Quickbooks Phish from Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 14:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xRETL-00000000OdP-0APG

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 13:59:07 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 13:59:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a8-82.smtp-out.amazonses.com ([54.240.8.82]:45705)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <010001a1cb248358-d09f1d74-a3b2-4bd3-b4f9-6ba2da1bf338-000000@amazonses.com>)

id 1xR9u8-00000000Man-1kMV

for root@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 09:06:29 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1794409530;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Feedback-ID;

bh=p0nF4uMUkgp+IDU1HF89wro2HqhXz2SKqwrOryBWjjA=;

b=LLcImq80MRnHHzIw27WGmE7l0/z/7KFCtRPEBNUE4R0urt0aQ/WnyWICBq3DngRk

o7b/HP3naPvDbsNwpsMMQ0TDV40JBaFa+CDaAnrY3Ypf1foeGba2f46poOdnwry/OpS

gSbVw9VfJISdmpyf+3Yrc3YAkZxGVD7nvl69ew/c=

From: QuickBooks

To: root@doctor.nl2k.ab.ca

Subject: QuickBooks Payment Confirmation

Date: Wed, 11 Nov 2026 15:05:30 +0000

Message-ID: <010001a1cb248358-d09f1d74-a3b2-4bd3-b4f9-6ba2da1bf338-000000@email.amazonses.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_EFACC9C6.5390DB13"

Feedback-ID: ::1.us-east-1.H+SUpM7dYHaRAzwq0Kz2tDwz4/TsZxMHMdz9tbXtkq8=:AmazonSES

X-SES-Outgoing: 2026.11.11-54.240.8.82

X-Spam_score: 24.9

X-Spam_score_int: 249

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vendor Payment - Remittance Advice. Invoice Payment Sent

Via: QuickBooks BillPay Services. To be delivered by: Bank Transfer EFT (ACH/Direct

Deposit). Delivery ETA: Monday, November 23, 2026. View pa [...]



Content analysis details: (24.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

[54.240.8.82 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.82 listed in dnsbl.ahbl.org]

[54.240.8.82 listed in dnsbl.ahbl.org]

[54.240.8.82 listed in dnsbl.ahbl.org]

[54.240.8.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.82 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.82 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.8.82 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[54.240.8.82 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} QuickBooks Payment Confirmation





------=_NextPart_000_0012_EFACC9C6.5390DB13

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" cellSpacing=3D0 cellPadding=3D=

0 bgColor=3D#eceef1 border=3D0>




















0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 
IN: 0px; PADDING-RIGHT: 0px" width=3D640 align=3Dcenter>


ng=3D0 border=3D0>
















border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>






ING-RIGHT: 0px" align=3Dleft>
/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TvvL95lUdHNT6wzBxXCtpIhUdEnz39IXrOMq=

JMCXNhJhWSE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZ=

zkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbC=

oSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObB=

RCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12=

LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF=

8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FW=

WGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB=

19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4=

fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5=

QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1G=

pOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LAqdko-2BTnJM9uJ=

aXOZ7tmBy2DQ1ErJ3kskDeduFW-2BlkjyLIPp02Qy6VXcJDclpOTY5i-2Fs11SoLlMrGy4vpgjj=

-2BkorXqzSwPxGt1zFsV9xaRPjGqXZJ-2BiMXeWP4oidadXUn-2BMdt0yLiWcc9aI5RzRu6vE5g=

rzFs-2BUdAzu62Z9-2FK5cjyWb-2BD3M5Q8KnUH83B8YYs-3D" target=3D_blank>
le=3D"FONT-SIZE: 14px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-=

serif; COLOR: #393a3d; TEXT-ALIGN: center; DISPLAY: block" border=3D"0" alt=

=3D"Intuit QuickBooks" src=3D"cid:04b97cd8e505b31acd83af8b748bc8a2.png" wid=

th=3D"155" height=3D"68">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


acing=3D0 cellPadding=3D0 width=3D600 align=3Dcenter bgColor=3D#ffffff bord=

er=3D0>


























0px; PADDING-LEFT: 30px; PADDING-RIGHT: 30px" align=3Dcenter>
processing_icon" style=3D"DISPLAY: block" border=3D"0" src=3D"cid:920b8471a=

1ece85299098bbed8022a47.png" width=3D"101" height=3D"54">

DDING-RIGHT: 30px" align=3Dcenter>
ZE: 25px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR:=

#393a3d; LINE-HEIGHT: 36px">Vendor Payment - Remittance Advice.
AN>

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Invoice Payment Sent Via: QuickBooks =

BillPay Services.

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">To be delivered by: Bank Transfer EFT=

(ACH/Direct Deposit).

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Delivery ETA: Monday, November 23, 20=

26.

DDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


der=3D0>


















r=3D#339e28 border=3D0>






TABLE>

ILY: 'Avenir Next', Avenir, Helvetica, sans-serif; VERTICAL-ALIGN: middle; =

FONT-WEIGHT: 600; COLOR: #ffffff; LINE-HEIGHT: 22px; border-radius: 25px" b=

gColor=3D#339e28 align=3Dcenter>
-ALIGN: middle; COLOR: #ffffff; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADD=

ING-LEFT: 30px; DISPLAY: block; PADDING-RIGHT: 30px; border-radius: 25px" h=

ref=3D"https://docsviesxclus.com/caqbo/412R005700630639135081/wap/" name=3D=

View target=3D_blank>View payment details

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>






E>










FT: 30px; LINE-HEIGHT: 1px; PADDING-RIGHT: 30px; MAX-HEIGHT: 1px" bgColor=

=3D#ffffff height=3D1 align=3Dcenter>


100%" align=3Dcenter bgColor=3D#d1d1d1 border=3D0>






TABLE>




DISPLAY: block; MAX-HEIGHT: 1px" border=3D"0" alt=3D"" src=3D"cid:5a2f9fdcc=

bde8fc5d477916d190eec86.png" width=3D"10" height=3D"1">

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>


















, sans-serif; COLOR: #6b6c72; PADDING-BOTTOM: 15px; PADDING-TOP: 10px; PADD=

ING-LEFT: 0px; LINE-HEIGHT: 16px; PADDING-RIGHT: 0px" align=3Dleft> 
R>**Standard ACH payments are usually delivered to the vendor’s accou=

nt within 2-5 business days, paper checks are usually delivered within 7-10=

business days. Faster payments are subject to eligibility criteria. Delive=

ry times may vary due to third party delays or risk reviews.
 
M=

oney movement services are provided by Intuit Payments Inc. pursuant to Int=

uit Payments Inc.'s licenses
(NMLS #10‍98819). Intuit Payments Inc=

=2E is located at 27‍00 Coast Av‍enue, Mount‍ain View, C&=

#8205;A 9‍4043, phone 1-‍888-‍536-‍4801
 
R>For more information about Intuit Payments' money transmission licenses, =

including California customers' right to refund statement, please visit our=


s://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj8=

1B264OYNNlpD-2BCTPJzPmKYQoypOAx7KjMAtPUbFoenRPCncYMvvfSpU9pu3g-3D-3DBQr4_7-=

2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZ=

tK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2F=

sCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvnd=

f4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3Js=

cHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pg=

QUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgO=

IH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3=

sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJ=

BW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR=

6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOr=

qW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDcU4SDOIf6EoeKAp1VkVcsd4NphHv=

Gk-2BneNbp836bgMkKG-2Fs3IHTLEmOYr0JQuwn5ypmiKJEerXOfHmO-2B7nHIQ4U6Txcam1kW6=

EuxRUPRZC-2F8-2FbwIJeexl1fV0dmKW5zFgevJCeSmmxiD49W9FVbUJ2M75x6u4uspmMruizge=

hHuL08DGYAeeoU0ZwmOAoobM-3D" target=3D_blank>payment licenses page.
=

 
Illinois Residents: RIGHT TO REFUND. You are entitled to a=

refund of the money to be transmitted if Intuit Payments Inc. does not for=

ward the money received from you within 3 business days of the date of its =

receipt. If you want a refund, you must mail or deliver your written reques=

t to Intuit Payments Inc., 27‍00 Coast Av‍enue, Mount‍ain=

View, C‍A 9‍4043 Attn: Intuit Payments Inc. or by calling the =

Customer Service Center at 1‑=

;‍888‑‍536‑‍4801.
 
Minn=

esota Residents: Consumers are warned that fraud can and does occur. Pl=

ease call Intuit Payments Inc. at 1‑‍888‑‍536‑=

;‍4801 to report fraud.
N>
 
New York residents: RIGHT TO REFUND. You are entitle=

d to a refund of the money to be transmitted if Intuit Payments Inc. (NMLS =

#10‍98819) does not forward the money received from you within 10 bus=

iness days of the date of its receipt. If you want a refund, you must mail =

or deliver your written request to Intuit Payments Inc., 27‍00 Coast =

Av‍enue, Mount‍ain View, C‍A 9‍4043 or by calling t=

he Customer Service Center at 1‑‍888‑‍536‑=

205;4801. Intuit Payments Inc. is licensed under the Transmitters of Money =

Act and regulated by the New York State Department of Financial Services. I=

f you have a complaint, first contact Intuit Payments Inc. at 1‑̴=

5;888‑‍536‑‍4801. Unresolved consumer complaints ma=

y be mailed to the New York State Department of Financial Services, Consume=

r Services Division, One Commerce Plaza,
">Al‍bany, N‍Y.
 
For Alaska Resident=

s Only: If your issue is unresolved by Intuit Payments, Inc. at 1-800-4=

46-8848, please submit formal complaints with the State of Alaska, Division=

of Banking & Securities. Please download the form here:
LOR: " href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvT=

YX227JkDSVWi87adRoCkK3JEOLqfZOw-2BGU8-2FQOLGVb5FvBcuD1K03lXeP1tVlTQWOx9FSLm=

Ippv-2BDagmj81PzBe0TWikGDCtWvfMtwWaPvV6-2Bk6B0hQunMahhLqZj_7-2B-2F6303DPKGg=

WagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQ=

UL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwP=

BrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUisw=

i-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9=

EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08M=

G67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2=

Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8=

aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOa=

k9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIM=

gTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2B=

Ec1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBsOLn3-2FqIUB4CL9NzUQ-2B4bFtScuvVjCyZSaOKBg=

Dpy9wKFEqDeiMTY3fqmVzkECuz2mHVjJtqJ1QzQIcDa2Y9-2BOTRMkfIvzTey4bj3R4vJWoGSsK=

-2FxCMKqBY12K-2BUMzg1LPjztrp1atEA2-2B4nb7PEVwRv1iMjPl6-2B8RlO610-2B8aFWb3PW=

DHSXLtpqLfXC2Bqs-3D" target=3D_blank>https://www.commerce.alaska.gov/web/po=

rtals/3/pub/DBSGeneralComplaintFormupdated.pdf. Submit formal complaint=

form with supporting documents:Division of Banking & Securities PO Box=

110807 Juneau, AK 99811-0807 If you are an Alaska resident with questions =

regarding formal complaints, please email us at
=3D"mailto:dbs.licensing@alaska.gov" target=3D_blank>dbs.licensing@alaska.g=

ov or call Nine Zero Seven Four Six Five Two Five Two One.
 
>IPI is responsible for the non-delivery or delayed delivery of your funds =

until such funds are received by the designated beneficiary, and IPI is lia=

ble in the event that your funds are lost
p">or stolen.
 
Intuit respects your privacy. To lea=

rn more, read our Privacy Statement (
ortant; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?u=

pn=3Du001.C9ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFYwYKK3SiLAxIbx1TNTVsc2U=

CRE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXX=

SSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2=

Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4b=

syPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c=

8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgw=

n1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC5=

4kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzS=

DX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vK=

YIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3f=

FDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8L=

NhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDYBUUtTfsoHoZtTX0CgoNSB=

krsKYGRSlNvIzoqdfkoz9xKznZNXv51NPo-2B4N7Uin4ff3aOrtIkEYvAmOldlhUdHwqoZKIF7D=

wiWbOYjqwPcbTPJdo-2BAMHZ-2FA-2BPvO6Q8D0TJtgiu8u92BZItgCRqRqIwlWihBa-2BFnq65=

inq8NUWQqXhUIanYt7BeZNLJaIigRg-3D" target=3D_blank>https://www.intuit.com/p=

rivacy/).
Visit Legal (
COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du0=

01.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPL-2FnAJO3Dfv-2BKhS4cDavl-2B6=

t_lk_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzX=

XSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-=

2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4=

bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4=

c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAg=

wn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC=

54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlz=

SDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7v=

KYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3=

fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8=

LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBbF-2BZySQWtLMctzyQGYK=

OxRkYKJK4fHvH4biYniUJE52neQkMS6XrivWBs00u8KYqxHUdd2SWX9llrJ4Z2CIsZvyu-2BpbV=

CTOTmwAlssTMcbmH3110UN3PKvtW5gfTmTwgQJwbVr8jqaftvUw74dr1APZLcwE3JyJI-2F0GMD=

r8-2BGs5YQ8kTiA-2BjoI4OsOUn2Mgk-3D" target=3D_blank>https://www.intuit.com/=

legal/) to find out more.
N>
 
IMPORTANT NOTICE: This notification is being sent to inform=

you of a critical matter concerning your current service, software or bill=

ing. Please note that if you previously opted out of receiving marketing ma=

terials from Intuit, you may continue to receive notifications similar to t=

his communication. DO NOT REPLY to this email, this inbox is not monitored =

for replies.
 
&=

nbsp;
This message was sent to
ant; COLOR: #077dc6" href=3D"you" target=3D_blank>you, as an Intuit cus=

tomer, consistent with your
OLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001=

=2EC9ANdvTYX227JkDSVWi87cmREtoVnmlpmot2HEHwMiOEqo28BeWINThlCR-2BpM-2BWjO1Lg=

RrSsJHfip1hCt5nTWKbATfzoUlRksG9C9ScTkV6wJe9FtfasDGvbIdF1JOx5Tq7l164t4Kmhv94=

v61JeFzDbRu0EvnBj976nUcchXEb3udEBJLFQ6JIlJL6nCiCEM7N6_7-2B-2F6303DPKGgWagyH=

spi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6=

Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe=

-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW=

-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2G=

H0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67Hj=

PmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2=

FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2B=

nKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM=

4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw=

76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-=

2FZXNMhW4z9mNLvFaLr7wxQeU6LBhtrr7UK9E9LHthiIZi8bSI0KP4zIfLjMtUeZS09eDf14vsA=

zYcy9yGZ5LodY3r8L62q-2Bq-2FyUqj-2FaP1EE0ZS3oRuIYRDyLEj45B-2BYSWtQF7aIGGxPfq=

Vmstm-2FR7pHx3w2ynHu2GI-2BA8O3iwSIIsLtm1C5TIpHvf6v6kATw4AcrLnElWoK6u3CUjP10=

ZEY1vv4-3D" target=3D_blank>email preferences. If you have chosen not t=

o receive marketing messages, you will continue to receive business communi=

cations about your selected Intuit product(s), which may either affect your=

service or software, your account, or which may be legally required. If yo=

u receive a suspicious email, please report it by forwarding the email to <=

A style=3D"TEXT-DECORATION: underline !important; COLOR: #6b6c72" href=3D"m=

ailto:spoof@intuit.com" target=3D_blank>spoof@intuit.com.
 
=


://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87X9OooN=

HmQG9eX1hhVT3-2FwDPh-2FO4XT40cbsVG0H2B9l7stqNF7ZvpJsZ-2Feiou0Aj5g-3D-3Dg5TG=

_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSn=

wwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco=

-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyP=

vndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm=

3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W=

3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kI=

UgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2=

JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIy=

GRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd=

9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhu=

HOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBZr9dorlmPlG7lhSt8aSiVsIF4=

ADBFiDmI1Xnf35Zv5oGF2G6O9sJmroLNqogtJvR1qKsZBTjbQgMcMo5zODFO277j3Z6GUisPL72=

-2BEJXuM3XRzAFRqd42E-2BIFALyHFGZ3Et7eAImSvCZY4INv1CJ9v5uwHvYJTj9nFvrlfrQFE8=

z5FSwcsTaeDQ4NimHzokM-3D" target=3D_blank>Terms of service

=3D"TEXT-DECORATION: none !important; COLOR: #077dc6" href=3D"https://u7445=

749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TyjSWhU6mXtBhb=

2dA39nAy2CX-2BeKm8Of2v36wj-2FkNihApB__7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM=

-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkR=

L-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqG=

lcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rg=

XqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXff=

Tdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5s=

ZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtC=

owbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3=

xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeK=

yboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvv=

GF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvF=

aLr7wxQeU6LA6LF936fLFZ9Ap2yIPlDNTA4EleCzTiqOZdLgSb8LFbYz339wg2YeKsQG5i9iLWj=

lu-2Fp-2BaFAk7h-2FIosxKyBBHieUYGzS-2FkAGCB5eSQRzX1zw5WCH69hjmPlg2Qwn6-2FslY=

nYZOAiQEPpOO1nE-2BQ178pq5VTBA1Dk8fB9AOHrdCrmZrGOmPtTRPWNJolUBOk5pc-3D" targ=

et=3D_blank>Security
R: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9=

ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFaltS2ixeDHtrx7SIMALVExVjcXzGnrTjXPe=

nrSf4OsPw-3D-3D_v0S_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22=

Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr8=

9LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC8=

4-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQS=

L8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QH=

SAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dc=

wLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3H=

BH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4=

BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR40=

0tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPa=

pbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDr5Qo-2=

Fwv-2F54enmRHj-2FgM5j6wtCjR9MuEFcKaAoIWRLDEW0na2iCuQ5jmmwJGUez8byhYlAJOIYba=

pdeWk09X1cOqJLa50TOFXP9qniEYDbEAZd2l9-2BuK8XqnSoG2dOe3UIQStOBGOhb9RiCumc9H8=

-2BJCgSV23KR-2BXXarlNpzVf7-2BgsTT0l6bg-2FIxrof9SI-2F3s-3D" target=3D_blank>=

Privacy Statement.
© 2026 Intuit Inc.
ON: none !important; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.n=

et/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJOzx4jSS=

9ya01x-2FKBMsCq57-iv_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo2=

2Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr=

89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC=

84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQ=

SL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9Q=

HSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167d=

cwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3=

HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ=

4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR4=

00tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBP=

apbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LC-2Bs6=

NM-2B5QVbXyXN50UEby0eOfdtNvTpARhiEdAMMWJKxudjkR76ycvVH-2BL7F-2BwUXgls-2BoWm=

QXQHvAoJdWZQX5NIEm17g8-2FuuRULEkfA4DOhvb2CNc7-2B8jbqnw0iUm4k0KlxAEClhUZqtWQ=

M-2BPuMa67JVowyDah2bWmS-2B-2BaIs1pmjVbZiv0RRd-2F7-2BKxptsxtm8-3D" target=3D=

_blank>Trademarks.
2‍800 E. Commerce Center Place, T‍ucs=

on, A‍Z 8‍5706

ING-RIGHT: 0px">
'Avenir Next', Avenir, Helvetica, sans-serif; COLOR: #393a3d; TEXT-ALIGN: c=

enter; DISPLAY: block" border=3D"0" alt=3D"Intuit" src=3D"cid:469ad354ce8f8=

f0d1a6c802e6fc15245.png" width=3D"600" height=3D"50">

ADDING-LEFT: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px" align=3Dcenter>
class=3D"mobile_dualimage" style=3D"DISPLAY: none" border=3D"0" alt=3D"" s=

rc=3D"cid:7786c5779cdd5b1386ea260e58a15c7b.png" width=3D"640" height=3D"241=

">

alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" width=3D"1" heigh=

t=3D"20">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">
0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 


 



!important; BORDER-BOTTOM-WIDTH: 0px !important; PADDING-BOTTOM: 0px !impo=

rtant; PADDING-TOP: 0px !important; PADDING-LEFT: 0px !important; MARGIN: 0=

px; PADDING-RIGHT: 0px !important; BORDER-TOP-WIDTH: 0px !important" border=

=3D"0" alt=3D"" src=3D"cid:open" width=3D"1" height=3D"1">



------=_NextPart_000_0012_EFACC9C6.5390DB13

Content-Type: image/png; name="5a2f9fdccbde8fc5d477916d190eec86.png"

Content-Transfer-Encoding: base64

Content-ID: <5a2f9fdccbde8fc5d477916d190eec86.png>

Content-Disposition: inline; filename="5a2f9fdccbde8fc5d477916d190eec86.png"



iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAAXNSR0IArs4c6QAAABdJREFU

KFNjZCASMBKpjmFUId6QIjp4AAppAAuXjCs4AAAAAElFTkSuQmCC



------=_NextPart_000_0012_EFACC9C6.5390DB13

Content-Type: image/png; name="04b97cd8e505b31acd83af8b748bc8a2.png"

Content-Transfer-Encoding: base64

Content-ID: <04b97cd8e505b31acd83af8b748bc8a2.png>

Content-Disposition: inline; filename="04b97cd8e505b31acd83af8b748bc8a2.png"



...







------=_NextPart_000_0012_EFACC9C6.5390DB13

Content-Type: image/png; name="920b8471a1ece85299098bbed8022a47.png"

Content-Transfer-Encoding: base64

Content-ID: <920b8471a1ece85299098bbed8022a47.png>

Content-Disposition: inline; filename="920b8471a1ece85299098bbed8022a47.png"





...







------=_NextPart_000_0012_EFACC9C6.5390DB13

Content-Type: image/png; name="920b8471a1ece85299098bbed8022a47.png"

Content-Transfer-Encoding: base64

Content-ID: <920b8471a1ece85299098bbed8022a47.png>

Content-Disposition: inline; filename="920b8471a1ece85299098bbed8022a47.png"





...







------=_NextPart_000_0012_EFACC9C6.5390DB13

Content-Type: application/octet-stream; name="open"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="open"



R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==



------=_NextPart_000_0012_EFACC9C6.5390DB13--

Quickbooks Phish from Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <010001a1cb2460a7-f0d75783-aa19-45d0-98af-f53e925f794c-000000@amazonses.com>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 09:07:00 -0600

Received: from a8-74.smtp-out.amazonses.com ([54.240.8.74]:48963)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <010001a1cb2460a7-f0d75783-aa19-45d0-98af-f53e925f794c-000000@amazonses.com>)

id 1xR9u2-00000000MXC-0qth

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 09:06:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1794409521;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Feedback-ID;

bh=0Ra4Zj0Rud4Vhov+MCJLo/dBH15zpCwZyQG5rpDc5QQ=;

b=c4XMga3esRXbxo+veA2CK94d7Pvi7iFBm0vXdXRjBVHB9af6WAGmFZ3m5RSJzBrR

H0cjxMtlSmRmXy5hW0bfKh/OQZ7ClarEn8OBXgQbZaLp076GgIO2WP/s29VQXg/6xc4

x9K44x9mD5JbyuuO+bkQiaFuVWdrPlV4u7Erjx14=

From: QuickBooks

To: dave@doctor.nl2k.ab.ca

Subject: QuickBooks Payment Confirmation

Date: Wed, 11 Nov 2026 15:05:21 +0000

Message-ID: <010001a1cb2460a7-f0d75783-aa19-45d0-98af-f53e925f794c-000000@email.amazonses.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_E1D31C8F.1EF10DBC"

Feedback-ID: ::1.us-east-1.H+SUpM7dYHaRAzwq0Kz2tDwz4/TsZxMHMdz9tbXtkq8=:AmazonSES

X-SES-Outgoing: 2026.11.11-54.240.8.74

X-Spam_score: 25.1

X-Spam_score_int: 251

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vendor Payment - Remittance Advice. Invoice Payment Sent

Via: QuickBooks BillPay Services. To be delivered by: Bank Transfer EFT (ACH/Direct

Deposit). Delivery ETA: Monday, November 23, 2026. View pa [...]



Content analysis details: (25.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

[54.240.8.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.74 listed in dnsbl.ahbl.org]

[54.240.8.74 listed in dnsbl.ahbl.org]

[54.240.8.74 listed in dnsbl.ahbl.org]

[54.240.8.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.74 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.74 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.8.74 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[54.240.8.74 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} QuickBooks Payment Confirmation





------=_NextPart_000_0012_E1D31C8F.1EF10DBC

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" cellSpacing=3D0 cellPadding=3D=

0 bgColor=3D#eceef1 border=3D0>




















0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 
IN: 0px; PADDING-RIGHT: 0px" width=3D640 align=3Dcenter>


ng=3D0 border=3D0>
















border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>






ING-RIGHT: 0px" align=3Dleft>
/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TvvL95lUdHNT6wzBxXCtpIhUdEnz39IXrOMq=

JMCXNhJhWSE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZ=

zkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbC=

oSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObB=

RCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12=

LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF=

8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FW=

WGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB=

19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4=

fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5=

QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1G=

pOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LAqdko-2BTnJM9uJ=

aXOZ7tmBy2DQ1ErJ3kskDeduFW-2BlkjyLIPp02Qy6VXcJDclpOTY5i-2Fs11SoLlMrGy4vpgjj=

-2BkorXqzSwPxGt1zFsV9xaRPjGqXZJ-2BiMXeWP4oidadXUn-2BMdt0yLiWcc9aI5RzRu6vE5g=

rzFs-2BUdAzu62Z9-2FK5cjyWb-2BD3M5Q8KnUH83B8YYs-3D" target=3D_blank>
le=3D"FONT-SIZE: 14px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-=

serif; COLOR: #393a3d; TEXT-ALIGN: center; DISPLAY: block" border=3D"0" alt=

=3D"Intuit QuickBooks" src=3D"cid:04b97cd8e505b31acd83af8b748bc8a2.png" wid=

th=3D"155" height=3D"68">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


acing=3D0 cellPadding=3D0 width=3D600 align=3Dcenter bgColor=3D#ffffff bord=

er=3D0>


























0px; PADDING-LEFT: 30px; PADDING-RIGHT: 30px" align=3Dcenter>
processing_icon" style=3D"DISPLAY: block" border=3D"0" src=3D"cid:920b8471a=

1ece85299098bbed8022a47.png" width=3D"101" height=3D"54">

DDING-RIGHT: 30px" align=3Dcenter>
ZE: 25px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR:=

#393a3d; LINE-HEIGHT: 36px">Vendor Payment - Remittance Advice.
AN>

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Invoice Payment Sent Via: QuickBooks =

BillPay Services.

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">To be delivered by: Bank Transfer EFT=

(ACH/Direct Deposit).

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Delivery ETA: Monday, November 23, 20=

26.

DDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


der=3D0>


















r=3D#339e28 border=3D0>






TABLE>

ILY: 'Avenir Next', Avenir, Helvetica, sans-serif; VERTICAL-ALIGN: middle; =

FONT-WEIGHT: 600; COLOR: #ffffff; LINE-HEIGHT: 22px; border-radius: 25px" b=

gColor=3D#339e28 align=3Dcenter>
-ALIGN: middle; COLOR: #ffffff; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADD=

ING-LEFT: 30px; DISPLAY: block; PADDING-RIGHT: 30px; border-radius: 25px" h=

ref=3D"https://docsviesxclus.com/caqbo/412R005700630639135081/wap/" name=3D=

View target=3D_blank>View payment details

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>






E>










FT: 30px; LINE-HEIGHT: 1px; PADDING-RIGHT: 30px; MAX-HEIGHT: 1px" bgColor=

=3D#ffffff height=3D1 align=3Dcenter>


100%" align=3Dcenter bgColor=3D#d1d1d1 border=3D0>






TABLE>




DISPLAY: block; MAX-HEIGHT: 1px" border=3D"0" alt=3D"" src=3D"cid:5a2f9fdcc=

bde8fc5d477916d190eec86.png" width=3D"10" height=3D"1">

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>


















, sans-serif; COLOR: #6b6c72; PADDING-BOTTOM: 15px; PADDING-TOP: 10px; PADD=

ING-LEFT: 0px; LINE-HEIGHT: 16px; PADDING-RIGHT: 0px" align=3Dleft> 
R>**Standard ACH payments are usually delivered to the vendor’s accou=

nt within 2-5 business days, paper checks are usually delivered within 7-10=

business days. Faster payments are subject to eligibility criteria. Delive=

ry times may vary due to third party delays or risk reviews.
 
M=

oney movement services are provided by Intuit Payments Inc. pursuant to Int=

uit Payments Inc.'s licenses
(NMLS #10‍98819). Intuit Payments Inc=

=2E is located at 27‍00 Coast Av‍enue, Mount‍ain View, C&=

#8205;A 9‍4043, phone 1-‍888-‍536-‍4801
 
R>For more information about Intuit Payments' money transmission licenses, =

including California customers' right to refund statement, please visit our=


s://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj8=

1B264OYNNlpD-2BCTPJzPmKYQoypOAx7KjMAtPUbFoenRPCncYMvvfSpU9pu3g-3D-3DBQr4_7-=

2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZ=

tK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2F=

sCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvnd=

f4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3Js=

cHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pg=

QUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgO=

IH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3=

sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJ=

BW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR=

6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOr=

qW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDcU4SDOIf6EoeKAp1VkVcsd4NphHv=

Gk-2BneNbp836bgMkKG-2Fs3IHTLEmOYr0JQuwn5ypmiKJEerXOfHmO-2B7nHIQ4U6Txcam1kW6=

EuxRUPRZC-2F8-2FbwIJeexl1fV0dmKW5zFgevJCeSmmxiD49W9FVbUJ2M75x6u4uspmMruizge=

hHuL08DGYAeeoU0ZwmOAoobM-3D" target=3D_blank>payment licenses page.
=

 
Illinois Residents: RIGHT TO REFUND. You are entitled to a=

refund of the money to be transmitted if Intuit Payments Inc. does not for=

ward the money received from you within 3 business days of the date of its =

receipt. If you want a refund, you must mail or deliver your written reques=

t to Intuit Payments Inc., 27‍00 Coast Av‍enue, Mount‍ain=

View, C‍A 9‍4043 Attn: Intuit Payments Inc. or by calling the =

Customer Service Center at 1‑=

;‍888‑‍536‑‍4801.
 
Minn=

esota Residents: Consumers are warned that fraud can and does occur. Pl=

ease call Intuit Payments Inc. at 1‑‍888‑‍536‑=

;‍4801 to report fraud.
N>
 
New York residents: RIGHT TO REFUND. You are entitle=

d to a refund of the money to be transmitted if Intuit Payments Inc. (NMLS =

#10‍98819) does not forward the money received from you within 10 bus=

iness days of the date of its receipt. If you want a refund, you must mail =

or deliver your written request to Intuit Payments Inc., 27‍00 Coast =

Av‍enue, Mount‍ain View, C‍A 9‍4043 or by calling t=

he Customer Service Center at 1‑‍888‑‍536‑=

205;4801. Intuit Payments Inc. is licensed under the Transmitters of Money =

Act and regulated by the New York State Department of Financial Services. I=

f you have a complaint, first contact Intuit Payments Inc. at 1‑̴=

5;888‑‍536‑‍4801. Unresolved consumer complaints ma=

y be mailed to the New York State Department of Financial Services, Consume=

r Services Division, One Commerce Plaza,
">Al‍bany, N‍Y.
 
For Alaska Resident=

s Only: If your issue is unresolved by Intuit Payments, Inc. at 1-800-4=

46-8848, please submit formal complaints with the State of Alaska, Division=

of Banking & Securities. Please download the form here:
LOR: " href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvT=

YX227JkDSVWi87adRoCkK3JEOLqfZOw-2BGU8-2FQOLGVb5FvBcuD1K03lXeP1tVlTQWOx9FSLm=

Ippv-2BDagmj81PzBe0TWikGDCtWvfMtwWaPvV6-2Bk6B0hQunMahhLqZj_7-2B-2F6303DPKGg=

WagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQ=

UL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwP=

BrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUisw=

i-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9=

EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08M=

G67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2=

Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8=

aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOa=

k9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIM=

gTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2B=

Ec1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBsOLn3-2FqIUB4CL9NzUQ-2B4bFtScuvVjCyZSaOKBg=

Dpy9wKFEqDeiMTY3fqmVzkECuz2mHVjJtqJ1QzQIcDa2Y9-2BOTRMkfIvzTey4bj3R4vJWoGSsK=

-2FxCMKqBY12K-2BUMzg1LPjztrp1atEA2-2B4nb7PEVwRv1iMjPl6-2B8RlO610-2B8aFWb3PW=

DHSXLtpqLfXC2Bqs-3D" target=3D_blank>https://www.commerce.alaska.gov/web/po=

rtals/3/pub/DBSGeneralComplaintFormupdated.pdf. Submit formal complaint=

form with supporting documents:Division of Banking & Securities PO Box=

110807 Juneau, AK 99811-0807 If you are an Alaska resident with questions =

regarding formal complaints, please email us at
=3D"mailto:dbs.licensing@alaska.gov" target=3D_blank>dbs.licensing@alaska.g=

ov or call Nine Zero Seven Four Six Five Two Five Two One.
 
>IPI is responsible for the non-delivery or delayed delivery of your funds =

until such funds are received by the designated beneficiary, and IPI is lia=

ble in the event that your funds are lost
p">or stolen.
 
Intuit respects your privacy. To lea=

rn more, read our Privacy Statement (
ortant; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?u=

pn=3Du001.C9ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFYwYKK3SiLAxIbx1TNTVsc2U=

CRE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXX=

SSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2=

Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4b=

syPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c=

8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgw=

n1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC5=

4kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzS=

DX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vK=

YIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3f=

FDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8L=

NhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDYBUUtTfsoHoZtTX0CgoNSB=

krsKYGRSlNvIzoqdfkoz9xKznZNXv51NPo-2B4N7Uin4ff3aOrtIkEYvAmOldlhUdHwqoZKIF7D=

wiWbOYjqwPcbTPJdo-2BAMHZ-2FA-2BPvO6Q8D0TJtgiu8u92BZItgCRqRqIwlWihBa-2BFnq65=

inq8NUWQqXhUIanYt7BeZNLJaIigRg-3D" target=3D_blank>https://www.intuit.com/p=

rivacy/).
Visit Legal (
COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du0=

01.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPL-2FnAJO3Dfv-2BKhS4cDavl-2B6=

t_lk_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzX=

XSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-=

2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4=

bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4=

c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAg=

wn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC=

54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlz=

SDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7v=

KYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3=

fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8=

LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBbF-2BZySQWtLMctzyQGYK=

OxRkYKJK4fHvH4biYniUJE52neQkMS6XrivWBs00u8KYqxHUdd2SWX9llrJ4Z2CIsZvyu-2BpbV=

CTOTmwAlssTMcbmH3110UN3PKvtW5gfTmTwgQJwbVr8jqaftvUw74dr1APZLcwE3JyJI-2F0GMD=

r8-2BGs5YQ8kTiA-2BjoI4OsOUn2Mgk-3D" target=3D_blank>https://www.intuit.com/=

legal/) to find out more.
N>
 
IMPORTANT NOTICE: This notification is being sent to inform=

you of a critical matter concerning your current service, software or bill=

ing. Please note that if you previously opted out of receiving marketing ma=

terials from Intuit, you may continue to receive notifications similar to t=

his communication. DO NOT REPLY to this email, this inbox is not monitored =

for replies.
 
&=

nbsp;
This message was sent to
ant; COLOR: #077dc6" href=3D"you" target=3D_blank>you, as an Intuit cus=

tomer, consistent with your
OLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001=

=2EC9ANdvTYX227JkDSVWi87cmREtoVnmlpmot2HEHwMiOEqo28BeWINThlCR-2BpM-2BWjO1Lg=

RrSsJHfip1hCt5nTWKbATfzoUlRksG9C9ScTkV6wJe9FtfasDGvbIdF1JOx5Tq7l164t4Kmhv94=

v61JeFzDbRu0EvnBj976nUcchXEb3udEBJLFQ6JIlJL6nCiCEM7N6_7-2B-2F6303DPKGgWagyH=

spi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6=

Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe=

-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW=

-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2G=

H0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67Hj=

PmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2=

FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2B=

nKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM=

4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw=

76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-=

2FZXNMhW4z9mNLvFaLr7wxQeU6LBhtrr7UK9E9LHthiIZi8bSI0KP4zIfLjMtUeZS09eDf14vsA=

zYcy9yGZ5LodY3r8L62q-2Bq-2FyUqj-2FaP1EE0ZS3oRuIYRDyLEj45B-2BYSWtQF7aIGGxPfq=

Vmstm-2FR7pHx3w2ynHu2GI-2BA8O3iwSIIsLtm1C5TIpHvf6v6kATw4AcrLnElWoK6u3CUjP10=

ZEY1vv4-3D" target=3D_blank>email preferences. If you have chosen not t=

o receive marketing messages, you will continue to receive business communi=

cations about your selected Intuit product(s), which may either affect your=

service or software, your account, or which may be legally required. If yo=

u receive a suspicious email, please report it by forwarding the email to <=

A style=3D"TEXT-DECORATION: underline !important; COLOR: #6b6c72" href=3D"m=

ailto:spoof@intuit.com" target=3D_blank>spoof@intuit.com.
 
=


://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87X9OooN=

HmQG9eX1hhVT3-2FwDPh-2FO4XT40cbsVG0H2B9l7stqNF7ZvpJsZ-2Feiou0Aj5g-3D-3Dg5TG=

_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSn=

wwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco=

-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyP=

vndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm=

3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W=

3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kI=

UgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2=

JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIy=

GRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd=

9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhu=

HOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBZr9dorlmPlG7lhSt8aSiVsIF4=

ADBFiDmI1Xnf35Zv5oGF2G6O9sJmroLNqogtJvR1qKsZBTjbQgMcMo5zODFO277j3Z6GUisPL72=

-2BEJXuM3XRzAFRqd42E-2BIFALyHFGZ3Et7eAImSvCZY4INv1CJ9v5uwHvYJTj9nFvrlfrQFE8=

z5FSwcsTaeDQ4NimHzokM-3D" target=3D_blank>Terms of service

=3D"TEXT-DECORATION: none !important; COLOR: #077dc6" href=3D"https://u7445=

749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TyjSWhU6mXtBhb=

2dA39nAy2CX-2BeKm8Of2v36wj-2FkNihApB__7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM=

-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkR=

L-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqG=

lcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rg=

XqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXff=

Tdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5s=

ZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtC=

owbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3=

xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeK=

yboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvv=

GF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvF=

aLr7wxQeU6LA6LF936fLFZ9Ap2yIPlDNTA4EleCzTiqOZdLgSb8LFbYz339wg2YeKsQG5i9iLWj=

lu-2Fp-2BaFAk7h-2FIosxKyBBHieUYGzS-2FkAGCB5eSQRzX1zw5WCH69hjmPlg2Qwn6-2FslY=

nYZOAiQEPpOO1nE-2BQ178pq5VTBA1Dk8fB9AOHrdCrmZrGOmPtTRPWNJolUBOk5pc-3D" targ=

et=3D_blank>Security
R: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9=

ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFaltS2ixeDHtrx7SIMALVExVjcXzGnrTjXPe=

nrSf4OsPw-3D-3D_v0S_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22=

Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr8=

9LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC8=

4-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQS=

L8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QH=

SAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dc=

wLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3H=

BH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4=

BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR40=

0tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPa=

pbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDr5Qo-2=

Fwv-2F54enmRHj-2FgM5j6wtCjR9MuEFcKaAoIWRLDEW0na2iCuQ5jmmwJGUez8byhYlAJOIYba=

pdeWk09X1cOqJLa50TOFXP9qniEYDbEAZd2l9-2BuK8XqnSoG2dOe3UIQStOBGOhb9RiCumc9H8=

-2BJCgSV23KR-2BXXarlNpzVf7-2BgsTT0l6bg-2FIxrof9SI-2F3s-3D" target=3D_blank>=

Privacy Statement.
© 2026 Intuit Inc.
ON: none !important; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.n=

et/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJOzx4jSS=

9ya01x-2FKBMsCq57-iv_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo2=

2Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr=

89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC=

84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQ=

SL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9Q=

HSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167d=

cwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3=

HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ=

4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR4=

00tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBP=

apbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LC-2Bs6=

NM-2B5QVbXyXN50UEby0eOfdtNvTpARhiEdAMMWJKxudjkR76ycvVH-2BL7F-2BwUXgls-2BoWm=

QXQHvAoJdWZQX5NIEm17g8-2FuuRULEkfA4DOhvb2CNc7-2B8jbqnw0iUm4k0KlxAEClhUZqtWQ=

M-2BPuMa67JVowyDah2bWmS-2B-2BaIs1pmjVbZiv0RRd-2F7-2BKxptsxtm8-3D" target=3D=

_blank>Trademarks.
2‍800 E. Commerce Center Place, T‍ucs=

on, A‍Z 8‍5706

ING-RIGHT: 0px">
'Avenir Next', Avenir, Helvetica, sans-serif; COLOR: #393a3d; TEXT-ALIGN: c=

enter; DISPLAY: block" border=3D"0" alt=3D"Intuit" src=3D"cid:469ad354ce8f8=

f0d1a6c802e6fc15245.png" width=3D"600" height=3D"50">

ADDING-LEFT: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px" align=3Dcenter>
class=3D"mobile_dualimage" style=3D"DISPLAY: none" border=3D"0" alt=3D"" s=

rc=3D"cid:7786c5779cdd5b1386ea260e58a15c7b.png" width=3D"640" height=3D"241=

">

alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" width=3D"1" heigh=

t=3D"20">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">
0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 


 



!important; BORDER-BOTTOM-WIDTH: 0px !important; PADDING-BOTTOM: 0px !impo=

rtant; PADDING-TOP: 0px !important; PADDING-LEFT: 0px !important; MARGIN: 0=

px; PADDING-RIGHT: 0px !important; BORDER-TOP-WIDTH: 0px !important" border=

=3D"0" alt=3D"" src=3D"cid:open" width=3D"1" height=3D"1">



------=_NextPart_000_0012_E1D31C8F.1EF10DBC

Content-Type: image/png; name="5a2f9fdccbde8fc5d477916d190eec86.png"

Content-Transfer-Encoding: base64

Content-ID: <5a2f9fdccbde8fc5d477916d190eec86.png>

Content-Disposition: inline; filename="5a2f9fdccbde8fc5d477916d190eec86.png"



iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAAXNSR0IArs4c6QAAABdJREFU

KFNjZCASMBKpjmFUId6QIjp4AAppAAuXjCs4AAAAAElFTkSuQmCC



------=_NextPart_000_0012_E1D31C8F.1EF10DBC

Content-Type: image/png; name="04b97cd8e505b31acd83af8b748..bc8a2.png"

Content-Transfer-Encoding: base64

Content-ID: <04b97cd8e505b31acd83af8b748bc8a2.png>

Content-Disposition: inline; filename="04b97cd8e505b31acd83af8b748bc8a2.png"



...





------=_NextPart_000_0012_E1D31C8F.1EF10DBC

Content-Type: image/png; name="920b8471a1ece85299098bbed8022a47.png"

Content-Transfer-Encoding: base64

Content-ID: <920b8471a1ece85299098bbed8022a47.png>

Content-Disposition: inline; filename="920b8471a1ece85299098bbed8022a47.png"



...







------=_NextPart_000_0012_E1D31C8F.1EF10DBC

Content-Type: image/png; name="469ad354ce8f8f0d1a6c802e6fc15245.png"

Content-Transfer-Encoding: base64

Content-ID: <469ad354ce8f8f0d1a6c802e6fc15245.png>

Content-Disposition: inline; filename="469ad354ce8f8f0d1a6c802e6fc15245.png"



...





------=_NextPart_000_0012_E1D31C8F.1EF10DBC

Content-Type: application/octet-stream; name="open"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="open"



R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==



------=_NextPart_000_0012_E1D31C8F.1EF10DBC--

Quickbooks Phish from Amazon

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 14:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xRETF-00000000Oco-3vAH

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 13:59:01 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 13:59:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a8-241.smtp-out.amazonses.com ([54.240.8.241]:47019)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <010001a1cb245fb6-6d95b8db-3198-4bc5-b172-f806a15b972e-000000@amazonses.com>)

id 1xR9tz-00000000MX4-0O9I

for www@nl2k.ab.ca;

Wed, 11 Nov 2026 09:06:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1794409521;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Feedback-ID;

bh=AepUVJ+7KOXfzjUAr3CjYiVeXixn6EhVE211356v+3Q=;

b=ZhpESIVR5Rv5mwq3y/o4BQampCiw+WO5vID38FbanYmGaumGyUWptRNXkoYT5aJi

mUSNhNVcCSIXeu9gLjiNCFe0d215+ZG6gqEFbk6SbK0Q0UtB5L9IF45ZRjZL0MsU1Jg

MJLaWsgwX+pAZvIaMwswAxjdMXeUrGi4DpDozvyk=

From: QuickBooks

To: www@nl2k.ab.ca

Subject: QuickBooks Payment Confirmation

Date: Wed, 11 Nov 2026 15:05:21 +0000

Message-ID: <010001a1cb245fb6-6d95b8db-3198-4bc5-b172-f806a15b972e-000000@email.amazonses.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_C273188E.FCF17D56"

Feedback-ID: ::1.us-east-1.H+SUpM7dYHaRAzwq0Kz2tDwz4/TsZxMHMdz9tbXtkq8=:AmazonSES

X-SES-Outgoing: 2026.11.11-54.240.8.241

X-Spam_score: 25.1

X-Spam_score_int: 251

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vendor Payment - Remittance Advice. Invoice Payment Sent

Via: QuickBooks BillPay Services. To be delivered by: Bank Transfer EFT (ACH/Direct

Deposit). Delivery ETA: Monday, November 23, 2026. View pa [...]



Content analysis details: (25.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.8.241 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.241 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

[54.240.8.241 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.241 listed in dnsbl.ahbl.org]

[54.240.8.241 listed in dnsbl.ahbl.org]

[54.240.8.241 listed in dnsbl.ahbl.org]

[54.240.8.241 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.241 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.241 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.241 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.241 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.8.241 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 MIXED_HREF_CASE Has href in mixed case

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} QuickBooks Payment Confirmation





------=_NextPart_000_0012_C273188E.FCF17D56

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" cellSpacing=3D0 cellPadding=3D=

0 bgColor=3D#eceef1 border=3D0>




















0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 
IN: 0px; PADDING-RIGHT: 0px" width=3D640 align=3Dcenter>


ng=3D0 border=3D0>
















border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>






ING-RIGHT: 0px" align=3Dleft>
/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TvvL95lUdHNT6wzBxXCtpIhUdEnz39IXrOMq=

JMCXNhJhWSE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZ=

zkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbC=

oSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObB=

RCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12=

LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF=

8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FW=

WGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB=

19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4=

fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5=

QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1G=

pOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LAqdko-2BTnJM9uJ=

aXOZ7tmBy2DQ1ErJ3kskDeduFW-2BlkjyLIPp02Qy6VXcJDclpOTY5i-2Fs11SoLlMrGy4vpgjj=

-2BkorXqzSwPxGt1zFsV9xaRPjGqXZJ-2BiMXeWP4oidadXUn-2BMdt0yLiWcc9aI5RzRu6vE5g=

rzFs-2BUdAzu62Z9-2FK5cjyWb-2BD3M5Q8KnUH83B8YYs-3D" target=3D_blank>
le=3D"FONT-SIZE: 14px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-=

serif; COLOR: #393a3d; TEXT-ALIGN: center; DISPLAY: block" border=3D"0" alt=

=3D"Intuit QuickBooks" src=3D"cid:04b97cd8e505b31acd83af8b748bc8a2.png" wid=

th=3D"155" height=3D"68">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


acing=3D0 cellPadding=3D0 width=3D600 align=3Dcenter bgColor=3D#ffffff bord=

er=3D0>


























0px; PADDING-LEFT: 30px; PADDING-RIGHT: 30px" align=3Dcenter>
processing_icon" style=3D"DISPLAY: block" border=3D"0" src=3D"cid:920b8471a=

1ece85299098bbed8022a47.png" width=3D"101" height=3D"54">

DDING-RIGHT: 30px" align=3Dcenter>
ZE: 25px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR:=

#393a3d; LINE-HEIGHT: 36px">Vendor Payment - Remittance Advice.
AN>

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Invoice Payment Sent Via: QuickBooks =

BillPay Services.

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">To be delivered by: Bank Transfer EFT=

(ACH/Direct Deposit).

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Delivery ETA: Monday, November 23, 20=

26.

DDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


der=3D0>


















r=3D#339e28 border=3D0>






TABLE>

ILY: 'Avenir Next', Avenir, Helvetica, sans-serif; VERTICAL-ALIGN: middle; =

FONT-WEIGHT: 600; COLOR: #ffffff; LINE-HEIGHT: 22px; border-radius: 25px" b=

gColor=3D#339e28 align=3Dcenter>
-ALIGN: middle; COLOR: #ffffff; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADD=

ING-LEFT: 30px; DISPLAY: block; PADDING-RIGHT: 30px; border-radius: 25px" h=

ref=3D"https://docsviesxclus.com/caqbo/412R005700630639135081/wap/" name=3D=

View target=3D_blank>View payment details

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>






E>










FT: 30px; LINE-HEIGHT: 1px; PADDING-RIGHT: 30px; MAX-HEIGHT: 1px" bgColor=

=3D#ffffff height=3D1 align=3Dcenter>


100%" align=3Dcenter bgColor=3D#d1d1d1 border=3D0>






TABLE>




DISPLAY: block; MAX-HEIGHT: 1px" border=3D"0" alt=3D"" src=3D"cid:5a2f9fdcc=

bde8fc5d477916d190eec86.png" width=3D"10" height=3D"1">

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>


















, sans-serif; COLOR: #6b6c72; PADDING-BOTTOM: 15px; PADDING-TOP: 10px; PADD=

ING-LEFT: 0px; LINE-HEIGHT: 16px; PADDING-RIGHT: 0px" align=3Dleft> 
R>**Standard ACH payments are usually delivered to the vendor’s accou=

nt within 2-5 business days, paper checks are usually delivered within 7-10=

business days. Faster payments are subject to eligibility criteria. Delive=

ry times may vary due to third party delays or risk reviews.
 
M=

oney movement services are provided by Intuit Payments Inc. pursuant to Int=

uit Payments Inc.'s licenses
(NMLS #10‍98819). Intuit Payments Inc=

=2E is located at 27‍00 Coast Av‍enue, Mount‍ain View, C&=

#8205;A 9‍4043, phone 1-‍888-‍536-‍4801
 
R>For more information about Intuit Payments' money transmission licenses, =

including California customers' right to refund statement, please visit our=


s://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj8=

1B264OYNNlpD-2BCTPJzPmKYQoypOAx7KjMAtPUbFoenRPCncYMvvfSpU9pu3g-3D-3DBQr4_7-=

2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZ=

tK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2F=

sCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvnd=

f4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3Js=

cHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pg=

QUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgO=

IH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3=

sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJ=

BW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR=

6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOr=

qW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDcU4SDOIf6EoeKAp1VkVcsd4NphHv=

Gk-2BneNbp836bgMkKG-2Fs3IHTLEmOYr0JQuwn5ypmiKJEerXOfHmO-2B7nHIQ4U6Txcam1kW6=

EuxRUPRZC-2F8-2FbwIJeexl1fV0dmKW5zFgevJCeSmmxiD49W9FVbUJ2M75x6u4uspmMruizge=

hHuL08DGYAeeoU0ZwmOAoobM-3D" target=3D_blank>payment licenses page.
=

 
Illinois Residents: RIGHT TO REFUND. You are entitled to a=

refund of the money to be transmitted if Intuit Payments Inc. does not for=

ward the money received from you within 3 business days of the date of its =

receipt. If you want a refund, you must mail or deliver your written reques=

t to Intuit Payments Inc., 27‍00 Coast Av‍enue, Mount‍ain=

View, C‍A 9‍4043 Attn: Intuit Payments Inc. or by calling the =

Customer Service Center at 1‑=

;‍888‑‍536‑‍4801.
 
Minn=

esota Residents: Consumers are warned that fraud can and does occur. Pl=

ease call Intuit Payments Inc. at 1‑‍888‑‍536‑=

;‍4801 to report fraud.
N>
 
New York residents: RIGHT TO REFUND. You are entitle=

d to a refund of the money to be transmitted if Intuit Payments Inc. (NMLS =

#10‍98819) does not forward the money received from you within 10 bus=

iness days of the date of its receipt. If you want a refund, you must mail =

or deliver your written request to Intuit Payments Inc., 27‍00 Coast =

Av‍enue, Mount‍ain View, C‍A 9‍4043 or by calling t=

he Customer Service Center at 1‑‍888‑‍536‑=

205;4801. Intuit Payments Inc. is licensed under the Transmitters of Money =

Act and regulated by the New York State Department of Financial Services. I=

f you have a complaint, first contact Intuit Payments Inc. at 1‑̴=

5;888‑‍536‑‍4801. Unresolved consumer complaints ma=

y be mailed to the New York State Department of Financial Services, Consume=

r Services Division, One Commerce Plaza,
">Al‍bany, N‍Y.
 
For Alaska Resident=

s Only: If your issue is unresolved by Intuit Payments, Inc. at 1-800-4=

46-8848, please submit formal complaints with the State of Alaska, Division=

of Banking & Securities. Please download the form here:
LOR: " href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvT=

YX227JkDSVWi87adRoCkK3JEOLqfZOw-2BGU8-2FQOLGVb5FvBcuD1K03lXeP1tVlTQWOx9FSLm=

Ippv-2BDagmj81PzBe0TWikGDCtWvfMtwWaPvV6-2Bk6B0hQunMahhLqZj_7-2B-2F6303DPKGg=

WagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQ=

UL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwP=

BrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUisw=

i-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9=

EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08M=

G67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2=

Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8=

aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOa=

k9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIM=

gTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2B=

Ec1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBsOLn3-2FqIUB4CL9NzUQ-2B4bFtScuvVjCyZSaOKBg=

Dpy9wKFEqDeiMTY3fqmVzkECuz2mHVjJtqJ1QzQIcDa2Y9-2BOTRMkfIvzTey4bj3R4vJWoGSsK=

-2FxCMKqBY12K-2BUMzg1LPjztrp1atEA2-2B4nb7PEVwRv1iMjPl6-2B8RlO610-2B8aFWb3PW=

DHSXLtpqLfXC2Bqs-3D" target=3D_blank>https://www.commerce.alaska.gov/web/po=

rtals/3/pub/DBSGeneralComplaintFormupdated.pdf. Submit formal complaint=

form with supporting documents:Division of Banking & Securities PO Box=

110807 Juneau, AK 99811-0807 If you are an Alaska resident with questions =

regarding formal complaints, please email us at
=3D"mailto:dbs.licensing@alaska.gov" target=3D_blank>dbs.licensing@alaska.g=

ov or call Nine Zero Seven Four Six Five Two Five Two One.
 
>IPI is responsible for the non-delivery or delayed delivery of your funds =

until such funds are received by the designated beneficiary, and IPI is lia=

ble in the event that your funds are lost
p">or stolen.
 
Intuit respects your privacy. To lea=

rn more, read our Privacy Statement (
ortant; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?u=

pn=3Du001.C9ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFYwYKK3SiLAxIbx1TNTVsc2U=

CRE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXX=

SSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2=

Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4b=

syPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c=

8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgw=

n1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC5=

4kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzS=

DX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vK=

YIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3f=

FDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8L=

NhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDYBUUtTfsoHoZtTX0CgoNSB=

krsKYGRSlNvIzoqdfkoz9xKznZNXv51NPo-2B4N7Uin4ff3aOrtIkEYvAmOldlhUdHwqoZKIF7D=

wiWbOYjqwPcbTPJdo-2BAMHZ-2FA-2BPvO6Q8D0TJtgiu8u92BZItgCRqRqIwlWihBa-2BFnq65=

inq8NUWQqXhUIanYt7BeZNLJaIigRg-3D" target=3D_blank>https://www.intuit.com/p=

rivacy/).
Visit Legal (
COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du0=

01.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPL-2FnAJO3Dfv-2BKhS4cDavl-2B6=

t_lk_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzX=

XSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-=

2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4=

bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4=

c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAg=

wn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC=

54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlz=

SDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7v=

KYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3=

fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8=

LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBbF-2BZySQWtLMctzyQGYK=

OxRkYKJK4fHvH4biYniUJE52neQkMS6XrivWBs00u8KYqxHUdd2SWX9llrJ4Z2CIsZvyu-2BpbV=

CTOTmwAlssTMcbmH3110UN3PKvtW5gfTmTwgQJwbVr8jqaftvUw74dr1APZLcwE3JyJI-2F0GMD=

r8-2BGs5YQ8kTiA-2BjoI4OsOUn2Mgk-3D" target=3D_blank>https://www.intuit.com/=

legal/) to find out more.
N>
 
IMPORTANT NOTICE: This notification is being sent to inform=

you of a critical matter concerning your current service, software or bill=

ing. Please note that if you previously opted out of receiving marketing ma=

terials from Intuit, you may continue to receive notifications similar to t=

his communication. DO NOT REPLY to this email, this inbox is not monitored =

for replies.
 
&=

nbsp;
This message was sent to
ant; COLOR: #077dc6" href=3D"you" target=3D_blank>you, as an Intuit cus=

tomer, consistent with your
OLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001=

=2EC9ANdvTYX227JkDSVWi87cmREtoVnmlpmot2HEHwMiOEqo28BeWINThlCR-2BpM-2BWjO1Lg=

RrSsJHfip1hCt5nTWKbATfzoUlRksG9C9ScTkV6wJe9FtfasDGvbIdF1JOx5Tq7l164t4Kmhv94=

v61JeFzDbRu0EvnBj976nUcchXEb3udEBJLFQ6JIlJL6nCiCEM7N6_7-2B-2F6303DPKGgWagyH=

spi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6=

Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe=

-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW=

-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2G=

H0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67Hj=

PmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2=

FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2B=

nKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM=

4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw=

76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-=

2FZXNMhW4z9mNLvFaLr7wxQeU6LBhtrr7UK9E9LHthiIZi8bSI0KP4zIfLjMtUeZS09eDf14vsA=

zYcy9yGZ5LodY3r8L62q-2Bq-2FyUqj-2FaP1EE0ZS3oRuIYRDyLEj45B-2BYSWtQF7aIGGxPfq=

Vmstm-2FR7pHx3w2ynHu2GI-2BA8O3iwSIIsLtm1C5TIpHvf6v6kATw4AcrLnElWoK6u3CUjP10=

ZEY1vv4-3D" target=3D_blank>email preferences. If you have chosen not t=

o receive marketing messages, you will continue to receive business communi=

cations about your selected Intuit product(s), which may either affect your=

service or software, your account, or which may be legally required. If yo=

u receive a suspicious email, please report it by forwarding the email to <=

A style=3D"TEXT-DECORATION: underline !important; COLOR: #6b6c72" href=3D"m=

ailto:spoof@intuit.com" target=3D_blank>spoof@intuit.com.
 
=


://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87X9OooN=

HmQG9eX1hhVT3-2FwDPh-2FO4XT40cbsVG0H2B9l7stqNF7ZvpJsZ-2Feiou0Aj5g-3D-3Dg5TG=

_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSn=

wwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco=

-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyP=

vndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm=

3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W=

3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kI=

UgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2=

JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIy=

GRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd=

9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhu=

HOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBZr9dorlmPlG7lhSt8aSiVsIF4=

ADBFiDmI1Xnf35Zv5oGF2G6O9sJmroLNqogtJvR1qKsZBTjbQgMcMo5zODFO277j3Z6GUisPL72=

-2BEJXuM3XRzAFRqd42E-2BIFALyHFGZ3Et7eAImSvCZY4INv1CJ9v5uwHvYJTj9nFvrlfrQFE8=

z5FSwcsTaeDQ4NimHzokM-3D" target=3D_blank>Terms of service

=3D"TEXT-DECORATION: none !important; COLOR: #077dc6" href=3D"https://u7445=

749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TyjSWhU6mXtBhb=

2dA39nAy2CX-2BeKm8Of2v36wj-2FkNihApB__7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM=

-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkR=

L-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqG=

lcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rg=

XqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXff=

Tdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5s=

ZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtC=

owbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3=

xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeK=

yboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvv=

GF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvF=

aLr7wxQeU6LA6LF936fLFZ9Ap2yIPlDNTA4EleCzTiqOZdLgSb8LFbYz339wg2YeKsQG5i9iLWj=

lu-2Fp-2BaFAk7h-2FIosxKyBBHieUYGzS-2FkAGCB5eSQRzX1zw5WCH69hjmPlg2Qwn6-2FslY=

nYZOAiQEPpOO1nE-2BQ178pq5VTBA1Dk8fB9AOHrdCrmZrGOmPtTRPWNJolUBOk5pc-3D" targ=

et=3D_blank>Security
R: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9=

ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFaltS2ixeDHtrx7SIMALVExVjcXzGnrTjXPe=

nrSf4OsPw-3D-3D_v0S_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22=

Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr8=

9LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC8=

4-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQS=

L8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QH=

SAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dc=

wLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3H=

BH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4=

BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR40=

0tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPa=

pbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDr5Qo-2=

Fwv-2F54enmRHj-2FgM5j6wtCjR9MuEFcKaAoIWRLDEW0na2iCuQ5jmmwJGUez8byhYlAJOIYba=

pdeWk09X1cOqJLa50TOFXP9qniEYDbEAZd2l9-2BuK8XqnSoG2dOe3UIQStOBGOhb9RiCumc9H8=

-2BJCgSV23KR-2BXXarlNpzVf7-2BgsTT0l6bg-2FIxrof9SI-2F3s-3D" target=3D_blank>=

Privacy Statement.
© 2026 Intuit Inc.
ON: none !important; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.n=

et/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJOzx4jSS=

9ya01x-2FKBMsCq57-iv_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo2=

2Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr=

89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC=

84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQ=

SL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9Q=

HSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167d=

cwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3=

HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ=

4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR4=

00tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBP=

apbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LC-2Bs6=

NM-2B5QVbXyXN50UEby0eOfdtNvTpARhiEdAMMWJKxudjkR76ycvVH-2BL7F-2BwUXgls-2BoWm=

QXQHvAoJdWZQX5NIEm17g8-2FuuRULEkfA4DOhvb2CNc7-2B8jbqnw0iUm4k0KlxAEClhUZqtWQ=

M-2BPuMa67JVowyDah2bWmS-2B-2BaIs1pmjVbZiv0RRd-2F7-2BKxptsxtm8-3D" target=3D=

_blank>Trademarks.
2‍800 E. Commerce Center Place, T‍ucs=

on, A‍Z 8‍5706

ING-RIGHT: 0px">
'Avenir Next', Avenir, Helvetica, sans-serif; COLOR: #393a3d; TEXT-ALIGN: c=

enter; DISPLAY: block" border=3D"0" alt=3D"Intuit" src=3D"cid:469ad354ce8f8=

f0d1a6c802e6fc15245.png" width=3D"600" height=3D"50">

ADDING-LEFT: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px" align=3Dcenter>
class=3D"mobile_dualimage" style=3D"DISPLAY: none" border=3D"0" alt=3D"" s=

rc=3D"cid:7786c5779cdd5b1386ea260e58a15c7b.png" width=3D"640" height=3D"241=

">

alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" width=3D"1" heigh=

t=3D"20">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">
0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 


 



!important; BORDER-BOTTOM-WIDTH: 0px !important; PADDING-BOTTOM: 0px !impo=

rtant; PADDING-TOP: 0px !important; PADDING-LEFT: 0px !important; MARGIN: 0=

px; PADDING-RIGHT: 0px !important; BORDER-TOP-WIDTH: 0px !important" border=

=3D"0" alt=3D"" src=3D"cid:open" width=3D"1" height=3D"1">



------=_NextPart_000_0012_C273188E.FCF17D56

Content-Type: image/png; name="5a2f9fdccbde8fc5d477916d190eec86.png"

Content-Transfer-Encoding: base64

Content-ID: <5a2f9fdccbde8fc5d477916d190eec86.png>

Content-Disposition: inline; filename="5a2f9fdccbde8fc5d477916d190eec86.png"



iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAAXNSR0IArs4c6QAAABdJREFU

KFNjZCASMBKpjmFUId6QIjp4AAppAAuXjCs4AAAAAElFTkSuQmCC



------=_NextPart_000_0012_C273188E.FCF17D56

Content-Type: image/png; name="04b97cd8e505b31acd83af8b748bc8a2.png"

Content-Transfer-Encoding: base64

Content-ID: <04b97cd8e505b31acd83af8b748bc8a2.png>

Content-Disposition: inline; filename="04b97cd8e505b31acd83af8b748bc8a2.png"



...





------=_NextPart_000_0012_C273188E.FCF17D56

Content-Type: image/png; name="920b8471a1ece85299098bbed8022a47.png"

Content-Transfer-Encoding: base64

Content-ID: <920b8471a1ece85299098bbed8022a47.png>

Content-Disposition: inline; filename="920b8471a1ece85299098bbed8022a47.png"



...





------=_NextPart_000_0012_C273188E.FCF17D56

Content-Type: application/octet-stream; name="open"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="open"



R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==



------=_NextPart_000_0012_C273188E.FCF17D56--

Quickbooks phish from Amazon

Posted by Dave Yadallee on
------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" cellSpacing=3D0 cellPadding=3D=

0 bgColor=3D#eceef1 border=3D0>




















0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 
IN: 0px; PADDING-RIGHT: 0px" width=3D640 align=3Dcenter>


ng=3D0 border=3D0>
















border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>






ING-RIGHT: 0px" align=3Dleft>
/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TvvL95lUdHNT6wzBxXCtpIhUdEnz39IXrOMq=

JMCXNhJhWSE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZ=

zkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbC=

oSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObB=

RCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12=

LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF=

8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FW=

WGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB=

19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4=

fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5=

QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1G=

pOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LAqdko-2BTnJM9uJ=

aXOZ7tmBy2DQ1ErJ3kskDeduFW-2BlkjyLIPp02Qy6VXcJDclpOTY5i-2Fs11SoLlMrGy4vpgjj=

-2BkorXqzSwPxGt1zFsV9xaRPjGqXZJ-2BiMXeWP4oidadXUn-2BMdt0yLiWcc9aI5RzRu6vE5g=

rzFs-2BUdAzu62Z9-2FK5cjyWb-2BD3M5Q8KnUH83B8YYs-3D" target=3D_blank>
le=3D"FONT-SIZE: 14px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-=

serif; COLOR: #393a3d; TEXT-ALIGN: center; DISPLAY: block" border=3D"0" alt=

=3D"Intuit QuickBooks" src=3D"cid:04b97cd8e505b31acd83af8b748bc8a2.png" wid=

th=3D"155" height=3D"68">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


acing=3D0 cellPadding=3D0 width=3D600 align=3Dcenter bgColor=3D#ffffff bord=

er=3D0>


























0px; PADDING-LEFT: 30px; PADDING-RIGHT: 30px" align=3Dcenter>
processing_icon" style=3D"DISPLAY: block" border=3D"0" src=3D"cid:920b8471a=

1ece85299098bbed8022a47.png" width=3D"101" height=3D"54">

DDING-RIGHT: 30px" align=3Dcenter>
ZE: 25px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR:=

#393a3d; LINE-HEIGHT: 36px">Vendor Payment - Remittance Advice.
AN>

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Invoice Payment Sent Via: QuickBooks =

BillPay Services.

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">To be delivered by: Bank Transfer EFT=

(ACH/Direct Deposit).

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Delivery ETA: Monday, November 23, 20=

26.

DDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


der=3D0>


















r=3D#339e28 border=3D0>






TABLE>

ILY: 'Avenir Next', Avenir, Helvetica, sans-serif; VERTICAL-ALIGN: middle; =

FONT-WEIGHT: 600; COLOR: #ffffff; LINE-HEIGHT: 22px; border-radius: 25px" b=

gColor=3D#339e28 align=3Dcenter>
-ALIGN: middle; COLOR: #ffffff; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADD=

ING-LEFT: 30px; DISPLAY: block; PADDING-RIGHT: 30px; border-radius: 25px" h=

ref=3D"https://docsviesxclus.com/caqbo/412R005700630639135081/wap/" name=3D=

View target=3D_blank>View payment details

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>






E>










FT: 30px; LINE-HEIGHT: 1px; PADDING-RIGHT: 30px; MAX-HEIGHT: 1px" bgColor=

=3D#ffffff height=3D1 align=3Dcenter>


100%" align=3Dcenter bgColor=3D#d1d1d1 border=3D0>






TABLE>




DISPLAY: block; MAX-HEIGHT: 1px" border=3D"0" alt=3D"" src=3D"cid:5a2f9fdcc=

bde8fc5d477916d190eec86.png" width=3D"10" height=3D"1">

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>


















, sans-serif; COLOR: #6b6c72; PADDING-BOTTOM: 15px; PADDING-TOP: 10px; PADD=

ING-LEFT: 0px; LINE-HEIGHT: 16px; PADDING-RIGHT: 0px" align=3Dleft> 
R>**Standard ACH payments are usually delivered to the vendor’s accou=

nt within 2-5 business days, paper checks are usually delivered within 7-10=

business days. Faster payments are subject to eligibility criteria. Delive=

ry times may vary due to third party delays or risk reviews.
 
M=

oney movement services are provided by Intuit Payments Inc. pursuant to Int=

uit Payments Inc.'s licenses
(NMLS #10‍98819). Intuit Payments Inc=

=2E is located at 27‍00 Coast Av‍enue, Mount‍ain View, C&=

#8205;A 9‍4043, phone 1-‍888-‍536-‍4801
 
R>For more information about Intuit Payments' money transmission licenses, =

including California customers' right to refund statement, please visit our=


s://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj8=

1B264OYNNlpD-2BCTPJzPmKYQoypOAx7KjMAtPUbFoenRPCncYMvvfSpU9pu3g-3D-3DBQr4_7-=

2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZ=

tK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2F=

sCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvnd=

f4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3Js=

cHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pg=

QUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgO=

IH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3=

sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJ=

BW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR=

6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOr=

qW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDcU4SDOIf6EoeKAp1VkVcsd4NphHv=

Gk-2BneNbp836bgMkKG-2Fs3IHTLEmOYr0JQuwn5ypmiKJEerXOfHmO-2B7nHIQ4U6Txcam1kW6=

EuxRUPRZC-2F8-2FbwIJeexl1fV0dmKW5zFgevJCeSmmxiD49W9FVbUJ2M75x6u4uspmMruizge=

hHuL08DGYAeeoU0ZwmOAoobM-3D" target=3D_blank>payment licenses page.
=

 
Illinois Residents: RIGHT TO REFUND. You are entitled to a=

refund of the money to be transmitted if Intuit Payments Inc. does not for=

ward the money received from you within 3 business days of the date of its =

receipt. If you want a refund, you must mail or deliver your written reques=

t to Intuit Payments Inc., 27‍00 Coast Av‍enue, Mount‍ain=

View, C‍A 9‍4043 Attn: Intuit Payments Inc. or by calling the =

Customer Service Center at 1‑=

;‍888‑‍536‑‍4801.
 
Minn=

esota Residents: Consumers are warned that fraud can and does occur. Pl=

ease call Intuit Payments Inc. at 1‑‍888‑‍536‑=

;‍4801 to report fraud.
N>
 
New York residents: RIGHT TO REFUND. You are entitle=

d to a refund of the money to be transmitted if Intuit Payments Inc. (NMLS =

#10‍98819) does not forward the money received from you within 10 bus=

iness days of the date of its receipt. If you want a refund, you must mail =

or deliver your written request to Intuit Payments Inc., 27‍00 Coast =

Av‍enue, Mount‍ain View, C‍A 9‍4043 or by calling t=

he Customer Service Center at 1‑‍888‑‍536‑=

205;4801. Intuit Payments Inc. is licensed under the Transmitters of Money =

Act and regulated by the New York State Department of Financial Services. I=

f you have a complaint, first contact Intuit Payments Inc. at 1‑̴=

5;888‑‍536‑‍4801. Unresolved consumer complaints ma=

y be mailed to the New York State Department of Financial Services, Consume=

r Services Division, One Commerce Plaza,
">Al‍bany, N‍Y.
 
For Alaska Resident=

s Only: If your issue is unresolved by Intuit Payments, Inc. at 1-800-4=

46-8848, please submit formal complaints with the State of Alaska, Division=

of Banking & Securities. Please download the form here:
LOR: " href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvT=

YX227JkDSVWi87adRoCkK3JEOLqfZOw-2BGU8-2FQOLGVb5FvBcuD1K03lXeP1tVlTQWOx9FSLm=

Ippv-2BDagmj81PzBe0TWikGDCtWvfMtwWaPvV6-2Bk6B0hQunMahhLqZj_7-2B-2F6303DPKGg=

WagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQ=

UL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwP=

BrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUisw=

i-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9=

EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08M=

G67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2=

Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8=

aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOa=

k9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIM=

gTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2B=

Ec1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBsOLn3-2FqIUB4CL9NzUQ-2B4bFtScuvVjCyZSaOKBg=

Dpy9wKFEqDeiMTY3fqmVzkECuz2mHVjJtqJ1QzQIcDa2Y9-2BOTRMkfIvzTey4bj3R4vJWoGSsK=

-2FxCMKqBY12K-2BUMzg1LPjztrp1atEA2-2B4nb7PEVwRv1iMjPl6-2B8RlO610-2B8aFWb3PW=

DHSXLtpqLfXC2Bqs-3D" target=3D_blank>https://www.commerce.alaska.gov/web/po=

rtals/3/pub/DBSGeneralComplaintFormupdated.pdf. Submit formal complaint=

form with supporting documents:Division of Banking & Securities PO Box=

110807 Juneau, AK 99811-0807 If you are an Alaska resident with questions =

regarding formal complaints, please email us at
=3D"mailto:dbs.licensing@alaska.gov" target=3D_blank>dbs.licensing@alaska.g=

ov or call Nine Zero Seven Four Six Five Two Five Two One.
 
>IPI is responsible for the non-delivery or delayed delivery of your funds =

until such funds are received by the designated beneficiary, and IPI is lia=

ble in the event that your funds are lost
p">or stolen.
 
Intuit respects your privacy. To lea=

rn more, read our Privacy Statement (
ortant; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?u=

pn=3Du001.C9ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFYwYKK3SiLAxIbx1TNTVsc2U=

CRE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXX=

SSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2=

Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4b=

syPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c=

8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgw=

n1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC5=

4kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzS=

DX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vK=

YIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3f=

FDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8L=

NhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDYBUUtTfsoHoZtTX0CgoNSB=

krsKYGRSlNvIzoqdfkoz9xKznZNXv51NPo-2B4N7Uin4ff3aOrtIkEYvAmOldlhUdHwqoZKIF7D=

wiWbOYjqwPcbTPJdo-2BAMHZ-2FA-2BPvO6Q8D0TJtgiu8u92BZItgCRqRqIwlWihBa-2BFnq65=

inq8NUWQqXhUIanYt7BeZNLJaIigRg-3D" target=3D_blank>https://www.intuit.com/p=

rivacy/).
Visit Legal (
COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du0=

01.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPL-2FnAJO3Dfv-2BKhS4cDavl-2B6=

t_lk_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzX=

XSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-=

2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4=

bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4=

c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAg=

wn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC=

54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlz=

SDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7v=

KYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3=

fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8=

LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBbF-2BZySQWtLMctzyQGYK=

OxRkYKJK4fHvH4biYniUJE52neQkMS6XrivWBs00u8KYqxHUdd2SWX9llrJ4Z2CIsZvyu-2BpbV=

CTOTmwAlssTMcbmH3110UN3PKvtW5gfTmTwgQJwbVr8jqaftvUw74dr1APZLcwE3JyJI-2F0GMD=

r8-2BGs5YQ8kTiA-2BjoI4OsOUn2Mgk-3D" target=3D_blank>https://www.intuit.com/=

legal/) to find out more.
N>
 
IMPORTANT NOTICE: This notification is being sent to inform=

you of a critical matter concerning your current service, software or bill=

ing. Please note that if you previously opted out of receiving marketing ma=

terials from Intuit, you may continue to receive notifications similar to t=

his communication. DO NOT REPLY to this email, this inbox is not monitored =

for replies.
 
&=

nbsp;
This message was sent to
ant; COLOR: #077dc6" href=3D"you" target=3D_blank>you, as an Intuit cus=

tomer, consistent with your
OLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001=

=2EC9ANdvTYX227JkDSVWi87cmREtoVnmlpmot2HEHwMiOEqo28BeWINThlCR-2BpM-2BWjO1Lg=

RrSsJHfip1hCt5nTWKbATfzoUlRksG9C9ScTkV6wJe9FtfasDGvbIdF1JOx5Tq7l164t4Kmhv94=

v61JeFzDbRu0EvnBj976nUcchXEb3udEBJLFQ6JIlJL6nCiCEM7N6_7-2B-2F6303DPKGgWagyH=

spi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6=

Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe=

-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW=

-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2G=

H0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67Hj=

PmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2=

FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2B=

nKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM=

4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw=

76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-=

2FZXNMhW4z9mNLvFaLr7wxQeU6LBhtrr7UK9E9LHthiIZi8bSI0KP4zIfLjMtUeZS09eDf14vsA=

zYcy9yGZ5LodY3r8L62q-2Bq-2FyUqj-2FaP1EE0ZS3oRuIYRDyLEj45B-2BYSWtQF7aIGGxPfq=

Vmstm-2FR7pHx3w2ynHu2GI-2BA8O3iwSIIsLtm1C5TIpHvf6v6kATw4AcrLnElWoK6u3CUjP10=

ZEY1vv4-3D" target=3D_blank>email preferences. If you have chosen not t=

o receive marketing messages, you will continue to receive business communi=

cations about your selected Intuit product(s), which may either affect your=

service or software, your account, or which may be legally required. If yo=

u receive a suspicious email, please report it by forwarding the email to <=

A style=3D"TEXT-DECORATION: underline !important; COLOR: #6b6c72" href=3D"m=

ailto:spoof@intuit.com" target=3D_blank>spoof@intuit.com.
 
=


://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87X9OooN=

HmQG9eX1hhVT3-2FwDPh-2FO4XT40cbsVG0H2B9l7stqNF7ZvpJsZ-2Feiou0Aj5g-3D-3Dg5TG=

_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSn=

wwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco=

-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyP=

vndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm=

3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W=

3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kI=

UgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2=

JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIy=

GRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd=

9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhu=

HOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBZr9dorlmPlG7lhSt8aSiVsIF4=

ADBFiDmI1Xnf35Zv5oGF2G6O9sJmroLNqogtJvR1qKsZBTjbQgMcMo5zODFO277j3Z6GUisPL72=

-2BEJXuM3XRzAFRqd42E-2BIFALyHFGZ3Et7eAImSvCZY4INv1CJ9v5uwHvYJTj9nFvrlfrQFE8=

z5FSwcsTaeDQ4NimHzokM-3D" target=3D_blank>Terms of service

=3D"TEXT-DECORATION: none !important; COLOR: #077dc6" href=3D"https://u7445=

749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TyjSWhU6mXtBhb=

2dA39nAy2CX-2BeKm8Of2v36wj-2FkNihApB__7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM=

-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkR=

L-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqG=

lcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rg=

XqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXff=

Tdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5s=

ZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtC=

owbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3=

xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeK=

yboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvv=

GF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvF=

aLr7wxQeU6LA6LF936fLFZ9Ap2yIPlDNTA4EleCzTiqOZdLgSb8LFbYz339wg2YeKsQG5i9iLWj=

lu-2Fp-2BaFAk7h-2FIosxKyBBHieUYGzS-2FkAGCB5eSQRzX1zw5WCH69hjmPlg2Qwn6-2FslY=

nYZOAiQEPpOO1nE-2BQ178pq5VTBA1Dk8fB9AOHrdCrmZrGOmPtTRPWNJolUBOk5pc-3D" targ=

et=3D_blank>Security
R: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9=

ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFaltS2ixeDHtrx7SIMALVExVjcXzGnrTjXPe=

nrSf4OsPw-3D-3D_v0S_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22=

Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr8=

9LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC8=

4-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQS=

L8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QH=

SAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dc=

wLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3H=

BH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4=

BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR40=

0tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPa=

pbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDr5Qo-2=

Fwv-2F54enmRHj-2FgM5j6wtCjR9MuEFcKaAoIWRLDEW0na2iCuQ5jmmwJGUez8byhYlAJOIYba=

pdeWk09X1cOqJLa50TOFXP9qniEYDbEAZd2l9-2BuK8XqnSoG2dOe3UIQStOBGOhb9RiCumc9H8=

-2BJCgSV23KR-2BXXarlNpzVf7-2BgsTT0l6bg-2FIxrof9SI-2F3s-3D" target=3D_blank>=

Privacy Statement.
© 2026 Intuit Inc.
ON: none !important; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.n=

et/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJOzx4jSS=

9ya01x-2FKBMsCq57-iv_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo2=

2Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr=

89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC=

84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQ=

SL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9Q=

HSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167d=

cwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3=

HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ=

4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR4=

00tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBP=

apbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LC-2Bs6=

NM-2B5QVbXyXN50UEby0eOfdtNvTpARhiEdAMMWJKxudjkR76ycvVH-2BL7F-2BwUXgls-2BoWm=

QXQHvAoJdWZQX5NIEm17g8-2FuuRULEkfA4DOhvb2CNc7-2B8jbqnw0iUm4k0KlxAEClhUZqtWQ=

M-2BPuMa67JVowyDah2bWmS-2B-2BaIs1pmjVbZiv0RRd-2F7-2BKxptsxtm8-3D" target=3D=

_blank>Trademarks.
2‍800 E. Commerce Center Place, T‍ucs=

on, A‍Z 8‍5706

ING-RIGHT: 0px">
'Avenir Next', Avenir, Helvetica, sans-serif; COLOR: #393a3d; TEXT-ALIGN: c=

enter; DISPLAY: block" border=3D"0" alt=3D"Intuit" src=3D"cid:469ad354ce8f8=

f0d1a6c802e6fc15245.png" width=3D"600" height=3D"50">

ADDING-LEFT: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px" align=3Dcenter>
class=3D"mobile_dualimage" style=3D"DISPLAY: none" border=3D"0" alt=3D"" s=

rc=3D"cid:7786c5779cdd5b1386ea260e58a15c7b.png" width=3D"640" height=3D"241=

">

alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" width=3D"1" heigh=

t=3D"20">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">
0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 


 



!important; BORDER-BOTTOM-WIDTH: 0px !important; PADDING-BOTTOM: 0px !impo=

rtant; PADDING-TOP: 0px !important; PADDING-LEFT: 0px !important; MARGIN: 0=

px; PADDING-RIGHT: 0px !important; BORDER-TOP-WIDTH: 0px !important" border=

=3D"0" alt=3D"" src=3D"cid:open" width=3D"1" height=3D"1">



------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: image/png; name="5a2f9fdccbde8fc5d477916d190eec86.png"

Content-Transfer-Encoding: base64

Content-ID: <5a2f9fdccbde8fc5d477916d190eec86.png>

Content-Disposition: inline; filename="5a2f9fdccbde8fc5d477916d190eec86.png"



iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAAXNSR0IArs4c6QAAABdJREFU

KFNjZCASMBKpjmFUId6QIjp4AAppAAuXjCs4AAAAAElFTkSuQmCC



------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: image/png; name="04b97cd8e505b31acd83af8b748bc8a2.png"

Content-Transfer-Encoding: base64

Content-ID: <04b97cd8e505b31acd83af8b748bc8a2.png>

Content-Disposition: inline; filename="04b97cd8e505b31acd83af8b748bc8a2.png"



...



------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: image/png; name="7786c5779cdd5b1386ea260e58a15c7b.png"

Content-Transfer-Encoding: base64

Content-ID: <7786c5779cdd5b1386ea260e58a15c7b.png>

Content-Disposition: inline; filename="7786c5779cdd5b1386ea260e58a15c7b.png"



...





------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: application/octet-stream; name="open"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="open"



R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==



------=_NextPart_000_0012_269F1377.E54A8850--

Web/SEO/app spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 13:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xRESz-00000000OaX-2qRh

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 13:58:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 13:58:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012053.outbound.protection.outlook.com ([52.103.66.53]:15834 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR9MV-00000000II1-36AI

for sales@nk.ca;

Wed, 11 Nov 2026 08:31:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=XzIbIqedymH9O8EUdlr43x/Ckyrr7CvdbsYBlxCUYIDDnBkScfcyz1MqmclMggdLWijbmTFd/yf9jSerzFAM3U3P7r+0A3wgRaaMpCOqytu/lnVIKAFGJCaGHGBWAoh4jGJTkJWPeKHS+p8amkmmYCNyaj+vWrK7DwMJjZEQ+XC77H+X3yQM/7nhfeM2CcfABrjyjpKv6wUqpaL/kUYm6wMb0UvjwxGYG70CyJAZs9N8NFNmWxiPgn9b5ydHqzS314OigUCnXaGsXBkEo2gTLLXOBXcvWyrfqPywDyLMXAuyMOLEzYgc7b1wFswfOR8HdT1S2mfIcpuNirEMcyJ0BA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7NWXTCoUcw6DmhwC9iZWjUOguY3phFySeFev6EGD+ls=;

b=WteCIYHQWCNLe5SVezrpWimn4JkHhTSpYFHom67RCVKQ9tQFIMdIxtQ5HaAMTm99ES8XxeVoGCwUhEKCVMZ3DP1n2Iz/SW6cLBNC1J66W1kik+SpKhaGQJOIojCa51aTYF4bI8lPRw299XQVPwpPai6QPYl3llxAsXkw9Yy8ajMF02K3wU/pDSJHmFBRscE1sPwA8C9mwk/czqhqC5+TKji8khxIWUSfTU7//iMJz5Y+nfT7OUiDM0J+xwD2rj8Ah2MeL1Jp3RNDa+Os35puUpWIUee0Ju2IAD4vnXDnhtGY2aNL9bm61pmux94/TitRtE4sAb+xyog1zr1V5Bt1vw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7NWXTCoUcw6DmhwC9iZWjUOguY3phFySeFev6EGD+ls=;

b=c2aOSFJGbe7ZJ8w+0ThN833mq2PiGQKAaf+fUIkZW4aTMn+e89IjXd2ojA15MJ08EE8lmqEnGboC1H/fYMZtAuXzz3aE3rciiZl0cREwLRHg7QfI955fSTzih2NmJ5nartJOJcVuUw62Jg77GF8ryf2UXZYaC7mgrQ+d2zk714J0dH764geZN3IN3dpV0KvSNHkk5G98roQYdkLCj3+Sz7MHfzIBvWqhiLKAJnutP5mZ7JnUv3yy1yEp7HjE35y4E0cD4Bh20o9w47Nc9UOd96U8rPMAGdJREgrNJmsrcLiq7Qvi0+33mpoessYsoR8LaCLtlKP9Ax6Vo1JEKl7qMQ==

Received: from KUYPR01MB8090.apcprd01.prod.exchangelabs.com

(2603:1096:d10:92::8) by SEZPR01MB5125.apcprd01.prod.exchangelabs.com

(2603:1096:101:e4::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.9; Wed, 11 Nov

2026 14:30:17 +0000

Received: from KUYPR01MB8090.apcprd01.prod.exchangelabs.com

([fe80::5742:3bab:9c03:4108]) by KUYPR01MB8090.apcprd01.prod.exchangelabs.com

([fe80::5742:3bab:9c03:4108%7]) with mapi id 15.21.0615.007; Wed, 11 Nov 2026

14:30:17 +0000

From: Aurora Ross

To: Aurora Ross

Subject: Re: price

Thread-Topic: price

Thread-Index: AQHdcEV00nPB2FIRTU2HQOaMxzIvhrco8Tvh

Date: Wed, 11 Nov 2026 14:30:13 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUYPR01MB8090:EE_|SEZPR01MB5125:EE_

x-ms-office365-filtering-correlation-id: 18f42ad1-88a8-4ca5-f813-08df40004e41

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|16051099003|31061999003|55001999006|15030799006|37011999003|51005399006|19101099003|8060799015|25010399006|19110799012|2604032031799003|8062599012|704163111799003|3412199025|440099028|102099032|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?hFbLei/81FHYnk/+xqIaHa7PWEGl6hu/qdiNANqeP7IAl6X+etiunYwtFOBY?=

=?us-ascii?Q?55CGzpa71VVOCb3y6n6K6o6p4qFzk5N6XLQ89L5zlLnrTcpUBLu+2qereViB?=

=?us-ascii?Q?tbFXFMsvoKefajeqtLLPtdAKp5htN3OFyGCSeQnmlf00oGVGrgScET9H7yO0?=

=?us-ascii?Q?ffOcsNNo11AP/9XZoMkDHn1OhtU3dRf7jwWM9oDgTYcaz8I1/IF7Q5i++6DR?=

=?us-ascii?Q?N+GjdhjOxIe0+gbi48RO39uzC2y/fya4E+bZ6Yj+h4kIdP3yLicwp/lbHI7b?=

=?us-ascii?Q?02jc3z2PPVJqYHP28T57c9ft474r1yRs4kWKoioSdoqvV2/3TLA53JMpc9IB?=

=?us-ascii?Q?kr+F+BDPQ4EivClEdQmCUC//lHUzwMIRr79umvV8EX8HhD1A19XV8qlHZf8T?=

=?us-ascii?Q?pAfPuY8Jj24ryK9WGtXIlbXijl64T2MGH6/LLp1VeBCpG4x9T1MgEodePGXr?=

=?us-ascii?Q?KJjTnM0kWFUaQQRYSN4n88cgJx3yvHTJbYsmkBTEG5vViYl5lfmdmjEA8dbE?=

=?us-ascii?Q?JEPSzXtzHrLeiJ6lAzPItMb+nydU7xfBXKFCV3EjHPRsTNmwCzDI10PhgTmj?=

=?us-ascii?Q?nbDc+XxR4sE8CHxgbYYaLeWVY9XyfYAk+HLcvRIsKnTCEqHPWb/Px2a74M6N?=

=?us-ascii?Q?PR9hNJjyvNM75qWyhS8RkofjAx0diaPbZh4YUH4FhSObcHOlAo9fx3Tq8ONn?=

=?us-ascii?Q?hOwj8DrNK1rzP3HjvXnkqSCyAxBHJ3hgPEaaSKmvAr5HCCNA8V0SnaicO669?=

=?us-ascii?Q?ecKZw0dmZB/GL7Nfk3DUiAKJGZiuoPOcji8jymF2VUTO6VnZF31K6waCZUTX?=

=?us-ascii?Q?GgUKqYVh4RZsrr3jJHsd9cBVk/EDNdsvgDqzLD98de9V+eCcgegNZMEnFSAo?=

=?us-ascii?Q?vFnBwu0ebVUwI1dKc2BTotGd4N+XX0GV5tVx4oOg27unYVRaH3JfKqZjvbwz?=

=?us-ascii?Q?puaOYGy6BoMLG1+Mj/MJ+z6XuOS9WUia04ZlFy8W8x+ipM5iBl2AvQDx9YjP?=

=?us-ascii?Q?kQuerGyESWv1Y9T/l63HiV+vMo6N7KFehzC1JZdKdff58gCdPJaqMsbxf/+l?=

=?us-ascii?Q?gYFZrpA4obabKBJNv+oZkIKJJms3FtTo8Y15+bWrauxUmwF1LksqIoznIbfh?=

=?us-ascii?Q?Rkq9aD+kqhdTcmc0DKsyp1h+amy1oitM0n1wzzVxUw91p2sGokLHmEyBWnZh?=

=?us-ascii?Q?diZULZoBT+QRY4ZH?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?0uyExoUr0XhHi8WAM63LEFUESm8zgwKaAJ/T+zuQ0YZfxsiiARruUuS5bvb0?=

=?us-ascii?Q?IBkmwOA0RAECTGEoBCD3CXubvsKBRIXnx+bUVXRZas7rCBiklcOMBstE4wTW?=

=?us-ascii?Q?Mdc5Bl947MXW9pYmpRLWCgzykGs4umbRWGTMvpWPBywL9bvfRwozf3aPd1LU?=

=?us-ascii?Q?OgkIvmIRw8s/FS1PkbiExY4GrgpozmoeHDBa+2Tc7KJ5UEA9AJqYtTQwO5k0?=

=?us-ascii?Q?yuPtl+zw9nfGN5+y/pjPRuMA2gvCkTLHPQqjGzJfoTnJ05ByqVVMM6lwyhHM?=

=?us-ascii?Q?CRRwfdpj3BPrMy6tctYLD7PHKo/8ptMa8/1lsnLSScKyuGdZ8RBziNWBnAJU?=

=?us-ascii?Q?uiJWeRXGLgbzsqdoCAsEFMINDKYRPayrhiK6Y4nEvFnzh21l5ESGQumHcXj0?=

=?us-ascii?Q?XwTgMctdZEA6uuzWvOlXr8aYzLIqyjHSYnXPB87XlBfP9S4V83CE0df9F3YO?=

=?us-ascii?Q?RR7XHPXfwJ7k4QCx2AnX+vk1/T6U7U6TRfhknA0aMgCnmrJWj1Aj788LjMVn?=

=?us-ascii?Q?hEpGjHDZx6HdJz4mcuOH6r5ojtg9Xa42kRS1x78KIC0Mw5FmAglwfb4TzT6M?=

=?us-ascii?Q?GHLVs6X85Ckw8rGiMcHhAC/sGrrF4eRpNhd3+1tZYvhLfmM2hYiuZow6J08l?=

=?us-ascii?Q?wGcrUeSzigAT0XbLDIPcYmzG8/gShQ/hShJmrW5aIfbqgnqCW+DfkVjqZfJm?=

=?us-ascii?Q?nhDaul4F812l3ZG1ZpRAK99sjTDEnf4BS0scJPMsLZ8rmAATT02/FVbwEqdM?=

=?us-ascii?Q?uN7U0+cwoGSlGnM6wvql2z4dit6W9jNWkirT653oz4GXsh5ywhO9uX0OCeUU?=

=?us-ascii?Q?aPCVkOWseXZWCF8XaNEwkGVHxaKAwN1cqpt2Gv14TQZfcz53SzK97RQEyOJp?=

=?us-ascii?Q?s79f4X3tl9Ycyo/18aKtJX2Zn3o3S+YgiC8IFAprJTnZncrPhTgUx0J4KHs1?=

=?us-ascii?Q?1aMkj9HhoviZDHlpBcBigh6pQqt8UB5TcXjKN81hl6I2eOFwRsA3lTbymFP9?=

=?us-ascii?Q?jI/1hF2JLO+ZqTWSqj1f1uBNEVjBQ84+mAMy/n5hMi53K0JgLDxex1DDvN0M?=

=?us-ascii?Q?xRAnM7sqHzYGjc4yW761vDL3MO3wKkrVDekk0BHICotcubnUC8TzBbYcUY7O?=

=?us-ascii?Q?hNCeX4wYnQslrpXHLKyI5wg/qDGhtbyfs/mNuy2CuC6HRiK5uwsWYJCK5DOY?=

=?us-ascii?Q?96MDw/O2pGHqVo1fjytKztkfyLEdJ7p95G9q+B6xnk+cYcuOf11P89zPLBjI?=

=?us-ascii?Q?acg0WqTNKZl3LLc5WS6Yp6wADm8s7JfZZAi+y/4JM6lSVTBMM3erYAcNBqtU?=

=?us-ascii?Q?SVUVGeHVRQa2UNfEDMvuL7+uTc9fBjJ9U8VklG3Ijm1eI9daaoU0kMh5GmIG?=

=?us-ascii?Q?nRNe4+55YtiI2jfSFvTk6vCJOOURz3+LeX9MgQ78RGv0yAs7dXBT8xhHoEdE?=

=?us-ascii?Q?DtcJuB4vpCQYINZtcIdamVeDnQKLPl57?=

Content-Type: multipart/alternative;

boundary="_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUYPR01MB8090.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 18f42ad1-88a8-4ca5-f813-08df40004e41

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2026 14:30:13.5125

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB5125



--_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Yes!



Can I send you Proposal and report, showing how we can help?



Please Reply "Yes or Sure"



Thanks you;

________________________________

From: Aurora Ross

Sent: Monday, November 9, 2026 12:27 PM

To: Aurora Ross

Subject: price







Hi,



We help business get found more easily in Google search results and in AI-g=

enerated answers (Gemini, ChatGPT, etc.)



I can help your website appear on the 1st page of Google, Yahoo, etc.



May I send you the price list and SEO proposal to improve this?



Best,



--_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Yes!



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I send you Proposal and report, showing how we can help?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Please Reply "Yes or Sure"



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks you;







yle=3D"font-size:11pt" color=3D"#000000">From: Aurora Ross


Sent: Monday, November 9, 2026 12:27 PM


To: Aurora Ross <aurora.graygraph@hotmail.com>


Subject: price

 









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

We help business get found more easily in Google search results and in AI-g=

enerated answers (Gemini, ChatGPT, etc.)



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I can help your website appear on the 1st page of Google, Yahoo, etc.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

May I send you the price list and SEO proposal to improve this?



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,












--_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:45:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6lC-00000000Ja7-19fE

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:45:02 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:45:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej2-f3.google.com ([74.125.228.131]:40627)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR4Vp-00000000M9T-35ln

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 03:21:04 -0600

Received: by mail-ej2-f3.google.com with SMTP id a640c23a62f3a-c50485c0cb8so98586066b.0

for ; Wed, 11 Nov 2026 01:20:07 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1794388800; cv=none;

d=google.com; s=arc-20260327;

b=a1T8gKG0pQbJo0ajyQ/S7wWXX7RyxaLCVR3RPxGVoKjZFKo5DiNkCFjOTJAeYTs582

C+KhpJslbQpxNjlQDos7nTyzKgb7wR9VMA6ivqjqxeM5FzFoFjnvW21fovk2gM68Vp8W

Uo3HN+RdJ+ZvxUsbRUvSqlEtm+1BcIG68IQE4XMONj8C4V56JuJKROlxm/zyb5lWkxU2

Hcy/cy89R7cqduo+D1cFgBpGfMBczdNtDesLJ9sPTqDFRa2/DeBa8WL+PlSMHSrWVd2i

olR2OosdV2/63yxl0ChhVGad+sWhGlywZ20oMh1ZEuGvrEdT4yPNYFxVZeTkePc98E2n

2fUQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

fh=cK6liuWNhQOyaO6o5idOempiAiSnPc5gnNgpewLK4+0=;

b=OPPDloXPHQ2otrl/STTm/59qzkoFSXO77JU6FK+GahiFH4y1TFiyZwBks6immt9Cv2

p6x5tJRVtaWgeC6/nRkbF4MsKE+582hR8COLNmavVk4qQIxDh8H08FOjpq6eSmARw4+D

vsR85O/n7wTBB8/ZKYdQkqDv+JIgSBEjQz3EniMo9s9BZ+gaVtLOI9pjLkY3mJkS7bBS

IDjM1mDjatMfhtrpxrVxhpth2B2l72hl2SGuBweqWNL0w8l+cgO8eydME6XINsCjCqhq

xKOo02SKI+nbCjgcQ0tECdI3QDycfCszv+VNMP104Mv/nTiTyOrH+uD0cKzx8jtvbe6X

iEXA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=noun-edu-ng.20260707.gappssmtp.com; s=20260707; t=1794388800; x=1794993600; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

b=RTJnt8cuNkyDUsnQDX/IZBQqpJ2lgRqydIFvA68tG2qwos0P3AJ8T0uumRN6L6IjOP

LDqXSGrbI1/LDbzQcd926/3dzcC5nMZut3LWfSzn4TTLPleaNch+ZwItmHhCKTuv0LNA

E62+On+QqK4N9IG6/TkisrnWJsNL3a4B3YQcriaWfyF4DA5mA+E5hMzo78FpfXjVaalR

Hj4qsoqptJPSU8mwmtlkCpocZhm28suQ/Ja3MU077YJD2J2UdXIwg7N+06AbWJlvjbEF

tqB29b4k/EjG47MGr3xQdMKMwlptbuUk7OCh3nMFxGv0mHv6DLxPCubR5sz977De6C8l

JGFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794388800; x=1794993600;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

b=lyGNHNcK1fXZFZrLx1eUpftP7Fri6pLzCv0IJnrWXUYNZdKWe6ZJi2THSxNEfOZWez

LCWZfOfHXhlKDVjszpR/r3QclC3GmZMjqKImu7t1EoOWCO4FdAXHjaZSOftMyVwWpuqR

vP2V7cB3o/ArW7AdVBKFEiYWiHKpwQdWi/ok7yQCTZlPo5CXWdbDrYtDRID6dWQrVRNa

2HcCP+wdIs1ltANQTN37k64SNDzQKCwCi9k1DudSh/Le8bMIClNC0npQkjMDNauTHWy3

BdjyP5zCcGr894W7t8wcN2OagL8N+jgq/Am7GwRF3AHBFIp2p9tVG8v/70/ZAcLZvMxI

80BQ==

X-Forwarded-Encrypted: i=1; AL+hErGvVZaGEEusIS0ElzmWTAaVgNc0PUVNElM5lHS6U+vkDKXCxSK5zgOa94wgCScEHhNktBu7PsM=@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z8W1dLAnjMVyOUFf0uB6TxeamoE6QfRAPjwnSQwakNEa6AD33jQ

Jjez/rlreLnXGQbNu9HAuH7u/y2+CL/uEP9XEP4wH9XYVlD5r65B+1/arosIbUg/QK8qNwV1riB

OhO0oF3H3pdWU6I2dKvcKCfWdAbktys7DRye2N6YEnR0IsNnMTzMDbKYgViJknNUeHavdNfeUV0

7vXkk9dQvfQwMBJwX+xSGcEfT8IyU4

X-Gm-Gg: AYBFou2qWhiXMaSlSaB5Tt//oALM/DqQJSOc9fbcxUL75UtOjk7pVB23Ifz+ppMl2hp

qx56QlqKIpQuZ1qexy19RDTSWgwTWGUfHVIT7+jB+P/ysNiMy9JdXEszRsiKdSKMmtvh4PW3kZP

74R68swWqDAkROYiH3csC+qWpjjjiPesRv/6i6ZMCk2evaZeZG/6V/ZufFwQZS0kcNzrPF+6F1m

sd4mkWjFaoLiwQ3/8TNJtH68BZ802T3on7K1urmVQBDOAhnUrozOMYfn7qfJy4I2YXyF3EXeoSv

MLcseLLck4FzQ+FIC5cnUJh7IyfYSCyMIzWDRqA3xte2awPazVH7X6uoWgrsSKc/70HsRv0IA2O

LaToO3+6qeFRcqRF4VsQBGl2NhlGR4PwingCnohxvUpZJVAKz+MIF6BygdYHCs8E9yecO8O/oYS

FmjTbPorRUqWGp40c2eaZgCBQadHI2I9RHqWR/12rj

X-Received: by 2002:a17:907:1c9a:b0:c29:f5d8:9c78 with SMTP id

a640c23a62f3a-c5066b5f523mr130670266b.39.1794388799714; Wed, 11 Nov 2026

01:19:59 -0800 (PST)

MIME-Version: 1.0

Reply-To: mj6690849@gmail.com

From: "Mrs. Mary Johnson"

Date: Wed, 11 Nov 2026 01:07:58 -0800

X-Gm-Features: AclHuK__SRYTIqKmvW3KqBhWic8POsEMl_CF1I-V2ifD6jGP-dOFzevy2fwha2I

Message-ID:

Subject: Trust

To: undisclosed-recipients:;

Bcc: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000ff0ab2065ffcb2bb"

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I know it will be a great surprise reading from me

today but consider this a divine intervention. My name is Mrs. Mary Johnson,

a widow from Milwaukee, WI 53204. I am presently writing to you from my [...]





Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.131 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.131 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.131 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mj6690849(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Trust



--000000000000ff0ab2065ffcb2bb

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



I know it will be a great surprise reading from me today but consider this

a divine intervention. My name is Mrs. Mary Johnson, a widow from

Milwaukee, WI 53204. I am presently writing to you from my sickbed because

I have been fighting cancer and the doctor says I have a few weeks left.



I want to entrust my money $8.5 million dollars to your care for charity

purposes and crave your indulgence as a concerned individual to help use my

money for charity and also assist the poor with less privileged in the

society so reply to my private email (mj6690849@gmail.com) for more

information as I'm not always online due to my health and my late husband's

brother wants me dead so that he will claim all my late husband and i

worked for.



I will tell you more about myself and what you need to do with the money

once you receive it. Give me your word that you will not betray my trust so

that i furnish you with more details about the Charity Funds. Please reply

now as my health is pretty bad, It=E2=80=99s urgent and very important you =

keep

this email confidential.



Have a blessed day and do not forget to pray for me.



Bless you.

Mrs. Mary Johnson



--=20

Disclaimer: This email and any attachments may contain confidential,=20

privileged, or sensitive information and are intended solely for the use of=

=20

the named recipient(s). The views, opinions, and information expressed in=

=20

this email are those of the author and do not necessarily reflect the=20

official position or policy of the National Open University of Nigeria=20

(NOUN).



If you are not the intended recipient, you are hereby notified=20

that any review, use, disclosure, copying, distribution, or reliance upon=

=20

the contents of this email is strictly prohibited. If you have received=20

this email in error, please notify the sender immediately and permanently=

=20

delete the email and any attachments from your system. The National Open=20

University of Nigeria accepts no responsibility for any unauthorised use,=

=20

disclosure, alteration, or reliance on the contents of this message.



--000000000000ff0ab2065ffcb2bb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

I know it will be a great surprise reading f=

rom me today but consider this a divine intervention. My name is Mrs. Mary =

Johnson, a widow from Milwaukee, WI 53204. I am presently writing to you fr=

om my sickbed because I have been fighting cancer and the doctor says I hav=

e a few weeks left.

I want to entrust my money $8.5 million dollars =

to your care for charity purposes and crave your indulgence as a concerned =

individual to help use my money for charity and also assist the poor with l=

ess privileged in the society so reply to my private email (
to:mj6690849@gmail.com">mj6690849@gmail.com) for more information as I&=

#39;m not always online due to my health and my late husband's brother =

wants me dead so that he will claim all my late husband and i worked for.
r>
I will tell you more about myself and what you need to do with the mo=

ney once you receive it. Give me your word that you will not betray my trus=

t so that i furnish you with more details about the Charity Funds. Please r=

eply now as my health is pretty bad, It=E2=80=99s urgent and very important=

you keep this email confidential.

Have a blessed day and do not for=

get to pray for me.

Bless you.
Mrs. Mary Johnson







Disclaimer: This email and any attachments may contain confidential,=

privileged, or sensitive information and are intended solely for the use o=

f the named recipient(s). The views, opinions, and information expressed in=

this email are those of the author and do not necessarily reflect the offi=

cial position or policy of the National Open University of Nigeria (NOUN=

).

If you are not the intended recipient, you are hereby notifie=

d that any review, use, disclosure, copying, distribution, or reliance upon=

the contents of this email is strictly prohibited. If you have received th=

is email in error, please notify the sender immediately and permanently del=

ete the email and any attachments from your system. The National Open Unive=

rsity of Nigeria accepts no responsibility for any unauthorised use, disclo=

sure, alteration, or reliance on the contents of this message.

--000000000000ff0ab2065ffcb2bb--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6l1-00000000J6u-2MbX

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [207.57.121.169] (port=57539 helo=mk.ukowsy.top)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR3zy-00000000Ifa-1vDC

for sales@nk.ca;

Wed, 11 Nov 2026 02:48:11 -0600

Received: from SK-20240731QRVM (123.144.84.56) by mk.ukowsy.top id hugls00e97cq for ; Wed, 11 Nov 2026 08:47:05 +0000 (envelope-from )

From: "Seren"

Subject: Custom trays & lidstock =?UTF-8?B?4oCT?= quick intro

To: sales@nk.ca

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Sender: info5@mk.ukowsy.top

Reply-To: wityk.Mike@witykpack.com

Date: Wed, 11 Nov 2026 16:47:05 +0800

X-Priority: 3

X-MSMail-Priority: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

Content-Disposition: inline

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, We're a sterile barrier packaging supplier

for the medical device industry. We focus on one thing—designing packaging

that works with your device and your sterilization process.



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[207.57.121.169 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[207.57.121.169 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.0 XPRIO Has X-Priority header

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} Custom trays & lidstock =?UTF-8?B?4oCT?= quick intro







Dear Sir/Madam,







We're a sterile barrier packaging supplier for the medical device industry. We focus on one thing—designing packaging that works with your device and your sterilization process.







Products:







· PETG blister trays



· Tyvek® lidstock



· Sterilization pouches & rolls



· Self-seal, header, and flat bags







Why choose us:







· Packaging matched to your sterilization method



· Fast turnaround for trial orders



· Stable supply with consistent quality







All produced in ISO-certified cleanrooms. Let us know if you need a proposal.







Best regards,



Seren



Wityk Packaging (Shenzhen) Co., Ltd.



Email: sales@witykpack.com



Whatsapp: +86 18716641670

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6kn-00000000ITo-0iEG

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from c4-17.my-control-panel.com ([23.153.104.17]:52251)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR1Xp-00000000Ptn-2S3y

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:10:57 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=mairesdafrique.net; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=MLo6RW4e5/2Uh/YhtO0IzyBVmdq22wmE1vdq30L6EQA=; b=jvpmPB952a6LXanj0TuTuhmtOl

uVfkN+wFuzQpGZlJu0OP3MYpr2j1PtWnTRCWalycE+NGQU1bToI80EKg8lToF+Ooxr+o7queH6BBn

P0pBdk0aFBBuQlHiJZwtS/JB98/+2J0u5R4HNVp87UJ5PJ9ALNWrjaeSd8FIyjJ8yAgQQgxTIhByX

AqGdxRsZLc/ZwH+S+kjq5MV1uyd/wVo7Yh0xGk1SnV0xIjnZ12GCsBv1EiwMPgjvYSkza1i0ek/Bh

Vl7q3yDYQpFduz+Pc0eKY5OKNr4lMjD+bMZt1PdxUouUDolnRgz4QMVad324ShBEIwgTntSEVbsj7

4OrE7Xtg==;

Received: from [107.149.8.131] (port=49422)

by c4.my-control-panel.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xR1Wn-00000006utb-3vZP

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 09:09:50 +0300

Reply-To: timothykolb.info@gmail.com

From: Timothy Kolb

To: doctor@doctor.nl2k.ab.ca

Subject: Hello Good day

Date: 10 Nov 2026 22:09:45 -0800

Message-ID: <20261110220941.588982BF64CEF504@mairesdafrique.net>

MIME-Version: 1.0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - c4.my-control-panel.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - mairesdafrique.net

X-Get-Message-Sender-Via: c4.my-control-panel.com: authenticated_id: access_jmovh1327@mairesdafrique.net

X-Authenticated-Sender: c4.my-control-panel.com: access_jmovh1327@mairesdafrique.net

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, My name is Mr. Timothy Kolb, Manager In charge of Foreign

Remittance department of Westbay Trusts Bank (WTB). The main reason for contacting

you is to propose a business cooperation that will b [...]



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.153.104.17 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTTO_DEPT Claims Department

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

Subject: {SPAM?} Hello Good day



Hello,=20

My name is Mr. Timothy Kolb, Manager In charge of Foreign=20

Remittance=20

department of Westbay Trusts Bank (WTB). The main reason for=20

contacting you is to propose a business cooperation that will be=20

of mutual benefit to both of us and requires absolute trust and=20

total confidentiality. To get down to brass tacks, I want you to=20

accommodate a large volume of funds worth (US$19.5 Million) which=20

I want to transfer from an abandoned account to your personal=20

bank account, It is 100% risk free.



If you are interested in this proposition, kindly respond back to=20

me through my email (timothykolb.info@gmail.com) So I can give=20

you=20

further details and what is required for our trust, We will also=20

negotiate an appropriate compensation for your efforts.



Yours faithfully

Mr. Timothy Kolb.

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6ke-00000000I6Q-2Uh5

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:28 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012057.outbound.protection.outlook.com ([52.103.43.57]:24294 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQzyT-00000000DoN-0t5n

for sales@nk.ca;

Tue, 10 Nov 2026 22:30:21 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AOZGnB40TevjtRQbc4YCNbobhlllSMf1AcASwPjAgTWFIQmKcMqKTJs8qtTImC4qcvJsDdDXG6lHTd8YFABYUVzJ8mhpq5M/+x4TH8Ud58HTAi0bKWjAeR1qxVFo0GiOdVOfXw+9077pnRJHDMyRtej3IYtdPdJZDH5t2kghhKZ+rJYNWqaXlOqQQpsNQYaS/2MpfPzwOT2eh01EnG7idd+MQu0HViliOKXNWKAcCU70hfv9HbKtoZ43WXpp7bZUsf6Mb+rKj1P570OI9HHGo//EeiBSMRyZ0FwmRk2dybA9s7/7AdkObM7Hc3lYASZY7snMujUplCZxhZU39uihgg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=E+j0FNth89rxrRq0j9nuBCI9O1kDK3eGCwFzzl2H0MI=;

b=mCOamF8wJr86cMqKbUfHb28QYq4HqmzM0AXnWtaPdCZUOH+xdB/Awh6CluDO9bSF+x0XhDRgE41j/ap5t5iwo8Ani7/eutRTxSSOAu3uBPEju12zktrOx7tSJSycehcp6DmtpDEldHT2x/XQd9sSg+syC6pXI6rPkE3OzrseEOoIOMNkc+L+jByB9jIrajovKNKWcAfR23lWADwY8xJAYcLDxtPzzIPlMhxq5711sQKe/Ntu0sseGaJMj0uX/xwooYqzortURwHjx3YiDP81M/cOKUJSfGERkCaN8NZzCku+KiAasM2XXEf2l3GRRUNuCE9TpLEXnyx0kE6lKARzMw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=E+j0FNth89rxrRq0j9nuBCI9O1kDK3eGCwFzzl2H0MI=;

b=jqqyYi2n46ywSFwqn6puotVovd4le7EumFUSptAjKol9gBBPMT27aLR+diS3fN5AmGxoiEYaj8VXjtN1nOtDAgBpq9NpsKCgdJmkF6AGdXEhmaNHX5i2nGyG/8gzKMfuqXI35ryBYJwZKRDGLYkTGEZ968gL3zUE5iQ+qIY2RSymMVLzg9kr9oqEsSv4DambajBM4KKjScBW4RUa3mCr1XfmOhtnhZJLhuFvjNgJ3KmtlvUWy21xwrSmytvFSlxo79hSOOpT+GM7tw81orkSk3zkQhu7to98A1dhbmBCaBKAVgZcY4/8/tD1S5Lcb3FMbjYS/wn76p7ercrVgk4R8A==

Received: from TY2PPFFD5F4C141.apcprd06.prod.outlook.com (2603:1096:408::7b3)

by SEYPR06MB8221.apcprd06.prod.outlook.com (2603:1096:101:2f1::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.8; Wed, 11 Nov

2026 04:27:27 +0000

Received: from TY2PPFFD5F4C141.apcprd06.prod.outlook.com

([fe80::cd25:c570:d860:4217]) by TY2PPFFD5F4C141.apcprd06.prod.outlook.com

([fe80::cd25:c570:d860:4217%8]) with mapi id 15.21.0615.005; Wed, 11 Nov 2026

04:27:27 +0000

From: Puja Gupta

To: Puja Gupta

Subject: Re: Proposal

Thread-Topic: Proposal

Thread-Index: AQHdUAx7XFEoY2cFk0G8A1epedFifLcoiWWi

Date: Wed, 11 Nov 2026 04:27:26 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY2PPFFD5F4C141:EE_|SEYPR06MB8221:EE_

x-ms-office365-filtering-correlation-id: 3057dfab-2a91-4b9c-85cc-08df3fac172b

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|15080799012|15030799006|31061999003|22091999003|24121999003|55001999006|24021099003|2604032031799003|48001999003|8062599012|8060799015|19110799012|25010399006|4140399003|56899033|440099028|3412199025|102099032|12091999003|260806224601699006|43065399003|31055399003|40105399003|26121999007|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?N7vA4WtEDqQUHvt9qSbjtItcCEf4tQ5UTJVcCP8gsELigdogYn0tBtDB2FYZ?=

=?us-ascii?Q?azhLEWpVgYvvweeadIu5dLmIURTbSkFfyeJQyDH8ONexZVj03UV2yvW0fMb5?=

=?us-ascii?Q?lUO72DIKm4d0IuWrbuRwNafrjyZcb2AkJLp8h34ixRaaOUrJzN4LouhzyY0C?=

=?us-ascii?Q?OthMmVuOax96q5nUluWx8zI6gZMO2+aOt/PzRzrmU3gNXLJH8XJ7hytuGBEb?=

=?us-ascii?Q?7AKtdUOKyUiqz13EeAVhpQw7jADuGTXPtAQAOXlfSeGtBTQ7nIy4mqpqsOTD?=

=?us-ascii?Q?t5LoJzf72YceByq7Zpqb6UEiL02zXb0tb1askIQrCerPdQTIAlz96A0Ph677?=

=?us-ascii?Q?Tlpge2EurrV8IRlGD6CUhkuDiopyyr4vOPSJbZhnI6uaiBduM5Oa9AbjneTX?=

=?us-ascii?Q?3DvBEVh2WNNLa2ujg8ZKR1s6Mgzy8tVvoJp61WI6G+h8SafRLyO40SzL9nHE?=

=?us-ascii?Q?7eCxNW/P/jhNX9bk9ljifJcTzBYJ7gWYYg/AQh1XmMuqv46aY3eb6oiRDUwN?=

=?us-ascii?Q?WWnz4ibqYLSLkk7a/TiPioxG0O9twQXpl/pMm7+hQ+CWmeFXAa0pjsOYUmgg?=

=?us-ascii?Q?seiECwpGWQwBPlOE3OP9GBHkHI55/5no7Q6i5JWBS+cWtziKDTqJcIPniqQH?=

=?us-ascii?Q?HkOfj91EkxHiwTvZX+A/tvNBRvj/YJWr/VGpwMUEyFzryczK8oy1DYQstlJ2?=

=?us-ascii?Q?Np/Ayn8dWNeFkw1GQ6iilihb2l2d0ac3xMB1kGes/Lbj2C2XGVNZ7G+ETZXH?=

=?us-ascii?Q?vwlCcT60dIcmoPBpOyCmYAkLV6mzQy5x37fbeytUH5WOGEehPu6a0denTZa2?=

=?us-ascii?Q?m4Lsr6myoWEOAPIo8/LKtCz+hyoX/gMHm6p+SlrIWqVtHPoNJMCW43cS6HoL?=

=?us-ascii?Q?vgu5G6gGK4GzonFzC2OIxyCKtS8Kq5TY+ZvMKei857p6Jt+Vfemc/gJLN8Zp?=

=?us-ascii?Q?QvoT7Sp/1BfYedpsbbxzHuMxQVl186/MeSXjoGVqS3j+gja6By4+qfKoCurP?=

=?us-ascii?Q?d6FBo5ogi3sH12gTcyE3E352uWpuGvAlkWVyZFnigAXWOC9DO/6xZBVyd7wx?=

=?us-ascii?Q?ejPqXo9f+pT0pd31UACJ9x7Mqc3dLqOSYFLUA41ey4BCZgMT7W218uF16CL6?=

=?us-ascii?Q?kuKQITiiFMlG5gnCyjuIc7PALPdQVINeUZGL3XwR/PvHNcfldxrOqL6hGRCC?=

=?us-ascii?Q?pJQi3wL6YbUSo36MKIFPjamNLA2FQefuymbE2Ij8ooQWYQUljZCXlJl2zP10?=

=?us-ascii?Q?B/soz8Kqd/SrNOup4Atvym0oohQe6WWNBUCh1sxVA/fOasUXLDIu9FTazTdp?=

=?us-ascii?Q?lm0WLxjBLoyBlbcFt4WRDNAV5thnt60mTKfnRDMZMo6okBHrNxfjHrNOsJXq?=

=?us-ascii?Q?D2o48unp4LzFC/qtFgB5jE66Fdp/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?Wb4KfmcU1/fekgWWfYwDtJwH0uAsZVwFRI1FRJskcATh5s1ectGUDBcAJL/o?=

=?us-ascii?Q?6aXLV+AFkZ/wrtDqPN7qFUu2wvkfWY9htPcwXcxz3af39iB0EpiNrxNXo/hV?=

=?us-ascii?Q?xksQYijxTq4gOtxBWNGCIOq+vDMoxOhDK/bD+saDK6Q4koGP4X1ESY/BlUIH?=

=?us-ascii?Q?QcU4DrYBvXPgCfCw+NFHeqQTkzbIqyTwlFm0bjyvuMQOEv07PClA7g44sRGb?=

=?us-ascii?Q?QDaYinWRHon/ZMxgCdqXkedXitaby2xUFJsPuuHFtrkQDwOBz2iLcvMs6loD?=

=?us-ascii?Q?RRa4Kr6jWarKiC89Vz8wTXCDGfuDdYWqhGgmZOmapDrKaAcSgs/U13eRVEMh?=

=?us-ascii?Q?p6vm7r6Px6Cry7qf9/wZaF6f7/M6Lfrz0YhOvpBitaRDGKDwi1nZmkSaYcEH?=

=?us-ascii?Q?eagWjUywjLZl09xDYZpy1G6JP4E3T5TqtfOEWgXWe9p68qe/zF9T2zRBXaRQ?=

=?us-ascii?Q?c8c2mKiUnyz7aap1dBipMF1Azz3hEEaFMXIhSJGjfWlbPryp3HxAtdJsJHId?=

=?us-ascii?Q?1Q1Mz8v0zfoK44hwh8eiSYawl+iFobmbKyhcvczDa761DRWBHJNLKGWxsLRE?=

=?us-ascii?Q?mAcezQ2eo5kn9SqCsOi+gnRuJBXcu3rjEsBdOhIodh/UZAQUS06zf/I3P9su?=

=?us-ascii?Q?RRoHmghXE7Q1I5KfA2N0Vd3ueOBEeKQY8RO6aoBBHLez8SpxTu7keo8OR0zp?=

=?us-ascii?Q?ig37Tx+NYbZrM8otRTJDO7bJY9vpV+CaokQ0bKwDduW1qBU9hPDZ4+Qze1pW?=

=?us-ascii?Q?g2O/AqG31JxMTLwtatu8tRI8CCio5P85M3v4sOP1ozLGAAVMlOHF0pqLv3iW?=

=?us-ascii?Q?kInjiNQ5SSN/82mpE5/j2da5o6/ZdI2wtZemmXl012nsh1erRUegVOky3OND?=

=?us-ascii?Q?XarVRD8at171NxkZ+JFpwzVBpTy29KvdMC8E/yTknNOxeWdLrS0qeBhBQRCq?=

=?us-ascii?Q?ScJ5yN9K0uv4h86yGk3xslQx+dKsVeoGFrVGs3lOs4hwBos7r+mrMTgFHcNI?=

=?us-ascii?Q?BzFNupuu17jcOBkYLQNWi9cS4py5QDEYIYcVd9l5dlDCVV3L+VmDIPHA+8Ss?=

=?us-ascii?Q?QDUpvkULHilNpXDfBPwr4esXx4vl7hhmJr8vRm0yrwzJnZ09qsxMhI8gJ0S6?=

=?us-ascii?Q?mg1CSkhyO3edIuT5nxrtRXUA4o+SF/7C8HpKc23+WRIXNpOgFYubbJApVJAW?=

=?us-ascii?Q?lFGt4qXICjpbA0vsYp0OY3RBLBWQfMvS2pqIOjq+ahb7hy6B/84DRZrMl+kJ?=

=?us-ascii?Q?FwSEnH1Gj5PNT2mwyDaQk/9qPJRsjyDtTQyGjih1SBOq9EIK9WXdVKT49C2X?=

=?us-ascii?Q?LJ1ipFO8zbXA9AuYKs0Lm7wrADR3Ok84SSfuRhYKDGO07wgOJuInb+QdLC+6?=

=?us-ascii?Q?FTmj8UoOZ0Nm8sTtTQRxFZ55XAmeTcZHx7C9Y/gw1PlSyjygELa3VqPQ0uHh?=

=?us-ascii?Q?tObIRnCU3MU=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY2PPFFD5F4C141.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 3057dfab-2a91-4b9c-85cc-08df3fac172b

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2026 04:27:26.5527

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR06MB8221



--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello

I'm still waiting for your response.

Can I send you our best offer & price with work activities?

Thank you,

Puja



________________________________

From: Puja Gupta

Sent: Tuesday, September 29, 2026 5:17 PM

Subject: Proposal



Hi,



Hope you are doing well.



Google SEO is changing fast. Customers are now using ChatGPT, Gemini, Perpl=

exity and Google AI to find businesses and make buying decisions.



We help businesses build visibility across SEO + AEO + GEO so they can be f=

ound on Google as well as AI search.



We can prepare a free AI Search Visibility Audit for your website, includin=

g competitor gaps and opportunities.



If the opportunity looks right, we can discuss a complete monthly growth pl=

an.



Interested?



Thanks,

Puja





--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I'm still waiting for your response.



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I send you our best offer & price with work activities?
>


8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you,



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Puja



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Puja Gupta


Sent: Tuesday, September 29, 2026 5:17 PM


Subject: Proposal

 









8pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,





Hope you are doing well.





Google SEO is changing fast. Customers are now using ChatGPT, Gemini, Perpl=

exity and Google AI to find businesses and make buying decisions.





We help businesses build visibility across SEO + AEO + GEO so they can be f=

ound on Google as well as AI search.





We can prepare a free AI Search Visibility Audit for your website, includin=

g competitor gaps and opportunities.





If the opportunity looks right, we can discuss a complete monthly growth pl=

an.





Interested?





Thanks,


Puja



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_--

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5q-00000000OKf-0F8t

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:59852)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgn-00000000FXD-2cxF

for doctor@nk.ca;

Tue, 10 Nov 2026 17:55:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=Gwek8L1BIeSUry+M0f2+GIdThX

tESHa7ridL3WXn2jTvQH2ZJGrRjLBj9RMOPE5zv3rwBBU/nQGs93+AEzSX45SUTFQAaze69k3rR/T

whYBkljxjAEDuelwb2KDQzxaDxOeYDqJ2/SeXLFO4eoGLGf1765W5rzdW8j7CjQzBhUnFfpX/MyhH

mQuQW04NOr9OD5VtskboyEjnP4h4GsYG4NiSQ8FsljaSoIwxIuo5L0GKHMkak9T9hXP60hU3qp0sj

e+SlFO8vxYxsp3LscaclfqJmHOUiiOtkSGrZ9MwkNXCc8UNqSLd+CwfTh/NX4aD6GpubJzQbCns04

ha3ERGrw==;

Received: from [160.179.183.202] (port=51961 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfl-0000000Gkr8-43S6

for doctor@nk.ca;

Wed, 11 Nov 2026 00:54:41 +0100

Content-Type: text/html

From: Dragonfly

To: doctor@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <422e78b4-c233-8bf0-6bb1-851aa796b844@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:39 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:59836)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgn-00000000FX8-2cv4

for dave@nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=yywKF7aneKfM6raLIoH75//0Mr

DuA8ncGabG2bPetOMmJPAYsc9F8Tla32kgeuGTcYqwnk+9kJIxI0wL76ViGg+Mb4PHT8cx3HCVs3r

QjegwtU0EPQfZ4uG9ZZaYOTF3tm5llaPLULbrk1dwJsDptX1x94kbw9l7WYPUPY98JaXcPBbSBSvl

oEg7wFi7Am5jm6euRs87NSZAd3pusHw7LJ78dLUrf7Hmz+5W0iev1qb6dheuMpbCtup0cZgM/QSKv

11ZKaUIRVeWkYkVV/cqtQqcjh+PucQQYlj2avreP7ecJxNzQR30tXtalMU7FhtpgSEb5SwJ5TYtfI

VCAdaFuQ==;

Received: from [160.179.183.202] (port=51954 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfl-0000000GkqP-1Tqr

for dave@nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:40 +0100

Content-Type: text/html

From: Dragonfly

To: dave@nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID: <4c2daa55-ab2b-c955-062e-0834ea74ca11@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:38 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:59820)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgf-00000000FX1-2DfL

for dave@nk.ca;

Tue, 10 Nov 2026 17:55:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=KVY/rOVpgTFlWelAcPKqCRBC4+

A4d1iNbKAHu61VpKvmebROXUSREbam56GtvE8+f+O3wpPG+Ug9AYpYSvWnWIH2PUmpHA28HwSofiy

UVv5kh6aLlNhT6BkVY+6WqZlWLeA40NcnX27ELxOe3HiTSfJI6AwYer+RrbJP6De3itCD5t2U8/Hc

FoLha0aoxa2Q8e4SiX7VM0JNB/YQFk+p9DbUdZwc2wy/Wan6UYY3Z2slqYIT1xMCo1g4owIQnQ20r

VRpqKFqW3rlqynms4ceP40wotjypNEcOUJr11gfjxIxDsVNZv3bi6rbp3udc/o+HGOclh3cZiOtcg

vpzH3YGg==;

Received: from [160.179.183.202] (port=51951 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfk-0000000GkpH-0LuD

for dave@nk.ca;

Wed, 11 Nov 2026 00:54:39 +0100

Content-Type: text/html

From: Dragonfly

To: dave@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <8bbcec54-ac4d-efb8-d180-72932946cd97@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:37 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5Z-00000000OIq-0omP

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:59810)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgm-00000000FWz-0MFo

for root@nk.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=r8GymFOkYR3eVyjVNblHoXYpmc

17b6c8RmKNOuTvoCoseJdFgDx4hUroOJA+aj4wLAyCaM0Kqio/imhBCRrtN9CN49RRVKC5FCz2uFR

SzJyR3RRNd/xLvZPINTL4uF8TTl//P58qtWUpnPZCYIZch/PIhXPYI2l/UWPyOZRLgHpZY5fVNmMA

mITu5rl9sYzc6cIiLDCtYASunWxW+C5HSr5b674PFOhk9g/jkwhHsPZYo6gXAnl0OAnFc+L95b7sb

szZltJMPtAR1hPi5p2b9kFYzImD8DJF1z3y22PWHuYKyGPy78SO19/3wN40zzGftLgxaSPFDBkzXh

IMgXJRhQ==;

Received: from [160.179.183.202] (port=51947 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfk-0000000GkpE-0EXQ

for root@nk.ca;

Wed, 11 Nov 2026 00:54:39 +0100

Content-Type: text/html

From: Dragonfly

To: root@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <45a7ae55-5e84-75d8-1b93-7bd3ec4feba1@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:37 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:57022)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgi-00000000FWc-3m4D

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=rfvJSXpi2x/Fv2693QJvuFpk98

ZqzoAOcGroJfgq1pSxckGPS/BBXiItC6HU+jZ1sh1nzV0wBxzI4zSNSnIkZTrKT6yr8gjwo2JOLfd

Xp4prbaXbJ0n9QGSAdUbFLKYGe+zQf59PpcZNb9Rbz3XSE8mK1neq7PJvBqXoYvBC0EHvFbW04MRR

JexWpBwnPUHfPgGAv3pSIrjIrsa//oXVmjiKtHy/fzs5tXV56OVSlT9BTvcUYx4fE+0prBEbCh97K

PxDeThuMIxas9NHLZTz+FDLbGt1X+EvHICgnq1F459jJafUORE628D/ZFtMl/fqr5RXuFv4rDJ7rk

04vZIu5Q==;

Received: from [160.179.183.202] (port=51928 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfg-0000000Gkmi-0yEl

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:35 +0100

Content-Type: text/html

From: Dragonfly

To: dave@doctor.nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:33 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5M-00000000OHg-0qsu

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:57032)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgi-00000000FWe-3YAk

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=d0xITNd0mkbZJOeSNJM35/TYB/

tpBW/VVueQ5O+6u43kZL3xl/b03jR1FOCVbAnh+KuwHR0MBhb16jYAd0iKvJrvZ+yz/uz/qNvfqUv

gPX1PABR027yx4Q8LCRbX9Xl8nrZ/emcvJpg4RjbPSHWK3QTFD9f+GaHSHYFsiG03yh0EaVtk4Rf2

nm0+VXVSpow2Hrua2BH2q2iM27QNE5mDLynaBKtZ7E9QZVDUkh3vKI+n76KV9akqEDnnhHpehndNa

9t1kHFSD9pNTiac01kWuaJIuz9yt5O3G3mX1Dv0OhnCd3xbCd1g6pcEuAWryvUCCr7aIFZT8P1Ydq

E0OrX+4A==;

Received: from [160.179.183.202] (port=51927 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfg-0000000Gkmm-141d

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:35 +0100

Content-Type: text/html

From: Dragonfly

To: doctor@doctor.nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:33 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.