Document phishing from Google Gmail Part 2














0">

SharePoint Portal











A new document is available in your SharePoint portal.






bgcolor=3D"#eef2f7">












bgcolor=3D"#ffffff">


























































font-family:Segoe UI,Arial,sans-serif;

font-size:38px;

font-weight:300;

color:#0078d4;

">

SharePoint






padding-top:10px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

color:#605e5c;

">

Document Portal










style=3D"background:#f8fafc;border:1px solid #dbe3ea;">
















font-family:Segoe UI,Arial,sans-serif;

font-size:22px;

font-weight:600;

color:#323130;

">

New Document Available






padding-top:15px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

line-height:24px;

color:#605e5c;

">

A document has been added to your workspace and is ready for viewing.














































font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

Document


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

font-weight:600;

color:#323130;

padding:12px 0;

">

Payroll_31986.pdf


font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

User


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

color:#323130;

padding:12px 0;

">

doctor@doctor.nl2k.ab.ca






















SkyGoo-2FemZT6Xc-2Fn1lGbnl7r-2B3uFRCBtduT-2FqQ3bNv8lQNNj9PvO9ZzCSjxdBbGfyGv=

Qbe9E2SD9eXvqg3Ncng-3D-3DMrT6_cM6xqQKqj3KI5xO9XCJRzBeObBvDoC8528rO5Qf-2FGG0=

zlJKL3HhLkU3gBOKQ6VQ0q-2FxJGsuCo8D5PswMvratO-2BVDdOMI00mIXlxAzC-2FatPncrUjU=

swESbcG6yiZVM1PyLlqOe9OTX8iUobb4onyWqD5bx9th8UER3rssdQKtu-2FeYR34BhEEKa5EGG=

ih3GR6v2a-2FYTdbWcB7PTL9JHhgfVCY4jPB7yDjVepTrKu-2FDXETzoskETT9KgUoYtfsBOQY7=

v6ZwXqIwkik8wbEh9QFEGyN8CDq0gbakmJ2iFYvE2rZi881hbaq1k2WgSb5YivF6j2uGaweO91-=

2F4y9mtQJzyLAYg8rkd32p5P4NsbwnC6ubGfHLF1ntVS9nABL9yI8-2B7E4AfYYAJeiRAVpvqyE=

wxbNpg4IsBd87Fv8A7tQOQleYQVsJw2mLyt0uTZ53mwj4M5aAe3MsusgVhRlHKEfkAO-2FxwIIw=

x0Jpg80EG78psET0gIF9Y9JD1uIaeWmyudkkVnE9OWcSuhpbNWA6i5LqlKFc4waE0h3aOaDuZcO=

NDjgC-2BC2xlre2ZPLp8jOyw-2F8tO-2FxkkF3rUAEUBjFfj1jcYwXJz8TObV-2F8TYiMEgkr8M=

hVUFykj1cFK39dU-2B8BAEJY8-2FD2usF3x-2FFHx0p3txQMJ016n2vt0CjcCduUHu15HgNo9Uc=

e0u-2B2IxEVZ69SiK4ZFNv1tTT18V-2Buy2aV7-2BG5w9Zfed4mhsU4FmaC-2BrYRSyiDptNUkb=

GvA5x0BaPogl-2BeLpSptVfUBwniUl8XwOtJri12CR2bBZu6Ms72qdTXuD2-2FgOk-2FvuzR-2F=

KwDekMEN4knE6Q2RDGSE5UFaSZPFSRp7NcVyLCEbjqA1-2FSMjvdesMZIHcBbyzgbDdlhRRa-2B=

yQXxYqBJD3HudOooy-2B1v47TQxMqfRG2l5fFnl-2FJKFcgfrnYFwiaV1WsvduWDLQkwnNexsTy=

pWX07aHNEgQxv5uhZWNWx8-2BqHIBT3HUrEE9wrD-2FCYekUQUf5ls5zTvV0XziHZNYK-2Ft31Q=

-2FApabeilbQK4bo8tqzFJvuhb7ie2GvHENjg-2FZbBtmZoJANY1MfukxjrHr7NtYXlm5i8Xyl7=

kJ-2BKF6sZHrgWM8A4XbX1DOD-2F2c4x6mjSP91PJJOuOqEMOY9B1S8ozuX3Xtod9ks1vI-2FVX=

byp9HcsmhzWSr2VgSLDmIUtwzHqTPjI3TjRQyjCDwsxv49V7cBVYnPXN3Kv7RMqgnrU64Aww4jt=

8kWPO-2BhcyGPSJfPubuwsbMKGSHyhAAWoXaRej9KtOZECSBE4CNtuAptERueyHlBOfTtUjxajU=

Xlgd-2B8hLJdQFDhBO6nWGlWR5A#?abcfamily=3DZG9jdG9yQGRvY3Rvci5ubDJrLmFiLmNh"

style=3D"

display:inline-block;

padding:15px 50px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

font-weight:600;

color:#ffffff;

text-decoration:none;

">

View Document










padding:30px 40px;

background:#fafafa;

border-top:1px solid #e5e5e5;

">




font-family:Segoe UI,Arial,sans-serif;

font-size:12px;

line-height:20px;

color:#605e5c;

">



Reference ID: A6756F11989F4294AD8256DB8CB89D713









SharePoint Portal Services =C2=A9 2026



















Document phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjtJ-000000006BQ-2LlA

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f231.google.com ([209.85.128.231]:60669)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkiEY-000000001eV-2HP9

for doctor@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 07:04:14 -0600

Received: by mail-yw1-f231.google.com with SMTP id 00721157ae682-80e24970f1dso35238107b3.0

for ; Fri, 17 Jul 2026 06:03:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=asecureltd-com.20251104.gappssmtp.com; s=20251104; t=1784293393; x=1784898193; darn=doctor.nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LPIc1xubsPsWfrtG6LpKbOayil/5FXUUg/NzNyFeuXE=;

b=xzrTeI0qXsLmPvhO64nwnTrcRmwP9dDip9c5gGtrbEu+jckdxpRkYNOtPkD2BJyTCr

PPsBMy0LORTgWGMXUpuSS+n0eYg+GC4DV+IvmTcof/CTSjp1d1hqplshHCRbBSEV0wmj

eJzzO+WmMafkv+/lRkwS42b99sMr0nwV7BfTww8fJc8MvSn6FCRO1kjViNUlyiOitzh0

yNbG9Xp1zfYRCCf+iFFSxW1tChRnNuuosuUK1LjwEKzwcmXXjmLZNsIcaOufBxIQQ61N

nyyjXTtutC7DiiRi0Jz8VmZQtOqKuZSXE1hk0h5/OxKPrz1DvKpfZgb8NBUafJ5SyQBq

67xw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784293393; x=1784898193;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=LPIc1xubsPsWfrtG6LpKbOayil/5FXUUg/NzNyFeuXE=;

b=ScxT8hl4l/cGZwNRhu6I0guFd/ziRs/xoDeU6bx5X7RDUbIebRROSq+vQ/snVSeMQ8

9K5qsLBDn4IlzL4ac8M96iO6/m5mcJ3ZdC5Fm6N73ETs7w2HKFok+W5Lm2R2Ux5IvEkQ

lnz/NzjedTszxfb3odNYZWvXrHQGb/f3MP8tYJ664pCrGj9hjd8Krg92a5g8lMuSEEGB

UMNt0n10x9jiliNrZQ38k3qb6OaOWCcvspt+rB150DtMe/Vk8Xevywn+2kUbLHRoVmzQ

QGSDxNbbXsNX//lgQD0Pk6TDMDxCJTxyNQr/fcu29pF45oqXoxdbKhBW0echShxB6gYn

v4+A==

X-Gm-Message-State: AOJu0YwTxXS2ajnu8vvoJFeZeyi5jf4Q0itpW/hMvnpQG5mxafODoLPW

oYBdcThJ3b9us3GtR3G1kGCfZMRKJoGTMOL3c0vZ9shE8/WzvLgqYzFen1necRxL+cQdtP7k+DZ

G/nUeM970tGDtNB85JLCS5KRMKEbtQgIHjreNWwY4IztCvjU=

X-Gm-Gg: AfdE7cldy7h+jMxlUd0yv3Vef1YDxcR93ABD0iOq+Dh4Qs6RTCqlko3eXleJoCIjBme

TQH68XmeAgAggVwp3dYOkqtrukn1dS5mbbBTRovuQ0rhdP42sranLLTbgNvqYPjqad6wNvTJE31

Ks55Di/J7GKNs6toedJJmJB7ap5ij2OHQSGsZe6szN3uKRLWZe35Y/Q8YhnZ0Toh+8nA97Ateye

AKWJDtCyjPC1LyJ9khiJcF9EdfVKfEAB/IL5ABJwltyKxLWkYQDG4tk46DhbetzkPp+LxYKgbde

AB2MeWTsB9MfAuaFU8kW0hIrzPBjVal8xtWV7TwDC0fLX88vlHazBHWqGg5O4cLF1WXFdmFAuF+

X8e07JGj6x8QtWg==

X-Received: by 2002:a05:690c:7093:b0:80b:fb24:4589 with SMTP id 00721157ae682-81ef22ca2fbmr7623567b3.2.1784293392391;

Fri, 17 Jul 2026 06:03:12 -0700 (PDT)

Received: from asecureltd.com ([172.245.244.97])

by smtp-relay.gmail.com with ESMTPS id 00721157ae682-81ef4258e7esm682857b3.21.2026.07.17.06.03.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 17 Jul 2026 06:03:12 -0700 (PDT)

X-Relaying-Domain: asecureltd.com

From: "Docs@doctor"

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Shared_Document_Notification_=E2=80=93_R?=

=?UTF-8?Q?esponse_Requested_-_doctor=40doctor=2Enl?=

=?UTF-8?Q?2k=2Eab=2Eca?=

Message-ID: <57b7876f-4087-0b75-d1eb-86f3b11cf19a@asecureltd.com>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 17 Jul 2026 13:03:10 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SharePoint Portal A new document is available in your SharePoint

portal.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.231 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.3 LONGWORD BODY: Uses overlong words

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.231 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.231 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} =?UTF-8?Q?Shared_Document_Notification_=E2=80=93_R?=

=?UTF-8?Q?esponse_Requested_-_doctor=40doctor=2Enl?=

=?UTF-8?Q?2k=2Eab=2Eca?=

Document phish from Google GMail PArt 2












0">

SharePoint Portal











A new document is available in your SharePoint portal.






bgcolor=3D"#eef2f7">












bgcolor=3D"#ffffff">


























































font-family:Segoe UI,Arial,sans-serif;

font-size:38px;

font-weight:300;

color:#0078d4;

">

SharePoint






padding-top:10px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

color:#605e5c;

">

Document Portal










style=3D"background:#f8fafc;border:1px solid #dbe3ea;">
















font-family:Segoe UI,Arial,sans-serif;

font-size:22px;

font-weight:600;

color:#323130;

">

New Document Available






padding-top:15px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

line-height:24px;

color:#605e5c;

">

A document has been added to your workspace and is ready for viewing.














































font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

Document


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

font-weight:600;

color:#323130;

padding:12px 0;

">

Payroll_46460.pdf


font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

User


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

color:#323130;

padding:12px 0;

">

doctor@nl2k.ab.ca






















SkyGoo-2FemZT6Xc-2Fn1lGbnl7r-2B3uFRCBtduT-2FqQ3bNv8lQNNj9PvO9ZzCSjxdBbGfyGv=

Qbe9E2SD9eXvqg3Ncng-3D-3DMrT6_cM6xqQKqj3KI5xO9XCJRzBeObBvDoC8528rO5Qf-2FGG0=

zlJKL3HhLkU3gBOKQ6VQ0q-2FxJGsuCo8D5PswMvratO-2BVDdOMI00mIXlxAzC-2FatPncrUjU=

swESbcG6yiZVM1PyLlqOe9OTX8iUobb4onyWqD5bx9th8UER3rssdQKtu-2FeYR34BhEEKa5EGG=

ih3GR6v2a-2FYTdbWcB7PTL9JHhgfVCY4jPB7yDjVepTrKu-2FDXETzoskETT9KgUoYtfsBOQY7=

v6ZwXqIwkik8wbEh9QFEGyN8CDq0gbakmJ2iFYvE2rZi881hbaq1k2WgSb5YivF6j2uGaweO91-=

2F4y9mtQJzyLAYg8rkd32p5P4NsbwnC6ubGfHLF1ntVS9nABL9yI8-2B7E4AfYYAJeiRAVpvqyE=

wxbNpg4IsBd87Fv8A7tQOQleYQVsJw2mLyt0uTZ53mwj4M5aAe3MsusgVhRlHKEfkAO-2FxwIIw=

x0Jpg80EG78psET0gIF9Y9JD1uIaeWmyudkkVnE9OWcSuhpbNWA6i5LqlKFc4waE0h3aOaDuZcO=

NDjgC-2BC2xlre2ZPLp8jOyw-2F8tO-2FxkkF3rUAEUBjFfj1jcYwXJz8TObV-2F8TYiMEgkr8M=

hVUFykj1cFK39dU-2B8BAEJY8-2FD2usF3x-2FFHx0p3txQMJ016n2vt0CjcCduUHu15HgNo9Uc=

e0u-2B2IxEVZ69SiK4ZFNv1tTT18V-2Buy2aV7-2BG5w9Zfed4mhsU4FmaC-2BrYRSyiDptNUkb=

GvA5x0BaPogl-2BeLpSptVfUBwniUl8XwOtJri12CR2bBZu6Ms72qdTXuD2-2FgOk-2FvuzR-2F=

KwDekMEN4knE6Q2RDGSE5UFaSZPFSRp7NcVyLCEbjqA1-2FSMjvdesMZIHcBbyzgbDdlhRRa-2B=

yQXxYqBJD3HudOooy-2B1v47TQxMqfRG2l5fFnl-2FJKFcgfrnYFwiaV1WsvduWDLQkwnNexsTy=

pWX07aHNEgQxv5uhZWNWx8-2BqHIBT3HUrEE9wrD-2FCYekUQUf5ls5zTvV0XziHZNYK-2Ft31Q=

-2FApabeilbQK4bo8tqzFJvuhb7ie2GvHENjg-2FZbBtmZoJANY1MfukxjrHr7NtYXlm5i8Xyl7=

kJ-2BKF6sZHrgWM8A4XbX1DOD-2F2c4x6mjSP91PJJOuOqEMOY9B1S8ozuX3Xtod9ks1vI-2FVX=

byp9HcsmhzWSr2VgSLDmIUtwzHqTPjI3TjRQyjCDwsxv49V7cBVYnPXN3Kv7RMqgnrU64Aww4jt=

8kWPO-2BhcyGPSJfPubuwsbMKGSHyhAAWoXaRej9KtOZECSBE4CNtuAptERueyHlBOfTtUjxajU=

Xlgd-2B8hLJdQFDhBO6nWGlWR5A#?abcfamily=3DZG9jdG9yQG5sMmsuYWIuY2E=3D"

style=3D"

display:inline-block;

padding:15px 50px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

font-weight:600;

color:#ffffff;

text-decoration:none;

">

View Document










padding:30px 40px;

background:#fafafa;

border-top:1px solid #e5e5e5;

">




font-family:Segoe UI,Arial,sans-serif;

font-size:12px;

line-height:20px;

color:#605e5c;

">



Reference ID: A6756F11989F4294AD8256DB8CB89D713









SharePoint Portal Services =C2=A9 2026



















Accounting service spam from Google Gmail Part 3










link=3D"#467886" vlink=3D"#96607D" style=3D'word-wrap:break-word'>

class=3DWordSection1>


style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>I =

thought I’d send a quick note to reconnect regarding our remote =

accounting support services.


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>If your team ever needs an =

extra hand with bookkeeping, payroll, tax preparation support, or =

routine accounting work, we’d be happy to =

help.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Would it make sense to have a =

brief chat?


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Best regards,
Lauren =

Smith


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>From:

style=3D'font-family:"Calibri",sans-serif'> Lauren Smith
Sent: =

Monday, July 13, 2026 6:20 PM
To: =

sales@nk.ca
Subject: Re: Do You Require Bookkeeping =

Support?


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Just following up to see if =

you’re currently exploring remote bookkeeping, payroll, or tax =

prep support.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>If it’s not a priority =

right now, no problem—just let me know. If that's the case, we can =

schedule a quick call to discuss.


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Looking forward to your =

reply.


style=3D'font-family:"Calibri",sans-serif'>Regards,

=


style=3D'font-family:"Calibri",sans-serif'>Lauren Smith

style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>From:

style=3D'font-family:"Calibri",sans-serif'> Lauren Smith
Sent: =

Wednesday, July 8, 2026 6:32 PM
To: =

sales@nk.ca
Subject: Quick chat? =

Accounting-Bookkeeping


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>A =

quick overview of our accounting =

support.


style=3D'font-family:"Calibri",sans-serif'>About =

us:


style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing =

style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Team of 750+ trained =

bookkeeping and accounting professionals based in =

India


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Experts in Xero, QuickBooks =

Online, and more


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Currently supporting over =

1,000 clients


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>ISO-certified and =

GDPR-compliant company


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Happy to share client =

references upon request


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Are you considering a remote =

accounting partner?
 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Best =

Regards,


style=3D'font-family:"Calibri",sans-serif'>Lauren Smith

style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Disclaimer

style=3D'font-family:"Calibri",sans-serif'>: If you no longer wish to =

receive emails from us, simply reply with "NO " to =

unsubscribe.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


div>

------=_NextPart_000_0650_01DD160E.264DA980--



Document phish from Google GMail PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjtC-000000006BB-1R6i

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f103.google.com ([74.125.224.103]:53383)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wki9s-00000000MNt-3tL8

for doctor@nl2k.ab.ca;

Fri, 17 Jul 2026 06:59:25 -0600

Received: by mail-yx1-f103.google.com with SMTP id 956f58d0204a3-667b0ced2d3so9098492d50.2

for ; Fri, 17 Jul 2026 05:58:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=asecureltd-com.20251104.gappssmtp.com; s=20251104; t=1784293102; x=1784897902; darn=nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=MkXn1VO2szHdGLho3kpArWaHUVUHDEfu/0zHD5wDSiw=;

b=oRp13+qCFGHzcgdbtZECBPxlt2zzBV1kLY32FPeQRpPI3hWqMYLbJK0ap2IL9KVTsO

DKz1+bfknQhaPnWQTUzd0Qkj+EinEZeAMAQd9ltbhJXX/7M4+gtXDAptDO/u8WrzxKV7

2C6p+jdfXL/l6pnkicRmc814tHuusRGq8JeMyp3TioweR9QlZkHrKlbXdTBygN/5ksBt

PjdjV/kBrmY472Fs3UkIeLsJZP99kYE+/7oNaP8eACmajIrV8B8y4FuukQ0Kj63g/V23

cM3i8Rkj3ip9KGB6v7xpD+Qab1j6PqApwgjbqrkG6E84y69GRPJJdXKlYVY/rJf0lnZQ

aKIQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784293102; x=1784897902;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=MkXn1VO2szHdGLho3kpArWaHUVUHDEfu/0zHD5wDSiw=;

b=Dt3lPqeqd9kqumBTd0YbIKLPpa3HaywHri19gdL7f2apEqfxd8GyxS6q9gvEwHKU3f

txjZOkMWa/v/D+AmpNKI/WtFMTZdiBjwuPXEVxprOTfH5bvsu0/ikCs1OrYJSQIeEWrq

7Qqm6yzuD2TSGEw5zRDGt5njqFAVR+GS9bcJosO6XQRiM+IN/Ve2HyREtwdB2KrEQqzV

LkZqyZmSL6au2zysuTyNKisMpRPvwiA4C+6mrH/ajIG/3eqs3FGTRAT/SOmvzeGNUJi9

XvaovcxlgQFqxJYj0AFDLvTCROkNWcf6G9vO0+7qmWVWDaHBcYJ3LxsxwHIV4oXrxuc6

IZzA==

X-Gm-Message-State: AOJu0YwykUBNqe/4NuQRH710O2p0uSUGoVWNOzDSZMvQcRnhYnQwOIOG

fIFCXZzVMrQePtSUVdszrj8S4t4o89gZ+KvtYOxkDKpo816NHanhus2yWotVFVA7uqj8nKmqFWJ

h5kXYesJcUuf2MuRGqWqISb2/SpKWQ1JY1UJOyQ7ua31rGsQ=

X-Gm-Gg: AfdE7cm2lAXkH03szWPmU4/G02LL+BbH+2e5hyhXyhlIAxaPv6OzPSRzvbdToGRD22g

MlNY8OOVAVhGgZxJpcV3e76hMYWYmi8na0qfZ5ROaOxdNJfxkGbQpkax/KM4AtC4FW3oMuEOHla

Jaw9YDfc4dGZKYB1o4wMBI/R0N18VC/f2IkX3r/W2JCVba150hN+iBz2lI3N9RPXvV9Pr8KhGdG

XN3EDGKxA+n4vEKb+xkiGGbjpn0l5EXmjzB6R+s3yUD/qkQoF8ow+WtV2gWnDT7zBHG864uQQgv

hGsZHOGIE9UZe1tepbwsuZP2WPsr9smxuNmajNDg77yH7bOtZyRpBkXWAz8jCcyVeGYYhgZyBQ7

/OPdCVHRYNDSTt+YpDdo=

X-Received: by 2002:a53:ac03:0:b0:667:bc08:e995 with SMTP id 956f58d0204a3-6683bc3851emr477163d50.50.1784293101695;

Fri, 17 Jul 2026 05:58:21 -0700 (PDT)

Received: from asecureltd.com ([172.245.244.97])

by smtp-relay.gmail.com with ESMTPS id 956f58d0204a3-6683b5483d3sm114237d50.9.2026.07.17.05.58.21

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 17 Jul 2026 05:58:21 -0700 (PDT)

X-Relaying-Domain: asecureltd.com

From: "Docs@nl2k"

To: doctor@nl2k.ab.ca

Subject: Your Requested Document Is Now Available - doctor@nl2k.ab.ca

Message-ID: <3cdc056b-5700-b5b5-2d41-ad55a73b73cd@asecureltd.com>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 17 Jul 2026 12:58:20 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SharePoint Portal A new document is available in your SharePoint

portal.



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

[74.125.224.103 listed in dnsbl.ahbl.org]

[74.125.224.103 listed in dnsbl.ahbl.org]

[74.125.224.103 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.103 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.103 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Your Requested Document Is Now Available - doctor@nl2k.ab.ca

Accounting service spam from Google Gmail Part 2

From: Lauren Smith

Sent: Wednesday, July 8, 2026 6:32 PM

To: sales@nk.ca

Subject: Quick chat? Accounting-Bookkeeping







Hi,







A quick overview of our accounting support.







About us:







Team of 750+ trained bookkeeping and accounting professionals

based in India



Experts in Xero, QuickBooks Online, and more



Currently supporting over 1,000 clients



ISO-certified and GDPR-compliant company



Happy to share client references upon request







Are you considering a remote accounting partner?





Best Regards,



Lauren Smith















Disclaimer: If you no longer wish to receive emails from us, simply reply

with "NO " to unsubscribe.













------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

Accounting Service spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkhrV-00000000Bhf-2igI

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 06:40:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 06:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:55356)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkgpR-000000008Gb-3d0p

for sales@nk.ca;

Fri, 17 Jul 2026 05:34:17 -0600

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-2caf228a910so59999655ad.2

for ; Fri, 17 Jul 2026 04:33:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784287992; x=1784892792; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=AcyQXmo7K5uEcu42v3pnNrmQgyU+6RdKZYmyoKXePXn0rbMCwvsMqGYboq8FIrNyoS

084g4sjL3bPADnVB5hWHuQZss+cY+Lw7rZdl2EDdCY1gXDezdFQ0WI7kJlXdTvTukBSe

jW85eUy0bVhwYjV4m+GvlMqvjBsxlYnvoTHEfl1SbMZ/K+bcBjD3mmqkYI5/x1ttALZ2

GMyeykqXPO1PICMHkkIga7aJ5sI7ww6LOZcbexwc4E/XKja1TYgyzRX9SsPoh7zP25Xx

RLMMGWJIFXWG1NLk0QMqXeW1/H1ErW5LehGQXu/o6IivvN4GRDeio45UQQXik5J4f3Sr

SG/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784287992; x=1784892792;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=HHTWwC7H9zuNrLZ04wPnO9Gct6r5mBg4/8o8TOUbihPmY2LP0b60r10ISrnaufuR6j

PVCX7mh2qpXyDNh8bCzpz1sdE525vLBquUlqphdNAmXO/Sy138+FDCRCpHVqRtGoN91k

xE4u04mfEMOXH5m2VyCp7BgNNdPSdzzrQ7xdOlRqy+mxk6oOYSPKYFKWdhr+BJXgjf5E

BEBcbh5kzSwcbhgdP5XdH/l11ON/ONMzhuSx3E9imMXXfZzWGjqhVDTMreCRXwFhbF6V

POsEugW+MSCEodi70HbFyq+BXKQKbxYArSRP+IiB8fvkzAKjdwNSGUVWa3Tc2SS4woFc

70WQ==

X-Gm-Message-State: AOJu0YxkhgfL2kLHLKRZ76kKnl4qkG2cV4sayI6lIwXXybVcNA91tRGL

E9v1pEoXtM9uyGLcu+vTAk0rESOfYYB2bCyGa3VUpivg3y/zEVwdNrzVukzg+vpHSWA=

X-Gm-Gg: AfdE7cn1Mu/f0fGnlZ+nWjwYoIgxkRnVU9RfHk0+ktKYEelEr4/1RG5w8nKjyjm41xz

eeJjkLPB1xYvIdSllxz7dcAKeLApJh9gh1c3QZXWOcw4pNPk+wxU9olF5oihJQED4ZAwYo++r/9

6RPAVVc+vnd5v7mPE05lfSQ71py0sjDE644Na30ijQPQzgmzcwYd/+09CAS2xIaaFzf8shxfAYN

KXW/ITvqUf/sBuIWYt0BnzlaAALxJfWrj1IemGsylEXOJIJXapsRE9k0x7ZxdrV7RsE1ro6dKRw

Aqg+lOxqcAjyGuKz7/wYFOuMBnUOpB+D7cR0BpVJ6A88/85KannL92dNI8vrvgdVAEAvs5Zyf8x

xYcteSiXZzjSu2SXV0fNCbVGxEgvfXwWvag+IVFtRai4tQ6LTlFvwj74p+N89D8Keb3KyZcHOM+

oDa4bxb8WIT6AZwK/7nuyWDw==

X-Received: by 2002:a17:903:f8c:b0:2c6:9d3d:dfbd with SMTP id d9443c01a7336-2cf34866be5mr23521665ad.16.1784287992361;

Fri, 17 Jul 2026 04:33:12 -0700 (PDT)

Received: from DESKTOP5AD1N3E ([2401:4900:8846:6185:d508:75a2:69f0:d8e2])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2cf346d9f9dsm9078685ad.41.2026.07.17.04.33.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 17 Jul 2026 04:33:11 -0700 (PDT)

From: "Lauren Smith"

To:

Subject: Re: Checking In Again

Date: Fri, 17 Jul 2026 17:03:04 +0530

Message-ID: <064f01dd15e0$0c94aa30$25bdfe90$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0650_01DD160E.264DA980"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0V373S5MT8eBHBS7af76T46dnwug==

Content-Language: en-us

Disposition-Notification-To: "Lauren Smith"



This is a multipart message in MIME format.



------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I thought I'd send a quick note to reconnect regarding our remote accounting

support services.







If your team ever needs an extra hand with bookkeeping, payroll, tax

preparation support, or routine accounting work, we'd be happy to help.







Would it make sense to have a brief chat?







Best regards,

Lauren Smith







From: Lauren Smith

Sent: Monday, July 13, 2026 6:20 PM

To: sales@nk.ca

Subject: Re: Do You Require Bookkeeping Support?







Hi,







Just following up to see if you're currently exploring remote bookkeeping,

payroll, or tax prep support.







If it's not a priority right now, no problem-just let me know. If that's the

case, we can schedule a quick call to discuss.







Looking forward to your reply.







Regards,



Lauren Smith

Accounting Service spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkhrV-00000000Bhf-2igI

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 06:40:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 06:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:55356)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkgpR-000000008Gb-3d0p

for sales@nk.ca;

Fri, 17 Jul 2026 05:34:17 -0600

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-2caf228a910so59999655ad.2

for ; Fri, 17 Jul 2026 04:33:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784287992; x=1784892792; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=AcyQXmo7K5uEcu42v3pnNrmQgyU+6RdKZYmyoKXePXn0rbMCwvsMqGYboq8FIrNyoS

084g4sjL3bPADnVB5hWHuQZss+cY+Lw7rZdl2EDdCY1gXDezdFQ0WI7kJlXdTvTukBSe

jW85eUy0bVhwYjV4m+GvlMqvjBsxlYnvoTHEfl1SbMZ/K+bcBjD3mmqkYI5/x1ttALZ2

GMyeykqXPO1PICMHkkIga7aJ5sI7ww6LOZcbexwc4E/XKja1TYgyzRX9SsPoh7zP25Xx

RLMMGWJIFXWG1NLk0QMqXeW1/H1ErW5LehGQXu/o6IivvN4GRDeio45UQQXik5J4f3Sr

SG/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784287992; x=1784892792;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=HHTWwC7H9zuNrLZ04wPnO9Gct6r5mBg4/8o8TOUbihPmY2LP0b60r10ISrnaufuR6j

PVCX7mh2qpXyDNh8bCzpz1sdE525vLBquUlqphdNAmXO/Sy138+FDCRCpHVqRtGoN91k

xE4u04mfEMOXH5m2VyCp7BgNNdPSdzzrQ7xdOlRqy+mxk6oOYSPKYFKWdhr+BJXgjf5E

BEBcbh5kzSwcbhgdP5XdH/l11ON/ONMzhuSx3E9imMXXfZzWGjqhVDTMreCRXwFhbF6V

POsEugW+MSCEodi70HbFyq+BXKQKbxYArSRP+IiB8fvkzAKjdwNSGUVWa3Tc2SS4woFc

70WQ==

X-Gm-Message-State: AOJu0YxkhgfL2kLHLKRZ76kKnl4qkG2cV4sayI6lIwXXybVcNA91tRGL

E9v1pEoXtM9uyGLcu+vTAk0rESOfYYB2bCyGa3VUpivg3y/zEVwdNrzVukzg+vpHSWA=

X-Gm-Gg: AfdE7cn1Mu/f0fGnlZ+nWjwYoIgxkRnVU9RfHk0+ktKYEelEr4/1RG5w8nKjyjm41xz

eeJjkLPB1xYvIdSllxz7dcAKeLApJh9gh1c3QZXWOcw4pNPk+wxU9olF5oihJQED4ZAwYo++r/9

6RPAVVc+vnd5v7mPE05lfSQ71py0sjDE644Na30ijQPQzgmzcwYd/+09CAS2xIaaFzf8shxfAYN

KXW/ITvqUf/sBuIWYt0BnzlaAALxJfWrj1IemGsylEXOJIJXapsRE9k0x7ZxdrV7RsE1ro6dKRw

Aqg+lOxqcAjyGuKz7/wYFOuMBnUOpB+D7cR0BpVJ6A88/85KannL92dNI8vrvgdVAEAvs5Zyf8x

xYcteSiXZzjSu2SXV0fNCbVGxEgvfXwWvag+IVFtRai4tQ6LTlFvwj74p+N89D8Keb3KyZcHOM+

oDa4bxb8WIT6AZwK/7nuyWDw==

X-Received: by 2002:a17:903:f8c:b0:2c6:9d3d:dfbd with SMTP id d9443c01a7336-2cf34866be5mr23521665ad.16.1784287992361;

Fri, 17 Jul 2026 04:33:12 -0700 (PDT)

Received: from DESKTOP5AD1N3E ([2401:4900:8846:6185:d508:75a2:69f0:d8e2])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2cf346d9f9dsm9078685ad.41.2026.07.17.04.33.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 17 Jul 2026 04:33:11 -0700 (PDT)

From: "Lauren Smith"

To:

Subject: Re: Checking In Again

Date: Fri, 17 Jul 2026 17:03:04 +0530

Message-ID: <064f01dd15e0$0c94aa30$25bdfe90$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0650_01DD160E.264DA980"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0V373S5MT8eBHBS7af76T46dnwug==

Content-Language: en-us

Disposition-Notification-To: "Lauren Smith"



This is a multipart message in MIME format.



------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I thought I'd send a quick note to reconnect regarding our remote accounting

support services.







If your team ever needs an extra hand with bookkeeping, payroll, tax

preparation support, or routine accounting work, we'd be happy to help.







Would it make sense to have a brief chat?







Best regards,

Lauren Smith







From: Lauren Smith

Sent: Monday, July 13, 2026 6:20 PM

To: sales@nk.ca

Subject: Re: Do You Require Bookkeeping Support?







Hi,







Just following up to see if you're currently exploring remote bookkeeping,

payroll, or tax prep support.







If it's not a priority right now, no problem-just let me know. If that's the

case, we can schedule a quick call to discuss.







Looking forward to your reply.







Regards,



Lauren Smith

German language spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Thu, 16 Jul 2026 22:44:00 -0600

Received: from dns74145.phdns13.es ([185.45.74.145]:47785 helo=viniloscasa.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkaQ5-00000000FQZ-2qg2

for dave@nl2k.ab.ca;

Thu, 16 Jul 2026 22:43:39 -0600

Received: from DESKTOP-DQ83S9H.bbrouter (unknown [41.209.14.108])

by viniloscasa.com (Postfix) with ESMTPA id 5D2349FDD;

Fri, 17 Jul 2026 06:29:34 +0200 (CEST)

Authentication-Results: viniloscasa.com;

spf=pass (sender IP is 41.209.14.108) smtp.mailfrom=redes smtp.helo=DESKTOP-DQ83S9H.bbrouter

Received-SPF: pass (viniloscasa.com: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: =?utf-8?q?G=C3=BCnstige_Kredite=2E=2E=2E_//_Jetzt_bewerben!?=

To: Recipients

From: redes@doctor.nl2k.ab.ca

Date: Fri, 17 Jul 2026 07:29:31 +0300

Reply-To: financeservice2009@hotmail.com

X-Spam_score: 16.8

X-Spam_score_int: 168

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Es tut mir leid, dass diese E-Mail als unerwünschte E-Mail

in Ihrem Spam-Ordner gelandet ist. Benötigen Sie einen Kredit? Falls ja,

senden Sie bitte eine E-Mail an financeservice2009@hotmail.com und [...]



Content analysis details: (16.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

[185.45.74.145 listed in dnsbl.ahbl.org]

[185.45.74.145 listed in dnsbl.ahbl.org]

[185.45.74.145 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

[41.209.14.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.45.74.145 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[41.209.14.108 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[41.209.14.108 listed in sbl-xbl.spamhaus.org]

[41.209.14.108 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 TO_MALFORMED To: has a malformed address

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.45.74.145 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

[185.45.74.145 listed in will-spam-for-food.eu.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[financeservice2009(at)hotmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 T_PDS_TO_EQ_FROM_NAME From: name same as To: address

4.1 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} =?utf-8?q?G=C3=BCnstige_Kredite=2E=2E=2E_//_Jetzt_bewerben!?=



Es tut mir leid, dass diese E-Mail als unerw=FCnschte E-Mail in Ihrem Spam-=

Ordner gelandet ist. Ben=F6tigen Sie einen Kredit? Falls ja, senden Sie bit=

te eine E-Mail an financeservice2009@hotmail.com und geben Sie die unten st=

ehenden Informationen f=FCr die weitere Bearbeitung an.



Angaben zum Kreditnehmer:

Vollst=E4ndiger Name:

Land:

Bundesland/Kanton:

Betrag:

Laufzeit:

Mobilnummer:

Bitte leiten Sie diese E-Mail in Ihren Posteingang weiter, um unerw=FCnscht=

e E-Mails in Ihrem Spam-Ordner zu vermeiden.

Kontaktieren Sie uns f=FCr weitere Informationen:

financeservice2009@hotmail.com

Mit freundlichen Gr=FC=DFen,

Frau Martin Herbert

Bitcoin PAypal Phish from MIcrosoft Outlook Part 2



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

[40.93.10.74 listed in dnsbl.ahbl.org]

[40.93.10.74 listed in dnsbl.ahbl.org]

[40.93.10.74 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.10.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:cafe:0:0:43 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:2b4:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

[40.93.10.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.10.74 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.10.74 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

Bitcoin PAypal Phish from MIcrosoft Outlook Part 3





0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.10.74 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Confirmation_=2D_Bitcoin_Ord?=

=?UTF-8?Q?er_in_Progress_=40_=C5=A1t_16=2E_j=C3=BAl_2026_=28cynthiaperez389903=40group?=

=?UTF-8?Q?s=2Eoutlook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to PayPal Payment Confirmation – Bitcoin Order in Progress

Title: PayPal Payment Confirmation – Bitcoin Order in Progress

When: July 16, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



Your PayPal payment has been received successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request has been securely registered and is currently under processing.



Transaction Summary:



Payment Method: PayPal

Purchase Type: Bitcoin (BTC)

Amount Charged: $499.99

Order Status: Processing



Your transaction is currently going through our standard verification process. Once the verification is completed, your Bitcoin order will be processed and finalized automatically.



If you do not recognize this transaction, please contact our customer support team immediately at +1 806 317 8411.



Thank you for choosing our services.



Sincerely,

Billing Department

Attendees:



cynthiaperez389903@groups.outlook.com



PayPal Payment Confirmation – Bitcoin Order in Progress

Dear Customer, Your PayPal payment has been received successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request has been securely registered and is currently under processing.



Dear Customer,



Your PayPal payment has been received successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request has been securely registered and is currently under processing.



Transaction Summary:



Payment Method: PayPal

Purchase Type: Bitcoin (BTC)

Amount Charged: $499.99

Order Status: Processing



Your transaction is currently going through our standard verification process. Once the verification is completed, your Bitcoin order will be processed and finalized automatically.



If you do not recognize this transaction, please contact our customer support team immediately at +1 806 317 8411.



Thank you for choosing our services.



Sincerely,

Billing Department

Kedy

štvrtok 16. júl 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Bitcoin PAypal Phish from MIcrosoft Outlook Part 1



X-Microsoft-Antispam:

BCL:0;ARA:1444111002|6092099016|41010799009|3151999006|9400799043|4040799016|34130799006|9000799056|1680799066|16200799027|22000799015|6149299003|26130799012|970799063|24102599021|29080799009|5139299004|26000799027|32020799003|9020799019|1041999012|1602099012|30041999003|22062799003|18021999003|2145499017|1360799030|1380799030|1370799030|3412199025|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?ck1LTXZvdzlRZ2IzeVB6R3E5RVh2cG82NTYyUGpEZis5REpiOWVESkJwcTVa?=

=?utf-8?B?clFJZVVNVXlOZEpPV3drRWw2K3dOaitPNHZjblJLbGN5dmx6KzB5NElackVq?=

=?utf-8?B?Ym1SYmZUQldqUGJPOTRzMlpXRWlrUHBuK3FHQXRvbFlrNDZTbjQ3cW12bUt2?=

=?utf-8?B?YmlOWlFPQUtjMFZpWmdtZGVWOVM0UzUzSEV2eGRXSThrVytMQkc2R0hUWEdy?=

=?utf-8?B?VWFUSlh4M002dzhVUWFlVzNiOEl4aFd6dDFWMmgrU25vd25yeVBncHBzbDJO?=

=?utf-8?B?emx2UDJRajRuV0JTcFdoZGRrdWcrQlYrQmVzdHowaUh5ejZkUittMlZJUksx?=

=?utf-8?B?a2x0dklUK0IwZUpnMU43Y2RsY09VbjY5TFRWVSt1bnp4RmNnbGl0cHlITG9v?=

=?utf-8?B?TkZRZVgrK1BWWVNnbmdZNHdqWkErd3ZvTUpMWFJEaERQRGpjc1ZCaTg1eGNO?=

=?utf-8?B?UHo5WXVVTkNZQnB0Uzg3cG85YWxPdVZlMkdsNStsZHdxcmpvMndVMTRUbW1r?=

=?utf-8?B?dTF2VkhTdlZIMjAxQnRlQlUxc3lnS2RIRlA1bFZNWG9KVWx5MkhWaXI1OE5w?=

=?utf-8?B?ZkZUdytqZlpHaGFPS3FnV3dCWnFzem96NW1qNUFJL2s5ZnRtZ29LWGRvcncy?=

=?utf-8?B?ZUtwcWUxcmo0dWY1Um5MVVMyQUs0VnBEQkw1bWc2UWQ1MWk2N3pPaXVRZHhy?=

=?utf-8?B?cStPVURGWE1EQytZL2lNa2tRYWZybHczQlNST3hCbE9kK1BnUmNNdWJPd0Nk?=

=?utf-8?B?ZWhwQlBDbzNxWTk1ZjJTSE9oM1IxOUl4N0w5ZnNwMndqTDdLTzR5Qk5FTkti?=

=?utf-8?B?VElXYmhMc2RldFowWVFLZnI2T2RlNWI0aFRmWUpyUDBENnZDczVrWno0Nk5k?=

=?utf-8?B?UStEYjB2Z3JoZG1zTmx4cExRcTdtOS9BSEI1ZXJGcjZmOTZGWHJ3L0VJN3Ra?=

=?utf-8?B?VDgyaGJYS1JER2JUd2tNaXhxTzN6Z0JIRW1hcXY3K0tXanZvNE50UjEwWGVv?=

=?utf-8?B?SjZXbWlGV1hzNS9XYngrREFiYzFEalg2WDUzM1NMQTlvSGFMVmQ1d2REU2VQ?=

=?utf-8?B?WGo3REo3aGgrNGlra0NJaXFNaGw0SjFVMVJkNHFXeHNpVmVmSWk4SkpMeEJn?=

=?utf-8?B?b2lzQVZhYVYrZXQ0eFp6cnR5bnUvZTdYSnlFNWQxNHdRVDVGOVM1cjJlN0Jk?=

=?utf-8?B?bHJ6MG1kMDdkeDAyT2dCY2Z3WGpmcWpHNG9oVFIwM3QwOUF4SlB0VzlRaHJJ?=

=?utf-8?B?a1J0dnkyTkZjUkRWSnNCQUFRZ2dtVEM1ZDdyOHNWb3k0YUhCTjlJK3NFYmgz?=

=?utf-8?B?eFdtVExMbW5WQTZUMC9jb3htMk5IS2pxZVI1UFQzaWJzRVA0YkRkWVlHdlRp?=

=?utf-8?B?OEp5L1hvdnlSQTNtQm1ybDJWQVZ4ZVRzNTRJWTBvc3dFY05ET1BTMVlxTVJq?=

=?utf-8?B?Z2NZakR3NnJQQmdzNnVqOHZ5ZkJpY21URXJhMXVRN2JYQXpaUElUT0hnVkJP?=

=?utf-8?B?OWNJczN3eTNWVmdEM3VhQUl4T1RKQ0JiakRNYXdodlBpM0p0RitGRE1IK2wy?=

=?utf-8?B?U3NyTnowVW0wdXYxekhaWE5Pekc5L3JVdCttdUthbzQ2cDdVTE5EL0JzMjlQ?=

=?utf-8?B?eG1oc1o2K0E5WGdrVW4xV05FSldHclowZ3ZlY3Z3ak15eHBEblovQlVPZE1t?=

=?utf-8?B?bit1RSs4Nm12ZE90YWFnS1lsVlJFcm04UWhUa1pQdHNMNmpxb2ZORUR1MTVW?=

=?utf-8?B?dVdBRHEyOGZwZHZlcUdSL3BhU1Z4dmhpd2NMMy9ySFJzd3o2QlQ5cHpaeWJw?=

=?utf-8?B?cHp0VG8vL1NlcEZEQXRZdFhKUVJxOHJrL3NHcXNNZnNpQkVXb1hSbzA3WlZh?=

=?utf-8?B?SUNSSm5WRi9iM2hBcEF0RDE0bEJKSmU3MDdJNnc1OVlTdlhtQW1zWnBQT0Nm?=

=?utf-8?B?SVAwWXpZdVJlMFNlcytac3lsMGhuVkx4bktOMTRCblBFOHJOZ2xSK2F6VlFl?=

=?utf-8?B?RWRBcG1mNHNVSGVDUnVRUitnSFB4UkZnN0JkVURBa1Qwb0p6bVFoMWd5UkZW?=

=?utf-8?B?VWNUbUtLdG0rRUpaY2RBSE9abXI0VWsvQjV2MktaWEY5QllwUVd5WmNVZlh1?=

=?utf-8?B?N2ZsdlJYN3FUazViQ3JBNkZUZzZReTdlU0FQbTBCZHZtSURQM3dnT29hSCtF?=

=?utf-8?B?c0pTM2d2MkcwNUZnSnJwN3FCWWUwOFFZWVd6K2RsZk8wdmt0ZDdGY3FYMm9J?=

=?utf-8?B?Q211U0JJc1VuOVc5VlljR0RCWVVqZTN4VURWS0doc0Vyb3RzMEpwREZnb29x?=

=?utf-8?B?bUpZcVFYUXNKZ0RvZzFCT0NYUWd3NXg3RzdYeWdpM0gxQkFCRnhlZHZzenFH?=

=?utf-8?B?OXkrOG9NTFBUeG5Jc1l2TjUvOEw4STBjZGlMK3dkRDhZaWZsY0pxcnB6aE5B?=

=?utf-8?B?MXY4Nzh3TVR6bWFTdnltbjN2dkEwWkpXVEtTMC9ENTVNVHBNeWZieVZLSmJ4?=

=?utf-8?B?TEdsbzMxdjFvaE9ZQ1hVZkpxRWZSSE9icFZNT2JZdFpmVnZhUWt5RFFQd284?=

=?utf-8?B?Umc5bDZQMGl6YjFCbnYzaitMNVJRaWVJcGpxR21VdlNoVFdOaEs4cTdJWm1T?=

=?utf-8?B?ZGRVai9MNHJQWHM2OGtZdGJxa2MwampyUlFFdUNXU2RWNWRMSlcyRGVEWkdh?=

=?utf-8?B?R1JNeHZ6YzdoUVFuM3FyV0o1cXF4ZGF4SzFzS3NrbktRYmdLZnF0UXZuOHdl?=

=?utf-8?B?WFM2REFBRnJLSkpQeSs4a211QW9MRXBUUGZaTVZQTXFoRDhkUzBCd1BselB2?=

=?utf-8?B?UnVYOVYwZXlIWjRJVXFRc0NYb2tPOXp0Q3VJaHBZREwxaXVlaDVpY1l5MjAr?=

=?utf-8?B?c0hsYlByZElkNDlZbzNaRmdqaTFKYk9pS0hqeWdGdXpmWWtRMVovc0Z0U0c5?=

=?utf-8?B?MUhBaHZMT1V6aHphcjB2elJkRk0xRy83aG42VitIVkx6bHoxNGlhbjYvMUts?=

=?utf-8?B?bUkxbGNhWDcxRnVNRy9QbzZLcDdlMDhZS2tacXNJNnZMZ09tby9UTlRkL3V0?=

=?utf-8?B?YUNDdzIvK2MzR3FMYWU0K0krMzk1QXE5aHNRUFhhZFhrMWRJOTNCcm9TMVlE?=

=?utf-8?B?OG1VZ0Nxc1c3cU9pdHdXWWpOdVVFQzl3V2Q2MHd0M0FsNEluMk9VU3UreStV?=

=?utf-8?B?S201cE1GZC83dDhVOEtIdzF6cFI3RjJURGpsendLVVp1QVRCQy9DVWZaZmFG?=

=?utf-8?B?dmhLd2ZPcE1FQ1hwRnc0L1hSTi9UNW5HUzRJTExFQUZGTGljZVJjY3BadG9L?=

=?utf-8?B?Y0N0ZnkxNG9GbXdGQW8vME9uZlBrWkpLbFIwdWRWRmRESDFzVEZhZkxvQ1Ew?=

=?utf-8?B?ODFIQlVZdUw0MFNIQUVNZ1llTEZEemx0cWJuYWtWaFVFdTIyOEtUeFZ5U0Fn?=

=?utf-8?B?cWJkMHNhY1Z5SjdxMFpyNERVZ1A5WDRpWFhxajZMYWpnSWtjMmxhYkl1RUZB?=

=?utf-8?B?L1BRUFBGcnpQV05pMmFZKzNodU9hejFTd2dTd1c3Z294ZG03Szc2VWI5Rmhw?=

=?utf-8?B?MDBKclpUSTc5VUdtY0xkVTFrN0xRdFdxMXg1WWlJMXF5R0RzK28yOEVsaFl5?=

=?utf-8?B?MlhoSEZ2YzZqTUM3b1FmelhRRFFXYkFGR2tEVzdLaHZCb2xtWUs4cUV3M0hX?=

=?utf-8?B?bWRTdHFEVThDdTVBNHBMbUl4S2NsVXhqa1I2cU9ubktxV1NMK0xLL2tsSmlB?=

=?utf-8?B?K2xBUmJjZjJwV29KSzdXTThmdS82MmtDSnJJZ1puV3dYdVJ0UmY0cTRVamhy?=

=?utf-8?B?SVZuZjF0MTRUTHR5bEo0M21jMnFYTkJtLzFmUytuamJ6UmN4aW5tWG92VytI?=

=?utf-8?B?YjVlVWxQTFJWMXI1dXExcWhkS3MxVzRCRTF2TXhrSFZjZ3dudTZTWUgyQTZw?=

=?utf-8?B?YklYeW51ZUdFY0YyUFN5Tkl1dVkwTzAyYkZldWNudWxiYkRUSWdoT2VtN3Vs?=

=?utf-8?B?NHdoWVYwVDMvQmdaWmZja215cVdvdDl0aGtHUzdudUxPc0p4M0cvYXVLa0ZD?=

=?utf-8?B?cXRkS1o0bnpDd016RlhzeU8vRVFOcytCS2RkUUxLMWQ2RXRCMHdPZTNyTXBs?=

=?utf-8?B?Tm1MTHpIVHhpcjYvYmJ1OVpEWmQ2Y0VsVTRyZ3JIQjhPWXIzZlVZQklJUU1o?=

=?utf-8?B?TEdwbktkMzBvOVY1RHZvcVNUbUFqUnJNTkxNVkwvTFhFUndETnhhZ0diOVBP?=

=?utf-8?B?S3poMEFTMWlHSXFRWDNVQ2pKSG54ZWk0VlJrUk1IQm1ITHJmbnIvbk1RWVJ2?=

=?utf-8?Q?vgoa/RH3UrbQT8l6gga4Jr6wQaasc=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jul 2026 16:20:51.5991

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 099c12ee-60dc-41dc-88d7-08dee356343b

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: DB1PEPF000509E9.eurprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR18MB4000

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Payment Confirmation – Bitcoin Order in Progress

štvrtok 16. júl 2026 Dear Customer, Your PayPal payment has been received

successfully. We are pleased to confirm that your Bitcoin (BTC) purchase

request has been securely registered and is currently under processing.

chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 16 Jul 2026 13:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkS6S-0000000049C-2tmI

for dave@doctor.nl2k.ab.ca;

Thu, 16 Jul 2026 13:50:40 -0600

Resent-From: The Doctor

Resent-Date: Thu, 16 Jul 2026 13:50:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m83165.xmail.ntesmail.com ([156.224.83.165]:64310)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkO7f-00000000Ess-0854

for sales@nk.ca;

Thu, 16 Jul 2026 09:35:49 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_361637_1456111781.1784216081345"

To: sales

Reply-To: mira@cxwic.com

Subject: =?UTF-8?B?R2FOIElDIGFuZCBhcHBsaWNhdGUgc29sdXRpb25z?=

X-Priority: 3

MIME-Version: 1.0

Received: from mira@cxlqic.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Thu, 16 Jul 2026 23:34:41 +0800 (GMT+08:00)

From: Ming

Date: Thu, 16 Jul 2026 23:34:41 +0800 (GMT+08:00)

X-WM-Tid: 0a9f6b90d3b9d0c1kusybd3ab79873c55

DKIM-Signature: a=rsa-sha256;

b=I5q/pZ5p7hwZa/IaNDAg4jPD+sGX/8VV4Gk+Zfd5Re82K1Fo/eSQHuITBG3mZlI2DMPdwyPT5kLF+llw/NBNpjFMseqIcX8oTxu6inDrkQ1sg+2DpXk1glx/PRE+wSKZl0M3BiNekl7HUzZ3MvWSBfnDskEAXZR9OOoktWa9CII=; s=default; c=relaxed/relaxed; d=cxlqic.com; v=1;

bh=+r15ABoZvGXbzBe0d+2kXeVM4vrH5AhllATvfiZ8wkY=;

h=date:mime-version:subject:message-id:from;

Message-ID:



Dear Sales





I hope this email finds you well. I am Ming from CXW technology, specializing in power management solutions with over 16 years. We are professional in AC-DC and DC-DC chips, including GaN fast-charging. Our products are designed for applications like mobile fast chargers, automotive usb charger, and power adapters, delivering reliable efficiency and effectiveness.

We provide highly competitive pricing and direct technical support . If you're exploring innovative power solutions, I'd be happy to discuss how we can assist. Please feel welcome to reach out for more details.



Best regards,

Ming Zhang +8613243767986

Shenzhen CXW Technology co.,ltd

www.cxwic.net



Web/SEO/App spam fro Microsoft Outlook Part 2

boundary="_000_SE2P216MB2686553A656DDF17BBE2140EEFC72SE2P216MB2686KORP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-94596.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB2686.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: bbd26ec3-6223-4672-72ac-08dee34b84ac

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jul 2026 15:04:22.0587

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEWP216MB3027



--_000_SE2P216MB2686553A656DDF17BBE2140EEFC72SE2P216MB2686KORP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



Still happy to share my previous note about improving your search visibilit=

y.



Would you like to review our proposal and pricing?



Kind regards,



John



From: john wordin



Sent: 23 June 2026



To: sales@nk.ca



Subject: Re- 1st page on Google?







Hi,



Rank #1 on Google and transform your website into a lead machine with our e=

xpert SEO services.



Want details on our packages? Let me know!



Best,



John



--_000_SE2P216MB2686553A656DDF17BBE2140EEFC72SE2P216MB2686KORP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>





Hi,



Still happy to share my previous note about improving your search visibi=

lity.



Would you like to review our proposal and pricing?



Kind regards,



John



From: john wordin



Sent: 23 June 2026



To: sales@nk.ca <sales@nk.ca>



Subject: Re- 1st page on Google?



 



Hi,



Rank #1 on Google and transform your website into a lead machine with ou=

r expert SEO services.



Want details on our packages? Let me know!



Best,



John









--_000_SE2P216MB2686553A656DDF17BBE2140EEFC72SE2P216MB2686KORP_--

Web/SEO/App spam fro Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 16 Jul 2026 13:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkS1r-000000003uv-13qJ

for dave@doctor.nl2k.ab.ca;

Thu, 16 Jul 2026 13:45:55 -0600

Resent-From: The Doctor

Resent-Date: Thu, 16 Jul 2026 13:45:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011035.outbound.protection.outlook.com ([52.103.74.35]:12317 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkNeH-00000000Cnl-2VI1

for sales@nk.ca;

Thu, 16 Jul 2026 09:05:28 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=xvWAXRnY+xpLPRXHfHxIYcFSHPoBLUjCOKtcDBfUyzAiKVXVKGumntbOFw+jH81mbuUUD25dv7xHNx6easjjYCaAI1jxKiV1xX3QRH6Ns7LGvnaE5vS9UjmMA2v3WSVlewJBSo6OPgLIGe/VS1/JvSjXhcBANV2IjVKrhz9XryPOgzbGkMXr1NkNdo3eX/WLHM4lP2rVanJxJQLQmqB+CQZXh1smpT0hL02d21zsaVDmGpN7k36XsLFg3AuBSKj6QzhTkqPmrb4XKQ27VFZK3TTFRXovNUGx+6p4DtRYLz6dL9/dbvvZYGdYanx2zAxZYkh4WPU9P/TwoexFY5U3Jg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=HbUxjf5DS318++siECzXhrmvXqxAXcRYQSlKax9FRjQ=;

b=OwREbax4iDLSlswROZyDOfNqUxjfGH81337EWRAnoN+5YGjkDkgBTreSQ8a2SmXQxFs5sd8fJfqrziHdcLmAESK+tEYrMp2mjFzdPtljG/LLCPYM7noAWjNoFGrwLeYtjOUigovbB2TXxvzI8x1kDDhQ0BkULSztcVMAsC7zSaIYKMDzQaHtjkl2YZYz3J6xrhvdZdF51CFBUPWzqOpuayYcVImvXCc5uhs9wMq5ZZOHB17yXKUObvqe7CB+WHcrvKhQF90iHf+2dSBQt7zjUSzFRoHy03sVVurDpeTNt+DmnvlGsdH75VzAVgojm2MFfsD9hgxOagf33OpZAeQtQg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=HbUxjf5DS318++siECzXhrmvXqxAXcRYQSlKax9FRjQ=;

b=vM7eagMpKcjfJPBeu7mTUay3bNogtAZBIDzINjnihrhU42LhDPj/ME504D5ZRoFzpruiVjrT9TKcmrZ9YrG72aLlm5jxlh6wQ6dfRQ+fJ1Ykw32C492CiRQ7AWHGV4gSjxTyJ9OW/zLcsfuDONRkbDCoN4zQavAdCNgZQfA5SlsfYgE/eMko7QXSFJw45jIhxA/86TfFPkxwNbJa6kPsNSRKK/4LVxKslQGre+9PUtBH4Krpe32nHIN6P/86xAAkVllf4qjfnUNQpP7j2HgJtMNx++1h8tb6Q+u66ppgm862b/piR6vfX4D+AKcQuJ/u0Z64ef2P/jb9GSv5aiNbAQ==

Received: from SE2P216MB2686.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1c3::12)

by SEWP216MB3027.KORP216.PROD.OUTLOOK.COM (2603:1096:101:296::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Thu, 16 Jul

2026 15:04:22 +0000

Received: from SE2P216MB2686.KORP216.PROD.OUTLOOK.COM

([fe80::97d3:8724:e45e:2da4]) by SE2P216MB2686.KORP216.PROD.OUTLOOK.COM

([fe80::97d3:8724:e45e:2da4%4]) with mapi id 15.21.0223.008; Thu, 16 Jul 2026

15:04:22 +0000

From: john wordin

To: "sales@nk.ca"

Subject: 1st page on Google?

Thread-Topic: 1st page on Google?

Thread-Index: AQHdFTRiNHKN+ixImEiwuYkjhUGMwQ==

Date: Thu, 16 Jul 2026 15:04:22 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB2686:EE_|SEWP216MB3027:EE_

x-ms-office365-filtering-correlation-id: bbd26ec3-6223-4672-72ac-08dee34b84ac

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|31061999003|20031999006|2604032031799003|704163111799003|37102599003|19110799012|45011099003|55001999006|16051099003|8062599012|8060799015|39105399006|38102599003|25010399006|4140399003|15001099006|37011999003|5062599005|24071999003|40105399003|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

=?us-ascii?Q?bsXQTTfQCe3Cf6jfET5EW5gJz59pDqGGETVjn9Jpygl8zQ1KjW/beLWZ0nnK?=

=?us-ascii?Q?ipumDpFP4QNNM282KEhZU+jSLfZMi4FTBHOI+bALpCawlMgJdcJzeRvadTss?=

=?us-ascii?Q?7VX3SaxmeKNr1z/dKC8g2G5CHbwAyPcxTs+QY9E7nnT10TgqLOwRPVMQS/UX?=

=?us-ascii?Q?KoWJDPDYLuz3tbczA4S4D/21/5+ozbfX5SEODWOy5KT+XHdxAC7JHd8dw2Ud?=

=?us-ascii?Q?/pvVG7YAvKi/hXKu+A59VMNBTt3PaBSGGSMBAVpTZsvVaHkoxgqHZRAbQzcO?=

=?us-ascii?Q?5HOivgRHR1Tv7iRZde1vSyfJr6Ej15UAg+4QtLtEeGcWCVnRjBp0IAyNrvaE?=

=?us-ascii?Q?jcqqTlk4aAOyae6VUDhA4lrD8dMUR6ujcFf57ntxdS5T4WKqJoaee0sQamuA?=

=?us-ascii?Q?MmFFSAdlslum1nM9STnRWYcpodmAeIz23lf7ELBMUGTHUJHzK9Mw9zplbdJ+?=

=?us-ascii?Q?3SLFFZzyce/6Jjo/AQEEVdisoGdRYj4pRWDgtTiTnllFfMfT7Q6Gcrw8lYvT?=

=?us-ascii?Q?u9LOCSRupWFdZ4ZQIE7DV3RAD/48pxPfsZAg0Sa1QpEgoqwDfxYBDDmUetNz?=

=?us-ascii?Q?rRjLvAZtpeOUpBYsSVb+OmXwr2iW9zhiI9qz60LPKEDhBeeg2pnyF0SBiGQM?=

=?us-ascii?Q?vOzWUMJ0P5yWCZedbRYIwUgx8anU3YZlYY9eBR5Am5h68AB3QnM7+o4wm7HV?=

=?us-ascii?Q?ABfvbsbdYO5b+p0y948vjrfvjDXutdvpqG8hOYcwxsceCu/JaPJ6SsAKeXpc?=

=?us-ascii?Q?pdkhrh+5hLdNYX3PX+NVbY6f95UPYUyLoB1kIH4Z928wFfss+8LBaDQ9lWyd?=

=?us-ascii?Q?FbT5jNuFi0Pa4NeyFl1FVepz5Geh8Fx+RRb9ShoPZAvo3E1KX0vB1uHzjkdq?=

=?us-ascii?Q?aJKzUzQMGB1sBV9scrQRuJcq8Sj1vgCozz6vAZ7UCnYkD/KP2MfJYU4yBixO?=

=?us-ascii?Q?g5KkPbqkgkrzAW1U2CwfJfYYG/2zQqeB2MIcOsp4etS5PYDI8DSKGwMzlBgh?=

=?us-ascii?Q?/4d00MmGWsFHPOOyB0jXereOWh51F4bq7cBkBpVjP7z6v9N4O6paxLT5M1Y2?=

=?us-ascii?Q?HSBJAjdzxKXDOTlZeBgWqlj89+R48QLf8L83tStsAhAyjtZ6Sywo7oKOddA6?=

=?us-ascii?Q?iSOHL+5VyQb0s12wPqEcnZAAVG7/uuuH31jzN2eIRztW9UH1RXYAdJ7UZqgK?=

=?us-ascii?Q?8+LFs8rqOG+VUun3MUiq3HsejxyKhIAwIb04MCj/TO4Dj4EtC0SyEasii37j?=

=?us-ascii?Q?t93hf1BGrbNvZ4AIkhjdztjOHBD/Il1QhHNbVdsTWVCS5ofK0P5rowfW8GDr?=

=?us-ascii?Q?uFHNH3Ymck9nEB9V7ypnNUqW?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?eYpETXclgp+qEHs0dtBROBIel6mL03nNtM7WGfjz1+kmlg9yiHF5TF85yGk9?=

=?us-ascii?Q?o3hg28fRrJkpRwOydO/hLuyJVSke8fUMXCaN3hb8E2UJpYBCnP4uAVc3UBbf?=

=?us-ascii?Q?Ao9QEn0MABh6iBvNuv2XDeMdJS8oYgb2369osFmXEtxKvh8hd5MhR7oE2faR?=

=?us-ascii?Q?rRG92hcS+EWPRL+HMVMj1Xq3Z5XW1n7EI9VPIywNTNdtC9ynitVifO5hJeYn?=

=?us-ascii?Q?Fcr1Zkj3nQwE1LSqB3kp2x4ItnSAHyvNWD+UA1hgfiyooI1NTU13scN+rABc?=

=?us-ascii?Q?LmeU//WzX29AtwQcS++NOBcpIvX+k9pH1jVeriX49Av/Av/hblLgvTnCS/03?=

=?us-ascii?Q?65WZqUxoCDZybmvujJp0s61UTiN1Oa5MjNtRmO20YOeQ/0JrFNkYd+zhRNy4?=

=?us-ascii?Q?BWerkL3w/sMhLMwlnttykkNWSGobyMjKj3Dtg0KfsQVDrlLPQQce59id04oO?=

=?us-ascii?Q?a1KE296cAsiUYmVxGXx5QXf9q7RkWky3/qgDFDiVl5+ONteOUM91xJUluxtl?=

=?us-ascii?Q?3kFJfgHQCBsjsB+uyEjAZg5DKdY4+dWRPnzF2poa/rLwE+CkHhptLIvQzUFp?=

=?us-ascii?Q?+wNgqLi5TK3pUWeLFoR8xrAvyLaCcvKl5kYQssei2ZVNrXUCrwKNsgtcW5m4?=

=?us-ascii?Q?gUE63iVGfkcYIxKSPo812Nh3DO+pBC9ohhpKwp7VeUR1PaTm719t5cCgDtaA?=

=?us-ascii?Q?Y3dotHkKbjaDOsecjWOfF2tS6UZCXa/Tiu/pjJ1QHi6OML90M+hZxXhJELMp?=

=?us-ascii?Q?s8JA9YMGDpspR/1uNNBD5jppmIbZwZL8iXbElUoMeC5v5aY1iH8JV0Pcmhyv?=

=?us-ascii?Q?2uETDKcmYG7LCQd4a7IcB1fDmcKgqDSaFDG2VXcoWhjEJbLFAw6m6CIHELNr?=

=?us-ascii?Q?sbQoK9dhLdpZrIzOcFls1R0YCvY9h4jW+cnpNbO2ZBGbYCXnwrAUsRGtumZs?=

=?us-ascii?Q?XVfuKCKowK0tb/YMkNSWZJhvbFzdPhg1wYGayoTV2HFcNZdW3sqS5Nnawd6L?=

=?us-ascii?Q?9PkK33d6tCSAvWi1X0+OgPNywTbhaZT8EpmenjFCs6pZ2Pcxuo8s/WnQMx+6?=

=?us-ascii?Q?5O6kP/AT1mgOmGRpl7AomRfEyaP2OPCsOKbWvpuDgOeJjrhEkpBnfcek4XOU?=

=?us-ascii?Q?lBHIulMJoFNN6kfzzxp0MBLcB9vt3X9djzUqv22zvDPjbDGm/M/JgRSvWbG6?=

=?us-ascii?Q?VgO39LUbXxfHyp9Vri/WELG7NUBTjEob0rdiaNbxR3WLznXiwmZWe228iMI9?=

=?us-ascii?Q?O1n+WE9DY6NeewX6eXZv707XrKW0Tu6XnP3CatYoh0A0D/XXmmU4n6i2STEP?=

=?us-ascii?Q?4I8N+awFOrEaiaBdS8FfP71wUc59kcBvn0j8o5YCzAF+T2yzxLDHzYWwUhZ8?=

=?us-ascii?Q?+44Ti58lRYj/TwSz/rs3oTjuCdrBGeoIPOym30p8Ls0HxwRajQ=3D=3D?=

Content-Type: multipart/alternative;