1TFVpY2dvUGFlMDAwRVlLRDhpRE9PazdjQXVwSU5uOU1MWnNX?=

=?utf-8?B?SlBrc21QQlpuM1U3cGVObnp3bGQ4NTkyZnh1WURhT1FHM1NYN2FzQ1dkKzJz?=

=?utf-8?B?L05FUEZUY0o1bmVoR1ArVy9xQU9yVDdtNHgvMjN3b2Izc05NaFJrd0VSSVhK?=

=?utf-8?B?bUdiMktjVk80S3EwalFML01GUXdZeEk1aEprTlREb1FxTnJzTCtHUTluR2hP?=

=?utf-8?B?WUVwMm41RDhiL3ZCQmRjRmN0blRJMXR3NGRrRHMyVDdVU1Mvajltd1dtU2tC?=

=?utf-8?B?SGl6aW8zdHJsSUgxS21LWk16QVptNnFDKzdGQnc1R1hYNzFXQ0l5Y3JyMnVF?=

=?utf-8?B?SDJrYVA4amxKWjJCVHZjL3RpR0krajdWaEFLaVRma2s3bE5TQXRPVnFmeTFC?=

=?utf-8?B?aEVtaWRXMmRZNGEvei9OUmFFNmZaTHZhWlJLNHNTc1JpazNSZWdGcEdEcFpW?=

=?utf-8?B?aFFCbnlMamxYWG9tbi9jN0x0V2lyZ2dRMTlWYVB4d3ovQ28ya1IvY1FVWmtJ?=

=?utf-8?B?TWU5MjFCNkJvYzhxZUNkbS9LZUdLTXRyOEVlalJVVWErT2Z2VkJ1Q1Y1bWlx?=

=?utf-8?B?ZEwrM3hUeUpVRUxWVlFnelhHdTUxYWhoS3JhNnBtSks0bXpGcy9tTWZWcWxy?=

=?utf-8?B?eUp5WHQxa1U5MFdSQ2IweUoxYWFnZzFWM2FraWxhdk9weTFuNlVMcU5tNkZZ?=

=?utf-8?B?THlZVzZWbi9HREZDT2EyYlNUVE9KVDNFYlZrb2U0QUhQK3RtZDZWVnJMdlBG?=

=?utf-8?B?SHNMcjh3NUNKRERmTEx6QlNhamMydDR6OVl2V2dxOXFudGdiaFNBdUk4WC9D?=

=?utf-8?Q?/SL8G6n1T6vzD2+hwMFqf3mMaX04iabtCm4Dpl?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jun 2026 14:17:33.1480

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a068c960-1e2a-49de-567f-08decd4456d9

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: CH3PEPF0000000F.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR18MB4561

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Important Transaction Alert – BTC Order Submitted štvrtok

18. jún 2026 Dear Customer, This email confirms that your PayPal payment

for Bitcoin has been received and your order is now under review.