Royal Bank of Canada Fintrac Phish from Google Cloud User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 15:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpYIJ-000000001vS-31rj

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 15:27:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 15:27:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wap-app-qiuyou.com ([35.212.120.98]:43767 helo=point.wap-app-qiuyou.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpTwr-00000000OVx-0Z7l

for doctor@nk.ca;

Thu, 30 Jul 2026 10:49:41 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=point.wap-app-qiuyou.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=hello@zdqfba.point.wap-app-qiuyou.com;

bh=6Jd3/7pSyCmaL8vZmBJ2OJvy+5dlSIvsVzJXEiz6zHs=;

b=VS8ghhxMkFWcu3LakB5bWVyycSWIH4FLcs/H16NiwIz0hoWYtqcpsGMA91LLtpOvLYTG/ouFQuEa

Xkf3JEjLhnRiAVKGgseSPz32auy3TcoAiUwMSHk3Ga4YIwTs0ttOcmz+Fqkf/fbgDdDuz3hiMHR8

VtoTbuxHQfxPk+oLuNgR+wGm4KV0Syyauk0VReftT74SAe7Z4ngOwkeDYrWpSlilNvxmkEjMvIpY

+9QLhM5xmI7xcJYv+CkLsK6KI6vI/CkcGJkb4a16CG1EfXv5jkVo8zBV0u9NK9zptk5f6UROnNSr

afR9E+7IaJ2qHXDH4q4eIS4lnLQCHmYT6UZGPg==

Content-Type: multipart/alternative;

boundary="===============1460620064188161650=="

MIME-Version: 1.0

From:

=?utf-8?b?UuKAi2/igIt54oCLYeKAi2zigIsg4oCLQuKAi2HigItu4oCLa+KAiyDigItv4oCLZuKAiyDigItD4oCLYeKAi27igIth4oCLZOKAi2E=?=



To: doctor@nk.ca

Subject: =?utf-8?q?Verify_Your_Tax_Information_With_the_CRA_-_V=C3=A9rifiez_?=

=?utf-8?q?vos_renseignements_fiscaux_aupr=C3=A8s_de_l=27ARC?=

Date: Thu, 30 Jul 2026 12:48:45 -0400

Message-ID:

<178543012533.3449.4222963439247925627@zdqfba.point.wap-app-qiuyou.com>

X-Spam_score: 18.9

X-Spam_score_int: 189

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [RBC Direct Investing] Verify Your Tax Information With the

CRA | Vérifiez vos renseignements fiscaux auprès de l'ARC doctor, Each

year, RBC Direct Investing issues tax information slips — including T5 Statements

of Investment Income, RRSP Contribution Receipts, and other CRA-required

documents — to all account holders. [...]



Content analysis details: (18.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

[35.212.120.98 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.120.98 listed in dnsbl.ahbl.org]

[35.212.120.98 listed in dnsbl.ahbl.org]

[35.212.120.98 listed in dnsbl.ahbl.org]

[35.212.120.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.120.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.120.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.120.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.120.98 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: wap-app-qiuyou.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.sdjfywhcm.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: sdjfywhcm.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_INSRNC BODY: mangled insurance

2.3 MANGLED_INCOME BODY: mangled income

2.3 MANGLED_INCLDN BODY: mangled including

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.120.98 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Verify_Your_Tax_Information_With_the_CRA_-_V=C3=A9rifiez_?=

=?utf-8?q?vos_renseignements_fiscaux_aupr=C3=A8s_de_l=27ARC?=



Canada Revenue Agency — Document Co‍mpliance

Verify Your SIN and Personal Inform​ation

For Accurate Tax Document Issuance‌

Reference: Annual Tax Information‍ Validation — T5, RRSP Contribution‍ Receipts, and Related Slips



doctor,



Each year, RBC Direct Investing issu‌es tax information slips — including T5 Statements of Investment Incom‍e, RRSP Contribution Receipts, and​ other CRA-required documents — to a‌ll account holders. To ensure these d‍ocuments are accurate, complete, an‍d issued on time, we must confirm that your Social Ins‍urance Number (SIN) and personal information on file match the records h‌eld by the Canada Revenue Agency.



Inaccurate or outdated information‌ can result in delayed tax documents​, rejected filings, or corresponde‍nce from the CRA requesting corrections. Many Canadian investors complete this verification annually to​ ensure their tax reporting proceed‍s without disruption. The process i‍s straightforward and takes approx‍imately four minutes.

●



What we need to verify: Your Social Insurance Number (SIN)‌, legal name as registered with the C‍RA, current mailing address, and da​te of birth. These must match CRA rec‌ords exactly to ensure your T5, RRSP‌ contribution receipts, and other t‍ax slips are issued correctly and ac‍cepted by the CRA's automated matchi‍ng system without triggering a revi‍ew.

Tax Document Issuance Period Status

T5 — Statement of Investment Income On or before February 28 Pending Verification

RRSP Contribution Receipt On or before March 31 Pending Verification

T5008 — Statement of Securities Tra​nsactions On or before February 28 Pending Verification

NR4 — Statement of Amounts Paid to No‌n-Residents On or before March 31 If Applicable



Why Immediate Verification Is Impo‌rtant



If your SIN or personal information​ does not match CRA records, your tax‌ slips may be rejected or flagged for m‌anual review by the CRA, potentially delaying your tax fili​ng and any refund owing to you. RBC Direct Investing submits tax in‍formation directly to the CRA, and d‌iscrepancies between our records a‌nd the CRA's records can result in fil‌ing complications that take weeks t​o resolve. Verifying your details no​w helps ensure a smooth tax season and accurate investment income reporting.



Log in to RBC Direct Investing, navig​ate to the Tax Documents section und​er Account Settings, and confirm th​at your SIN and personal details are‌ current and correct. If any informa‍tion has changed, you may update it d‌irectly through the secure portal.​

Confirm My Tax Details



This notice is provided in connecti‍on with RBC Direct Investing's obli‌gations as an issuer of tax informat‌ion slips under the Income Tax Act (C‌anada). RBC Direct Investing does not provide tax advice. For question​s regarding your tax obligations, p‍lease consult a qualified tax professional or the Canada Revenue Agenc​y. RBC Direct Investing is a business name used by RBC Direct Investing In‌c., a Dealer Member of CIRO and a Memb‌er of CIPF. For assistance, contact‍ RBC Direct Investing Client Servic‍es through the Secure Message Centre upon login.



Sincerely,

RBC Direct Investing

Tax Information Services



doctor,



Chaque année, RBC Direct Investing‍ émet des feuillets de renseignemen‍ts fiscaux — y compris les T5 (État de​s revenus de placement), les reçus d‌e cotisation à un REER et d'autres do​cuments exigés par l'ARC — à tous les titulaires de comptes. Pour garant‌ir que ces documents sont exacts, com‍plets et émis à temps, nous devons confirmer que votre num​éro d'assurance sociale (NAS) et vos renseignements personnels au dos‌sier correspondent aux dossiers dé‍tenus par l'Agence du revenu du Canada.



Des renseignements inexacts ou obsolètes peuvent entraîner des retard‌s dans les documents fiscaux, des re​fus de déclaration ou des correspon‍dances de l'ARC demandant des corrections. De nombreux investisseurs​ canadiens effectuent cette vérifi‍cation chaque année pour s'assurer‍ que leur déclaration fiscale se dér‌oule sans interruption. Le process‌us est simple et prend environ quatr‍e minutes.

●



Ce que nous devons vérifier : Votre numéro d'assurance sociale (NAS), votre nom légal tel qu'enregi‌stré auprès de l'ARC, votre adresse postale actuelle et votre date de na​issance. Ceux-ci doivent correspo‍ndre exactement aux dossiers de l'ARC pour garantir que vos feuillets T5, vos reçus de cotisation REER et vo​s autres relevés fiscaux sont émis c​orrectement et acceptés par le syst‌ème de correspondance automatisé de l‍'ARC sans déclencher de révision.

Document fiscal Période d'émission Statut

T5 — État des revenus de placement Au plus tard le 28 février En attente de vérification

Reçu de cotisation REER Au plus tard le 31 mars En attente de vérification

T5008 — État des transactions sur ti‌tres Au plus tard le 28 février En attente de vérification

NR4 — État des sommes payées à des non​-résidents Au plus tard le 31 mars Si applicable



Pourquoi la vérification immédiat​e est importante



Si votre NAS ou vos renseignements p‍ersonnels ne correspondent pas aux dossiers de l'ARC, vos feuillets fi‍scaux pourraient être rejetés ou si​gnalés pour révision manuelle par l‍'ARC, ce qui pourrait retarder votre décl‌aration de revenus et tout rembours​ement qui vous est dû. RBC Direct Investing transmet les r‌enseignements fiscaux directemen​t à l'ARC, et les divergences entre n‍os dossiers et ceux de l'ARC peuvent e‌ntraîner des complications de déclaration qui prennent des semaines à r‌ésoudre. Vérifier vos renseigneme‌nts maintenant aide à assurer une sa‍ison des impôts sans heurts et une dé‌claration exacte des revenus de placement.



Connectez-vous à RBC Direct Investi​ng, accédez à la section Documents f‌iscaux dans les Paramètres du compt‌e et confirmez que votre NAS et vos renseignements personnels sont à jour​ et exacts. Si des renseignements on‍t changé, vous pouvez les mettre à jour directement par le portail sécur​isé.

Confirmer mes renseignements fisc‌aux



Le présent avis est fourni dans le cadre des obligations de RBC Direct In​vesting en tant qu'émetteur de feui‍llets de renseignements fiscaux en‍ vertu de la Loi de l'impôt sur le reve‍nu (Canada). RBC Direct Investing n‍e fournit pas de conseils fiscaux. Pour toute question concernant vos obligations fiscales, veuillez cons‌ulter un fiscaliste qualifié ou l'Agence du revenu du Canada. RBC Direc​t Investing est une dénomination co‍mmerciale utilisée par RBC Direct Investing Inc., un courtier membre d‍e l'OCRI et un membre du FCPI. Pour ob‍tenir de l'aide, communiquez avec l​es Services aux clients de RBC Direc‌t Investing par l'entremise du Cent‍re de messagerie sécurisé lors de la connexion.



Sincères salutations,

RBC Direct Investing

Services d'information fiscale

RBC Direct Investing is a business name used by RBC Direct​ Investing Inc. Member — Canadian Investor Protection Fund. Dealer Member — Canadian Investment Regulatory Organization.

This is an automated tax document no‍tification. Please direct all inquiries through the Secure Message Centre within your RBC Direct Investing account.

© 2026 RBC Direct Investing Inc. All r‍ights reserved.



RBC Direct Investing est une dénomination commerciale u​tilisée par RBC Direct Investing In‍c. Membre — Fonds canadien de protec‍tion des investisseurs. Courtier membre — Organisme canadien de réglementation des investissements.

Ceci est une notification automatisée de documents fiscaux. Veuillez​ adresser toute demande par l'entrem‌ise du Centre de messagerie sécurisé​ dans votre compte RBC Direct Investing.

© 2026 RBC Direct Investing Inc. Tous​ droits réservés.

Royal Bank of Canada Fintrac Phish from Google User

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 15:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpYIF-000000001jC-0G5c

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 15:27:55 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 15:27:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cn-beta-lanjingsport.com ([35.212.106.203]:54109 helo=benefit.cn-beta-lanjingsport.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpTwQ-00000000OPm-0NqX

for sales@nk.ca;

Thu, 30 Jul 2026 10:49:21 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default;

d=benefit.cn-beta-lanjingsport.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=marketing@tavrnq.benefit.cn-beta-lanjingsport.com;

bh=4nw9+pVoeVxO/zLKaxjFVKnQR+NKLzlbzoVjiJSFJHs=;

b=m1LvicBX/PuC92sUhHS9vjXUNqmxCGvxHQ+bj+y2ZfJ+NVsx0QerAo3uFhLES8HrgoYnzfeKy3xi

iyt1gOfOx32sutCuZ2sci3rqvGIdFOGJTwBcPkWS+eMs9h7vfkS1fECzj/Eayk6Kha68tUZjpNw0

nRAQ+GtAQnNMOJfyQKM2nm8+NNcP6A1WrV481v3H3PUlJIEmfhd4W82VpeGP9/p6YdDajh/chX9O

NsFlAJ7DBLEnDFoszaVzk8HNaQ4WcGCWh2oBuQD1z/sneCOuezsIE1i5vQLGYCNI9HcBaum/jfqA

4ybDuAwCp0d7i12OXsuhrF0iWt4EVTtklkmMCQ==

Content-Type: multipart/alternative;

boundary="===============0484721711185537812=="

MIME-Version: 1.0

From:

=?utf-8?b?UuKAi2/igIt54oCLYeKAi2zigIsg4oCLQuKAi2HigItu4oCLa+KAiyDigItv4oCLZuKAiyDigItD4oCLYeKAi27igIth4oCLZOKAi2E=?=



To: sales@nk.ca

Subject: =?utf-8?q?Verify_Your_Tax_Information_With_the_CRA_-_V=C3=A9rifiez_?=

=?utf-8?q?vos_renseignements_fiscaux_aupr=C3=A8s_de_l=27ARC?=

Date: Thu, 30 Jul 2026 12:48:16 -0400

Message-ID:

<178543009697.3415.15541393348146169728@tavrnq.benefit.cn-beta-lanjingsport.com>

X-Spam_score: 20.7

X-Spam_score_int: 207

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [RBC Direct Investing] Verify Your Tax Information With the

CRA | Vérifiez vos renseignements fiscaux auprès de l'ARC sales, Each year,

RBC Direct Investing issues tax information slips — including T5 Statements

of Investment Income, RRSP Contribution Receipts, and other CRA-required

documents — to all account holders. [...]



Content analysis details: (20.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

[35.212.106.203 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.106.203 listed in dnsbl.ahbl.org]

[35.212.106.203 listed in dnsbl.ahbl.org]

[35.212.106.203 listed in dnsbl.ahbl.org]

[35.212.106.203 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.106.203 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.106.203 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.106.203 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.106.203 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cn-beta-lanjingsport.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.6220bet.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 6220bet.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_INSRNC BODY: mangled insurance

2.3 MANGLED_DEALS BODY: mangled deal(s)

2.3 MANGLED_INCOME BODY: mangled income

2.3 MANGLED_INCLDN BODY: mangled including

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.106.203 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Verify_Your_Tax_Information_With_the_CRA_-_V=C3=A9rifiez_?=

=?utf-8?q?vos_renseignements_fiscaux_aupr=C3=A8s_de_l=27ARC?=





Canada Revenue Agency — Document Co‌mpliance

Verify Your SIN and Personal Information

For Accurate Tax Document Issuance‌

Reference: Annual Tax Information‌ Validation — T5, RRSP Contribution Receipts, and Related Slips



sales,



Each year, RBC Direct Investing iss​ues tax information slips — including T5 Statements of Investment Incom​e, RRSP Contribution Receipts, and‍ other CRA-required documents — to all account holders. To ensure these‍ documents are accurate, complete,‌ and issued on time, we must confirm that your Social Insurance Number (SIN) and personal in‍formation on file match the records‌ held by the Canada Revenue Agency.



Inaccurate or outdated informatio‍n can result in delayed tax documents, rejected filings, or correspond‍ence from the CRA requesting corrections. Many Canadian investors complete this verification annually to‍ ensure their tax reporting proceed‍s without disruption. The process is straightforward and takes approx‌imately four minutes.

●



What we need to verify: Your Social Insurance Number (SIN)‍, legal name as registered with the CRA, current mailing address, and da‍te of birth. These must match CRA records exactly to ensure your T5, RRSP contribution receipts, and other tax slips are issued correctly and acc‌epted by the CRA's automated matching system without triggering a revi​ew.

Tax Document Issuance Period Status

T5 — Statement of Investment Income On or before February 28 Pending Verification

RRSP Contribution Receipt On or before March 31 Pending Verification

T5008 — Statement of Securities Tra‍nsactions On or before February 28 Pending Verification

NR4 — Statement of Amounts Paid to No​n-Residents On or before March 31 If Applicable



Why Immediate Verification Is Impo‍rtant



If your SIN or personal information‍ does not match CRA records, your tax​ slips may be rejected or flagged for‍ manual review by the CRA, potentially delaying your tax fili‍ng and any refund owing to you. RBC Direct Investing submits tax information directly to the CRA, and d​iscrepancies between our records and the CRA's records can result in fi‌ling complications that take weeks‍ to resolve. Verifying your details now helps ensure a smooth tax season and accurate investment income rep‌orting.



Log in to RBC Direct Investing, navigate to the Tax Documents section under Account Settings, and confirm that your SIN and personal details are‌ current and correct. If any information has changed, you may update it directly through the secure portal.‌

Confirm My Tax Details



This notice is provided in connecti‍on with RBC Direct Investing's obli​gations as an issuer of tax informat‍ion slips under the Income Tax Act (Canada). RBC Direct Investing does n​ot provide tax advice. For questions regarding your tax obligations, please consult a qualified tax profess‍ional or the Canada Revenue Agency. RBC Direct Investing is a business n​ame used by RBC Direct Investing Inc‌., a Dealer Member of CIRO and a Member of CIPF. For assistance, contact R​BC Direct Investing Client Service​s through the Secure Message Centre‌ upon login.



Sincerely,

RBC Direct Investing

Tax Information Services



sales,



Chaque année, RBC Direct Investing‍ émet des feuillets de renseignements fiscaux — y compris les T5 (État de​s revenus de placement), les reçus de cotisation à un REER et d'autres do​cuments exigés par l'ARC — à tous les​ titulaires de comptes. Pour garant​ir que ces documents sont exacts, co​mplets et émis à temps, nous devons confirmer que votre numéro d'assurance sociale (NAS) et vos renseignements personnels au dos‍sier correspondent aux dossiers dé‌tenus par l'Agence du revenu du Cana​da.



Des renseignements inexacts ou obs​olètes peuvent entraîner des retard‍s dans les documents fiscaux, des re‍fus de déclaration ou des correspondances de l'ARC demandant des corre‌ctions. De nombreux investisseurs canadiens effectuent cette vérific‌ation chaque année pour s'assurer q​ue leur déclaration fiscale se déro‌ule sans interruption. Le processu‍s est simple et prend environ quatre​ minutes.

●



Ce que nous devons vérifier : Votre numéro d'assurance sociale (‍NAS), votre nom légal tel qu'enregi‍stré auprès de l'ARC, votre adresse postale actuelle et votre date de na‌issance. Ceux-ci doivent correspondre exactement aux dossiers de l'ARC pour garantir que vos feuillets T‌5, vos reçus de cotisation REER et vo‍s autres relevés fiscaux sont émis c‍orrectement et acceptés par le système de correspondance automatisé de​ l'ARC sans déclencher de révision.‍

Document fiscal Période d'émission Statut

T5 — État des revenus de placement Au plus tard le 28 février En attente de vérification

Reçu de cotisation REER Au plus tard le 31 mars En attente de vérification

T5008 — État des transactions sur ti‌tres Au plus tard le 28 février En attente de vérification

NR4 — État des sommes payées à des non-​résidents Au plus tard le 31 mars Si applicable



Pourquoi la vérification immédiate est importante



Si votre NAS ou vos renseignements pe‍rsonnels ne correspondent pas aux dos​siers de l'ARC, vos feuillets fisca​ux pourraient être rejetés ou signalés​ pour révision manuelle par l'ARC, ce qui pourrait retarder votre décl​aration de revenus et tout rembourse‌ment qui vous est dû. RBC Direct Investing transmet les r‌enseignements fiscaux directemen​t à l'ARC, et les divergences entre n‌os dossiers et ceux de l'ARC peuvent​ entraîner des complications de déc‍laration qui prennent des semaines​ à résoudre. Vérifier vos renseigne‍ments maintenant aide à assurer une​ saison des impôts sans heurts et une​ déclaration exacte des revenus de placement.



Connectez-vous à RBC Direct Invest‌ing, accédez à la section Documents f‍iscaux dans les Paramètres du compt​e et confirmez que votre NAS et vos ren​seignements personnels sont à jour et exacts. Si des renseignements on‌t changé, vous pouvez les mettre à jo​ur directement par le portail sécurisé.

Confirmer mes renseignements fisc​aux



Le présent avis est fourni dans le cadre des obligations de RBC Direct Inv‍esting en tant qu'émetteur de feuil‍lets de renseignements fiscaux en v‍ertu de la Loi de l'impôt sur le reven‍u (Canada). RBC Direct Investing ne f‌ournit pas de conseils fiscaux. Pou‌r toute question concernant vos obl​igations fiscales, veuillez consu​lter un fiscaliste qualifié ou l'Age​nce du revenu du Canada. RBC Direct I‍nvesting est une dénomination comm‍erciale utilisée par RBC Direct Inv​esting Inc., un courtier membre de l​'OCRI et un membre du FCPI. Pour obtenir de l'aide, communiquez avec les Se‍rvices aux clients de RBC Direct Inv‌esting par l'entremise du Centre de messagerie sécurisé lors de la conne‍xion.



Sincères salutations,

RBC Direct Investing

Services d'information fiscale

RBC Direct Investing is a business name used by RBC Direct‍ Investing Inc. Member — Canadian In‍vestor Protection Fund. Dealer Member — Canadian Investment Regulato‌ry Organization.

This is an automated tax document no‌tification. Please direct all inqu​iries through the Secure Message Ce​ntre within your RBC Direct Investi‌ng account.

© 2026 RBC Direct Investing Inc. All r‍ights reserved.



RBC Direct Investing est une dénomination commerciale u‌tilisée par RBC Direct Investing In‌c. Membre — Fonds canadien de protec‌tion des investisseurs. Courtier m‍embre — Organisme canadien de réglementation des investissements.

Ceci est une notification automatis‌ée de documents fiscaux. Veuillez a‌dresser toute demande par l'entremi​se du Centre de messagerie sécurisé​ dans votre compte RBC Direct Invest​ing.

© 2026 RBC Direct Investing Inc. Tous‌ droits réservés.



Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 15:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpYI8-000000001DS-2z1c

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 15:27:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 15:27:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m812.xmail.ntesmail.com ([156.224.81.2]:27214)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpTl1-00000000LqO-1nK9

for sales@nk.ca;

Thu, 30 Jul 2026 10:37:40 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1637522_748903468.1785429380584"

To: sales

Subject: =?UTF-8?B?RGV0YWlscyBhYm91dCBVbHRyYSBMb3cgTnVyc2luZyBCZWQ=?=

X-Priority: 3

MIME-Version: 1.0

Received: from mia@shlionmedicalbed.com( [10.139.1.59] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 31 Jul 2026 00:36:20 +0800 (GMT+08:00)

From: mia

Date: Fri, 31 Jul 2026 00:36:20 +0800 (GMT+08:00)

X-WM-Tid: 0a9fb3e24dde03bdkunm6a77a44320f4bc

DKIM-Signature: a=rsa-sha256;

b=s4gPTJBP5Lc6SfpkrXh8RG4FLs0QBXxKws6/i3DoVWAzHOqhTKWs0Y4kImW2EVJu2CMQtzBwgqA6UnUrdKaLgcS54HasXHgxVNKCt2fuXN5NIhKwMr8nQ9rP38Jc7XX78zn9ZgvtH0aOXUO/oCVTJngBFgJUexDHuDHURwyTQus/EQd4vGMhcBVXWxaTHg4vbSYw7fDtBLwm/vZwfcHjsKlEesMViVInOUTXIEExkcdErNETN9O4DjckoWu9SWfxW2uc/CuNEJYo7TFXJviy54S11i1nfT2QG8W6kXR0Tq4QxC31pHtwqp4VJy10A0flXjAIzrWjNMndrMcO7/RE2A==; c=relaxed/relaxed; s=default; d=shlionmedicalbed.com; v=1;

bh=OI6xdW38a84/uXhnnT3K+IMLAwaOntjySHPSCU288uA=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Dear Sales ,



Introducing the Ultra Low Nursing Bed, designed for optimal patient care. The standout characteristic is its remarkably low height of only 8 cm from the mattress platform to the floor, promoting safety and facilitating easy access for patients.



Key Features:

- Ultra-low height: Enhances patient safety and accessibility.

- Durable construction: Built to withstand rigorous use.

- Versatile design: Suitable for various healthcare settings.



Explore how this innovative bed can enhance your offerings. We look forward to your inquiries.









Best regards,

Mia.





image

Hospital Furniture | Home Care Furniture | Medical Trolley | Accessories



No.11 Miaohe Road, Wuhang, Yunhe, Yuhang District, Hangzhou City, 311102, Zhejiang Province, China | Tel. +86 571 87677809 | Fax. +86 571 86180669 | Website: www.shlion.net | Mia Chen | Sales Manager | Email: mia@shlionmedicalbed.com | Mobile:+86 15868155659



Important Note: If there is anything about the important information (payment,account and so on) to be changed, I will confirm with you by phone (+86 15868155659) and fax (+86 571 86180669). If there is only email, but no phone or fax, please dont do any reaction.



Error spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 15:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpYHv-000000000TI-07Jz

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 15:27:35 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 15:27:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazhn15012044.outbound.protection.outlook.com ([52.102.140.44]:14736 helo=SN4PR2101CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

id 1wpT6g-00000000EPB-1ksx

for Mailer-Daemon@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:55:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mzWE4bPW+/PIFCTaLZceFQftzvozIBCjn4h0dltgHYVPC33DiLuVfmN8/tn2vSP5itNlBMlbyTrZ+bi1cyj1uhDaS/Oe9FLqn4KukEPVBnhvJlpQTJQGWClrBmvagbjcdlv8SvKmOBlEJcvWPuQTo+kv8XeUozE/JHSbTT8Rm8pw8mw3HvUm6NpIhqJ6vxu01ahDtBsKwdgWWA0QGapWG0kVkO3rLlBbpIOKiuUXCENymbOIZAJNFGm1RFx+GnZ30G1HuPOAGIY/5cW0Cb6AUDteKS5UNgOqDD9p5zY4wjIj45+NCxNbWRDw8V2Ctlx6TfcmsI5ZOISeuS8tV4U3IQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aghhnM/hTvL1FkKdwxs4WyR+Qo40h7LmAnHCSpnNMbk=;

b=qOUjJEweWk+AfGCyVS3tw8TjiYPoXSLzZl2p03eJsmpNT58eRF6bYpaz4CY/hzRx9B4GeG3xtA3qeU8f5m05UaUl8B4yjReeswVEEGSVwuxp+8CiAUt9w/EeWzESjSoRQ+dFy3cfUb76K0Mr0oVFJBRwvA7RjFpD9PAxLktuGdGS4IaCK+X8yo4l0sVgvWAHrkDGJDgRC+Cix59IpOfOVIEdJX79hw8iZSmJAu9OvpANgzNUaTIzNqQZ4Nq13ZqSc5bnf8fhJ0nEdjrYaZ7xf1nsBkvG1nAGU+tAHMNHLYpLeZtYko650AEs8pDHSCmLpYXtcZ/aY5MyQgMDdNeanw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=legalshield.com; dkim=pass header.d=legalshield.com;

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=legalshieldcorp.onmicrosoft.com;

s=selector2-legalshieldcorp-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aghhnM/hTvL1FkKdwxs4WyR+Qo40h7LmAnHCSpnNMbk=;

b=EQUk/+KBZ0/iTerj5MkxA/QN+/z74LxLqn3/LOEvuSUbaFuKu7LOm7wufOAAgUnIQIAB81lfKNxKwEwalgGRETZSjR2850ERHDY07uJGQv7tccmGfROuCqyi0K8kJIB3TWCdbHJZYXdtcuRxKDDoT8kNGcM8mtOH8VdJwCSjZjo=

Received: from SA1PR16MB6436.namprd16.prod.outlook.com (2603:10b6:806:3e7::5)

by IA0PPF33F27776F.namprd16.prod.outlook.com (2603:10b6:20f:fc04::fd0) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.15; Thu, 30 Jul

2026 15:54:29 +0000

Received: from SA1PR16MB6436.namprd16.prod.outlook.com ([::1]) by

SA1PR16MB6436.namprd16.prod.outlook.com ([fe80::7957:c0a5:f361:9d40%5]) with

Microsoft SMTP Server id 15.21.0270.012; Thu, 30 Jul 2026 15:54:29 +0000

From: noreply

To: Mail Delivery System

Subject: Automatic reply: Mail delivery failed: returning message to sender

Thread-Topic: Mail delivery failed: returning message to sender

Thread-Index: AQHdIDuyLJZk4wdS70GvvKZfssKTzraGNvLi

Date: Thu, 30 Jul 2026 15:54:29 +0000

Message-ID:



References:

In-Reply-To:

X-MS-Has-Attach:

X-Auto-Response-Suppress: All

X-MS-Exchange-Inbox-Rules-Loop: noreply@legalshield.com

X-MS-TNEF-Correlator:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=legalshield.com;

x-ms-exchange-parent-message-id:

auto-submitted: auto-generated

x-ms-exchange-generated-message-source: Mailbox Rules Agent

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR16MB6436:EE_|IA0PPF33F27776F:EE_

x-ms-office365-filtering-correlation-id: e84a7217-8e34-49da-8f6d-08deee52d737

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|50650200027|366016|10070799003|1930700014|1800799024|376014|56012099006|10067099003|18002099003|22082099003|5133699003|8096899003|12063799003|80100003;

x-microsoft-antispam-message-info:

sbjuFwoiA1kZkY/UOLYgy7wlZPaVCiI72bovKKZFDSgC/mV/gPyaWj43hWNqB+TIMh8MFfnSXZdx/prQvxw4MxhvPRfHzYFxPNDT4638lD4kyMfofAmPOFFl5ZRS6ss9a/wt1V+97Z6Hj0NPlAqHds72S3VfZs2DRW2le+u0vQDtDknpYsdYtXv2tNqvkoVurLMsi0BLv7jCZt8aD1XbO867dgw0R3D7WCZ+qydtmt//pM8lDKgGuK9ReVbCxGczi5G3/AdEayGFPC+Iq0iB3ID9/ITcrO3lDmQ3qkfAi/q4UoA41rONZpM/Chpd8N6ZN1t1iW+gvwGl6fgjW7vqkGbCq8s/ukDWukIVhTa9xWih6RiW8JY0rAcrFIWp8AFdCbtncxl4w10s4zat02tIRxWXsregnDBhwi6IhPVFiI4BzNHg6K7/DUapUZBApz6Or5EacAELw+CafuBHsTXFWODmsuGH30mY/R7faAIKHi+24tfXiGY5sxh22crd4GsylKRLO5nB6Al54gaX9xbsYy/FJJNTX+tDLlJA2BvxI1/Lq5EzIlBL3IZs9SfbqaWYLUgn/PXZ95/zx9lKjWbQJj41QKCPkpuiKyX6H+PZvjZGQ3q9+fKieYiQIe2EnO52nL4TGSMnHahqZeXPsvX2bbxzk6RVTqzw5UZ8cNunNcs=

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA1PR16MB6436.namprd16.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(50650200027)(366016)(10070799003)(1930700014)(1800799024)(376014)(56012099006)(10067099003)(18002099003)(22082099003)(5133699003)(8096899003)(12063799003)(80100003);DIR:OUT;SFP:1501;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

wqsLKwXruxEwUnMLfgKYNCjrT4urhh0FMxU4mvro2x+8ddtIyeyd7urRP0HBBkmB4LzbGele0ucRC7pzrGAO7kSNDpoe0nhnzyIFDf8vPtauPfRFn/9gUXPoOfy+9iqwPhK80ScwMXpN8sbCPTd4JUG/gFQj9K4+aCMSrXEFzoUr7CHw+LltLcx8yTFyhh/7Cl+BQv5If3psJXwVPoHxjrkI/Jolz4TWN+HdS7zDkmH/WV0rnGFofJD11jgbP8Ki1rLvxbAy2KKwB7bbYfiv9MgEn1Ld5gup6R8bWQytJr24lM+sSo27ZyGhsgJI9iT2QaaAk3XfZ1Yon3udhjQeq2cQ2tkRq+MQ9s+TuCYLXNUQPeprXxeGQz6QlpbmaVXoaKj6l/F88Y+tOapfZ+kkTblzE2cfS8ENqzcN9jqbILgeKwBaT7bNXL5eTz9dZuRC

Content-Type: multipart/alternative;

boundary="_000_a5df3b9e24f947b9a6c5782162280fe5SA1PR16MB6436namprd16pr_"

MIME-Version: 1.0

X-OriginatorOrg: LegalShield.Com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR16MB6436.namprd16.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e84a7217-8e34-49da-8f6d-08deee52d737

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2026 15:54:29.8466

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: b4edc9f8-801a-47b2-841c-0e14544448fa

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA0PPF33F27776F



--_000_a5df3b9e24f947b9a6c5782162280fe5SA1PR16MB6436namprd16pr_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Thank you for contacting LegalShield. This email inbox is not monitored. To=

contact us please visit https://www.legalshield.com/contact.



--_000_a5df3b9e24f947b9a6c5782162280fe5SA1PR16MB6436namprd16pr_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>










:#000000; font-family:Calibri,Helvetica,sans-serif">


rt">Thank you for contacting LegalShield. This email inbox is =

not monitored. To contact us please visit https://www.legalshield.com/conta=

ct.












--_000_a5df3b9e24f947b9a6c5782162280fe5SA1PR16MB6436namprd16pr_--

WEb/SEo/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 15:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpYHK-00000000OA2-2CGh

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 15:26:58 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 15:26:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013083.outbound.protection.outlook.com ([52.103.43.83]:11651 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpStv-00000000C7W-3Fpo

for root@nk.ca;

Thu, 30 Jul 2026 09:42:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=W3W20/suBcDYJoYIBqEjjeGtOqCdekDEtrVlJyXxKw3BBxhzAFhed/RKVfVVsixMDc6XxqsxRBFg0StHzdrBrMpmxGr8gw0So+DeoJj7OSSvnTIEJsAQYE4N1e2/m0joPjJIylv8b2YA5X+GBhWQGwQ/ESi55fzlPweQZCNI5r9Nye7wMGC/CKE/g9UZVVt2faqyj9zSmueBJXvW9T4x3RBdgANdmutebGDTe94VFCG3wS6et+gYnQnwlFTV1HZCNgxnmNmtBje9o1mHjzvTtRNEOO149jSApAF+6bk7bZqrcStjHaYqt1fjrIhi6g60ZJyvg2+/0lEUT7HH8ftKuQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pkSXhOAm6SuXsUFZF0GfPs8z38mfP2tFufZEvEmpCj8=;

b=hyv3nc9G99MpdWx20D7SC8h/Fh+pTcX4YorW4oXqfHzP1Gtrsw3fKrC5TRmmx5KXgxhD2z1KkojxCoJ3JQiNVLngCOXa53TPyBMjj/uDKqrnzMq0hkTv1OrAThge29OIwi6wjFfsTJs+cOmqbyAT2rHVo9COELiAGTeKNTwJJfX02ZiJ9jpZKGH832C6eUb08T6iA0Dli49UlSJlrVlKtj0rrST/nC9kjm4Yp4YWwVYm2MUXbv2eDQxuQ0BgQBVNQhf7k5hAiM2inm4XNM/Tek7heCd4XqPZElSP5pYRSWffscniPFlVzcNjkW+ukn6GClZfoV8jSLrUMi0iWUqsWA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pkSXhOAm6SuXsUFZF0GfPs8z38mfP2tFufZEvEmpCj8=;

b=dTU8bKs2mTkP2t/Nl8rcbAzDn+5xE9HwCu7uQI4Adi8uebkZrzcqsQ9i4oSdHF1bJTBUTDTGDbXxGnYg6WqNBILp+dVOu6QNpU7QKAg+bfAfiDPGRhiOnqxLSUquKKpgfMJnwfLB48bTKZc66qz9rm2bOz+fw9KlGnhDoG/Ra0ZfUiqjn90GONziT7CT0xC97LKuAXjd07GTs5t5Mdzzm2ds5+AX7Imu04aDRYa74iMQrfySFoVYAP31dQ5HUuwxKsGyxJCHbn7Iai8lIWUdwAxlnWMzffe72Dv+c7IgXPhyhMhNQaLyHmvYdCTlnqcmwYo5VUVruMn9vMSKjdNJ+w==

Received: from TYZPR04MB7278.apcprd04.prod.outlook.com (2603:1096:400:45e::10)

by TY0PR04MB5789.apcprd04.prod.outlook.com (2603:1096:400:21a::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8; Thu, 30 Jul

2026 15:41:18 +0000

Received: from TYZPR04MB7278.apcprd04.prod.outlook.com

([fe80::3a69:b7be:1004:c003]) by TYZPR04MB7278.apcprd04.prod.outlook.com

([fe80::3a69:b7be:1004:c003%5]) with mapi id 15.21.0270.009; Thu, 30 Jul 2026

15:41:18 +0000

From: Punam Gupta

To: Punam Gupta

Subject: Re: SEO Partner?

Thread-Topic: SEO Partner?

Thread-Index: AQHdH1UPVgxUkmbkGUqxM+ijJNS2n7aGNEN2

Date: Thu, 30 Jul 2026 15:41:18 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR04MB7278:EE_|TY0PR04MB5789:EE_

x-ms-office365-filtering-correlation-id: 5e86a3fa-4ad0-471e-e134-08deee50ff6b

x-microsoft-antispam:

BCL:0;ARA:14566002|2604032031799003|704163111799003|8060799015|19110799012|8062599012|31061999003|36102599003|51005399006|16051099003|55001999006|15030799006|15080799012|25010399006|37011999003|22091999003|4140399003|2604031031799003|24121999003|40105399003|26121999007|2607281247196005|102099032|440099028|3412199025|26104999009|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?Q1RIRGsrejZRZUo2NXdCd2E5KzZDaDZiRGNhQysxVnBYdTNCTzIzWXQvSHMv?=

=?utf-8?B?UkNPdUNLTXM1UDdncVNHZGtqNmFoa1htb0lFMWc4RGtlVDFsbTBNb25lTHls?=

=?utf-8?B?ZVRWZG0rZDA2MEtWSGpzazJQeEhyVmpEV1BRdWF0Zmdaa01aYTd4MDJOTkE2?=

=?utf-8?B?OTJ2WnpoN1dBM2NlOFFDMUlxQXBaSGFycHE4aXZtNnB3N0VqZ2hUNzVGRU8z?=

=?utf-8?B?YmJzQ0RESFREVnRkOWFXa2ZlZzZEYkhxSGMzenRwWm1RVWUxTW0raUN2RE4x?=

=?utf-8?B?UzZUMGpHTUdRNVBqK3dyNnJ1UFRERmlFVUkxRHpjV2E3Ynp0TDIzak45UG9S?=

=?utf-8?B?WWJYYUZNOUlnTU1kU2tBS2hLZDJlUmt5MWhFTmRQWEFPN0IwK0RjQm5SN3Mv?=

=?utf-8?B?NXZ1eDRjM1VTeHhDcDdIeDRtTWpST29BdFIrOTByaFpqWHl2dUY5cnl0VlVI?=

=?utf-8?B?cXovV2Z3TzEyRHdHM3cwSW9JK3dUTXprWEtDWW5uZlovdFdxOVJtU2FPazVx?=

=?utf-8?B?RUhZSzdOck5hTVBYZWpFcXBVdit6M0NhelVLZXNOdEthS2RrZGFkbjRDaW1v?=

=?utf-8?B?eUQ0SnJHOHIvUGZkbG1qdllmQXV2V3FvVVBLaGRsN2VaTGlTUG53Mzcwa3dK?=

=?utf-8?B?OENGNFc5cDdqQ0tVUFN3eTg3SXJwak9leC9EU0VWZUs0OFVMNWxWYXNsVGc2?=

=?utf-8?B?NGoxZXg0VzQ3cXhZT29WRnZranNLKzdrVU9HRitiUGNjZnRpM3JOWFRNSmNi?=

=?utf-8?B?VCs0QU12aEZXckdrN25CcW5tVEk3VHdZNUJGcDZ4MmR1bm9NN1RXT0dPMGgv?=

=?utf-8?B?bHZ3TWVrZ1JncEQybDZDZmZqNnNkMHE3L0lNWkFJb2dVRW1ZVlZWQUdNMnJv?=

=?utf-8?B?cFlmWVhtZFRxQWdGazR3VUZvQm1ySWYvUGZOcXhNVlQ0YWhqbW8yYXhPNWJP?=

=?utf-8?B?bmdqa2V4ZEdOS3N1eVRsNU81LzVBbDlnZWtwUkdPOEFSMGljcUhVTkxPdjlJ?=

=?utf-8?B?YkxKQWtXNFg1TnU5Sy94aFhxL3lPTUVQd0E2bldaa0J2SzdmYW5GTzM4alFw?=

=?utf-8?B?cjNROG44TzlhSFRMemtQQTFOUG9VTWF6ancrTXhHcHg4Z01Eb2lSVXZYd290?=

=?utf-8?B?T3pqM0FvK0RFa3dnSURaazFaQ0x4Q3lBcmdWMVM0UURJaDRCRlFSbFRTMVVm?=

=?utf-8?B?RjhsdnVYMWliZ21nUUdaR0IxMGg1L3g0VGhldS9kR0pONk13TmMyMnA2U2d3?=

=?utf-8?B?WXRwdFowZU5yT3FZVkcwdnBZaXp4YVliMm9tblJocXM5YWd1Y1Bobk5ITzJh?=

=?utf-8?B?c2gxdVMrellEWnlicEhPSnl3eU9CU3RnU2VRV2pvN0RhaG9VRmplZnFmKy9H?=

=?utf-8?B?bU9yMm1MdHExdk5lbkV2bzlaZldhbEt4RnkvV0hzNmdhZ1VPWWo4Y2hyTDVy?=

=?utf-8?B?b2JBZng3cmUwNmttbHpScUN3YkpudTJlY3VuZ1RNSk5QT1JLbkh0MlMzYktT?=

=?utf-8?B?bWVIK0J5ZVlCQWErT3VMRUNPWkFmdW9DejhKT1d4azM0U0VVOEhGUWEyLzRj?=

=?utf-8?B?QmlmNTZxZEQzU1Y2dWVFQ3NlcGJZY1loYVJUSms3RkExOW5TV0lZSU9uaHRD?=

=?utf-8?B?VU4rRjM1TCtvV2FkSEtXR0xQc05rKzZWZlphSUwyL3ByVmZ1U2NkMkpUMWoz?=

=?utf-8?B?cDlHcTQyVHZvR3ZLaXZGRy9kdkZ6OWFZUllUVkl4U1lpVnRRY0hhdDBWL0xs?=

=?utf-8?Q?Hy9uYFQvD+QvvmeLIUD0lR871DFfmqLQuK43aFD?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?Z3VoZGR6Vm5lK1hzRFErVFh3N3lReTExLzRlUUZhMnRneS90R2Q3NVM3amtm?=

=?utf-8?B?QUpuYmdRNEpqQW1DQWZqd2U4NkIyR20rRTU5cUlTeGdOTGt4bDVSMDV1VVFD?=

=?utf-8?B?TGE1cDFHWENpNXdBUnFOS2xBdjZKZHhIbVFMb3lJT1R5cTVPUXRKNGhJN0pD?=

=?utf-8?B?OUZFbXViYUR6azNRZ2ZTYkJ2WlRaZDRucVV6RndIdG16UzdRcnhBSWp1eDRp?=

=?utf-8?B?ZVMreStPd25NcS9jK2ZjQnFvYk5nWEFyYkszU2NCUmhudUJIQ1l4cUVicldD?=

=?utf-8?B?NW1UOEg1OEcxOTZJcFkzOUIyK3k5ZGtsNGYwOUJYQkdvSVdUU1BqV2d2ZVVT?=

=?utf-8?B?emVlNTlkYmxDUURiaGdaWkR5bHFNTmV4a2tIaksxWEQ4ZllHZDFlNmlkbkt1?=

=?utf-8?B?ejh6RHR3dnFMaS9nVS95NTBsRW1mcnJjM0lOUHlxaVVmbTcrK3FQeWdiWmp0?=

=?utf-8?B?eEJ3MmhHQmdienRVNndPTlR2eks0RE5GTGJSMFZUVXV4ZDdnRStnKzRpWlhV?=

=?utf-8?B?UUZOL3JMV3pHNXpOa05Eb2EvSUR1OU94bmx1UGZRbDR1Z1Q1U1YxWUtvaWY1?=

=?utf-8?B?cWtRbkF1cDVOSWQwQjl4SzdzVGFGNnQ1UnZWUTJycVdhMDBCanpTR2t2c0Fl?=

=?utf-8?B?ZzJYZm9wTml2WitudE12MHZ4cFJIcTdXVXBSWWUzVk5uVDRCblp6aGNGTS9R?=

=?utf-8?B?dHNsY0lJQ1c4c2VVKzhlMHNweUgrWUN0emkxTmpremI1ZURIM2xMeFlwYWo0?=

=?utf-8?B?dk9LTVlQeExIOXdic1VVRGJ1Ky9zdlZOUFBTRTJVZDlRdGQ5Ym1FNVp1YXF0?=

=?utf-8?B?RlhFd0NKZlpVOW9kQmFIOVh2Q0srRDFCQ2ROQjMrTC9ET0VRcEoyK1c3RGRD?=

=?utf-8?B?dGdYM1hxYXZwWDhTL3hnc25aeURMSVBUTlB5OHZGY0RaOE0rNU1kK0gxTnov?=

=?utf-8?B?cTBOaE9YTExodm9zaVVBbG1aNzlMRjQvZUNmL0N0Rm8zcUtlUlFqdVhyRGFB?=

=?utf-8?B?TVFOS3R6TTZ3RnhxM2MwZXY3MEFqM3JrZ2FuS2lNSk10RnI0TkRrZVY3SlI2?=

=?utf-8?B?T042M2ZubTJ2VDRXL3IrOFNTZktGTGk0YWczMnEvSUEwWE1VUWlEbzZtaEdV?=

=?utf-8?B?MzZLbzdJVWpOQTA2bWVNU2VvemZzWXdjTDRvSm9PaGwzQTJWUVY4QTJFbVYw?=

=?utf-8?B?NmQxS2ZLSXovMGhHSWlpWTFhbEJwWDdtOTZ2ekwyQW14TS9UZEpGZjV3UzZy?=

=?utf-8?B?UUlrQTFUUnBYYTh0WWZNV04wZ1BaWWNQQVdOSEVKSnlVOXloQjBGK1lNci8r?=

=?utf-8?B?VlVWdXpDM2IvaWZpSHBncEM3WUN2bFpOR29URVNoSWtleGR0VlIwZmtyWlR1?=

=?utf-8?B?b2JudnRQdXdzNFJFcERuZ0xyd2w4QzAwbXZ3U0dJUFk1eUw1Wjg4WmdZeWtJ?=

=?utf-8?B?b21XL2YwdUdrTnVVZnM0cWpJc0lKN2o1UDRKenozWGZBeTNINlBKUFNNRVBH?=

=?utf-8?B?TEljWVhVN3c3RGxjTHVWT2dMUnh4NnIvL0ZzcWdZZmFmQjNaT21XbTJLeVAv?=

=?utf-8?B?RWhSM3JHYzZGWDRWa0o2SmdMRHZrT3dyY2h0cUZndUtrZXRMdXVSSTZkTWFa?=

=?utf-8?B?ekpROTlDQVk1QzNhUGF0Rm95cy80VXl0MXp2M2gwdUF5SlBzWUs4Z0hIbXUr?=

=?utf-8?B?c1Y2dG5lb2Q5N29oWXc4VFJLeTY4ajdDeHYzb05JaE83UEw1Tk10Mi9McVdG?=

=?utf-8?B?LzZsdCtaSHluR3A2YlAyZmNvY1lxeE1HaGFhWFVuR0VXVndicmNNNisrNlFp?=

=?utf-8?B?NFlTbnI4M0pIRjU5MlM0SGN1eHJjcWJDYzIvUU9taDZQdE82YnZjM216Mkp4?=

=?utf-8?B?eUo1RnY4Z3pSaVV6NkxHVXJYM0dIUjM0RjYrVm5iV0dpTUZSVjhCWThuTmRW?=

=?utf-8?Q?mQMK3usXgb4esXPZTsIWLasOVUSQiCk+?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR04MB7278A35B44EB2F3E038B4F4EBFC92TYZPR04MB7278apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB7278.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 5e86a3fa-4ad0-471e-e134-08deee50ff6b

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2026 15:41:18.2496

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR04MB5789



Hi,



I reached out earlier but haven't heard back yet.



Can I send you a price list?



Thanks,

Punam,



On Fri, Jun 19, 2026, at 01:45 PM <> wrote:

Hi,



Are you looking to optimize your existing website for SEO? I can help you achieve first-page rankings on Google, which can greatly boost your leads and sales.



Can I send you a price list? If you are interested!



Thank You

Punam,

Domain for sale phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSPc-0000000075J-2oNk

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:11:08 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:11:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f169.google.com ([209.85.210.169]:57598)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSMX-000000006G7-2KWU

for root@nk.ca;

Thu, 30 Jul 2026 09:08:05 -0600

Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-8484f229529so1650312b3a.2

for ; Thu, 30 Jul 2026 08:07:10 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785424025; cv=none;

d=google.com; s=arc-20260327;

b=P0UJ6SCK2W/V4Nz+ow5SyIC06GGNiTnaPt5Sh20udMNIcKkx5cpORD1xe6gIehIS5L

w+1/V2lkZYntp4TqCorIzR9hd6O0eUiq2bAObRUTAy3vKi6PK5vDxHRiNb1c3MgvutD0

JSp7JgB0YQKDKTqhCGAJaHjBo7rVuJFtAOsA8Klz7wZ+8GtZDCWMzl4vwMmCF+ijmBe4

Mc8fd53HheuxvCTQ09VOjaC8pIx092mvXLsujYbWwSgJ8TrC1Z2FBBjisAzs0w0ZNqrX

7u72H1IRNGAvgQw9caA3nOA87Kk7iqcJYGHcFnt7k8Xje+VT3o/kzki8jj4hoEREth7E

tU9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=WLv0fg1hMwp377BqM1Vins//dYa+zAPsPwrrRgINVEo=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=ZoKPf8DSfYrG80Sppyv4EkX9s5lYkaxV8YSbSNbPwTVl2nuiABd+f0Zda9B8eEjM6E

2uSoEhbgGVE9m4Xwa1w57/10rB19Ya9tZ+7AnMdj270/GlZO8rrS/wF25DJJn5KfYkdy

Vi4HmVYtIuD59vUGjOeRhSHtvAH/FbSRat2FbeafvRx+v3Y7q3F87Nzqiz9XjTxftfme

noVf9T3TlYzkCZGz1SBF6fIf8kzda0xZG4OGV+lfp/sdoiumqMX929nhAFgKsoQLYKl1

LSJSZIJl0LSMQL6D/amXZPeL3cAzZCMe42vfub0ysDo0SGWPyRDdzM0nuKIz3BbEgbc0

nnaQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785424025; x=1786028825; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=WLv0fg1hMwp377BqM1Vins//dYa+zAPsPwrrRgINVEo=;

b=kmh2XE7N4y5rPJN6OiTmavwxlQ3r1eg51ZsoNygMN2AswAUvnNyJ82SpPi11Ah+KpD

KaTBmag3TdPKp3eoBZ+BEXIxuwdNSaFFeVGefHiRH9LgZW0ocEAvlPsoyCI48mnnQ7wP

JUaozYKn0v1DxQclyiqtU9cS6GuraT3Sixj5wUD1WxTqRmmqKHlyzfgTqAffynlqnUV9

vADaheU5rILDATzbMS29nrHcpOtVDmVnlP4v4nAoskLEj30xjKVs8hYDbjl1RR4oYX0e

v0E217OEDhqxoomfj5Bk2wjBHnJnMQBvxBFMIeRGKPMJLW6o36PZ4Joou/3chPBtJcsl

omww==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785424025; x=1786028825;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=WLv0fg1hMwp377BqM1Vins//dYa+zAPsPwrrRgINVEo=;

b=Y+q3pNnWF7hoy08FCL0UTpQp6sGeaQVX1isJFzYLgKhUW+WNLM/kWA5nhk82O8nFPq

Jlckjlc8225IsOBfGMAR4/BHgddcGLbbfhGamfs0N0fCryUiF2z5itESdn0NxGRAhE+Z

XrekL8cdHe0V2vIGP8rZojX60x3E96vNtMIXZvBycD+cBkRX8TlbYc9njreGWAuItvhC

ddfPnSVhUgPWLmw/1eaY92YbEhyyDWaWMQdHpULd5N3fkko7iZKhCML3AlnhiqVs5FOi

CUUR56Ip0vNNQDNtYjeC/FvTPdGd3XvBlvcFLPkaL/iutQN/yLV/n34KQM25sohwOH8o

PmSg==

X-Gm-Message-State: AOJu0Yzgkgwu4WrLHVx7is3ha5pSr+xy30geAktvW2U1LTGkTqFPK/LZ

PUFYyToZc0WIzhQ9f1nfJiJFjLPz8xFQqQw8BEDFfzV2CRPfiYrQA3byIsWQ96IDGR/nY3K9PQ+

+mN1ySk3JUUi+Mi/FyaRB1RzKAqqHECemDxqX

X-Gm-Gg: AR+sD11N/jncGKt5qyfOE0GU68q/4tXzwsEIlZCc5iwdUXu5yRSBkr/NmJXStbsSKdk

/g3jHq49B/T2gGw6JW3C/iAt4k8fFLhpogzlFiWOP4guafbLy/ZacQXZsPj1lT1+rrCyeAQBnzr

dH+RZLhk6vAEnFr3swh5PUJi0epusZq7h/ipza6kaEXTJanoyj0DT9wnJ7Qd5fvEIwDzkWwxvKs

zmSIlpHOXeWJoXPG7EcrdHQYsbjK0x82GAYc3G/tI/8ErzV2NRDdfE423hRdMEJCzbkeOpk6RBn

AVnpeSASfUMRZKJVYyhLy+uNhEByB77nH3WTKqTsCs6k

X-Received: by 2002:a05:6a00:a387:b0:848:732b:6b25 with SMTP id

d2e1a72fcca58-84ebc446826mr2969005b3a.63.1785424024767; Thu, 30 Jul 2026

08:07:04 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Peter John

Date: Thu, 30 Jul 2026 16:06:52 +0100

X-Gm-Features: AUfX_mwvIrfTy1zUzloLaJ1sHkjpHMFB5yYlvPaeIauDkO8aJVQcGIFx5Ml__Mc

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c511510657d56cfe"



--000000000000c511510657d56cfe

Content-Type: text/plain; charset="UTF-8"



Hello,





Despite the fact that I haven't heard from you, I am confident that

purchasing the website domain VoipEdmonton.com could produce wonderful

benefits.





Your business is among those with the most potential suitors, according to

my review of your main website. While keeping your brand identification,

you can either establish another sizable website on this domain name or

reroute it to your current website.





Visit www.VoipEdmonton.com to purchase it now for just $350 and you can

also respond with your best offer or make an offer.





If you have any queries or worries, don't hesitate to get in touch with me.





Thank you,



On Tue, 7 Jul 2026, 19:46 Peter John, wrote:



> Hello,

>

>

> The premium domain

> VoipEdmonton.com is currently available for purchase on GoDaddy

> Marketplace.

>

>

> This domain is a strong match for businesses offering VOIP IN EDMONTON and

> could help increase your online reach and brand visibility.

>

>

> The domain is available for $499 at www.VoipEdmonton.com.

>

>

> Please let me know if you are interested or would like to discuss further.

>

>

> Best regards,

>

>

> John.

>



--000000000000c511510657d56cfe

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

Despite the fact that I have=

n't heard from you, I am confident that purchasing the website domain V=

oipEdmonton.com could produce wonderful benefits.

r>

Your business is amon=

g those with the most potential suitors, according to my review of your mai=

n website. While keeping your brand identification, you can either establis=

h another sizable website on this domain name or reroute it to your current=

website.



dir=3D"auto">Visit www.VoipEdmonto=

n.com to purchase it now for just $350 and you can also respond with yo=

ur best offer or make an offer.


=3D"auto">
If you have any queries or worries, d=

on't hesitate to get in touch with me.


>

Thank you,


iv class=3D"gmail_quote gmail_quote_container">

ail_attr">On Tue, 7 Jul 2026, 19:46 Peter John, <
johndomain@gmail.com">peterjohndomain@gmail.com> wrote:

ockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #=

ccc solid;padding-left:1ex">
Hello,
>


=

The premium domain=C2=A0
VoipEdmonton.com is current=

ly available for purchase on GoDaddy Marketplace.

r>

This domain is a stro=

ng match for businesses offering VOIP IN EDMONTON and could help increase y=

our online reach and brand visibility.


v dir=3D"auto">
The domain is available for $499=

at
rrer">www.VoipEdmonton.com.


=3D"auto">
Please let me know if you are interes=

ted or would like to discuss further.


dir=3D"auto">
Best regards,

to">

John.

v>





--000000000000c511510657d56cfe--

Domain for sale phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSPY-0000000074D-0noE

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:11:04 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:11:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f180.google.com ([209.85.214.180]:55393)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSMN-000000006D4-2hga

for sales@nk.ca;

Thu, 30 Jul 2026 09:07:56 -0600

Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-2caf228a910so18187035ad.2

for ; Thu, 30 Jul 2026 08:06:59 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1785424014; cv=none;

d=google.com; s=arc-20260327;

b=MeGEE8H47+6F7JIMDZaDVekz5v0CtB5XuT+KKqsQq+QMlUL9pBNkdf0csrjAO0aTmX

bRe7NMRM4jPuCepTqd/Vi51EhvMpMbjsT8mEY2TQEWbK5XCTz50qOtX3dl/QicJxN/UU

tzMNRDSum2xLWiuKJMQAhonS5ujhc1wsuo2tQ4JLDMD9bfBn9dIA2d03WME6Lf+2iSfH

vTVI/QFflksStI9RgfjCV5KL+qiTffwc8qMZTizvIVQV4GvXQYVMSmqLqh87YWhr3Ttr

Qmri72jC0QvHggkYjxxGUVHhwXTE0RVxiSEPL546Zhcz2kLHsPnavQP4ReGeIZC47lh4

xWhQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=7RS3X3+x7PmNfR1CYPUPZ4eXr3t4EMVX6r5rfsIH2g0=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=QInuxIx3lRHYINBpFBL03Knjry8IJVPQZFbVs9RnBa+b2nhmkfEUv0c8SJajRPP5q0

Gu5grz8DyQ9FMPXs7+m0rohGstwwdaLixxUIddY9SDp53fTYyqXovx863EOf9jlwuXjS

nirx0VRPk+LEjoviKthXOfACg3cAnXLzsKRngcjj7lnRxLec5a6ybSdMSC6MClztkhM7

PPqLgIoqSnf+t8KjDUpJy5bMF72HxOvCindWLktlMfiE5c7HjyRD8MV5QLPL6quZcC7n

jgIrHM25DTo0WKYyxPJrr3gYbZLPvtD2DMIs0u5g9cpgzAEVVzaYkDdmWk7eP6J5BTRy

rFxQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785424014; x=1786028814; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=7RS3X3+x7PmNfR1CYPUPZ4eXr3t4EMVX6r5rfsIH2g0=;

b=V6Zf3NNCMICN3QFLJ+SPosNw6rGHcQPjunPr8Xapu0WJc+daCe+3mz/luABMmjFmgX

dECtKN9/evE/Y7tWovvDg/xmw9ZeIuhzdMC1MHGcXLf7FJxLTHJITUOuOjIwRMAN/ak+

npRWD44dUc+cMuWV6rb7kNwC4+z6qTTjVr6ViVq3a8PNEAfNK1O1xC8b24EHrIH920Az

CiZNi24uvWiN5AemxKvlhoxRDP8uOGHnZVLPvUq7Yw4QYPzApe4RoNqa6pGTEXDJ2HR8

9HSORHgHFigb/ClZ45YkXuw8lWGjILvuiB7TxMbFFw5TyPe5wMcgiSve9hmJeB2RcDEl

Ethg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785424014; x=1786028814;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=7RS3X3+x7PmNfR1CYPUPZ4eXr3t4EMVX6r5rfsIH2g0=;

b=c6jfFwwoAU8enB2harDkqN8J2rXedpz2D+FHwE+hbk+dp6F7C0NYkjNKsH2o1CKZfm

ZVygZ7diatEp4jtRw4URQrT3ao0X9x5v+nB7W7UI+WOYodobg1Ywk8X7ZSkvJEUXwVI9

QKvpsrMNiIhewWQPCn44VxIFDUr6XNIdULBZznyPREYOFONhYlRAS4Ku+daFtO3GYowx

qRexVr4p7K71mL7CPHPq1/vf5+fYwqWqn13gcWO9K146NxogPqiBoErWO3sSckj8grF3

h2sldY5L2dR6ULAALB9Gqmm03z1O5AutQBqeolu8DD10sanwTRO27pU8hdAJl7RjY4T1

7e6g==

X-Gm-Message-State: AOJu0Yyps5O5i7iIj2UBeTh9sVCMijTUf+Ub1ehoeq70lqgPm5uReoTb

OUkBoSPpYDEy6TCNKZr6FQ4REDB8reBP5jp3ZJR9GO9Gd0t/8AVIRJX7/G8pZ8jdBQwJ2G59Vzr

BuLePN5T1nSAQX+88DhvYLncpBVoTp7HL/cec

X-Gm-Gg: AR+sD12LFdz7D2xIH2FivtkAeOHbLN5bblrUsCCaGOShjS+0nUO0G0uIlTvbh4VGMDJ

rh1IFWmVVQX8r7EMhjcKQUPC9FmdUTjAm/lqucd0mnfw9h1PvYfkNyTAtkhMN9f5/oMP23DTnkm

WUOLc2YNBL2o4TJCB4AzDw5b2j63HbD6GogZAnGHJgFwySql4VNJwpqjqXNMBhq5mOatzMMg/Ti

hI/GweyDzYyN4qbW6Eh7U+GNc/y9MDsOLqyN3UCVNkB5p1RB5Zz98uYOHssde1Fgg8SQqpS1+R6

RJL/q/8J8MGm/aFyL2hRC0q68xpUtKHFz+ItD/nOZbKe

X-Received: by 2002:a17:902:c40d:b0:2ca:d7a0:1312 with SMTP id

d9443c01a7336-2d035c864a4mr34097325ad.25.1785424013655; Thu, 30 Jul 2026

08:06:53 -0700 (PDT)

MIME-Version: 1.0

References:



In-Reply-To:

From: Peter John

Date: Thu, 30 Jul 2026 16:06:40 +0100

X-Gm-Features: AUfX_mzxnnzcF5xl4_jmF7IScEzktdeOOIhfkckvTuWdOl_pah2p3RQ98DrzKmQ

Message-ID:

Subject: Re: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000001b83020657d56ca9"



--0000000000001b83020657d56ca9

Content-Type: text/plain; charset="UTF-8"



Hello,





Despite the fact that I haven't heard from you, I am confident that

purchasing the website domain VoipEdmonton.com could produce wonderful

benefits.





Your business is among those with the most potential suitors, according to

my review of your main website. While keeping your brand identification,

you can either establish another sizable website on this domain name or

reroute it to your current website.





Visit www.VoipEdmonton.com to purchase it now for just $350 and you can

also respond with your best offer or make an offer.





If you have any queries or worries, don't hesitate to get in touch with me.





Thank you,



On Thu, 23 Jul 2026, 17:45 Peter John, wrote:



> Hi,

>

> I noticed your business specializes in VOIP IN EDMONTON

>

> The domain name

> VoipEdmonton.com is currently available and could strengthen your online

> presence, whether as a standalone website or by redirecting it to your

> existing site.

>

> Asking price: USD 400 or best offer.

>

> Visit www.VoipEdmonton.com to purchase, or reply to this email if you

> have any questions.

>

> Best regards,

>

> John

>

> On Tue, 7 Jul 2026, 19:45 Peter John, wrote:

>

>> Hello,

>>

>>

>> The premium domain

>> VoipEdmonton.com is currently available for purchase on GoDaddy

>> Marketplace.

>>

>>

>> This domain is a strong match for businesses offering VOIP IN EDMONTON

>> and could help increase your online reach and brand visibility.

>>

>>

>> The domain is available for $499 at www.VoipEdmonton.com.

>>

>>

>> Please let me know if you are interested or would like to discuss further.

>>

>>

>> Best regards,

>>

>>

>> John.

>>

>



--0000000000001b83020657d56ca9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

Despite the fact that I have=

n't heard from you, I am confident that purchasing the website domain V=

oipEdmonton.com could produce wonderful benefits.

r>

Your business is amon=

g those with the most potential suitors, according to my review of your mai=

n website. While keeping your brand identification, you can either establis=

h another sizable website on this domain name or reroute it to your current=

website.



dir=3D"auto">Visit www.VoipEdmonto=

n.com to purchase it now for just $350 and you can also respond with yo=

ur best offer or make an offer.


=3D"auto">
If you have any queries or worries, d=

on't hesitate to get in touch with me.


>

Thank you,


iv class=3D"gmail_quote gmail_quote_container">

ail_attr">On Thu, 23 Jul 2026, 17:45 Peter John, <
rjohndomain@gmail.com">peterjohndomain@gmail.com> wrote:

lockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px =

#ccc solid;padding-left:1ex">
Hi,
<=

div dir=3D"auto">
I noticed your business specia=

lizes in VOIP IN EDMONTON=C2=A0


=3D"auto">The domain name=C2=A0
VoipEdmonton.com is =

currently available and could strengthen your online presence, whether as a=

standalone website or by redirecting it to your existing site.

ir=3D"auto">
Asking price: USD 400 or best offer=

.

Visit
//www.VoipEdmonton.com" target=3D"_blank" rel=3D"noreferrer">www.VoipEdmont=

on.com to purchase, or reply to this email if you have any questions.
div>

Best regards,

ir=3D"auto">
John


mail_quote">
On Tue, 7 Jul 2026, 19:45=

Peter John, <
ank" rel=3D"noreferrer">peterjohndomain@gmail.com> wrote:
<=

blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=

#ccc solid;padding-left:1ex">
Hello,
iv>



">The premium domain=C2=A0
VoipEdmonton.com is curre=

ntly available for purchase on GoDaddy Marketplace.
=



This domain is a st=

rong match for businesses offering VOIP IN EDMONTON and could help increase=

your online reach and brand visibility.

<=

div dir=3D"auto">
The domain is available for $4=

99 at
target=3D"_blank">www.VoipEdmonton.com.


iv>

Please let me know if you =

are interested or would like to discuss further.

>

Best regards,

v dir=3D"auto">

John=

.








--0000000000001b83020657d56ca9--

Apple watch paypal phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSPP-00000000720-0Acp

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:10:55 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:10:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazlp17011026.outbound.protection.outlook.com ([40.93.14.26]:63763 helo=SN4PR0501CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpS4t-000000002Fz-0Q8j

for doctor@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 08:49:58 -0600

Received: from BY5PR03CA0003.namprd03.prod.outlook.com (2603:10b6:a03:1e0::13)

by CH0PR18MB4356.namprd18.prod.outlook.com (2603:10b6:610:d4::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Thu, 30 Jul

2026 14:48:42 +0000

Received: from SJ1PEPF00001CE1.namprd05.prod.outlook.com

(2603:10b6:a03:1e0:cafe::39) by BY5PR03CA0003.outlook.office365.com

(2603:10b6:a03:1e0::13) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.12 via Frontend Transport; Thu,

30 Jul 2026 14:48:42 +0000

Authentication-Results: spf=pass (sender IP is 74.125.224.69)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

74.125.224.69 as permitted sender) receiver=protection.outlook.com;

client-ip=74.125.224.69; helo=mail-yx1-f69.google.com; pr=C

Received: from mail-yx1-f69.google.com (74.125.224.69) by

SJ1PEPF00001CE1.mail.protection.outlook.com (10.167.242.9) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8

via Frontend Transport; Thu, 30 Jul 2026 14:48:42 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:B97BEA2483B572F4871975E87A0C1DAA81784E3537BACBFD3DCC8B2E006F2617;UpperCasedChecksum:6AA3FAD147D3EF2CA1C844820E2CE1F73612A9721EA4BC3EE191BDB93FBF32FC;SizeAsReceived:3549;Count:15

Received: by mail-yx1-f69.google.com with SMTP id 956f58d0204a3-66937c2e6d7so849921d50.0

for ; Thu, 30 Jul 2026 07:48:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1785422921; x=1786027721; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Lk32AcK2ToK/mn9qK0xTYMaRUNR8iCINgl5/emnvF2o=;

b=OX4Ol09P8q1tKxZF+O5u8/fUp7Fg5TjMmB7WeTcaCeakQ9+FJFa7iah4YFpwo/YL8p

++KZo8OybQawamaBFiWVWwRbOAEDdDB2gu9VO49dHW8IIYGolKgnQyx0UttlB7Ik9FZa

d8hcoK256mDUpKB72kxQrobnGKoiqqwccA4t7DGpj9BqH3DXZSbCGCzw4dHg0MpM+z53

JkuWyyZPVUSDCUgNGB6cN0SwYIuUJXk3DtfdzXLI/iF8OyT7PVm6erQmA8T1bp8Icllj

t7vNXXtElly4oKh5vriW1Wb+pOt/NpUm1OmOTsBKVGQQ3S69VWzg+Ov71uqWN4mS776Y

R/og==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785422921; x=1786027721; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Lk32AcK2ToK/mn9qK0xTYMaRUNR8iCINgl5/emnvF2o=;

b=E9pEH17xkZIOjhi7YLOBo/MsBAM0Q0blKPPYDvSKq4JZLh3cPTHsSrXWOiYyGUaXVB

4+rPDwRq76xpc1vIMpz6tjjbp920hSsDlJbf78S69oenlRhCF548jf9h0sFXrcaPJLlU

IBj5WfGGYtCUBNmdV0cw8FmEXGq/b67jNtJDvdtry3MY8uzF6m/FxM+xOIRnm7GyNDRV

d7fx+/DOr1VLcRo888A0eNwVEW0pUYyK+dW3CiAVqWeyC13gs7J/Y1vaOctMK4o67l1H

KX9dQ21W2sY0i1fTkQexZsKWnsw37xgtEx9Arw/ax7SUu6vk/9ahkt8crrcDO2rn1kj8

z9qw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785422921; x=1786027721;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Lk32AcK2ToK/mn9qK0xTYMaRUNR8iCINgl5/emnvF2o=;

b=N3PkZitGVy2tXP5ytbwELbw4ySMtfyQ+O5WZjRmD8S0ohZJn8cclgCefQA537Ttp1I

11ewCJDKd4ZYFL1eLmS+XuNPIXc0hDW7iNbowNMt3oLkc1F/KlTod92qNEKYcZNzm9PF

q6XStd5s6TwM4Mw2VtIEFvjwqEHlPRCyC9lEHMpWEchMkuBRxwt7efJai610NfluFczZ

soxXA+YPEaaGozva2t810inyGb4iuRgSNKGxGtgSj8mTZVWlMp/CoVZ6doKioctf7rY1

YdDUlBprF/qid7dWgDamQjKPZu98HTqO94tA46resy5slTog7TSYoIcbzNnBOB+XrEhM

7rng==

X-Gm-Message-State: AOJu0YxBrkDvERd2yH1Y/e2rTWGmQLTFn3VtwdP3aHWo98Sr+5SUXXc2

UPS1kowUf+HPqN7ykz19LrOvXrSrQGlx51HPhtw6xsF9pdU+x+GTG4OOkh4yQtU6rz1Iz5na7lf

XyT2e5JJtr0L1aPB4sSSoTVjjwoZ5o2sOez0=

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4504:10b0:667:8b90:2e55 with SMTP id

956f58d0204a3-6692f7d7d11mr1447246d50.97.1785422921718; Thu, 30 Jul 2026

07:48:41 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Thu, 30 Jul 2026 14:48:41 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Notification=3A_Your_auto=2Ddebit_payment_of_?=

=?UTF-8?Q?=24429=2E99_USD_is_s=2E=2E=2E_=40_=C5=A1t_30=2E_j=C3=BAl_2026_=28cynthiaperez389903=40?=

=?UTF-8?Q?groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="00000000000005df870657d52b18"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ1PEPF00001CE1:EE_|CH0PR18MB4356:EE_

X-MS-Office365-Filtering-Correlation-Id: d9314ac5-1fc0-41f6-d3c2-08deee49a666

X-Sender-IP: 74.125.224.69

X-MS-Exchange-EOPDirect: true

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|34130799006|3069299007|32020799003|970799063|24102599021|6019299003|9000799056|1680799066|5139299004|26130799012|29080799009|4040799016|9020799019|6092099016|9400799043|3151999006|1041999012|1602099012|30041999003|22062799003|2607281247196005|2145499017|18021999003|1380799030|1360799030|1370799030|440099028|4302099013|3412199025|26104999009;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?blFGdW1xRUNtMnZ6TTNoajNxZncrSDdUeWp0bk4wOHdkWFBnOG5XV2tHSUti?=

=?utf-8?B?RnRQUlVnV2ZnN1h5NjNYWStsbjFuSklQeFJ0V2w2NEJCeFRFeGJaeExKdmcr?=

=?utf-8?B?Vk90MHlCYzFqYnN0c1BaNERkWC9wRXZJeFZDY0NFU2p1NTNIU0Y1YTZhWTYz?=

=?utf-8?B?L296NGsrWlZkci9ZK0N0Wm05UjBIbUpIQy9NbDl2dWFJU2M4VFZHejBaNjNr?=

=?utf-8?B?TzRmTEdEb2J0V2NwNmcrY3hEcG4zV2FVWXpWNmZ0ZHE2VWpSVFpxcVMxQytG?=

=?utf-8?B?c1NKM0FCcGhUZjRZUDdIK3ZXNHJVdmhIZEpwa1VUcUNLVjBJaE5zU1VlM1ow?=

=?utf-8?B?biswaytMWjlKY25HMitMWmpDNTZSSldqWXRic3NEeVR4TEdERnIzb3FQMzRq?=

=?utf-8?B?NGF3Z21kS25uSVFIWENDNTFNUkR4WEt4bEEyU1ZnTUx2NHo4VmpldGlRVjFi?=

=?utf-8?B?NWVENnMzaE1GUWNjdjh6dlZBMTRHc01BTDhqa3A0aFhGcFFvNWRSa0dnSlBi?=

=?utf-8?B?cTdZSFFBT2ZrcDFoYy9GbFNmQlJXS0NZNXVpdnQ5c0RnMy9GOEVwcEhyTm1Y?=

=?utf-8?B?WHdvSDl3Y1RLbnF2dUJYQXlyWVJJYWhQZWFiUktzalRNV3hLMFhoeDJEMUgx?=

=?utf-8?B?T0MycnBDRldUaUhoU1grTjNFK0VIK2RvcTk5TlJrcFRKR05YclJsTThVUmZ4?=

=?utf-8?B?SmNXM0RwL1Z3RXNGQTQ1c0dmN2praSt6N3FIdUNKdjNYN3c2TkxaYUJCTVAy?=

=?utf-8?B?RDFpWUNqTVV2N29NZmo3NFIxSzlVVWdBWU4rbjZBanVwQjFLdm9MU0xPMXFm?=

=?utf-8?B?ZVBXTGdwNXNkbC8zS3l2NHZlc2QyUWk5SDEwRThFeU5MM2xMcVdsTlU2elND?=

=?utf-8?B?QlBaZHdVQ1dOdnVORTVVZm1SMXNEVXJYTlk2VzB2S0d5dFBZZ3pMdGtOS3FP?=

=?utf-8?B?dld3RVoyaCtkbzdOcnFrL0xoRFZZdGFoUjB3ZXo3NWRSSWpCUEc3NGpWSkJi?=

=?utf-8?B?aHA1bjg5VjRoNGRTUGRhNW54L0Z2N05yRVVNUU5GNXZHOFlNWnBweUNhSStq?=

=?utf-8?B?dm9QTk1mMlZkc0pPMDVmT3piWjgyc3d6b1JDR2szelp5cmh3VWVLY1U3WHJQ?=

=?utf-8?B?MU9pWHFRTDlZcjdTdy9vc2lDd0tRdVZQZVRPWFFqTGVjbDk1elVtUGJVQjUy?=

=?utf-8?B?WTZXbStQam82SDJvMmxWTUorbkREMnZHSmFoQmRERTVubTBNRkNaVE5nLzNx?=

=?utf-8?B?UkJwSFVFNHFldVRPNmg2TmxoMUNXVEd5VWo0OGdkYnE2NG9GMVlnUTBJVFZw?=

=?utf-8?B?RjNrMTJJRVlRTTJiZ0JaemJoRHVRSXVGVVJ3d3VsQUJGeXczVktHUFhkQjBZ?=

=?utf-8?B?RStPOVNoNEJnNFZINGFvNi9abWp2Ky9GOVVUYWl5OUtkT3hTWnZuT2NEdyt5?=

=?utf-8?B?S0RqQlh2ZmM5M21rVWZUcnZueDlCR05SamIzVHdrdzZmdHdaclFRUXdaSVQw?=

=?utf-8?B?ajJTTDZLQ0tVM3IyY0xhOERZbkdsSUY0azcxKzBjdXhCQXJ3dXhiKzBKMHZq?=

=?utf-8?B?Vm5HRGZUOTZOZmorMy9YSWdVeStGaVNKQ3ZDMGkwY1NKMmd1SkorZlBaN2g2?=

=?utf-8?B?Z1JoRXJMU2E2VUlCRStvWm1nT2Q2YzVzR3FtY0FwV0ZWSHhiVGpKYWxwdHl3?=

=?utf-8?B?NU9qUDVWeU1paENSOThrY0NsUTk1WWN6OG5pbjVmQjM2TmltbGdjYkxPeklE?=

=?utf-8?B?V3pEdTc4Qll4S29XdWsrbElEQUtROEZjOWVqc0tRN3BPZzVucTQvYWZFVXFC?=

=?utf-8?B?THlJTTBUMGU3azVGNGI4dE84RUlza3B5RUNBc0cyRnNEclN3U3VvK1ZETm02?=

=?utf-8?B?K2NQYkkrRmdMQy9iQ0NTUkhYUlBSc05hR1hmaTZRb0JKd2lhVXJKZzJ3dGMr?=

=?utf-8?B?RXhyeHNkUW1qSEhKMVl0eGN5bHZmL2xGN1hjZXdaNlQ0YWJ6NmZ4M0kvSW9G?=

=?utf-8?B?OXNQTzQ0M2NSd1ZRZk9lOUZNWCtWT2NEZWN0b2NRSUNQU0QxYzZpdmFoV0tN?=

=?utf-8?B?L1h3dXNma3ZWdHJueDZudlhqWE51ZURRWFVHMTRIYlNEMVhWMVVENUtZKzcz?=

=?utf-8?B?eHVzWXRQSEFwVjEwMUdwWlZzOGttQzFGTlJjUGpOQ2U0cGQ5N1c5SnJkcDNi?=

=?utf-8?B?UE4wUExtYVNob2VnM0huYkY5djdlWGU1SDY5TmIwWVVMMjAzQzFWQnFEVDRR?=

=?utf-8?B?VzBHTjNFV0hYZEJrVkFGcVNGMy9YVGNYcjQ0cXVmWHNNWWJ4dzNtVkcxV2tE?=

=?utf-8?B?SWlwT3RWUDZmVm84K3E4N04rVlgrRnVnSkZNV280Y0hyM3ZHRnoxMmtCZllk?=

=?utf-8?B?SWtqQzY0NEdRMitMRWd6TjdzT3pYbVRIVmE3RHQ3TVhlTkxrTG9NRDJFbmZk?=

=?utf-8?B?Z1Mvem03dkMzSG11VFBZVXJac2JVSytxaHNFSnUrWVFTRXlDbmVYSVVnUnJS?=

=?utf-8?B?M09zV3JPM0JVbVJkRHhYTzZva1Z0ekh1QWF4R1ZPRDhZZUYzRzFXOUxKNzRV?=

=?utf-8?B?T3VYNWlaUk5TZFdLTHBJN1NpNmVUMnNJM3o4SUZnckZQOFhFU0VDWlgxM1c1?=

=?utf-8?B?WitCTnNHQ2VWeU9NNEdvdXdEL1ZrTUgyVlBVMk9WNjNXcmNoN0N3YzVRSzRu?=

=?utf-8?B?YzBWRTFtZU9qczV4N1pqN2dqbmdpdnlIVUZkZlVLc05xODFQRnhXYUxUcW9t?=

=?utf-8?B?UFlBeDJnTU5hUHh0TGIwUWRxTDQ2VGRSR1hmYjB5OHZ4bmtSaHNEZFlQS0J5?=

=?utf-8?B?Y011YkNYNVMzbThqbnEvRmZ2T1hDemJ6MERsYWZ0aEVBZ0o4U00rSHo2Y3RV?=

=?utf-8?B?VG5Pb0RXODlaVXVPZ2JmMDFnV1kreUY4eXhpdm9ST0QzU1UxKytLR2ExRElq?=

=?utf-8?B?a0xYSXdOL2hsTUdKUWVtWk8zYVBBZXN2NDNjVUJtMi92WS90Z3VoWDVNZ0Jr?=

=?utf-8?B?TDUxRTA5N1cwU0VPbkJCalpXa2pFRFp2ZjhWR2tTZkQ4blhMZTRleFIwTE1t?=

=?utf-8?B?a05rZ1JINXBVcStFeHByUFAvZjAwYmpGWnl3M0FlYTMwTU1TSkcrRCtYWkJL?=

=?utf-8?B?bkdUbUJWUlZ6ODc3djlSbUEvNWtGdWlBVTI1cmkwZz09?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jul 2026 14:48:42.4572

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: d9314ac5-1fc0-41f6-d3c2-08deee49a666

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: SJ1PEPF00001CE1.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR18MB4356

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Notification: Your auto-debit payment of $429.99 USD is scheduled

shortly [Invoice #INV-3381-APW] štvrtok 30. júl 2026 Dear Valued Customer,

Thank you for your recent order with PayPal. We are pleased to confirm that

your order has been processed successfully and that your payment has been

authorized. We appreciate yo [...]



Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[74.125.224.69 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

[40.93.14.26 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.14.26 listed in dnsbl.ahbl.org]

[40.93.14.26 listed in dnsbl.ahbl.org]

[40.93.14.26 listed in dnsbl.ahbl.org]

[40.93.14.26 listed in dnsbl.ahbl.org]

[74.125.224.69 listed in dnsbl.ahbl.org]

[74.125.224.69 listed in dnsbl.ahbl.org]

[74.125.224.69 listed in dnsbl.ahbl.org]

[74.125.224.69 listed in dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:cafe:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:1e0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.14.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.14.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.14.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.14.26 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.14.26 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.14.26 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.14.26 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Notification=3A_Your_auto=2Ddebit_payment_of_?=

=?UTF-8?Q?=24429=2E99_USD_is_s=2E=2E=2E_=40_=C5=A1t_30=2E_j=C3=BAl_2026_=28cynthiaperez389903=40?=

=?UTF-8?Q?groups=2Eoutlook=2Ecom=29?=



--00000000000005df870657d52b18

Content-Type: multipart/alternative; boundary="00000000000005df860657d52b16"



--00000000000005df860657d52b16

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



Tm90aWZpY2F0aW9uOiBZb3VyIGF1dG8tZGViaXQgcGF5bWVudCBvZiAkNDI5Ljk5IFVTRCBpcyBz

Y2hlZHVsZWQgc2hvcnRseSAgDQpbSW52b2ljZSAjSU5WLTMzODEtQVBXXQ0KxaF0dnJ0b2sgMzAu

IGrDumwgMjAyNg0KDQoNCg0KRGVhciBWYWx1ZWQgQ3VzdG9tZXIsDQpUaGFuayB5b3UgZm9yIHlv

dXIgcmVjZW50IG9yZGVyIHdpdGggUGF5UGFsLiBXZSBhcmUgcGxlYXNlZCB0byBjb25maXJtIHRo

YXQgIA0KeW91ciBvcmRlciBoYXMgYmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5IGFuZCB0aGF0

IHlvdXIgcGF5bWVudCBoYXMgYmVlbiAgDQphdXRob3JpemVkLg0KV2UgYXBwcmVjaWF0ZSB5b3Vy

IGJ1c2luZXNzIGFuZCBsb29rIGZvcndhcmQgdG8gc2VydmluZyB5b3UuDQpUaGUgYXV0aG9yaXpl

ZCBwYXltZW50IHdpbGwgYmUgcmVmbGVjdGVkIGluIHlvdXIgYWNjb3VudCBhY3Rpdml0eSBzaG9y

dGx5Lg0KDQpGb3IgYW55IGlucXVpcmllcywgcGxlYXNlIGNvbnRhY3QgdXMgYXQgKzEgNjU2IDU1

NiAyMTUxLg0KDQpJbnZvaWNlIERldGFpbHM6DQoNCkludm9pY2UgSUQ6IElOVi0zMzgxLUFQVw0K

DQpQcm9kdWN0OiBBcHBsZSBXYXRjaCBVbHRyYSAyDQoNCk9yZGVyIERhdGU6IEp1bHkgMzAsIDIw

MjYNCg0KQW1vdW50IER1ZTogJDQyOS45OSBVU0QNCg0KUGF5bWVudCBNZXRob2Q6IEF1dGhvcml6

ZWQgUGF5UGFsIEF1dG8tRGViaXQNCg0KSWYgeW91IGRpZCBub3QgYXV0aG9yaXplIHRoaXMgY2hh

cmdlLCBwbGVhc2UgY29udGFjdCB1cyB3aXRoaW4gMTIgaG91cnMgdG8gIA0KcmV2aWV3IHRoZSB0

cmFuc2FjdGlvbiBhbmQgcmVxdWVzdCBhIHJlZnVuZC4NCg0KRm9yIGNhbmNlbGxhdGlvbnMgb3Ig

Y29uY2VybnMgcmVnYXJkaW5nIHVuYXV0aG9yaXplZCBjaGFyZ2VzLCBwbGVhc2UgIA0KY29udGFj

dCBvdXIgc3VwcG9ydCB0ZWFtIGF0ICsxIDY1NiA1NTYgMjE1MS4NCg0KVGhpcyBpcyBhbiBhdXRv

bWF0ZWQgbWVzc2FnZS4gRm9yIGZ1cnRoZXIgYXNzaXN0YW5jZSwgcGxlYXNlIGNvbnRhY3Qgb3Vy

ICANCnN1cHBvcnQgdGVhbS4NCg0KwqnvuI8gMTk5OeKAkzIwMjYgUGF5UGFsIEFsbCBSaWdodHMg

UmVzZXJ2ZWQuDQoNCk9yZ2FuaXrDoXRvcg0KSGFyZXNhc3ogTnh5c2Fyd3NhDQpoYXJlc3Nhem56

eHJyc3hheHozMjFAZ21haWwuY29tDQoNCk9kcG92ZWR6dGUgbmEgY3ludGhpYXBlcmV6Mzg5OTAz

QGdyb3Vwcy5vdXRsb29rLmNvbSBhwqBwb3pyaXRlIHNpIMSPYWzFoWllICANCnBvZHJvYm5vc3Rp

IG5hICANCmh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNvbS9jYWxlbmRhci9ldmVudD9hY3Rpb249

VklFVyZlaWQ9TkdneVltb3dhREpqYzNWbGFtMDRZWEZxTlhGdGJXcHpkRGdnWTNsdWRHaHBZWEJs

Y21WNk16ZzVPVEF6UUdkeWIzVndjeTV2ZFhSc2IyOXJMbU52YlEmdG9rPU16RWphR0Z5WlhOellY

cHVlbmh5Y25ONFlYaDZNekl4UUdkdFlXbHNMbU52YlRnM05UZzJORGd4TkRjd056ZzNZbVE0T0RO

bFkyWTFNVEF3TXpGaVpXUTFOek15WWpGbFlUUSZjdHo9QXNpYSUyRkRoYWthJmhsPXNrJmVzPTAN

ClZhxaFhIMO6xI1hc8WlIGplIHZvbGl0ZcS+bsOhLg0KDQp+fi8vfn4NCk9kb3NsYW7DqSBLYWxl

bmTDoXJvbSBHb29nbGU6IGh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNvbS9jYWxlbmRhci8NCg0K

VMO6dG8gc3Byw6F2dSBzdGUgZG9zdGFsaSwgcHJldG/FvmUgc3RlIMO6xI1hc3Ruw61rb20gZGFu

ZWogdWRhbG9zdGkuDQoNCkFrIHTDunRvIHBvenbDoW5rdSBwcmVwb8WhbGV0ZSwga3RvcsO9a2/E

vnZlayBqZWogcHLDrWplbWNhIGJ1ZGUgbcO0Y8WlIG9kb3NsYcWlICANCm9kcG92ZcSPIG9yZ2Fu

aXrDoXRvcm92aSwgYnnFpSBwcmlkYW7DvSBkbyB6b3puYW11IGhvc3TDrSwgcG96w712YcWlIGlu

w71jaCBiZXogIA0Kb2jEvmFkdSBuYSBpY2ggdmxhc3Ruw70gc3RhdiBwb3p2w6Fua3kgYWxlYm8g

bWVuacWlIHZhxaFlIHBvdHZyZGVuaWUgw7rEjWFzdGkuDQoNCsSOYWzFoWllIGluZm9ybcOhY2ll

ICANCmh0dHBzOi8vc3VwcG9ydC5nb29nbGUuY29tL2NhbGVuZGFyL2Fuc3dlci8zNzEzNSNmb3J3

YXJkaW5nDQo=

--00000000000005df860657d52b16

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/Person">
=3D"Pozv=C3=A1nka od pou=C5=BE=C3=ADvate=C4=BEa Haresasz Nxysarwsa"/>
><=

meta itemprop=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/=

>
ization">
itemprop=3D"eventId/googleCalendar" content=3D"4h2bj0h2csuejm8aqj5qmmjst8"/=

>
x; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: =

hidden;" itemprop=3D"name">Notification: Your auto-debit payment of $429.99=

USD is scheduled shortly [Invoice #INV-3381-APW]
rl" content=3D"https://calendar.google.com/calendar/event?action=3DVIEW&=

;eid=3DNGgyYmowaDJjc3Vlam04YXFqNXFtbWpzdDggY3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vw=

cy5vdXRsb29rLmNvbQ&tok=3DMzEjaGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbT=

g3NTg2NDgxNDcwNzg3YmQ4ODNlY2Y1MTAwMzFiZWQ1NzMyYjFlYTQ&ctz=3DAsia%2FDhak=

a&hl=3Dsk&es=3D0"/>

: #fff; line-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0;=

opacity: 0; overflow: hidden;">Dear Valued Customer,

Thank you for your recent order with PayPal. We are pleased to confirm that=

your order has been processed successfully and that your payment has been =

authorized.

We appreciate yo

0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"bo=

dy-container">

tyle=3D"height:16px;" aria-hidden=3D"true">  

cing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" cla=

ss=3D"">

px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; ver=

tical-align: top;" class=3D"main-container-inner">

ection: ltr; display: inline-block; vertical-align: top; width: 100%;overfl=

ow: hidden; word-wrap: break-word;">
ellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-=

table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fix=

ed;">

lign:top;">
presentation" width=3D"100%" style=3D"table-layout: fixed;">=


=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:24px;">

: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac=

ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r=

ole=3D"presentation">Dear Valued Customer,
Thank you for your rece=

nt order with PayPal. We are pleased to confirm that your order has been pr=

ocessed successfully and that your payment has been authorized.
We appre=

ciate your business and look forward to serving you.
The authorized paym=

ent will be reflected in your account activity shortly.

For any inquiries=

, please contact us at +1 656 556 2151.

Invoice Details:

Invoic=

e ID: INV-3381-APW

Product: Apple Watch Ultra 2

Order Date: Jul=

y 30, 2026

Amount Due: $429.99 USD

Payment Method: Authorized P=

ayPal Auto-Debit

If you did not authorize this charge, please contact=

us within 12 hours to review the transaction and request a refund.

F=

or cancellations or concerns regarding unauthorized charges, please contact=

our support team at +1 656 556 2151.

This is an automated message. F=

or further assistance, please contact our support team.

=C2=A9=EF=B8=

=8F 1999=E2=80=932026 PayPal All Rights Reserved.


=3D"description" content=3D"Dear Valued Customer,

Thank you for your recent order with PayPal. We are pleased to confirm that=

your order has been processed successfully and that your payment has been =

authorized.

We appreciate your business and look forward to serving you.

The authorized payment will be reflected in your account activity shortly.



For any inquiries, please contact us at +1 656 556 2151.



Invoice Details:



Invoice ID: INV-3381-APW



Product: Apple Watch Ultra 2



Order Date: July 30, 2026



Amount Due: $429.99 USD



Payment Method: Authorized PayPal Auto-Debit



If you did not authorize this charge, please contact us within 12 hours to =

review the transaction and request a refund.



For cancellations or concerns regarding unauthorized charges, please contac=

t our support team at +1 656 556 2151.



This is an automated message. For further assistance, please contact our su=

pport team.



=C2=A9=EF=B8=8F 1999=E2=80=932026 PayPal All Rights Reserved."/>

k: break-word;;padding-bottom:24px;">

s-serif;font-style: normal; font-weight: 400; font-size: 14px; line-height:=

20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">
cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">
>


xt-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;ma=

rgin: 0; padding: 0;">Kedy

=C5=A1tvrtok 30. j=

=C3=BAl 2026

0; text-align: left; word-break: break-word;;padding-bottom:24px;">

le=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400;=

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; =

text-decoration: none;" class=3D"primary-text" role=3D"presentation">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" sty=

le=3D"padding-bottom: 4px;">


t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit=

-font-smoothing: antialiased;margin: 0; padding: 0;">Organiz=C3=A1tor

<=

/td>

>
k;;color: #3c4043; text-decoration: none;" href=3D"mailto:haressaznzxrrsxax=

z321@gmail.com">Haresasz Nxysarwsa
temscope itemtype=3D"http://schema.org/Person">
ent=3D"Haresasz Nxysarwsa"/>
rrsxaxz321@gmail.com"/>

tyle=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;=

;padding-bottom:24px;">

tyle: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-=

spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-tex=

t" role=3D"presentation">
=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">


ss=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decoratio=

n: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; pad=

ding: 0;">Hostia

(Zoznam host=C3=AD bol na =C5=BEiado=

s=C5=A5 organiz=C3=A1tora skryt=C3=BD)

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:0px;">

Roboto, sans-serif;font-size: 14px; line-height: 20px; mso-line-height-rul=

e: exactly; text-align: left;" class=3D"primary-text">

ont-weight: 700;-webkit-font-smoothing: antialiased;">Odpove=C4=8F
pan class=3D"secondary-text" style=3D"color: #70757a; text-decoration: none=

;"> na
ine-block;;color: #70757a; text-decoration: none;" href=3D"mailto:cynthiape=

rez389903@groups.outlook.com">cynthiaperez389903@groups.outlook.com
an>

ign: left; word-break: break-word;;padding-bottom:16px;">

-family: Roboto, sans-serif;font-size: 14px; line-height: 20px; mso-line-he=

ight-rule: exactly; text-align: left;">
" cellspacing=3D"0" role=3D"presentation" style=3D"border-collapse: separat=

e;">

;">
=3D"0" role=3D"presentation" style=3D"border: solid 1px #dadce0; border-rad=

ius: 16px; border-collapse: separate;font-family: 'Google Sans', Ro=

boto, sans-serif;;display: inline-block;;margin-right: 12px; margin-left: 0=

;">
able>

--00000000000005df860657d52b16

Content-Type: text/calendar; charset="UTF-8"; method=REQUEST

Content-Transfer-Encoding: quoted-printable



BEGIN:VCALENDAR

PRODID:-//Google Inc//Google Calendar 70.9054//EN

VERSION:2.0

CALSCALE:GREGORIAN

METHOD:REQUEST

BEGIN:VEVENT

DTSTART;VALUE=3DDATE:20260730

DTEND;VALUE=3DDATE:20260731

DTSTAMP:20260730T144841Z

ORGANIZER;CN=3DHaresasz Nxysarwsa:mailto:haressaznzxrrsxaxz321@gmail.com

UID:4h2bj0h2csuejm8aqj5qmmjst8@google.com

ATTENDEE;CUTYPE=3DINDIVIDUAL;ROLE=3DREQ-PARTICIPANT;PARTSTAT=3DNEEDS-ACTION=

;RSVP=3D

TRUE;CN=3Dcynthiaperez389903@groups.outlook.com;X-NUM-GUESTS=3D0:mailto:cy=

nthia

perez389903@groups.outlook.com

X-MICROSOFT-CDO-OWNERAPPTID:739734032

CREATED:20260730T144833Z

DESCRIPTION:Dear Valued Customer\,\nThank you for your recent order with Pa

yPal. We are pleased to confirm that your order has been processed success=

f

ully and that your payment has been authorized.\nWe appreciate your busine=

s

s and look forward to serving you.\nThe authorized payment will be reflect=

e

d in your account activity shortly.\n\nFor any inquiries\, please contact =

u

s at +1 656 556 2151.\n\nInvoice Details:\n\nInvoice ID: INV-3381-APW\n\nP=

r

oduct: Apple Watch Ultra 2\n\nOrder Date: July 30\, 2026\n\nAmount Due: $4=

2

9.99 USD\n\nPayment Method: Authorized PayPal Auto-Debit\n\nIf you did not=

=20

authorize this charge\, please contact us within 12 hours to review the tr=

a

nsaction and request a refund.\n\nFor cancellations or concerns regarding =

u

nauthorized charges\, please contact our support team at +1 656 556 2151.\=

n

\nThis is an automated message. For further assistance\, please contact ou=

r

support team.\n\n=C2=A9=EF=B8=8F 1999=E2=80=932026 PayPal All Rights Rese=

rved.

LAST-MODIFIED:20260730T144834Z

LOCATION:

SEQUENCE:0

STATUS:CONFIRMED

SUMMARY:Notification: Your auto-debit payment of $429.99 USD is scheduled s

hortly [Invoice #INV-3381-APW]

TRANSP:TRANSPARENT

BEGIN:VALARM

ACTION:DISPLAY

DESCRIPTION:This is an event reminder

TRIGGER:-P0DT7H0M0S

END:VALARM

END:VEVENT

END:VCALENDAR



--00000000000005df860657d52b16--

--00000000000005df870657d52b18

Content-Type: application/ics; name="invite.ics"

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64



QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw

LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT

VA0KQkVHSU46VkVWRU5UDQpEVFNUQVJUO1ZBTFVFPURBVEU6MjAyNjA3MzANCkRURU5EO1ZBTFVF

PURBVEU6MjAyNjA3MzENCkRUU1RBTVA6MjAyNjA3MzBUMTQ0ODQxWg0KT1JHQU5JWkVSO0NOPUhh

cmVzYXN6IE54eXNhcndzYTptYWlsdG86aGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbQ0K

VUlEOjRoMmJqMGgyY3N1ZWptOGFxajVxbW1qc3Q4QGdvb2dsZS5jb20NCkFUVEVOREVFO0NVVFlQ

RT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtS

U1ZQPQ0KIFRSVUU7Q049Y3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbTtYLU5V

TS1HVUVTVFM9MDptYWlsdG86Y3ludGhpYQ0KIHBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNv

bQ0KWC1NSUNST1NPRlQtQ0RPLU9XTkVSQVBQVElEOjczOTczNDAzMg0KQ1JFQVRFRDoyMDI2MDcz

MFQxNDQ4MzNaDQpERVNDUklQVElPTjpEZWFyIFZhbHVlZCBDdXN0b21lclwsXG5UaGFuayB5b3Ug

Zm9yIHlvdXIgcmVjZW50IG9yZGVyIHdpdGggUGENCiB5UGFsLiBXZSBhcmUgcGxlYXNlZCB0byBj

b25maXJtIHRoYXQgeW91ciBvcmRlciBoYXMgYmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2YNCiB1bGx5

IGFuZCB0aGF0IHlvdXIgcGF5bWVudCBoYXMgYmVlbiBhdXRob3JpemVkLlxuV2UgYXBwcmVjaWF0

ZSB5b3VyIGJ1c2luZXMNCiBzIGFuZCBsb29rIGZvcndhcmQgdG8gc2VydmluZyB5b3UuXG5UaGUg

YXV0aG9yaXplZCBwYXltZW50IHdpbGwgYmUgcmVmbGVjdGUNCiBkIGluIHlvdXIgYWNjb3VudCBh

Y3Rpdml0eSBzaG9ydGx5LlxuXG5Gb3IgYW55IGlucXVpcmllc1wsIHBsZWFzZSBjb250YWN0IHUN

CiBzIGF0ICsxIDY1NiA1NTYgMjE1MS5cblxuSW52b2ljZSBEZXRhaWxzOlxuXG5JbnZvaWNlIElE

OiBJTlYtMzM4MS1BUFdcblxuUHINCiBvZHVjdDogQXBwbGUgV2F0Y2ggVWx0cmEgMlxuXG5PcmRl

ciBEYXRlOiBKdWx5IDMwXCwgMjAyNlxuXG5BbW91bnQgRHVlOiAkNDINCiA5Ljk5IFVTRFxuXG5Q

YXltZW50IE1ldGhvZDogQXV0aG9yaXplZCBQYXlQYWwgQXV0by1EZWJpdFxuXG5JZiB5b3UgZGlk

IG5vdCANCiBhdXRob3JpemUgdGhpcyBjaGFyZ2VcLCBwbGVhc2UgY29udGFjdCB1cyB3aXRoaW4g

MTIgaG91cnMgdG8gcmV2aWV3IHRoZSB0cmENCiBuc2FjdGlvbiBhbmQgcmVxdWVzdCBhIHJlZnVu

ZC5cblxuRm9yIGNhbmNlbGxhdGlvbnMgb3IgY29uY2VybnMgcmVnYXJkaW5nIHUNCiBuYXV0aG9y

aXplZCBjaGFyZ2VzXCwgcGxlYXNlIGNvbnRhY3Qgb3VyIHN1cHBvcnQgdGVhbSBhdCArMSA2NTYg

NTU2IDIxNTEuXG4NCiBcblRoaXMgaXMgYW4gYXV0b21hdGVkIG1lc3NhZ2UuIEZvciBmdXJ0aGVy

IGFzc2lzdGFuY2VcLCBwbGVhc2UgY29udGFjdCBvdXINCiAgc3VwcG9ydCB0ZWFtLlxuXG7Cqe+4

jyAxOTk54oCTMjAyNiBQYXlQYWwgQWxsIFJpZ2h0cyBSZXNlcnZlZC4NCkxBU1QtTU9ESUZJRUQ6

MjAyNjA3MzBUMTQ0ODM0Wg0KTE9DQVRJT046DQpTRVFVRU5DRTowDQpTVEFUVVM6Q09ORklSTUVE

DQpTVU1NQVJZOk5vdGlmaWNhdGlvbjogWW91ciBhdXRvLWRlYml0IHBheW1lbnQgb2YgJDQyOS45

OSBVU0QgaXMgc2NoZWR1bGVkIHMNCiBob3J0bHkgW0ludm9pY2UgI0lOVi0zMzgxLUFQV10NClRS

QU5TUDpUUkFOU1BBUkVOVA0KQkVHSU46VkFMQVJNDQpBQ1RJT046RElTUExBWQ0KREVTQ1JJUFRJ

T046VGhpcyBpcyBhbiBldmVudCByZW1pbmRlcg0KVFJJR0dFUjotUDBEVDdIME0wUw0KRU5EOlZB

TEFSTQ0KRU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K

--00000000000005df870657d52b18--

Interactive Brokers' phish from Google Users

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSPB-000000006zY-1hVk

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:10:41 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:10:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zhcn-app-ninglive.com ([35.215.122.55]:38363 helo=auth.zhcn-app-ninglive.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpRA7-00000000NsJ-2HTT

for doctor@nk.ca;

Thu, 30 Jul 2026 07:51:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=auth.zhcn-app-ninglive.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=welcome@ukicfp.auth.zhcn-app-ninglive.com;

bh=NJIaPCBkgDX+LJuy51hBUmYtGAZEYboFCbbfuYHbbPM=;

b=qN4orIi6bmTJGLzP7PZDwNnyzjbuIR++Arln/GxazkpA2NNCgEJ5qOki+kGVSGPNQxwhLnMudtQV

55eLaOVYvCLOZlkHdg3G2VSYWCW/duFra26eGlHmWOuWLO2+vAcxqfVJZSruCFLx21MwlPPG3B5a

7OxXTmflnQEPXYGUwE2/H8vt9k7wpgGL2kRKkrj21GaTg/2jfkgqJmb+PeE2yoRGhXlPueLPjF3f

C5lr9bfNhftFuCDA6Nq+xUcZoZM1uJDrf01CYG+BXrCewM37AjMD6a9Wyq7weuJj3m/GiLrm3lXX

d0LYKTdoci0FJYr4Ge9MW6TuaoFSAiSg6rj7uQ==

Content-Type: multipart/alternative;

boundary="===============0006200448746845340=="

MIME-Version: 1.0

From: Interactive Brokers

To: doctor@nk.ca

Subject: =?utf-8?q?=5BIBKR_Canada=5D_Trade_Surveillance_Alert_=E2=80=94_Atyp?=

=?utf-8?q?ical_Account_Behaviour_Detected?=

Date: Thu, 30 Jul 2026 09:50:16 -0400

Message-ID:

<178541941602.4755.9846614677080715983@ukicfp.auth.zhcn-app-ninglive.com>

X-Spam_score: 17.0

X-Spam_score_int: 170

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [IBKR Canada] Trade Surveillance Alert — Atypical Account

Activity Requires Review | Alerte de surveillance — Une activité atypique

du compte nécessite un examen doctor, Interactive Brokers' trade surveillance

and market conduct monitoring systems — which operate continuously in compliance

with CIRO Dealer Member Rule 1300 series and Universal Market Integrity Rules

[...]



Content analysis details: (17.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

[35.215.122.55 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.215.122.55 listed in dnsbl.ahbl.org]

[35.215.122.55 listed in dnsbl.ahbl.org]

[35.215.122.55 listed in dnsbl.ahbl.org]

[35.215.122.55 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.215.122.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.215.122.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.215.122.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.215.122.55 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: zhcn-app-ninglive.com]

[URI: mulinlin.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: login.mulinlin.com]

[URI: auth.zhcn-app-ninglive.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: zhcn-app-ninglive.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_ACTVTY BODY: mangled activity

2.3 MANGLED_EMAIL BODY: mangled email

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: zhcn-app-ninglive.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.215.122.55 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} =?utf-8?q?=5BIBKR_Canada=5D_Trade_Surveillance_Alert_=E2=80=94_Atyp?=

=?utf-8?q?ical_Account_Behaviour_Detected?=



⚠

Interactive Brokers Canada Inc. — T‌rade Surveillance — Automated Detection



Atypical Account Behaviour Detect‌ed — Client Review Required



doctor,



Interactive Brokers' trade surveillance and market conduct monitori‍ng systems — which operate continuo‌usly in compliance with CIRO Dealer‌ Member Rule 1300 series and Universal Market Integrity Rules (UMIR) — have identified trading patterns, login sequences​, or account function usage that dev​iate materially from the historical profile associated with your account.



This alert is a product of automated surveillance. It is not a determina‍tion of misconduct. The patterns fla​gged require your review to determine whether they represent authorized activity. Your timely review is a material fac‌tor.

Pattern Category Observation Severity

Login Behaviour Access timing, frequency, or geolo‌cation inconsistent with historical norms Medium

Order Activity Trade size, security type, or execution pattern outside established parameters High

Account Navigation Sequential function access patter​n inconsistent with prior session h‌istory Medium



Client Obligation — Review and Conf‍irm or Dispute



Under CIRO Dealer Member rules and I‍nteractive Brokers' Client Agreem‌ent, account holders are expected t​o review flagged activity and confi​rm or dispute it upon notification.‍ Failure to review flagged activity wit‌hin the prescribed period may materially affect your ability to seek pro‌tection or compensation for losses subsequently determine​d to be associated with the flagged a‍ctivity. Your confirmation or dispute of each flagged pattern is a deter‍minative factor in any claim assess‍ment conducted by Interactive Brok​ers' compliance or risk department​s.



Log in to the Client Portal. The trad‍e surveillance review interface wi‍ll present each flagged pattern for‍ your confirmation or dispute. For e‍ach item, indicate whether the acti‍vity was authorized by you or whethe‌r it is unrecognized. If you dispute a‍ny item, our compliance and securit​y teams will initiate a formal revie‌w. The process takes approximately five minutes. Your assets remain pr‍otected under CIPF.

Log In to Review Activity



Interactive Brokers Canada Inc. is an order-execution-only dealer and does not provide investment advice. Member — CIRO and Member — CIPF. Registered office: 1800 McGill Colle​ge Avenue, Suite 2106, Montreal, Qu‌ebec, H3A 3J6. This is an automated trade surveillance notification iss‍ued in compliance with regulatory o‍bligations. Do not reply to this ema‌il with account information.



Comportement atypique du compte détecté — Examen du client requis



doctor,



Les systèmes de surveillance des tr‍ansactions et de contrôle de la cond‌uite sur les marchés d'Interactive‍ Brokers — qui fonctionnent en conti​nu conformément à la série 1300 des R‌ègles des courtiers membres de l'OCR‌I et aux Règles universelles d'inté​grité du marché (RUIM) — ont détecté des schémas de trading, des séquences de connexion ou une utilisation d‍es fonctions du compte qui s'écarten‌t considérablement du profil histo‌rique associé à votre compte.



Cette alerte est le produit d'une sur‌veillance automatisée. Il ne s'agi‌t pas d'une détermination de mauvai​se conduite. Les schémas signalés n‍écessitent votre examen pour déter‍miner s'ils représentent une activité autorisée. Votre examen en temps opportun est u‌n facteur déterminant.

Catégorie de schéma Observation Gravité

Comportement de connexion Moment, fréquence ou géolocalisat​ion d'accès incompatibles avec les normes historiques Moyenne

Activité d'ordres Taille des transactions, type de ti‌tre ou schéma d'exécution hors des p​aramètres établis Élevée

Navigation du compte Schéma d'accès aux fonctions séque‌ntielles incompatible avec l'hist​orique de session Moyenne



Obligation du client — Examiner et c‍onfirmer ou contester



En vertu des règles des courtiers me‍mbres de l'OCRI et de la Convention de client d'Interactive Brokers, le‌s titulaires de comptes sont tenus d‌'examiner l'activité signalée et de‌ la confirmer ou de la contester dès réception de l'avis. Le défaut d'examiner l'activité si‌gnalée dans le délai prescrit peut compromettre considérablement vot​re capacité à demander une protecti‌on ou une indemnisation pour les pertes ultérieurement attr‍ibuées à l'activité signalée. Votr‍e confirmation ou contestation de c‌haque schéma signalé est un facteur‌ déterminant dans toute évaluation de réclamation menée par les service​s de conformité ou de risque d'Interactive Brokers.



Connectez-vous au Portail Client. L'interface d'examen de surveillance des transactions présentera cha‌que schéma signalé pour votre confi​rmation ou contestation. Pour chaqu​e élément, indiquez si l'activité a é​té autorisée par vous ou si elle n'es‍t pas reconnue. Si vous contestez un‌ élément, nos équipes de conformité e​t de sécurité lanceront un examen fo​rmel. Le processus prend environ cinq minutes. Vos actifs demeurent protégés par le FCPI.

Se connecter pour examiner l'activ​ité



Interactive Brokers Canada Inc. est un courtier exécutant des ordres s‍eulement et ne fournit pas de consei​ls en placement. Membre — OCRI et Memb​re — FCPI. Siège social : 1800, avenu​e McGill College, bureau 2106, Mont‍réal (Québec) H3A 3J6. Ceci est une n‌otification automatisée de survei‍llance des transactions émise conf‍ormément aux obligations réglementaires. Ne répondez pas à ce courriel​ en fournissant des renseignements​ sur votre compte.

Interactive Brokers Canada Inc. — Member — CIRO — Member — CIPF. Order​-execution-only dealer. No investment advice.

Registered office: 1800 McGill Colle‍ge Avenue, Suite 2106, Montreal, Qu​ebec, H3A 3J6.

The Interactive Brokers word and lo‍go are trademarks of Interactive Br​okers LLC.

© 2026 Interactive Brokers Canada In‍c. All rights reserved.



Interactive Brokers Canada Inc. — Membre — OCRI — Membre — FCPI. Courtier exécutant des ordres seulement. Aucun conseil en placement.

Siège social : 1800, avenue McGill C‍ollege, bureau 2106, Montréal (Québec) H3A 3J6.

Le mot et le logo Interactive Broker‍s sont des marques de commerce d'Interactive Brokers LLC.

© 2026 Interactive Brokers Canada In​c. Tous droits réservés.

Royal bank for Canada phish from google user

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSP3-000000006yD-0ZPY

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:10:33 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:10:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dmxtu.com ([35.215.98.187]:33217 helo=member.dmxtu.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpR6w-00000000EiW-00qJ

for doctor@nk.ca;

Thu, 30 Jul 2026 07:48:02 -0600

Content-Type: multipart/alternative;

boundary="===============3084344239278491137=="

MIME-Version: 1.0

From: RBC Investments

To: doctor@nk.ca

Subject: =?utf-8?q?=5BRBC_Direct_Investing=5D_Identity_Verification_Required?=

=?utf-8?q?_=E2=80=94_FINTRAC_Compliance?=

Date: Thu, 30 Jul 2026 09:46:58 -0400

Message-ID: <178541921854.3788.11734097183975154584@ualberta.ca>

X-Spam_score: 17.9

X-Spam_score_int: 179

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [RBC Direct Investing] Identity Verification Required —

FINTRAC Compliance | Vérification d'identité requise — Conformité CANAFE

doctor, As part of RBC Direct Investing's ongoing compliance with the Proceeds

of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), administered

by FINTRAC, and in accordance with CIRO Dealer Me [...]



Content analysis details: (17.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

[35.215.98.187 listed in dnsbl.ahbl.org]

[35.215.98.187 listed in dnsbl.ahbl.org]

[35.215.98.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: 66lvy.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_ACTION BODY: mangled action

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.215.98.187 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.0 ACCT_PHISHING Possible phishing for account information

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.9 URI_PHISH Phishing using web form

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

Subject: {SPAM?} =?utf-8?q?=5BRBC_Direct_Investing=5D_Identity_Verification_Required?=

=?utf-8?q?_=E2=80=94_FINTRAC_Compliance?=





Regulatory Compliance

Identity Verification Required

Under FINTRAC Guidelines

Reference: KYC-2026 — Routine Regulatory Audit



doctor,



As part of RBC Direct Investing's on​going compliance with the Proceeds​ of Crime (Money Laundering) and Ter‌rorist Financing Act (PCMLTFA), ad​ministered by the Financial Transa‍ctions and Reports Analysis Centre‍ of Canada (FINTRAC), and in accordan‍ce with CIRO Dealer Member know-you​r-client obligations, we are required to verify the identi‌ty of all account holders on a periodic basis.



Our records indicate that your account has been selected for identity v​erification under the current regul‍atory audit cycle. This is a standar‌d procedure applied to a cross-sect‌ion of client accounts and does not r​eflect any concern regarding your account activity. Many Canadians co‌mplete this verification each year​ as part of routine compliance proto​cols.



What You Need to Complete

1

Confirm your personal information‍ — Verify that your name, address, da‍te of birth, and telephone number on​ file are current and accurate.

2

Validate government-issued ident‌ification — Confirm the type and expiry date of the identification document previ​ously provided. In some cases, you m‌ay be asked to upload a copy of a valid‍ government-issued ID.

3

Provide proof of address — If your address on file has changed or cannot be verified against the ide‌ntification document, a recent uti​lity bill, bank statement, or gover‌nment correspondence may be requir​ed.



Account Functions Affected Until V‌erification Is Complete



Until identity verification is comp​leted, certain account functions will be restricted, including external fund transfer​s, third-party withdrawals, and the opening of new registered account‍s. These restrictions are applied in accordance with regulatory requirements and cannot be waived. Your ex‌isting investments remain protect​ed under the Canadian Investor Prote‌ction Fund (CIPF), and dividend and‍ interest distributions continue t‌o be credited normally. Full access‍ is restored immediately upon compl​etion of the verification.



The verification process takes appro‌ximately five minutes. Log in to RBC‌ Direct Investing, navigate to the A‌ccount Verification section, and f‍ollow the prompts to confirm your id‌entity.

Verify My Identity



This notice is issued pursuant to RBC Direct Investing's regulatory compliance obligations. RBC Direct Investing is a business name used by R‌BC Direct Investing Inc., a Dealer M​ember of CIRO and a Member of CIPF. Fo‌r questions, please contact RBC Dir‍ect Investing Client Services thro​ugh the Secure Message Centre upon lo​gin. Do not reply to this email with i‌dentification documents or person‌al information.



Sincerely,

RBC Direct Investing

Regulatory Compliance Division



doctor,



Dans le cadre de la conformité conti‍nue de RBC Direct Investing à la Loi su‌r le recyclage des produits de la cri‌minalité et le financement des acti​vités terroristes (LRPCFAT), admi‍nistrée par le Centre d'analyse des opérations et déclarations financ‌ières du Canada (CANAFE), et conformément aux obligations de connaissa‍nce du client des courtiers membres‍ de l'OCRI, nous sommes tenus de vérifier pério​diquement l'identité de tous les ti​tulaires de comptes.



Nos dossiers indiquent que votre compte a été sélectionné pour une véri​fication d'identité dans le cadre d​u cycle de vérification réglementai‌re actuel. Il s'agit d'une procédur​e standard appliquée à un échantill‍on représentatif de comptes de clients et ne reflète aucune préoccupati​on concernant l'activité de votre compte. De nombreux Canadiens effectuent cette vérification chaque an​née dans le cadre des protocoles de c​onformité courants.



Ce que vous devez accomplir

1

Confirmez vos renseignements pers‌onnels — Vérifiez que votre nom, votre adre‍sse, votre date de naissance et votr‌e numéro de téléphone au dossier son​t à jour et exacts.

2

Validez votre pièce d'identité déli‍vrée par le gouvernement — Confirmez le type et la date d'expi‌ration du document d'identificati​on fourni précédemment. Dans certains cas, on pourrait vous demander de télécharger une copie d'une pièce d'id​entité valide délivrée par le gouve​rnement.

3

Fournissez une preuve d'adresse — Si votre adresse au dossier a chang‌é ou ne peut être vérifiée par rappor‍t au document d'identification, une facture récente de services publics, un relevé bancaire ou une correspondance gouvernementale pourrai‍t être exigée.



Fonctions du compte touchées jusqu‌'à ce que la vérification soit termi​née



Jusqu'à ce que la vérification d'id​entité soit terminée, certaines fonctions du compte sero‌nt restreintes, notamment les transferts de fonds‍ externes, les retraits à des tiers et‌ l'ouverture de nouveaux comptes en‌registrés. Ces restrictions sont appliquées conformément aux exigenc‌es réglementaires et ne peuvent être levées. Vos placements existants‌ demeurent protégés par le Fonds can‍adien de protection des investisse‍urs (FCPI) et les distributions de d‌ividendes et d'intérêts continuen‌t d'être créditées normalement. L'​accès complet est rétabli immédiat​ement après la vérification.



Le processus de vérification prend​ environ cinq minutes. Connectez-v‌ous à RBC Direct Investing, accédez à l‍a section Vérification du compte et‍ suivez les instructions pour confi​rmer votre identité.

Vérifier mon identité



Le présent avis est émis conforméme‍nt aux obligations de conformité ré‌glementaire de RBC Direct Investin‌g. RBC Direct Investing est une dénomination commerciale utilisée par RBC Direct Investing Inc., un courti‍er membre de l'OCRI et un membre du FCPI. Pour toute question, veuillez c​ommuniquer avec les Services aux cl‍ients de RBC Direct Investing par l'​entremise du Centre de messagerie s​écurisé lors de la connexion. Ne rép​ondez pas à ce courriel en fournissa​nt des documents d'identification‌ ou des renseignements personnels.



Sincères salutations,

RBC Direct Investing

Division de la conformité réglementair‍e

RBC Direct Investing is a business name used by RBC Direct‌ Investing Inc. Member — Canadian In​vestor Protection Fund. Dealer Mem‌ber — Canadian Investment Regulato‌ry Organization.

This message is an automated regula​tory compliance notification. Plea​se direct all inquiries through the Se‌cure Message Centre within your RBC​ Direct Investing account.

© 2026 RBC Direct Investing Inc. All r​ights reserved.



RBC Direct Investing est une dénomination commerciale ut​ilisée par RBC Direct Investing Inc​. Membre — Fonds canadien de protect​ion des investisseurs. Courtier me‌mbre — Organisme canadien de réglementation des investissements.

Ce message est une notification aut​omatisée de conformité réglementa‍ire. Veuillez adresser toute deman‍de par l'entremise du Centre de messa​gerie sécurisé dans votre compte RB​C Direct Investing.

© 2026 RBC Direct Investing Inc. Tous‍ droits réservés.

Interactive Brokers' trade phish from Google Cloud Compliance

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSOV-000000006pu-41Hb

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:09:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:09:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from uzckeji.com ([35.215.116.200]:45649 helo=promos.uzckeji.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpR5V-00000000CmZ-2jVL

for sales@nk.ca;

Thu, 30 Jul 2026 07:46:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=promos.uzckeji.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=support@mjvdoz.promos.uzckeji.com;

bh=BR18sZWFkPUyL3Goxym359bO9bV4kmLCJpSHAyiyowU=;

b=AV0A34n9WrvH0F1XfJT1rZY2OZF+II1EkugbD0GIK7yMoZN6JhegyevuqW/V5A69YRC28SKF8cWj

4AolrdPAnMN4g7ApaKR7kVGUanSMF94nnYb+ji2vxXtBgnGknK+FRsXyYTO2nWfplYgPVEpcPVwT

5r5uqLX8sTKPQ3u0bkBb2xoPlDQmuOB94FjN+UdXUxNSy5+ljZxxxbL51Gikk7lvNAaHolGg7AKt

VM4h6j376mKLqmoKMupbAeDsGi630tBzpndEuJXcLA2SCNUI4F8Bv7My4McMZct8Mkzc/V9Ka36j

ZRG5dm6ihp00tjjrovRxDaVElUB/JG9ElpyHkA==

Content-Type: multipart/alternative;

boundary="===============8776155571676728755=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi0LigItL4oCLUuKAiyDigItD4oCLbOKAi2nigItl4oCLbuKAi3TigIsg4oCLU+KAi2XigIty4oCLduKAi2nigItj4oCLZeKAi3M=?=



To: sales@nk.ca

Subject: =?utf-8?q?=5BIBKR_Canada=5D_Trade_Surveillance_Alert_=E2=80=94_Atyp?=

=?utf-8?q?ical_Account_Behaviour_Detected?=

Date: Thu, 30 Jul 2026 09:44:34 -0400

Message-ID: <178541907464.4639.269218818030736681@mjvdoz.promos.uzckeji.com>

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [IBKR Canada] Trade Surveillance Alert — Atypical Account

Activity Requires Review | Alerte de surveillance — Une activité atypique

du compte nécessite un examen sales, Interactive Brokers' trade surveillance

and market conduct monitoring systems — which operate continuously in compliance

with CIRO Dealer Member Rule 1300 series and Universal Market Integrity Rules

[...]



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

[35.215.116.200 listed in dnsbl.ahbl.org]

[35.215.116.200 listed in dnsbl.ahbl.org]

[35.215.116.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: uzckeji.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: promos.uzckeji.com/35.215.116.200]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_ACTVTY BODY: mangled activity

2.2 INVESTMENT_ADVICE BODY: Message mentions investment advice

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.215.116.200 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} =?utf-8?q?=5BIBKR_Canada=5D_Trade_Surveillance_Alert_=E2=80=94_Atyp?=

=?utf-8?q?ical_Account_Behaviour_Detected?=





⚠

Interactive Brokers Canada Inc. — Trade Surveillance — Automated Detection



Atypical Account Behaviour Detect‌ed — Client Review Required



sales,



Interactive Brokers' trade survei‌llance and market conduct monitoring systems — which operate continuously in compliance with CIRO Dealer M‌ember Rule 1300 series and Universa‍l Market Integrity Rules (UMIR) — have identified trading patterns, login sequences‍, or account function usage that dev‍iate materially from the historica​l profile associated with your account.



This alert is a product of automated‌ surveillance. It is not a determina‍tion of misconduct. The patterns fl‌agged require your review to determ​ine whether they represent authoriz​ed activity. Your timely review is a material fact​or.

Pattern Category Observation Severity

Login Behaviour Access timing, frequency, or geolo​cation inconsistent with historica​l norms Medium

Order Activity Trade size, security type, or execu‍tion pattern outside established p‌arameters High

Account Navigation Sequential function access pattern inconsistent with prior session history Medium



Client Obligation — Review and Conf​irm or Dispute



Under CIRO Dealer Member rules and I‌nteractive Brokers' Client Agreem‍ent, account holders are expected to review flagged activity and confi‍rm or dispute it upon notification.‌ Failure to review flagged activity​ within the prescribed period may ma‌terially affect your ability to seek protection or compensation for losses subsequently determine​d to be associated with the flagged act‌ivity. Your confirmation or disput‍e of each flagged pattern is a determ​inative factor in any claim assessm​ent conducted by Interactive Broke‍rs' compliance or risk departments.



Log in to the Client Portal. The trad‍e surveillance review interface wi‍ll present each flagged pattern for‍ your confirmation or dispute. For e​ach item, indicate whether the acti‍vity was authorized by you or whethe‌r it is unrecognized. If you dispute any item, our compliance and security teams will initiate a formal revi​ew. The process takes approximatel​y five minutes. Your assets remain p‌rotected under CIPF.

Log In to Review Activity



Interactive Brokers Canada Inc. is an order-execution-only dealer an‍d does not provide investment advice‍. Member — CIRO and Member — CIPF. Reg‍istered office: 1800 McGill Colleg‌e Avenue, Suite 2106, Montreal, Que​bec, H3A 3J6. This is an automated tra​de surveillance notification issue​d in compliance with regulatory obl‌igations. Do not reply to this email with account information.



Comportement atypique du compte détecté — Examen du client requis



sales,



Les systèmes de surveillance des tr​ansactions et de contrôle de la cond​uite sur les marchés d'Interactive​ Brokers — qui fonctionnent en conti‌nu conformément à la série 1300 des R‍ègles des courtiers membres de l'OC‌RI et aux Règles universelles d'int‌égrité du marché (RUIM) — ont détecté​ des schémas de trading, des séquences de connexion ou une utilisation d​es fonctions du compte qui s'écartent considérablement du profil histo‍rique associé à votre compte.



Cette alerte est le produit d'une su​rveillance automatisée. Il ne s'agi​t pas d'une détermination de mauvai​se conduite. Les schémas signalés n‌écessitent votre examen pour déter​miner s'ils représentent une activité autorisée. Votre examen en temps opportun est u‍n facteur déterminant.

Catégorie de schéma Observation Gravité

Comportement de connexion Moment, fréquence ou géolocalisation d'accès incompatibles avec les​ normes historiques Moyenne

Activité d'ordres Taille des transactions, type de ti​tre ou schéma d'exécution hors des p‌aramètres établis Élevée

Navigation du compte Schéma d'accès aux fonctions séque​ntielles incompatible avec l'hist‍orique de session Moyenne



Obligation du client — Examiner et confirmer ou contester



En vertu des règles des courtiers membres de l'OCRI et de la Convention de c​lient d'Interactive Brokers, les t‌itulaires de comptes sont tenus d'e‍xaminer l'activité signalée et de l​a confirmer ou de la contester dès réception de l'avis. Le défaut d'examiner l'activité si‌gnalée dans le délai prescrit peut c​ompromettre considérablement vot‌re capacité à demander une protecti​on ou une indemnisation pour les pertes ultérieurement attribuées à l'activité signalée. Vot‌re confirmation ou contestation de‍ chaque schéma signalé est un facteu‍r déterminant dans toute évaluation de réclamation menée par les service‍s de conformité ou de risque d'Inter​active Brokers.



Connectez-vous au Portail Client.​ L'interface d'examen de surveillance des transactions présentera ch‌aque schéma signalé pour votre conf‍irmation ou contestation. Pour cha‌que élément, indiquez si l'activit‍é a été autorisée par vous ou si elle n'est pas reconnue. Si vous conteste​z un élément, nos équipes de conformité et de sécurité lanceront un exam​en formel. Le processus prend envir‍on cinq minutes. Vos actifs demeure​nt protégés par le FCPI.

Se connecter pour examiner l'activi‍té



Interactive Brokers Canada Inc. es​t un courtier exécutant des ordres s‌eulement et ne fournit pas de conseils en placement. Membre — OCRI et Mem‌bre — FCPI. Siège social : 1800, avenue McGill College, bureau 2106, Mon‌tréal (Québec) H3A 3J6. Ceci est une​ notification automatisée de surve‍illance des transactions émise conformément aux obligations régleme​ntaires. Ne répondez pas à ce courri‍el en fournissant des renseignements sur votre compte.

Interactive Brokers Canada Inc. — Member — CIRO — Member — CIPF. Order-execution-only dealer. No investment advice.

Registered office: 1800 McGill Col‍lege Avenue, Suite 2106, Montreal,‌ Quebec, H3A 3J6.

The Interactive Brokers word and logo are trademarks of Interactive Brokers LLC.

© 2026 Interactive Brokers Canada Inc. All rights reserved.



Interactive Brokers Canada Inc. — Membre — OCRI — Membre — FCPI. Courti​er exécutant des ordres seulement.‌ Aucun conseil en placement.

Siège social : 1800, avenue McGill C​ollege, bureau 2106, Montréal (Qué‍bec) H3A 3J6.

Le mot et le logo Interactive Brokers‍ sont des marques de commerce d'Inte‍ractive Brokers LLC.

© 2026 Interactive Brokers Canada Inc. Tous droits réservés.

Virtual assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSOK-000000006o2-1gle

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:09:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:09:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f42.google.com ([209.85.216.42]:60912)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQvM-00000000MNK-1oVY

for root@nk.ca;

Thu, 30 Jul 2026 07:35:58 -0600

Received: by mail-pj1-f42.google.com with SMTP id 98e67ed59e1d1-38e07ebd263so1351399a91.1

for ; Thu, 30 Jul 2026 06:34:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785418451; x=1786023251; darn=nk.ca;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=M23n5MCaPxlLKSeDFpME6qprvvFElTPGMny6yd6gVSY=;

b=kUJACq8fvDqRIluU4LF7zLTjq3Cftd/eQUqtKi4Wi9pl44WjSOCe70q9g69c2wfIG6

oCwwviAi5YjVVKcNQCzTOjAV2XqZpfBxRwRTlxbxfceqMOcPvZEXkvvg9075cMG+ninL

32rAh7a0oYXzdOXclaHCJSH++D212lUykBAX8BHupPJ1Yc0x7gnYVzFPi36f4slvhf9R

2YDMnRaPxObWthkd93IZZwBVXyvCLYfRPEkHNlKscyfI+F9mJlKJrQltrdSxGci6dMHh

toc4gv4LFZNKYlxKRa6mB++cQoqJc4wIlD7Y+yo1RL0Re0gIToqJ1Uv9gBB15K4zaJir

Jc7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785418451; x=1786023251;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=M23n5MCaPxlLKSeDFpME6qprvvFElTPGMny6yd6gVSY=;

b=oNoCWjdvyRwtxQ1LIdr2vk3YJuFBcyEjMejgIZYQbni5WzWN+GiDwvfScDKhQ2HHFm

c1SQIbVPrpQJrZ5rJv9UHv9bneIijVD6KF2Ac4t55TlAOOlWShhuhO2/Bq/s+6z7sB/4

ZtrNOo20kzvRvwv/D7ix/lTyIh9vuT5G9azUEcaG020eK4RVWI9bxxOFN8Q3CiOLZ6da

wRvd3XdgXML3EMGu1IYD7WS28yNAUM7ncKaNbQ22DIxD3iNML5CQJO9+nqZiBZkYMoTx

BCZOsV1z8WXFcnlMyO5LpY2dbNIMFVt1W9ZZs8IS4HJyowivyda7TrPVGPshdvcyqVin

/HQQ==

X-Gm-Message-State: AOJu0YyrSEaictR4t7PEoKSvtxOEPRzAh/mMqeCnUKCH03wT9jd4DrgI

skpsOfyf23kqN0c1y5xXa1rv5gps4d/MHKeXVrOjnOWJjljjSVeBc3uPImKZVw==

X-Gm-Gg: AR+sD12EKkOKipHg+z/xfcav8/Gxby5g6O7q+sggH2WxToHHLJ8aQW70XCkW1ZVAJZv

YTVLYXXnFKWa4WWc8voejUMwhwEYysRNbMg6TSGZQ7Uv2Ll3ogG0nj1lF8gLpAP+cqqlI/SWtcP

DiFZTwXhPz53Ow4PIPK/BZgkbFoqVLdvU795ZkLPIAUZIwBH3LxM5hscmkDTuvfsqizHe0ddcAi

EwWgeirrwvNwpnFAkTwMhfzWHElhRwMueclKPRzDQTbXXuaRBO47WEpcp7Q5bga72KzBtKwUoMn

cqPIvm5DgL445husg4Tk8RO8jJ1JqoOpbjT+Oe+q5VT9N0h4znlLLzTedQQowUwzM8ve39WwxU6

9mTgsX8XA0Z5qc8JNM7RPxzO+/7pQ52zf5ykckGhgYt455g/KEh/qEscLJ01jW/WlAeaXhf+Whc

ryOdtwp3ngf4BNiOS8OrWlYDn02CdbqBkHojYz1TJEdDDkhRgC4oHuvzoXzsizNvS9vPlREcf4

X-Received: by 2002:a17:90b:164b:b0:38e:ad9d:1151 with SMTP id 98e67ed59e1d1-38f9bda5ac1mr2040489a91.4.1785418450794;

Thu, 30 Jul 2026 06:34:10 -0700 (PDT)

Received: from gmail.com ([122.160.196.13])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-31504dd42a9sm25745640eec.30.2026.07.30.06.34.08

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 30 Jul 2026 06:34:10 -0700 (PDT)

Message-ID: <6a6b52d2.6c8668f2.181253.0e60@mx.google.com>

From: Justin

X-Google-Original-From: "Justin"

Subject: Re: Reminder My Name is Justin

To: "root"

Content-Type: multipart/alternative; boundary="ICN7dk9JZZbrWEHZBD=_rJS71uHkHvn0Wo"

MIME-Version: 1.0

Organization: Headfield Solutions Pvt Ltd

Date: Thu, 30 Jul 2026 19:04:09 +0530



This is a multi-part message in MIME format



--ICN7dk9JZZbrWEHZBD=_rJS71uHkHvn0Wo

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi Good Morning!

I sent you an email on Friday but didn=E2=80=99t hear back.

Happy to schedule a quick call. We offer Affordable Remote VA Support.=



Thank you!

Justin,

VA Team!



On Apr 10, 2026, at 12:35=E2=80=AFPM, Justin
> wrote:



Hi, root@nk.ca



Hope you are doing well=E2=80=A6



Please, could you let me know whether you are interested in hiring a r=

emote Virtual Assistant at a reasonable cost?



What we can handle for you:



=F0=9F=91=89 Admin & Data Entry



=F0=9F=91=89 Email & Calendar Management



=F0=9F=91=89 Cold Calling & Outreach



=F0=9F=91=89 social media & Lead Generation



=F0=9F=91=89 Customer Support



=F0=9F=91=89 Online Research



=F0=9F=91=89 CRM Management



=F0=9F=91=89 Bookkeeping Assistance



=F0=9F=91=89 Appointment Scheduling



=F0=9F=91=89 Document Preparation



=F0=9F=91=89 Real Estate & E-commerce Support



=F0=9F=91=89 Studio-quality 3D Rendering



=F0=9F=91=89 SEO & Digital Marketing



=F0=9F=91=89 Website Development



=F0=9F=91=89 Mobile App Development



=F0=9F=91=89 LPO =E2=80=93 Legal Process Outsourcing



=F0=9F=91=89 RPO =E2=80=93 Recruitment Process Outsourcing



=F0=9F=91=89 Video Editing Support



We provide reliable, affordable, and results-driven remote support tai=

lored to your business needs?



Would you be open to a quick call this week?



Best Regards,

Justin,

VA Team

Note: If this isn=E2=80=99t relevant, feel free to reply =E2=80=9COpt-=

out=E2=80=9D





--ICN7dk9JZZbrWEHZBD=_rJS71uHkHvn0Wo

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi Good Morning!
I sen=

t you an email on Friday but didn=E2=80=99t hear back.
Happy to sch=

edule a quick call. We offer Affordable Remote VA Support.
Thank yo=

u!
Justin,
VA Team!

On Apr 10, 2026, at 12:35=E2=80=AFPM,&=

nbsp; Justin <Juagmwaqfmwag@gmail.com> wrote:

Hi, root@nk.=

ca

Hope you are doing well=E2=80=A6

Please, could you let =

me know whether you are interested in hiring a remote Virtual Assistan=

t at a reasonable cost?

What we can handle for you:

=F0=9F=

=91=89 Admin & Data Entry

=F0=9F=91=89 Email & Calendar =

Management

=F0=9F=91=89 Cold Calling & Outreach

=F0=9F=

=91=89 social media & Lead Generation

=F0=9F=91=89 Customer =

Support

=F0=9F=91=89 Online Research

=F0=9F=91=89 CRM Mana=

gement

=F0=9F=91=89 Bookkeeping Assistance

=F0=9F=91=89 Ap=

pointment Scheduling

=F0=9F=91=89 Document Preparation

=F0=

=9F=91=89 Real Estate & E-commerce Support

=F0=9F=91=89 Stud=

io-quality 3D Rendering

=F0=9F=91=89 SEO & Digital Marketing=

=F0=9F=91=89 Website Development

=F0=9F=91=89 Mobile App =

Development

=F0=9F=91=89 LPO =E2=80=93 Legal Process Outsourcing=

=F0=9F=91=89 RPO =E2=80=93 Recruitment Process Outsourcing

<=

p>=F0=9F=91=89 Video Editing Support

We provide reliable, afford=

able, and results-driven remote support tailored to your business need=

s?

Would you be open to a quick call this week?

Best Regar=

ds,
Justin,
VA Team
Note: If this isn=E2=80=99t relevant, fee=

l free to reply =E2=80=9COpt-out=E2=80=9D







--ICN7dk9JZZbrWEHZBD=_rJS71uHkHvn0Wo--



Chinese language phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 07:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQrM-00000000EGC-1ZpZ

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 07:31:40 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 07:31:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from toolrnanpro.com ([85.158.109.140]:59190 helo=inbox0.toolrnanpro.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpMZE-00000000EGF-0SYS

for sales@nk.ca;

Thu, 30 Jul 2026 02:56:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=toolrnanpro.com;

h=Content-Type:MIME-Version:From:To:Subject; i=norply-8@toolrnanpro.com;

bh=4QGQrS1mPHrYNPQwfTIvhpfpe1qEeQUpGhX5QvYWQBk=;

b=tgLP+BSqtPpMUYGKkdvI0KjSeQRxV2tQ3vgbAQ3gBbql6tfB/tc9CJjBSJylLd0th8SRCdwnmpNS

qK43IQDJEDjKs9lQ3yhj/ohI2QOQvzF5UBkSDIeIcVq2wYkCj4J8zGUbXSC93YyBPKhdYFnJEV8m

D3VxHtVUcs44DcZFVl0=

Content-Type: multipart/related; boundary="===============3814120749993276993=="

MIME-Version: 1.0

From: "nk.ca"

To: sales@nk.ca

Subject: =?utf-8?b?bmsuY2EgcG9zdG1hc3RlciA6IOmHjeaWsOa/gOa0u+W4kOaItw==?=

X-Spam_score: 13.0

X-Spam_score_int: 130

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: New Message 2 Nk 消息中心



Content analysis details: (13.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

[85.158.109.140 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.158.109.140 listed in dnsbl.ahbl.org]

[85.158.109.140 listed in dnsbl.ahbl.org]

[85.158.109.140 listed in dnsbl.ahbl.org]

[85.158.109.140 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.158.109.140 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.158.109.140 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.158.109.140 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.158.109.140 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: toolrnanpro.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 ADDR_OFFER From address contains OFFER

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

0.5 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[85.158.109.140 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?utf-8?b?bmsuY2EgcG9zdG1hc3RlciA6IOmHjeaWsOa/gOa0u+W4kOaItw==?=







Nk 消息中心



亲爱的客户 Sales,

您的电子邮件 (Sales_@nk.ca)密码_将在48小时后过期



要继续使用下面相同的密码_点击电子邮件帐户设置。







电子邮件帐户设置







这是一条自动消息，请勿回复！





Nk 消息中心 © 2026年。保留所有权利。

virtual assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQtG-00000000Kfg-0qIA

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 07:33:38 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 07:33:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f175.google.com ([209.85.214.175]:44346)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQXx-000000000zb-0ZKz

for sales@nk.ca;

Thu, 30 Jul 2026 07:11:47 -0600

Received: by mail-pl1-f175.google.com with SMTP id d9443c01a7336-2ce87c7e3bbso23741835ad.1

for ; Thu, 30 Jul 2026 06:10:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785417044; x=1786021844; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=G/Yv5PBwrW1blLYol2vaxh5AIXsDdQjSYnccLfXr/Xc=;

b=ZeXgb6T173ujNkbqtIKr50PP5UMFZ7r3jcuWnuhVxxM12jCKFHvSYr9RbWP8s7eLLf

YZcKtn/TTLjDm4H+d6I97uUTk+2X+5HOh6ZoBkkVMw3neCMg3vRYjXaYbUS6hKX7PG+e

TQrDT34503nYmlY49g4RR712Npnfl8EKqJzEif6/JfB0TQvXLDxu8QAgr8QS6u432Ck+

tc30PZgtxDY2SZpqdHf854aUF64VYVWD9CGqNf9QjDSu8HoMlE+IonISxNdpq2uv+8Mt

1KFzbzC2seRLuzsY5mI3jcnNb/ZLWOr0dIZR01qlTYZAcO9z6R5+PEjCJT9QVp9ZKyAa

1i5A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785417044; x=1786021844;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=G/Yv5PBwrW1blLYol2vaxh5AIXsDdQjSYnccLfXr/Xc=;

b=S5Aq/AAewVfrNrIlhUiCJ653w9o68U4s64qK446pV1fq5Mw3G6KXrbkkZbWPez62jE

YIgc7ed7B63Hv+bah/5QOocldZn6AjxD5/JIdMWKEsn1n1p2w1G8nCsUg9CdOMRjDdgc

cqnLh4LxJbegtp7vzT44SUyuq+HmmPuawKYKssEcOZ+LwJ6/hI52KbKkHoG2+4p1AfxK

sGQP7oyQMeG+ZX3XNjhPsFXR3CW+6Usa+dIHvAk9YCHdQoldIQAHw0nrY5w2/HkS23Vw

ipoKN0ANiK/Ng0kuXrlptebPIzIFW4hYYVemH0GJKq8g7sGrGMC5FfMXzxDBl1ugDoeh

U7dw==

X-Gm-Message-State: AOJu0YyNkkEQc87uZLlII+JO6Qp0556L1WeAqqVBzO/LDJvaff2aknHs

LsNmMcyCG+8/ebIfUiSK6qco7qj7o+lw64xG7AI/uc/ClAFYnqDFIkUpmTZLxZEX

X-Gm-Gg: AR+sD11F3CsfZ6/uuzdiUBvcx8hKdLHcyXyBKgiIj5JugBvMLYfYKNul/4CD6H3zYEu

FDJoxyVF91v9oOY7QPDJ0LyrFjjfItoCWIsXSiGnBNsKrCPbqJ9knQqFMoL4nNVcjMSG4JCyLNL

38P3BszNMFYKmvlAFJRX1bbjhJ9FfzAMOMhj/zrUwv3YJF4INsITWQM9wwDroOChEruYHlL57EZ

QD9VtBijhlhGjVPubaP5491yC3gWIWRhAYdmAXGY5pMAiiF1dbt6KbJq2ENWig7/u7jnwN72Atz

IbFsjEqaBY7Dyr9keCuPb0vudbvy5/5n8eaoByLTN40WgR2FwBcZ0Hblvnno1lxops8ngJqfACk

/SVXa0/YgIDVTRdhvQeZr3XORoxRdABlHbF0y3qNYbendCXg10r1sNv0dhI8xHh4HE/QT+pbwYY

NHXY9QLjABVoIdmdONBQ7kgOTEqvt6TQSMSBkCYZKgpjIciqkUoqixvnO1Dq9ZHU6naR5Odx3Vm

hKCrQOaKtnz76CBUJE1MyF85bzCxkEINoblBQ69yVoxos6SqAvwr+iw

X-Received: by 2002:a17:902:e78b:b0:2ce:8e70:3210 with SMTP id d9443c01a7336-2d03dce519emr3994825ad.16.1785417043590;

Thu, 30 Jul 2026 06:10:43 -0700 (PDT)

Received: from LAPTOP7O4PJ7JN (38.31.68.103.broadband.rapidnet.in. [103.68.31.38])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-31504e1ff81sm22026441eec.31.2026.07.30.06.10.41

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 30 Jul 2026 06:10:42 -0700 (PDT)

From: "Jawed"

To:

Subject: Call schedule | Virtual assistant ?

Date: Thu, 30 Jul 2026 18:40:18 +0530

Message-ID: <0fb101dd2024$d31eb760$795c2620$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0FB2_01DD2052.ECD6F360"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0gI3qPd0h3MQahSZ2awIgER8Htwg==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_0FB2_01DD2052.ECD6F360

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



sales@nk.ca







Hello,



Do you need help with my service?







. Cold Callers / Appointment setters



. Social media managers / digital marketing



. Research / Data Entry



. Accounting / Bookkeeping



. Marketing associates / lead generation







Can we schedule a quick 5-minute call?



Best wishes

Jawed





------=_NextPart_000_0FB2_01DD2052.ECD6F360

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>


class=3DMsoNoSpacing>sales@nk.ca


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Hello,

Do you need help with my =

service?

 


class=3DMsoNoSpacing>• Cold Callers / Appointment =

setters

• Social media managers =

/ digital marketing

• Research / =

Data Entry

• Accounting / =

Bookkeeping

• Marketing =

associates / lead generation


class=3DMsoNoSpacing> 

Can we =

schedule a quick 5-minute call?

Best =

wishes
Jawed



------=_NextPart_000_0FB2_01DD2052.ECD6F360--



Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 07:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQsN-00000000HVv-490e

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 07:32:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 07:32:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.81.174] (port=14202 helo=mail-m81174.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpOnW-000000008PM-3NJ5

for sales@nk.ca;

Thu, 30 Jul 2026 05:19:58 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1566458_1767490600.1785410312689"

To: sales

Subject: =?UTF-8?B?TWVldCBDb25zdW1lciBEZW1hbmQgZm9yIFplcm8tQ2Fsb3JpZSBTd2VldG5lc3M=?=

X-Priority: 3

MIME-Version: 1.0

Received: from gremount@gremount.com.cn( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Thu, 30 Jul 2026 19:18:32 +0800 (GMT+08:00)

From: Maria

Date: Thu, 30 Jul 2026 19:18:32 +0800 (GMT+08:00)

X-WM-Tid: 0a9fb2bf542403b9kunmd20dfdee1f88ff

DKIM-Signature: a=rsa-sha256;

b=zwBDRCmLEmt7Yurb3KTDyDqOz+cBR0WpEPwvkKDYwzyeTpe4+fv/SoFucJYQQ4JdZCaVboRWd8iMjku+Vr0vqy7ubBqMLsqpjWqhtJuNoMH85uo0ByvcOAXhiWPgRkQKQDKNQDhtiSjCpwFX9Wi4qa6ev9J/a5swhQccarZqQEE=; s=default; c=relaxed/relaxed; d=gremount.com.cn; v=1;

bh=OSF7euaEm1IVG9MyYHRU6xMiehfBimnq6exhZnjZWHc=;

h=date:mime-version:subject:message-id:from;

Message-ID:



Greetings sales,



Further to the discussion on beverage ingredients, this communication introduces Sucralose. This high-intensity sweetener is an excellent choice for developing modern, health-conscious food and beverage products that consumers prefer.



Sucralose is distinguished by its valuable properties:



● Zero Energy: Delivers intense sweetness without adding calories.



● Pure Sweetness: A clean taste profile, approximately 600 times sweeter than sucrose.



● Excellent Stability: Maintains integrity across a wide range of light, heat, and pH levels.



Would a product sample for evaluation by your formulation team be helpful?



Kind regards,





Maria



Manager



Email:info@gremount.com.cn



Address:Maria Xin junguo Gremount International co ltd. - General Manager 00861059693741 info@gremount.com.cn No. 21Guangqu RD Chaoyang districtBeijin









If you don't want to receive our emails, you can easily unsubscribe here.




>
/RsvpAction">
pAttendance/Yes"/>
chema.org/HttpActionHandler">
a.org/HttpRequestMethod/GET"/>
tps://calendar.google.com/calendar/event?action=3DRESPOND&eid=3DNGgyYmo=

waDJjc3Vlam04YXFqNXFtbWpzdDggY3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLm=

NvbQ&rst=3D1&tok=3DMzEjaGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbTg3=

NTg2NDgxNDcwNzg3YmQ4ODNlY2Y1MTAwMzFiZWQ1NzMyYjFlYTQ&ctz=3DAsia%2FDhaka&=

amp;hl=3Dsk&es=3D0" style=3D"font-weight: 400;font-family: 'Google =

Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height:=

120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; tex=

t-transform: none;" class=3D"grey-button-text" itemprop=3D"url" target=3D"_=

blank">
entation">
able>

style=3D"padding: 6px 0; padding-left: 16px; padding-right: 12px; white-spa=

ce: nowrap;">
=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Google Sa=

ns', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 1=

20%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; text-=

transform: none;">=C3=81no

iddle" role=3D"presentation" style=3D"border-left: solid 1px #dadce0; borde=

r-right: solid 1px #dadce0;">
temtype=3D"http://schema.org/RsvpAction">
ent=3D"http://schema.org/RsvpAttendance/No"/>
mscope itemtype=3D"http://schema.org/HttpActionHandler">
ethod" href=3D"http://schema.org/HttpRequestMethod/GET"/>
or: #5f6367;">
=3DRESPOND&eid=3DNGgyYmowaDJjc3Vlam04YXFqNXFtbWpzdDggY3ludGhpYXBlcmV6Mz=

g5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbQ&rst=3D2&tok=3DMzEjaGFyZXNzYXpuenhy=

cnN4YXh6MzIxQGdtYWlsLmNvbTg3NTg2NDgxNDcwNzg3YmQ4ODNlY2Y1MTAwMzFiZWQ1NzMyYjF=

lYTQ&ctz=3DAsia%2FDhaka&hl=3Dsk&es=3D0" style=3D"font-weight: 4=

00;font-family: 'Google Sans', Roboto, sans-serif;color: #5f6368; f=

ont-size: 14px; line-height: 120%; mso-line-height-rule: exactly; margin: 0=

; text-decoration: none; text-transform: none;" class=3D"grey-button-text" =

itemprop=3D"url" target=3D"_blank">
llspacing=3D"0" role=3D"presentation">

entation" valign=3D"middle" style=3D"padding: 6px 12px; white-space: nowrap=

;">
ton-text" style=3D"font-weight: 400;font-family: 'Google Sans', Rob=

oto, sans-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-lin=

e-height-rule: exactly; margin: 0; text-decoration: none; text-transform: n=

one;">Nie
<=

/span>
esentation">
/schema.org/RsvpAction">
ema.org/RsvpAttendance/Maybe"/>
e=3D"http://schema.org/HttpActionHandler">
"http://schema.org/HttpRequestMethod/GET"/>=


eid=3DNGgyYmowaDJjc3Vlam04YXFqNXFtbWpzdDggY3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwc=

y5vdXRsb29rLmNvbQ&rst=3D3&tok=3DMzEjaGFyZXNzYXpuenhycnN4YXh6MzIxQGd=

tYWlsLmNvbTg3NTg2NDgxNDcwNzg3YmQ4ODNlY2Y1MTAwMzFiZWQ1NzMyYjFlYTQ&ctz=3D=

Asia%2FDhaka&hl=3Dsk&es=3D0" style=3D"font-weight: 400;font-family:=

'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px;=

line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decorati=

on: none; text-transform: none;" class=3D"grey-button-text" itemprop=3D"url=

" target=3D"_blank">
role=3D"presentation">

n=3D"middle" style=3D"padding: 6px 0; padding-left: 12px; padding-right: 16=

px; white-space: nowrap;">=


9;Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; lin=

e-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: =

none; text-transform: none;">Mo=C5=BEno=


amp;eid=3DNGgyYmowaDJjc3Vlam04YXFqNXFtbWpzdDggY3ludGhpYXBlcmV6Mzg5OTAzQGdyb=

3Vwcy5vdXRsb29rLmNvbQ&tok=3DMzEjaGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmN=

vbTg3NTg2NDgxNDcwNzg3YmQ4ODNlY2Y1MTAwMzFiZWQ1NzMyYjFlYTQ&ctz=3DAsia%2FD=

haka&hl=3Dsk&es=3D0" style=3D"display: inline-block;;font-weight: 4=

00;font-family: 'Google Sans', Roboto, sans-serif;color: #5f6368; f=

ont-size: 14px; line-height: 120%; mso-line-height-rule: exactly; margin: 0=

; text-decoration: none; text-transform: none;" class=3D"grey-button-text" =

target=3D"_blank">
ole=3D"presentation" style=3D"border: solid 1px #dadce0; border-radius: 16p=

x; border-collapse: separate;font-family: 'Google Sans', Roboto, sa=

ns-serif;">
>

ntation" style=3D"padding: 6px 0; padding-left: 16px; padding-right: 12px; =

white-space: nowrap;;color: #5f6367;">
y-button-text" style=3D"font-weight: 400;font-family: 'Google Sans'=

, Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 120%; ms=

o-line-height-rule: exactly; margin: 0; text-decoration: none; text-transfo=

rm: none;">=C4=8Eal=C5=A1ie mo=C5=BEnosti

le=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"">
y>

break-word;;padding:4px 12px;" class=3D"" align=3D"left">

ndary-text" style=3D"color: #70757a; text-decoration: none;font-family: Rob=

oto, sans-serif;font-size: 12px; line-height: 16px; mso-line-height-rule: e=

xactly; text-align: left;">

Odoslan=C3=A9
gle.com/calendar/" class=3D"accent-text underline-on-hover" style=3D"font-f=

amily: Roboto, sans-serif;font-size: 12px; line-height: 16px; mso-line-heig=

ht-rule: exactly;;color: #1a73e8; text-decoration: none;" target=3D"_blank"=

>Kalend=C3=A1rom Google

T=C3=BAto spr=C3=A1vu ste dostali, preto=

=C5=BEe ste =C3=BA=C4=8Dastn=C3=ADkom danej udalosti.

Ak t=C3=BAto po=

zv=C3=A1nku prepo=C5=A1lete, ktor=C3=BDko=C4=BEvek jej pr=C3=ADjemca bude m=

=C3=B4c=C5=A5 odosla=C5=A5 odpove=C4=8F organiz=C3=A1torovi, by=C5=A5 prida=

n=C3=BD do zoznamu host=C3=AD, poz=C3=BDva=C5=A5 in=C3=BDch bez oh=C4=BEadu=

na ich vlastn=C3=BD stav pozv=C3=A1nky alebo meni=C5=A5 va=C5=A1e potvrden=

ie =C3=BA=C4=8Dasti.
ont-family: Roboto, sans-serif;font-size: 12px; line-height: 16px; mso-line=

-height-rule: exactly;;color: #1a73e8; text-decoration: none;" href=3D"http=

s://support.google.com/calendar/answer/37135#forwarding">=C4=8Eal=C5=A1ie i=

nform=C3=A1cie
Mon Tue Wed Thu Fri Sat Sun
← Back July '26 Forward →
    1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31    

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button









Blog Grade for www.nk.ca/blog

Empire Avenue





Error

serendipity error: could not include serendipity_plugin_freetag:6c39baf097de002d8b1c2e33b9661474 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:f520e0fa688ba61bd1ed85c0fd80d550 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:b18e142d4998b6b0092d068ad858683d - exiting.

Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.