Job opportunities spam from google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Aug 2026 07:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrbYv-00000000HbO-3XIJ

for dave@doctor.nl2k.ab.ca;

Wed, 05 Aug 2026 07:21:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 5 Aug 2026 07:21:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f50.google.com ([209.85.208.50]:46161)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrWgW-00000000NyE-2wU9

for www@doctor.nl2k.ab.ca;

Wed, 05 Aug 2026 02:09:18 -0600

Received: by mail-ed1-f50.google.com with SMTP id 4fb4d7f45d1cf-6a14f762de4so828426a12.0

for ; Wed, 05 Aug 2026 01:08:21 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785917294; cv=none;

d=google.com; s=arc-20260327;

b=VMHu07KW2bm0nAvalPT8xYFg48NWEkQfJd8N/xGsGaSVjdUG/HxmWkw5IeK0xKoRWj

Kzu6680Rd2K4C0l3d/jPJJaMzz3m83vVTrzsZNVMnd8Q5Z1MT3Xm1Z6gjCY2N4uXx1Zy

h/kkORyRYcuQ0QlSLbej/dbCaFAs2Lcd6/HiQX3Fh6q1V12FzaXd6auchdbQNwn1BWFH

euS8Xs2tT8tHymufllZMx0+qxNr7ZLAXW8CfC3TVM3qUYli43TnSPVpDyfmIJq5HC6gX

UVyEoa3ScQni8gtSlxzcTL2jSYg7zGQNiSTeFwv+XDmpiJhmlAGXgGu2S4/OM6ydRRfU

UkiQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:reply-to:from:sender:mime-version

:dkim-signature;

bh=vS8S0SF/sgUjuqfy77LmxA2zO8tG1TB9FcIhhq8CKLU=;

fh=YN06yI1QDY6dDLD3yfisfVRFHlYyWrnSZ+m9i7/4z6I=;

b=Zh9RdDgBVVfSv1OUpXsvIQNM8pWtwuXrWKa4zFSU1NNXQiT1fH/H/7MekmL5iclNNJ

TdGdToLpGFwDM1tsHOeJax0BqIuur6B/l5stjlopK2Drl/KQDvT180WnwtWGfNP/d2sb

lZgXNIOiAtik75okreUbrdhuQVOakVyFu7iGqvD5ImhA68X1B/kXgF7cqjYL420pUKmc

8xL0nqdBYP9vm5kuzvpP2CnnNpgKB6v0w3oC3te3xlyPPI63sSC7330T0/YJkxJ2H15b

J5v+We9xyBR34x98p1a/2Vm34r2YvxdIhZVS8Mf5jPQ84N9NvV1gAUnDFj76qKdjNceV

sZUQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785917294; x=1786522094; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:reply-to:from:sender

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=vS8S0SF/sgUjuqfy77LmxA2zO8tG1TB9FcIhhq8CKLU=;

b=eo8tAuFMMXNwIOwz1vrfCRAKiPOFEY3arwxevSANsWnGIEbeLb8Fyvf0zn2Vb1ogiw

fCKiN7IJa+uovIEf0klnjwL8NvbmhcoIwwrgREVKMNQK58kLyLNj4VhjglQmH1Kcv9cH

hHwj9rOG+TpAKK5LO/5Vwb3bGWT1ALEn0kejSHePfC75YvrF81Rf/XQ7pAgSIyKejh80

X64xLA7YgUQdOnvXNIqFPjLJp7BGukQ0aO5MOFYwLvvqBau3knTDsGu4lz5GaOTHk//7

Vzq6gtHiR5l44Qckm/bUpuaUGidGyeUD8TkOQ3y5OapibWvsD04wzbkYLyaGuZrtx5rg

ryog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785917294; x=1786522094;

h=content-type:to:subject:message-id:date:reply-to:from:sender

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=vS8S0SF/sgUjuqfy77LmxA2zO8tG1TB9FcIhhq8CKLU=;

b=IawB0/oDEyqJezeLmm72uvatssPz4ERC13e1XwSrY9HtEGmHfSijfPN7K3g//fUUzG

EaNahHEvoltZyneKESIrQ6jb83/nIwTu3qBg/8uJsXGL5wPNHutQeLGjuYM2aSKtdEQK

ZAeyTGrHA+1TI2OWSomeYRez202d3H5/biKuRJBPI6ATEdgrv15xR5Y29c1yIKWCMX+x

eK1X3f55zhe6Kl8M6dDaWgfey2SwSaYOTj2pqBjSL8DaWAxaUHDg2sjT0nHe1i9e6R8m

NlyLT0E8+atqua+2V3fsN+EON8WlkugA34Ly3AGUc+R/OwLqfpI1IDPsn7qpC/Esy07o

HVEQ==

X-Gm-Message-State: AOJu0YzXFy3E8bvx9rHl4ZMORz9KMkQMThZ4i9oza0O1wv+Pb+pyfYaa

qOEVpAARKrchot/GZOh589PTxEwHONILfou758P5ZAPMg5Woal3Kn8T86jdIOOP2Q1HGh5SrhgP

AtbdAvSjsVr0xgCpg9A8fD+H71U5pXW/DTJyR

X-Gm-Gg: AR+sD134t6zTmy19UqZe9iPRO2YRhMAkYWnj534EU4EsHcXUIq2nvocasC7XAO/GsUa

827q6rqDmcLVCVAbaEfC8kvFSYQABlgjtB58gnFHcfoGuzPYczSAlnHu3r7CrF2RjG/wCmF/Ek6

cDvfyg1vHmD8+8yPSl6XY8QoWMwNv8IqgBevWaJFYFt/BVG6us2TSPLiUDpkyIrFR/FQP5jxgvj

7BX5cA+cjMskxT9WCcCRxkbxOwZHjb6snUpk8TUG5EX6vyLT5soemnZkOXebcwvmytx6Q6Om0WT

5ZeeQtX3vkUneUmvGs1wfK2Qn15sWq2Oe0mYojtKoabxuS29xiovM/kxBzL7SFn68yNEItkrquL

WeEnFCds+7bIM0XXE3oEGXyUWrSyog17UmuH4Bcxt/SMoZxfe7iJN7EenJQ/yyw2cbLuzdFh709

y4OfsQkQ0fYfo=

X-Received: by 2002:a17:907:198c:b0:c20:2165:f530 with SMTP id

a640c23a62f3a-c2039d52e72mr239528466b.28.1785917294034; Wed, 05 Aug 2026

01:08:14 -0700 (PDT)

Received: from 84944988988 named unknown by gmailapi.google.com with HTTPREST;

Wed, 5 Aug 2026 03:08:13 -0500

Received: from 84944988988 named unknown by gmailapi.google.com with HTTPREST;

Wed, 5 Aug 2026 03:08:13 -0500

MIME-Version: 1.0

Sender: jameswaler725@gmail.com

From: jameswaler725@gmail.com

Reply-To: Richard.Kintu@proton.me

Date: Wed, 5 Aug 2026 03:08:13 -0500

X-Google-Sender-Auth: 1h7FLqN0AK3CySPP95cU8NXHp3A

X-Gm-Features: AUfX_mxanzkb0OTuxQTsSw44d4Ax4aJbNq9jQ3cwXnAIPCftY3t5pkinYauBSao

Message-ID:

Subject: job opportunity :

To: www@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000e8c10e06584845c3"



--000000000000e8c10e06584845c3

Content-Type: text/plain; charset="UTF-8"



Dear Sir/Madam,



We are a construction company, Betctel Ltd., based in the United States and

Canada. We are currently offering a job opportunity for a Customer Service

and Personal Assistant position. This role allows you to work from the

comfort of your home for approximately 2 hours per day, Monday to Friday.

The position offers a weekly payment of $500. If you are interested in this

opportunity, please contact us for more details. Applicants must be based

in the United States or Canada. Kind regards, Betctel Ltd.. Sincerely,

Mr.Richard Kintu



--000000000000e8c10e06584845c3

Content-Type: text/html; charset="UTF-8"



Dear Sir/Madam,

We are a construction company, Betctel Ltd., based in the United States and Canada. We are currently offering a job opportunity for a Customer Service and Personal Assistant position.



This role allows you to work from the comfort of your home for approximately 2 hours per day, Monday to Friday. The position offers a weekly payment of $500.



If you are interested in this opportunity, please contact us for more details. Applicants must be based in the United States or Canada.



Kind regards,

Betctel Ltd..





Sincerely,


Mr.Richard Kintu



--000000000000e8c10e06584845c3--

Amazon Prime Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 22:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrTak-00000000BAy-2Z4U

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 22:50:58 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 22:50:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f6.google.com ([74.125.227.134]:33818)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrSMn-00000000Ogv-0KyC

for doctor@nk.ca;

Tue, 04 Aug 2026 21:32:37 -0600

Received: by mail-pj2-f6.google.com with SMTP id 98e67ed59e1d1-38f25802c19so177584a91.1

for ; Tue, 04 Aug 2026 20:31:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aax39.hamburg5.biz.id; s=google; t=1785900694; x=1786505494; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=4WWV2vsXEbN/3uEGBiImtIzSEhaqahO5KNVV9CsF3yk=;

b=mghE9INvjL+mSk0EnY/Qf4RyHLVKYxSQPUppyrYm74XuPKCwDk0G1k+hL3WUm3l0D0

3FW9Shg1VAZkH1SHsQ/mxFhLt8HEQJXSQGdki0eZPMvutQkES2VUiAg0VFBUB2Mz8lT2

Jc7ZcQj4sjdmuEdBdtqgUYnRD44MD9HCHB/vQYpdSYqyHmDX53RlBrDfx+2Ax6oDU+08

hh3JixuxwK6yuXwGQ1mHurRnSDLyoNiTlKfMiclcOU8VBY35IMrxl4d0e/S/QjMkPAaw

V7LxzKtmD4d8a2Ft8HO1vrdiRcPg1HUkWF5e/MtPblDWh0ju3ApvcnvuQqMqOxX24Dxv

3tbw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785900694; x=1786505494;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=4WWV2vsXEbN/3uEGBiImtIzSEhaqahO5KNVV9CsF3yk=;

b=BMkiYPhLzfjAJfZDnYwa1sRt5roT5DQm+uVOTSuzmNtsgmQ7L5NhOtL26doXaB1FyE

mkb1JDiqj6PNScpZJZIUZ3SOhucjbNiQsE+subrpQBZHUu8xr1qNopzaHqV0vyVF0KWj

0KzPRYAQ22F5/4oJqIvJis1VZ54rSLI8/uuI3Xb6lVmjtBqTxzKiNwH0IGcBrppUje+0

qNZ05K2WKhE2cJLjU2lVPploPV21PeOk/ntV/rYWNnoNbeuGUUMae7otWHrH9MctITuh

JZsklF3HX3QNoHKSSnSlqRLSclZn5aLz4L11pdQRO9DRpuYJshDJneDT7Zw0FU6TlAuE

oBmA==

X-Gm-Message-State: AOJu0Ywpyqqugp/IlpoR2zia/bRbp3iVwk3t+jkRPS6z7YRxC/cqT9cb

sJ+j0rrYtoaulnu8lwsJIn4BVD/WI0YRnleDcNPkeAhbapHbF+9qnJcgcYF2h/nD1qBsVge9vqP

HEFy6OHyt

X-Gm-Gg: AR+sD13MF0BXtTBmMJtuchgD8xa7hdAmBa73YDuhQWtiGt3cXg1zAU/1/Bz8bbM9mcK

yVuDB6sFBGXtCbD3O0E9OI85v2ocmpeBzLdH8SQ+MRHh2Q5hRiz7vyY9A8ElRD2xR4phxNpYIP0

0eu8oyxc3A7dBhCUbZ2TaytCQjUypdJnrmeEVWoIJWPwxToGOo+vC74rqjX49KqqT0JrBw3iq6P

kW6m4hF+TBXQ5ePQiP452ZJvBamB6TLkSk65IKvJWIKE3/nuEV5Z+g9MbCKA6NiOegA3pLujfp1

ISZOmU+I5WMLLuj+8RD9hNGgY5yK4y39nW30ol9OtSAjKF02xlnB8zZsgMEnm0C+pqACC+B/c6S

aBhmGxLQQ1GTTmTyagAr4UgKMRo8Yfe6lxiDLvTdcK1ZFzoZ1fCnHh3X7eQGOHkHdfRpnGKoUQW

85zUDQfJwqe3YCzNNypEYXr/YACyuizBI7m1nD628KhgdI0W9XuJnBc0RZ2nS5unkK3e2kILy25

cpXskl/vrKD5EGo/FGlQVMF/w4qP/+WeidWjvhPBQVn+gg=

X-Received: by 2002:a17:90b:520a:b0:38f:efed:5445 with SMTP id 98e67ed59e1d1-3903c54adafmr3711746a91.4.1785900694307;

Tue, 04 Aug 2026 20:31:34 -0700 (PDT)

Received: from mail-qv1-9387.google.com ([47.84.135.130])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-31586401627sm12640957eec.10.2026.08.04.20.31.33

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 04 Aug 2026 20:31:33 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Notification?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Notification?= <0jmtrkd8bboccyc-d4kydkor6nlubr29@aax39.hamburg5.biz.id>

Date: Wed, 5 Aug 2026 10:31:31 +0700

To: doctor@nk.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Wed, August 05, 2026 10:31 AM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.8

X-Spam_score_int: 108

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]



Content analysis details: (10.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[47.84.135.130 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

[74.125.227.134 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.134 listed in dnsbl.ahbl.org]

[74.125.227.134 listed in dnsbl.ahbl.org]

[74.125.227.134 listed in dnsbl.ahbl.org]

[74.125.227.134 listed in dnsbl.ahbl.org]

[47.84.135.130 listed in dnsbl.ahbl.org]

[47.84.135.130 listed in dnsbl.ahbl.org]

[47.84.135.130 listed in dnsbl.ahbl.org]

[47.84.135.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[47.84.135.130 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.134 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.134 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.134 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Wed, August 05, 2026 10:31 AM?=
























=3D"100%" class=3D"x_main-container" style=3D"width:100%; max-width:578px; =

min-width:343px">










ter" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spacing:0; f=

ont-family:sans-serif; color:#4a4a4a">








t-table" style=3D"border-radius:16px; font-family:CircularStd,Arial">




















class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border-top-left-radius=

:16px; border-top-right-radius:16px; background-color:#fff">












=3D"padding-top:32px; padding-bottom:24px">
src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsA=

AAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURB=

VHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZmzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZ=

q0lQKShBJUSXShYQGFShlc0gAE0MMBIghxMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//=

Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDdHQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/=

nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQ=

BJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxnNVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNC=

xw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8W=

d9ieKvetIbhbDCX4KV5iycknUu0XXCUcArcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0=

qxPo8IZM5zP51zClUNVKsimiHzWQd5QYwy+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiG=

ZtMgvPMWG3wmhykzQY3V44FtATbsdZENfCxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEu=

iW67pL6TWvAGs5UV64bTZwFWnACPjEdburOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGS=

x4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wWMjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBg=

FxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKMTQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP=

4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv7=

20hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYvXFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5m=

er+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbNcbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfP=

X3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxW=

tFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv=

7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnYVCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apC=

KlXohnIjYmSOssyt4bFRePUbt22S0okg7NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi=

4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaY=

OIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4N=

J54Ao+nZDOmJQuzFSpmQ5NcydBZw010FvF9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gc=

tm13D7KuBHV9bww48Df3mGD5fSbJEyDu8dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY=

9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4jdw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmi=

BKHsRZzaJaOLIO1wySLgrDkhuosVLCtWcW1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/=

XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQEcDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6Ap=

zaBnxsYYoBQkBBoZax36y8hdU9DpYzylrSWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd5=

3RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5Mhe=

UB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsBLwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7=

FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUjy/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJ=

YnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5QrW9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtc=

F4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlveh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1Q=

akjoglPB6tNcapyfaCkHk7DFB83uu8PRZYJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL=

0UyS0RbM0UqpibMJnEOAwEmSITm2bnynhprMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/C=

cTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1Fp9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gn=

qeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSdi2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KS=

TyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8BZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQ=

SalLG7cMTwITPRVCF7WACPx+08dB2hnVsoygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0T=

EKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHlMuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoW=

SjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHU=

zeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJC7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+=

CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTGS0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2=

xYM0zORFXkKc0ek4trzkihhVl3jXx83WrDV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1=

ooJw83Mgjqik4DwmRZI8iSlIpJEcF+QxbN9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/=

pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYF=

rkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdPoT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6=

xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0piN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kX=

bTGE1zcCHIowSvkzALeBiReJmWjyDla6CBzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIo=

w9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6PmaFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagT=

nNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnvBtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLg=

u9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+x=

B5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNk=

DaOSnV+xXN13EI8X9gMb98YYLvlIc57OJgdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCF=

CE8q4/YocLpqX8N/YW4LsNicgJpIZOUsFq5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEke=

JrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZ=

GybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9Acshj=

hudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLiCVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myU=

aP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqaghS8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9=

DFnzs3ARt2VhlghPBcB587N43uQl2lj8OUYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YO=

Jgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3Bt=

NROiyu/pnXUkunYntFVnDqX4rMjaiyukpphBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXn=

O6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgx=

YJJ2khqti/DSaosZKaO14FzpsDrGhl9GwxXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2M=

uEbooDL4qR52ebTFotZe2J2sqzoyQ7g7hs6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1=

EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXHq/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4p=

RtMt45rM585FZitl4TC0igUUUM/67wbTMkb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHz=

LQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiIfIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsY=

joOQ4rp+wSm931VB7etq+D+rQ7GIg9zsgFWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf=

8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9LrXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3=

bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eXMVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14=

m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiROWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm=

38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgkGPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0Brlyc=

xvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fmqDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRl=

meyK7Yi5wz6Vsys7fejHAP73oIsMFfH0VcO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6=

pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5irOPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/=

MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74=

ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6XNFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GS=

IUzauore9htNOasJymqtTCsAcGlJ9hMvA430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6R=

zBtgPMcwJct8jCjeek0ZHxYcceXhu0cM19wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIs=

SLhZBLzES0hpmTt4+Ke6gN++PwAnh9uozOjo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu=

1ykdMJfBRYacqzHSktkwttrMwVWbzfJDgVjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAO=

MTLDbxAhKzAv0ratPydVRqlxFm1XFZQtCfOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2p=

PtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6Xs4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxl=

YfnUUV73sWsgo2TW2toK2TJKAtNpL1OvVrZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6=

e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdFGlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksG=

tK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWcHJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRA=

mZfeu8WYhJGpUjJZqgP8KgAaR2iGnipENKNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUP=

o+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpdjwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QN=

RJPlJk+WogRONcyw6Rd9If51i4MdeyYwMGGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5Ie=

CwmDd+GsuvticM2W+bdIBpGyJhEJj6G8eiCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKC=

I71N7vv2bhma1VfHFVExZndKaeoZCoxdR14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2=

+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICCvtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDA=

NXtgi4sxWplsKvbXVxbCO9k5DamZyRfWKtNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G=

+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/Thr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL=

3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU=

3zS8a2ZleaowQhbWm/EhKkny03AwZk/cCa8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqH=

u72WNzY/QZ9mhcScbZfRqlA366Ajn8LsIh0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2ida=

wQLbHAN8plQEvSaJkLjEYCSRskCYm9liaIDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv=

1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxT=

xhRH8pc0g5qkdkimRkwo5ggRETwBkIyLop4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZ=

mQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9SDoAAAAASUVORK5CYII=3D" height=3D"65" alt=

=3D"

Information regarding your payment from Amazon Prime

">



"background-color:#ffffff; text-align:center; padding-bottom:52px">


32" width=3D"100%" style=3D"padding-top:32px; width:100%; border-top:1px so=

lid #e5e5e5">



>


























=3D"100%">


















ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


" width=3D"100%" style=3D"padding-bottom:32px; font-size:18px; color:#00405=

D">


=


=3D"padding-bottom:12px; font-family:CircularStd,Arial; font-size:17px; fon=

t-weight:bold; line-height:1.67; letter-spacing:0.38px; color:#13126c; text=

-align:left; margin:0">Your Prime benefits are on hold due to a billing iss=

ue




b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,=

Arial; font-size:15px; font-weight:bold; line-height:1.67; letter-spacing:0=

.38px; color:#13126c; text-align:left; margin:0">Hello,




raph" style=3D"margin-bottom:24px">We're unable to charge your payment meth=

od for $14.99 and any applicable taxes for your next 1 month of Prime. Your=

Prime benefits are currently on hold.



ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


raph" style=3D"margin-bottom:24px">If you don't update your payment method =

in the next 6 days, your membership may be canceled. To restore access to y=

our benefits, please update your payment information.







=3D"left" style=3D"width:100%; max-width:303px">














ings/d/1qQShKQydwlgC31C-t31tdjfkwFZWsCISyL4O3Fy_hRg/preview?cVf57" target=

=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable" id=3D"x=

_bill_view_link" data-linkindex=3D"0">


ng-top:10px; padding-bottom:10px; padding-left:30px; padding-right:30px; le=

tter-spacing:0.8px; line-height:1; border-radius:12px; border-width:1px; bo=

rder-color:transparent; font-family:CircularStd,Arial; font-size:14px; font=

-weight:bold; background-color:#FFD916; color:#000000">Update Information
div>

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:2; letter-spacing:0.2px; color:#171731; text=

-align:left">



ragraph" style=3D"margin-bottom:24px">Sincerly,
Amazon Prime Team



=

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:0.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


raph" style=3D"margin-bottom:24px">
=

=20



class=3D"x_responsive-padding-x" style=3D"background-color:#fafafa; paddin=

g-top:31px; padding-bottom:31px">












align:left">

=20


16" style=3D"margin-bottom:16px; font-family:CircularStd,Arial; font-size:1=

2px; line-height:24px; letter-spacing:0.18px; color:#171731">=C2=A9 Amazon.=

com, Inc. or its affiliates. All rights reserved. Amazon, Amazon.com, Prime=

, the Amazon.com logo and 1-Click are registered trademarks of Amazon.com, =

Inc. or its affiliates.



k" style=3D"font-family:CircularStd,Arial; font-size:16px; font-weight:500;=

line-height:19px; letter-spacing:0.6px; color:#171731">


e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon=

t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color=

:#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.







g=3D"table1footer2" style=3D"border-spacing:0">







loan spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 19:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrQIh-000000003AX-0F3W

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 19:20:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 19:20:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from antispam.kemendagri.go.id ([103.245.225.108]:39778 helo=mx2.kemendagri.go.id)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrPzX-00000000PSu-2gqv

for doctor@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 19:00:30 -0600

X-Spam-Status: No

DKIM-Filter: OpenDKIM Filter v2.11.0 mx2.kemendagri.go.id 4hF9bq644czNcsTK

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kemendagri.go.id;

s=default; t=1785888199;

bh=y0v1dt806hfvFk1I0ZWxSAhf0eKLTtExYqgNEiGhm6Y=;

h=Subject:To:From:Date:Reply-To:From;

b=CtcO4vJGnrFcayvJ8f6y6BgOZGw19q2AJXY76r5ms6zRiUD8Xoabg6IOmsRGo+Ily

+/Z+crCPs2FJLTfD/nP7GKgBHhVgf0zVGociqUvxJ0ydmiPIFBlfJ6K4LrZ8kBP6WR

qGZFF3YeWKKNY6rspdKDHKL8yBe0UggPBbfqDibU=

X-KEMENDAGRI-MailScanner-eFa-Watermark: 1786492998.65716@8HfLYDyf6OWicNjWVDicxg

X-KEMENDAGRI-MailScanner-eFa-From: rahmat.santoso@kemendagri.go.id

X-KEMENDAGRI-MailScanner-eFa-SpamScore: s

X-KEMENDAGRI-MailScanner-eFa: Found to be clean

X-KEMENDAGRI-MailScanner-eFa-ID: 4hF9bm5f4HzNcsTJ

X-KEMENDAGRI-MailScanner-eFa-Information: Please contact antixbon@kemendagri.go.id for more information

Received: from mail.kemendagri.go.id ([192.168.193.156] [192.168.193.156])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(no client certificate requested)

by mx2.kemendagri.go.id (MailScanner Milter) with SMTP id 4hF9bm5f4HzNcsTJ;

Wed, 5 Aug 2026 07:03:17 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.11.0 mx2.kemendagri.go.id 4hF9bm5f4HzNcsTJ

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kemendagri.go.id;

s=default; t=1785888197;

bh=y0v1dt806hfvFk1I0ZWxSAhf0eKLTtExYqgNEiGhm6Y=;

h=Subject:To:From:Date:Reply-To:From;

b=BbGLx8jASTaX48uiGCaQrvla3eDOl8B3t/N8rYxzbrn8pS3I0b9X5T5sty0DxwKiY

rVdMagaSj0+ughDK2sMk0WZeVUenZrJzuhbkTTOLF1VIZWDEKjx7JdNm6hx7hAWWRI

XBp1M8dg8dqcBwYR4B64HXPNPCbFIc01bDtKi6Ks=

Received: from mail.kemendagri.go.id ([127.0.0.1])

by localhost (mail.kemendagri.go.id [127.0.0.1]) (amavis, port 10032)

with ESMTP id aJ2BPFQ2-QRV; Wed, 5 Aug 2026 07:03:15 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.kemendagri.go.id E309940BE70

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kemendagri.go.id;

s=359AE826-CC3E-11E7-97D5-4A7CDFCE563B; t=1785888194;

bh=y0v1dt806hfvFk1I0ZWxSAhf0eKLTtExYqgNEiGhm6Y=;

h=MIME-Version:To:From:Date:Message-Id;

b=GCnCdUzVRUNygDwFROMAFbH3VxMAnNXUTROVx/ihk7xENUXsTGdNqhOCncmdZaGfi

cohuzvuMukCnM3dIxt5rn5l+bZzEdvyrjxJfN6w9/fMh8BMMJxXAU/L16AkbWEI4Dw

WGjQtrXs41uL9PWwO1r9SKdgwQGlonD8VTJbooZwnFr+iVpCz/QBOtkx8eE+RC3qXh

EY7O5TGej5c5Fasf/Q3RI+IRTF5XbjxOTxT/nuOM737ChLwgLTczoYUOOXKR6925ZN

pfE8y+y4crnJwJCPeRqAPmuejVBPsMWCSA2YBhIpx8isbBHYLlOaBurRsbve7OAqxT

PIieQcASK8UuA==

X-Virus-Scanned: amavis at mail.kemendagri.go.id

Received: from mail.kemendagri.go.id ([127.0.0.1])

by localhost (mail.kemendagri.go.id [127.0.0.1]) (amavis, port 10026)

with ESMTP id C0DaMJWiTNxS; Wed, 5 Aug 2026 07:03:14 +0700 (WIB)

Received: from [10.146.77.55] (unknown [146.103.18.69])

by mail.kemendagri.go.id (Postfix) with ESMTPA id 69DA65F74F2;

Wed, 5 Aug 2026 07:03:11 +0700 (WIB)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention

To: Recipients

From:

Date: Tue, 04 Aug 2026 17:03:07 -0700

Reply-To: abadwadiafinancial@gmail.com

Message-Id: <20260805000311.69DA65F74F2@mail.kemendagri.go.id>

X-Spam_score: 10.8

X-Spam_score_int: 108

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, Are you seeking for a LOAN? Reply us with

your Full name,address,amount,needed,age,duration,via our email id: abadwadiafinancial@gmail.com

For more details



Content analysis details: (10.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.245.225.108 listed in dnsbl.ahbl.org]

[103.245.225.108 listed in dnsbl.ahbl.org]

[103.245.225.108 listed in dnsbl.ahbl.org]

[103.245.225.108 listed in dnsbl.ahbl.org]

[146.103.18.69 listed in dnsbl.ahbl.org]

[146.103.18.69 listed in dnsbl.ahbl.org]

[146.103.18.69 listed in dnsbl.ahbl.org]

[146.103.18.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.245.225.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.245.225.108 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.245.225.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.245.225.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[146.103.18.69 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.245.225.108 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.6 J_CHICKENPOX_47 BODY: 4alpha-pock-7alpha

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

[103.245.225.108 listed in will-spam-for-food.eu.org]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 TEQF_USR_POLITE To and from user nearly same + polite greeting

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} Attention



Dear Sir/Madam, Are you seeking for a LOAN? Reply us with your Full name,ad=

dress,amount,needed,age,duration,via our email id: abadwadiafinancial@gmail=

.com For more details

Dating spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 12:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrJax-0000000094f-1znF

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 12:10:31 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 12:10:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazolkn19013081.outbound.protection.outlook.com ([52.103.7.81]:39091 helo=CY3PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrIwL-000000000mZ-3yfB

for doctor@nk.ca;

Tue, 04 Aug 2026 11:28:43 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ODmn0mrf9iPOsPceHZOUJUtaTm2WX6FMcSK3ZiTA1uTM+ZLMoh0cK9nEgmKOL0NtDtUVhqHCBJboUJdMqfeCweZ8N/biZ7v2eNpSP0meZMFgs+MFuR6oL29nnYZ8sHoUqnQZIj/+ZUa8O3ER1d3i2pqeHL7reOs3GzYEmvxenXb12v7+31to7NqBbabeYWEEFI24Bs5ZpZaVJtcih0KdKrCPfB71TiW+r6ZX+16wtu2PLofsUWwYNoUQ9Rwm+qoEu7NuLANu6AtX7u0+DZt3UjyE6GGB79S4iEkaYmUCXFTwdCazDHCiwJmhxnYrhW6enxIRjzSOx3z0mIvxWCadMQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=PxcugjRiChQcZ0b5Q+weU9vOkM2W0NHMYnNvd0k186I=;

b=mIIZ/O4DisOSgaMqGnBVKpA87KoI8r+lkJJp4aRJouHdKUdAQHtMDuShf2T18JdqjPfQzbcAR2f+mjRIMqKCbC3a3NyG2g8ijxB2+UgL+hCybX5TVB+QwRSC17Wd9pE7SAJQ3/Vxxqb5osZqsZ4vMSva0aSAjxu0GbMfa+wSrugezrNyJJdzmoo/DIngT8elAjVRaIuTigTL/RPctoW3xsEFHk0OxpqgSNJ4b9bAvT2qVv21S37o61taNa6SD1+hjy8YQbNDUoCnPyEx1J4oE2F7QqTCigm9rnEWSG4DHRin/56m0h2Pk4u2xQeSZ3+oN9O+hkzH6aYBt5FH5s9mtA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=PxcugjRiChQcZ0b5Q+weU9vOkM2W0NHMYnNvd0k186I=;

b=HGnM0GTWuDc74dVeCumtJ578R/TlXHmNkrjnD6UIBJT6+WOxTp75tkZe9U1w+O+sWahpQW7q5vmYX8G07qz9gN/FE8RaoJjfXjcGQM+Tmsw3D8MecTnsNKg07AwzbZxnmLlUAVM/F3PSO3Cka9o0Y9TOgZxMxDPzvRIOYM0ubW41GkM1WRQnIlWRUVqx8cUt/EzSU8AM1AUoTgkbxQphj9errzFmM0O3/m/pG4a+RfyAkdSHsrlSJcb+BNmMZKg5UTGVdoJ6ywjipm8qbyFdxq9bg4HWtt22PhW5vj1UOYLQ3HP0R9NNvy4CdQ47aFcEXeh3Q4/HL3w+klzKlzqgQQ==

Received: from CH3PR10MB7233.namprd10.prod.outlook.com (2603:10b6:610:121::16)

by IA1PR10MB7264.namprd10.prod.outlook.com (2603:10b6:208:3fe::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.17; Tue, 4 Aug

2026 17:27:24 +0000

Received: from CH3PR10MB7233.namprd10.prod.outlook.com

([fe80::4c33:1e84:83a8:b8aa]) by CH3PR10MB7233.namprd10.prod.outlook.com

([fe80::4c33:1e84:83a8:b8aa%6]) with mapi id 15.21.0270.017; Tue, 4 Aug 2026

17:27:23 +0000

From: "kai80zchebda@hotmail.com"

Subject: No pressure, just conversation !

Reply-To: "kai80zchebda@hotmail.com"

X-Mailer: Evolution

Date: Tue, 04 Aug 2026 19:27:17 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_BD02_6986C421.578334B2"

X-ClientProxiedBy: FR2P281CA0072.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:9a::11) To CH3PR10MB7233.namprd10.prod.outlook.com

(2603:10b6:610:121::16)

X-Microsoft-Original-Message-ID: <1.71265527ff8eeba4b482@Mainframe-SA>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CH3PR10MB7233:EE_|IA1PR10MB7264:EE_

X-MS-Office365-Filtering-Correlation-Id: e660e680-9a70-4053-e2c6-08def24da44d

X-Microsoft-Antispam:

BCL:0;ARA:14566002|55001999006|24021099003|4140399003|5072599009|25010399006|9400799043|23021999003|15080799012|24121999003|39105399006|6012599012|12121999013|22091999003|24071999003|20031999006|19110799012|8060799015|56899033|12091999003|440099028|3412199025|26104999009|40105399003|10035399007|43065399003|31055399003|23121099006|2607281247196008|11120399003|26121999007|26131999018|6106899015|2006899018|2406899039;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?UDUvSFBGZ0poUTRDeEhQSXM2SUlFSnFJdlNZdXdWcllQU2xMNnFvUjBINTBr?=

=?utf-8?B?UzczaVVXdGIyL3FyY21wYzFEb2ExbmIxbXVreEtjUTBqeGRZdVhJaEZEeUdk?=

=?utf-8?B?bnYxVXRNVlRwT2sxTFNyVVZ0SjlhM1hOVnBTdzJ3UTFvaWNXd1dSVWgwYjU2?=

=?utf-8?B?aHRIdTlvRm9KRHQxbTZBTW94WEIrcE5KdkNVOEtwWTlpVDdIc0hKaVdEQXVH?=

=?utf-8?B?V29kMEgzUWNITmdYdDlXY3lMZEU3QTQ1R3p5WjA0a1BWUVkybDlnRlV6NHVt?=

=?utf-8?B?MjVMWHlNOWZJMStQWWFGZ0owbW9zeEptMnFhQWw3NHlsT1JsNHZtdkM0ZWpX?=

=?utf-8?B?Z3J0M3pzRUltdHJBY29Ya1BqQzZXaUgycFpEbzJ1L2JoTUNXWlZRcGZleGpG?=

=?utf-8?B?SFVBMzBjMzBWdnZDQlM5YVZJZm5wL3l3NkxSY2tmNzdQUzdERUdFaGZiazdU?=

=?utf-8?B?RzBnOWszLzVxT29hN0dkaWNlYndEVmFHVWdUUVZhc2tuZ0pEVFEyZDFaQzR0?=

=?utf-8?B?YzRCc2xEbTNxRDBCTXo4aVhKdW1DVllkTGJxdWd5b0o0RzVURll4dGgvM3o4?=

=?utf-8?B?VEF3eDN1d1hIQ2F4aUp2RG5uVDQvbmhOcno1ek10aG5OcFpySkdMVjNqbDRr?=

=?utf-8?B?MVBhR2w1Zm10L3Z3VDRhd1B1T1BKS1Y0cEF6V2FwV3ZoY012VVp6cFVHVVpn?=

=?utf-8?B?TURXYngyRitiODEvZGdZSEwvQ3FzTnRNSitvckRyaXFzSkE3TlJPR1kwenJl?=

=?utf-8?B?U3JXWVQvSm8yMGpKR3QyUHljbHJSMm5oRkoxR1JTYy9EWXkxV3RjN1djaG1F?=

=?utf-8?B?WXlwbUZXVHFoL0ZtaHVndmJnWHZ1RnRpRGU1b0hiSXRRYjltSDhYelpGYVh6?=

=?utf-8?B?RXByeHllZHRHcXNiTWdmS2g1SHFGRlhKc0lTZm13aXg1ZTJ3MHh6L3BwdUdw?=

=?utf-8?B?Y2dvL3FxWWh4dU82Q3RxeWxldjlERnBVQzhBSkdPNmRJNEIvY0F4Q1ZENTda?=

=?utf-8?B?M2F6QWJtMHBVaU54UW94RzJ2MEdOSTBxLzM0TmlZTUJtem8xcjlsSUFRRUdK?=

=?utf-8?B?dHFub1pJcno2U3V0WlRKM2VzN0RYUk1kY0c3UGptbyszNnpMN2lleWhkYlZj?=

=?utf-8?B?UG1iQVNkUk5xNWxuWGU2R1JDR0Q1YTBOTHVVZWtnMVhUYVFHdmZuSjZvTzBa?=

=?utf-8?B?cXU3Ymd3bjhoME1mUTc4VVZkZzhlWE5pUDNVS0RZT2NyUVV4MDY0N3MreVY1?=

=?utf-8?B?enVjRkNrVGpGRi83N1hoRFhHOWhWeEZhNEF5S1p2YWlZMGlRTU9jcHJ6Qm5m?=

=?utf-8?B?YzRaMVVuZW5YVitWWlloeDZHNERhdldxTGhweVNDY3hVS0xFYmdZYnEzVTZs?=

=?utf-8?B?eUU5UjArNHBsblR1UGQwL0tTRS85ajBZRy9JWENnRXlFM1lBK09OL2FocWZ5?=

=?utf-8?B?RFpaRUgxeU1PUFUwYlRVTlZRQWt3Z1dMZloxYUpuM1MwSHBSdHpyQ1V1dzcw?=

=?utf-8?B?TjJJYkUwVStER2ZQR29ta1Q0THlueTRRMUxUWUVpM1AwUkdsNXRKTDNUT282?=

=?utf-8?B?K2NBanlYempsejNGODJFZk9hYS9mNFhXVlc5WCtoQUFmeXNub3U4dTlEdlJP?=

=?utf-8?B?ck9mSFNHdlFkRjBzdWZpNG9zNEFCWjFac3NaamZ6dnRxM3BCK01pMUg3ZXdZ?=

=?utf-8?B?bVZ6ZzFwTFJ0SlRUZ25qNVFodSt3R1pLMllZOURMMnVYQlpWZlhFeC84U29F?=

=?utf-8?B?UkxuZVZlaWhVZUwxUXRVK1BPY3VuODVLdi95SmUzUXFXM1BtNkhMN1Z4dXZx?=

=?utf-8?B?MWEyTmF4cW9GUGlaL3p5UT09?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?ZkRnMkpIRVpWczdSTUtpSlRHM01uV01weXkvTkdhTkZkYlA4cnRsdHRGQ01T?=

=?utf-8?B?UGo3MjJNdEhUZm5KSGpTNDZFTkt6N0V6ZERZT3RCSVNNelh0Q3ErdjB6NHlv?=

=?utf-8?B?eUJIcVBBTFZETGc0WEZsODI3UDVLNldFYjFhTDd5ZkJrVFNiODVMb1JiUVZz?=

=?utf-8?B?ZmFnTHcxSUZzMWg1ZHErbTJBNjlSdXo5dzJuR1VJNHpFTHcyakZ4QUJDd05n?=

=?utf-8?B?d3d3ZE1vUGVHcytCQzlwK3Y1ZE9iUUVYS0Z1dHphRlFpalZBdlI4aHA4aU80?=

=?utf-8?B?WGZFZVJReSsySEVGcXI2NjJXbDROWGd4UGNUcnAxOU04UnFYbVhUem1sQWF3?=

=?utf-8?B?K3g0T1lQY0s5RG1FVG54a2dUYXRJNHgwVXRQb2dxSjZaZmVUN1gzQVBudklN?=

=?utf-8?B?ZmVJdVcxOFBaUGgxaldBOS9CQ0RQY3pINEh1aWpNS096ZUFZRkpUeVI1TUY2?=

=?utf-8?B?MWI4S0NwRXczb01jUGZWc2xpMlQ2QWFNa1NNWXBWVzhSc3VJUmtJdFhZVml2?=

=?utf-8?B?ZW5BOWI1TTU5U0xrTmE2b2dlQ1JadXRwRFl4cGM3Y1lkVEkwUmsyVytNRmdZ?=

=?utf-8?B?TFphV3hyN0QzbW1UQythK29lWG5hWFRwcXBVNWh3UC9ZVkZQaEx4bS9hOG5p?=

=?utf-8?B?aFM2Z0pGL2d4N2JIbHJhdkFwMDU0NE4wRUhxVVVRU3hCaWlrTUJHcVh1V2tL?=

=?utf-8?B?RmdLZTFtVXFaUEJiQkd5bDJId3BsSTdKSlh5bXBScEJTT1J1aC8ycEFrdmwy?=

=?utf-8?B?K1RTMktPdHo1Y2RlQjY1c3NMbWY5eTVqZ1BKSE01TUZuU3Irb2VSVUdZS1Jr?=

=?utf-8?B?T3kwR29jYmVZOG4yM2ZhOVV4NGdyc0lyUElQY2JrM3p0S0JjUVVYblhhdWpN?=

=?utf-8?B?OHpobTI3Q1NZeVdGSWZ5VUhFa2pVOTFmN0NVODkxc1IvaWZURlFvQ295Qk5N?=

=?utf-8?B?L0FlL0xMbW5KZTNJRnEyMWJEKzFwdFZLNXhGQ3g0L2lkSnBrZFlrM2ZMeGEv?=

=?utf-8?B?a1hlOXRmRHNHN2VrMEk4UnBBUGU2MXhNNy9CSzBOOURTN0RNbmdKOUNkdWV5?=

=?utf-8?B?U3IxbWxpRjV1V282aXZ0cUNhUTNHeTRkZTJzcEUrUkI3TmJhSG9DSnZwL3V3?=

=?utf-8?B?VTQxQXBlMnRLUTBjUjRBbnB1Z3hGZHE4YnFRdTJSdkxFeS9oNUZJczFZRkNO?=

=?utf-8?B?MEphdFlwMDBuTW9VMFdsTzh4QWhoenJmNDZmRmZTNityMTMrVWptMG1iS3FY?=

=?utf-8?B?S3ZTNlFCWW12WVppL1BMK1lnVWF2ZGhFQ0ZPSXRXTUlEMVFuM0pLVFRYamFP?=

=?utf-8?B?WGNMcTNHa1Uvemd1SWNwYnBQRUFjelhkaDZVVlNOL0J4MUZBRFNZSFVlZ0lm?=

=?utf-8?B?bU8yUVpheFpJN3VSeUxCcmRLOEM2c05EVWpEeVBqWG9HU293Z1hiL0I2alRt?=

=?utf-8?B?YWlDQVVBZVZHQlJFQTBqdm8yLzlBT1J2azZIYjZXcEorVUtEejZaeHhLQkhy?=

=?utf-8?B?UEpoQXQyQjNrSDNRcjVKSjRjUVdXUFN3UFA4NUw4TUl3eHdQWG8rQmpZYXRS?=

=?utf-8?B?MTNoRFhhS2c4SmFlNzFwWTdUUWVndlZJTUVST3NrbWFJdXQyc1VhTkpvKys2?=

=?utf-8?B?UDlqaW1yMDB2NGltVjRIam8rU0JOYzQzK0RWdDNScjNoZGV1TTNTNFdJYVpF?=

=?utf-8?B?VTJJWUV0N3NDYmc2ZSt6NnJrTFhBWk16dml3M3ZsclVSTVZmeVJtdnRhc3JB?=

=?utf-8?B?VERYWHhoYkl5VlRYMnJkdTVxNm91VTNmOHorQzVTY3ZQeDVLTW41dks0Rkky?=

=?utf-8?B?TW1wekVFZ3cwM2p3cktEbXo2WnZleGF6dE03RTB4WmRySVRZczJxSWlNaCsz?=

=?utf-8?B?UnJzaEkzaHdBQWhEQTBIT2RkVU84eWhRbnpWTEswcHFXR1E9PQ==?=

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-664b6.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: e660e680-9a70-4053-e2c6-08def24da44d

X-MS-Exchange-CrossTenant-AuthSource: CH3PR10MB7233.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Aug 2026 17:27:22.2493

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR10MB7264

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Welcome to Complete Love Complete Love is a small, quiet little

corner of the internet made for warm and genuine conversation. No sales pitches,

no drama, no weird vibes — just people sharing though [...]



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

[52.103.7.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.7.81 listed in dnsbl.ahbl.org]

[52.103.7.81 listed in dnsbl.ahbl.org]

[52.103.7.81 listed in dnsbl.ahbl.org]

[52.103.7.81 listed in dnsbl.ahbl.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:121:0:0:0:16 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.7.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.7.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.7.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.7.81 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.7.81 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: unsub.completelove4.cc]

[URI: completelove4.cc]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: completelove4.cc]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kai80zchebda(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.7.81 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.7.81 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?} No pressure, just conversation !



------=_NextPart_000_BD02_6986C421.578334B2

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Welcome to Complete Love

Complete Love is a small, quiet little corner of the internet made for war=

m and genuine conversation. No sales pitches, no drama, no weird vibes =E2=

=80=94 just people sharing thoughts about life, relationships, personal gro=

wth, and whatever else is on their heart.



You signed up for these occasional updates, and we=E2=80=99re really happy=

you=E2=80=99re here. Feel free to drop in, join a chat, quietly look aroun=

d, or slip away again whenever life gets busy. Zero pressure =E2=80=94 just=

a soft and welcoming place to land.



Come hang out if you feel like it



This space isn=E2=80=99t going anywhere. Come by whenever the mood feels r=

ight.



You=E2=80=99re getting this because you asked for occasional updates from =

Complete Love. We only write from time to time and try our best not to be a=

nnoying.



Unsubscribe





=



------=_NextPart_000_BD02_6986C421.578334B2

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=

=0A=


0">=0A=

=0A=<br /><br /> Welcome to Complete Love=0A=<br /><br /> =0A=


und-color:#f4f4f4;" class=3D"ke-zeroborder" width=3D"100%" cellspacing=3D"0=

" cellpadding=3D"0" border=3D"0">=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


:0 auto;background-color:#ffffff;font-family:Arial,Helvetica,sans-serif;" c=

lass=3D"ke-zeroborder" width=3D"600" cellspacing=3D"0" cellpadding=3D"0" bo=

rder=3D"0">=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


6px;line-height:1.65;color:#333333;">=0A=

=0A=

Complete Love is a small, quiet little corner of the internet made=

for warm and genuine conversation. No sales pitches, no drama, no weird vi=

bes =E2=80=94 just people sharing thoughts about life, relationships, perso=

nal growth, and whatever else is on their heart.=0A=

=0A=

=0A=

You signed up for these occasional updates, and we=E2=80=99re real=

ly happy you=E2=80=99re here. Feel free to drop in, join a chat, quietly lo=

ok around, or slip away again whenever life gets busy. Zero pressure =E2=80=

=94 just a soft and welcoming place to land.=0A=

=0A=

=0A=


coration:underline;" href=3D"https://completelove4.cc">Come hang out if you=

feel like it =0A=

=0A=

=0A=

This space isn=E2=80=99t going anywhere. Come by whenever the mood=

feels right.=0A=

=0A=

lid #eeeeee;font-size:13px;line-height:1.5;color:#777777;text-align:left;">=

=0A=

=0A=

You=E2=80=99re getting this because you asked for occasional updat=

es from Complete Love. We only write from time to time and try our best not=

to be annoying.=0A=

=0A=

=0A=


ine;font-size:12px;" href=3D"https://unsub.completelove4.cc">Unsubscribe
> =0A=

=0A=
=0A=
=0A=


=



------=_NextPart_000_BD02_6986C421.578334B2--

Dagonfly Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 12:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrJac-0000000091G-0Un1

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 12:10:10 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 12:10:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from v02mb2-vm.sphostserver.com ([77.39.212.126]:21467)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrIRi-00000000JRO-49VU

for sales@nk.ca;

Tue, 04 Aug 2026 10:57:03 -0600

Received: from phoenixstudio by v02mb2-vm.sphostserver.com with local (Exim 4.99.5)

(envelope-from )

id 1wrIQj-000000052gA-2WoN

for sales@nk.ca;

Tue, 04 Aug 2026 18:55:53 +0200

Date: Tue, 4 Aug 2026 18:55:32 +0200

To: sales@nk.ca

From: Dragonfly Shipping

Subject: =?UTF-8?Q?Dragonfly_Shipping:_Your_Package_is_On_Hold_=E2=80=93_Pay_2.99_?=

=?UTF-8?Q?CAD?=

Message-ID:

List-Unsubscribe: mailto:bounce734-f5OhVBGrKhDLdGl@phoenix-studio.it?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="15f23139d4bc4b448007232c76c4dccee"

Content-Transfer-Encoding: 8bit

Sender:

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - v02mb2-vm.sphostserver.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [1005 1006] / [47 12]

X-AntiAbuse: Sender Address Domain - v02mb2-vm.sphostserver.com

X-Get-Message-Sender-Via: v02mb2-vm.sphostserver.com: authenticated_id: phoenixstudio/from_h

X-Authenticated-Sender: v02mb2-vm.sphostserver.com: support@phoenix-studio.it



This is a multi-part message in MIME format.



--15f23139d4bc4b448007232c76c4dccee

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit







Dragonfly Shipping - Delivery Update











Â













 Dragonfly Shipping







Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.99 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery





This is an automated message. Please do not reply.



For more information, visit Dragonfly Shipping - Support



© 2026 Dragonfly Shipping. All Rights Reserved.



















--15f23139d4bc4b448007232c76c4dccee

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit







Dragonfly Shipping - Delivery Update











Â














 Dragonfly Shipping









Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.99 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery






This is an automated message. Please do not reply.





For more information, visit Dragonfly Shipping - Support





© 2026 Dragonfly Shipping. All Rights Reserved.

























--15f23139d4bc4b448007232c76c4dccee--

Pharmaceutical partnership spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 12:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrJa5-000000008ua-29rZ

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 12:09:37 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 12:09:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [177.53.240.212] (port=53120 helo=mail.ampliconnect.com.br)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrHcw-00000000ARd-3KdI

for sales@nk.ca;

Tue, 04 Aug 2026 10:04:35 -0600

Received: from [62.60.190.200] ([62.60.130.107]) by ampliconnect.com.br with

MailEnable ESMTPA; Tue, 4 Aug 2026 13:01:13 -0300

Content-Type: multipart/mixed; boundary="===============0555404971114440294=="

MIME-Version: 1.0

Subject: SUPPLY COLLABORATION !!

From: Director@doctor.nl2k.ab.ca, A. Burkhard

To: sales@nk.ca

Reply-To: dr.burkhard@actlionspharm.com

Disposition-Notification-To: kadivec@siol.net

Return-Receipt-To: kadivec@siol.net

X-Mailer: SMTP Load Balancer

Message-ID:

Date: Tue, 4 Aug 2026 13:01:13 -0300

X-Spam_score: 23.2

X-Spam_score_int: 232

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, did you receive my email? We are looking for a trustworthy

individual in your region to support sourcing efforts for a Canadian pharmaceutical

manufacturer. The engagement includes financial in [...]



Content analysis details: (23.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[62.60.130.107 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

[177.53.240.212 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[177.53.240.212 listed in dnsbl.ahbl.org]

[177.53.240.212 listed in dnsbl.ahbl.org]

[177.53.240.212 listed in dnsbl.ahbl.org]

[177.53.240.212 listed in dnsbl.ahbl.org]

[62.60.130.107 listed in dnsbl.ahbl.org]

[62.60.130.107 listed in dnsbl.ahbl.org]

[62.60.130.107 listed in dnsbl.ahbl.org]

[62.60.130.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[177.53.240.212 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[177.53.240.212 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[177.53.240.212 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[177.53.240.212 listed in dnsbl.ahbl.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[62.60.130.107 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[62.60.130.107 listed in sbl-xbl.spamhaus.org]

[62.60.130.107 listed in sbl-xbl.spamhaus.org]

[62.60.130.107 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: actlionpharm.com]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[177.53.240.212 listed in psbl.surriel.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: www.actlionpharm.com/154.16.170.58]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns6.vebhost.com/154.16.170.57]

[URI: ns5.vebhost.com/154.16.170.56]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[177.53.240.212 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.6 J_CHICKENPOX_72 BODY: 7alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NO_RDNS2 Sending MTA has no reverse DNS

3.0 FROM_ADDR_WS Malformed From address

Subject: {SPAM?} SUPPLY COLLABORATION !!



--===============0555404971114440294==

Content-Type: multipart/alternative; boundary="===============8234231545459003519=="

MIME-Version: 1.0



Hello, did you receive my email?



We are looking for a trustworthy individual in your region to support sourcing efforts for a Canadian pharmaceutical manufacturer. The engagement includes financial incentives and a formal agreement. If you’re interested in learning more- kindly get back to me with your name and address- including a WhatsApp/ Phone number to enable us to send the full corporate offer (FCO) to you for review.



Best regards,

Dr Adam Burkhard (SD) actlionpharm.com Pharmaceuticals Canada, Inc. website: https://www.actlionpharm.com

ChatGPT Phish from nxcli

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGmu-00000000JbB-3mQs

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 09:10:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 09:10:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-831036.us-midwest-1.nxcli.net ([209.87.159.250]:52944)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGcZ-00000000785-12S8

for doctor@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 09:00:06 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=76c4ef197f.nxcli.io;

b=1zRTniJAWxB1d3cVj3irw7DhNZXa3y8g8H8vi1HiQ7j9raXqVD7T/SDSBn61Ow/jPkhgM1jD9jtX9+4nIxY0xCew1hJ1t87C7QHhXupKbF4NykOmDM5YV9nWlEeXaj71N/Q8TjCgZUoIPp5iYMMYgUn459ZJpgetPsPdt84Z2lIyuQwu2c+v+UKhvAGIJPPgwlVI7DN5+VeqkH1xDFn5fusdbrC3E80wUIhHHRJUvDi5oW1Fmg5ZIW5bzucD/c9bd/aWOrs8+LXhtq8l17vRvXKRDL7RUknKRsN+jgqUvJQ8otMYGWk4I1AGoGC1s7SKP2yLxGmv3lywGrcAzqMXhw==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=76c4ef197f.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=X/fwsL6PEaXo/TrDUqXy4A5PSx8=; b=TKfIn73

HWr+upKrHuVNb4ySAEU8jSVxnf2WTyaAulbAk4++vY1wxqOKHj2nESsLLyMOUR3e

YrOU/5w+ikQ4Mgk2XN4T371WCLT7kQ++H8d7pOtbcmv5HL7ynlrzDitzKngzxfK6

fShdN4EH0ENqvil+3pFh8A5PE+ufSBmb9IDNsvInS4CPk1IeJLoGvFDrueND8+LB

FNAoacldfWtjN1Bi8yvkjwe3QCP8N3e2V931jKQv7HNwGC0M7HKaxBoFzMz8HjeT

vHwlYJv85VlSGNM+uyex5Jk7CuRwh/+RmCCiefetT17GwDb7ZqbVNNOrqpIqaN04

EQZ163P4lOTHETw==

Received: (qmail 2543 invoked by uid 10216); 4 Aug 2026 14:59:05 +0000

Date: 4 Aug 2026 14:59:05 +0000

Message-ID: <20260804145905.2475.qmail@cloudhost-831036.us-midwest-1.nxcli.net>

To: doctor@doctor.nl2k.ab.ca

Subject: Action required: Update your ChatGPT payment details

X-PHP-Originating-Script: 10216:sqwad.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: ChatGPT

Reply-To: postmaster@76c4ef197f.nxcli.io

















Wymagana pÅ‚atność · OpenAI







OpenAI · Action required: Update your payment method for ChatGPT subscription













































































â—† OpenAI


 






















Reference: INV-2026-08-04-X7K9





Payment Required





Dear OpenAI Customer,





We were unable to process the payment for your ChatGPT Plus subscription. To ensure uninterrupted access, please update your payment method and settle the outstanding balance.





















Amount Due Subscription · Monthly $23.80 CAD




















  Payment Declined — The transaction was not accepted by your financial institution. Please verify your card details or use an alternative payment method.
























Update Payment Method →
 




Thank you for being a valued ChatGPT user.





The OpenAI Billing Team
































© 2026 OpenAI. All rights reserved.


This is an automated billing notification. Please do not reply to this email.












ChatGPT phish from nxcli

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGmq-00000000JQH-0qLy

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 09:10:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 09:10:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10309510.us-midwest-1.nxcli.net ([8.29.155.101]:47630)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGds-000000007RV-31jd

for doctor@nl2k.ab.ca;

Tue, 04 Aug 2026 09:01:27 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;

s=default; d=b5a5969d7f.nxcli.io;

b=bx19T4Y1FapwVmWNz2Xsas+a8mc4yXBljOYHT34TSwvcYqrDO5r9P17g76AI0bh19YjBRRZI6SJyuCyhah2LgZaAsMUKdvdocCpJpKpqDJbyGq83BsNnxemTmSqr889jdsG7hDi152ZM8/yD6RzLqccPNX0ucniLN2z37z2nxuniJw4Gd5jgwjWIDujo182io0o0IvsocEj+pdHYfBfWOLyjPvtdHSf98LQ/r1H4itC12jec8chkp6BLklsrEFH216WIJwFBbs1o9yYIwltWj1aSYY5Ndgzlo3RLMdAbuUMIFl573EtaYJJHWymu58wb9fl5FY1+qEdMswptMofNTQ==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=b5a5969d7f.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=rYtbD1tMVOTWksZsqkGhbfbBozRhXUaaf0kayX1

5/to=; b=j2PiXYqKyMdS9lyympYQL0HbKI7KJYsU9MFDD4w6T4I28GKOc/JK/xL

o5Nd9LQvt3LlpOw7BWx5CPbSNw/mW0w3QPlqjIGvZwBw2i0JyMG/16hV8oEN/c0u

1s0UZw8FfgDXT2/BLS0rflq9NWZVSjm4nvfxHmLqSRKMlL64mFH1JrBSHsjMZOCN

23AdVh/NAcCBxcAng7KtC8ylKs241zUxnSWOFeSSEoPVwVuDXaSg8yp5W+490FeM

+t1+T9fg+qyhiD+hED1dwI1gbf7KY8vUEuoiQezrJwarCcYaLnpcvRYOthQdEYLv

VzfBSczl61pwKmdFjMMO5i0DTz7Kl7Q==

Received: (qmail 78230 invoked by uid 10147); 4 Aug 2026 14:58:40 +0000

Date: 4 Aug 2026 14:58:40 +0000

Message-ID: <20260804145840.78218.qmail@cloudhost-10309510.us-midwest-1.nxcli.net>

To: doctor@nl2k.ab.ca

Subject: Action required: Update your ChatGPT payment details

X-PHP-Originating-Script: 10147:sqwad.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: ChatGPT

Reply-To: postmaster@b5a5969d7f.nxcli.io

















Wymagana pÅ‚atność · OpenAI







OpenAI · Action required: Update your payment method for ChatGPT subscription













































































â—† OpenAI


 






















Reference: INV-2026-08-04-X7K9





Payment Required





Dear OpenAI Customer,





We were unable to process the payment for your ChatGPT Plus subscription. To ensure uninterrupted access, please update your payment method and settle the outstanding balance.





















Amount Due Subscription · Monthly $23.80 CAD




















  Payment Declined — The transaction was not accepted by your financial institution. Please verify your card details or use an alternative payment method.
























Update Payment Method →
 




Thank you for being a valued ChatGPT user.





The OpenAI Billing Team
































© 2026 OpenAI. All rights reserved.


This is an automated billing notification. Please do not reply to this email.












Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGmj-00000000J9r-2v5D

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 09:10:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 09:10:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:59844)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGJS-000000003fq-1Lgv

for sales@nk.ca;

Tue, 04 Aug 2026 08:40:24 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-383b4a3755fso4403428a91.3

for ; Tue, 04 Aug 2026 07:39:27 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785854361; x=1786459161; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Q/bwMf46Qf7HtWM/YcNux8efhTALoGKVdG3/hpLCZac=;

b=RF0YZwhuhjaxWhk8v57p+Z4wVvOHkdXvbTnwe1UaF0YDekpbUTGlbEWEh0lUcoNceH

Q5+ntQfYcpF+McEyr9voTpq8WLstSrpCSQXokGG/5HXGEjNfpay/BhPWX12BfELUX4Cr

sx2KB75LN7LSm3owyNY/WcZqV77wwjOkreY+u/FpsfwTkeOJrxCZUcWfMHKbrHx+Q/oK

asNsh8AYAK+crdUY8+/ZAigcamjzuA2x1gX9a1HjAw3ffyJiFMGGKSZE7/9NFE35XqdZ

Y7Iilh3mHE32qXU6JQpF3fGLdQUsJfjjBZrZIB6OiQApiMudqksGubv41+lEjE1MlAHX

0fYw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785854361; x=1786459161;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=Q/bwMf46Qf7HtWM/YcNux8efhTALoGKVdG3/hpLCZac=;

b=Rh/TUFfo5wC5NP/pdzzXbggqQ5uwo0IIaWGV9Z0sEZyGP+jQdZZX+aJIassK3ooVNg

gWAp2dfwdRDPC68sLTptWjCW4NSPGpdHtuqzqf6ZBIlCyzlpZbhh2eZg162lAPx7wLkv

05YnLr3SukWKdVBr9brPvUXHf84bLIbRYFN6ae/jReZEbzhj3gHiELMSrHzQ9Zh+bFGE

hG7e+t+/Z8WI3tTZrBceKR2VavJpthFeku9eQi2mppvkqfvW6NdmH/+wDHn8i2TKuyqa

Dn2rlLRkVDWzu6sqCp0MSEY2yl9sXBYlaWOyeItenkAAGkV91P8T86Hf2VzCbbNtSu+7

SHgg==

X-Gm-Message-State: AOJu0Yy9q+jrnmEGZtSxWLnYGomkXXmLfLovZH+0igp9a1mIzS1fWEpE

Ckt/g+QdDdMTMPo/JOz4zKoxP3BNASTEDHmbBQAirvLbhlIFHrC47b7DE0MIPQhf

X-Gm-Gg: AR+sD12Mxt6pEkI81qhEIZS0iMwYxzDPByas2mU1ZmwvIQR8phdUiyygjQxhoNG97TX

5EdTIGWI96B5hCASSBBDgOqknb30Xc8ToD9EE6FO2fVmLgJKAidbOTtJPT4wjT1A7+mEOZgCYld

ifRXuEI0r9AF3h+0F4EHL4sLfTotx1OAhnGjLq6btDLOGUI4HgQjYnspDrAMy/macAbCzw5IKy0

5KJnclPYrSsx4ASs0KePIcFuzJIrWkJEAGee7EI8W6aiWWJIZmN5I1U5CgHGhk5j9TLEZF7Tff6

+CzDxXj68kOZfUjMAlVGc8yuqcO0fO/Lk6lr9GKCnFd+VIKbPxIgw05Nqte5Irv7Rw+0jWT8By/

iSY5S2N6jo1zvsP/NnRldi9jafeF5LkzUb/sDoaOtBH5MdaFYYLzEZuSKcG+1NJigzIpqHP8p3I

GAKE9P4XllLnSfuhZ2aI8hptk5wTb0D4IZWIvoy5uVbUy3uba2jX1eA3NLy/l07sCo/auTIe0GS

xv4gbOY4DbohrUN8jQyuE0qSIk6YyzQ6jtL8L8jjI9moffrQ0+ESXZ4q98d

X-Received: by 2002:a17:90b:1811:b0:38e:64b0:8bce with SMTP id 98e67ed59e1d1-38fbc4cf7afmr12821921a91.20.1785854360864;

Tue, 04 Aug 2026 07:39:20 -0700 (PDT)

Received: from LAPTOP7O4PJ7JN (103.148.83.103.broadband.rapidnet.in. [103.83.148.103])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-3158644a195sm5143088eec.13.2026.08.04.07.39.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 04 Aug 2026 07:39:19 -0700 (PDT)

From: "Jawed"

To:

Subject: Re: 1st Follow-up | Virtual assistant ?

Date: Tue, 4 Aug 2026 20:08:53 +0530

Message-ID: <0f2301dd241f$08831f60$19895e20$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0F24_01DD244D.223C93E0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0kHiDi1eQ7kFlxTf2pmCBwfZC/Tg==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_0F24_01DD244D.223C93E0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



Just wanted to follow up on my previous email. If this is something you're

considering, I'd be glad to schedule a brief call at your convenience.







Thank you!



Jawed







From: Jawed

Sent: 29 July 2026 20:08

To: sales@nk.ca

Subject: Call schedule | Virtual assistant ?







Hello,



Do you need help with my service?







. Cold Callers / Appointment setters



. Social media managers / digital marketing



. Research / Data Entry



. Accounting / Bookkeeping



. Marketing associates / lead generation







Can we schedule a quick 5-minute call?



Best wishes

Jawed









------=_NextPart_000_0F24_01DD244D.223C93E0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
link=3D"#0563C1" vlink=3D"#954F72" style=3D'word-wrap:break-word'>

class=3DWordSection1>

Hi,


class=3DMsoNoSpacing>Just wanted to follow up on my previous email. If =

this is something you're considering, I'd be glad to schedule a =

brief call at your convenience.


class=3DMsoNoSpacing> 

Thank =

you!


lang=3DEN-US>Jawed


class=3DMsoNoSpacing> 


style=3D'mso-element:para-border-div;border:none;border-top:solid =

windowtext 1.0pt;padding:1.0pt 0cm 0cm 0cm'>


style=3D'border:none;padding:0cm'>From: =

Jawed
Sent: 29 July 2026 20:08
To: sales@nk.ca
Subject: Call =

schedule | Virtual assistant ?


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Hello,

Do you need help with my =

service?

 


class=3DMsoNoSpacing>• Cold Callers / Appointment =

setters

• Social =

media managers / digital marketing


class=3DMsoNoSpacing>• Research / Data =

Entry

• Accounting / =

Bookkeeping

• =

Marketing associates / lead generation


class=3DMsoNoSpacing> 

Can we =

schedule a quick 5-minute call?

Best wishes
Jawed


class=3DMsoNoSpacing> 



------=_NextPart_000_0F24_01DD244D.223C93E0--



Bitcoin paypal phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrGmL-00000000IPs-3dY0

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 09:10:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 09:10:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazlp17010035.outbound.protection.outlook.com ([40.93.6.35]:10426 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrFhA-00000000N7G-25N1

for doctor@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 08:00:54 -0600

Received: from SJ0PR03CA0054.namprd03.prod.outlook.com (2603:10b6:a03:33e::29)

by DS4PR18MB927598.namprd18.prod.outlook.com (2603:10b6:8:321::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.15; Tue, 4 Aug

2026 13:59:43 +0000

Received: from SJ1PEPF00002317.namprd03.prod.outlook.com

(2603:10b6:a03:33e:cafe::66) by SJ0PR03CA0054.outlook.office365.com

(2603:10b6:a03:33e::29) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.16 via Frontend Transport; Tue, 4

Aug 2026 13:59:42 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.197)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.197 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.197; helo=mail-yw1-f197.google.com; pr=C

Received: from mail-yw1-f197.google.com (209.85.128.197) by

SJ1PEPF00002317.mail.protection.outlook.com (10.167.242.171) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8

via Frontend Transport; Tue, 4 Aug 2026 13:59:42 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:9992C05CA2170CF3245E9C73F6622C8B014A7B2F44E32413FB867BCF1A3E59BF;UpperCasedChecksum:0378818DB2FAAD06ADFE01D774A1D0A4123F614C30DC36FE9A7728BF8FCC59DC;SizeAsReceived:3523;Count:15

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-81eddfe28b4so151794617b3.3

for ; Tue, 04 Aug 2026 06:59:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1785851982; x=1786456782; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=vJJ+dFBvl+lFRqCsiNJ8bhtCSPDleLwbUQR4b/yLU1k=;

b=GjYbWvdWLFmTeNjcGDXc0W+Rd7/ZMeksIHxXNlQPyiReFVnBZ3QDfTV6SKU7Mm+fnl

jEAC3wcrmhTWnGL/l36HKDm+0giVcRhxZU6vthq8HtdDqPWxKimGXEo9UL0pJsOLlDhz

NHpUiaNdMGDRU4U8kTg/8qO66I6A3lw+lWsiP/NX/3B7lnHCkBDFWUGQWQN9sD8W/Gj2

92OuldI4FK2ata5R335ApGT59Bb+g99p0QgyA8ieJngWz+M07YqlqGcEoaXCUy5zubiC

wke7WaUxWvcpZxkFDz/yMuSUrb7BArUyKeL9M45HwxWcm6/ZpaAJBovFy0p6+GaZpyGE

7OJg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785851982; x=1786456782; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=vJJ+dFBvl+lFRqCsiNJ8bhtCSPDleLwbUQR4b/yLU1k=;

b=XIyNE+VB/HRcUufNp3UWKBKPsOmp/Yfq8KyVB/WCKXAZagQWXnYmoB5vS3RDkg4r4F

V2XFqYNBIDxTcxpZFmkXEbHyduCARfXToKTVMETavhjbdoa/oHZohmoyJrPCm/FPTnfK

rp/MguZuAefwlOBex/91LuSLIXRpHv6nx8Fv+959EZqeclRHXAHuYRywPRomYqwONiWc

B3FSM82LVSrVfeV/P9OT9TYyWU1J668B9Jff1+036CHJFjeOHZswlsrHK0VxWBZoQRfl

oEFBU1EiZ7aF9uYOz2me4SX0tJmMfgl1mbgjOxoJk17EYSjnMvcA5t27pwOru9FUaDJv

M0uQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785851982; x=1786456782;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=vJJ+dFBvl+lFRqCsiNJ8bhtCSPDleLwbUQR4b/yLU1k=;

b=Obd4gtVUVta4XWXTna3mDtdfpTtUTm1ceFP/h1lrzznXdVEGpOFvm5yEFd1B5nctlJ

hifjsRfcWxGJTjAQx19GZWJbsp6dOivDmo6jZXFqwxn8iTumt1Nxp05ScHsw5DcvFR7T

NEbcXRAA+fw2qNQR05VwJIvH07NMq5JMyw4DCo7eOYyuBtOId45PW3wwjU2+IEBH97Te

jeFcgMTp5tsYVxvueVMK/WQpVOx+fzY4VnV17a/eCQb6982wiUArq8AcxJ4bJamCJ3OR

uzTupNue+YBGnQDiJZXyjDWLY6eSnGAOW5H130Ds9/U7qtU7qjicg5WtkjSz4WnZMtZH

8UUQ==

X-Gm-Message-State: AOJu0YyEV97RLHCKO1ry5fWdKcJiNymM3HlLZghQrWAKpMLdBScqbfCM

7eQfAWuBvDI6Z9mH0mE7a+X9j3OgZfGl5TNOku98nBIXpo3cPixcy+UEzkfP4/5IGBEJ2TyqEXO

QsKZPDqCsnpWInAUewSctceEhRGQ3SsV+LFI=

MIME-Version: 1.0

X-Received: by 2002:a05:690c:4b11:b0:81c:872a:5152 with SMTP id

00721157ae682-81fd4bda24fmr169882777b3.30.1785851981952; Tue, 04 Aug 2026

06:59:41 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Tue, 04 Aug 2026 13:59:41 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Confirmation_=2D_Bitcoin_Ord?=

=?UTF-8?Q?er_in_Progress_=40_ut_4=2E_aug_2026_=28cynthiaperez389903=40groups=2Eo?=

=?UTF-8?Q?utlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000017ed206583911f6"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ1PEPF00002317:EE_|DS4PR18MB927598:EE_

X-MS-Office365-Filtering-Correlation-Id: 6a0db897-50e3-48c7-43e1-08def230a234

X-Sender-IP: 209.85.128.197

X-MS-Exchange-EOPDirect: true

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|6149299003|34130799006|6019299003|32020799003|3151999006|9400799043|24102599021|9020799019|9000799056|6092099016|8900799020|41010799009|22000799015|26000799027|5139299004|970799063|26130799012|1680799066|16200799027|29080799009|4040799016|1041999012|1602099012|30041999003|22062799003|2607281247196008|2145499017|18021999003|1360799030|1370799030|1380799030|4302099013|3412199025|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?S0E5bC9nV1BKNlZRZDgwdEdGSlM4aVNRZzl0VlRjTUx1UDYzTHYwZ1dzYXdY?=

=?utf-8?B?dGNBNUNMS214V3c1OXM4aUk4QUx6Z05GK0hrRVBCeU04d2lNYTNyWVdRaVhm?=

=?utf-8?B?b0lJOVg4dFBrUW1nNFBxSDdES0d5bTJGK0hhV0lkNk1yRk52R2VqdHY4MTds?=

=?utf-8?B?T1h5aU1lUWUxaEllNURZRmU0dExSb0p4NEtmb0psRjRxMFY1a0dWRHJPUkZp?=

=?utf-8?B?M2NWemlxcWlFdjdhR2RiR21xNzRreTZIL3lUdHkxVWhKTjZXRXEwMnNsN0RG?=

=?utf-8?B?eTZMQW1Pa3UwM25Cam1BY01zVE5DM2RHaGY1TldrOVJaS29qQ2VueFJqSDV5?=

=?utf-8?B?cTZydEx3U2wyKzhKbVlDc0R0MzgwOW14T0ptK2FIRzV6TStJWVpGVmF2QzJL?=

=?utf-8?B?aFd5eUsrRXlxVVNwcTJuVE03c1lqRnUvRWZNWk00bGp1Y0hOTjNGRjU5SzQ0?=

=?utf-8?B?V0xSOUdVbE1LZXA5ZmtxS1pWM3J3V0M2bjlMS3lVeFZvVTRWN0xWQVBVWnZr?=

=?utf-8?B?U29tSzlyT0Q4ZzR5VTNhTFBHWm1NaURKa0xzOTNnUUFhRWxqRHdIUDFFNTNR?=

=?utf-8?B?NnZlRk9NV1ZhYnpFTWVhMGRFZ2h2U2xhc0RaWjM4dVMzVEFNeDVWRVhVcFcw?=

=?utf-8?B?UG1sT3NablA0eUxPMDlMYVdLdlBEcHppR28rcm5WYUtlYlg1WGdNQzJwUUNh?=

=?utf-8?B?bUpvejlaWlBiVTgzVVd5VFJXT1dTY05SQ2pqU2gwcEp0M00yeVZYeXc5cWh3?=

=?utf-8?B?WGdSVFQ2WWdPd2ZDVnhERU9IMFd6VkN0bHNGY3VuYUdQQk96ZndPejZzb1Y4?=

=?utf-8?B?U2V4b0tVWkRFZi83WmlNdDZDRUlzMUFQb244d0VYb29JOU4rN3N5L242cmVj?=

=?utf-8?B?NExQa2hBMzhsbCs4dE1rS1Z0YkxFTlVJMUx0aWlMdkNSMkVNblBaaEIzOHJQ?=

=?utf-8?B?Y2RHTE83bFpUc3MzQW0wYnhWK2laZGpIZnB2bDhxWnU1Z1RnOWJvOGxRMHJM?=

=?utf-8?B?Mm5YKzE5dHhZTkRFbzZWYmdsVWFoYTdDYitoeHVSZ013SlB6VW8rNkRyT2VF?=

=?utf-8?B?S1VqL3ZucTBxZXVkOHlsYjlGSDRacG5yU2ZEOWZnWWl2M0I3QXQxMkVmZXpw?=

=?utf-8?B?U0wyL1huVXYxSjYyYlVHN1pnaHBlQStFYVZ1aUJXQTRIQ0o2ckk3ZWJqYVUr?=

=?utf-8?B?YVFvWlU1YjJuaXdIQkFrQ2FXRGJ0OGZINTNZMU9jeHgxUmNHclZBbWhlb3ov?=

=?utf-8?B?VnE3RXRPb3Fkd2o0cGxhQWZBdzBlVjBSTUdjSGtTS3FLdjN3aGJCdDdLbm9T?=

=?utf-8?B?M1FoWW9UdmtYRTlvTFNnaXMvVENGZmpIeFNMa2JRcE15S1VPYjMyL2N4QXNy?=

=?utf-8?B?K09QaVhsQk1EK09UNnV2djFhZ3J6UHFQelhneE5QUTRhTkJNZGJHa0hZd0V6?=

=?utf-8?B?YlExYjVid3VLcWN1U3NFS1Rzd0dOZFhWRkV4QkFLYUhWQmUyN2k0a29KZW9S?=

=?utf-8?B?enRkRUdidVp1NGdHY0xneHVWcitsR2ZvN28rTUNab0RFLzRDeFRsY1g1WVl3?=

=?utf-8?B?ZFRXQUx0bTQxVW1SSkR0aUQ4SDVIVmM3dTh2Ni9LajAwOCtzazRzQmNveEFn?=

=?utf-8?B?T09RVXlScWo2cEc2RnZuaGZWUHFBV3Evb2FkS1FXMGRrd0ZudHNUYkxycjMv?=

=?utf-8?B?VVliVWduNGx1K1diWng2dTF2eHNSWkFNUEQxZVVvTC9CWm9zZmhFT2Fmb1V0?=

=?utf-8?B?RkxGZkc4Rm9OOC9jWmtsU25nT1lTY2NKVmtzcnA3R2daSnlQa3hHRWt1YVNS?=

=?utf-8?B?Q3FIRkhyaERZZUZWdXAycm8rQlJzSm9GQnJTRjNLL1JNYndXM1FPUEZ0WFAv?=

=?utf-8?B?aS90UDZrSkw3VVZ3d1NHNmtLbW5lREp4czJpZjdIbE5KRmhUaTZncXZHaCs3?=

=?utf-8?B?RW5WM0Q0cTFLT3EyUU0wTlJ0eHVzWXBrd1ZXOGNwcWRGQmRMeDlySWVMNmZS?=

=?utf-8?B?dzYrN1FCd3p6dFkvMUtBTnlUTHpsS0JnOCtBT0JSVUVGLzdERVh0em5Qc0tl?=

=?utf-8?B?OU4rbWZoN09pM0V6cXppWWllR2VyYkdTaVFIUXFlQWN0V2lVcUhoK1hkamFz?=

=?utf-8?B?T2lzeDZ6cndnSzBIdEpvcVVzR0FhVUdXMzRKeDBFbHVsakJIYy9zN2VoNkdO?=

=?utf-8?B?RW9tQXBnUHpiaEh6UXQ0QmtpUStyM09vNXJOaGc3YXhBRm4rZkdKdUZ0ajZN?=

=?utf-8?B?Uzl6djBSYTFUS0xXYnNVdUpIc0xnN0pXY3ZLZDdrdE1NeXhwbWZ2aVZTemlV?=

=?utf-8?B?TTZuNDBnOFM4U2FRbEJkRllYeUdQVm11aldYT3JVSHFoQ1QzUmlwcWlkQW1T?=

=?utf-8?B?ZE40TmVLaEUwTUNOWUNSKy9Ia3kvYW9XYUZmcmpGOXdvQzR5NGdhc1ZlUlN3?=

=?utf-8?B?MWQ3QlYyaDhVaGpmTUhFVU5XWnk0MWNSRVV2YVZRdklqb1pTdGZkTUkwQVZ4?=

=?utf-8?B?ZHZNdXNDdDI4VmoyYU9pYkozeGFvakg4ZHE4OXEvNVZjQjJRNnhwTElQaXBJ?=

=?utf-8?B?THVIMXNzcHpncnJ3NGJZczVFcTVxeFV2VWgwekhMWU56cUVTVXNTS2lqUTNZ?=

=?utf-8?B?NzZ2dFM1RnB2dzIxQ1lON2JmYWhOcEEzMkhQWm5wZUs0UExrTkRmZVZqK05P?=

=?utf-8?B?MS9tTHZyNHlmaWdVRllXOFRJVk01SFVGYlNjWWt6L2MvMUZYUkFsWkVjQml0?=

=?utf-8?B?MStaUFdtNzhzUVMzeG1OMEVGblp4bGFKQjZtZ2ZCTm44cTE0NUQ5VDkrVkU3?=

=?utf-8?B?UTV2NEhJWWFOZFBHVzArQU8zS1UzYm9zUGtpQU9KVnhGOXhKMkVmZ0t3NE45?=

=?utf-8?B?ZEtKZG94RzNlUVhHMGxtbnVtSkVpS1d3eVE5am5rRTBhbjVIWGJWU0R5Vlds?=

=?utf-8?B?T3dpWGUzZ0lDRk1DQ3hUV1VRd1lBYVZVL3VjT3BSWVFaS1ZQZ3V5YjBFUmx2?=

=?utf-8?B?SU9wWE9FbHhTZ0RPamlRSk9NZEZTQXpkVWp6dUovQUNrY3FEZDFlWUFDeEpw?=

=?utf-8?B?QlIxN1dDb21FdkU3Q2wwelpVTHhHZWNUR0tyTUh6NllENzF2aXlRczZ0eWVH?=

=?utf-8?B?OTREN2hCODcxYmQ4S3QyblB0eUlJUWUxZmFWdW1POHJza2MySCt0M3MwSXZN?=

=?utf-8?B?OXdEK2Jra294ZlpyTjRsTU5MTTFtdUtkYktlQmI1RFJsZmlxbEk3Wi9senU1?=

=?utf-8?B?amtwd2hxYVhVZ3VDY2wyaXlLZ3BKUzVkaUJndk1reGhzalJ3V3h1REMyQVg1?=

=?utf-8?B?WisrSE94cWdCUEREcHJkTHdQTFJEdjRlRGEwNzFwdWNDTk1kQVVlUlBkTEFq?=

=?utf-8?B?cFcxUVJrZFdYNUM3akM0MEgrdGNlaUhGaCs1MXMrY2o1ajVnVUdKbksya0E4?=

=?utf-8?B?Wjc3UmJZSlM5UTB0dElqZkdmWlZ2Z1lwQzdrRHdUbHJYbkdBT0lLS3RvQkFk?=

=?utf-8?B?N3dGSjBPZEZjdmJ0andKbUZpMUZpTC9QQkNLaStJRjd0UHdOd0tWRVhINDQy?=

=?utf-8?B?dk9QTCtNWDgxRHlkTW82aEZlV0Z4VkZwQTBkK1RaZVZoOFhYKzRnZys4bHdp?=

=?utf-8?B?Ky9IbmozS2JrYVByOUM0cFFadHZZT2l0Q1BuN0oyUXFXKzBZai9EOU96TXBL?=

=?utf-8?B?ZityVHNLeUNoL1pRU0NmVnZPaFZGNEZCczFKOExkMExuenl4ZzdDdXJIWXQx?=

=?utf-8?B?dFpyUEhsOHhjNW91Q3J4NWhMUjBrVEYyOFdrenc9PQ==?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Aug 2026 13:59:42.6484

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 6a0db897-50e3-48c7-43e1-08def230a234

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: SJ1PEPF00002317.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR18MB927598

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Payment Confirmation – Bitcoin Order in Progress

utorok 4. aug 2026 Dear Customer, Your PayPal payment has been received successfully.

We are pleased to confirm that your Bitcoin (BTC) purchase request has been

securely registered and is currently being processed.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

[40.93.6.35 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[40.93.6.35 listed in dnsbl.ahbl.org]

[40.93.6.35 listed in dnsbl.ahbl.org]

[40.93.6.35 listed in dnsbl.ahbl.org]

[40.93.6.35 listed in dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:66 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.6.35 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.6.35 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.6.35 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Confirmation_=2D_Bitcoin_Ord?=

=?UTF-8?Q?er_in_Progress_=40_ut_4=2E_aug_2026_=28cynthiaperez389903=40groups=2Eo?=

=?UTF-8?Q?utlook=2Ecom=29?=



--000000000000017ed206583911f6

Content-Type: multipart/alternative; boundary="000000000000017ed106583911f4"



--000000000000017ed106583911f4

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



UGF5UGFsIFBheW1lbnQgQ29uZmlybWF0aW9uIOKAkyBCaXRjb2luIE9yZGVyIGluIFByb2dyZXNz

DQp1dG9yb2sgNC4gYXVnIDIwMjYNCg0KDQoNCkRlYXIgQ3VzdG9tZXIsDQoNCllvdXIgUGF5UGFs

IHBheW1lbnQgaGFzIGJlZW4gcmVjZWl2ZWQgc3VjY2Vzc2Z1bGx5LiBXZSBhcmUgcGxlYXNlZCB0

byAgDQpjb25maXJtIHRoYXQgeW91ciBCaXRjb2luIChCVEMpIHB1cmNoYXNlIHJlcXVlc3QgaGFz

IGJlZW4gc2VjdXJlbHkgIA0KcmVnaXN0ZXJlZCBhbmQgaXMgY3VycmVudGx5IGJlaW5nIHByb2Nl

c3NlZC4NCg0KVHJhbnNhY3Rpb24gU3VtbWFyeToNCg0KUGF5bWVudCBNZXRob2Q6IFBheVBhbA0K

UHVyY2hhc2UgVHlwZTogQml0Y29pbiAoQlRDKQ0KQW1vdW50IENoYXJnZWQ6ICQxNDk5Ljk1DQpP

cmRlciBTdGF0dXM6IFByb2Nlc3NpbmcNCg0KWW91ciB0cmFuc2FjdGlvbiBpcyBjdXJyZW50bHkg

Z29pbmcgdGhyb3VnaCBvdXIgc3RhbmRhcmQgdmVyaWZpY2F0aW9uICANCnByb2Nlc3MuIE9uY2Ug

dGhlIHZlcmlmaWNhdGlvbiBpcyBjb21wbGV0ZWQsIHlvdXIgQml0Y29pbiBvcmRlciB3aWxsIGJl

ICANCnByb2Nlc3NlZCBhbmQgZmluYWxpemVkIGF1dG9tYXRpY2FsbHkuDQoNCklmIHlvdSBkbyBu

b3QgcmVjb2duaXplIHRoaXMgdHJhbnNhY3Rpb24sIHBsZWFzZSBjb250YWN0IG91ciBjdXN0b21l

ciAgDQpzdXBwb3J0IHRlYW0gaW1tZWRpYXRlbHkgYXQgKzEgODA2IDIyNCA5MTcxLg0KDQpUaGFu

ayB5b3UgZm9yIGNob29zaW5nIG91ciBzZXJ2aWNlcy4NCg0KU2luY2VyZWx5LA0KQmlsbGluZyBE

ZXBhcnRtZW50DQoNCk9yZ2FuaXrDoXRvcg0KSGFyZXNhc3ogTnh5c2Fyd3NhDQpoYXJlc3Nhem56

eHJyc3hheHozMjFAZ21haWwuY29tDQoNCk9kcG92ZWR6dGUgbmEgY3ludGhpYXBlcmV6Mzg5OTAz

QGdyb3Vwcy5vdXRsb29rLmNvbSBhwqBwb3pyaXRlIHNpIMSPYWzFoWllICANCnBvZHJvYm5vc3Rp

IG5hICANCmh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNvbS9jYWxlbmRhci9ldmVudD9hY3Rpb249

VklFVyZlaWQ9TjJvNE56Sm5aSEJqWkhRemNETm9jV1p5TldSMU1XbzFkWFVnWTNsdWRHaHBZWEJs

Y21WNk16ZzVPVEF6UUdkeWIzVndjeTV2ZFhSc2IyOXJMbU52YlEmdG9rPU16RWphR0Z5WlhOellY

cHVlbmh5Y25ONFlYaDZNekl4UUdkdFlXbHNMbU52YldFelltWXdNbUl4TURReE1qVmxaakpqWVRF

MU1ETTRZV1JoWW1Sak1HUmhaV1JtWkRkbVpXRSZjdHo9QXNpYSUyRkRoYWthJmhsPXNrJmVzPTAN

ClZhxaFhIMO6xI1hc8WlIGplIHZvbGl0ZcS+bsOhLg0KDQp+fi8vfn4NCk9kb3NsYW7DqSBLYWxl

bmTDoXJvbSBHb29nbGU6IGh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNvbS9jYWxlbmRhci8NCg0K

VMO6dG8gc3Byw6F2dSBzdGUgZG9zdGFsaSwgcHJldG/FvmUgc3RlIMO6xI1hc3Ruw61rb20gZGFu

ZWogdWRhbG9zdGkuDQoNCkFrIHTDunRvIHBvenbDoW5rdSBwcmVwb8WhbGV0ZSwga3RvcsO9a2/E

vnZlayBqZWogcHLDrWplbWNhIGJ1ZGUgbcO0Y8WlIG9kb3NsYcWlICANCm9kcG92ZcSPIG9yZ2Fu

aXrDoXRvcm92aSwgYnnFpSBwcmlkYW7DvSBkbyB6b3puYW11IGhvc3TDrSwgcG96w712YcWlIGlu

w71jaCBiZXogIA0Kb2jEvmFkdSBuYSBpY2ggdmxhc3Ruw70gc3RhdiBwb3p2w6Fua3kgYWxlYm8g

bWVuacWlIHZhxaFlIHBvdHZyZGVuaWUgw7rEjWFzdGkuDQoNCsSOYWzFoWllIGluZm9ybcOhY2ll

ICANCmh0dHBzOi8vc3VwcG9ydC5nb29nbGUuY29tL2NhbGVuZGFyL2Fuc3dlci8zNzEzNSNmb3J3

YXJkaW5nDQo=

--000000000000017ed106583911f4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/Person">
=3D"Pozv=C3=A1nka od pou=C5=BE=C3=ADvate=C4=BEa Haresasz Nxysarwsa"/>
><=

meta itemprop=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/=

>
ization">
itemprop=3D"eventId/googleCalendar" content=3D"7j872gdpcdt3p3hqfr5du1j5uu"/=

>
x; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: =

hidden;" itemprop=3D"name">PayPal Payment Confirmation =E2=80=93 Bitcoin Or=

der in Progress
ogle.com/calendar/event?action=3DVIEW&eid=3DN2o4NzJnZHBjZHQzcDNocWZyNWR=

1MWo1dXUgY3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbQ&tok=3DMzEja=

GFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbWEzYmYwMmIxMDQxMjVlZjJjYTE1MDM4YWRh=

YmRjMGRhZWRmZDdmZWE&ctz=3DAsia%2FDhaka&hl=3Dsk&es=3D0"/>
ria-hidden=3D"true">

e=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; height: =

0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;">De=

ar Customer,



Your PayPal payment has been received successfully. We are pleased to confi=

rm that your Bitcoin (BTC) purchase request has been securely registered an=

d is currently being processed.



T

entation" align=3D"center" style=3D"width:100%;" class=3D"body-container"><=

tbody>

16px;" aria-hidden=3D"true">  

=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">=


rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-align: to=

p;" class=3D"main-container-inner">
v class=3D"" style=3D"font-size: 13px; text-align: left; direction: ltr; di=

splay: inline-block; vertical-align: top; width: 100%;overflow: hidden; wor=

d-wrap: break-word;">
" role=3D"presentation" width=3D"100%" class=3D"main-column-table-ltr" styl=

e=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed;">
>
able>utorok 4. aug 2026
>

le border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" w=

idth=3D"100%" style=3D"table-layout: fixed;">

padding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;=

">

ight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color:=

#3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presentati=

on">Dear Customer,

Your PayPal payment has been received successful=

ly. We are pleased to confirm that your Bitcoin (BTC) purchase request has =

been securely registered and is currently being processed.

Transactio=

n Summary:

Payment Method: PayPal
Purchase Type: Bitcoin (BTC)
=

Amount Charged: $1499.95
Order Status: Processing

Your transaction=

is currently going through our standard verification process. Once the ver=

ification is completed, your Bitcoin order will be processed and finalized =

automatically.

If you do not recognize this transaction, please conta=

ct our customer support team immediately at +1 806 224 9171.

Thank yo=

u for choosing our services.

Sincerely,
Billing Department


an>


Your PayPal payment has been received successfully. We are pleased to confi=

rm that your Bitcoin (BTC) purchase request has been securely registered an=

d is currently being processed.



Transaction Summary:



Payment Method: PayPal

Purchase Type: Bitcoin (BTC)

Amount Charged: $1499.95

Order Status: Processing



Your transaction is currently going through our standard verification proce=

ss. Once the verification is completed, your Bitcoin order will be processe=

d and finalized automatically.



If you do not recognize this transaction, please contact our customer suppo=

rt team immediately at +1 806 224 9171.



Thank you for choosing our services.



Sincerely,

Billing Department"/>

: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">

tyle=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 40=

0; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043=

; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
n aria-hidden=3D"true">


t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit=

-font-smoothing: antialiased;margin: 0; padding: 0;">Kedy


ize: 0; padding: 0; text-align: left; word-break: break-word;;padding-botto=

m:24px;">

font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px=

;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"pre=

sentation">
presentation" style=3D"padding-bottom: 4px;">


ext" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-we=

ight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organ=

iz=C3=A1tor


s=3D"notranslate">
play: inline-block;;color: #3c4043; text-decoration: none;" href=3D"mailto:=

haressaznzxrrsxaxz321@gmail.com">Haresasz Nxysarwsa
p=3D"organizer" itemscope itemtype=3D"http://schema.org/Person">
rop=3D"name" content=3D"Haresasz Nxysarwsa"/>
nt=3D"haressaznzxrrsxaxz321@gmail.com"/>

td>

reak: break-word;;padding-bottom:24px;">

sans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heig=

ht: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" cla=

ss=3D"primary-text" role=3D"presentation">
=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px=

;">


43; text-decoration: none;font-weight: 700;-webkit-font-smoothing: antialia=

sed;margin: 0; padding: 0;">Hostia

(Zoznam host=C3=AD=

bol na =C5=BEiados=C5=A5 organiz=C3=A1tora skryt=C3=BD)

-word;;padding-bottom:0px;">

none;;font-family: Roboto, sans-serif;font-size: 14px; line-height: 20px; m=

so-line-height-rule: exactly; text-align: left;" class=3D"primary-text">
v>Odp=

ove=C4=8F
t-decoration: none;"> na
le=3D"display: inline-block;;color: #70757a; text-decoration: none;" href=

=3D"mailto:cynthiaperez389903@groups.outlook.com">cynthiaperez389903@groups=

.outlook.com

padding: 0; text-align: left; word-break: break-word;;padding-bottom:16px;=

">

t: 20px; mso-line-height-rule: exactly; text-align: left;">
"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"bord=

er-collapse: separate;">

padding-right: 12px;">
=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"border: solid 1px #=

dadce0; border-radius: 16px; border-collapse: separate;font-family: 'Go=

ogle Sans', Roboto, sans-serif;;display: inline-block;;margin-right: 12=

px; margin-left: 0;">

e=3D"presentation">
"http://schema.org/RsvpAction">
p://schema.org/RsvpAttendance/Yes"/>
emtype=3D"http://schema.org/HttpActionHandler">
ef=3D"http://schema.org/HttpRequestMethod/GET"/>
67;">
&eid=3DN2o4NzJnZHBjZHQzcDNocWZyNWR1MWo1dXUgY3ludGhpYXBlcmV6Mzg5OTAzQGdy=

b3Vwcy5vdXRsb29rLmNvbQ&rst=3D1&tok=3DMzEjaGFyZXNzYXpuenhycnN4YXh6Mz=

IxQGdtYWlsLmNvbWEzYmYwMmIxMDQxMjVlZjJjYTE1MDM4YWRhYmRjMGRhZWRmZDdmZWE&c=

tz=3DAsia%2FDhaka&hl=3Dsk&es=3D0" style=3D"font-weight: 400;font-fa=

mily: 'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: =

14px; line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-dec=

oration: none; text-transform: none;" class=3D"grey-button-text" itemprop=

=3D"url" target=3D"_blank">
g=3D"0" role=3D"presentation">

" valign=3D"middle" style=3D"padding: 6px 0; padding-left: 16px; padding-ri=

ght: 12px; white-space: nowrap;">
ly: 'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14=

px; line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decor=

ation: none; text-transform: none;">=C3=81no

ertical-align=3D"middle" role=3D"presentation" style=3D"border-left: solid =

1px #dadce0; border-right: solid 1px #dadce0;">
ction" itemscope itemtype=3D"http://schema.org/RsvpAction">
=3D"attendance" content=3D"http://schema.org/RsvpAttendance/No"/>
prop=3D"handler" itemscope itemtype=3D"http://schema.org/HttpActionHandler"=

>
/>
lendar/event?action=3DRESPOND&eid=3DN2o4NzJnZHBjZHQzcDNocWZyNWR1MWo1dXU=

gY3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbQ&rst=3D2&tok=3DM=

zEjaGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbWEzYmYwMmIxMDQxMjVlZjJjYTE1MDM4=

YWRhYmRjMGRhZWRmZDdmZWE&ctz=3DAsia%2FDhaka&hl=3Dsk&es=3D0" styl=

e=3D"font-weight: 400;font-family: 'Google Sans', Roboto, sans-seri=

f;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-height-rule:=

exactly; margin: 0; text-decoration: none; text-transform: none;" class=3D=

"grey-button-text" itemprop=3D"url" target=3D"_blank">
ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation"><=

/table>
r>

enter" role=3D"presentation" valign=3D"middle" style=3D"padding: 6px 12px; =

white-space: nowrap;">
n class=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Go=

ogle Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-he=

ight: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none=

; text-transform: none;">Nie

"middle" role=3D"presentation">
itemtype=3D"http://schema.org/RsvpAction">
ntent=3D"http://schema.org/RsvpAttendance/Maybe"/>
" itemscope itemtype=3D"http://schema.org/HttpActionHandler">
=3D"method" href=3D"http://schema.org/HttpRequestMethod/GET"/>
=3D"color: #5f6367;">
action=3DRESPOND&eid=3DN2o4NzJnZHBjZHQzcDNocWZyNWR1MWo1dXUgY3ludGhpYXBl=

cmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbQ&rst=3D3&tok=3DMzEjaGFyZXNzYX=

puenhycnN4YXh6MzIxQGdtYWlsLmNvbWEzYmYwMmIxMDQxMjVlZjJjYTE1MDM4YWRhYmRjMGRhZ=

WRmZDdmZWE&ctz=3DAsia%2FDhaka&hl=3Dsk&es=3D0" style=3D"font-wei=

ght: 400;font-family: 'Google Sans', Roboto, sans-serif;color: #5f6=

368; font-size: 14px; line-height: 120%; mso-line-height-rule: exactly; mar=

gin: 0; text-decoration: none; text-transform: none;" class=3D"grey-button-=

text" itemprop=3D"url" target=3D"_blank">
"0" cellspacing=3D"0" role=3D"presentation">

=3D"presentation" valign=3D"middle" style=3D"padding: 6px 0; padding-left: =

12px; padding-right: 16px; white-space: nowrap;">
ht: 400;font-family: 'Google Sans', Roboto, sans-serif;color: #5f63=

68; font-size: 14px; line-height: 120%; mso-line-height-rule: exactly; marg=

in: 0; text-decoration: none; text-transform: none;">Mo=C5=BEno

dar/event?action=3DVIEW&eid=3DN2o4NzJnZHBjZHQzcDNocWZyNWR1MWo1dXUgY3lud=

GhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbQ&tok=3DMzEjaGFyZXNzYXpuenh=

ycnN4YXh6MzIxQGdtYWlsLmNvbWEzYmYwMmIxMDQxMjVlZjJjYTE1MDM4YWRhYmRjMGRhZWRmZD=

dmZWE&ctz=3DAsia%2FDhaka&hl=3Dsk&es=3D0" style=3D"display: inli=

ne-block;;font-weight: 400;font-family: 'Google Sans', Roboto, sans=

-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-height-=

rule: exactly; margin: 0; text-decoration: none; text-transform: none;" cla=

ss=3D"grey-button-text" target=3D"_blank">
=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"border: solid 1px #=

dadce0; border-radius: 16px; border-collapse: separate;font-family: 'Go=

ogle Sans', Roboto, sans-serif;">

n=3D"middle" role=3D"presentation" style=3D"padding: 6px 0; padding-left: 1=

6px; padding-right: 12px; white-space: nowrap;;color: #5f6367;">
y: 'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14p=

x; line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decora=

tion: none; text-transform: none;">=C4=8Eal=C5=A1ie mo=C5=BEnosti
-[if mso]>

d>

"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">
ble>

lign: left; word-break: break-word;;padding:4px 12px;" class=3D"" align=3D"=

left">

n: none;font-family: Roboto, sans-serif;font-size: 12px; line-height: 16px;=

mso-line-height-rule: exactly; text-align: left;">

Odoslan=C3=A9
=3D"https://calendar.google.com/calendar/" class=3D"accent-text underline-o=

n-hover" style=3D"font-family: Roboto, sans-serif;font-size: 12px; line-hei=

ght: 16px; mso-line-height-rule: exactly;;color: #1a73e8; text-decoration: =

none;" target=3D"_blank">Kalend=C3=A1rom Google

T=C3=BAto spr=C3=

=A1vu ste dostali, preto=C5=BEe ste =C3=BA=C4=8Dastn=C3=ADkom danej udalost=

i.

Ak t=C3=BAto pozv=C3=A1nku prepo=C5=A1lete, ktor=C3=BDko=C4=BEvek =

jej pr=C3=ADjemca bude m=C3=B4c=C5=A5 odosla=C5=A5 odpove=C4=8F organiz=C3=

=A1torovi, by=C5=A5 pridan=C3=BD do zoznamu host=C3=AD, poz=C3=BDva=C5=A5 i=

n=C3=BDch bez oh=C4=BEadu na ich vlastn=C3=BD stav pozv=C3=A1nky alebo meni=

=C5=A5 va=C5=A1e potvrdenie =C3=BA=C4=8Dasti.
line-on-hover" style=3D"font-family: Roboto, sans-serif;font-size: 12px; li=

ne-height: 16px; mso-line-height-rule: exactly;;color: #1a73e8; text-decora=

tion: none;" href=3D"https://support.google.com/calendar/answer/37135#forwa=

rding">=C4=8Eal=C5=A1ie inform=C3=A1cie



--000000000000017ed106583911f4

Content-Type: text/calendar; charset="UTF-8"; method=REQUEST

Content-Transfer-Encoding: quoted-printable



BEGIN:VCALENDAR

PRODID:-//Google Inc//Google Calendar 70.9054//EN

VERSION:2.0

CALSCALE:GREGORIAN

METHOD:REQUEST

BEGIN:VEVENT

DTSTART;VALUE=3DDATE:20260804

DTEND;VALUE=3DDATE:20260805

DTSTAMP:20260804T135941Z

ORGANIZER;CN=3DHaresasz Nxysarwsa:mailto:haressaznzxrrsxaxz321@gmail.com

UID:7j872gdpcdt3p3hqfr5du1j5uu@google.com

ATTENDEE;CUTYPE=3DINDIVIDUAL;ROLE=3DREQ-PARTICIPANT;PARTSTAT=3DNEEDS-ACTION=

;RSVP=3D

TRUE;CN=3Dcynthiaperez389903@groups.outlook.com;X-NUM-GUESTS=3D0:mailto:cy=

nthia

perez389903@groups.outlook.com

X-MICROSOFT-CDO-OWNERAPPTID:172016644

CREATED:20260804T135930Z

DESCRIPTION:Dear Customer\,\n\nYour PayPal payment has been received succes

sfully. We are pleased to confirm that your Bitcoin (BTC) purchase request=

=20

has been securely registered and is currently being processed.\n\nTransact=

i

on Summary:\n\nPayment Method: PayPal\nPurchase Type: Bitcoin (BTC)\nAmoun=

t

Charged: $1499.95\nOrder Status: Processing\n\nYour transaction is curren=

t

ly going through our standard verification process. Once the verification =

i

s completed\, your Bitcoin order will be processed and finalized automatic=

a

lly.\n\nIf you do not recognize this transaction\, please contact our cust=

o

mer support team immediately at +1 806 224 9171.\n\nThank you for choosing=

=20

our services.\n\nSincerely\,\nBilling Department

LAST-MODIFIED:20260804T135930Z

LOCATION:

SEQUENCE:0

STATUS:CONFIRMED

SUMMARY:PayPal Payment Confirmation =E2=80=93 Bitcoin Order in Progress

TRANSP:TRANSPARENT

BEGIN:VALARM

ACTION:DISPLAY

DESCRIPTION:This is an event reminder

TRIGGER:-P0DT7H0M0S

END:VALARM

END:VEVENT

END:VCALENDAR



--000000000000017ed106583911f4--

--000000000000017ed206583911f6

Content-Type: application/ics; name="invite.ics"

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64



QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw

LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT

VA0KQkVHSU46VkVWRU5UDQpEVFNUQVJUO1ZBTFVFPURBVEU6MjAyNjA4MDQNCkRURU5EO1ZBTFVF

PURBVEU6MjAyNjA4MDUNCkRUU1RBTVA6MjAyNjA4MDRUMTM1OTQxWg0KT1JHQU5JWkVSO0NOPUhh

cmVzYXN6IE54eXNhcndzYTptYWlsdG86aGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbQ0K

VUlEOjdqODcyZ2RwY2R0M3AzaHFmcjVkdTFqNXV1QGdvb2dsZS5jb20NCkFUVEVOREVFO0NVVFlQ

RT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtS

U1ZQPQ0KIFRSVUU7Q049Y3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbTtYLU5V

TS1HVUVTVFM9MDptYWlsdG86Y3ludGhpYQ0KIHBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNv

bQ0KWC1NSUNST1NPRlQtQ0RPLU9XTkVSQVBQVElEOjE3MjAxNjY0NA0KQ1JFQVRFRDoyMDI2MDgw

NFQxMzU5MzBaDQpERVNDUklQVElPTjpEZWFyIEN1c3RvbWVyXCxcblxuWW91ciBQYXlQYWwgcGF5

bWVudCBoYXMgYmVlbiByZWNlaXZlZCBzdWNjZXMNCiBzZnVsbHkuIFdlIGFyZSBwbGVhc2VkIHRv

IGNvbmZpcm0gdGhhdCB5b3VyIEJpdGNvaW4gKEJUQykgcHVyY2hhc2UgcmVxdWVzdCANCiBoYXMg

YmVlbiBzZWN1cmVseSByZWdpc3RlcmVkIGFuZCBpcyBjdXJyZW50bHkgYmVpbmcgcHJvY2Vzc2Vk

LlxuXG5UcmFuc2FjdGkNCiBvbiBTdW1tYXJ5OlxuXG5QYXltZW50IE1ldGhvZDogUGF5UGFsXG5Q

dXJjaGFzZSBUeXBlOiBCaXRjb2luIChCVEMpXG5BbW91bnQNCiAgQ2hhcmdlZDogJDE0OTkuOTVc

bk9yZGVyIFN0YXR1czogUHJvY2Vzc2luZ1xuXG5Zb3VyIHRyYW5zYWN0aW9uIGlzIGN1cnJlbnQN

CiBseSBnb2luZyB0aHJvdWdoIG91ciBzdGFuZGFyZCB2ZXJpZmljYXRpb24gcHJvY2Vzcy4gT25j

ZSB0aGUgdmVyaWZpY2F0aW9uIGkNCiBzIGNvbXBsZXRlZFwsIHlvdXIgQml0Y29pbiBvcmRlciB3

aWxsIGJlIHByb2Nlc3NlZCBhbmQgZmluYWxpemVkIGF1dG9tYXRpY2ENCiBsbHkuXG5cbklmIHlv

dSBkbyBub3QgcmVjb2duaXplIHRoaXMgdHJhbnNhY3Rpb25cLCBwbGVhc2UgY29udGFjdCBvdXIg

Y3VzdG8NCiBtZXIgc3VwcG9ydCB0ZWFtIGltbWVkaWF0ZWx5IGF0ICsxIDgwNiAyMjQgOTE3MS5c

blxuVGhhbmsgeW91IGZvciBjaG9vc2luZyANCiBvdXIgc2VydmljZXMuXG5cblNpbmNlcmVseVws

XG5CaWxsaW5nIERlcGFydG1lbnQNCkxBU1QtTU9ESUZJRUQ6MjAyNjA4MDRUMTM1OTMwWg0KTE9D

QVRJT046DQpTRVFVRU5DRTowDQpTVEFUVVM6Q09ORklSTUVEDQpTVU1NQVJZOlBheVBhbCBQYXlt

ZW50IENvbmZpcm1hdGlvbiDigJMgQml0Y29pbiBPcmRlciBpbiBQcm9ncmVzcw0KVFJBTlNQOlRS

QU5TUEFSRU5UDQpCRUdJTjpWQUxBUk0NCkFDVElPTjpESVNQTEFZDQpERVNDUklQVElPTjpUaGlz

IGlzIGFuIGV2ZW50IHJlbWluZGVyDQpUUklHR0VSOi1QMERUN0gwTTBTDQpFTkQ6VkFMQVJNDQpF

TkQ6VkVWRU5UDQpFTkQ6VkNBTEVOREFSDQo=

--000000000000017ed206583911f6--

McAfee Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrExr-000000002dG-3bMZ

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 07:13:51 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 07:13:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f43.google.com ([209.85.218.43]:42328)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrEuj-000000000gx-27qC

for doctor@nl2k.ab.ca;

Tue, 04 Aug 2026 07:10:48 -0600

Received: by mail-ej1-f43.google.com with SMTP id a640c23a62f3a-c1600d040e4so140144066b.1

for ; Tue, 04 Aug 2026 06:09:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785848983; x=1786453783; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:message-id

:mime-version:content-type:date:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=d1LF8FHCUoQRHKmEhd3Ye1Gga1wzCpoju1DRS6vi9GE=;

b=Os/nLGDcEr6EMoexxdG+fwmnb53i+oTGTR7/GJDpFyyoCzn0jj3ZRDTjNry4xEdjeZ

aAVIQ59CkVsUh03V57eZ7X7ice7tqgCXGnAw/ZDtRdhDNOcQ9Q69QzLcrPrRJY0PMC85

IgE4l7amo6NzAj14+U4/H9OMCe4wcIVyGGU6fpbv+ax1JPaTsFte7ZdSEYF8M2oMh5Zu

bNdT+z0SLLTFK3d1REI1LxPZZN1NgH8ZUh7H73KfA0jP6nXDi0dZmuuGvYmzJWJSu31t

ABx9vOl5ynjZSvkO1PJQ46E3FkohAuwPJHHi5DceAW60j6j/1CB9unwyzr7oP2JpKktR

kQSw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785848983; x=1786453783;

h=priority:importance:subject:from:to:mime-version:message-id

:mime-version:content-type:date:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=d1LF8FHCUoQRHKmEhd3Ye1Gga1wzCpoju1DRS6vi9GE=;

b=aqdvx0E//sSYEPCECspa1UNRQUbAiI5JKaxNzICcagVr6GcjJ6jwq46Yl3/TtNeYB5

YM808uIsF0050kENGCJzbdfOuxrFLrSuSx/KoG14xzZo1EiX3WYceYxQ95xJ+WM7aGpl

s4q3VJbgf2WBPS17FoewfRQsjyi1WR3ZXMQLZ2RZqug9m80qwIVWRM10TY7CkFnJL+cy

V8kWv4v0kWcxUD7Nh6MWKgNWC+0NEUnCoGy702PCaGuzueE9/2VO2hsCA+L3KXWfInAq

4hQQ4bl+WrCrPkF2NcdweVCMPhBbzwMXzv/QHkXVJR64Fj2pP5WKEpDaeBeSnMOA0sau

GNhg==

X-Gm-Message-State: AOJu0Ywo+I/3BB9VXGSeMBRQPnC+PEIZLdC1RtWDrkFh30PkLJSQE33n

xVzYWrpxf7wgxy1FvXDHJ8JI3RxtuLLpX2fhehqr5diFmanMq3/M+Ybc+wHtlT+a8C/pDw==

X-Gm-Gg: AR+sD13/+ZA2M+8LD6vaod79j4r+9VdMSa2mRvBxfwIG3A4/Bt69z4lk/Nfwi6+xmyt

qGeL7DFkK8KDd2Dode/v77VgUo7CDKlPuH+RK+GAFKZ8Q7amfurTvj5IRqVvP5gKqsAppXs877b

lN603R0fbGaIPzf/VNBnchdCfJu2Q3dB/sp68zzMWgwmNwSTWwK6nYxLUyayQ/DTiYDkJvJQRw0

lqYOoq4xJHpne8nILbjfEluwFutZsJ6ENRUkFXz+hq1EBt/j1+lUHEfmRw98nUWiqp9HKocovUF

7RhcpAaW5Ph8c79DC/5HylQk2eAElwXTH8g83Nqhzqg3Q5Urg3/hy9r00uENlHnBjgEtGxBl3qu

B3uCrE8i4VJzpmKGuKDDG07MrWqgkSNfy/A6zQAmUZa/Ds+TisKh8lDkoNZhepOfkkFsvdAJh+J

3ocjw/e6zT1rb3YG+4ESjH1y6f5DYP7HcHrN8f6JigEtgd5TuSEck8fhqb5EzimDZ3N3hekHpHH

CN2nw+vb3hhw+RhPdFPNRrxSYIi

X-Received: by 2002:a17:906:7944:b0:c12:525b:4e7d with SMTP id a640c23a62f3a-c20247da30cmr446512666b.15.1785848982964;

Tue, 04 Aug 2026 06:09:42 -0700 (PDT)

Received: from [172.28.17.58] ([43.157.124.50])

by smtp.gmail.com with ESMTPSA id a640c23a62f3a-c20363e7638sm5495566b.30.2026.08.04.06.09.42

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 04 Aug 2026 06:09:42 -0700 (PDT)

Date: Tue, 04 Aug 2026 06:09:42 -0700 (PDT)

X-Google-Original-Date: Tue, 04 Aug 2026 08:09:42

Content-Type: multipart/mixed; boundary="===============2338339281685568678=="

MIME-Version: 1.0

Message-ID:

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: Payment for arrangement approved

Importance: normal

Priority: normal



--===============2338339281685568678==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

MIME-Version: 1.0













































--===============2338339281685568678==--

WEb/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 06:56:00 -0600

Received: from mail-japaneastazolkn19012060.outbound.protection.outlook.com ([52.103.43.60]:30409 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrEgJ-00000000N5V-2E7s

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 06:55:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Znmmd9ZCjuBeikAg9a5EQKGOhYh8ULUn/cRn8yxl+Lm3mR7uIgin9+FM3Ua/B/9BrqvINMf7iZ4QR7hUD1R6k+MU0IEG0F058aLERFWSgdSEOD6K8mTciFLfHRnq5xWvOCiirEE/PxrDJdaSuy/A3fRd0jFHgnG4hgnJ2Hi8FXy0UuJ6/S+NsLmxS9lW9FEYTutoWDIZP2H34GqWBdm9M5OKW2jpy1pNa5uAG2a3RFI1whD8UatENIGhHWKYmgzpMahcm3JLZXYt9uZPjZQWwGPwiEk6ogDVJ9nQHVhZ4ykluropz1Ls66mp5Q6aeXVsjstDISkv4r/rbrK+e2XuIQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6f8j5lMNpVe+I8Sjt4zmnyGjNozQkwLZHz1iW5XMn48=;

b=h9FwvbbqnJrM8/mLgZhYIvVExpovo2l9W22gv7JkkiCtdaZ6gjCcMYXcHBxYYmW85GF5ZBpwX1LhMCGX+Q4wa38G7h7O6tDu/+UdNd56paJMvPlGLOsQFHK3EzXBJkDFbDbnku28YwpL1KqdDVT732wEbL+f0MtLWLanMsMzKcEOt7sAki02pT5QPFOOlsXEDdcvT1VapUWE5NmEN+hp8sj/qG486cFGh/GMaDqHm9zJ2S0vpyYiqzskSoizwMQx8FFcfyeqs/rMeEfiguMovZ0hwhvR71peJCl1gJwgV347H3DVnyuyNmUzvfASCgU35T38XeAhNts4SbBwTf7Xtw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6f8j5lMNpVe+I8Sjt4zmnyGjNozQkwLZHz1iW5XMn48=;

b=G7r3zf5FJQObMQApUmw8f7kOAvKih7aoYLh+GLbp/4hNJOybSTmdQlMrRv7pLpbC/1mUEHYZF21nPHUE8wAkeouWo6W3HC3FW7wSjjRG0ndHeT5XTjm/mOscOjyznT4LX8X3keH9LF65rZOlOLreSbAfnvjFwnorqRuOhrg+nMxvi8N7uVUAI8XB/y07XiGB7Gwpynt31lH5/8wZpvUWqbMS0aNjfcLvZ4SYdBXqRJMoc3hyInDYPIt+wTw/dDBeDrlzBacFvPXvZ0LY03R3W0MsleAQl3BGPS9DsYP9ysfW4uezoBTM4M4JRo3av2pEQpe5i5KxiLHytGSS6ZpQ3w==

Received: from SEYPR06MB5648.apcprd06.prod.outlook.com (2603:1096:101:c0::14)

by SE3PR06MB8071.apcprd06.prod.outlook.com (2603:1096:101:2e2::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.18; Tue, 4 Aug

2026 12:54:15 +0000

Received: from SEYPR06MB5648.apcprd06.prod.outlook.com

([fe80::6062:a6ac:8d06:9ee5]) by SEYPR06MB5648.apcprd06.prod.outlook.com

([fe80::6062:a6ac:8d06:9ee5%6]) with mapi id 15.21.0270.017; Tue, 4 Aug 2026

12:54:15 +0000

From: Palmer Lynn

To: Palmer Lynn

Subject: Re: Send

Thread-Topic: Send

Thread-Index:

AQHcpM1he7m+4m0z3U2T5esbu5wfI7WQUTGIgAF1/DqAAcWTd4AB1IeggAFP7YuAAuWsKoAGgsLNgAGoaouAAak1PIADKAYWgOhDygU=

Date: Tue, 4 Aug 2026 12:54:14 +0000

Message-ID:



References:



























































































































































































































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR06MB5648:EE_|SE3PR06MB8071:EE_

x-ms-office365-filtering-correlation-id: 46478aae-7959-4937-0f82-08def2277cec

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|45011099003|16051099003|31061999003|8062599012|8060799015|19110799012|7071999006|37011999003|15030799006|24071999003|15080799012|4140399003|22091999003|24121999003|25010399006|2604032031799003|20031999006|39105399006|704163111799003|40105399003|39145399003|2607281247196008|11120399003|41105399003|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?G/uuH6Rx1sra7BjFWqI5Y+Gv3gQ9xBfHqJi6/yJjhmIlJTJkgsw03Yqh?=

=?Windows-1252?Q?DJ5tgM4XKPbHqSPZoPLKIRooKyhN4MX5j2DB0tp46tG/ojrt9Z5z+rL+?=

=?Windows-1252?Q?BAFx8heFeKa42mDrgOKmJsLubgTSBeL4E8f6qL7nlnx8t5hglbdiG4wj?=

=?Windows-1252?Q?urg6hQ2Irpe76Mstw/czsu41nwGfomD9QEetzvfgoGP/J4SQOtKaG3O0?=

=?Windows-1252?Q?hIZXpXcfowKhNFo11C012qC9EzhcTyMqnE8Pfi3BrKRCyFWbLnijo7pF?=

=?Windows-1252?Q?hBGnyR/mU/53MalSLJVTar5jAUgJci+RVmxtyOeH3RWTSd7zw4O4xVbD?=

=?Windows-1252?Q?OZ93tk3Gw2Je3q6DKg7xZHXCPEIinn75hw2gGaAzOu7Zx3+a0h64Ylw4?=

=?Windows-1252?Q?lJxgojFv1D3qQK3ju30uJacO3nqNH6px2hJrZz/huApiP1ci0h0xqgY2?=

=?Windows-1252?Q?HsGv9Bv3EcxeJguowYIP441U39ja/BmxUD2bwkV5ULF4jDml+AznOA09?=

=?Windows-1252?Q?uFChgPIJOreo1Eu2VidN5XxlEWHYHGARfUnnxTtc5PV/gd6KssYLr6rX?=

=?Windows-1252?Q?lwvM1Tm6LT7Zi9U3OPJcUahjgSntgYnbD+UPJEVW+so3/G9jMHVxH3oj?=

=?Windows-1252?Q?Rbij6N1hYsZghJcUp1IGf1nniYr4GnTCFDzf/SShbjIg9Q+4Ki80zibm?=

=?Windows-1252?Q?hYctKVcUylhhJZxjEm69mgqvqrCIP0PX9kajWgTKGyv9TF38TXRqxP+z?=

=?Windows-1252?Q?OMeZAPs+es0z2I+tmM2aElaYXy3xCO/7sMuRbHcAgkigtULoLGYnlERJ?=

=?Windows-1252?Q?Z6VIQDDfIjGML4MrNfcfWBnAeZzNOqikBqMYtne9C9REAchmU192BqNW?=

=?Windows-1252?Q?l8OqaoS54fdXi1Pqh5gcFzuX73D9FMDCz9hefQ1ZMdh5ra7//GoL9rL+?=

=?Windows-1252?Q?rPd8cnVsv7ZrfXZ9+sWxmbQ+zfBYFGxWSFTEhwI7VKZ081WhfU3f51MK?=

=?Windows-1252?Q?bl9L6KwgEAtY75i6Bu7zwEovcQ0sMvNb/A8+JT1Ukggib8vRRR6hkaRE?=

=?Windows-1252?Q?h9off10sHqM5DK9HjP3mr9KmLwvUw/R7cnLn0DNlgoOiu4Hwm+JqRc9u?=

=?Windows-1252?Q?+lqDNg0ik2iIIYbMavjTSTZ1SQyPgY3aUSNVV7qIngBNuIvY+MVEFuu4?=

=?Windows-1252?Q?AbaAZGyUlXFVXWDBQDO1rk2hYPz1/Yd0LwZLP6qIZpKy0ELvuKVf53Gv?=

=?Windows-1252?Q?XIqcDbBvkfaR6sBn1yOMXPVQK2MOKwu6kLL8E41XWFNwSTXsU/THBb3C?=

=?Windows-1252?Q?hvC9GBhuocDzeJn4E8BPz9ziBkg3rTSB7yWRjKOojWRsa6KZfg+HPRRI?=

=?Windows-1252?Q?6KoPr8vlvULIW0Ard3KAn2rh9L/8s8MDV0B2FycsHgFiQebdXZpRnicH?=

=?Windows-1252?Q?SwteyK6a0wubbvukhfQQG7HmGWPrsV9Kdoho8eqVVT4=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?mYj1dDzeR1n+4q2xIBufGx/HQDGjX6P5aoRgFK7eBXywxiTH/28s4gsd?=

=?Windows-1252?Q?RRTv1BkqJX+DrF1ZENTjBZSRsj/XdQClcAU8lYF5h/+3h1gl+BZw6rHc?=

=?Windows-1252?Q?eKUu0dHhnOGfLYmtLNTFN0O74bGr9egAo4KSn2Km4gpLe3bV47bUuVVP?=

=?Windows-1252?Q?O78/xgNrq/Yxe2hM1WcZzTlVcR8AutgMtJfond+N4YwpGgtEiFU8HXwr?=

=?Windows-1252?Q?aM9vohSZwYhdRuxJgn7dA+LrAZIQl2/GL11sTUxB45CtkcmHYAgAB/WM?=

=?Windows-1252?Q?24AsO30IeZG2XnyYqVrkB3G+X59TMLlIIfrfW2puP6qumJrmI3OuuWnX?=

=?Windows-1252?Q?ZrVoUILZ/aNC6nXFeWIHp5AgLQPmD4sqqCjvVLXOypg0u93nCjnuna8F?=

=?Windows-1252?Q?o90GLyykuvi3vgZn+ClxSTtusdAzmOAUf+yHlzTFHk7stoJ8qNwd2BQk?=

=?Windows-1252?Q?viXRndbTfmiqK6XuE8BPuLLYalXT53mY5YA19s8UC27J+1Rj8GNZ4qp7?=

=?Windows-1252?Q?P/4kfdFceX+mqpC5D7UJnSraZpILXSB5XbYvmR3JmEySUybyR62/E8Wd?=

=?Windows-1252?Q?V1zuZB6FLxx9uLuyyH0/WGlT2jry+Wy15dy90YDR18jyT016UsdFwJLz?=

=?Windows-1252?Q?Tqx46ChVHqPh8IjG20Lh3tp8j4cexhIubjLIreroqYg/oqFtvtHyP+b8?=

=?Windows-1252?Q?89U05mrP0hKae9fcOLopiuTTUTnmh14+QUkNhRG1q5yNR+tE0rBgns+A?=

=?Windows-1252?Q?lXNpF6D/zqcFmCKkWjJ1Yixl+1DJFb7U0TtT2EM34WjmVFeZXwKEOKjy?=

=?Windows-1252?Q?EfvjLsCqR6ddnPyNcQE0s8GIG6kjWFHaGp9sDFjnx6RArLbZPjMZjDIo?=

=?Windows-1252?Q?kGplLZR7M3XRU/TJsPPmNG5qVrJOo4VrG2KUay5iSRzU5jP7pUwXG7Vn?=

=?Windows-1252?Q?6OqfUgOb4oF2wfbAhlTB3ViwGajtND6gT0hkNsbl+By8FBniG0NeLx2j?=

=?Windows-1252?Q?YACy1oaD87j0HgqzP0DfbcOgWr0fxX8Mt577v/yuzyy65KQOHYtYyHge?=

=?Windows-1252?Q?fjbT5BsysnRNHoyWqjU1Y/slfmhI4ILJY6oGOAqmc8I9wXIPrS54DzEW?=

=?Windows-1252?Q?0H2OyjwQiAztesp6T8uAPAq+yHoVU2RnTGaV0uP1PDZva5ygTPxKU1/D?=

=?Windows-1252?Q?PyHKoxt2Kua5pOvDadAw8RNZgtIBd6YqXtY/fi43B0z9URxPrA0pQHqZ?=

=?Windows-1252?Q?ZZSAAM8maQx7PWLjfXuBXJ9ROODtv4SjYeVVXsIXHwlqzaGJZ3+ExOHe?=

=?Windows-1252?Q?LhU8Syc0BSLJnOrjPgQy8NvMED3xm8sBPwtY1eT0GESeaL1TleE8S40V?=

=?Windows-1252?Q?woXFByQr0nVZntLwkujNU6ZzrXfkgx9O8vZWEjFbLEgCZabY1Ei8eVCp?=

=?Windows-1252?Q?x3BYSXT+GSw1DTjT2xx8ULGw/w36dIEiAYi5JsxSij6DpmjJLzmYWD8j?=

=?Windows-1252?Q?wFFL45axKFMAy99WMnQslHhF0JyJINvNfFTm/dHeeLeOSYQksPz3mtZu?=

=?Windows-1252?Q?7SdbxEXaCnbPq78ur+iqL4Ku4j/kY5/H9tOQhQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR06MB5648E88EC7D519A9802BC402D2D42SEYPR06MB5648apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR06MB5648.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 46478aae-7959-4937-0f82-08def2277cec

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Aug 2026 12:54:14.6346

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE3PR06MB8071



--_000_SEYPR06MB5648E88EC7D519A9802BC402D2D42SEYPR06MB5648apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I personally visited your website when I was browsing it.



In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



Can I Send you Quote=94 and Cost/=94?



Best regards



--_000_SEYPR06MB5648E88EC7D519A9802BC402D2D42SEYPR06MB5648apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an audit report of your website.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94? 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards








--_000_SEYPR06MB5648E88EC7D519A9802BC402D2D42SEYPR06MB5648apcp_--

Dragonfly/Intelcom Phish from Godaddy.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Aug 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wr40n-00000000LK7-0yGu

for dave@doctor.nl2k.ab.ca;

Mon, 03 Aug 2026 19:32:09 -0600

Resent-From: The Doctor

Resent-Date: Mon, 3 Aug 2026 19:32:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [64.207.184.157] (port=42246 helo=mtoolbox.org)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wr1mQ-00000000FI9-07K0

for sales@nk.ca;

Mon, 03 Aug 2026 17:09:20 -0600

Received: by mtoolbox.org (Postfix, from userid 10002)

id 3C81B90141; Mon, 3 Aug 2026 14:11:30 -0400 (EDT)

To: sales@nk.ca

Subject: =?UTF-8?Q?Dragonfly_Shipping:_Your_Package_is_On_Hold_=E2=80=93_Pay_2.99_?= =?UTF-8?Q?CAD?=

X-PHP-Originating-Script: 10002:UjoNtVRSYib.php

Date: Mon, 3 Aug 2026 14:11:30 -0400

From: Dragonfly Shipping

Message-ID: <5607cd8cc63f05cb71d0c78326771775@bjcvaughn.prelaunch.site>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_5607cd8cc63f05cb71d0c78326771775"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--b1_5607cd8cc63f05cb71d0c78326771775

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit







Dragonfly Shipping - Delivery Update











Â













 Dragonfly Shipping







Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.99 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery





This is an automated message. Please do not reply.



For more information, visit Dragonfly Shipping - Support



© 2026 Dragonfly Shipping. All Rights Reserved.



















--b1_5607cd8cc63f05cb71d0c78326771775

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit







Dragonfly Shipping - Delivery Update











Â














 Dragonfly Shipping









Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.99 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery






This is an automated message. Please do not reply.





For more information, visit Dragonfly Shipping - Support





© 2026 Dragonfly Shipping. All Rights Reserved.

























--b1_5607cd8cc63f05cb71d0c78326771775--



Project funding spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Aug 2026 12:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrJZM-000000008nD-0yXC

for dave@doctor.nl2k.ab.ca;

Tue, 04 Aug 2026 12:08:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Aug 2026 12:08:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.fusionskin.de ([212.224.95.104]:51353)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wrInW-00000000NLo-3lV9

for sales@nk.ca;

Tue, 04 Aug 2026 11:19:36 -0600

Received: from [127.0.0.1] (unknown [92.118.39.52])

by mail.fusionskin.de (Postfix) with ESMTPA id 348FF2EEA44

for ; Tue, 4 Aug 2026 17:18:31 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fusionskin.de;

s=default; t=1785863911;

bh=eTQdWq3rVBX+XR0mOX7H8aV4ANxf4C0UVVFBEnBaV4s=; h=From:To:Subject;

b=Z4vZbksiRjEGsHJ9DL6EAqYUg3b0buKcPzPSLz6dFOis572Bjb4ZN5YgHqJaw3Jg0

MY12tk7h4Dodm0gX453QhFOjymASFvz9w8Uqy3u3hf/gkzF22v7pontwL3xB+XcrcH

SjfzeNmHKY8c9QZSEbfGM1C1LOiN5lwButyDdvfu515fI93LI0t5ed1ALuLNaYs5IL

U18JkSpeB5jLBi+PHTNydqE0DbgXUa4uqH8r+vlEZgSrBLcXhyOuUGgTz6R0jnljmA

SeoN1YuXn+YQfsYQgq+MgAlJT7ZW8q6i+gBLQVixfGouZuH2WYGmfNH6lkQ9IYWBPX

RNs3/kZ3XV4qw==

Authentication-Results: mail.fusionskin.de;

spf=pass (sender IP is 92.118.39.52) smtp.mailfrom=info@fusionskin.de smtp.helo=[127.0.0.1]

Received-SPF: pass (mail.fusionskin.de: connection is authenticated)

Content-Type: multipart/mixed; boundary="===============0105761439214385462=="

MIME-Version: 1.0

From: Help Center

To: sales@nk.ca

Subject: Project Funding

Reply-To: fredrikp0147@gmail.com

X-Priority: 1

X-MSMail-Priority: High

Importance: High

Date: Sun, 02 Aug 2026 05:27:31 +0000

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (21.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[92.118.39.52 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

[212.224.95.104 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.224.95.104 listed in dnsbl.ahbl.org]

[212.224.95.104 listed in dnsbl.ahbl.org]

[212.224.95.104 listed in dnsbl.ahbl.org]

[212.224.95.104 listed in dnsbl.ahbl.org]

[92.118.39.52 listed in dnsbl.ahbl.org]

[92.118.39.52 listed in dnsbl.ahbl.org]

[92.118.39.52 listed in dnsbl.ahbl.org]

[92.118.39.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.224.95.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.224.95.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.224.95.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.224.95.104 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[92.118.39.52 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[92.118.39.52 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[92.118.39.52 listed in sbl-xbl.spamhaus.org]

[92.118.39.52 listed in sbl-xbl.spamhaus.org]

[92.118.39.52 listed in sbl-xbl.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[212.224.95.104 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[212.224.95.104 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[212.224.95.104 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[fredrikp0147(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

1.3 BODY_EMPTY Empty message body !

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Project Funding



--===============0105761439214385462==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64





--===============0105761439214385462==--

NetKnow now in Netcraft's Top 44050

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 44039 from 38582 at Netcraft and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. Effiency of server
    4. and
  4. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 3516 from 3527 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 6846 from 6552 and are hosted in Europe.



Government of Alberta



The Government of Alberta Website

ranks 14225 from 13996 by Netcraft and seems to hosted on Cloudfare.





City of Edmonton







The City of Edmonton ranks 35607 from 35267 by Netcraft and hosted by Google.



Netknow again





We at Netknow are at 44039 from 18857 since the start of 2026.



University of Alberta







The University of Alberta ranks 45902 from 46179 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 436029 from 403006 who are the owners of

US Based Netzero at Netcraft Rank 96844 from 95394 .





NAIT / Northern Alberta Institute of Technology





NAIT ranks 168833 from 167442 hosted by Microsoft .



TekSavvy



TekSavvy ranks 178475 from 179101 and are hosted by Microsoft



Grant MacEwen University





MacEwan ranks 200257 from 194752 .



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 341791 from 323404 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Internet Centre / CCINet



Internet Centre

rank 385247 from 373257 . Their partner Rack Nine ranks > 2000000.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 506289 from 507872 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Distributel / 3Web / CIA



Cybersurf

is ranked 948749 from 951362 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.