Royal bank for Canada phish from google user

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSP3-000000006yD-0ZPY

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:10:33 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:10:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dmxtu.com ([35.215.98.187]:33217 helo=member.dmxtu.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpR6w-00000000EiW-00qJ

for doctor@nk.ca;

Thu, 30 Jul 2026 07:48:02 -0600

Content-Type: multipart/alternative;

boundary="===============3084344239278491137=="

MIME-Version: 1.0

From: RBC Investments

To: doctor@nk.ca

Subject: =?utf-8?q?=5BRBC_Direct_Investing=5D_Identity_Verification_Required?=

=?utf-8?q?_=E2=80=94_FINTRAC_Compliance?=

Date: Thu, 30 Jul 2026 09:46:58 -0400

Message-ID: <178541921854.3788.11734097183975154584@ualberta.ca>

X-Spam_score: 17.9

X-Spam_score_int: 179

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: [RBC Direct Investing] Identity Verification Required â€”

FINTRAC Compliance | VÃ©rification d'identitÃ© requise â€” ConformitÃ© CANAFE

doctor, As part of RBC Direct Investing's ongoing compliance with the Proceeds

of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), administered

by FINTRAC, and in accordance with CIRO Dealer Me [...]

Content analysis details: (17.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

[35.215.98.187 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

[35.215.98.187 listed in dnsbl.ahbl.org]

[35.215.98.187 listed in dnsbl.ahbl.org]

[35.215.98.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.215.98.187 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: 66lvy.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_ACTION BODY: mangled action

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.215.98.187 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.0 ACCT_PHISHING Possible phishing for account information

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.9 URI_PHISH Phishing using web form

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

Subject: {SPAM?} =?utf-8?q?=5BRBC_Direct_Investing=5D_Identity_Verification_Required?=

=?utf-8?q?_=E2=80=94_FINTRAC_Compliance?=

Regulatory Compliance

Identity Verification Required

Under FINTRAC Guidelines

Reference: KYC-2026 — Routine Regulatory Audit

doctor,

As part of RBC Direct Investing's ongoing compliance with the Proceeds of Crime (Money Laundering) and Ter‌rorist Financing Act (PCMLTFA), administered by the Financial Transa‍ctions and Reports Analysis Centre‍ of Canada (FINTRAC), and in accordan‍ce with CIRO Dealer Member know-your-client obligations, we are required to verify the identi‌ty of all account holders on a periodic basis.

Our records indicate that your account has been selected for identity verification under the current regul‍atory audit cycle. This is a standar‌d procedure applied to a cross-sect‌ion of client accounts and does not reflect any concern regarding your account activity. Many Canadians co‌mplete this verification each year as part of routine compliance protocols.

What You Need to Complete

1

Confirm your personal information‍ — Verify that your name, address, da‍te of birth, and telephone number on file are current and accurate.

2

Validate government-issued ident‌ification — Confirm the type and expiry date of the identification document previously provided. In some cases, you m‌ay be asked to upload a copy of a valid‍ government-issued ID.

3

Provide proof of address — If your address on file has changed or cannot be verified against the ide‌ntification document, a recent utility bill, bank statement, or gover‌nment correspondence may be required.

Account Functions Affected Until V‌erification Is Complete

Until identity verification is completed, certain account functions will be restricted, including external fund transfers, third-party withdrawals, and the opening of new registered account‍s. These restrictions are applied in accordance with regulatory requirements and cannot be waived. Your ex‌isting investments remain protected under the Canadian Investor Prote‌ction Fund (CIPF), and dividend and‍ interest distributions continue t‌o be credited normally. Full access‍ is restored immediately upon completion of the verification.

The verification process takes appro‌ximately five minutes. Log in to RBC‌ Direct Investing, navigate to the A‌ccount Verification section, and f‍ollow the prompts to confirm your id‌entity.

Verify My Identity

This notice is issued pursuant to RBC Direct Investing's regulatory compliance obligations. RBC Direct Investing is a business name used by R‌BC Direct Investing Inc., a Dealer Member of CIRO and a Member of CIPF. Fo‌r questions, please contact RBC Dir‍ect Investing Client Services through the Secure Message Centre upon login. Do not reply to this email with i‌dentification documents or person‌al information.

Sincerely,

RBC Direct Investing

Regulatory Compliance Division

doctor,

Dans le cadre de la conformité conti‍nue de RBC Direct Investing à la Loi su‌r le recyclage des produits de la cri‌minalité et le financement des activités terroristes (LRPCFAT), admi‍nistrée par le Centre d'analyse des opérations et déclarations financ‌ières du Canada (CANAFE), et conformément aux obligations de connaissa‍nce du client des courtiers membres‍ de l'OCRI, nous sommes tenus de vérifier périodiquement l'identité de tous les titulaires de comptes.

Nos dossiers indiquent que votre compte a été sélectionné pour une vérification d'identité dans le cadre du cycle de vérification réglementai‌re actuel. Il s'agit d'une procédure standard appliquée à un échantill‍on représentatif de comptes de clients et ne reflète aucune préoccupation concernant l'activité de votre compte. De nombreux Canadiens effectuent cette vérification chaque année dans le cadre des protocoles de conformité courants.

Ce que vous devez accomplir

1

Confirmez vos renseignements pers‌onnels — Vérifiez que votre nom, votre adre‍sse, votre date de naissance et votr‌e numéro de téléphone au dossier sont à jour et exacts.

2

Validez votre pièce d'identité déli‍vrée par le gouvernement — Confirmez le type et la date d'expi‌ration du document d'identification fourni précédemment. Dans certains cas, on pourrait vous demander de télécharger une copie d'une pièce d'identité valide délivrée par le gouvernement.

3

Fournissez une preuve d'adresse — Si votre adresse au dossier a chang‌é ou ne peut être vérifiée par rappor‍t au document d'identification, une facture récente de services publics, un relevé bancaire ou une correspondance gouvernementale pourrai‍t être exigée.

Fonctions du compte touchées jusqu‌'à ce que la vérification soit terminée

Jusqu'à ce que la vérification d'identité soit terminée, certaines fonctions du compte sero‌nt restreintes, notamment les transferts de fonds‍ externes, les retraits à des tiers et‌ l'ouverture de nouveaux comptes en‌registrés. Ces restrictions sont appliquées conformément aux exigenc‌es réglementaires et ne peuvent être levées. Vos placements existants‌ demeurent protégés par le Fonds can‍adien de protection des investisse‍urs (FCPI) et les distributions de d‌ividendes et d'intérêts continuen‌t d'être créditées normalement. L'accès complet est rétabli immédiatement après la vérification.

Le processus de vérification prend environ cinq minutes. Connectez-v‌ous à RBC Direct Investing, accédez à l‍a section Vérification du compte et‍ suivez les instructions pour confirmer votre identité.

Vérifier mon identité

Le présent avis est émis conforméme‍nt aux obligations de conformité ré‌glementaire de RBC Direct Investin‌g. RBC Direct Investing est une dénomination commerciale utilisée par RBC Direct Investing Inc., un courti‍er membre de l'OCRI et un membre du FCPI. Pour toute question, veuillez communiquer avec les Services aux cl‍ients de RBC Direct Investing par l'entremise du Centre de messagerie sécurisé lors de la connexion. Ne répondez pas à ce courriel en fournissant des documents d'identification‌ ou des renseignements personnels.

Sincères salutations,

RBC Direct Investing

Division de la conformité réglementair‍e

RBC Direct Investing is a business name used by RBC Direct‌ Investing Inc. Member — Canadian Investor Protection Fund. Dealer Mem‌ber — Canadian Investment Regulato‌ry Organization.

This message is an automated regulatory compliance notification. Please direct all inquiries through the Se‌cure Message Centre within your RBC Direct Investing account.

© 2026 RBC Direct Investing Inc. All rights reserved.

RBC Direct Investing est une dénomination commerciale utilisée par RBC Direct Investing Inc. Membre — Fonds canadien de protection des investisseurs. Courtier me‌mbre — Organisme canadien de réglementation des investissements.

Ce message est une notification automatisée de conformité réglementa‍ire. Veuillez adresser toute deman‍de par l'entremise du Centre de messagerie sécurisé dans votre compte RBC Direct Investing.

© 2026 RBC Direct Investing Inc. Tous‍ droits réservés.

Interactive Brokers' trade phish from Google Cloud Compliance

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 09:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpSOV-000000006pu-41Hb

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 09:09:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 09:09:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from uzckeji.com ([35.215.116.200]:45649 helo=promos.uzckeji.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpR5V-00000000CmZ-2jVL

for sales@nk.ca;

Thu, 30 Jul 2026 07:46:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=promos.uzckeji.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=support@mjvdoz.promos.uzckeji.com;

bh=BR18sZWFkPUyL3Goxym359bO9bV4kmLCJpSHAyiyowU=;

b=AV0A34n9WrvH0F1XfJT1rZY2OZF+II1EkugbD0GIK7yMoZN6JhegyevuqW/V5A69YRC28SKF8cWj

4AolrdPAnMN4g7ApaKR7kVGUanSMF94nnYb+ji2vxXtBgnGknK+FRsXyYTO2nWfplYgPVEpcPVwT

5r5uqLX8sTKPQ3u0bkBb2xoPlDQmuOB94FjN+UdXUxNSy5+ljZxxxbL51Gikk7lvNAaHolGg7AKt

VM4h6j376mKLqmoKMupbAeDsGi630tBzpndEuJXcLA2SCNUI4F8Bv7My4McMZct8Mkzc/V9Ka36j

ZRG5dm6ihp00tjjrovRxDaVElUB/JG9ElpyHkA==

Content-Type: multipart/alternative;

boundary="===============8776155571676728755=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi0LigItL4oCLUuKAiyDigItD4oCLbOKAi2nigItl4oCLbuKAi3TigIsg4oCLU+KAi2XigIty4oCLduKAi2nigItj4oCLZeKAi3M=?=

To: sales@nk.ca

Subject: =?utf-8?q?=5BIBKR_Canada=5D_Trade_Surveillance_Alert_=E2=80=94_Atyp?=

=?utf-8?q?ical_Account_Behaviour_Detected?=

Date: Thu, 30 Jul 2026 09:44:34 -0400

Message-ID: <178541907464.4639.269218818030736681@mjvdoz.promos.uzckeji.com>

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: [IBKR Canada] Trade Surveillance Alert â€” Atypical Account

Activity Requires Review | Alerte de surveillance â€” Une activitÃ© atypique

du compte nÃ©cessite un examen sales, Interactive Brokers' trade surveillance

and market conduct monitoring systems â€” which operate continuously in compliance

with CIRO Dealer Member Rule 1300 series and Universal Market Integrity Rules

[...]

Content analysis details: (12.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

[35.215.116.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

[35.215.116.200 listed in dnsbl.ahbl.org]

[35.215.116.200 listed in dnsbl.ahbl.org]

[35.215.116.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.215.116.200 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: uzckeji.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: promos.uzckeji.com/35.215.116.200]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_ACTVTY BODY: mangled activity

2.2 INVESTMENT_ADVICE BODY: Message mentions investment advice

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.215.116.200 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} =?utf-8?q?=5BIBKR_Canada=5D_Trade_Surveillance_Alert_=E2=80=94_Atyp?=

=?utf-8?q?ical_Account_Behaviour_Detected?=

⚠

Interactive Brokers Canada Inc. — Trade Surveillance — Automated Detection

Atypical Account Behaviour Detect‌ed — Client Review Required

sales,

Interactive Brokers' trade survei‌llance and market conduct monitoring systems — which operate continuously in compliance with CIRO Dealer M‌ember Rule 1300 series and Universa‍l Market Integrity Rules (UMIR) — have identified trading patterns, login sequences‍, or account function usage that dev‍iate materially from the historical profile associated with your account.

This alert is a product of automated‌ surveillance. It is not a determina‍tion of misconduct. The patterns fl‌agged require your review to determine whether they represent authorized activity. Your timely review is a material factor.

Pattern Category Observation Severity

Login Behaviour Access timing, frequency, or geolocation inconsistent with historical norms Medium

Order Activity Trade size, security type, or execu‍tion pattern outside established p‌arameters High

Account Navigation Sequential function access pattern inconsistent with prior session history Medium

Client Obligation — Review and Confirm or Dispute

Under CIRO Dealer Member rules and I‌nteractive Brokers' Client Agreem‍ent, account holders are expected to review flagged activity and confi‍rm or dispute it upon notification.‌ Failure to review flagged activity within the prescribed period may ma‌terially affect your ability to seek protection or compensation for losses subsequently determined to be associated with the flagged act‌ivity. Your confirmation or disput‍e of each flagged pattern is a determinative factor in any claim assessment conducted by Interactive Broke‍rs' compliance or risk departments.

Log in to the Client Portal. The trad‍e surveillance review interface wi‍ll present each flagged pattern for‍ your confirmation or dispute. For each item, indicate whether the acti‍vity was authorized by you or whethe‌r it is unrecognized. If you dispute any item, our compliance and security teams will initiate a formal review. The process takes approximately five minutes. Your assets remain p‌rotected under CIPF.

Log In to Review Activity

Interactive Brokers Canada Inc. is an order-execution-only dealer an‍d does not provide investment advice‍. Member — CIRO and Member — CIPF. Reg‍istered office: 1800 McGill Colleg‌e Avenue, Suite 2106, Montreal, Quebec, H3A 3J6. This is an automated trade surveillance notification issued in compliance with regulatory obl‌igations. Do not reply to this email with account information.

Comportement atypique du compte détecté — Examen du client requis

sales,

Les systèmes de surveillance des transactions et de contrôle de la conduite sur les marchés d'Interactive Brokers — qui fonctionnent en conti‌nu conformément à la série 1300 des R‍ègles des courtiers membres de l'OC‌RI et aux Règles universelles d'int‌égrité du marché (RUIM) — ont détecté des schémas de trading, des séquences de connexion ou une utilisation des fonctions du compte qui s'écartent considérablement du profil histo‍rique associé à votre compte.

Cette alerte est le produit d'une surveillance automatisée. Il ne s'agit pas d'une détermination de mauvaise conduite. Les schémas signalés n‌écessitent votre examen pour déterminer s'ils représentent une activité autorisée. Votre examen en temps opportun est u‍n facteur déterminant.

Catégorie de schéma Observation Gravité

Comportement de connexion Moment, fréquence ou géolocalisation d'accès incompatibles avec les normes historiques Moyenne

Activité d'ordres Taille des transactions, type de titre ou schéma d'exécution hors des p‌aramètres établis Élevée

Navigation du compte Schéma d'accès aux fonctions séquentielles incompatible avec l'hist‍orique de session Moyenne

Obligation du client — Examiner et confirmer ou contester

En vertu des règles des courtiers membres de l'OCRI et de la Convention de client d'Interactive Brokers, les t‌itulaires de comptes sont tenus d'e‍xaminer l'activité signalée et de la confirmer ou de la contester dès réception de l'avis. Le défaut d'examiner l'activité si‌gnalée dans le délai prescrit peut compromettre considérablement vot‌re capacité à demander une protection ou une indemnisation pour les pertes ultérieurement attribuées à l'activité signalée. Vot‌re confirmation ou contestation de‍ chaque schéma signalé est un facteu‍r déterminant dans toute évaluation de réclamation menée par les service‍s de conformité ou de risque d'Interactive Brokers.

Connectez-vous au Portail Client. L'interface d'examen de surveillance des transactions présentera ch‌aque schéma signalé pour votre conf‍irmation ou contestation. Pour cha‌que élément, indiquez si l'activit‍é a été autorisée par vous ou si elle n'est pas reconnue. Si vous contestez un élément, nos équipes de conformité et de sécurité lanceront un examen formel. Le processus prend envir‍on cinq minutes. Vos actifs demeurent protégés par le FCPI.

Se connecter pour examiner l'activi‍té

Interactive Brokers Canada Inc. est un courtier exécutant des ordres s‌eulement et ne fournit pas de conseils en placement. Membre — OCRI et Mem‌bre — FCPI. Siège social : 1800, avenue McGill College, bureau 2106, Mon‌tréal (Québec) H3A 3J6. Ceci est une notification automatisée de surve‍illance des transactions émise conformément aux obligations réglementaires. Ne répondez pas à ce courri‍el en fournissant des renseignements sur votre compte.

Interactive Brokers Canada Inc. — Member — CIRO — Member — CIPF. Order-execution-only dealer. No investment advice.

Registered office: 1800 McGill Col‍lege Avenue, Suite 2106, Montreal,‌ Quebec, H3A 3J6.

The Interactive Brokers word and logo are trademarks of Interactive Brokers LLC.

© 2026 Interactive Brokers Canada Inc. All rights reserved.

Interactive Brokers Canada Inc. — Membre — OCRI — Membre — FCPI. Courtier exécutant des ordres seulement.‌ Aucun conseil en placement.

Siège social : 1800, avenue McGill College, bureau 2106, Montréal (Qué‍bec) H3A 3J6.

Le mot et le logo Interactive Brokers‍ sont des marques de commerce d'Inte‍ractive Brokers LLC.

© 2026 Interactive Brokers Canada Inc. Tous droits réservés.

Virtual assistant spam from Google Gmail

Posted by Dave Yadallee on Thursday, July 30. 2026

Hi Good Morning!
I sen=

t you an email on Friday but didn=E2=80=99t hear back.
Happy to sch=

edule a quick call. We offer Affordable Remote VA Support.
Thank yo=

u!
Justin,
VA Team!

On Apr 10, 2026, at 12:35=E2=80=AFPM,&=

nbsp; Justin <Juagmwaqfmwag@gmail.com> wrote:

Hi, root@nk.=

ca

Hope you are doing well=E2=80=A6

Please, could you let =

me know whether you are interested in hiring a remote Virtual Assistan=

t at a reasonable cost?

What we can handle for you:

=F0=9F=

=91=89 Admin & Data Entry

=F0=9F=91=89 Email & Calendar =

Management

=F0=9F=91=89 Cold Calling & Outreach

=F0=9F=

=91=89 social media & Lead Generation

=F0=9F=91=89 Customer =

Support

=F0=9F=91=89 Online Research

=F0=9F=91=89 CRM Mana=

gement

=F0=9F=91=89 Bookkeeping Assistance

=F0=9F=91=89 Ap=

pointment Scheduling

=F0=9F=91=89 Document Preparation

=F0=

=9F=91=89 Real Estate & E-commerce Support

=F0=9F=91=89 Stud=

io-quality 3D Rendering

=F0=9F=91=89 SEO & Digital Marketing=

=F0=9F=91=89 Website Development

=F0=9F=91=89 Mobile App =

Development

=F0=9F=91=89 LPO =E2=80=93 Legal Process Outsourcing=

=F0=9F=91=89 RPO =E2=80=93 Recruitment Process Outsourcing

<=

p>=F0=9F=91=89 Video Editing Support

We provide reliable, afford=

able, and results-driven remote support tailored to your business need=

s?

Would you be open to a quick call this week?

Best Regar=

ds,
Justin,
VA Team
Note: If this isn=E2=80=99t relevant, fee=

l free to reply =E2=80=9COpt-out=E2=80=9D

--ICN7dk9JZZbrWEHZBD=_rJS71uHkHvn0Wo--

Chinese language phish

Posted by Dave Yadallee on Thursday, July 30. 2026

virtual assistant spam from Google Gmail

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQtG-00000000Kfg-0qIA

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 07:33:38 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 07:33:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f175.google.com ([209.85.214.175]:44346)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQXx-000000000zb-0ZKz

for sales@nk.ca;

Thu, 30 Jul 2026 07:11:47 -0600

Received: by mail-pl1-f175.google.com with SMTP id d9443c01a7336-2ce87c7e3bbso23741835ad.1

for ; Thu, 30 Jul 2026 06:10:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1785417044; x=1786021844; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=G/Yv5PBwrW1blLYol2vaxh5AIXsDdQjSYnccLfXr/Xc=;

b=ZeXgb6T173ujNkbqtIKr50PP5UMFZ7r3jcuWnuhVxxM12jCKFHvSYr9RbWP8s7eLLf

YZcKtn/TTLjDm4H+d6I97uUTk+2X+5HOh6ZoBkkVMw3neCMg3vRYjXaYbUS6hKX7PG+e

TQrDT34503nYmlY49g4RR712Npnfl8EKqJzEif6/JfB0TQvXLDxu8QAgr8QS6u432Ck+

tc30PZgtxDY2SZpqdHf854aUF64VYVWD9CGqNf9QjDSu8HoMlE+IonISxNdpq2uv+8Mt

1KFzbzC2seRLuzsY5mI3jcnNb/ZLWOr0dIZR01qlTYZAcO9z6R5+PEjCJT9QVp9ZKyAa

1i5A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785417044; x=1786021844;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=G/Yv5PBwrW1blLYol2vaxh5AIXsDdQjSYnccLfXr/Xc=;

b=S5Aq/AAewVfrNrIlhUiCJ653w9o68U4s64qK446pV1fq5Mw3G6KXrbkkZbWPez62jE

YIgc7ed7B63Hv+bah/5QOocldZn6AjxD5/JIdMWKEsn1n1p2w1G8nCsUg9CdOMRjDdgc

cqnLh4LxJbegtp7vzT44SUyuq+HmmPuawKYKssEcOZ+LwJ6/hI52KbKkHoG2+4p1AfxK

sGQP7oyQMeG+ZX3XNjhPsFXR3CW+6Usa+dIHvAk9YCHdQoldIQAHw0nrY5w2/HkS23Vw

ipoKN0ANiK/Ng0kuXrlptebPIzIFW4hYYVemH0GJKq8g7sGrGMC5FfMXzxDBl1ugDoeh

U7dw==

X-Gm-Message-State: AOJu0YyNkkEQc87uZLlII+JO6Qp0556L1WeAqqVBzO/LDJvaff2aknHs

LsNmMcyCG+8/ebIfUiSK6qco7qj7o+lw64xG7AI/uc/ClAFYnqDFIkUpmTZLxZEX

X-Gm-Gg: AR+sD11F3CsfZ6/uuzdiUBvcx8hKdLHcyXyBKgiIj5JugBvMLYfYKNul/4CD6H3zYEu

FDJoxyVF91v9oOY7QPDJ0LyrFjjfItoCWIsXSiGnBNsKrCPbqJ9knQqFMoL4nNVcjMSG4JCyLNL

38P3BszNMFYKmvlAFJRX1bbjhJ9FfzAMOMhj/zrUwv3YJF4INsITWQM9wwDroOChEruYHlL57EZ

QD9VtBijhlhGjVPubaP5491yC3gWIWRhAYdmAXGY5pMAiiF1dbt6KbJq2ENWig7/u7jnwN72Atz

IbFsjEqaBY7Dyr9keCuPb0vudbvy5/5n8eaoByLTN40WgR2FwBcZ0Hblvnno1lxops8ngJqfACk

/SVXa0/YgIDVTRdhvQeZr3XORoxRdABlHbF0y3qNYbendCXg10r1sNv0dhI8xHh4HE/QT+pbwYY

NHXY9QLjABVoIdmdONBQ7kgOTEqvt6TQSMSBkCYZKgpjIciqkUoqixvnO1Dq9ZHU6naR5Odx3Vm

hKCrQOaKtnz76CBUJE1MyF85bzCxkEINoblBQ69yVoxos6SqAvwr+iw

X-Received: by 2002:a17:902:e78b:b0:2ce:8e70:3210 with SMTP id d9443c01a7336-2d03dce519emr3994825ad.16.1785417043590;

Thu, 30 Jul 2026 06:10:43 -0700 (PDT)

Received: from LAPTOP7O4PJ7JN (38.31.68.103.broadband.rapidnet.in. [103.68.31.38])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-31504e1ff81sm22026441eec.31.2026.07.30.06.10.41

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 30 Jul 2026 06:10:42 -0700 (PDT)

From: "Jawed"

To:

Subject: Call schedule | Virtual assistant ?

Date: Thu, 30 Jul 2026 18:40:18 +0530

Message-ID: <0fb101dd2024$d31eb760$795c2620$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0FB2_01DD2052.ECD6F360"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0gI3qPd0h3MQahSZ2awIgER8Htwg==

Content-Language: en-in

This is a multipart message in MIME format.

------=_NextPart_000_0FB2_01DD2052.ECD6F360

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

sales@nk.ca

Hello,

Do you need help with my service?

. Cold Callers / Appointment setters

. Social media managers / digital marketing

. Research / Data Entry

. Accounting / Bookkeeping

. Marketing associates / lead generation

Can we schedule a quick 5-minute call?

Best wishes

Jawed

------=_NextPart_000_0FB2_01DD2052.ECD6F360

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>

class=3DMsoNoSpacing>sales@nk.ca

class=3DMsoNoSpacing>

class=3DMsoNoSpacing>Hello,

Do you need help with my =

service?

class=3DMsoNoSpacing>• Cold Callers / Appointment =

setters

• Social media managers =

/ digital marketing

• Research / =

Data Entry

• Accounting / =

Bookkeeping

• Marketing =

associates / lead generation

class=3DMsoNoSpacing>

Can we =

schedule a quick 5-minute call?

Best =

wishes
Jawed

------=_NextPart_000_0FB2_01DD2052.ECD6F360--

Chinese products spam

Posted by Dave Yadallee on Thursday, July 30. 2026

Web/SEo/App spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 05:12:00 -0600

Received: from mail-francesouthazolkn19011027.outbound.protection.outlook.com ([52.103.39.27]:40760 helo=MRWPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpOfd-0000000076Y-3Z07

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 05:11:37 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ffFgcM49R0dguVBiTnFk37RAu8RHVw9RycFvwkqV/gou/beW+GURJ8TCl98GmCF8/RwI2zwT7+6CwLBINVuPkL6oQ1QUk/LLhKn5QZHJMnZ3rGG8DKbBQqvWe2ZjRfxpKrBqtndV3WZfZFmDNMrVeRcx3j/8FYcyAjMODFQNumMXYVJLvuSOcqrqbSg3TtZkrBMywnjk1wtXqmy7W+VPCiQ2c2oyOh7cFD1wFPrtL21auUjGblGZwGeAmKMibja5PKr6ppGTaetP3cTu0Z8mF3Z2kuYx07S12CtmeXpj7G41MA3WvpEXwmtancxH1RqrB4r6UA7kTxestgz/6s0M8A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=izven13wli+UN6oMRhjQiYR14DxTHegRrwxchLls2mo=;

b=GRD7ZuAQMeQVHKJptWkqnK9i498HjqJ/0mPyu9WAFfDMinZwstQ8UJE0BKSXVaElKFowiZ57OVGGEKChXaSPRWqp9qm8OvDmj3o7ODlXbtQFusFcBvPVOtbUsRQTij/5nfa79hukPnlW7yCKwqpGfiuIPac8Qj7/XALL+5/RCZjBIGy2RoVX9OnKcvPYOPsKyKVqfwDeW9apSDMQxfTKz7sZNCTsFiMcENbTJL8WVG9U6Az+opfB0ziciYnNJjEEgfgUAv33b6FfXKhJSoYr6hssB1aQWVRUfVMUKNpMKgCDqc3IS1wUoT5TUog/7UYTmbqbq8QFwVXuAnf2W2U13g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=izven13wli+UN6oMRhjQiYR14DxTHegRrwxchLls2mo=;

b=GeydLIhSob5XwZFioT82s/yLzS0rkyJ/l5YsMrtLYOUCAOMUg3FUe5KvzbrLeYAfRHCDAmBWNl1stm2t/NWq77Ba2YN2Z6MF20gn0nMUuZyryWcwIo4Pm02JMX5ljp+ZdM4idf02IRbwgXXS8NZGoypade1+N5B0M2Rnj48ZxB7fL8NAaGR3w+n7U4DiZA52kZQ66Nw7zclYy8F1F3oWULosdjJhGOSBwgruTLMg4bOHwHAwaglGITwOtIIukOubtcbaNwkm11yM7EvMS29bl/HRpNl/znE2wljAPbzP/QCG7o7TrExdkgQWaKmvgu3w8bxEPWiN36nCXBvAvV0yJQ==

Received: from PAWPR10MB7342.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:2e2::11)

by GVXPR10MB8440.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1e0::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.14; Thu, 30 Jul

2026 11:10:24 +0000

Received: from PAWPR10MB7342.EURPRD10.PROD.OUTLOOK.COM

([fe80::3518:29c1:f965:c578]) by PAWPR10MB7342.EURPRD10.PROD.OUTLOOK.COM

([fe80::3518:29c1:f965:c578%6]) with mapi id 15.21.0270.012; Thu, 30 Jul 2026

11:10:24 +0000

From: Robby Leeson

Subject: Good Morning

Thread-Topic: Good Morning

Thread-Index: AQHdIBOdH0LDf6/BskmHRxEpsl+4kg==

Date: Thu, 30 Jul 2026 11:10:24 +0000

Message-ID:

Accept-Language: fr-FR, en-US

Content-Language: fr-FR

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PAWPR10MB7342:EE_|GVXPR10MB8440:EE_

x-ms-office365-filtering-correlation-id: 90039f66-ead3-45f8-2cf1-08deee2b2778

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999006|39105399006|7071999006|31061999003|8062599012|8060799015|19110799012|22091999003|24121999003|25010399006|24071999003|4140399003|6040799012|16051099003|24021099003|15030799006|15080799012|39145399003|40105399003|26121999007|11120399003|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?htmMFaEwC4/iOXiJmTaRFUxGQE91C2WlHPAcEY19eiMBbbBs2kyJWvy0uf?=

=?iso-8859-1?Q?JfjvA5OIGlQYMdXVTq2xlph5wwaYkGWxeQBH8vuoOCHnmB+5UFfHEkmSoy?=

=?iso-8859-1?Q?r+/8emzweFE+RqxOgmi9C9YFCx4zMUtjTyT1BFYyNKMKjSG6b0tpHqukS3?=

=?iso-8859-1?Q?DCMuj0NXSDXd3u8Na1CkL7GP4hxCj/7w7/ShnS/xxZxrTm2OeyxNqm+r5n?=

=?iso-8859-1?Q?o+p5CVtvOzgptty0nz2S1ytVfD4hbwVO5Ahrs9zjQOPB3+G+NAIjN6v6/1?=

=?iso-8859-1?Q?q76/K/6YpkLAer4e0z/5/itqImnUciL2fHuI6qhmN/pMlrrWtC8Nti6TH5?=

=?iso-8859-1?Q?JhX/MUrQEp2T9W7/4/pWRDxKOhDgwmT6dfxsgH5Hg+sjlHab6wSAWTdkB6?=

=?iso-8859-1?Q?hSSlien8HaOlDSTpuvLsxCKd+DYmdqkr8bARL5Zox86UdGiaHLV07YgE9S?=

=?iso-8859-1?Q?63Mv2HFFvxa4fFUOKL7Z6bjSJV0UKsxr063Gq8YYEOJW+S2Ncc1HbX88Fg?=

=?iso-8859-1?Q?c4lW6yN5Z+8+qmFwDtpJDwmZXO3XQTV7T/hOmoCN7EiNBeenv0okAHJ6pL?=

=?iso-8859-1?Q?vfgGzzlCbcBiYGLeXzWl8yvSh5/PfDp0+gq2uE0wbX/l+fBPENTLWtc2JU?=

=?iso-8859-1?Q?1DfZsE3QwvaBhQlEUsovronOcE3dF6Xsbl4jQtP/Spq0bLpIxzPCDn59x8?=

=?iso-8859-1?Q?NL7g2jLbFSVzzY70W5DgyI3bVDkQv4uQ4hGur2LGoJqD9Nv93kdxgYwHmX?=

=?iso-8859-1?Q?B+GFA1g7YCIqhNFg6kTwIfeNlCqUGfbS0dNEzBNpUphRKS3QrJfwGyP6jg?=

=?iso-8859-1?Q?0ySC1s7GDMlAM9ppfu3/zoE3J0ArnM0knE6qOca4FZC8htZBdqnSApTlm1?=

=?iso-8859-1?Q?zC9P1BuZN58L21+EcYmiMlG/h2SX7O8aTSmK1BGYp4MkpO3yqApcFB9QcT?=

=?iso-8859-1?Q?R4aNn+yL5tzy19V7DxVdnbND4fZaoTaPsJkpc8C3nmTG4hKed6IBxHLnv9?=

=?iso-8859-1?Q?fotyTF5h/g+2B9oSnRBfoMe7+3CiHUsYV4U5mUm3rIaQUNPwFVZYFSU2/I?=

=?iso-8859-1?Q?n4hC/LBsBk0Q9VeT81tACuCVEGPWBOPPI8dLCn7otJHq7r+QuaRGdeD4f9?=

=?iso-8859-1?Q?P/boE9LaZq/K9pB+o4E4qvqHd3kwIJ2bmCewf8YogqLXcsAks9jV63GAAm?=

=?iso-8859-1?Q?BdeEuqG/NwE8zFdOWZJuWZB/sKOOjBtaFcvxrvPOLz2S/GM2sFkupTCo3I?=

=?iso-8859-1?Q?xKbfoyCLlw4ZMJKJ404NIm9BPhdwqkAbSdWiKZ/lb2D9fQEhpu0dP7Q8LP?=

=?iso-8859-1?Q?NNaJ?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Wnhdjo/fDhyKsr3Satb5hj5CwPm/4L/H+VA2sjILgqOM5ezkwLpp6KcArZ?=

=?iso-8859-1?Q?tmaWEkaz2XKDtne9w+0eS8ffYihogdP6YYu+yfub12ETyEy6QXVketwZIf?=

=?iso-8859-1?Q?mq4a5L0ZlitftDNEm5zdLM+Ie3hGpLaSzAJW3HBjvVJv0xQL8+ekwGLK1y?=

=?iso-8859-1?Q?/O8Su6qnEuOYbFp+01mumx55acVTtpKpvVNCZvSEkqnO5RKMJfPeef+Jeb?=

=?iso-8859-1?Q?tyK0lCfD6lvN2tHbiUamPmnmyXWBJDEsrqah3UvXS4cWVIEzXIAbDs458k?=

=?iso-8859-1?Q?TMn9V4WrYm1HUl8RkrmHRVFTHAE1gfR/iTmHuDivj+Yj97uaP+H2AE20Mb?=

=?iso-8859-1?Q?EbnfnicNX8IVuZ52wpPhToWAa4DzPO3VHsBL41361LLrjytJPquZSCq8jj?=

=?iso-8859-1?Q?XjKVfzd4pt9/P5BNrOgl+YLuFQqpQe8Bimtpu4L12899SIeCH1SDuZ8M0R?=

=?iso-8859-1?Q?4mYxMmd6UGQFK+67Dv35OBvWeGRapHOLjcICx8CpVA3oQ/mWwQ8Cn8IaYD?=

=?iso-8859-1?Q?7NO2czra5L+cCYPv/NgZT4+K0jQ8QqEOOcL284kKeuOX0YqRbRZWhAH9dk?=

=?iso-8859-1?Q?xjwAffYzoGferg5vUn883T8oV2bEfCtU+gvyzVYqGRM7yNwkGtMGCdPbD1?=

=?iso-8859-1?Q?1ES7d6inEOzOr2zWkuwpPuoMnB4fO6Gb1Ar44P4gepBHGMnhtybsaNk9VM?=

=?iso-8859-1?Q?D+vBDZUX8/rEjVCa5O7I52NgaGtxvPZxIqAlZAan8tyfMH+nRSSLm77NDw?=

=?iso-8859-1?Q?TnupFnMK1YWdg4YOwfAjtXtIfuv0rznoJ9ggF6eFKwOZ9xEqlJui6Kel3h?=

=?iso-8859-1?Q?HBiMBJuwRNxSwu+0i7Ib7u8QYvC2mQeLtowmskhvGEHEEZrzSEwWiTaNDu?=

=?iso-8859-1?Q?YbwGx9sOS9gmtazNyINvD0ckIS5JLU3cM5wIGA+4+8P2ZkTj3/hkX3SXE2?=

=?iso-8859-1?Q?CsRC6bmdErV3ucX2c+sDrqZbwtyb/q+Pu/1FU1V1aEC4z7ZtkCHRkPgLOo?=

=?iso-8859-1?Q?+QBTEZGf5Z9Me5EcdMc8k0qbj94LNpUuUlGSylJVTKTMUwlkC9jRwDwqL2?=

=?iso-8859-1?Q?LtoN6wor/lI/6AwcIsk8FWafNw12syRJyMTOa0eZZjjZFtIqwFEk0l/dKe?=

=?iso-8859-1?Q?YqKbyXmF2nqsNHnyTfe0Bw9AshxjVHP6UqDqqzOFygJ00VLCgDC0DH+ZHP?=

=?iso-8859-1?Q?4eE561gCHa9Y2qj4rsrgXAiMGlBDxmRZayz+IzeJ3se2UkI/mRIYyARWul?=

=?iso-8859-1?Q?Q8a8Hu0xhkgFVqeycueAEdLjr1aQ7oHQ4fFAOHVqh2qb6wQ7A0kL7bJkMK?=

=?iso-8859-1?Q?ZGi0/pey820OXujHcVhe32z3XnDnCmPk1JW7zS2sLspi7WtWZi4MiC6Pio?=

=?iso-8859-1?Q?KSBCj0O5TG2rn4jlgeqexQH5tQCBOkKCz7bojd1frxMgXxBCBjZBMbxnh5?=

=?iso-8859-1?Q?s0rOLHYdGWpytIydKM+LFpt95oCYh3KJb8m4KA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PAWPR10MB7342876708353A3D75EC606EBBC92PAWPR10MB7342EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-d3deb.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PAWPR10MB7342.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 90039f66-ead3-45f8-2cf1-08deee2b2778

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2026 11:10:24.6353

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR10MB8440

--_000_PAWPR10MB7342876708353A3D75EC606EBBC92PAWPR10MB7342EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

How are you doing ? I'm still waiting for your response to my previous emai=

l. Waiting to hear from you as soon as possible.

Regards

Pedro

--_000_PAWPR10MB7342876708353A3D75EC606EBBC92PAWPR10MB7342EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

background-color: rgb(255, 255, 255); margin: 0px; font-family: Calibri, He=

lvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

255, 255);">Hi,

rgb(255, 255, 255); margin: 0px;">

background-color: rgb(255, 255, 255); margin: 0px; font-family: "Segoe=

UI", "Segoe UI Web (West European)", -apple-system, BlinkMa=

cSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 12p=

t; color: rgb(36, 36, 36);">

How are you doing ? I'm still waiting for your response to my previous emai=

l. Waiting to hear from you as soon as possible.

margin: 0px; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

255, 255);">Pedro

s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

--_000_PAWPR10MB7342876708353A3D75EC606EBBC92PAWPR10MB7342EURP_--

Health calcium products spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 04:29:00 -0600

Received: from out16-185.antispamcloud.com ([185.201.18.185]:40510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpNzN-0000000018B-1oRB

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 04:28:01 -0600

Received: from s4712.syd1.stableserver.net ([198.38.93.21])

by mx325.antispamcloud.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.94.2)

(envelope-from )

id 1wpNyR-005ZJU-8x; Thu, 30 Jul 2026 12:26:49 +0200

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=onlinehealth.co.za; s=default; h=MIME-Version:Content-Type:In-Reply-To:

References:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:

Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:

Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=oNBSEMCVN1Yy1Y4Z8A7OB2V0uBbsBZa2E4r252sj5c8=; b=LroWmxeSoFke5oEw8NYjIrXeiJ

XDQzXfiUkH0Z7jbjpy5aztjoj/IW6Iv90bzflBX7UYsKXSpptoTjFAA8T4WRChTY7B81CyO651B7Y

r3aQaIXxztOJN0LB6oPBcJ4pmc55TaMMPtfEpEN9Dsgmw5UAv0vBwgeSGV/cDKzcc8q6vYm15opHs

9I07G460baiUk0D+fS1m7MXfj4L975wOvPtuN68f8VlkqetvseMTNH8L+awEPDRBdUX2JNq8HAliW

PzInsrvlNy8RiHLeA5TVI2eyUfKgmO5D+i9q1600tM3l9jkerZC+WE2SPK5F5NNRSz21wHQMmgvBo

ivIMo5qw==;

Received: from [52.98.209.37] (port=53243 helo=GV1PR02MB8257.eurprd02.prod.outlook.com)

by s4712.syd1.stableserver.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5)

(envelope-from )

id 1wpNyK-0000000D3yt-2W5y;

Thu, 30 Jul 2026 10:26:40 +0000

From: "info@onlinehealth.co.za"

To: "dave@doctor.nl2k.ab.ca" , "doctor@nl2k.ab.ca"

Subject:

=?iso-2022-jp?B?Rnc6IENhbGNpdW0gUG93ZGVyGyRCISQbKEJOdXRyaXRpb25hbCBQcm9k?=

=?iso-2022-jp?B?dWN0cw==?=

Thread-Topic:

=?iso-2022-jp?B?Q2FsY2l1bSBQb3dkZXIbJEIhJBsoQk51dHJpdGlvbmFsIFByb2R1Y3Rz?=

Thread-Index: AWIuQzA4GmgSKb/ssATwPGcq1mZW8vXjlEh9

X-MS-Exchange-MessageSentRepresentingType: 1

Date: Thu, 30 Jul 2026 10:26:36 +0000

Message-ID:

References: <26c7f0.18e2.19fb0e4b319.Coremail.qianfanb@vip.163.com>

In-Reply-To: <26c7f0.18e2.19fb0e4b319.Coremail.qianfanb@vip.163.com>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-Exchange-Organization-SCL: -1

X-MS-TNEF-Correlator:

X-MS-Exchange-Organization-RecordReviewCfmType: 0

msip_labels:

Content-Type: multipart/alternative;

boundary="_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_"

MIME-Version: 1.0

X-Get-Message-Sender-Via: s4712.syd1.stableserver.net: authenticated_id: info@onlinehealth.co.za

X-Authenticated-Sender: s4712.syd1.stableserver.net: info@onlinehealth.co.za

X-Originating-IP: 198.38.93.21

X-Spampanel-Domain: s4712.syd1.stableserver.net

X-Spampanel-Username: 198.38.93.21

Authentication-Results: antispamcloud.com; auth=pass smtp.auth=198.38.93.21@s4712.syd1.stableserver.net

X-Spampanel-Outgoing-Class: unsure

X-Spampanel-Outgoing-Evidence: Combined (0.60)

X-Recommended-Action: accept

X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuXm6rNTtZt9akaM9CAP3495Vd/QTFaGzdwm

FV/OgAu0zCu2SmbhJN1U9FKs8X3+Nt2Y9HIs/iKwFaXzyKrPrEGa0UXBLeNbZhWtExN/i1eHKEYf

yTGsp+GZvJmiBugzeETMmwu+yu7O8TurymmD5vTQTyPIx4DZtCEn1ACC7fqX9CJwlNFET8uqlhb1

UKo++Jj+PawXz4OkaKWgAyyHasTlPqv2mp/J55B80pjNBGqcELm0v/tqjmRUis4ORFthDL931MEU

6JuuacWxepb8m9dBZK0EMmf3P50Ajf/tIX00FkTBuwLnUGQuNnoBQ/KeHosfzRslXI17GS1R1G9q

ZmhJJlVzfYeu2veejK2lOCRG58zgmlIwjjseIVAGwaWbkDKc0Cwh3QwFriop2/O74eHV21Fzkd5g

U5MycT0pdxJRiXq72wZVF8lCpyv9KjJ6pgjPnUyRBWYB1i/CifTwr9ZtLUJ7crhf6NWnPwGv7L2p

3D/BNM8813zogpOdGRAGcQuhFJ7oKehaoNVXSqhCqA/eYdbeax1V4ZsvmDQIa8yxaBkDJRaaICR2

rDamAVeZMV5qH68Tb5grCtCqtlDJnuAo9E4s9Gdne3MRDSTqmpH9260jiD6XqsJZtjQxlyCdseyn

JEFNnK1qPNWxPxft8F5DUBx4AUPwWPXKRBvljhpUNODBui4NbEho5tshba26WFfpkUZiG8IPY6w2

hvnJltBbZN93x25CTUX7JU63cGJVGk+LNw3faF63zVFfRzZ3fciqtihFO7o48dzV5UU5/0iHFCqT

hJGzQhLJ94s0JkFGJ7yMdUr45UVSHyCa1s1nvQ0PLjNfl89Rbl/KRMjyVlyGCF2UNqHvo3iI/j89

Ixoki1FfEoXm0/FPF8PR0w363lmvL0YsUDAr0HVfUEXNBMcsYnNGFdRN3CtPPBjSHkIxZc+HrWde

CNZcdxZXx1r/Wadi4ZRgfGRSidwrpGvyI+omXrwcAI2PCaiq+/a0w7hT9KdLqQwYcilbCplY0WAC

XveRVYKU9W9tbmVXJBqdHHDmfr8GmLdE9vCd+W2Z1iGwzrJJS1c8y9gQkftfW0mRErDyOI4gUk6a

WVeVfppVHxXAMS+4ayUpOtEhdxekWDmK9g==

X-Report-Abuse-To: spam@quarantine16.antispamcloud.com

X-Complaints-To: abuse@master.antispamcloud.com

--_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_

Content-Type: text/plain; charset="iso-2022-jp"

Content-Transfer-Encoding: quoted-printable

Good day Dave,

I came across your details on the web whilst trying to establish and authen=

ticate the mail below. Would this be one of those scam rmails?

Regards,

________________________________

From: Qanfan

Sent: Thursday, July 30, 2026 4:40 AM

To: info@onlinehealth.co.za

Subject: Calcium Powder=1B$B!$=1B(BNutritional Products

Hi,

Good day.

We are an established importer and wholesale company based in China, with b=

usiness networks across Shenzhen, Guangzhou, Hong Kong and Singapore. Our s=

upply chain system is mature and well-developed.

Currently, we are actively sourcing high-quality health care products from =

reliable manufacturers and plan to introduce these products to the Chinese =

market.If you are interested in jointly exploring the Chinese market, pleas=

e don't hesitate to contact me.

I hope to have the opportunity for cooperation.Waiting for your early reply=

.

Best regards,

Qanfan Team

--_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_

Content-Type: text/html; charset="iso-2022-jp"

Content-Transfer-Encoding: quoted-printable

jp">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Good day Dave,

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I came across your details on the web whilst trying to establish and authen=

ticate the mail below. Would this be one of those scam rmails?

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Regards,

yle=3D"font-size:11pt" color=3D"#000000">From: Qanfan <qianfanb@v=

ip.163.com>

Sent: Thursday, July 30, 2026 4:40 AM

To: info@onlinehealth.co.za <info@onlinehealth.co.za>

Subject: Calcium Powder=1B$B!$=1B(BNutritional Products

000; font-size:14px; font-family:Arial">

rgin:0pt; text-indent:0pt; background-image:initial; background-position:in=

itial; background-size:initial; background-repeat:initial; background-attac=

hment:initial; background-origin:initial; background-clip:initial">

kground-image:initial; background-position:initial; background-size:initial=

; background-repeat:initial; background-attachment:initial; background-orig=

in:initial; background-clip:initial">Currently,

we are actively sourcing high-quality health
mily:=1B$BAWBN=1B(B; letter-spacing:0pt; font-size:10.5pt; background-image=

:initial; background-position:initial; background-size:initial; background-=

repeat:initial; background-attachment:initial; background-origin:initial; b=

ackground-clip:initial">care

products
; font-size:10.5pt; background-image:initial; background-position:initial; =

background-size:initial; background-repeat:initial; background-attachment:i=

nitial; background-origin:initial; background-clip:initial"> from

reliable manufacturers and plan to introduce these products to the Chinese=

size:10.5pt; background-image:initial; background-position:initial; backgro=

und-size:initial; background-repeat:initial; background-attachment:initial;=

background-origin:initial; background-clip:initial">
le=3D"font-family:Arial; letter-spacing:0pt; font-size:10.5pt; background-i=

mage:initial; background-position:initial; background-size:initial; backgro=

und-repeat:initial; background-attachment:initial; background-origin:initia=

l; background-clip:initial">market.If

you are interested in jointly exploring the Chinese market, please don't h=

esitate to contact me.
ng:0pt; font-size:10.5pt; background-image:initial; background-position:ini=

tial; background-size:initial; background-repeat:initial; background-attach=

ment:initial; background-origin:initial; background-clip:initial">
p>

--_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_--

Health Calcium products spam

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 07:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQrz-00000000GB5-2ovD

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 07:32:19 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 07:32:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out13-75.antispamcloud.com ([185.201.17.75]:60414)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpNzN-0000000018E-1zOD

for doctor@nl2k.ab.ca;

Thu, 30 Jul 2026 04:28:01 -0600

Received: from s4712.syd1.stableserver.net ([198.38.93.21])

by mx325.antispamcloud.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.94.2)

(envelope-from )

id 1wpNyR-005ZJU-8x; Thu, 30 Jul 2026 12:26:49 +0200

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=onlinehealth.co.za; s=default; h=MIME-Version:Content-Type:In-Reply-To:

References:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:

Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:

Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=oNBSEMCVN1Yy1Y4Z8A7OB2V0uBbsBZa2E4r252sj5c8=; b=LroWmxeSoFke5oEw8NYjIrXeiJ

XDQzXfiUkH0Z7jbjpy5aztjoj/IW6Iv90bzflBX7UYsKXSpptoTjFAA8T4WRChTY7B81CyO651B7Y

r3aQaIXxztOJN0LB6oPBcJ4pmc55TaMMPtfEpEN9Dsgmw5UAv0vBwgeSGV/cDKzcc8q6vYm15opHs

9I07G460baiUk0D+fS1m7MXfj4L975wOvPtuN68f8VlkqetvseMTNH8L+awEPDRBdUX2JNq8HAliW

PzInsrvlNy8RiHLeA5TVI2eyUfKgmO5D+i9q1600tM3l9jkerZC+WE2SPK5F5NNRSz21wHQMmgvBo

ivIMo5qw==;

Received: from [52.98.209.37] (port=53243 helo=GV1PR02MB8257.eurprd02.prod.outlook.com)

by s4712.syd1.stableserver.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5)

(envelope-from )

id 1wpNyK-0000000D3yt-2W5y;

Thu, 30 Jul 2026 10:26:40 +0000

From: "info@onlinehealth.co.za"

To: "dave@doctor.nl2k.ab.ca" , "doctor@nl2k.ab.ca"

Subject:

=?iso-2022-jp?B?Rnc6IENhbGNpdW0gUG93ZGVyGyRCISQbKEJOdXRyaXRpb25hbCBQcm9k?=

=?iso-2022-jp?B?dWN0cw==?=

Thread-Topic:

=?iso-2022-jp?B?Q2FsY2l1bSBQb3dkZXIbJEIhJBsoQk51dHJpdGlvbmFsIFByb2R1Y3Rz?=

Thread-Index: AWIuQzA4GmgSKb/ssATwPGcq1mZW8vXjlEh9

X-MS-Exchange-MessageSentRepresentingType: 1

Date: Thu, 30 Jul 2026 10:26:36 +0000

Message-ID:

References: <26c7f0.18e2.19fb0e4b319.Coremail.qianfanb@vip.163.com>

In-Reply-To: <26c7f0.18e2.19fb0e4b319.Coremail.qianfanb@vip.163.com>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-Exchange-Organization-SCL: -1

X-MS-TNEF-Correlator:

X-MS-Exchange-Organization-RecordReviewCfmType: 0

msip_labels:

Content-Type: multipart/alternative;

boundary="_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_"

MIME-Version: 1.0

X-Get-Message-Sender-Via: s4712.syd1.stableserver.net: authenticated_id: info@onlinehealth.co.za

X-Authenticated-Sender: s4712.syd1.stableserver.net: info@onlinehealth.co.za

X-Originating-IP: 198.38.93.21

X-Spampanel-Domain: s4712.syd1.stableserver.net

X-Spampanel-Username: 198.38.93.21

Authentication-Results: antispamcloud.com; auth=pass smtp.auth=198.38.93.21@s4712.syd1.stableserver.net

X-Spampanel-Outgoing-Class: unsure

X-Spampanel-Outgoing-Evidence: Combined (0.60)

X-Recommended-Action: accept

X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuXm6rNTtZt9akaM9CAP3495Vd/QTFaGzdwm

FV/OgAu0zCu2SmbhJN1U9FKs8X3+Nt2Y9HIs/iKwFaXzyKrPrEGa0UXBLeNbZhWtExN/i1eHKEYf

yTGsp+GZvJmiBugzeETMmwu+yu7O8TurymmD5vTQTyPIx4DZtCEn1ACC7fqX9CJwlNFET8uqlhb1

UKo++Jj+PawXz4OkaKWgAyyHasTlPqv2mp/J55B80pjNBGqcELm0v/tqjmRUis4ORFthDL931MEU

6JuuacWxepb8m9dBZK0EMmf3P50Ajf/tIX00FkTBuwLnUGQuNnoBQ/KeHosfzRslXI17GS1R1G9q

ZmhJJlVzfYeu2veejK2lOCRG58zgmlIwjjseIVAGwaWbkDKc0Cwh3QwFriop2/O74eHV21Fzkd5g

U5MycT0pdxJRiXq72wZVF8lCpyv9KjJ6pgjPnUyRBWYB1i/CifTwr9ZtLUJ7crhf6NWnPwGv7L2p

3D/BNM8813zogpOdGRAGcQuhFJ7oKehaoNVXSqhCqA/eYdbeax1V4ZsvmDQIa8yxaBkDJRaaICR2

rDamAVeZMV5qH68Tb5grCtCqtlDJnuAo9E4s9Gdne3MRDSTqmpH9260jiD6XqsJZtjQxlyCdseyn

JEFNnK1qPNWxPxft8F5DUBx4AUPwWPXKRBvljhpUNODBui4NbEho5tshba26WFfpkUZiG8IPY6w2

hvnJltBbZN93x25CTUX7JU63cGJVGk+LNw3faF63zVFfRzZ3fciqtihFO7o48dzV5UU5/0iHFCqT

hJGzQhLJ94s0JkFGJ7yMdUr45UVSHyCa1s1nvQ0PLjNfl89Rbl/KRMjyVlyGCF2UNqHvo3iI/j89

Ixoki1FfEoXm0/FPF8PR0w363lmvL0YsUDAr0HVfUEXNBMcsYnNGFdRN3CtPPBjSHkIxZc+HrWde

CNZcdxZXx1r/Wadi4ZRgfGRSidwrpGvyI+omXrwcAI2PCaiq+/a0w7hT9KdLqQwYcilbCplY0WAC

XveRVYKU9W9tbmVXJBqdHHDmfr8GmLdE9vCd+W2Z1iGwzrJJS1c8y9gQkftfW0mRErDyOI4gUk6a

WVeVfppVHxXAMS+4ayUpOtEhdxekWDmK9g==

X-Report-Abuse-To: spam@quarantine16.antispamcloud.com

X-Complaints-To: abuse@master.antispamcloud.com

--_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_

Content-Type: text/plain; charset="iso-2022-jp"

Content-Transfer-Encoding: quoted-printable

Good day Dave,

I came across your details on the web whilst trying to establish and authen=

ticate the mail below. Would this be one of those scam rmails?

Regards,

________________________________

From: Qanfan

Sent: Thursday, July 30, 2026 4:40 AM

To: info@onlinehealth.co.za

Subject: Calcium Powder=1B$B!$=1B(BNutritional Products

Hi,

Good day.

We are an established importer and wholesale company based in China, with b=

usiness networks across Shenzhen, Guangzhou, Hong Kong and Singapore. Our s=

upply chain system is mature and well-developed.

Currently, we are actively sourcing high-quality health care products from =

reliable manufacturers and plan to introduce these products to the Chinese =

market.If you are interested in jointly exploring the Chinese market, pleas=

e don't hesitate to contact me.

I hope to have the opportunity for cooperation.Waiting for your early reply=

.

Best regards,

Qanfan Team

--_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_

Content-Type: text/html; charset="iso-2022-jp"

Content-Transfer-Encoding: quoted-printable

jp">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Good day Dave,

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Regards,

000; font-size:14px; font-family:Arial">

--_000_GV1PR02MB825787EDF94B3DF630535328F0C92GV1PR02MB8257eurp_--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jul 2026 07:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpQrB-00000000Dml-2T1p

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jul 2026 07:31:29 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jul 2026 07:31:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011028.outbound.protection.outlook.com ([52.103.74.28]:41117 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpLw1-000000007pn-0Vr4

for sales@nk.ca;

Thu, 30 Jul 2026 02:16:18 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LTrZZsmdvQ2LSc9hiUpWNJkln7p2qjbBP2Z0XFzhRwIQpd/irG1iCaL8KLvwOCSEjQIUn3OXY0pjpxEGEX+SZBZxKGU2U35yAperMI1Xn6udZgUDz1oBgSlAcFkQunob59uXmrBQViB5gLWDmCUR1QoUHpNsXBMpPhX9XeGNOlz1mMnezEEST14JmoNem4sMQBvJ6wi6VD6EzCsyUPpllApXoE6D62NLZtNgdIXbdg9hYAIceSDFhWWxySdaREDv7dXbPXPZGpVNlREdvW8jmWFLGlw3Egi94HVpEaWfeOTxRdA+TO5GG5VNXW9hVzOC6dea39rIthnydr+VD0FJkQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=GpeDpi7K20K5RtmWtKJpmoxlbEjGT+XrBIhRaGv2QIM=;

b=oofDXZpzc8k8EBZUP5NR/K0PrZUGk+VKGIJ/dlCGx/RoCPGI93P13yktSNrCPhalUmUHDmmjYYyDrgu/tYmJOYnrAgnsaW+NVFTAxvsRBwHkC1gQoPyli4P8M5mkH8jAMVM476eYfv/p+RbnrK3XwRRzVGW51D+BbluvzQ7m7bW/zi15iemeP1VskhIwv5v9f25sfP0+JDELde/AQEGlEsxuzP1+Uuc14MRmVbNyIk8Pxs/mjNDdLdVzZX1PWAFv3cR4HNYL32Mfe8KNeos/G45k4RQFwPCS1nN1Ppt+choBX8niQB2i+Eu2cMNvGOIkuZrhISyL04rBAL/T4YP0lQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=GpeDpi7K20K5RtmWtKJpmoxlbEjGT+XrBIhRaGv2QIM=;

b=JBMFNKr/cfiJ9XCENN4SWhA6m/doxL6DZUV8IxI/6mFSGJwZsMVG2O5RELEORBXotupWjFmoewwYZjkrF2lqmI5lr1lc6fd0BIH5uqZfWs0HLlqZGCigi4co+bv9BKQg8IVQiqckRSgFsVfZ1U7ih7cvNnmtFzGHAaHwHn4kEZY4BPXzXxol++x83RWqLqL79yR86xb3NLW+VIwnFD8cz7igcMU6BrnhZ8k2tNa/Dw3vesF0FC5/NvXeJ8sqcmA2ORIylthoU2vrEYCz3CYMMkHmNU6Oo37cndIoe+vilEgenJz7YQDTf8h89QMsuwg2x0p09p31uO7aEnJfgC/B1Q==

Received: from SE1P216MB2113.KORP216.PROD.OUTLOOK.COM (2603:1096:101:159::13)

by PS2P216MB1281.KORP216.PROD.OUTLOOK.COM (2603:1096:301:99::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.14; Thu, 30 Jul

2026 08:15:05 +0000

Received: from SE1P216MB2113.KORP216.PROD.OUTLOOK.COM

([fe80::312e:dcd8:af92:b3a5]) by SE1P216MB2113.KORP216.PROD.OUTLOOK.COM

([fe80::312e:dcd8:af92:b3a5%6]) with mapi id 15.21.0270.012; Thu, 30 Jul 2026

08:15:05 +0000

From: Belinda Miller

To: "sales@nk.ca"

Subject: www.nk.ca

Thread-Topic: www.nk.ca

Thread-Index: AQHdH/uHJbjMi77HHEekGEexzjFp2A==

Date: Thu, 30 Jul 2026 08:15:05 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE1P216MB2113:EE_|PS2P216MB1281:EE_

x-ms-office365-filtering-correlation-id: 9b885cc0-18d6-49fe-c818-08deee12a984

x-microsoft-antispam:

BCL:0;ARA:14566002|2604032031799003|704163111799003|20031999006|39105399006|15001099006|8062599012|8060799015|19110799012|5062599005|31061999003|24071999003|4140399003|25010399006|37011999003|38102599003|15080799012|24021099003|16051099003|55001999006|10035399007|40105399003|1602099012|102099032|440099028|4302099013|3412199025;

x-microsoft-antispam-message-info:

=?us-ascii?Q?Z5XwVr8DXdg1BfLaGSZr22tPJuXQejzpOjW4x8/aosD00l8xgAmMpr9BAHCc?=

=?us-ascii?Q?N5CK4mWSIQj4xHKyHAXWlGu6Qe8UcBUbfaqAb4Qs8WjYcvSb2X5R1fuYDGfu?=

=?us-ascii?Q?9Z+WaNGkwpSl6DEe6bbhGZMHYnW34FPsgFSVNPVZAUgmPmBI2/wBrgjuhhpq?=

=?us-ascii?Q?CnZ4G8Ygq8uTBC3y+aV/RT0abM810JFHu7vMVz85mX8K1N8Ew30LapAeVisn?=

=?us-ascii?Q?t+8nsM0f3XCr2AsjAW+nNOhJr9sW7gCxfP/eWNxjIjM8QHA3s5f3isaV4p6f?=

=?us-ascii?Q?Db+IXfjgFxXBMsuo9zDSirfh2rPOz7CgkrGXVb2Nflis3mRMk6cqejXrMu+a?=

=?us-ascii?Q?6rEsaC50Z1VYkIfn22UNgOkaom8qQKsAUnPSyWBqDFonfP65wQmeQlQkTvo2?=

=?us-ascii?Q?oOCeWrTFGMbK3Ix6ZBU0ShBRo5FAvZaJM0tEkiXHmpXoutCIgQGZWp2W85t1?=

=?us-ascii?Q?uXqkPQY7kydLlH2oifiCGqRg8rgPNgFciBktU5rDK9GFEF6mHAfYpd3ydV6p?=

=?us-ascii?Q?62WH1xOhGxomS7WuL4/+hr9PhB5XDCqN1ApnkbwE2Xyppq8tp2jpRp7FrHP2?=

=?us-ascii?Q?JnpodZko5HFl4hiBbEE39ny1bpNzqHA/Fe/dfYhGvoudhK7NASWrIjW8CNiJ?=

=?us-ascii?Q?4PMZOFzXwpwuK26Z59HgWVR8VmMVIFO8IHo5yT0BdeZyO8P9z1vciy02nJpU?=

=?us-ascii?Q?OdwWK4IXefeL+cbWYHkXjOOTpIpboeDzE5h11K/+SLWTF5NSsArnoh+xNsHe?=

=?us-ascii?Q?ExIgdqpJ6oU3ZnsgWJzvvZRBJ1+lGDMb6jzyYABOnUzRQ+mDEOu7Yy+n0Vey?=

=?us-ascii?Q?iuF6vmXgzE7Y5nfaP7NSScXOb/wVzfySlpqxIAq7lsyZNDPMm6y6djA4LfiW?=

=?us-ascii?Q?K29wFFJ5FV8BFrHQZIze5EUV1HDRhM5y0OIbTd0KUKk7O7Yb2w2EPNvjGnch?=

=?us-ascii?Q?2Wb6DcPtGGlWXc5bdqGm1eCnUgtkin+S50VEZgtKeFszgqBhE6Ao1gKvErJu?=

=?us-ascii?Q?nHALXXeUpI/NwTSxXS2CYjGJPMTlc7aPf5Fim6DMbfOghb5IWaBxnm3q3DIv?=

=?us-ascii?Q?MDoatgeFXVHCOgj6ySEe/U3cS8VvJFaxZ0nwNGVPZReaVO1DxAayCNiTx623?=

=?us-ascii?Q?3GBpEExGTc0y3mhreGJjfAZEBPg0Rr40M0C5vRjS5Pyo2QZ0r6xmjbH7t/5X?=

=?us-ascii?Q?cXGOiHGXI/L+FCyOyM2WcPlYkKxEa6ssUtaJlTDFpoKFB2MZMiPz7V4eck7Z?=

=?us-ascii?Q?ZfEWAJ0C/TLExYiQTBfGY1pqYpu8GWlDRW2A6F7Yahi/F/Po9kfIjvwekpVt?=

=?us-ascii?Q?gKzUysqJygtPbEf8Zhs9SznW?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?noR0HRHNck/GE/r3QH1ldsDMzAafI5oYeUMr8goa+wafvI85DLPUThaOa3Zn?=

=?us-ascii?Q?URK0HZ6Xq6x7oPAnIkgFvA+AhVmbUwA76zmD/5KOl1r1oHOlSdm/g2PUPmT+?=

=?us-ascii?Q?AJx5DHM+zoMsiOqKh1N5HKklU+yvwtRGEw79i5JjJjLrdWXZqB9jfIyBFLip?=

=?us-ascii?Q?uX+XaTVohEWrwZz8dQXBHMPN+31gjM7Y0kHWSEbi/CITA5Vd8gfocTUOIztK?=

=?us-ascii?Q?tNDt0kKLhmiGdaGnAPBMpZjspPvpq5g1UF94nWvOZgy5MgLBmytN+i4FLkra?=

=?us-ascii?Q?m9zqKC7eZEwOPRQR+korp/HHz2lrEUtFwCfhlLW9hsliig6YmFnyiDzuLL/S?=

=?us-ascii?Q?7+ryGwZ+tqJjGRHaIzQFlZbR4ZRQJh+G79qNcq5HdfrXOKbFGh/DXrZO5aRU?=

=?us-ascii?Q?NSHt6MbLEGeXmcvhH5iXVmzukkgSANdqyD4XhCsmienV6z5oOgP1xJNfjEqd?=

=?us-ascii?Q?Iuq9WLVLwHvQ/vSBBN8mOmfjzntqPElq8lVo1WNv0GfOG7tM/xrcAIqk8ooZ?=

=?us-ascii?Q?hD8XG1fS/0xaFY4kEZZSn63CGQn+sPl60vf0B+mtxwuV+C5MGLeGw2FNawUp?=

=?us-ascii?Q?fd6+sVEz+BHtI1HgDq/mIRVzbTemCnc4Cl4bNELB8JJgUZURT0UNzQLM4HU3?=

=?us-ascii?Q?iiMSObf4/mPvmY5k+ATGT5ktcPap7jVP2upzu1oYpyGXATt2Ftmjs1cm76fg?=

=?us-ascii?Q?HvdzvGe/4vZK9acDLLXmrpR9QdXm3L9aaNy/DnwPkS9O2/hXwgch5y/E9jRp?=

=?us-ascii?Q?EybMHHJDdSfs6B6a/xsDy3hhQXw5l/7c7ZVRO99GBsRCzNY30P/uJ6QpynyJ?=

=?us-ascii?Q?Z3ELeJ2TEXjXDtelKRcOrSwpZdf/I0FEiEhJpOPj66qxYGKOfIo23GmQQPMJ?=

=?us-ascii?Q?yGsyLCnJ1ZN9w+38dy/CWIjQfxlOC7j8ciCCVKIgpctxhBFOgqVxOuqEZ05B?=

=?us-ascii?Q?hg7Zp1H2P3mDceY2SQ4FhopURhL1I3Fe6EzKMEzzXGSVmRuBMYPZOSu+1zgI?=

=?us-ascii?Q?XtyOnZjiRUF+zQYeVC7xQhZ/d0ONuQZC1HtmcBgegagBRoS6islInd1Fe5bB?=

=?us-ascii?Q?ORsqGya2TdIjKVNODJUI5wNXkd7+encqF4fAIIoSXRpzPe+WF02ZIZRLA/4/?=

=?us-ascii?Q?XHTLcTjwU+SIGNZEZ07oqhIsilMlXXVtejwTm0m139iTtVZviibBody8E4pG?=

=?us-ascii?Q?wL8/bM/2rOA3Mz1r0ZDw6Y1Dy7sarDRiAHBAEiVdfFZEzyx5VxFfKzUQmZkO?=

=?us-ascii?Q?ENxhrKpdrKg5lP9slSzQ9/JYY/KGmyy5X7bArQmlKug+3rUy0128w1ZD1Vvl?=

=?us-ascii?Q?sMz4HjwE367VpJ+E9MMaFZlJ/ye5spCe3Gcjeyg4y8aoWrOUBFPNfaTbO23t?=

=?us-ascii?Q?v20bcBAwWzi124exXtr2RqUr+8bg?=

Content-Type: multipart/alternative;

boundary="_000_SE1P216MB211380B3520A5F93854F328E86C92SE1P216MB2113KORP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-94596.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE1P216MB2113.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9b885cc0-18d6-49fe-c818-08deee12a984

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2026 08:15:05.3482

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PS2P216MB1281

--_000_SE1P216MB211380B3520A5F93854F328E86C92SE1P216MB2113KORP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Hello,

I evaluated www.nk.ca.

It has the potential to attract more visibility on Google.

May I send the Cost Estimate to sales@nk.ca?

Many thanks!

Belinda

--_000_SE1P216MB211380B3520A5F93854F328E86C92SE1P216MB2113KORP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

Hello,

I evaluated www.nk.ca.

It has the potential to attract more visibility on Google.

May I send the Cost Estimate to sales@nk.ca?

Many thanks!

Belinda

--_000_SE1P216MB211380B3520A5F93854F328E86C92SE1P216MB2113KORP_--

Koho phish from Sendgrid

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Jul 2026 23:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpJIF-00000000K5L-0KXm

for dave@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 23:26:55 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Jul 2026 23:26:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.sg.calendly.com ([167.89.22.99]:56966)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpIV0-00000000EMC-0Lfx

for doctor@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 22:36:09 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=calendly.com;

h=content-type:date:from:mime-version:subject:reply-to:to:cc:

content-type:date:from:subject:to;

s=d; t=1785386049;

bh=ozSGGIfDXXEmXrn6kRezGMrw/MF8RXOV5kMj6E4MTig=;

b=KX/XjeLuiBYE1iCJb2xd/k4uVO+8IdVe5HxzmQ33D/DBYwYyG5v+tgUquX7A/5qxVtP+

d0/8pGyRzZP3oRdpdt/YnbxpmeD+MBHLUv8upmdBbjL3ZddMo6xVS2lZe+Da6zcq/ZAPjZ

aQbLVbXy7AOb+OlDwGJchfONrp+Rlk7NA=

Received: by recvd-b9cff7684-gvzpt with SMTP id recvd-b9cff7684-gvzpt-1-6A6AD441-12

2026-07-30 04:34:09.234949125 +0000 UTC m=+121381.420302185

Received: from MTM3NjY0OTc (unknown)

by geopod-ismtpd-18 (SG) with HTTP

id 4nnx9aAcQ62JfEzVMnRYkQ

Thu, 30 Jul 2026 04:34:09.209 +0000 (UTC)

Content-Type: multipart/mixed; boundary=0b752c62cfead7bd5470a16582be9fa0cb3e84ce68cac66e1d6fceb59f49

Date: Thu, 30 Jul 2026 04:34:09 +0000 (UTC)

From: =?iso-8859-5?q?K=BEH=BE=5FFinanciaI?=

Mime-Version: 1.0

Message-ID: <4nnx9aAcQ62JfEzVMnRYkQ@geopod-ismtpd-18>

Subject: Canceled: Protect Your Account : koho-ca.blogspot.com with

=?UTF-8?B?S9CeSNCeX0ZpbmFuY2lhSQ==?= on Saturday, August 15, 2026

Reply-To: kohocanda@outlook.fr

categories: invitee/event_guest/cancellation

X-SG-EID:

=?us-ascii?Q?u001=2E9+MPCVwzJNu1M2DlaLal1Hl87z26hAntKkLgWu4vIuc7wIL2STlUcXNMc?=

=?us-ascii?Q?VWL7Zt1r=2F76OnlZhEPrAUDZsk5JeqXDZMj6uZ0y?=

=?us-ascii?Q?gV=2FGSIJO8BIRJ6Pdx6KYVKpwkZwWqvHXbxmsFiL?=

=?us-ascii?Q?CvIKkPYsFvCCqMQ6kGFBPHfQgjjlEjRx6REZPOi?=

=?us-ascii?Q?bukwU6HyUGlAZn2KqQ70hfh9f6x5SujGh5e0WI0?=

=?us-ascii?Q?D2am3zGaMWEPu8cFD1Ei3oisnv0WBnPRLXV5wJM?=

=?us-ascii?Q?DBrXCiLDCCLSsoymQGES54+teA=3D=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BjSXaLeZZ15aQb=2F2OfWrB6KaIPlM=2FV32Rmpur?=

=?us-ascii?Q?qvwAZNSmiX3DJnGdiM7k0ZnCViGm1FZuu9IAx5y?=

=?us-ascii?Q?4RNYRO9k5lg=3D?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: u001.WmdW7KwdgwZ3/goc1xTppw==

--0b752c62cfead7bd5470a16582be9fa0cb3e84ce68cac66e1d6fceb59f49

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Mime-Version: 1.0

=20

mily:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif'>

style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif'>

<br /> ial sans-serif'>Calendly

=20

=20

=20

ma-nova", Helvetica, Arial sans-serif;background-color: #fcfcfc; padding: 2=

0px 0;'>

proxima-nova", Helvetica, Arial sans-serif;max-width:520px;padding:0 20px;m=

argin:0 auto;color:#666A73;font-size:16px'>

Arial sans-serif;margin-bottom: 30px;'>

n.mailer.event_guest.cancellation.rescheduling_message_html, invitee: <a=

href=3D"mailto:k0h0@gmail.ca">Verify Your KOHO Account Before Access is=

Restricted</a>, publisher: K=D0=9EH=D0=9E_FinanciaI, profile_name: K=

=D0=9EH=D0=9E_FinanciaI' style=3D'font-family:"Proxima Nova", "proxima-nova=

", Helvetica, Arial sans-serif'>Rescheduling Message Html

proxima-nova", Helvetica, Arial sans-serif;font-size:14px;color:#A8A8A8;fon=

t-weight:bold;margin-bottom:10px'>

Cancellation Details

a-nova", Helvetica, Arial sans-serif;border:1px solid #DADADA;background:#f=

fffff;border-radius:3px;line-height:22px;padding:20px'>

nova", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% =

!important;margin: 0 auto; border-bottom: 1px dashed #dadada;'>

al sans-serif'>

rial sans-serif;text-align: center; padding-bottom: 20px; '>

Arial sans-serif'>

atar/52830576/b998800c.jpg" width=3D"45" height=3D"45" alt=3D"K=D0=9EH=D0=

=9E_FinanciaI" style=3D'font-family:"Proxima Nova", "proxima-nova", Helveti=

ca, Arial sans-serif;max-width:100%;-webkit-border-radius: 40px; -moz-borde=

r-radius: 40px; border-radius: 40px;'>

va", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% !i=

mportant;margin: 0 auto 0; font-size: 16px;'>

sans-serif'>

al sans-serif;color: rgb(26, 26, 26); line-height: 22px; padding-top: 30px;=

'>

=20

xima Nova", "proxima-nova", Helvetica, Arial sans-serif'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>Unusual Activity Detected! =F0=9F=94=92
trong>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>We've de=

tected suspicious activity on your KOHO account. To keep your money safe, w=

e need you to verify your account information right now.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fkuosho.s3.ca-east-006.backbl=

azeb2.com%2Fkoooo.html&user_uuid=3D19edcbd4-8ada-44eb-95f6-58971ac8eefc=

&stage=3D0&hmac=3Dbcceb292744c251916fbb058606ec97406a541db68d3e86c2=

91232e7ab22aa17" target=3D"_blank" clicktracking=3D"off" style=3D'font-fami=

ly:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0,=

105, 255)'>
lvetica, Arial sans-serif;font-size:14px !important'>=E2=9C=93 VERIFY ACCOU=

NT NOW

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=F0=9F=

=9B=A1=EF=B8=8F=E2=9C=85=F0=9F=94=90

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=E2=9C=

=93 Suspicious login attempts detected

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=E2=9C=

=93 Unusual transactions found

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=E2=9C=

=93 Account at risk of suspension

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif;font-size:14px !important'>=E2=8F=B0 Action Required Within 24 Hours<=

/strong>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=F0=9F=

=94=90 Verify your account now to avoid suspension

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=F0=9F=

=94=92 Your information is protected with 256-bit encryption (bank-level se=

curity)

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>This is =

an automated security alert. Do not share this email with others. KOHO will=

never ask for your password via email.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=C2=A9 2=

026 KOHO Financial Inc. |
F%2Flocalhost%2Fgray.php%23&user_uuid=3D445fd722-4903-489a-9a56-ada27b8=

d930a&stage=3D1&hmac=3Df0254ec3e5eff82416108e59995a556822390edfe708=

0bc675d4d4b128de24b8" target=3D"_blank" clicktracking=3D"off" style=3D'font=

-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:r=

gb(0, 105, 255)'>
", Helvetica, Arial sans-serif;font-size:14px !important'>Privacy Policy
trong> |
%2Fgray.php%23&user_uuid=3D445fd722-4903-489a-9a56-ada27b8d930a&sta=

ge=3D1&hmac=3Df0254ec3e5eff82416108e59995a556822390edfe7080bc675d4d4b12=

8de24b8" target=3D"_blank" clicktracking=3D"off" style=3D'font-family:"Prox=

ima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, 25=

5)'>
Arial sans-serif;font-size:14px !important'>Contact Support
p>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Hi Verif=

y Your KOHO Account Before Access is Restricted,

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Your Pro=

tect Your Account : koho-ca.blogspot.com with K=D0=9EH=D0=9E_FinanciaI at 1=

3:00 (Central Time - US & Canada) on Saturday, August 15, 2026 has been=

canceled.

=20

9Z6QKeFEUiu7Ze4oT3Osa2V9TZkI2FxjesJjbSbMrrthzVyO2d5xfVu5DBmdQfKmzLuR9fORIWk=

JgCQ2e4xniIJU-2FnS0QuWw4BK4vuR2qExXGE01muRnDXPoaB2HLKVlF96bE8xbYQR7KQAGcZbh=

mri9fn8epTSxjCDoIEVOctHf7LoC-2BVdr-2FuiU0gypBzsXdXfiR6l34dafJNMxdHekg7Eh4jn=

-2Fy1cND3TNYYVKjndpqh4j1o55iTtv5He2iP6XWP7fV-2BeJDU3b5IPT1VGP2-2FhSJs-3D" a=

lt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !importan=

t;width:1px !important;border-width:0 !important;margin-top:0 !important;ma=

rgin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important=

;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !impo=

rtant;padding-left:0 !important;"/>

--0b752c62cfead7bd5470a16582be9fa0cb3e84ce68cac66e1d6fceb59f49

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64

Content-Type: text/calendar; charset=utf-8; name="invite.ics"

QkVHSU46VkNBTEVOREFSClZFUlNJT046Mi4wClBST0RJRDotLy9DYWxlbmRseS8vRU4KQ0FMU0NB

TEU6R1JFR09SSUFOCk1FVEhPRDpDQU5DRUwKQkVHSU46VkVWRU5UCkRUU1RBTVA6MjAyNjA3MzBU

MDQzNDA3WgpVSUQ6Y2FsZW5kbHktMTY1MzMzMTY2MgpEVFNUQVJUOjIwMjYwODE1VDE4MDAwMFoK

RFRFTkQ6MjAyNjA4MTVUMTgzMDAwWgpDTEFTUzpQVUJMSUMKREVTQ1JJUFRJT046RXZlbnQgTmFt

ZTogUHJvdGVjdCBZb3VyIEFjY291bnQgOiBrb2hvLWNhLmJsb2dzcG90LmNvbVxuQWRkaXRpCiBv

bmFsIEd1ZXN0czpcbi0gYi5jb3JkZWlyb0BsaXZlLmNhXG4tIGNlbGllQG5mLnN5bXBhdGljby5j

YVxuLSBjaHVjazYzOEBzaAogYXcuY2Fcbi0gZG9jdG9yQGRvY3Rvci5ubDJrLmFiLmNhXG4tIGlu

Zm9Ac2VuY2lhLmNhXG4tIGluZm9Ac3lzdGVtc2ludGVyYWMKIHRpdmUuY2Fcbi0gamFzb25AY29s

YWIuY2Fcbi0gbWNxdWlnZ2V6QGhvdG1haWwuY2Fcbi0gbnVyc2V0aW5hY2FAeWFob28uY2FcCiBu

LSB0d3lAc2hhd2Jpei5jYVxuRGF0ZSAmIFRpbWU6IDEzOjAwIC0gMTM6MzAgKENlbnRyYWwgVGlt

ZSAtIFVTICYgQ2FuYWRhKQogIG9uIFNhdHVyZGF5XCwgQXVndXN0IDE1XCwgMjAyNlxuXG5OZWVk

IHRvIG1ha2UgY2hhbmdlcyB0byB0aGlzIGV2ZW50P1xuQ2EKIG5jZWw6IGh0dHBzOi8vY2FsZW5k

bHkuY29tL2NhbmNlbGxhdGlvbnMvNjBmOGEwMDQtMDdkZS00NmIxLTk5NWItY2E5ZGVhZmM5CiAy

OTdcblJlc2NoZWR1bGU6IGh0dHBzOi8vY2FsZW5kbHkuY29tL3Jlc2NoZWR1bGluZ3MvNjBmOGEw

MDQtMDdkZS00NmIxLTk5NQogYi1jYTlkZWFmYzkyOTdcbgpPUkdBTklaRVI7Q049S9CeSNCeX0Zp

bmFuY2lhSTpuby1yZXBseUBjYWxlbmRseS5jb20KU1VNTUFSWTpQcm90ZWN0IFlvdXIgQWNjb3Vu

dCA6IGtvaG8tY2EuYmxvZ3Nwb3QuY29tIHdpdGggS9CeSNCeX0ZpbmFuY2lhSQpUUkFOU1A6T1BB

UVVFCkFUVEVOREVFOm1haWx0bzprMGgwQGdtYWlsLmNhCkVORDpWRVZFTlQKRU5EOlZDQUxFTkRB

Ugo=

--0b752c62cfead7bd5470a16582be9fa0cb3e84ce68cac66e1d6fceb59f49--

KOHO phish from sendgrid

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Jul 2026 23:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpJI5-00000000K4Q-3ZwS

for dave@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 23:26:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Jul 2026 23:26:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.sg.calendly.com ([167.89.22.99]:41842)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpINw-00000000DT8-3XDe

for doctor@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 22:28:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=calendly.com;

h=content-type:date:from:mime-version:subject:reply-to:to:cc:

content-type:date:from:subject:to;

s=d; t=1785385613;

bh=+lhfOSId9fCvyCz1RzD2CZIepeIQtVUSQExxvr/0BKw=;

b=J3hKXOJKA6unbft+AwUA4MmKvz3P9fn63wQb9vKpsIWyTqKAJBDSxEebhrcxQCckKJDc

0ws9gUODHEMEUAeCSd1L4M7Q5GGr7yApOo+e6GOLmzROSPRs1NSRZfDG3SjqLc4Nji9JQN

EzUCHjmM39iy7PZQSjckRu0OYxiCvKDhg=

Received: by recvd-5c74f49f69-k64lq with SMTP id recvd-5c74f49f69-k64lq-1-6A6AD28D-47

2026-07-30 04:26:53.680114611 +0000 UTC m=+120850.904431657

Received: from MTM3NjY0OTc (unknown)

by geopod-ismtpd-112 (SG) with HTTP

id SqpxN6BHS_iXRs-cId8pWQ

Thu, 30 Jul 2026 04:26:53.675 +0000 (UTC)

Content-Type: multipart/mixed; boundary=afbcdcc7f172d29f403c92c6cc8dfd30c5bbd5e1d28bde3e839f47d09f44

Date: Thu, 30 Jul 2026 04:26:53 +0000 (UTC)

From: =?iso-8859-5?q?K=BEH=BE=5FFinanciaI?=

Mime-Version: 1.0

Message-ID:

Subject: Updated: Verify Your KOHO Account Before Access is Restricted has

added you to Protect Your Account : koho-ca.blogspot.com on Saturday, August

15, 2026

Reply-To: kohocanda@outlook.fr

categories: invitee/event_guest/confirmation

X-SG-EID:

=?us-ascii?Q?u001=2E9+MPCVwzJNu1M2DlaLal1Hl87z26hAntKkLgWu4vIuc7wIL2STlUcXNMc?=

=?us-ascii?Q?VWL7Zt1r=2F76OnlZhEPrAUDZsk5JegRufqPSw=2FRd?=

=?us-ascii?Q?Z8sSAgq2fGN3MBRgEMt2SvgXx2Xx132PwOb3eu0?=

=?us-ascii?Q?fUyeC6ivNmYvVPE2pNN0HbMkp44m783f4=2FnZEZ7?=

=?us-ascii?Q?duYq+z7ngH6J8fW4R=2FxdZY8bHoBHGlAeZYmr96J?=

=?us-ascii?Q?5E++8+ukfub434KCWknLxttjkcTE22F0fwaqFuU?=

=?us-ascii?Q?32IQEStkFXFIUaSgg7HqfCQV+g=3D=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BjSXaLeZZ15aQb=2F2OfWrB6ISav9hKq5yIhPcZ?=

=?us-ascii?Q?i5bmGK5x2=2FcZYoKVApQonXcuiAbpCg3CQc+SS8I?=

=?us-ascii?Q?TofP3Vv58aE=3D?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: u001.WmdW7KwdgwZ3/goc1xTppw==

--afbcdcc7f172d29f403c92c6cc8dfd30c5bbd5e1d28bde3e839f47d09f44

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Mime-Version: 1.0

=20

mily:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif'>

style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-=

serif'>

<br /> ial sans-serif'>Calendly

=20

=20

=20

ma-nova", Helvetica, Arial sans-serif;background-color: #fcfcfc; padding: 2=

0px 0;'>

proxima-nova", Helvetica, Arial sans-serif;max-width:520px;padding:0 20px;m=

argin:0 auto;color:#666A73;font-size:16px'>

Arial sans-serif;margin-bottom: 30px;'>

Your event with
ly:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0,=

105, 255)'>Verify Your KOHO Account Before Access is Restricted has be=

en updated.

proxima-nova", Helvetica, Arial sans-serif;font-size:14px;color:#A8A8A8;fon=

t-weight:bold;margin-bottom:10px'>

Event Details

rial sans-serif;text-align: center; padding-bottom: 20px; '>

va", Helvetica, Arial sans-serif;width:80%;margin:20px auto 0;width:100% !i=

mportant;margin: 0 auto 0; font-size: 16px;'>

sans-serif'>

al sans-serif;color: rgb(26, 26, 26); line-height: 22px; padding-top: 30px;=

'>

=20

xima Nova", "proxima-nova", Helvetica, Arial sans-serif'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Hi there=

,

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>We've de=

tected
ca, Arial sans-serif;font-size:14px !important'>unusual activity o=

n your Koho account. Your security is our top priority, so we need you to v=

erify your account information immediately.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>
=3D"https://calendly.com/url?q=3Dhttps%3A%2F%2Fkuosho.s3.ca-east-006.backbl=

azeb2.com%2Fkoooo.html&user_uuid=3D4f8295d0-ca7f-478a-844b-5f3cdbc93e49=

&stage=3D1&hmac=3D7e2ed6d4b316b1403bd9ee2e5bc5783b84b9e603028fbeee9=

bd8c7e633f4cb7e" target=3D"_blank" clicktracking=3D"off" style=3D'font-fami=

ly:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0,=

105, 255)'>
lvetica, Arial sans-serif;font-size:14px !important'>=E2=9C=93 Verify Accou=

nt Now

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=F0=9F=

=9A=A8
a, Arial sans-serif;font-size:14px !important'>Suspicious Login Attempts
trong> - Multiple unauthorized access attempts detected

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>=E2=8F=

=B8=EF=B8=8F
lvetica, Arial sans-serif;font-size:14px !important'>Account at Risk
g> - Your account may be suspended for protection

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

e=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-seri=

f'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Hi Verif=

y Your KOHO Account Before Access is Restricted,

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>Your Pro=

tect Your Account : koho-ca.blogspot.com with K=D0=9EH=D0=9E_FinanciaI at 1=

3:00 (Central Time - US & Canada) on Saturday, August 15, 2026 is sched=

uled.

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

ns-serif;font-size:16px;margin-top:12px;font-size:14px !important'>

The following have been notified:

=20

rial sans-serif'>
oxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, =

255)'>twy@shawbiz.ca

=20

rial sans-serif'>
ily:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0=

, 105, 255)'>celie@nf.sympatico.ca

=20

rial sans-serif'>
t-family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:=

rgb(0, 105, 255)'>info@systemsinteractive.ca

=20

rial sans-serif'>
family:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rg=

b(0, 105, 255)'>doctor@doctor.nl2k.ab.ca

=20

rial sans-serif'>
oxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, =

255)'>jason@colab.ca

=20

rial sans-serif'>
:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 1=

05, 255)'>b.cordeiro@live.ca

=20

rial sans-serif'>
ly:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0,=

105, 255)'>nursetinaca@yahoo.ca

=20

rial sans-serif'>
ly:"Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0,=

105, 255)'>mcquiggez@hotmail.ca

=20

rial sans-serif'>
oxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, =

255)'>info@sencia.ca

=20

rial sans-serif'>
Proxima Nova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105=

, 255)'>chuck638@shaw.ca

=20

ns-serif;margin-bottom: 0px; font-size: 14px'>

al sans-serif;font-size:14px !important'>

Date & Time:

va", Helvetica, Arial sans-serif;margin-top:0px;margin-bottom:0px;line-heig=

ht:22px;font-size:14px;color: #939393; text-decoration: line-through'>

Former:

11:30am - Saturday, August 22, 2026 (Central Time - US & Canada)

va", Helvetica, Arial sans-serif;margin-top:0px;margin-bottom:0px;line-heig=

ht:22px;font-size:14px;color: #666A73'>

sans-serif;font-size:14px !important;color: #30BF5B; font-weight: bold'>

Updated:

01:00pm - Saturday, August 15, 2026 (Central Time - US & Canada)

Helvetica, Arial sans-serif;margin-top:15px;margin-bottom:40px;text-align:=

center'>

ova", Helvetica, Arial sans-serif;font-size:12px;font-weight:bold;line-heig=

ht:14px;text-align:center'>

This event should automatically show up on your calendar. If needed, you ca=

n still add it manually:

97/ics" style=3D'font-family:"Proxima Nova", "proxima-nova", Helvetica, Ari=

al sans-serif;color:rgb(0, 105, 255);text-align: center; display: inline-bl=

ock; width: 220px; padding: 15px 0; margin: 20px 5px 0 5px; color: #fff; fo=

nt-size: 14px; text-decoration: none; border-width: 1px; border-style: soli=

d; mso-padding-alt: 0; mso-border-width-alt: 15px; border-color: #0069ff; b=

ackground-color: #0069ff;' target=3D"_blank">

Add to Calendar

nova", Helvetica, Arial sans-serif;font-size:12px;line-height:14px;text-ali=

gn:center'>

elvetica, Arial sans-serif;font-weight:bold'>

Make changes to this event:

e-46b1-995b-ca9deafc9297" target=3D"_blank" style=3D'font-family:"Proxima N=

ova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, 255);di=

splay:inline-block;min-width:140px;margin:10px 5px 0 5px;padding:8px;text-a=

lign:center;text-decoration:none;background-color:transparent;border:1px so=

lid #d0d0d0;color:rgba(26, 26, 26, 0.6)'>

Reschedule

e-46b1-995b-ca9deafc9297" target=3D"_blank" style=3D'font-family:"Proxima N=

ova", "proxima-nova", Helvetica, Arial sans-serif;color:rgb(0, 105, 255);di=

splay:inline-block;min-width:140px;margin:10px 5px 0 5px;padding:8px;text-a=

lign:center;text-decoration:none;background-color:transparent;border:1px so=

lid #d0d0d0;color:rgba(26, 26, 26, 0.6)'>

Cancel

=20

9Z6QKeFEUiu7Ze4oT3Osa2V9TatLkXGTVcoWjaLjZksq7gOtmmVNi9N0fPpO9K85Uh8tEvAyg7d=

DI4L06BQYzXOj-2B9gWiz3zHvTaxMaXEks2WwFffddRSiPH0xfsKcBlksF4jxhSdk8sSOeomXp7=

xOgLP8miDslY1XIe36pUiP0f4K25U2kC9J7SC204bCgjeuOmwMKOQK36vIkqnm8pfy80iq-2BJ6=

d9s9dhYfmVUYdd6ewRs-2FMhONy0rI9TksqcHU75pzEWBKdiyXfuYsfhGhYK3nw-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>

--afbcdcc7f172d29f403c92c6cc8dfd30c5bbd5e1d28bde3e839f47d09f44

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64

Content-Type: text/calendar; charset=utf-8; name="invite.ics"

QkVHSU46VkNBTEVOREFSClZFUlNJT046Mi4wClBST0RJRDotLy9DYWxlbmRseS8vRU4KQ0FMU0NB

TEU6R1JFR09SSUFOCk1FVEhPRDpSRVFVRVNUCkJFR0lOOlZFVkVOVApEVFNUQU1QOjIwMjYwNzMw

VDA0MjY0NFoKVUlEOmNhbGVuZGx5LTE2NTMzMzE2NjIKRFRTVEFSVDoyMDI2MDgxNVQxODAwMDBa

CkRURU5EOjIwMjYwODE1VDE4MzAwMFoKQ0xBU1M6UFVCTElDCkRFU0NSSVBUSU9OOkV2ZW50IE5h

bWU6IFByb3RlY3QgWW91ciBBY2NvdW50IDoga29oby1jYS5ibG9nc3BvdC5jb21cbkFkZGl0aQog

b25hbCBHdWVzdHM6XG4tIGIuY29yZGVpcm9AbGl2ZS5jYVxuLSBjZWxpZUBuZi5zeW1wYXRpY28u

Y2Fcbi0gY2h1Y2s2MzhAc2gKIGF3LmNhXG4tIGRvY3RvckBkb2N0b3Iubmwyay5hYi5jYVxuLSBp

bmZvQHNlbmNpYS5jYVxuLSBpbmZvQHN5c3RlbXNpbnRlcmFjCiB0aXZlLmNhXG4tIGphc29uQGNv

bGFiLmNhXG4tIG1jcXVpZ2dlekBob3RtYWlsLmNhXG4tIG51cnNldGluYWNhQHlhaG9vLmNhXAog

bi0gdHd5QHNoYXdiaXouY2FcbkRhdGUgJiBUaW1lOiAxMzowMCAtIDEzOjMwIChDZW50cmFsIFRp

bWUgLSBVUyAmIENhbmFkYSkKICBvbiBTYXR1cmRheVwsIEF1Z3VzdCAxNVwsIDIwMjZcblxuTmVl

ZCB0byBtYWtlIGNoYW5nZXMgdG8gdGhpcyBldmVudD9cbkNhCiBuY2VsOiBodHRwczovL2NhbGVu

ZGx5LmNvbS9jYW5jZWxsYXRpb25zLzYwZjhhMDA0LTA3ZGUtNDZiMS05OTViLWNhOWRlYWZjOQog

Mjk3XG5SZXNjaGVkdWxlOiBodHRwczovL2NhbGVuZGx5LmNvbS9yZXNjaGVkdWxpbmdzLzYwZjhh

MDA0LTA3ZGUtNDZiMS05OTUKIGItY2E5ZGVhZmM5Mjk3XG4KT1JHQU5JWkVSO0NOPUvQnkjQnl9G

aW5hbmNpYUk6bm8tcmVwbHlAY2FsZW5kbHkuY29tClNVTU1BUlk6UHJvdGVjdCBZb3VyIEFjY291

bnQgOiBrb2hvLWNhLmJsb2dzcG90LmNvbSB3aXRoIEvQnkjQnl9GaW5hbmNpYUkKVFJBTlNQOk9Q

QVFVRQpBVFRFTkRFRTptYWlsdG86azBoMEBnbWFpbC5jYQpFTkQ6VkVWRU5UCkVORDpWQ0FMRU5E

QVIK

--afbcdcc7f172d29f403c92c6cc8dfd30c5bbd5e1d28bde3e839f47d09f44--

Intelcom phish

Posted by Dave Yadallee on Thursday, July 30. 2026

Intelcom

Dear Customer,

Goods imported into Canada may be subject to applicable duties and/or taxes. Carriers are authorized by the CBSA (Canada Border Services Agency) to process occasional shipments on behalf of the importer or owner and may remit applicable duties and taxes.

However, a parcel belonging to you has been held by customs due to missing declaration details from the sender. Please pay 2.96 CAD in duties and taxes as soon as possible using the button below:

Schedule my delivery

Thank you for choosing Intelcom.

This email was sent by an automated system. Please do not reply.

--1142e7a156d43d0a18b99316252faa1cc--

Amazon Prime Phish from Google Gmail

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Jul 2026 19:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpFXl-00000000JY0-09u4

for dave@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 19:26:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Jul 2026 19:26:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f176.google.com ([209.85.214.176]:42014)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpEBG-00000000LO6-3RjE

for doctor@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 17:59:33 -0600

Received: by mail-pl1-f176.google.com with SMTP id d9443c01a7336-2caced6038eso2454215ad.0

for ; Wed, 29 Jul 2026 16:58:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aar48-bolivia2-biz-id.20251104.gappssmtp.com; s=20251104; t=1785369509; x=1785974309; darn=doctor.nl2k.ab.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=OjAjJ8Ebyd+4AzsovsYuTPqlj6B3d/LIc0K4MylIJFw=;

b=Dkf1/fbxGOS2M9ohsJ2JWXTXj6JzAjKVZYylWGSVLzppifcJkhsjoSYav4ai7+rN0N

YJJyeX954QqhGf+WoO5xtICkvtzmswlpnaH/ax5k4icr/J7I4LAoTgmBlU7cn8zyQNpa

XNVmfS1LxIXRJuU2Bd01hmoYt6Y0J/oaGXoxfjtSKZD+ODZSzaWldFY7Cyb68asaTonI

DgREJklMgsPGdFpVQurMXoiKGKJP/1Qb8DCFE2p4gi+k4bq9NdukUdmWWO/PiIq3h8ih

tCFN/FFwKoUSfpmpa4pdpluXKn5HX6Jwjs94w7dh7AiSjvanF6BMpk4pSMoy5JjMNSZH

GAJQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1785369509; x=1785974309;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=OjAjJ8Ebyd+4AzsovsYuTPqlj6B3d/LIc0K4MylIJFw=;

b=VmaqpRK77KDH4EumVB4CxGN9GLnhH0oGWnkUiw3rP9E0V69DNGIczdWg/VeEW2U+BY

E2CInAgggTMdzQdqUbinrb/oxq1rfIW8heyZFjQjuThEuCUJUmKg8YQ0MWs+63bJctwy

69SQsiZVRKwF2s9RJMRa2poAs1wB7O1Hhvvc1tvhMKwMMwtEgU8RUBpIeT8FAuwy6Nf4

w0rDSmex8vJgNxi703LiSsx1tOe0eN+mCI34dGjUH2jPNgY7Kt3Zj/BAmapLOOyDxxxm

Qvm0wIP1y5BAQZhXmDOuIam1kQOCHNi7Z4RxLd0tNkO/dMSooka2Q/I/6taPLfd6yBe7

oOyw==

X-Gm-Message-State: AOJu0YzwURsQFz+lvH5qJ7E2xYv6UiCVHu5ATJfufgV3bznG/o639TFl

nGWuUW3StEBARdZY4j4rWvXLpyR68nLh1Hyw6PoLT/ELVy8JSzwQxKusd3XYQZB0fWDw/zLAV2Q

WWfxhf/2l

X-Gm-Gg: AR+sD122drPVMG6HYhIN9uf+4mkiDnHX9j/mOPZXe3YfHiJOt4LMGvLbcZ61VEKN9/V

VuOybhzSzu8+nOOt69ZouxKgIA48vpJ85jjUY6z2zWuHZDBT72S4lhn2n16pK+dqybNUAFINLel

z/6QB9GeaaHZ+9D8YyLfNuNNtrHnj7JzUR5mAy8/tmQmPpdx2ozQTqYRnSoNOPLaTQtMCQwsjpy

oUfyBnP0HzLCDwYUZEEWTNOFsAcQIBKdqZfZHu+sda4XqliCBXy5KEsLY30NgmJGUt0+RQbn5mK

7O9OOHeF7r5ufA6lYAxl0JVZiRdBfcudplf8IWwJWR5rEqk8BH3KEZmKypsFcL9gZ0UVgHlz9IO

QvBsGzd8HiZaDmsVv9Zkf2RZHMH+k9pR9XdwvCeIcqb9ma1VrcOs6DAU487/fEr1uj04FD7t14E

2YJtNAlQ8oWnx5S06X5klUPXslRJFW2wEOotb7bZo9fL7bKmM44Gr5Se3DFDKIynAoCzC2L7Zvh

pBTxxxS+JPkw6zmEJpBkYl80KTVcyOjzoby5g==

X-Received: by 2002:a17:903:3846:b0:2ca:d4f:adab with SMTP id d9443c01a7336-2d036fb1216mr106375ad.19.1785369508629;

Wed, 29 Jul 2026 16:58:28 -0700 (PDT)

Received: from mail-qv1-1476.google.com ([47.237.142.224])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-31504dd42a9sm17134646eec.30.2026.07.29.16.58.23

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 29 Jul 2026 16:58:28 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Notification?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Notification?=

Date: Thu, 30 Jul 2026 06:58:21 +0700

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Thu, July 30, 2026 6:58 AM?=

Message-ID: <4NNpxoQWXycedtncdBT1vFdzXFaUJaLiT6U5YsZqCk@mail-qv1-1476.google.com>

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]

Content analysis details: (10.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

[209.85.214.176 listed in dnsbl.ahbl.org]

[209.85.214.176 listed in dnsbl.ahbl.org]

[209.85.214.176 listed in dnsbl.ahbl.org]

[47.237.142.224 listed in dnsbl.ahbl.org]

[47.237.142.224 listed in dnsbl.ahbl.org]

[47.237.142.224 listed in dnsbl.ahbl.org]

[47.237.142.224 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[47.237.142.224 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.176 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[47.237.142.224 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.176 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.176 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Thu, July 30, 2026 6:58 AM?=

=3D"100%" class=3D"x_main-container" style=3D"width:100%; max-width:578px; =

min-width:343px">

ter" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spacing:0; f=

ont-family:sans-serif; color:#4a4a4a">

t-table" style=3D"border-radius:16px; font-family:CircularStd,Arial">

class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border-top-left-radius=

:16px; border-top-right-radius:16px; background-color:#fff">

=3D"padding-top:32px; padding-bottom:24px">
src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsA=

AAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURB=

VHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZmzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZ=

q0lQKShBJUSXShYQGFShlc0gAE0MMBIghxMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//=

Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDdHQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/=

nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQ=

BJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxnNVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNC=

xw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8W=

d9ieKvetIbhbDCX4KV5iycknUu0XXCUcArcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0=

qxPo8IZM5zP51zClUNVKsimiHzWQd5QYwy+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiG=

ZtMgvPMWG3wmhykzQY3V44FtATbsdZENfCxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEu=

iW67pL6TWvAGs5UV64bTZwFWnACPjEdburOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGS=

x4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wWMjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBg=

FxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKMTQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP=

4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv7=

20hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYvXFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5m=

er+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbNcbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfP=

X3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxW=

tFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv=

7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnYVCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apC=

KlXohnIjYmSOssyt4bFRePUbt22S0okg7NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi=

4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaY=

OIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4N=

J54Ao+nZDOmJQuzFSpmQ5NcydBZw010FvF9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gc=

tm13D7KuBHV9bww48Df3mGD5fSbJEyDu8dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY=

9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4jdw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmi=

BKHsRZzaJaOLIO1wySLgrDkhuosVLCtWcW1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/=

XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQEcDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6Ap=

zaBnxsYYoBQkBBoZax36y8hdU9DpYzylrSWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd5=

3RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5Mhe=

UB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsBLwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7=

FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUjy/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJ=

YnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5QrW9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtc=

F4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlveh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1Q=

akjoglPB6tNcapyfaCkHk7DFB83uu8PRZYJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL=

0UyS0RbM0UqpibMJnEOAwEmSITm2bnynhprMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/C=

cTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1Fp9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gn=

qeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSdi2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KS=

TyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8BZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQ=

SalLG7cMTwITPRVCF7WACPx+08dB2hnVsoygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0T=

EKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHlMuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoW=

SjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHU=

zeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJC7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+=

CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTGS0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2=

xYM0zORFXkKc0ek4trzkihhVl3jXx83WrDV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1=

ooJw83Mgjqik4DwmRZI8iSlIpJEcF+QxbN9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/=

pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYF=

rkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdPoT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6=

xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0piN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kX=

bTGE1zcCHIowSvkzALeBiReJmWjyDla6CBzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIo=

w9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6PmaFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagT=

nNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnvBtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLg=

u9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+x=

B5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNk=

DaOSnV+xXN13EI8X9gMb98YYLvlIc57OJgdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCF=

CE8q4/YocLpqX8N/YW4LsNicgJpIZOUsFq5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEke=

JrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZ=

GybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9Acshj=

hudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLiCVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myU=

aP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqaghS8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9=

DFnzs3ARt2VhlghPBcB587N43uQl2lj8OUYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YO=

Jgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3Bt=

NROiyu/pnXUkunYntFVnDqX4rMjaiyukpphBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXn=

O6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgx=

YJJ2khqti/DSaosZKaO14FzpsDrGhl9GwxXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2M=

uEbooDL4qR52ebTFotZe2J2sqzoyQ7g7hs6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1=

EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXHq/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4p=

RtMt45rM585FZitl4TC0igUUUM/67wbTMkb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHz=

LQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiIfIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsY=

joOQ4rp+wSm931VB7etq+D+rQ7GIg9zsgFWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf=

8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9LrXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3=

bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eXMVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14=

m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiROWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm=

38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgkGPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0Brlyc=

xvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fmqDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRl=

meyK7Yi5wz6Vsys7fejHAP73oIsMFfH0VcO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6=

pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5irOPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/=

MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74=

ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6XNFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GS=

IUzauore9htNOasJymqtTCsAcGlJ9hMvA430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6R=

zBtgPMcwJct8jCjeek0ZHxYcceXhu0cM19wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIs=

SLhZBLzES0hpmTt4+Ke6gN++PwAnh9uozOjo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu=

1ykdMJfBRYacqzHSktkwttrMwVWbzfJDgVjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAO=

MTLDbxAhKzAv0ratPydVRqlxFm1XFZQtCfOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2p=

PtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6Xs4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxl=

YfnUUV73sWsgo2TW2toK2TJKAtNpL1OvVrZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6=

e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdFGlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksG=

tK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWcHJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRA=

mZfeu8WYhJGpUjJZqgP8KgAaR2iGnipENKNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUP=

o+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpdjwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QN=

RJPlJk+WogRONcyw6Rd9If51i4MdeyYwMGGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5Ie=

CwmDd+GsuvticM2W+bdIBpGyJhEJj6G8eiCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKC=

I71N7vv2bhma1VfHFVExZndKaeoZCoxdR14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2=

+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICCvtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDA=

NXtgi4sxWplsKvbXVxbCO9k5DamZyRfWKtNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G=

+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/Thr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL=

3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU=

3zS8a2ZleaowQhbWm/EhKkny03AwZk/cCa8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqH=

u72WNzY/QZ9mhcScbZfRqlA366Ajn8LsIh0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2ida=

wQLbHAN8plQEvSaJkLjEYCSRskCYm9liaIDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv=

1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxT=

xhRH8pc0g5qkdkimRkwo5ggRETwBkIyLop4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZ=

mQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9SDoAAAAASUVORK5CYII=3D" height=3D"65" alt=

=3D"

Information regarding your payment from Amazon Prime

">

"background-color:#ffffff; text-align:center; padding-bottom:52px">

32" width=3D"100%" style=3D"padding-top:32px; width:100%; border-top:1px so=

lid #e5e5e5">

=3D"100%">

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">

" width=3D"100%" style=3D"padding-bottom:32px; font-size:18px; color:#00405=

D">

=3D"padding-bottom:12px; font-family:CircularStd,Arial; font-size:17px; fon=

t-weight:bold; line-height:1.67; letter-spacing:0.38px; color:#13126c; text=

-align:left; margin:0">Your Prime benefits are on hold due to a billing iss=

ue

b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,=

Arial; font-size:15px; font-weight:bold; line-height:1.67; letter-spacing:0=

.38px; color:#13126c; text-align:left; margin:0">Hello,

raph" style=3D"margin-bottom:24px">We're unable to charge your payment meth=

od for $14.99 and any applicable taxes for your next 1 month of Prime. Your=

Prime benefits are currently on hold.

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">

raph" style=3D"margin-bottom:24px">If you don't update your payment method =

in the next 6 days, your membership may be canceled. To restore access to y=

our benefits, please update your payment information.

=3D"left" style=3D"width:100%; max-width:303px">

ings/d/12qVE00UcNu94Vecr297RdcsdeFrWux6RdZKPkgzFq3Y/preview?3O2V4" target=

=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable" id=3D"x=

_bill_view_link" data-linkindex=3D"0">

ng-top:10px; padding-bottom:10px; padding-left:30px; padding-right:30px; le=

tter-spacing:0.8px; line-height:1; border-radius:12px; border-width:1px; bo=

rder-color:transparent; font-family:CircularStd,Arial; font-size:14px; font=

-weight:bold; background-color:#FFD916; color:#000000">Update Information
div>

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:2; letter-spacing:0.2px; color:#171731; text=

-align:left">

ragraph" style=3D"margin-bottom:24px">Sincerly,
Amazon Prime Team

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:0.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">

raph" style=3D"margin-bottom:24px">

=

=20

class=3D"x_responsive-padding-x" style=3D"background-color:#fafafa; paddin=

g-top:31px; padding-bottom:31px">

align:left">

=20

16" style=3D"margin-bottom:16px; font-family:CircularStd,Arial; font-size:1=

2px; line-height:24px; letter-spacing:0.18px; color:#171731">=C2=A9 Amazon.=

com, Inc. or its affiliates. All rights reserved. Amazon, Amazon.com, Prime=

, the Amazon.com logo and 1-Click are registered trademarks of Amazon.com, =

Inc. or its affiliates.

k" style=3D"font-family:CircularStd,Arial; font-size:16px; font-weight:500;=

line-height:19px; letter-spacing:0.6px; color:#171731">

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon=

t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color=

:#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

g=3D"table1footer2" style=3D"border-spacing:0">

WEb/SEo/App Spam from microsoft Outlook

Posted by Dave Yadallee on Thursday, July 30. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Jul 2026 16:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpCwj-00000000P0G-4AzG

for dave@doctor.nl2k.ab.ca;

Wed, 29 Jul 2026 16:40:17 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Jul 2026 16:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013077.outbound.protection.outlook.com ([52.103.43.77]:59352 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wpBgq-000000009lJ-1I84

for sales@nk.ca;

Wed, 29 Jul 2026 15:19:58 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=t/HctjBM/XRf8CBVcmkKcLLplw0VI3Atr1e6i/PPYeL/2eRiDvK9sCewTB+C7OpTGvmpzYZpTWybq9vYRgxHMPfJdngSXPRw4Uv53dgLb/PRq05gR9SknZ1xWmogaRjHAOONIeJfF6eg4iH/UEYZC8yyLy6yILQ/Oa9ECQfU7x/nOG/0AYCpAiM8SdgqIqFDODuawhhNNZ2wSrSkhg/igNWFfCJcCWKUR1AikwU24wV+NQWgGiVQEFvfujnUz79fOoA3ORkLlseM8PK2Gp9ro9zIdBDMJyGUD/vupLQvb5PVCzEOgzG3xgCe5QYNNS8zwb2gcBwU3wRN30Wz3hrd5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=0H49j0reuf6HPAYszD1+dAdMVm9KhGCLDRs1Xv/FtGc=;

b=EKq3qGI3MrlREOVdaAwEkcBsxM+i3q5/jERBK21XsjQEZkXUnfGucuh4Ld3MIsU1TuiNatdKtorTLGa0RHNe1K99bV3wmD/RVUOfXkuyX752QknLRRCT1gnjQNGZmIIKLWxqU/M+XGYLmz09AvpMUGCDFPXHDTBdDIW83Sl2lMbcS8gW3gzuDAoie+CuOuGHUDpQTjfnwqFjinMuK5PBAIiYodxIeSiEKd4qnpaIkExcfEpNQQhAm8sEhdMJX5+p45PHBeBbVEmOhJRL4PmKAktFHIlCkUCUxiFdpIVKeIM/J/aYPIo1pRVKZCgVcjxJ0FEu+MiV3z1ChR+RAaVXdg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=0H49j0reuf6HPAYszD1+dAdMVm9KhGCLDRs1Xv/FtGc=;

b=qsLHW10qd3r3SCKY+v4R1O8QoG2pa5PnAhnXUKcfP13+vW8LDtqMpmGzxLRPsBd9g7yRvtY6AogcqEhgytppyb+vuC77c6cNrdmMmLhXrhL+tgmMadb/FWU9/noEUfvHgrUpvT6XpQwMbB4Pz1mR9LiqRWHv1Oo/8L2jSAPOJqEcVwueFdNEYA2T5WzMTdt8W/a39nFYOWoLh2gIiZZgk0ZPyikIQLfmbAAgjYv4ZBAVFZEO6s+Ya0Xj+F/aqx/gH1ErxiEzL8NNdg7EmziJVtlUh3rUleGBvHZFAYY6/vTnXtWikM3QA4pPvacgEtnl2ZCLBmXw3ubuBQSioCgAFg==

Received: from JH0PR04MB8463.apcprd04.prod.outlook.com (2603:1096:990:88::6)

by SEYPR04MB6630.apcprd04.prod.outlook.com (2603:1096:101:c6::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8; Wed, 29 Jul

2026 21:18:34 +0000

Received: from JH0PR04MB8463.apcprd04.prod.outlook.com

([fe80::11ac:4993:e777:8a99]) by JH0PR04MB8463.apcprd04.prod.outlook.com

([fe80::11ac:4993:e777:8a99%3]) with mapi id 15.21.0270.009; Wed, 29 Jul 2026

21:18:34 +0000

From: Jack Liam

To: Jack Liam

Subject: Re: Seo- Get More Visitors

Thread-Topic: Seo- Get More Visitors

Thread-Index:

AQHcsLQRyAxVGK+PdUGkKkblZY7Ye7WphlbCgAGjTzKAAZiXLoADKdhsgAGiJ0OAAwFC2oABkWapgBE8jy6AAAN9I4AAANFTgA4rWL2AAZrSE4ABlXLogAZB/3KAAw0uSIABe3AlgAIWAzuAAOkN0IADZioigAL7x46AAYXxqIAB136ygAGpy12AAXr/wYAGSu3cgAf/9kSAAX8tn4AB1pFAgAFHICOAAXa8RIADM8zegAFG3r6ABj+gLYABlZyogASbuCSAA5HyvYAAANxtgACdwU+AAZDBEoAAAnxHgAKScR6AAy2kSYAC+UrwgAAJoxeAXv5Hcw==

Date: Wed, 29 Jul 2026 21:18:32 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR04MB8463:EE_|SEYPR04MB6630:EE_

x-ms-office365-filtering-correlation-id: c9c61664-1c1b-497c-f9a3-08deedb6f274

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|8060799015|19110799012|24021099003|2604032031799003|704163111799003|16051099003|15030799006|55001999006|15080799012|31061999003|39105399006|4140399003|25010399006|22091999003|37011999003|24121999003|51015399003|39145399003|40105399003|18071099003|26121999007|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?5czgp3QRXx9lneztllJnpHvBqM3CvrWFd8kEucQNFYeOVfFJQ2Ho4TRWQw?=

=?iso-8859-1?Q?HqIwndWtclT2eS2I5AwFOjSufXuMl+XruMREwS/Od0ceBLrwoSCzffbIuu?=

=?iso-8859-1?Q?nK824iUjVq5Ch9iGNRkKUlozr8jVnnHvKdtmeDQqUmAId703uM1JPXETX7?=

=?iso-8859-1?Q?8YOpUWMA1jnoLozAfqXtD35bo3rojyVRGSaR33Hb2Zc/KG2QQO4TRtpP7M?=

=?iso-8859-1?Q?0UasPN2qYIvMOU0IqhK8JnMVpJiu6IAEow9gHRdbKiCX59i6WOScfBrk5A?=

=?iso-8859-1?Q?pJJr7XegtTuatXV47Al1NZDfJKtDEBA87EioyaG+V7/9TMzzA3bKgv2fx4?=

=?iso-8859-1?Q?FMjJZc09lV6CoT/EEhTLqt6kkX6/YY/ppuoPhyIGphLGrryNfVEPe+8Jfj?=

=?iso-8859-1?Q?BhIYyzNmoAFBEsJR/tlKCOO2LWLh09ZzKNIlIzF9HSVx6HqrDXKbVx2Ya1?=

=?iso-8859-1?Q?g8vYgEC3V8sMOxZnFiRLJ08LZNgNQ0JA7QmydkUE4xLQ7/MOCy2zBoZLqo?=

=?iso-8859-1?Q?zgfS5WaiZ34gdRXHFAOVznS3POu4PiJLBY8y8CrrIpv3j58WfXzyrfDXnn?=

=?iso-8859-1?Q?zg7em3ADOrQVAB3hqw/XLjUqUUoAdGG/FjiYYBFaFsWedefHKdhi2MbI/H?=

=?iso-8859-1?Q?IkPqr075ZQbJ4Q0V0RGlu4MRKkcJmMuDAA3ZK+VmYRKlcL0sxui0rmZZB6?=

=?iso-8859-1?Q?AeDh5LCSuLIQHCLC35aFTQlX34uoWEwgVF7vVv1k1UuRuDpUxA2xKcrDaW?=

=?iso-8859-1?Q?CsM4GNKJG9ugJQcTd8Jn1DjZvGvhkgSiqC8hkqVd4CkWEvR4FXDb+gVp07?=

=?iso-8859-1?Q?cB735su+Rq6NFDvkGtGYm3vyq3JvQuLLWQNmKZZgDe9DT/mfVATiqdBc8d?=

=?iso-8859-1?Q?DROeA5KW3jxeBAAW9eebH+2BoZ7eWVmgTuWnLJfWO25+vFnc9ki2zdtzNI?=

=?iso-8859-1?Q?MEpKg9Aeu69o9qTBw+9rrNAaNZBnEMg41517k2OAQXDp5vJ3ZvggCT5lvr?=

=?iso-8859-1?Q?/bL+b7S/CEon1c2xeE5I+qfRkVdbEbk9o7Pe+ZeX0xmwpOhPEMhb7qQqS2?=

=?iso-8859-1?Q?WC/TibqQ1OU/cXgNOYBtLmMCs3iWbArhn1Q2oqzOeSA/TY7yYfgzFje4FS?=

=?iso-8859-1?Q?xbSFKJMs2/L1QBZ1ySI5NQEaa3y3xkttCIeeR4Rx6itYUQV/IY3muy7ZVC?=

=?iso-8859-1?Q?gWpyq32Yc/8WmyqB3Kk56Njs7fJqOTKjAe1BMG8VHcjJcT8roUL3WFkOUY?=

=?iso-8859-1?Q?tF2LbsqRKIQj5qouz+0fIRZvmVos7P1bQwEyCmTYI46breo90txdRh/n6W?=

=?iso-8859-1?Q?pNBoPeESK1jWfDsdvmr1YaUuhWrBADmLCE8Qfbigttl0aWuW5zLD3+H2Ff?=

=?iso-8859-1?Q?C1NZ4Eb7OiIm4vUjyNAaG+J9JtLqfCIlv2SxN0kVRD2qar+AM4Kzo=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?zPQKB5YzU8cno6jg5r272dSOcQ/1I7CGZN6mYsxRGAegAD30U12G+XRu5t?=

=?iso-8859-1?Q?5lPE5R0xeI8jljxE277wYpkt5ys4j/DxbaBUnorXx6PW4sYaoRGCJIJhkd?=

=?iso-8859-1?Q?PzKjKqAERc9qH5hdx4ErfsoQ94s3oBc3lDv+EalLu/uj/u18++7PC+OOzk?=

=?iso-8859-1?Q?aXR+2zaABBQ3UgkF3T6ed9jhR0BueeutzD3e6kXUVenapxZJgwEZHBaZGp?=

=?iso-8859-1?Q?6leqIoot5ImlXsHocE4B067L1LfutMs8dT1KQmYf1tvAon+FYHd0bYsn6Z?=

=?iso-8859-1?Q?MwSHHngvbBsPPT4WA7F3sW/hCAMYR+NPv6/hWYVIrwwMLeAzwPKMJjkeK5?=

=?iso-8859-1?Q?QG51CfPogKamW/4CgoHcFUqVoL36bno5obWwi8rGpy80pjYIoIZlqdkxK7?=

=?iso-8859-1?Q?we6zO4c1jGXCfzjD7mGH0AXjfnOOFuMs5EAhWkuEB9BcG5jyX+jrf7QH9g?=

=?iso-8859-1?Q?GV8gREFgn4KbFt+JEiLYE/+Lai01pLoMSdvwzw7W3MkPxQaRfK4ER8DqGb?=

=?iso-8859-1?Q?EbHRGu3BsDD5GZ5X5PzcqYDKJFAPp7+a7oCFVp0mMP9plKzhadWZcKuAFu?=

=?iso-8859-1?Q?ldndVh8LK5tGBU66j9m3DAQl9sp6jCKtFjDPzo7cxczos9ntz8G/r+ECEB?=

=?iso-8859-1?Q?wRVBNJDvzyxZy26rSj4BSGM57NMu043GLgkiuzRljjyLfeWfTSkwhpV4Dc?=

=?iso-8859-1?Q?iCE1Tuj2bq9W+5ZHWoNn0EjzaEfFFQ1noQqBctA/F33Jk+PlFQpZUydAJf?=

=?iso-8859-1?Q?+HEqpqWfItTge/rIGnXWN/4k6tOcqc9w2orFLakeiy4mnUXYkKl8MkRTIx?=

=?iso-8859-1?Q?Hurhsdhp9MGuQei/1rLU5OEzZj09s13Z+i8Ad9xbhatXDaKrTm8sxDsaKL?=

=?iso-8859-1?Q?tLKZtu9272b9ifFsiBy3Jb09NwgARFbj/ukCkGzEgsaF8rSWdBORl7/7Of?=

=?iso-8859-1?Q?Y3nuhgDsTAY89g/aGOy7h+K3EJi8BTjE5A29hRXrk6Q2VQWpD20bO5rOez?=

=?iso-8859-1?Q?Ybx9VjpEb9aC9YC1r1sYOOIDmK0g1g47jZqfFYWFzQ0JEc0F6qETiZGiH1?=

=?iso-8859-1?Q?SZX0O08zX+TdZkjj0JwRweiesWuK8rAdViDfKipQE9spraR4ZyU+IzCp0R?=

=?iso-8859-1?Q?W7/M1pIZYptHog1yvR+bFZHIupDYQKXo78lCYCznL2lF2NJT7A5jOIOcBk?=

=?iso-8859-1?Q?VkcofpltX/p38X/rarEpoisbbSb59Cp7XeanSd03p/Gy0nuHE7iRX3OXJa?=

=?iso-8859-1?Q?smXUChmiSoVMnDczIfFyllNkS5LI2vQHy/pZ/6KoxuDdkIDi80hLuefzcc?=

=?iso-8859-1?Q?UgMYqVY471UoQp7dut9ccVK6qq+w/gKzaAhb+L6MJj5qMTAcTbdGyFRSZh?=

=?iso-8859-1?Q?op1a5Nh+hrqSrl4sA8iWBwsiopF2QeLLXCSsjIT32pFgmIU8lOJpPlXVAA?=

=?iso-8859-1?Q?6O7hyW0qbEFy8hqgTyus1HBDU8sB4nd22hwoLKlpvHAEEz8Dec460zdKpk?=

=?iso-8859-1?Q?RZ/E4usFFZnLHE2+5cIPWC?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR04MB84635807D21C642FD0299377E4CA2JH0PR04MB8463apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR04MB8463.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c9c61664-1c1b-497c-f9a3-08deedb6f274

X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jul 2026 21:18:32.9726

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR04MB6630

--_000_JH0PR04MB84635807D21C642FD0299377E4CA2JH0PR04MB8463apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

I visited your site and it looks great, but it seems to be falling short on=

search engine rankings for Google, Yahoo, and Bing.

Can I send over my price list and a proposal to help you improve your resul=

ts?

Thank you!

--_000_JH0PR04MB84635807D21C642FD0299377E4CA2JH0PR04MB8463apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

Hi,

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

I visited your site and it looks great, but it seems to be falling short on=

search engine rankings for Google, Yahoo, and Bing.

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

Can I send over my price list and a proposal to help you improve your resul=

ts?

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

xt-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_=

MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

0, 0, 0);">

Thank you!

mily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

os_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-=

size: 12pt; color: rgb(0, 0, 0);">

--_000_JH0PR04MB84635807D21C642FD0299377E4CA2JH0PR04MB8463apcp_--

=3D"padding-bottom:12px; font-family:CircularStd,Arial; font-size:17px; fon= t-weight:bold; line-height:1.67; letter-spacing:0.38px; color:#13126c; text= -align:left; margin:0">Your Prime benefits are on hold due to a billing iss= ue

b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,= Arial; font-size:15px; font-weight:bold; line-height:1.67; letter-spacing:0= .38px; color:#13126c; text-align:left; margin:0">Hello,

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon= t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color= :#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

Archives

Categories

Syndicate This Blog

Blog Administration

Powered by

NetKnow Navigation

Remote RSS/OPML-Blogroll Feed

Error

addthis

Empire Avenue

Error

Error

Error

Syndicate This Blog

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

=3D"padding-bottom:12px; font-family:CircularStd,Arial; font-size:17px; fon=

t-weight:bold; line-height:1.67; letter-spacing:0.38px; color:#13126c; text=

-align:left; margin:0">Your Prime benefits are on hold due to a billing iss=

ue

b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,=

Arial; font-size:15px; font-weight:bold; line-height:1.67; letter-spacing:0=

.38px; color:#13126c; text-align:left; margin:0">Hello,

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon=

t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color=

:#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.