nk.ca credential phishing from sendgrid

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 23:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Rah-00000000IZe-2wxV

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 23:08:23 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 23:08:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.ptr9647.epsilonnet.gr ([159.183.196.102]:51726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3RJd-00000000Gl3-20Rf

for sales@nk.ca;

Sun, 06 Sep 2026 22:50:53 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fbcinsurance.gr;

h=from:subject:content-type:mime-version:date:reply-to:to:cc:

content-type:date:from:subject:to;

s=s1; t=1788756591;

bh=g8U45nrXAynzXN/e6Vpam8l5kaUmbx0/vwInysR8ae4=;

b=m1TqAIZCNaiGp21Y9NKoAhzUQEmLndAXbdBBF+HREwVm2yJ9UziCvLpeSsAOHsFC+ygT

QYbvqwlQqt52J3JlKI+oC6yF0o3LUGnO0lGpdaB+ywCcLxtqgbCa3Gr9nkRy5xom/+wwbs

JnzE/KANaTvHK09n6M5ThIGdIP2c7xlSEwSqAiMmx7mtMURujhLj98HB4976cvi3UmeaAT

sGRUB5mNjL3g6jQY4rFKf4FSnrN+ifADyEfeNxwp2o4/Cwx5092AgsOwwxxheBqKbHWBZe

OGFXps3ksHaPFWjWL1iJ57G11oPa6nPEkzqho+/QkTe70NSkBay5yOyIengB1izQ==

Received: by recvd-b9cff7684-64nff with SMTP id recvd-b9cff7684-64nff-1-6A9E426F-8

2026-09-07 04:49:51.129502902 +0000 UTC m=+3491933.492786502

Received: from WIN-9QL4SDRB93L (unknown)

by geopod-ismtpd-17 (SG) with ESMTP

id Mg3X0EZ-Sfu4Ag7aiJqxEA

for ;

Mon, 07 Sep 2026 04:49:50.932 +0000 (UTC)

From: Nk_ICT

Subject: Your Nk Mail Account Needs Attention - RefID#152553219- on 9/6/2026

Content-Type: multipart/alternative; boundary="biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc"

MIME-Version: 1.0

Date: Mon, 07 Sep 2026 04:49:51 +0000 (UTC)

Message-Id: <065020260949218FE5705B98-8B33B3A8D9@fbcinsurance.gr>

Reply-To: haleekzowan@hotmail.com

X-SG-EID:

=?us-ascii?Q?u001=2EzWJ6FzkxSAoroNbb9m+q5nxtdcBVxx3NvbtORQXbqn5y1PSaJLxc3ajz6?=

=?us-ascii?Q?IvJxitVvDgR8IKct6GfNvtq5JQpz7hI7wyrftHW?=

=?us-ascii?Q?2ideXJetI+Kv7=2F7hHLxKpFB5gDS3Yl5qVjGMe7U?=

=?us-ascii?Q?aEsVdPgaShiSdYpEMmO2FQNq+suxDET5D=2FfCqOO?=

=?us-ascii?Q?nH+EbRC22Na6uX1POQ=2FW75hcbsjcdcVm5f9EIUh?=

=?us-ascii?Q?Z6WXHmO5v=2FjY9BAGOG3Ln8=3D?=

To: sales@nk.ca

X-Entity-ID: u001.Q1T08hI7UrwhajCfvbEQ4g==

X-Spam_score: 105.9

X-Spam_score_int: 1059

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Nk PORTAL Notification: 7 Incoming messages have been delayed

due to a server error.

Content analysis details: (105.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

100 GR_DOMAIN_EPSILO1 Received contains spammer id (epsilo)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.196.102 listed in bl.score.senderscore.com]

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Nk Mail Account Needs Attention - RefID#152553219- on 9/6/2026

This is a multi-part message in MIME format

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

=A0

Nk=A0

PORTAL

Notification:

7 Incoming messages have been delayed due to a server error.

Hello sales,

To restore normal service and recover your delayed messages for sales@nk.c=

a, please click release message=A0through

the Nk official portal.

Release Messages https://secure-web.cisco.com/1T-1ZL9zlsjoJXRFuYVbCP4V4JDn1=

2qfcEkiA3lrG3_LzvFYGL_l9na8WwuQvHvD3fv9LcvikahGe2Q9X1_FGRoREzFjVw8q9QIhcKDV=

yWfppfOcxrER_L7pLdZ5poSbf4YkZHfVmkIHakNG8eWraLN9FHozw7JmXS0oDWtQK4zApIFH1-s=

sCeHsFfhRrGEbnlTWqBvCE4slr02BzhEpRU1md533_fHRqJEzUTVUGSXqUtHKm2FVWvBFpHDXKr=

sr78QEMBON-hL2J9cqo1sgF4dkig4Kalg6_iLAaBXeTM2XTQgo0htOlybXkio2MLNlV/https%3=

A%2F%2Fmessage-express.com%2Fbon%2F#c2FsZXNAbmsuY2E=3D

This

is an automated system notification from the Nk administrator. Please

do not reply directly to this

message.

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

ass=3D"rcmBody" id=3D"message-htmlpart1">

id=3D"v1message-htmlpart1">

style=3D"margin: 30px auto; border: 1px solid rgb(229, 231, 235); border-i=

mage: none; width: 580px; color: rgb(51, 51, 51); text-transform: none; ove=

rflow: hidden; font-family: "Segoe UI", Tahoma, Geneva, Verdana, =

sans-serif; font-size: 11px; font-style: normal; font-weight: 400; word-spa=

cing: 0px; white-space: normal; border-collapse: collapse !important; max-w=

idth: 580px; border-spacing: 0px; orphans: 2; widows: 2; background-color: =

rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: norm=

al; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial" cellspacing=3D=

"0" cellpadding=3D"0">
style=3D"margin: 0px; padding: 35px 30px 20px">
, 104, 217); text-transform: uppercase; font-size: 24px; font-weight: 800">=

Nk PORTAL<=

/table>

BkLM6ntPezk-2B6CffxA9WHhBP2b73-2BK7NVicnyDSFa3SkU2SBFsP-2BiZ5-2FjshgENEwmI5=

og8Nb0F5fRDdJq0gAKXOFxGOxhWIOZzcGON2vNT2rIh23wC5ezkZP1YiXnmXzO5Iptj7gfyr3YS=

ZbC0x1wb0oVzqg024eSIWpeOyf5AnwXPyVrEpQ1GzVsaCZARy8zQHWVN4LA-3D-3D" alt=3D""=

width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width=

:1px !important;border-width:0 !important;margin-top:0 !important;margin-bo=

ttom:0 !important;margin-right:0 !important;margin-left:0 !important;paddin=

g-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;p=

adding-left:0 !important;"/>

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc--

Business inquiry spam

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ODY-00000000O8D-1cuC

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:32:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 19:32:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [201.251.77.122] (port=60608 helo=nbcm.germania.com.ar)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3KBc-00000000Ni6-267W

for doctor@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 15:14:10 -0600

Received: from localhost (unknown [127.0.0.1])

by nbcm.germania.com.ar (Postfix) with ESMTP id 71D49BC5A5

for ; Sun, 6 Sep 2026 20:34:26 +0000 (UTC)

X-Virus-Scanned: amavisd-new at germania.com.ar

Received: from nbcm.germania.com.ar ([127.0.0.1])

by localhost (nbcm.germania.com.ar [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 8olmiEo9H3X8 for ;

Sun, 6 Sep 2026 17:34:26 -0300 (-03)

Received: from ADMIN-PC (unknown [120.29.143.194])

by nbcm.germania.com.ar (Postfix) with ESMTPA id 36430C9571

for ; Sun, 6 Sep 2026 17:34:21 -0300 (-03)

Message-ID: <03f5919b-46272-1d6b0863443634@admin-pc>

Reply-To: "info"

From: "info"

To: doctor@doctor.nl2k.ab.ca

Subject: businesS inquiry

Date: Mon, 7 Sep 2026 02:03:21 +0530

MIME-Version: 1.0

Content-Type: text/plain

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]

Content analysis details: (13.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[120.29.143.194 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[120.29.143.194 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[201.251.77.122 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} businesS inquiry

Hello,

My name is Ken Bruce from the UK. Our company is seeking a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you would be open to discussing this opportunity further.

Best regards,

Ken Bruce

Materials request suppliers spam

Posted by Dave Yadallee on Monday, September 7. 2026

Join the Illuminati spam

Posted by Dave Yadallee on Monday, September 7. 2026

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 12:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3HcO-000000009Fx-32eN

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 12:29:28 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 12:29:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-norwayeastazolkn19013074.outbound.protection.outlook.com ([52.103.51.74]:45722 helo=OSPPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3CQG-000000006cE-20u9

for doctor@netknow.ca;

Sun, 06 Sep 2026 06:56:45 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=YxEbGFcVjc677MRaQFdsCsGFpz8shCr65SOvD5piTVo80lQwFxC4X4Pge7Pmw1wHhNtK1zuYxrHFtRMiOojCBYZiQ8XbP4ze/u1Gy8vJT5vcFn87ajBsd7+bWxenXhXkNNgUYRWeD3Szd8x77yIdQnZgG+VCMsM1bEzNvMGK+2/pQHh8jVRmcm7ClaXQpqPGwOWgto7AgKlchRRNxst2VC1xrp3137fuzzxPJu+stG9csLEKHF8jZv8WuyR6rTrX5ZbvmNV5P9Z0eRvL/Az0/OmGxg+J7dsZKaJ2zwfj3WDJxju0g2QJXNQYP+tfSmyAemmBExEoWmY32pH+EIkIJw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YAMQyNvh4zO8Gv69LqGSHgZT0bV5DPIZRLk1N2Wne84=;

b=OhmC77pVPW8mPjoNbKeACvRRUeWKmL51JSPKiNIdJH4hxoD+KTmYyVvmVYmBVVjMSdO9VjwpbEFl30wKbMfUeOAz2m6/lqu21KaVN4SyYllSk3hBZxQHA3T2MeGxkmMw3h0NdgzNX0jHzlIbqpr9t2SX7W5gMKFuQgrDUo58mx6PhLmp8WIS/PHQ3NTndLnqziF8h5QOEpO/ugvWCmErpe6H5uCBDCP31glii7rzpPkzUymJkWfmUYQHnjdl9FRWEQzZbbFlwMt6T0HRd07MxTyt6Metw/gONwU2XBxQYyujhCuDEPYqKhxHx/HaGyW64GB5/UvwYKbVzjLKRx8ZTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YAMQyNvh4zO8Gv69LqGSHgZT0bV5DPIZRLk1N2Wne84=;

b=A6xL8+36M9Tu0etmDLz8RWcYLYAsg9L7HgWgNjB6G0ICu9KKuoxqVTNOQ1t7Vcs9Jm6FSspTNyoMq0gvzY8cfJpfN6UJzXJvXITCKtJxeRLfPlI8KwAfa5dlmXhQlbv8HTOES+Hz7xd6KlMgE193+Q9ZwkJArz4KAThI7K5mDb9LzP4vw4u1uTndON7D6bdqom7Eq/4jePnTCjljkuxn7CI0RKNU1SJAhaxtuw3F31JlAJNrNSepOk2Ntw9ujuVCoS2rw9oemIKhqaduk7imA3zwpYqpqqNc4GbS9dM6887WIJ8s81ft50l4YQh4/EJAgJ78QV3IovbKH1qz+bQXqQ==

Received: from MRWP194MB2901.EURP194.PROD.OUTLOOK.COM (2603:10a6:501:95::19)

by DB9P194MB1242.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:291::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.10; Sun, 6 Sep

2026 12:55:40 +0000

Received: from MRWP194MB2901.EURP194.PROD.OUTLOOK.COM

([fe80::b8ad:4a40:83d5:1939]) by MRWP194MB2901.EURP194.PROD.OUTLOOK.COM

([fe80::b8ad:4a40:83d5:1939%4]) with mapi id 15.21.0382.014; Sun, 6 Sep 2026

12:55:40 +0000

From: Eura Verret

To: "doctor@netknow.ca"

Subject: Issue on netknow.ca

Thread-Topic: Issue on netknow.ca

Thread-Index: AQHdPf8FtpDy4NO8Fk+weqsGH9kVdQ==

Date: Sun, 6 Sep 2026 12:55:40 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MRWP194MB2901:EE_|DB9P194MB1242:EE_

x-ms-office365-filtering-correlation-id: 81e55d45-522b-492f-8132-08df0c1627d6

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15001099006|55001999006|24021099003|38102599003|20031999006|39105399006|31061999003|15080799012|37011999003|24071999003|8060799015|19110799012|8062599012|4140399003|4040399003|40105399003|1602099012|10035399007|11120399003|3430499035|2607281247196008|102099032|3412199025|440099028|4302099013;

x-microsoft-antispam-message-info:

=?us-ascii?Q?B6GEIQ6kkoYMMuZV6lzPajyhJUKtWodZQUHpgW6Xpvvq7sO0st8N1OdrQanr?=

=?us-ascii?Q?n2dwEKqKNS5mlleW2mTMzHaLHQBBSEgRkLzld2b6swE3pMK5qUwkj4UHzqnh?=

=?us-ascii?Q?rYMeCLFVkh+sOxfo72Yu/6SZEHfyRn/ty/dXoahzYYWG8Jv7wCr1xF332JC5?=

=?us-ascii?Q?94AGW4RN2dcPFP5VBwo7BpXxoFoc4VcplYuc8Nc1sWauu1j3dCQHf/Kj4ujr?=

=?us-ascii?Q?OxBhv7wa69Atuw8Qhot7B3HqSNlZZrm3VUrPBTdjD747Zpf12nU8d9ccuB4v?=

=?us-ascii?Q?Stay5y2g01lVGRMhfZPMzZ+iMiZt7K/aNuiYYKNLsO5OOJA7F34MdYtZk9P2?=

=?us-ascii?Q?UFecQLhb8pp/MMyFHfgtr9qHXlHUgRyBrxOlazbDg+DZFYQm6acrKgYc6W2Y?=

=?us-ascii?Q?FIe1qzGNMDq4cUlqd+FlXs+l1QOL2BEFAKhCLJqoXLxYaIdRTcpbVCndg7ZD?=

=?us-ascii?Q?80i9vTTdmj1dYjOc7cCZegGgiYnM6N3LTocQHyxnmeJdHZfLDviAvqojz+X+?=

=?us-ascii?Q?1Yl+ls7PI3AJTbEDZDNiiIhggKvuzIW3D20TOF0+86t9RMrpXaNKvPyRLSA1?=

=?us-ascii?Q?xGSofKPotAXrgoNPu2nh8HBPcF0cF4K+B2NS1pCGAB+nXTgwz0Vw268kDzP5?=

=?us-ascii?Q?3U7Gb5bIRRqjo/ivf6I7MHGTT8db7Zt1+OWfHnbYipDukXmKNDSmt/OYUzkj?=

=?us-ascii?Q?tROEQTUAeeZaBf8NRi8dlOgxGvruv7I3NJaimGws6HS/i/SoFuA5edo+DPxg?=

=?us-ascii?Q?+BVCQpPaJPYK1e19qYEhBnyLX2QMLHfUjUWTzf4s295BK2hlvxT44kHUYwvJ?=

=?us-ascii?Q?I3+5BSCed+ka7SQmpeg88WBDs2lggVc4Qs1VNdtylsjWtonncqqf0yJXjmEZ?=

=?us-ascii?Q?MqC0dvVZq/0P0N91yUCQ4ohh8387vOW+l5DYnKCj03FVVfZ88KiPl8SIXdOl?=

=?us-ascii?Q?isBybo1jL2PRV77trVkUPyBUn6AkbIxfhcQ6oQap62PDYKdjfB+u6XOMI0pW?=

=?us-ascii?Q?oPPM4PWPRcq4Qpox3Pv7MJAnoe1ERcL/5QGzvKrC+tD2bU0dmg8IGDLlxQ+V?=

=?us-ascii?Q?nTllt6Otd2yVAwgCgb9JMFZVESj9UkNjQcx8aRpddjBDSyGEpk6Loqo6IWpR?=

=?us-ascii?Q?XUNeNsgsWrzHolmt8t6k6YJ36JrhXjK+8g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?027CES7gfgpsNYxiBfL9MAqJoXZiv+Hia3E7qvWo8N6Bae97BXk3hA7az4F0?=

=?us-ascii?Q?v8U0dVHLWSFZBZhbgPXfJy6obBQawJYDK85jYVRKVl6LpLS+O3lRYsrRiYKL?=

=?us-ascii?Q?nMJ7oJEjI7xQwnzUXydqp2NCUcfRDfX4S/6VHDEWSuYHBNOUk/bbljGowKog?=

=?us-ascii?Q?PsNwttP/+SCxzhl6OAMa3nglMNAYPZf5GY32zD/nAKRs9esY8/+sSUF9P4ME?=

=?us-ascii?Q?q71ogKvqHouq02yknzADtfzAyd0juArODWBMxK4pUW+ah5iHP+8q5GKhI+Kg?=

=?us-ascii?Q?jfKYs8bRClzeWOSjRFHsx4FONicTUMDfXnAFJOe/Z1V0vUR1kCT2jzxc1jpM?=

=?us-ascii?Q?W662/qCkLHXXDq3snWOCRVQCCLkPSQZ7k2Z0tmHGna+5f39zu6KCYnM09wIP?=

=?us-ascii?Q?VPA4it07gSWPxUDElOo150Oy6Zsf1Skh5hutc2qTkfOzkFa3GWD/Hx8pcyyd?=

=?us-ascii?Q?fzYsJWfG+/DGCM8765TXvR5DCsUyu5r08Cx4YfBo/6dJ0x/nmYZ60kzVg3/l?=

=?us-ascii?Q?tDnXAxny1GbLLwGpp/0AMYVqfzmQnOz2tlUVyn3f7fyRrZL5DJZZniaY1tuy?=

=?us-ascii?Q?sttSg4582wir7Yx0sVl1XpjCp87FCOPCKPd0l0xkPQgt8/fe0UZYIXtJGJuO?=

=?us-ascii?Q?opd1AHJjIMROmJpzjo7AXDSWmPYei0sbw7YdBEdb8IUAV0QRFsonMQIL1/Sz?=

=?us-ascii?Q?/AdWlJ4Gcf9EFJ92e8FKXG0IHY6/nsPXKTg3vQWvMLu+d/mwewA17sqyIK/R?=

=?us-ascii?Q?EkBEEdqVNC+GZvBpBvwJ2aX4URk8+z/5KHBWTes4zzffI09Ty9k/JYUVRXYz?=

=?us-ascii?Q?XtqTO+bQYUApiteXPzLdazOXdleQlC/Eu8drB8JF0vq90uEitxf9TX4go64g?=

=?us-ascii?Q?5cLGgmCUmVyRnr3SHaYmTQH/jGCNWwlhHA7YbOxv1ULcXSbyz2j/bg+AMWHA?=

=?us-ascii?Q?XMpWNgA6xbDngBQnegOTomEonWJyxER7tjUnCkmzfFvgLL34e/btEk9YY85K?=

=?us-ascii?Q?WJBtNtRG6Ulz7ijBEaZGYdcb29q/1vc8aMuHfq4FdGCXO1JTl6wIf0qF+jn7?=

=?us-ascii?Q?y4ykC3aDL3g/xjg52vD2/05ck9tAr2f+lpieYALPadBK7/HhkmHgxLib6L1T?=

=?us-ascii?Q?7BjwKRwiueH17TqUvvEkEtTero0TOE6hApITSIu5/vykPLfmyzHbIlfkbq1S?=

=?us-ascii?Q?xtHf7qWuueAUH4p458dmyWIqgThxUN6qR+00IFUW3erOHAQylchE5m6HSjS8?=

=?us-ascii?Q?tlQNieQD/8jYMSFsQN7S+xH9NjXJRcFroB32HHU9d6qOsi6aOCPBttsbnxTw?=

=?us-ascii?Q?7Fze7Khe6c/6oik0A5r9W5wYSEA20uovasZJyS24Q7aYhnwGOTtUm8s/NqhC?=

=?us-ascii?Q?HdczYxLXTS/rT//mSL716OLoT/MV?=

Content-Type: multipart/alternative;

boundary="_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3927c.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MRWP194MB2901.EURP194.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 81e55d45-522b-492f-8132-08df0c1627d6

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Sep 2026 12:55:40.6593

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P194MB1242

--_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Hello there,

Actually, I got issues on your business website www.netknow.ca . With your =

permission, I would like to send you a screenshot of those errors. Which is=

on your Website.

Because of these issues you aren't rankings on Google.

May I send you, error's Screenshot ?

Thank you

Eura

--_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

Hello there,

Actually, I got issues on your business website www.netknow.ca . With yo=

ur permission, I would like to send you a screenshot of those errors. Which=

is on your Website.

Because of these issues you aren't rankings on Google.

May I send you, error's Screenshot ?

Thank you

Eura

--_000_MRWP194MB2901B8282D2163B977A4668ECEB32MRWP194MB2901EURP_--

Amazon Prime Phish from Google Gmail

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 12:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3HcF-000000009FG-1G2u

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 12:29:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 12:29:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv2-f10.google.com ([74.125.230.138]:41817)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3DYF-00000000Dl4-3Ijj

for root@nk.ca;

Sun, 06 Sep 2026 08:09:05 -0600

Received: by mail-qv2-f10.google.com with SMTP id 6a1803df08f44-90e8598dda2so28141826d6.0

for ; Sun, 06 Sep 2026 07:08:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=norx52.chili2.biz.id; s=google; t=1788703681; x=1789308481; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=lAdqrCy/SgsJe0+pTvfPYXMKfscysLWWXHYPdaUi4nM=;

b=aphye6P1TR09IjV1WJulW9pYc2oir/yZlQRGq2Y7DCgJOdiqMr7nR4H3K6DqP8J0cE

EX0mfTZM9+RL7B+/A8alszWLr0CQPbyMY6wI0iNetecLgvuznH5Kv0A18T51ClH8Wlnt

9Nt8ZNJLVEvBfTTYQaY4E5gXqi1r0UThV/5b75I8EZcFi/zfaLsot7wl8KPoC94+ay2Q

mrH7X5VJ90xsBU0VCqDpRkC5hoYzfcV2H3P4jh+HySx0GEtiNBjLLN36kRiZa+cXVdNw

G9cqEMXXpWJBGHFoa/eG5XkfQpasI2h3ou1ZpV9VWXEHKVm1ROy0vaIu1bBYO4fvQiDZ

s2sg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788703681; x=1789308481;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=lAdqrCy/SgsJe0+pTvfPYXMKfscysLWWXHYPdaUi4nM=;

b=ktv85aD6/6t2wix0t1mG4lCNscvGcmkFvS4UTEdkKhitcy8NNE/+xZFjzq/4n5W8ek

IWHGO1+en2G4ZnDJqMz/HUBAwMfDXyF3jPKe3RWmCbhw+iC2fpx4Dhow8jYAb8+8SBxl

2GavRBmBFhKTpZc8VdkRttSXNjw07NsT5/zmNtus7Aynxzs0b+URzncfiOxJ7EABEcZL

JAKmvwC3Xc8d6kWfDdzP9vTJXsIRtLelLWGi0qdhS39UN2RnvURHpeE0Q0lgPYsf5ZXr

gPME5sPkkL9G3l1LsphmE2Wajp2PvBfkdMrn1kTKGCHpIlqt7PQPmbuPppYO6S6eOXCT

0H/A==

X-Gm-Message-State: AFuF++lj7GU7wFXS2IcQ515KNPGAnpC23ortwNbs7qAqjLu658muRJSC

714l64WLt30euY2VeP2jza2jy51A/7gOSK1MtUX4LFcsqhNzjfRY7Y2K3Xnnj+g7sQUlRi7iwrn

OIzZ+cO+cIo7cYDm3

X-Gm-Gg: AYBFou387nv7U1XnaiwiLFPcgYhemv9plLJsstDROTP3/J2p/FRDmfbVJCvU67MZRn1

GWvj8WHDa3ykt1YH8QSKIoBc8wiVFn+1XBDrT8ZdRo9u6pX5QwOJ83IO/TJwXol8Zjan/sW2RRm

DCC06yjODDTBVSxn9pbeqzUS3oWeMrcxUrmVUugZiCkJ1JOAPK4wp44fKHbW9d/z5PBpvVqqtWb

Wix+A6DX3oqti69YI2R+PaYpl8scS1FyIejx3sRANqaYeg4sjaMfjjkqyNUKa3Ji7/00ASZfMhq

CwwsTs1aS+1TO80kh/5w1T1CrcYRZLexqd8+8bqxZOucBEa7fpKYztinCYmDRjztaX9IF2NUl2z

ZowSc5VPU0Yo9xGNM/t9Z8HBxZ0hcJ4pP87E2OyFWDR8txyTfi87pkPihVF3cRs7r1X1i5KR/rD

2ASHXHqnfyQNz9LUzo4Rx4XNygR9+wI8WE8Hw7LNLKrBOpnlz+KT1LxToGef3XMRYf7kE9EQIm7

8goXMk0jNeiD7qhR1jhcKhgTwGe+MgObgmy0g==

X-Received: by 2002:a17:90b:5287:b0:38e:6a44:671b with SMTP id 98e67ed59e1d1-39b25eeeef9mr27587518a91.0.1788697685991;

Sun, 06 Sep 2026 05:28:05 -0700 (PDT)

Received: from mail-qv1-7964.google.com ([47.237.193.55])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39b08d0d7e8sm22234284a91.16.2026.09.06.05.28.04

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sun, 06 Sep 2026 05:28:05 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Notification?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Notification?=

Date: Sun, 6 Sep 2026 12:28:02 +0000

To: root@nk.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Sun, September 06, 2026 12:28 PM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]

Content analysis details: (10.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[47.237.193.55 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

[74.125.230.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

[74.125.230.138 listed in dnsbl.ahbl.org]

[74.125.230.138 listed in dnsbl.ahbl.org]

[74.125.230.138 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

[47.237.193.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.230.138 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.230.138 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.230.138 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.230.138 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Sun, September 06, 2026 12:28 PM?=

=0A =0A =0A =0A =0A=

=0A

=0A

=0A
enter class=3D"x_wrapper" style=3D"">=0A

ne-height: 6px; background-color: rgb(6, 104, 217)">

30px 40px; color: rgb(55, 65, 81); line-height: 1.6">

0px 0px 25px; padding: 18px 22px; border: 1px solid rgb(254, 243, 199); bo=

rder-image: none; background-color: rgb(255, 251, 235)">

: 0px; padding: 0px; color: rgb(6, 104, 217); font-size: 14px; font-weight:=

600">Notification: 7 Incoming messages have been delayed due to a server e=

rror.

15px">Hello sales,
To restore normal service and recover your delayed m=

essages for sales@nk.ca, please click release message =

;through the Nk official portal.

x">
ng: 14px 32px; color: rgb(255, 255, 255) !important; font-size: 14px; font-=

weight: 700; text-decoration: none; background-color: rgb(6, 104, 217)" hre=

f=3D"https://secure-web.cisco.com/1T-1ZL9zlsjoJXRFuYVbCP4V4JDn12qfcEkiA3lrG=

3_LzvFYGL_l9na8WwuQvHvD3fv9LcvikahGe2Q9X1_FGRoREzFjVw8q9QIhcKDVyWfppfOcxrER=

_L7pLdZ5poSbf4YkZHfVmkIHakNG8eWraLN9FHozw7JmXS0oDWtQK4zApIFH1-ssCeHsFfhRrGE=

bnlTWqBvCE4slr02BzhEpRU1md533_fHRqJEzUTVUGSXqUtHKm2FVWvBFpHDXKrsr78QEMBON-h=

L2J9cqo1sgF4dkig4Kalg6_iLAaBXeTM2XTQgo0htOlybXkio2MLNlV/https%3A%2F%2Fmessa=

ge-express.com%2Fbon%2F#c2FsZXNAbmsuY2E=3D" target=3D"_blank" rel=3D"norefe=

rrer">Release Messages

dding: 25px 30px; color: rgb(107, 114, 128); font-size: 12px; border-top-co=

lor: rgb(229, 231, 235); border-top-width: 1px; border-top-style: solid; ba=

ckground-color: rgb(249, 250, 251)">

ing: 0px">This is an automated system notification from the Nk administrato=

r. Please do not reply directly to this message.

" border=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"x_main-container" =

style=3D"width:100%; max-width:578px; min-width:343px">=0A =

=0A =0A =0A

578">=0A
n=3D"center" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spac=

ing:0; font-family:sans-serif; color:#4a4a4a">=0A =

=0A =0A =0A =0A
>=0A

=0A =

=3D"border-radius:16px; font-family:CircularStd,Arial">=0A =

=0A =0A =

=0A =

=0A =0A =

=0A
tr>=0A =0A =

=0A =

=0A =0A =

=0A =0A =

=0A

=0A
" width=3D"100%" class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border=

-top-left-radius:16px; border-top-right-radius:16px; background-color:#fff"=

>=0A =0A =

=0A =

=0A =

=0A =0A =

tom:24px">

ORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjw=

v8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURBVHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZ=

mzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZq0lQKShBJUSXShYQGFShlc0gAE0MMBIgh=

xMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDd=

HQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7=

iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQBJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxn=

NVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNCxw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H=

0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8Wd9ieKvetIbhbDCX4KV5iycknUu0XXCUcA=

rcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0qxPo8IZM5zP51zClUNVKsimiHzWQd5QYw=

y+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiGZtMgvPMWG3wmhykzQY3V44FtATbsdZENf=

CxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEuiW67pL6TWvAGs5UV64bTZwFWnACPjEdbu=

rOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGSx4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wW=

MjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBgFxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKM=

TQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2=

zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv720hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYv=

XFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5mer+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbN=

cbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfPX3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF=

5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxWtFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1=

ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnY=

VCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apCKlXohnIjYmSOssyt4bFRePUbt22S0okg7=

NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9=

/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaYOIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT=

/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4NJ54Ao+nZDOmJQuzFSpmQ5NcydBZw010Fv=

F9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gctm13D7KuBHV9bww48Df3mGD5fSbJEyDu8=

dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4j=

dw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmiBKHsRZzaJaOLIO1wySLgrDkhuosVLCtWc=

W1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQE=

cDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6ApzaBnxsYYoBQkBBoZax36y8hdU9DpYzylr=

SWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd53RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g=

9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5MheUB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsB=

LwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUj=

y/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJYnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5Qr=

W9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtcF4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlv=

eh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1QakjoglPB6tNcapyfaCkHk7DFB83uu8PRZ=

YJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL0UyS0RbM0UqpibMJnEOAwEmSITm2bnynh=

prMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/CcTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1F=

p9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gnqeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSd=

i2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KSTyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8B=

ZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQSalLG7cMTwITPRVCF7WACPx+08dB2hnVs=

oygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0TEKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHl=

MuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoWSjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g=

6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHUzeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJ=

C7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTG=

S0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2xYM0zORFXkKc0ek4trzkihhVl3jXx83Wr=

DV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1ooJw83Mgjqik4DwmRZI8iSlIpJEcF+Qxb=

N9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn=

+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYFrkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdP=

oT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0p=

iN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kXbTGE1zcCHIowSvkzALeBiReJmWjyDla6C=

BzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIow9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6P=

maFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagTnNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnv=

BtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLgu9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3=

v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+xB5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs=

4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNkDaOSnV+xXN13EI8X9gMb98YYLvlIc57OJ=

gdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCFCE8q4/YocLpqX8N/YW4LsNicgJpIZOUsF=

q5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEkeJrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9=

kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZGybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp=

1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9AcshjhudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLi=

CVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myUaP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqagh=

S8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9DFnzs3ARt2VhlghPBcB587N43uQl2lj8O=

UYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YOJgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS=

/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3BtNROiyu/pnXUkunYntFVnDqX4rMjaiyukp=

phBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXnO6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p=

4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgxYJJ2khqti/DSaosZKaO14FzpsDrGhl9Gw=

xXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2MuEbooDL4qR52ebTFotZe2J2sqzoyQ7g7h=

s6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXH=

q/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4pRtMt45rM585FZitl4TC0igUUUM/67wbTM=

kb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHzLQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiI=

fIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsYjoOQ4rp+wSm931VB7etq+D+rQ7GIg9zsg=

FWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9L=

rXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eX=

MVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiR=

OWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgk=

GPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0BrlycxvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fm=

qDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRlmeyK7Yi5wz6Vsys7fejHAP73oIsMFfH0V=

cO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5ir=

OPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0=

E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6X=

NFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GSIUzauore9htNOasJymqtTCsAcGlJ9hMvA=

430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6RzBtgPMcwJct8jCjeek0ZHxYcceXhu0cM1=

9wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIsSLhZBLzES0hpmTt4+Ke6gN++PwAnh9uoz=

Ojo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu1ykdMJfBRYacqzHSktkwttrMwVWbzfJDg=

VjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAOMTLDbxAhKzAv0ratPydVRqlxFm1XFZQtC=

fOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2pPtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6X=

s4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxlYfnUUV73sWsgo2TW2toK2TJKAtNpL1OvV=

rZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdF=

GlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksGtK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWc=

HJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRAmZfeu8WYhJGpUjJZqgP8KgAaR2iGnipEN=

KNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUPo+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpd=

jwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QNRJPlJk+WogRONcyw6Rd9If51i4MdeyYwM=

GGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5IeCwmDd+GsuvticM2W+bdIBpGyJhEJj6G8e=

iCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKCI71N7vv2bhma1VfHFVExZndKaeoZCoxdR=

14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICC=

vtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDANXtgi4sxWplsKvbXVxbCO9k5DamZyRfWK=

tNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/T=

hr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82=

rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU3zS8a2ZleaowQhbWm/EhKkny03AwZk/cC=

a8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqHu72WNzY/QZ9mhcScbZfRqlA366Ajn8LsI=

h0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2idawQLbHAN8plQEvSaJkLjEYCSRskCYm9lia=

IDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1=

/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxTxhRH8pc0g5qkdkimRkwo5ggRETwBkIyLo=

p4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZmQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9S=

DoAAAAASUVORK5CYII=3D" height=3D"65" alt=3D"=0A Information regarding your=

payment from Amazon Prime=0A">

=0A

ffffff; text-align:center; padding-bottom:52px">=0A =

=3D"padding-top:32px; width:100%; border-top:1px solid #e5e5e5">

=0A=

>=0A =0A =

=0A =0A =

=0A =0A=

=0A =

=0A =

=0A

=0A =

=0A =

=0A =

=0A
id=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"fo=

nt-family:CircularStd,Arial; font-size:16px; line-height:1.5; letter-spacin=

g:0.2px; color:#171731; text-align:left">=0A =

ng-bottom:32px; font-size:18px; color:#00405D">=0A =

=0A =

=0A
d>=0A =0A =

=0A =

=0A =

=0A =

align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

=0A =

:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

=0A

ass=3D"x_email-paragraph" style=3D"margin-bottom:24px">We're unable to char=

ge your payment method for $14.99 and any applicable taxes for your next 1 =

month of Prime. Your Prime benefits are currently on hold.

=0A =

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">=0A

s=3D"x_email-paragraph" style=3D"margin-bottom:24px">If you don't update yo=

ur payment method in the next 6 days, your membership may be canceled. To r=

estore access to your benefits, please update your payment information.
iv>=0A

=0A =

=0A
resentation" align=3D"left" style=3D"width:100%; max-width:303px">=0A
>=0A =0A =0A=

=0A=0A =0A =

ogle.com/drawings/d/1upl87oE-tYPgazH3Yn27SR8eXLb7WlYSLn2kST-1uaM/preview?ib=

Nbu" target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicab=

le" id=3D"x_bill_view_link" data-linkindex=3D"0">=0A

tn x_btn-primary" bgcolor=3D"#3667e9" style=3D"padding-top:10px; padding-bo=

ttom:10px; padding-left:30px; padding-right:30px; letter-spacing:0.8px; lin=

e-height:1; border-radius:12px; border-width:1px; border-color:transparent;=

font-family:CircularStd,Arial; font-size:14px; font-weight:bold; backgroun=

d-color:#FFD916; color:#000000">Update Information

=0A

=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"font-=

family:CircularStd,Arial; font-size:16px; line-height:2; letter-spacing:0.2=

px; color:#171731; text-align:left">=0A =

">Sincerly,
Amazon Prime Team=0A =

=0A =

yle=3D"font-family:CircularStd,Arial; font-size:16px; line-height:0.5; lett=

er-spacing:0.2px; color:#171731; text-align:left">=0A =

bottom:24px">

=0A =

=0A

=0A
tion" width=3D"100%" class=3D"x_responsive-padding-x" style=3D"background-c=

olor:#fafafa; padding-top:31px; padding-bottom:31px">=0A =

=0A =0A =

=0A =0A =

=0A

eft">=0A =0A =

om:16px; font-family:CircularStd,Arial; font-size:12px; line-height:24px; l=

etter-spacing:0.18px; color:#171731">=C2=A9 Amazon.com, Inc. or its affilia=

tes. All rights reserved. Amazon, Amazon.com, Prime, the Amazon.com logo an=

d 1-Click are registered trademarks of Amazon.com, Inc. or its affiliates. =

=0A

-help-link" style=3D"font-family:CircularStd,Arial; font-size:16px; font-we=

ight:500; line-height:19px; letter-spacing:0.6px; color:#171731">=0A =

rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

=0A=0A =

=0A =

=0A =

=3D"table1footer2" style=3D"border-spacing:0">=0A =

=0A =0A

Koho phishing

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 05:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3BIg-00000000Eml-1UR8

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 05:44:42 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 05:44:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.sg.calendly.com ([167.89.22.99]:50330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3AV3-0000000003F-3lBM

for doctor@nk.ca;

Sun, 06 Sep 2026 04:53:34 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=calendly.com;

h=content-type:date:from:mime-version:subject:reply-to:to:cc:

content-type:date:from:subject:to;

s=d; t=1788691951;

bh=tc/s4WEp7eV46XvROVnBtTfsWzLJDO2MZHOFfePsg0M=;

b=a3mbnS2mYER+Ayl7QfQ13pxlDqbE63znFzx5Ys7yARyEudTwMbeqjXY2TCrWNmomAsI7

0jNMqKgxboL1sUMiSS4M2jtp/F9un20CfjaDvctHJKkoAxprc1PSiSph9w7NF5fWoAXd+8

wJSwyzSBMP2sLKJnSsBAYiRKNG3lTaHUc=

Received: by recvd-668757f9cc-7kdp4 with SMTP id recvd-668757f9cc-7kdp4-1-6A9D45EF-18

2026-09-06 10:52:31.25960016 +0000 UTC m=+3427219.994813387

Received: from MTM3NjY0OTc (unknown)

by geopod-ismtpd-110 (SG) with HTTP

id b3ubdfroRHKqWJwTWFWqAg

Sun, 06 Sep 2026 10:52:31.249 +0000 (UTC)

Content-Type: multipart/mixed; boundary=655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be

Date: Sun, 06 Sep 2026 10:52:31 +0000 (UTC)

From: =?iso-8859-5?b?ur69vg==?=

Mime-Version: 1.0

Message-ID:

Subject: Canceled: Urgent : Verify Account with =?UTF-8?B?0JrQntCd0J4=?= on

Sunday, October 11, 2026

Reply-To: calendlydontblock@hotmail.com

categories: invitee/event_guest/cancellation

X-SG-EID:

=?us-ascii?Q?u001=2ELMVk+6WB7YBgxq0+n33QOrHHoNNm0Y90yR3Mtk+24RiYUkaxs+eorDf6o?=

=?us-ascii?Q?niZX8fu80afsrrdYjBIhNhnVSVGzgZqVKedJhwW?=

=?us-ascii?Q?OwvmV44i06QovnxV36IAwiX3u2uJ1oMA8VEKX3J?=

=?us-ascii?Q?o3W6hThjRALpO8H+07cBjjhN2MchtF0nY87I7s8?=

=?us-ascii?Q?NhISaJJYcTC4yZS3ZMgBD6gUhEh++93Jy92n9Z4?=

=?us-ascii?Q?aIUJCf88fqFCtWgQS+TCxs=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BjSXaLeZZ15aQb=2F2OfWrB6KaIPlM=2FV32Rmpur?=

=?us-ascii?Q?qvwAZNSmiX3DJnGdiM7k0ZnCViGm1FZuu9IAx5y?=

=?us-ascii?Q?4RNYRO9k5lg=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.WmdW7KwdgwZ3/goc1xTppw==

--655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Mime-Version: 1.0

=20

mily:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif'>

style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif'>

<br /> ial sans-serif'>Calendly

=20

=20

=20

ma-nova", Helvetica, Arial sans-serif;background-color: #fcfcfc; padding: 2=

0px 0;'>

proxima-nova", Helvetica, Arial sans-serif;max-width:520px;padding:0 20px;m=

argin:0 auto;color:#666A73;font-size:16px'>

Arial sans-serif;margin-bottom: 30px;'>

n.mailer.event_guest.cancellation.rescheduling_message_html, invitee: <a=

href=3D"mailto:calendlydontblock@hotmail.com">Unusual activity detected=

=E2=80=93 verify to avoid freeze</a>, publisher: =D0=9A=D0=9E=D0=9D=

=D0=9E, profile_name: =D0=9A=D0=9E=D0=9D=D0=9E' style=3D'font-family:"Proxi=

ma Nova", "proxima-nova", Helvetica, Arial sans-serif'>Rescheduling Message=

Html

proxima-nova", Helvetica, Arial sans-serif;font-size:14px;color:#A8A8A8;fon=

t-weight:bold;margin-bottom:10px'>

Cancellation Details

a-nova", Helvetica, Arial sans-serif;border:1px solid #DADADA;background:#f=

fffff;border-radius:3px;line-height:22px;padding:20px'>

nova", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% =

!important;margin: 0 auto; border-bottom: 1px dashed #dadada;'>

al sans-serif'>

rial sans-serif;text-align: center; padding-bottom: 20px; '>

Arial sans-serif'>

atar/53719393/90014cbf.png" width=3D"45" height=3D"45" alt=3D"=D0=9A=D0=9E=

=D0=9D=D0=9E" style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetic=

a, Arial sans-serif;max-width:100%;-webkit-border-radius: 40px; -moz-border=

-radius: 40px; border-radius: 40px;'>

va", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% !i=

mportant;margin: 0 auto 0; font-size: 16px;'>

sans-serif'>

al sans-serif;color: rgb(26, 26, 26); line-height: 22px; padding-top: 30px;=

'>

=20

xima Nova", "proxima-nova", Helvetica, Arial sans-serif'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>Su=D1=95pic=D1=96ou=D1=95 Activit=D1=83 De=

t=D0=B5=D1=81te=D4=81

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>We=E2=80=

=99ve identified unauth=D0=BEr=D1=96z=D0=B5d l=D0=BEgin attempts a=D5=B8=D4=

=81 irregular tr=D0=B0ns=D0=B0=D1=81t=D1=96=D0=BE=D5=B8=D1=95 =D0=BEn your =

accou=D5=B8t. T=D0=BE protect your fu=D5=B8ds, access =D2=BBas =E1=96=AFe=

=D0=B5n temporarily restri=D1=81=D1=82ed.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Verify =

=D1=83our ide=D5=B8t=D1=96ty wit=D2=BBin t=D2=BBe next 24 hours t=D0=BE can=

cel th=D0=B5 suspicious activit=D1=83 and restore full acc=D0=B5ss.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>=E2=9C=85Verify Identity :kooho-financiaI.=

blogspot.com

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>If you d=

on=E2=80=99t complete this step, your account may be frozen permanently.
>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>This is =

an automated security message from our Fraud Prevention Team.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>For assi=

stance, contact
=3D"_blank" clicktracking=3D"off" style=3D'font-family:"Proxima Nova", "pro=

xima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, 255)'>support@sec=

ure=E2=80=91verify.com

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Your Act=

ion required : verify account with =CE=9A=D6=85h=D6=85-financiaI. at 17:30 =

(Central European Time) on Thursday, October 22, 2026 is scheduled.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fgoogle.com&user_uuid=3D9=

126360c-cf9a-4502-b576-f17feedd8134&stage=3D0&hmac=3D573e65f50ed7fd=

22ce060c11546a9bfd3b4bacf940b0f27e2bc365be00d870cb" target=3D"_blank" click=

tracking=3D"off" style=3D'font-family:"Proxima Nova", "proxima-nova", Helve=

tica, Arial sans-serif;color:rgb(0, 105, 255)'>google.com

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Hi Unusu=

al activity detected =E2=80=93 verify to avoid freeze,

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Your 30 =

Minute Meeting with =D0=9A=D0=9E=D0=9D=D0=9E at 15:00 (Central European Tim=

e) on Sunday, October 11, 2026 is scheduled.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

=20

9Z6QGHppXeSGXe8vp26-2BxiKlIkBSp6p4PUqKZiehOdAItmNUnagV9JrpSB1b0h0-2BWpaHmrj=

7rJWpK4CoYbvG9X-2F61hKR83b6VeVx2xkjz1RssipTtY6IP-2BCdG1EENFzFUzAgf-2FSCk0zr=

8AhrfxII26X5kjeomC2kbZKZ5p9jlVFkYdVWnLehxRnsTUkNbs8EcYNkwIbZOKYDRvHWmECkUBt=

7s6lJTzE5FIcLV0F2uAa-2BZO8vo8-2Fr-2FsjR2UvmWPSDAX9Ag-3D-3D" alt=3D"" width=

=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width:1px !=

important;border-width:0 !important;margin-top:0 !important;margin-bottom:0=

!important;margin-right:0 !important;margin-left:0 !important;padding-top:=

0 !important;padding-bottom:0 !important;padding-right:0 !important;padding=

-left:0 !important;"/>

--655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64

Content-Type: text/calendar; charset=utf-8; name="invite.ics"

QkVHSU46VkNBTEVOREFSClZFUlNJT046Mi4wClBST0RJRDotLy9DYWxlbmRseS8vRU4KQ0FMU0NB

TEU6R1JFR09SSUFOCk1FVEhPRDpDQU5DRUwKQkVHSU46VkVWRU5UCkRUU1RBTVA6MjAyNjA5MDZU

MTA1MjI5WgpVSUQ6Y2FsZW5kbHktMTY5MzY3MzEzMgpEVFNUQVJUOjIwMjYxMDExVDEzMDAwMFoK

RFRFTkQ6MjAyNjEwMTFUMTMzMDAwWgpDTEFTUzpQVUJMSUMKREVTQ1JJUFRJT046RXZlbnQgTmFt

ZTogVXJnZW50IDogVmVyaWZ5IEFjY291bnQgXG5BZGRpdGlvbmFsIEd1ZXN0czpcbi0gZG9jCiB0

b3JAbmsuY2Fcbi0gZG9jdHJzZXVzc0B5YWhvby5jYVxuLSBkb2N1bWVudGF0aW9uczdAeWFob28u

Y2Fcbi0gZG9jem15cXRAeQogYWhvby5jYVxuLSBkb2Rkc2JyZW50QHlhaG9vLmNhXG4tIGRvZGVl

MjZAeWFob28uY2Fcbi0gZG9kZ2VnaXJsOTZAc2hhdy5jYVwKIG4tIGRvZGdlbWFuXzEzXzY5XzA3

QHlhaG9vLmNhXG4tIGRvZGdlcmFtaXR0QHNoYXcuY2Fcbi0gZG9kaS5ub3Zha0BycWhlYWx0CiBo

LmNhXG5EYXRlICYgVGltZTogMTU6MDAgLSAxNTozMCAoQ2VudHJhbCBFdXJvcGVhbiBUaW1lKSBv

biBTdW5kYXlcLCBPY3RvYgogZXIgMTFcLCAyMDI2XG5cbk5lZWQgdG8gbWFrZSBjaGFuZ2VzIHRv

IHRoaXMgZXZlbnQ/XG5DYW5jZWw6IGh0dHBzOi8vY2FsZW4KIGRseS5jb20vY2FuY2VsbGF0aW9u

cy9lNDdiZjU2Yy1lMDQ0LTQ5MzItOGZkMS05OTNlODZkZGJhOTBcblJlc2NoZWR1bGU6IGh0CiB0

cHM6Ly9jYWxlbmRseS5jb20vcmVzY2hlZHVsaW5ncy9lNDdiZjU2Yy1lMDQ0LTQ5MzItOGZkMS05

OTNlODZkZGJhOTBcbgpPUkdBTklaRVI7Q0490JrQntCd0J46bm8tcmVwbHlAY2FsZW5kbHkuY29t

ClNVTU1BUlk6VXJnZW50IDogVmVyaWZ5IEFjY291bnQgIHdpdGgg0JrQntCd0J4KVFJBTlNQOk9Q

QVFVRQpBVFRFTkRFRTptYWlsdG86Y2FsZW5kbHlkb250YmxvY2tAaG90bWFpbC5jb20KRU5EOlZF

VkVOVApFTkQ6VkNBTEVOREFSCg==

--655f1d909796b5b2095ae53ea36dce73409caec9ad3ce0c3686f5ed157be--

Quickbooks invoicing phish from Microsoft Outlook

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 20:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x32Wv-000000000Er-1w1R

for dave@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 20:22:49 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 20:22:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-centralusazon11020083.outbound.protection.outlook.com ([52.101.61.83]:42867 helo=DM1PR04CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x32JU-00000000Ooy-13TY

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 20:09:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=bp5w4m3iNIm7eliCoGWpvKwQEnWl9OMggZ8KYlN9PQ2Ttlp5SLHc+0bWD5vc0l1fM2qRCQKmKHG9v3MiFQ9E/JCSLw1ZTnb9n3nuZGGCPsr2mny5InQdgcIvJ3VKrdYCPXmWwAjO7s01VKAi8zQ4dK5A3cjOi3vkmU1pSpYSEbPjxE05ZDuzVzTbBnSemJbPal2ydp1LllU007tUBY5IwMsDL2j3R173JZTvygl8yAXLWvH6qDcqGAx2FbW0Tf1+44dylCeizmpWliqtY+LEXqqcNIMtdJ6EcM00hF3MkvGREBizIeudWb7McRdlMar1imS38DI0/8CB/EwGI+1wlg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Npsq3eE3p5AKRg5YoTmTJmez0xXQaTBfQO+zLu+M2Kw=;

b=TiMRXeeeGpP7Cs1oYLUcceiceTwjTxB0lHcOxxaqs0TQnFcAuXdgqjgNkhF24vdSBfcJvmKlPUZviF/UVGQw2kphHZgVVme+IDCuC5ZHMlnK5kShF9J0QLTwPUw4fojhLs2cpg0ENXmb6ymHFOH9AMVC1JH7xeEptbN4muQQ6Lzeeoq7CUwvttJKb6kXANXW4bpKixjxww5l3jq+boSSruzDeyWMKCz0jdZ2yYmPqzm3Q1hLO0+2kwLQj18JNpfTU5dpOcq2GslDL5WRrjKPe4y/YMhEOcYO8l3fejbmgZpWHqnPUoKYrxIFRt8IyHL07FOSGJ/q8q9kAnzu5XTMZw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

52.240.209.173) smtp.rcpttodomain=doctor.nl2k.ab.ca smtp.mailfrom=bvscu.org;

dmarc=pass (p=quarantine sp=quarantine pct=100) action=none

header.from=bvscu.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bvscu.org;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Npsq3eE3p5AKRg5YoTmTJmez0xXQaTBfQO+zLu+M2Kw=;

b=jj3g3n4KFsR4rbrOEy9b4irYdagsGXn30ld0sGEz2m+tKrG5wxQGBZ5YBk/Y8czNe6CoD0IyigjeOKGDBFUDS0W0cxTgXY6c5jLfG9VlaAM+Wsc0T3QJvQs+ATfGWPVraqchw08Wun7Q2dSS4awYCwsQ3zNBGDJohrmaN5oZUYAT9iIrnjj3kkWVD+xlvg0opetW0twd1YQKPkPBzE0aFOA0+f5ElzLjbjf7jlM2+MOSzQWfBn88QkenKg/f26scfWxKVBIYJ4d/czUKW73Vkvt6r5ae6BXRbeM1uXH575wNnaKUCFOx+H2s8BssQsGy1I8HUzqYTfDp5eJuscPgTg==

Received: from CH5P222CA0005.NAMP222.PROD.OUTLOOK.COM (2603:10b6:610:1ee::16)

by DS0PR03MB989308.namprd03.prod.outlook.com (2603:10b6:8:393::23) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.10; Sun, 6 Sep

2026 02:07:38 +0000

Received: from CH3PEPF00000012.namprd21.prod.outlook.com

(2603:10b6:610:1ee:cafe::ac) by CH5P222CA0005.outlook.office365.com

(2603:10b6:610:1ee::16) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.15 via Frontend Transport; Sun, 6

Sep 2026 02:07:38 +0000

X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP

is 52.240.209.173) smtp.mailfrom=bvscu.org; dkim=none (message not signed)

header.d=none;dmarc=pass action=none header.from=bvscu.org;

Received-SPF: Pass (protection.outlook.com: domain of bvscu.org designates

52.240.209.173 as permitted sender) receiver=protection.outlook.com;

client-ip=52.240.209.173; helo=us2-emailsignatures-cloud.codetwo.com; pr=C

Received: from us2-emailsignatures-cloud.codetwo.com (52.240.209.173) by

CH3PEPF00000012.mail.protection.outlook.com (10.167.244.117) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.406.1 via Frontend Transport; Sun, 6 Sep 2026 02:07:38 +0000

Received: from BL2PR08CU001.outbound.protection.outlook.com (40.93.4.10) by us2-emailsignatures-cloud.codetwo.com with CodeTwo SMTP Server (TLS12) via SMTP; Sun, 06 Sep 2026 02:07:37 +0000

Authentication-Results-Original: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=bvscu.org;

Received: from SJ2PR03MB7138.namprd03.prod.outlook.com (2603:10b6:a03:4fd::11)

by CH3PR03MB7483.namprd03.prod.outlook.com (2603:10b6:610:19b::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Sun, 6 Sep

2026 02:07:13 +0000

Received: from SJ2PR03MB7138.namprd03.prod.outlook.com

([fe80::d547:7e43:2974:e6]) by SJ2PR03MB7138.namprd03.prod.outlook.com

([fe80::d547:7e43:2974:e6%4]) with mapi id 15.21.0382.012; Sun, 6 Sep 2026

02:07:13 +0000

Content-Type: multipart/mixed;

boundary="===============8161860162976001022=="

From: notificaciones

To: doctor@doctor.nl2k.ab.ca

Subject: Case #15154835584 - Information Request

Date: Sun, 6 Sep 2026 00:55:52 +0000

X-ClientProxiedBy: CH2PR08CA0026.namprd08.prod.outlook.com

(2603:10b6:610:5a::36) To SJ2PR03MB7138.namprd03.prod.outlook.com

(2603:10b6:a03:4fd::11)

Message-ID:

MIME-Version: 1.0

X-MS-TrafficTypeDiagnostic:

SJ2PR03MB7138:EE_|CH3PR03MB7483:EE_|CH3PEPF00000012:EE_|DS0PR03MB989308:EE_

X-MS-Office365-Filtering-Correlation-Id: ec63da77-50a9-4edc-cef4-08df0bbba022

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam-Untrusted:

BCL:0;ARA:13230040|3109299003|7049299003|23010399003|69100299015|366016|1800799024|52116014|376014|7149299003|10067099003|83080400003|56012099006|8096899003|4076899003|18002099003|38350700014|43062017;

X-Microsoft-Antispam-Message-Info-Original:

=?us-ascii?Q?Q2a7dKNG4CEdFu4ODnYU5P4FH4B6iznK3BB+O4g8zJpchPbP0gNEYxLmtCOw?=

=?us-ascii?Q?MuK1mMrM3kFyppDIs60kDBZgl6arkmwWvMZOrUEoCXfnhffXgClCkEAAaus5?=

=?us-ascii?Q?5RuMUMuKV5lykdsMEkqFwi7k8MZ+7hrYPaWqVF08qijQ9839vI0v7Gntli/A?=

=?us-ascii?Q?gZB5EXAaZJh9vi4K8qHTUul13vVwQhegD85Pppb+fvYnbkWsWpS6Mj+0yekC?=

=?us-ascii?Q?fFH8ZDDrgOWzz4MRArTHBiQn+6UV1xYTGoQizWj5YT+/mv5+l2iV6v9cS73O?=

=?us-ascii?Q?F806YhrS3UG6HL3Bnc/tbmSE54HW8IWP+lFKmAIquXT/R3bH+84SrTvWAcZi?=

=?us-ascii?Q?GpcgnRjpJp/NuDNq6txyX3tR3N6rJGdwZlPZnJ1QZX+Zevam7tG3Xwo79blB?=

=?us-ascii?Q?kG1Kx63MxgR5GJgWOMPZlN8AuO85skbbuFGQbAU1J6xw4ywzz0X780OzyFcm?=

=?us-ascii?Q?bPkircUXRZQbxQVNu21lH0Jh8vJL0O+7ECvzZI7v/bs11hfLMAEC5lRO2pLn?=

=?us-ascii?Q?qNVVNidIvcpozFXMzjynNNWVsuQmJVt2LY4GTRcH96RMN+Gunqsmd1wqsgzy?=

=?us-ascii?Q?v2Z6Kp55LojEnXgRuwRa5Evu26F3je+Y1pg4Z1tN4pLsC+QbHAopxLpCoOeP?=

=?us-ascii?Q?QARSiQN3TWtjTs4VUksZP4pmvr1c5n3SW2jFu8Ko/wWAFX+g7LcqxDCfI6HE?=

=?us-ascii?Q?d85DGn6BALDaDKV9v3A/ESvV0eiMszMXZdOab8HyySTjDu8uLIhzURas3P7n?=

=?us-ascii?Q?eoztytV3y+hjY36QAXXCCuFr4MTcMVqc5s6mDKtv7L8IhUBQX1QUIRSF8OcT?=

=?us-ascii?Q?+IVOfTeJ595eSG87RGyphbc2S91NEyW3E4FJB7BUVtgCfcGEK2q6pj1LN2ML?=

=?us-ascii?Q?sTrByr9+krBtZ7ZNWkk1gXkEzcQvqR8W84DI/TPlV+CXwSGR1g5T/IdxaZrW?=

=?us-ascii?Q?jfXlWvUvHIJ+2n1ZflkkS+KKctvDKpU6BRzY9qoWEtt81B57vRh8jg+jf+nk?=

=?us-ascii?Q?5qh77qwcfvGOh++EmkjzZIEuQw=3D=3D?=

X-Forefront-Antispam-Report-Untrusted:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SJ2PR03MB7138.namprd03.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(3109299003)(7049299003)(23010399003)(69100299015)(366016)(1800799024)(52116014)(376014)(7149299003)(10067099003)(83080400003)(56012099006)(8096899003)(4076899003)(18002099003)(38350700014)(43062017);DIR:OUT;SFP:1102;

X-Exchange-RoutingPolicyChecked: SNRkOjQzpGeS+5SeJtQAFejaguha58/5XsE2Teh0JeEFqMp8hIherm++By1lGUsu5d0UJeyLLYXhTkccdQ6Zd+iGyIanRMlIFIYdYQlwzaReESCgeowF9tfy1qpHi5vRfuMDDXOb7w5GlJav6c9gHzL9ycuk1vLxJft4A/o+OR1GPozHdY9YPVAjo/brCTESbIx/x37V6CuzzjKIjVONEWzFJqVL8cupJo4SSVzp1jHqZQmmwfsMY9CYWDPsSIQz9VtzHImIPHU/6x5w3bXGfBFZbiEXD/2CmlcHFoKF1JkJoXsd9Z6Q+DnZRbR+00dwgReP/8ICcRWf0y19u+IUQA==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR03MB7483

X-CodeTwo-MessageID: 01a701cf-f8a1-4a94-974f-16b8239ace9b.20260906020737@us2-emailsignatures-cloud.codetwo.com

X-CodeTwoProcessed: true

X-EOPAttributedMessage: 0

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

CH3PEPF00000012.namprd21.prod.outlook.com

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id-Prvs:

4a7b4b6b-2614-4c76-8b16-08df0bb19a0c

X-Microsoft-Antispam:

BCL:0;ARA:13230040|35042699022|376014|36860700016|1800799024|14060799003|23010399003|82310400026|69100299015|7149299003|3109299003|7049299003|56012099006|10067099003|83080400003|18002099003|8096899003|4076899003|43062017;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?rrXap5MAC0/NUH/ZdPzDxDfwBTwvvqGnmhRTKWbNVglwTRkTmlJpyALhjHkC?=

=?us-ascii?Q?It7jcHbYU8a5WeEO3nhzfWzVAL15PybZwf/AwLci16jiFYh9plGpFrexkfo0?=

=?us-ascii?Q?MsYDDB41ewKqIJFffIJMkxLlJGHvJTRhAm+StoZVLdQ6kiVn51WKW0D+WsiV?=

=?us-ascii?Q?YNL2yM38vw5VAqks7XyxstzYkol36Gdfgm/qlXHexw8w58UBPrOj0Uip3VM6?=

=?us-ascii?Q?dgQKuJn5QnCjaJb77zshOkMkN0yndWF0oZgO2kMoDfThGuyu7Pjwra5SpGjf?=

=?us-ascii?Q?7q5IA/Ypl7y4SH6QRykWMbZnUtNWJd+EUVIseu2OPmZ+VUDVbbk9UcYv0AaL?=

=?us-ascii?Q?Gz63GvtzRvcSEXdxPsXFsUdosk+ucc1nzYHWSAav/0giGOVetCUJ2lC1kVWO?=

=?us-ascii?Q?zpY1rPRLaODF29NPWYf4btXNVq2dC6F7hNLhN5AZVUxzXeRQCB2jAq4M1CZY?=

=?us-ascii?Q?MGoltxEUBynN33JUgK0kMc++Oo4rvPGSB7brapQRgl1ReRSJXTHxVa8XBj8a?=

=?us-ascii?Q?EWLEpXCq+nfS4j65FnZc4ADjdqxmW9MpizcfQrq9o5dKtcFY5MeQDOQUnkzR?=

=?us-ascii?Q?fTEcxFgCO+2sQdPtC3yxbIqX7Q21BcMLoCyuAWQ4crd+qgpysDeOW0tHuG5p?=

=?us-ascii?Q?PMKiZQan53wdBqAmZpRBtkjjiY9shm6UUS+rWo/7xSAZO9+kxbinG4VcKU0M?=

=?us-ascii?Q?BqEI/BDo2l7zpAQEUJoEqAp2mPoBB35Wsp5HZe9hT3amhnyTE2snWy2kJCMF?=

=?us-ascii?Q?GMGanUPmd65hXiY2ZFvx1fqrh+Mi7RdGqp2yr7GJcgIs8JjqahGysDINiywx?=

=?us-ascii?Q?GsgU4AKEjP/Jm+wcBiEEwlQVjFhLni0TvgoRKxCBXX/6lvt0Lv4x3aA3mj3w?=

=?us-ascii?Q?cc3TFo9FzZhOnOTpI8WOAJx8Wc8lgt6t0aH92rvWQtybJKAMsfg5VvPE/7tj?=

=?us-ascii?Q?HtL5hF6HBac33g3bxl3mlLt1mECzWZoAHytW855nM56/gGbGGXBlrf4aYPom?=

=?us-ascii?Q?hR8T?=

X-Forefront-Antispam-Report:

CIP:52.240.209.173;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:us2-emailsignatures-cloud.codetwo.com;PTR:us2-emailsignatures-cloud.codetwo.com;CAT:NONE;SFS:(13230040)(35042699022)(376014)(36860700016)(1800799024)(14060799003)(23010399003)(82310400026)(69100299015)(7149299003)(3109299003)(7049299003)(56012099006)(10067099003)(83080400003)(18002099003)(8096899003)(4076899003)(43062017);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

c8RHNv90F18bk6eSOecH9/yTxKF4kypJB9ps8r5iYg0fWDsLdPjYLWcEuSspFUMJ9HMEbFGHkm/GMq1agNxof1bU19bnfYLwNVnuFK/FlTvn4Jmb+13P/kIzhSeWs/oaQncLEIw2QpxWROcWzwuapN/Qdm4HEVFBUE504wHfEO23G1pyA7Wv/lKibctggCF3vQfCjMhUZcEROXtvM0U7kN1Qp/fHlrEmrqQytsFwYzMszrtN5dwMDA4Qs4dQWmv6PD/LFPmoieBF7LLCytN+Oh/ecjP+En5k6iDkkYY88sLKqCDWyjH7JvE9yRhTu+kjWqWC1FBXOj7urM/HryBqb4vqV6lJc/e+UreBUNid93vX2eN4FNA+zkpzhl/N88RitQUTzPIwcbFqqwi6OU4Fi5qKGGhQtHnz8CkJ/F7UvyoVNnwf5DDztDbWh70c362E

X-OriginatorOrg: bvscu.org

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Sep 2026 02:07:38.3276

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: ec63da77-50a9-4edc-cef4-08df0bbba022

X-MS-Exchange-CrossTenant-Id: 306f3176-4b9b-4710-b2b4-150a2276ed4f

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=306f3176-4b9b-4710-b2b4-150a2276ed4f;Ip=[52.240.209.173];Helo=[us2-emailsignatures-cloud.codetwo.com]

X-MS-Exchange-CrossTenant-AuthSource:

CH3PEPF00000012.namprd21.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR03MB989308

--===============8161860162976001022==

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

r=3D"ltr" style=3D"font-size: 13px; font-style: normal; font-variant-ligatu=

res: normal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-=

align: start; text-indent: 0px; text-transform: none; widows: 2; word-spaci=

ng: 0px; -webkit-text-stroke-width: 0px; white-space: normal; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration-colo=

r: initial; color: rgb(38, 40, 42); font-family: "Helvetica Neue"=

, Helvetica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">

style=3D"outline: none;"> 3D""
/mail?url=3Dhttps%3A%2F%2Fappcenter-stage.intuit.com%2Fcmsimages%2FConnectA=

pp%2Fqb_intuitlogo_horiz_rgb.png&t=3D1722702979&ymreqid=3Dd41d8cd9-=

8f00-b204-1c12-1d001a016b00&sig=3DlcyCwIMovUP.D_TrXp.kXw--~D" style=3D"=

letter-spacing: -0.32px; cursor: default; width: 160px; max-width: 672px; o=

utline: none;">

normal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-align=

: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0=

px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-color: in=

itial; color: rgb(38, 40, 42); font-family: "Helvetica Neue", Hel=

vetica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">

style=3D"outline: none;">We weren't able to make a deposit or debit from t=

he bank account you have on file for your business’s Intuit Quickbook=

s account. When we tried, we received a Returned

Item from the bank.It is likely future payments may also fail. Hence, you'=

re required to confirm the account information on file to resume the transf=

ers.

-ligatures: normal; font-variant-caps: normal; font-weight: 400; orphans: 2=

; text-align: start; text-indent: 0px; text-transform: none; widows: 2; wor=

d-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial; color: rgb(38, 40, 42); font-family: "Helvetica Neu=

e", Helvetica, Arial, sans-serif; letter-spacing: -0.32px; outline: no=

ne;">

style=3D"outline: none;">
/bbsystemsinc.slineinsurance.vu/trutrakr/fcad0466a3497adc0405dd3955d8ea2be0=

9b27124e0c58260bae9a4e001306c64b4b9898396ce20fcdef3ae38f95c576/" rel=3D"noo=

pener noreferrer" shape=3D"rect" target=3D"_blank" style=3D"color: rgb(25, =

106, 212); outline: none;">Review

Your Account Information Now.

45" style=3D"font-size: 13px; font-style: normal; font-variant-ligatures: n=

ormal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-align:=

start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0p=

x; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-thi=

ckness: initial; text-decoration-style: initial; text-decoration-color: ini=

tial; color: rgb(38, 40, 42); font-family: "Helvetica Neue", Helv=

etica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">
ass=3D"gmail-ydp1a46587eyiv8860330245ydpd062ca26yiv5966218732c3526" style=

=3D"outline: none;">What

your business needs to know

style=3D"outline: none;">
062ca26yiv5966218732c7518" style=3D"outline: none;">• Return date: 09=

/05/2026

style=3D"outline: none;">
062ca26yiv5966218732c7518" style=3D"outline: none;">
p1a46587eyiv8860330245ydpd062ca26yiv5966218732c7518" style=3D"outline: none=

;">•

Returned Item fee: $25.00

• Individual Returned Items:

normal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-align=

: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0=

px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-color: in=

itial; color: rgb(38, 40, 42); font-family: "Helvetica Neue", Hel=

vetica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">

style=3D"outline: none;">
062ca26yiv5966218732c7359" style=3D"outline: none;">
p1a46587eyiv8860330245ydpd062ca26yiv5966218732c7518" style=3D"outline: none=

;">
18" style=3D"outline: none;">

normal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-align=

: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0=

px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-color: in=

itial; color: rgb(38, 40, 42); font-family: "Helvetica Neue", Hel=

vetica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">

style=3D"outline: none;">
062ca26yiv5966218732c7359" style=3D"outline: none;">
p1a46587eyiv8860330245ydpd062ca26yiv5966218732c7518" style=3D"outline: none=

;">
18" style=3D"outline: none;">Thank=

s,

The QuickBooks Payments Team
>

normal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-align=

: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0=

px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-color: in=

itial; color: rgb(38, 40, 42); font-family: "Helvetica Neue", Hel=

vetica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">

style=3D"outline: none;">
062ca26yiv5966218732c7359" style=3D"outline: none;">
p1a46587eyiv8860330245ydpd062ca26yiv5966218732c7518" style=3D"outline: none=

;">
18" style=3D"outline: none;">

normal; font-variant-caps: normal; font-weight: 400; orphans: 2; text-alig=

n: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: =

0px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-t=

hickness: initial; text-decoration-style: initial; text-decoration-color: i=

nitial; color: rgb(38, 40, 42); font-family: "Helvetica Neue", He=

lvetica, Arial, sans-serif; letter-spacing: -0.32px; outline: none;">

style=3D"outline: none;">
062ca26yiv5966218732c7359" style=3D"outline: none;">
p1a46587eyiv8860330245ydpd062ca26yiv5966218732c7518" style=3D"outline: none=

;">
18" style=3D"outline: none;">This

message was sent to
245ydpd062ca26yiv5966218732c7408 gmail-ydp1a46587eyiv8860330245ydpd062ca26y=

iv5966218732gjs-comp-selected" style=3D"letter-spacing: -0.32px; outline: n=

one;">you,

as an Intuit customer, consistent with your email preferences. If you have=

chosen not to receive marketing messages, you will continue to receive bus=

iness communications about your selected Intuit product(s), which may eithe=

r affect your service or software,

your account, or which may be legally required. If you receive a suspiciou=

s email, please report it by forwarding the email to spoof@intuit.com.
n>

CONFIDENTIALITY NOTICE This communication and any attachments may contain p=

roprietary, confidential, or privileged information. If you are not the int=

ended recipient, you are hereby notified that you have received this commun=

ication in error and that any review,

disclosure, dissemination, distribution or copying of it or its contents i=

s prohibited. The sender does not waive confidentiality or any privilege by=

mis-transmission. If you have received this communication in error, please=

notify the sender immediately,

delete this communication completely from your system, and destroy all cop=

ies and any attachments. CONFIDENTIALITY NOTICE This communication and any =

attachments may contain proprietary, confidential, or privileged informatio=

n. If you are not the intended recipient,

you are hereby notified that you have received this communication in error=

and that any review, disclosure, dissemination, distribution or copying of=

it or its contents is prohibited. The sender does not waive confidentialit=

y or any privilege by mis-transmission.

If you have received this communication in error, please notify the sender=

immediately, delete this communication completely from your system, and de=

stroy all copies and any attachments.

--===============8161860162976001022==--

freewill donation spam

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3OE2-00000000OB0-2Ekq

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:32:46 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 19:32:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip-mx01.pnpp.sk ([62.197.237.130]:41850)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3OD0-00000000O1B-3sbR

for doctor@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:31:51 -0600

Received: from ip-mx01.pnpp.sk (localhost.localdomain [127.0.0.1])

by ip-mx01.pnpp.sk (Proxmox) with ESMTP id 78424C5D7C;

Sat, 05 Sep 2026 21:02:14 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pnpp.sk; h=cc

:content-transfer-encoding:content-type:content-type:date:from

:from:message-id:mime-version:reply-to:reply-to:subject:subject

:to:to; s=selector1; bh=/riqV2Xj2Elt8cLfRD8cUkyN+z3F5iEJSSF+xE//

Fas=; b=eIMsNQuVHHFKeP0nnZpzfL2JM4wK4zxGBiVuVTQG8eknUdZooqZO4rXy

jn/7Mn7W7GCbgpMDCgCf8q+EvIhYzzxBQmqqN85J8zavV+oZOd9UBhoQ/ZgfwFHI

cpAOCLhiz9Xn9l4B/YmJbgCWx2ElKJEX784wdqNlIdC0yDwhK8Susl22qUv1t2Ei

NVTPjqvBcEpz82Y9Ptwsrz7A1bsHGn1B/v8APpnwzEDxoKbjvvp1koGG8/TJ1tam

HzKTljDWNrf5RnK5rcNq/wiZ1zAGGn4swF1s7brbEaZOsoPFoK21xs5P1Sc/Ulqx

hoQ/OQZYSSvh+NP9e52O/u0lWfhUuYumwHBSK4uNxDxz5lAyK457zj4qBYJeF5sm

VTcR0P6NQPKrv6REy8uvjaQaQrAfWaeCi4iJvzuneFY5JqWeDAzOsjzQZ5H4bR/W

Yk8xE9cugPX32WYcJm9ER7B/q2FzFKFcwAy/86MmKOI68gnCqUUyt6B01oRTEYcw

nPxKcdu+zFBStk+HuDyxPUZATnSaQCcBGdszfggFQeWhUE5Ckwz+KHDcPwcFML+4

5MqkYfNyj3r3rPbso5OirpoGt+g/nXNGtjaMU+c0EWvuW0iYFzeqVLHITP9daZY4

AbUuqVRPM6G7Wcr+Lcf8R17ZcsUNqxMqDAIxQz5TzbtpYJMFH0Q=

Received: from mail.pnpp.sk (unknown [192.168.105.254])

by ip-mx01.pnpp.sk (Proxmox) with ESMTPS id 3A2E9C5D6C;

Sat, 05 Sep 2026 21:02:14 +0200 (CEST)

Received: from mail.pnpp.sk (localhost [IPv6:::1])

(Authenticated sender: hromadkova@pnpp.sk)

by mail.pnpp.sk (Postfix) with ESMTPA id 38A5522060A;

Sat, 05 Sep 2026 21:02:09 +0200 (CEST)

MIME-Version: 1.0

Date: Sat, 05 Sep 2026 12:02:09 -0700

From: "Office Gloria C. Mackenzie"

To: undisclosed-recipients:;

Subject: Do you have a moment?

Reply-To: i8528132@gmail.com

Mail-Reply-To: i8528132@gmail.com

Message-ID:

X-Sender: hromadkova@pnpp.sk

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam: Yes

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, I am writing regarding the freewill donation. Please

contact me for further details and information. Thank you for your time.

I look forward to hearing from you.

Content analysis details: (6.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

[62.197.237.130 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[62.197.237.130 listed in dnsbl.ahbl.org]

[62.197.237.130 listed in dnsbl.ahbl.org]

[62.197.237.130 listed in dnsbl.ahbl.org]

[62.197.237.130 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[62.197.237.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[62.197.237.130 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[62.197.237.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[62.197.237.130 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[i8528132(at)gmail.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[62.197.237.130 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 ODD_FREEM_REPTO Has unusual reply-to header

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Do you have a moment?

Hello,

I am writing regarding the freewill donation. Please

contact me for further details and information.

Thank you for your time. I look forward to hearing from you.

Mrs Gloria C. Mackenzie

Russian Business proposal spam

Posted by Dave Yadallee on Saturday, September 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 16:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2ygW-000000003mp-2jz1

for dave@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 16:16:28 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 16:16:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from exchange.rzdsp.ru ([94.198.197.34]:60505)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2yd0-000000003C6-2m5v

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 16:13:00 -0600

Content-Language: en-US

Content-Type: multipart/alternative;

boundary="_000_800946bc893e4e18b6a745538be05b96rzdspru_"

DKIM-Signature: v=1; a=rsa-sha256; d=rzdsp.ru; s=exchange; c=simple/simple;

t=1788644836; h=from:subject:to:date:message-id;

bh=asJRAV023Hi09xnULMK25kzqS/hppGjittuKg6LnAHI=;

b=GmZoQFaR77JyoQUxU6mEHqHksyVfg65Gx5HYlUL9QLhlGGdYxuZ8s9+VdCx0VFZWregjlhtSXsI

+UamzSHCjSWaSknXkbOh5+ptsCi0eJpVgoxMzjqWbGWY3A479Xfl9BMCcPTtzg/zT2ZL4ACx29Np+

xZFHvZxKMJlaFn9FgL3DprXVM87d+ckm8nQI2m2/uaLpLfd1r4VRAZ+hW0FIU0MYF6YtZOlezlSkG

7fCAsN+AYpDajhMfkU/fBY1sGgzOq70rhJ1I48yK8+uwQ28yGo7LX6fv5GtkINp7tsBzYLlZRPotT

twugHDsdHw0ikH/0NcY8zE620kpvFd4CSbXQ==

Received: from exchange.RZDSTROYPROEKT.RU (10.70.10.70) by

exchange.RZDSTROYPROEKT.RU (10.70.10.70) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.792.15; Sun, 6 Sep 2026 00:47:16 +0300

Received: from exchange.RZDSTROYPROEKT.RU ([fe80::ae70:c397:9b9c:1f00]) by

exchange.RZDSTROYPROEKT.RU ([fe80::ae70:c397:9b9c:1f00%10]) with mapi id

15.02.0792.015; Sun, 6 Sep 2026 00:47:16 +0300

From: =?koi8-r?B?68/Uz9fBIPPXxdTMwc7BIOnXwc7P187B?=

Subject: Project Opportunity Discussion

Thread-Topic: Project Opportunity Discussion

Thread-Index: AQHdPXxweAFPjZOZB0Wb404qypd85g==

Date: Sat, 5 Sep 2026 21:47:16 +0000

Message-ID: <800946bc893e4e18b6a745538be05b96@rzdsp.ru>

Accept-Language: en-US, ru-RU

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [185.199.157.9]

MIME-Version: 1.0

--_000_800946bc893e4e18b6a745538be05b96rzdspru_

Content-Type: text/plain; charset="koi8-r"

Content-Transfer-Encoding: quoted-printable

Dear Sir/Madam,

I hope this message finds you well.

I have a project opportunity that may be of interest to you, and I would we=

lcome the chance to discuss the details with you further.

Please feel free to contact me at sun.yu9@outlook.com at your earliest conv=

enience.

Thank you for your time and consideration. I look forward to hearing from y=

ou.

Best regards,

Sun Yu

--_000_800946bc893e4e18b6a745538be05b96rzdspru_

Content-Type: text/html; charset="koi8-r"

Content-Transfer-Encoding: quoted-printable

-family:Calibri,Helvetica,sans-serif;" dir=3D"ltr">

Dear Sir/Madam,

I hope this message finds you well.

I have a project opportunity that may be of interest to you, and I would we=

lcome the chance to discuss the details with you further.

Please feel free to contact me at sun.yu9@outlook.com at your earliest conv=

enience.

Thank you for your time and consideration. I look forward to hearing from y=

ou.

Best regards,

Sun Yu

--_000_800946bc893e4e18b6a745538be05b96rzdspru_--

Intuit Quickbooks phishing from Amazon

Posted by Dave Yadallee on Saturday, September 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 16:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2yfr-000000003fh-0SAg

for dave@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 16:15:47 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 16:15:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e234-101.smtp-out.ap-northeast-1.amazonses.com ([23.251.234.101]:48579)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <010601a073125265-9d945dad-87e1-4bb2-9bc4-6dc4dae1bd39-000000@ap-northeast-1.amazonses.com>)

id 1x2wCN-000000009ef-3l8q

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 13:37:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=irwgcp3kvsy6ppgf6foc3btyrwrl54qc; d=bioagechecker.com;

t=1788636975;

h=Content-Type:MIME-Version:From:To:Subject:Message-ID:Date;

bh=qhnWbIGFEZ1VIMcLsPHKz6SOWpBLIXTaG7KvqQiqkY0=;

b=JpQ2ScAuBwBlHbp5F0/6T+qp2N1BFadLHE0QEkV0XHs/2OFk6kiUmEuMPG94di7k

z7W9+4uUXE2fyssA6wNvIkAYily2evtCbXuO9CYZnF02rAZTsTb9HbVv9R4h5iNYwR3

dNPkivP+GY4dW2TSDUzPMu+WJKyvHHtSqDCThnMHuv4n9clKZ7RuCM+36ELfNPbsz6j

GG0J6/vxbj15ucQn1jNBe2Zami1up14yTI43JWua2qkms5L+CHPm8TkMCBeWeWj+eow

9gNod+EXxayC+emTV1t7Vm7VKhpviqouBvxQmGD1p3Eq9rYz7VImGtZqIHGNilIvsaR

YuEvq4+qiA==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=zh4gjftm6etwoq6afzugpky45synznly; d=amazonses.com; t=1788636975;

h=Content-Type:MIME-Version:From:To:Subject:Message-ID:Date:Feedback-ID;

bh=qhnWbIGFEZ1VIMcLsPHKz6SOWpBLIXTaG7KvqQiqkY0=;

b=Xq3OF5cjILag3UaKQf8+Uso3JMAcx/iqYgdKCgyXkX7guYSPn/fmQe4PErldl/DO

HMB9VnkDECnprCc+iw0Vm85yNRJQ2Q3Sz6FDRwS2wMFSZc0PS7JWcanay0WS5zzlYqz

JOrefn2scYa85qqVnU8j3UzKnStKkux9uZc2mwsU=

Content-Type: multipart/mixed; boundary="===============0022309283786652747=="

MIME-Version: 1.0

From: Quickbooks Support Team

To: doctor@doctor.nl2k.ab.ca

Subject: Vendor Payment - Remittance Advice!

Message-ID: <010601a073125265-9d945dad-87e1-4bb2-9bc4-6dc4dae1bd39-000000@ap-northeast-1.amazonses.com>

Date: Sat, 5 Sep 2026 19:36:15 +0000

Feedback-ID: ::1.ap-northeast-1.PR5HfIy1dbmUbzxeE/WV4vvosxNOHwnuwbR+Wbv7lgM=:AmazonSES

X-SES-Outgoing: 2026.09.05-23.251.234.101

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Vendor Payment - Remittance Advice Invoice Payment Sent Via:

QuickBooks Bill Pay Services Deposit Amount: $3,200 To be delivered by: Bank

Transfer EFT (Direct Deposit) Delivery ETA: Saturdaay, september 5th, 2026

Content analysis details: (6.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

[23.251.234.101 listed in dnsbl.ahbl.org]

[23.251.234.101 listed in dnsbl.ahbl.org]

[23.251.234.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.234.101 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.251.234.101 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Vendor Payment - Remittance Advice!

Vendor Payment - Remittance Advice

Invoice Payment Sent Via: QuickBooks Bill Pay Services

Deposit Amount: $3,200

To be delivered by: Bank Transfer EFT (Direct Deposit)

Delivery ETA: Saturdaay, september 5th, 2026

CONFIRM YOUR Details

© 2024 Intuit Inc.. Trademarks.

2800 E. Commerce Center Place, Tucson, AZ 85708

42681-1

powering

prosperity

Dragonfly Express phishing

Posted by Dave Yadallee on Saturday, September 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 08:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2r7Z-00000000Be5-2hmT

for dave@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 08:11:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 08:11:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.ace-hosting.com ([174.138.172.98]:45644)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2qzY-00000000Pkz-2YGb

for sales@nk.ca;

Sat, 05 Sep 2026 08:03:58 -0600

Received: from [196.64.125.203] (port=59514 helo=[127.0.0.1])

by server.ace-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.5)

(envelope-from )

id 1x2qyg-000000004qk-0tRb

for sales@nk.ca;

Sat, 05 Sep 2026 21:02:40 +0700

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <49a46b01-3313-a051-78a5-384c03b5d91a@ppsolution.com>

Content-Transfer-Encoding: quoted-printable

Date: Sat, 05 Sep 2026 14:02:38 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.ace-hosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ppsolution.com

X-Get-Message-Sender-Via: server.ace-hosting.com: authenticated_id: jayanto@ppsolution.com

X-Authenticated-Sender: server.ace-hosting.com: jayanto@ppsolution.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dragonfly Express. Dear Customer,

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[174.138.172.98 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[174.138.172.98 listed in wl.mailspike.net]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[174.138.172.98 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

[196.64.125.203 listed in dnsbl.ahbl.org]

[196.64.125.203 listed in dnsbl.ahbl.org]

[196.64.125.203 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification

hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

align-items: center; justify-content: center">

30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.

PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.

However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD

in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=

href=3D"https://dragonfly-service.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package

COLOR: #000">Thank you for choosing Dragonfly Express.

COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:

Business proposal spam

Posted by Dave Yadallee on Saturday, September 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2qnj-00000000FrJ-09vg

for dve@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 07:51:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 07:51:22 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from mail.electryconsulting.eu ([217.160.39.209]:39671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2mWm-00000000IgP-26IV

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 03:17:45 -0600

Received: from mail.electryconsulting.eu (localhost.localdomain [127.0.0.1])

by mail.electryconsulting.eu (Postfix) with ESMTP id AC33493AF303;

Sat, 5 Sep 2026 07:49:25 +0200 (CEST)

X-Spam-Flag: NO

X-Spam-Score: 4.241

X-Spam-Level: ****

X-Spam-Status: No, score=4.241 tagged_above=-9999 required=5

tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,

DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_REPLYTO=2.095,

FREEMAIL_REPLYTO_END_DIGIT=0.25, MISSING_MID=0.497, SPF_PASS=-0.001,

URIBL_DBL_ABUSE_SPAM=2, URIBL_DBL_SPAM=2.5] autolearn=no autolearn_force=no

Authentication-Results: mail.electryconsulting.eu (amavis) (amavis);

dkim=pass (2048-bit key) header.d=electryconsulting.eu

Received: from mail.electryconsulting.eu ([127.0.0.1])

by mail.electryconsulting.eu (mail.electryconsulting.eu [127.0.0.1]) (amavis, port 10024)

with ESMTP id P7HijiYDbMVj; Sat, 5 Sep 2026 07:49:24 +0200 (CEST)

Received: from [103.168.66.231] (unknown [103.168.66.231])

by mail.electryconsulting.eu (Postfix) with ESMTPA id 046A593AF29E;

Sat, 5 Sep 2026 07:49:07 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=electryconsulting.eu; s=default; t=1788587357;

bh=m8mkmZ0H8Xe3v8mCb2yTzxioWz8enPZGkQowVW+4nBA=; h=Subject:To:From;

b=eNYsi/V9e1NDmwLGS7GJZhhziN5Hu1C3VA5HjX4FRaiOWVfT/GIdeO8HuDuBw4QHj

8Fll6wODaIsE1stCpjPiHe/o+43nb2DkWaTqnBF9vsKQbflzhFFPWlLJosVL//IHnN

olRnFXzuiAgT6MEXYlOSoB5kuAKWAVJlgHVS5Zm1K8evwmDuYDc8Xu8E2rYPcq0g+p

Jg+4sQC+vs4DFA6qfFQ/uM5xCztxQT62yUSd4Pk4xvjOtNnBWfwW7fblXJjUY33AGG

s60UORMPQZaLw98/tkC2F2V0+51TgfmU4x+mV96pEAbkNcK2K0PnpSdDjr28aTOBxv

zjMKra46d2FlQ==

Authentication-Results: mail.electryconsulting.eu;

spf=pass (sender IP is 103.168.66.231) smtp.mailfrom=madridnorte@electryconsulting.eu smtp.helo=[103.168.66.231]

Received-SPF: pass (mail.electryconsulting.eu: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Proposal

To: Recipients

From: "Sun Yu"

Date: Fri, 04 Sep 2026 22:48:55 -0700

Reply-To: yus413288@gmail.com

X-PPP-Message-ID:

<178858735478.1467185.12297057947186714579@mail.electryconsulting.eu>

X-PPP-Vhost: electryconsulting.eu

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greeting, I have a business proposal to share with you. Please

get back for more details. Thank you, Sun Yu

Content analysis details: (13.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.168.66.231 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.168.66.231 listed in sbl-xbl.spamhaus.org]

[103.168.66.231 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: electryconsulting.eu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[yus413288(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[217.160.39.209 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[217.160.39.209 listed in bl.score.senderscore.com]

Subject: {SPAM?} Proposal

Greeting,

=

I have a business proposal to share with you. Please get back for =

more details.

=

Thank you,

Sun Yu

Loan spam from Google Gmail

Posted by Dave Yadallee on Saturday, September 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 21:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2gqI-00000000OEt-2lDW

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 21:13:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 21:13:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f181.google.com ([209.85.215.181]:48234)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2aRs-00000000JoC-0GUy

for sales@nk.ca;

Fri, 04 Sep 2026 14:23:56 -0600

Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-ca97d139d5fso1344726a12.0

for ; Fri, 04 Sep 2026 13:22:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1788553371; x=1789158171; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=G7cXAJwJwF3QvSdClCNEc87D9/73aYa/odXArSZ+0zw=;

b=nvSejqY7igrRsRyldnlj7Ufnkat7OwE4eYxjHC+2UILwEL3rNUHZFi6Cza+Q0wlv1o

CiVg1NFkjRuU0U/F5ddvDHe1BtiBgUpOfNJ3FZ90q1upG7UqDoLsGvhi+VkPYS58L8EK

ZLYUywtho8YxjW+x2FqlYubLOn7n5slu/duRgzcF7cnmmYWPcXkfvLFBQF2IRcMKxwni

kVNcjKHGyIn7+NncyFhwZwucnEZwDgFelVih0ufLqRylf1iX9+C549qeB1l7eXbakr4g

HGRQ6iyBijRfdjct7SLXu1aNVwIOkn8b+TgZBVHqWQvpbNwPJxKyyRfpER0hq9918sEy

RURA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788553371; x=1789158171;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=G7cXAJwJwF3QvSdClCNEc87D9/73aYa/odXArSZ+0zw=;

b=caNMd3dEUwpajgd4qQFsHmboyKcEocdgJf1A0LINPopvx+GWvUcNnfDKVqtChTaDZl

k9VcdiX8n3w26uNUV/ohwHrVomTd5XfZQG6//ziMCAAEyGjTjl5kJg6I2pVygJ4qUrdh

4J4nki+4hsGblt24vW0Ld/9eElFfUk1XbcYk/QKo3rcDz7/0ey8fZ0WaKZEtad7TxKMN

nRrMq1tBTxvEcDTPOYfuRPVnrOTrFuGvriR7/zLOmRePew0vSPBDW1Pljh/OaC2Csh+k

WfRawLnbExa0zOtWEuAV8E1MjaCzlcniio3o3H/G5QFXpl5XA56aXK4vnXyLgaa1wWZw

oG4w==

X-Gm-Message-State: AFuF++lzZKPZPWDvT/M5SKo4AvL6ULAqMbEyDG4xlasKNW3bV3ThhlAb

IbF+HZtsgx5KPUhQtK8K6FP+Y6NnXgFONNBg2lN/4aIS5KFx+ogC68Yeg1CEiBwiY5VC3mnaKm2

C8+aZuVc=

X-Gm-Gg: AYBFou047Zc2p4NX/9dD25C7qZYneRguNiM5PZQiLwRTBzglw+7l/PgJcu8AQfapxym

7jE1cBQGgMYjqxbCEQvUwvxnGrQknwDL8GWzSTA0GK7NJIRFvPSuaSagUCJCAyBjGgAyg6yw6jg

Zqa98yQ4sJPI7roeD+vwwt9nfy1vJ3wDDNdFXzsmVAjB8KWKHUUh0Tu8TvWBaIPza1AIaGqVLwP

K2oXBeJmUeB3gm+KPNVWrUSLq7ZGUlR7u3XF7WP20ZXhZfozXRh32I5U+lH/FCOf0dxdF8CEdiw

b4HBozRh9NqnJvrvj6NUMawqcVRD6WZJvux62LbgWCUsdBf1i04VS5HrXM22DXLkdC7v2vs+Gxu

/eC8s4UjG5upCOyfA8OdZ9pGS6TogfHSnROOCW66EAJMLVpNS5ISJHLaLBQfDrgdc99x9CuTHuq

TT4AtxPJjKqOSh9E+yl/8V1wyR9fo21kacTDrQiVh0nDFOjg2kubhVo4gLwJDqJuRSU36cju+bG

I26/Ff8A1jhAVEbTkg9MyifXwCxAV2Q20DQbTn/Rog4cJCLEDNA+W+ySWJ3

X-Received: by 2002:a05:6a21:48a:b0:3d3:b00b:50fc with SMTP id adf61e73a8af0-3da3a19faa1mr12175092637.28.1788553370216;

Fri, 04 Sep 2026 13:22:50 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-a0.close.com. [52.11.177.187])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cc455405d08sm1325240a12.7.2026.09.04.13.22.47

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 04 Sep 2026 13:22:48 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============7330372755335793445=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Anna_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Fri, 04 Sep 2026 20:22:47 +0000

Message-ID: <178855336715.6.587601229347213138@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_CcpWWV00Vvsk4KLXYWnh6YW9IZaFkDch2MuRAOwfTAx

References: <178646337461.7.1240611996543057914@smtpgw.close.com> <178674436134.7.15043001032031211174@smtpgw.close.com> <178717590920.7.11514546446340323981@smtpgw.close.com> <178717590920.7.6698188364795184228@smtpgw.close.com> <178777788923.8.15758713330881978271@smtpgw.close.com> <178777788923.8.13100416135937699766@smtpgw.close.com> <178795412146.7.11915679251012219310@smtpgw.close.com> <178795412146.7.8559586588892536181@smtpgw.close.com> <178828054073.6.349771406056107870@smtpgw.close.com> <178828054073.6.15493945752429429674@smtpgw.close.com>

In-Reply-To: <178828054073.6.349771406056107870@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Hi Gurkirat,

This is Anna Sanchez from Kesef Marketing.

Just checking in again.

If you're still interested, you can start here:

CLICK HERE TO START YOUR APPLICATION

Best regards,

Anna Sanchez

SALES MANAGER

anna@kesefmarketing.com

+1 (873) 502-8068

____________________________

To stop receiving these emails, click here.

On Sep 01, 2026, at 10:35 AM, Anna Kesef Marketing wrote:

> Hi Gurkirat,

>

> This is Anna Sanchez from Kesef Marketing.

>

> We’ve kept your request open in case you still need funding.

>

> You can review your options here:

> CLICK HERE TO START YOUR APPLICATION

>

> Best regards,

>

>

>

> Anna Sanchez

> SALES MANAGER

>

> anna@kesefmarketing.com

> +1 (873) 502-8068

> ____________________________

>

> To stop receiving these emails, click here.

>

>

>

> On Aug 28, 2026, at 03:55 PM, Anna Kesef Marketing wrote:

>> Hi Gurkirat,

>>

>> This is Anna Sanchez from Kesef Marketing.

>>

>> I just wanted to check one last time before we move your file forward.

>>

>> If you'd like to proceed, you can start here:

>> CLICK HERE TO START YOUR APPLICATION

>>

>> If you need any assistance or have questions, feel free to reach out.

>>

>> Best regards,

>>

>>

>>

>>

>> Anna Sanchez

>> SALES MANAGER

>>

>> anna@kesefmarketing.com

>> +1 (873) 502-8068

>> ____________________________

>>

>> To stop receiving these emails, click here.

>>

>>

>>

>> On Aug 26, 2026, at 02:58 PM, Anna Kesef Marketing wrote:

>>> Hi Gurkirat,

>>>

>>> This is Anna Sanchez from Kesef Marketing.

>>>

>>> We still have your request open on our end.

>>>

>>> If you'd like to move forward, you can start here:

>>> CLICK HERE TO START YOUR APPLICATION

>>>

>>> If you have any questions or would prefer to speak directly, feel free to call me at 1-866-216-5475 or 873-502-8068

>>>

>>> Best regards,

>>>

>>>

>>>

>>>

>>> Anna Sanchez

>>> SALES MANAGER

>>>

>>> anna@kesefmarketing.com

>>> +1 (873) 502-8068

>>> ____________________________

>>>

>>> To stop receiving these emails, click here.

>>>

>>>

>>>

>>> On Aug 19, 2026, at 03:45 PM, Anna Kesef Marketing wrote:

>>>> Hi Gurkirat

>>>>

>>>> This is Anna Sanchez from Kesef Marketing.

>>>>

>>>> Just reaching out again in case the timing wasn’t right earlier.

>>>>

>>>> You can explore your options anytime here:

>>>> CLICK HERE TO START YOUR APPLICATION

>>>>

>>>> If you have any questions or would prefer to speak directly, feel free to call me at 1-866-216-5475 or 873-502-8068

>>>>

>>>> Best regards,

>>>>

>>>>

>>>>

>>>>

>>>> Anna Sanchez

>>>> SALES MANAGER

>>>>

>>>> anna@kesefmarketing.com

>>>> +1 (873) 502-8068

>>>> ____________________________

>>>>

>>>> To stop receiving these emails, click here.

>>>>

>>>>

>>>>

>>>> On Aug 14, 2026, at 03:52 PM, Lilian Llanillo wrote:

>>>>> Hi Gurkirat,

>>>>>

>>>>> This is Lilian Llanillo from Kesef Marketing.

>>>>>

>>>>> I wanted to follow up and see if funding is still something you're considering for your business.

>>>>>

>>>>> If so, you can review your options here:

>>>>> CLICK HERE TO START YOUR APPLICATION

>>>>>

>>>>> If you have any questions or would prefer to speak directly, feel free to call me at 1-866-216-5475 or 873-771-7630

>>>>>

>>>>> Best regards,

>>>>>

>>>>>

>>>>>

>>>>> Lilian Llanillo

>>>>> FUNDING ADVISOR

>>>>>

>>>>> email (16px).png lilian@kesefmarketing.com

>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>> ____________________________

>>>>> IMG_5340.jpg

>>>>>

>>>>> To stop receiving these emails, click here.

>>>>>

>>>>>

>>>>>

>>>>> On Aug 13, 2026, at 03:26 PM, Lilian Llanillo wrote:

>>>>>> Hi Gurkirat,

>>>>>>

>>>>>> This is Lilian Llanillo from Kesef Marketing.

>>>>>>

>>>>>> Many businesses are currently reviewing their funding options to stay ahead.

>>>>>>

>>>>>> If this is something you’re considering, you can check your options here:

>>>>>> CLICK HERE TO START YOUR APPLICATION

>>>>>>

>>>>>> If you have any questions or would prefer to speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630

>>>>>>

>>>>>> Best regards,

>>>>>>

>>>>>>

>>>>>>

>>>>>> Lilian Llanillo

>>>>>> FUNDING ADVISOR

>>>>>>

>>>>>> email (16px).png lilian@kesefmarketing.com

>>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>>> ____________________________

>>>>>> IMG_5340.jpg

>>>>>>

>>>>>> To stop receiving these emails, click here.

>>>>>>

>>>>>>

>>>>>>

>>>>>> On Aug 12, 2026, at 02:40 PM, Lilian Llanillo wrote:

>>>>>>> Hi Gurkirat,

>>>>>>>

>>>>>>> We noticed your Cash Advance application is still incomplete.

>>>>>>>

>>>>>>> You’re just a few steps away from securing up to $800,000 in funding within 48 hours.

>>>>>>>

>>>>>>> To move forward, please complete your application here:

>>>>>>> Click to Start your Application here

>>>>>>>

>>>>>>> and upload your last 3 months of bank statements. This will allow us to finalize your review and match you with the best available funding options.

>>>>>>>

>>>>>>> If you have any questions or would prefer to speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630

>>>>>>>

>>>>>>> Best regards,

>>>>>>>

>>>>>>> Lilian Llanillo

>>>>>>> FUNDING ADVISOR

>>>>>>>

>>>>>>> email (16px).png lilian@kesefmarketing.com

>>>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>>>> ____________________________

>>>>>>> IMG_5340.jpg

>>>>>>>

>>>>>>> To stop receiving these emails, click here.

>>>>>>>

>>>>>>>

>>>>>>>

>>>>>>> On Aug 11, 2026, at 09:49 AM, Lilian Llanillo wrote:

>>>>>>>> Hi Gurkirat,

>>>>>>>>

>>>>>>>> This is Lilian Llanillo from Kesef Marketing.

>>>>>>>>

>>>>>>>> Welcome! I wanted to personally reach out and thank you for your interest in business funding. We work with lenders across Canada to provide reliable funding solutions that support growth, manage cash flow, and cover upcoming expenses—while helping you access competitive interest rates.

>>>>>>>>

>>>>>>>> If you’re open to exploring your options, you can get started here:

>>>>>>>> Click Here To Start Your Application

>>>>>>>> Once submitted, our team will review your information and present the best available funding options tailored to your needs.

>>>>>>>>

>>>>>>>> If you have any questions or would prefer to speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630

>>>>>>>>

>>>>>>>> Looking forward to connecting.

>>>>>>>>

>>>>>>>> Best regards,

>>>>>>>>

>>>>>>>> Lilian Llanillo

>>>>>>>> FUNDING ADVISOR

>>>>>>>>

>>>>>>>> email (16px).png lilian@kesefmarketing.com

>>>>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>>>>> ____________________________

>>>>>>>> IMG_5340.jpg

>>>>>>>>

>>>>>>>> To stop receiving these emails, click here.

>>>>>>>>

Nk.Ca credential phishing from Google Gmail

Posted by Dave Yadallee on Saturday, September 5. 2026

ADDING-RIGHT: 16px" align=3D"center">

se; BACKGROUND-COLOR: #ffffff; border-radius: 12px; box-shadow: 0 4px 24px =

rgba(0,0,0,0.08)" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" border=

=3D"0">

OM: 32px; PADDING-TOP: 48px; PADDING-LEFT: 40px; PADDING-RIGHT: 40px" align=

=3D"center">

cSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; FONT-WEIGHT:=

800; COLOR: #fd7902; FONT-STYLE: italic; MARGIN: 0px; LETTER-SPACING: -1px=

; LINE-HEIGHT: 1">webmail

DDING-RIGHT: 40px">

BACKGROUND-COLOR: #fff3e0; border-radius: 8px" cellspacing=3D"0" cellpaddin=

g=3D"0" width=3D"100%" border=3D"0">

=

ADDING-RIGHT: 20px">

COLOR: #e65100; MARGIN: 0px 0px 6px; LETTER-SPACING: 0px">Server Warning
>

x; LINE-HEIGHT: 1.4">Action Required for doctor@doctor.nl2k.ab.ca

DDING-RIGHT: 40px">

>Server Report for doctor@doctor.nl2k.ab.ca.

DDING-RIGHT: 40px">

lid; BORDER-COLLAPSE: collapse; BORDER-BOTTOM: #edf2f7 1px solid; BORDER-LE=

FT: #edf2f7 1px solid; BACKGROUND-COLOR: #fafafa; border-radius: 10px" cell=

spacing=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">

ADDING-RIGHT: 28px">

al, sans-serif; FONT-WEIGHT: bold; COLOR: #2c363a; MARGIN: 0px 0px 16px">Em=

ail Authentication Required

l, sans-serif; COLOR: #4a5568; MARGIN: 0px 0px 14px; LINE-HEIGHT: 1.6">E-ma=

il server DNS.doctor.nl2k.ab.ca is pending some messages.

l, sans-serif; COLOR: #4a5568; MARGIN: 0px 0px 20px; LINE-HEIGHT: 1.6">Kind=

ly AUTHENTICATE your account to a=

ccess on-hold messages.

RIGHT: #e2e8f0 1px solid; BORDER-COLLAPSE: collapse; BORDER-BOTTOM: #e2e8f0=

1px solid; BORDER-LEFT: #e2e8f0 1px solid; BACKGROUND-COLOR: #ffffff; bord=

er-radius: 8px" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" border=

=3D"0">

>

ADDING-RIGHT: 20px">

l, sans-serif; COLOR: #718096; MARGIN: 0px; LINE-HEIGHT: 1.6">
=3D"FONT-WEIGHT: bold; COLOR: #e53e3e">⏱ Urgent: Authenticatio=

n expires after 12 hours from {time}. Your domain doctor.nl2k.ab.ca will be=

blocked from connecting to the control panel if not verified.

"0" width=3D"100%" border=3D"0">

ING-RIGHT: 0px" align=3D"center">

Neue', Helvetica, Arial, sans-serif; TEXT-TRANSFORM: uppercase; FONT-WEIGH=

T: bold; COLOR: #ffffff; PADDING-BOTTOM: 16px; PADDING-TOP: 16px; PADDING-L=

EFT: 36px; DISPLAY: inline-block; LETTER-SPACING: 0px; PADDING-RIGHT: 36px;=

BACKGROUND-COLOR: #fd7902; border-radius: 6px" href=3D"https://shorturl.at=

/gFP7G#doctor@doctor.nl2k.ab.ca" rel=3D"noopener noreferrer" target=3D_blan=

k>Authenticate Email

DING-RIGHT: 40px">

"0" width=3D"100%" border=3D"0">

NE-HEIGHT: 0">

ADDING-RIGHT: 40px">

l, sans-serif; COLOR: #718096; MARGIN: 0px 0px 6px; LINE-HEIGHT: 1.5">The s=

ystem generated this notice on {time}

l, sans-serif; COLOR: #a0aec0; FONT-STYLE: italic; MARGIN: 0px 0px 28px">Do=

not reply to this automated message.

"0" width=3D"100%" border=3D"0">

ORDER-BOTTOM: 0px; BORDER-LEFT: 0px; MARGIN: 0px auto 8px; DISPLAY: block; =

LINE-HEIGHT: 13px" alt=3D"cP" src=3D"data:image/png;base64,iVBORw0KGgoAAAAN=

SUhEUgAAAC4AAAAuCAYAAABXuSs3AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEh=

ZcwAADsMAAA7DAcdvqGQAAAT5SURBVGhD7VhZiB1FFH3uC4qKKwEVNWZmuqsn0UiMRo2QH5eACw=

wuPy7omKnu92KEiD8yIirqhx8qggmIIkoSUVA/IoS4gIhRUAQhLgn64TKJS1wnLulqz7ld7bzMu=

69fT/RFhD5wmDddt+69deveW9XdqFGjRo3/H9yYGXZNc6OLzTKXmFtKacMxl4RXZjY4z61YeIhX=

sfcBJxalcfBRlphsJkyT4I80Ns9hsTdk1518sFe3d5CNjOwHBz7QHKtKzN+VJmY9FnCWV9t/OBv=

MRtR+0hyaKeH85y4Or/aq+wsYvIMRm+7EnjP4wSXRxV59/4BoP687sOdE5N92Y+GJ3sS/D7ds+L=

jUmk2a8

X/O8H5vpjuy8ca+XCEmDLo4OtM1h87oSo4nwYJsPDiQLS21wWSn0ZzSNWwwgQh+I7TBdiz0R012=

OiG3xbvXiWx88f4orovSJHw4jcPPYOh7KN9RRuYg5La6ljkePbmlGS0I4xulv9uhs8msFc1H8S3=

FIh7LdenzSIxPejd3ByMHxWvA37SJZYTja93KgcOR309p4yT18jDy5jqA3bqql20vOgW2HEZYE6=

5CpMoK1xo6HVGZ0MZJLG6bi4fneJMqsGN3anMLerEcWRKNcLs1wSrENu90NlqCaJ5TFjGMvcfi9=

WZV8MjHAru2Ui+GFSLfEKXNmlBVwvF3stE5x2DH7tbG/2Yc3sWi96ZVuGa0kIFQ54NeaPZBEHpR=

E5gJoWM1InUYIvWWNj7FaEQMlwByl0Of65ybU4SwtVewUjUBjVRYUP63JkUxvuqS4VPYOstqBHJ=

fMZXEcBdky+cemdpwgza/oAjCgUe1wXayoLC4p1G8y1H11sVBL

ETbw7ObsrHoVOrC2O2Q+1PTQWKRa9jnxTCAHTrBxQOz5C8W7ZrhuThg1mlzC8LfnQ323CwOXtcE=

CsLYJ7hPL65yP0bff0LTURARf5By0nlicy90b2KxIjDvwqH3uSPavHZCfgtucNGS0gglwReQuUC=

86gF/zG/U9OTML0kuHjwaTr6my/QmbDzAvr1UGyyICLzEU9T7VgqplcT8rOkhMfZhNjr/UMjdht=

9dC6+MrB+k02ls9JdqAgWx9c9UdhyvXWUOSRDk5cK8oo33IiKNExf11GjsU8Hx4IUqjiOSR0B2r=

aaDzBcUXe+a845lTmsyZYTuXdwpsVXR8a2sdPGuBJAdLG2DqCNplza6DIvomk4a4cM2XiW8qRxo=

X3Oh6GttQkGkyxvsKtxmP60DOA0vRCS/0+aT0PFxvivhfdq4Rix2h3QpG8zzZqbAnorce1ab2E6=

2KaYNFrkav1fh2ZPIt1t5UlIPnj2Up0OX+Ym5x9taxQXCqQmF2

/NdC9choCsZLHGyG8QBxVgviqNxNIpIHoDfpQXHq2pua2AWu4KkzTTyEJOXFnQecawXpK9a86Zm=

sBdRME0aheOfauMkxr6FXH8+LzhrLinLUY2QR3uS17VrJPqKDImxl/v6UYfbjjwrfW1qp+RjKzi=

p16Ufco94E/0Dey0LRXNgOumQ3L9LjnnommQL9Or7i/z+Em5gKmjOFESK3IxiGkK3+VUbJ+H4Zh=

TdUV51/5HfKaJr0UcfxwJwgwt+2d0h8zsuTOezW7Q/bydy+0vmv5x0/wWkhSXhIp6yQlzM5EBCw=

cGxBRizeD71qZifk/lZGa9fXkWNGjVq1KjRhkbjLztqCjunLEWrAAAAAElFTkSuQmCC" width=

=3D"24" height=3D"24">=20

=3Dattachmenuopen class=3Dicon href=3D"#">Open<=

/SPAN>=20
=3Dattachmenudownload class=3Dicon href=3D"#">
>Download

align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial= ; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px= ; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold= due to a billing issue

:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin= e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi= n:0">Hello,

rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:= 12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173= 1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

x; LINE-HEIGHT: 1.4">Action Required for doctor@doctor.nl2k.ab.ca

al, sans-serif; FONT-WEIGHT: bold; COLOR: #2c363a; MARGIN: 0px 0px 16px">Em= ail Authentication Required

align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

al, sans-serif; FONT-WEIGHT: bold; COLOR: #2c363a; MARGIN: 0px 0px 16px">Em=

ail Authentication Required