Interactive Brokers Canada Inc. Phish from Google Part 2



--===============7663254281958774036==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



[Provincial Compliance] Unclaimed Property Act Audit - Dormant Status Prevention Notice



root,



Under the Unclaimed Property Act and equivalent legislation enacted in each Canadian province and territory, financial institutions are required to identify, report, and remit to the applicable provincial authority any property held on behalf of a client where the property has remained inactive and the client has not communicated with the institution for a prescribed period, typically ranging from one to ten years depending on the province and the nature of the property.



Our records indicate that certain risk attributes associated with your account have not been updated within the prescribed review cycle. As a result, your account is at risk of being classified as "Inactive Custodial Status" under the applicable provincial unclaimed property framework.



PROVINCIAL LEGISLATIVE FRAMEWORKS GOVERNING YOUR ACCOUNT:



Ontario -- Unclaimed Property Act, R.S.O. 1990

Section 5(1): Duty of holder to report and deliver unclaimed

property to the Public Guardian and Trustee after prescribed

dormancy period.

Status: Pending Investor Acknowledgement



British Columbia -- Unclaimed Property Act, R.S.B.C. 1996

Section 4: Obligation of holder to make reasonable efforts to

locate and contact owner before transferring property.

Status: Pending Investor Acknowledgement



* Alberta -- Unclaimed Personal Property and Vested Property Act

Section 6: Requirement for periodic reporting and remittance of

unclaimed personal property to the Minister.

Status: Pending Investor Acknowledgement



DORMANT STATUS ESCALATION TIMELINE:



Phase 1 -- Current: Account flagged for risk attribute review.

No restrictions currently applied. Client may log in to re-execute

the Investor Acknowledgement and Investor Information Statement.



Phase 2 -- Administrative Notice (Pending): If unremediated, account

classified as "Administrative Hold -- Dormancy Risk." Certain

administrative functions, including address changes and withdrawal

instructions, may be restricted.



Phase 3 -- Provincial Reporting (Statutory): Should the account

remain unremediated through the full statutory dormancy period,

Interactive Brokers Canada Inc. is required by law to report and

remit the property to the applicable provincial authority.



ADMINISTRATIVE CONSEQUENCE OF NON-ACTION:

Accounts classified as "Inactive Custodial Status" are subject to administrative restrictions, including but not limited to: suspension of trading permissions, restriction of fund withdrawal capabilities, and suspension of account profile modification privileges. These restrictions are applied automatically and may only be lifted upon re-execution of the required investor acknowledgement forms and confirmation of current risk attributes.



The remediation process is straightforward: log in to your account, review your current risk profile attributes, re-execute the Investor Acknowledgement and the applicable Investor Information Statement, and confirm your contact and residency details. This process takes approximately five minutes and ensures that your account remains in active, fully operational status.



Log In to Re-Execute Investor Acknowledgement:

https://www.sgy56.com/?UBwQqknGjUB3FYyBItEyNbuD



Interactive Brokers Canada Inc. issues this notice in compliance with its statutory obligations under the Unclaimed Property Act and equivalent provincial legislation. This communication does not constitute legal advice. Clients with questions concerning the application of provincial unclaimed property laws to their specific circumstances should consult qualified legal counsel.



Yours truly,

Interactive Brokers Canada Inc.

Provincial Regulatory Compliance & Client Asset Services Department



_________________________________________

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This message is an automated statutory compliance notice issued pursuant to provincial unclaimed property legislation.

Please direct all inquiries through the Secure Message Centre within your account portal.



(c) 2026 Interactive Brokers Canada Inc. All rights reserved.



--===============7663254281958774036==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



...



--===============7663254281958774036==--

Interactive Brokers Canada Inc. Phish from Google Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkju8-000000006G3-2ILJ

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:51:08 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:51:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-05.xibeiwuyuan.com ([35.217.121.166]:52757)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjXz-000000005HH-1aDz

for root@nk.ca;

Fri, 17 Jul 2026 08:28:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=mail-05.xibeiwuyuan.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=support@arylzy.mail-05.xibeiwuyuan.com;

bh=JXHyAClXl2+s7ykU2WjB4IiHhZ2B9vuviNKAkO0cH5Y=;

b=gWLdnmCXYQ94P9FurwCL3l5o4fDko3Cm6lZY2pCdUs1haVEr8fmsJRkGdRts7fA9opH88TclHUmr

aTYhHQKZJsgT3GqFOum746sDbz1NPTpw2yk7r85yZCJD5mFx/RHDTVJL8pe6QsCOpFnLP+SEEP+Z

B/afdxLYu8pVSNZzm1GZZ5gP7WP1SS1EcNmldrYXEMYaeKsLCTPbN+qhJJP5RrDaLXMjEOfVXHTa

mNFT0h6IzxZBIaCjQxqGBytSWjv1mNAU6LJ55o+Dq3pns+NepuLcemx/deLQY0hd/oat4r1G+I0b

hovuvUXS01bQYqkeApTy1SoynmPukmQFJO+6BQ==

Content-Type: multipart/alternative;

boundary="===============7663254281958774036=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi0LigItL4oCLUuKAiyDigItT4oCLdOKAi2HigIt04oCLZeKAi23igItl4oCLbuKAi3TigItz?=



To: root@nk.ca

Subject: [Provincial Compliance] Unclaimed Property Act Audit - Dormant Status

Prevention Notice

Date: Fri, 17 Jul 2026 23:27:26 +0900

Message-ID:

<178429844690.4434.8614784123142187425@arylzy.mail-05.xibeiwuyuan.com>

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [Provincial Compliance] Unclaimed Property Act Audit - Dormant

Status Prevention Notice root, Under the Unclaimed Property Act and equivalent

legislation enacted in each Canadian province and territory, financial institutions

are required to identify, report, and remit to the applicable provin [...]





Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.217.121.166 listed in dnsbl.ahbl.org]

[35.217.121.166 listed in dnsbl.ahbl.org]

[35.217.121.166 listed in dnsbl.ahbl.org]

[35.217.121.166 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.217.121.166 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.217.121.166 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.217.121.166 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.217.121.166 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

[35.217.121.166 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_EQUIV BODY: mangled equivalent

2.3 MANGLED_HERE BODY: mangled here

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.217.121.166 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} [Provincial Compliance] Unclaimed Property Act Audit - Dormant Status

Prevention Notice

Interactive Brokers Multifactor authentication phish from Google Part 2

LOSS LIABILITY AND INDEMNIFICATION NOTICE:

Please be advised that clients who fail to enrol in Multi-Factor Authentication by the prescribed deadline will be deemed to have assumed full liability for any unauthorized account access and consequent financial losses. In such cases, Interactive Brokers Canada Inc. shall be fully indemnified against any claims for compensation, in accordance with the provisions set forth in our Client Agreement and applicable CIRO regulatory standards. Clients are strongly urged to complete MFA enrolment without delay to ensure the continued protection of their assets.



The enrolment process takes approximately two minutes and may be completed entirely within your secure account portal. Upon enrolment, your trading and account privileges shall continue without interruption.



Log In to Enrol in Multi-Factor Authentication:

https://www.hcddm.com/?tcxAxN4j29Qn6rZ98VEoN9F7



Interactive Brokers Canada Inc. is committed to maintaining the highest standards of cybersecurity and client asset protection. MFA has been demonstrated to prevent over 99% of account takeover attacks and is an essential component of a robust security posture. This communication constitutes an official regulatory notice. For questions, please contact Client Services through the Secure Message Centre upon login.



Yours truly,

Interactive Brokers Canada Inc.

Cybersecurity & Regulatory Compliance Division



_________________________________________

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This message is an automated regulatory security compliance notification.

Please direct all inquiries through the Secure Message Centre within your account portal.



(c) 2026 Interactive Brokers Canada Inc. All rights reserved.



--===============2348890638342255397==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



...



--===============2348890638342255397==--

Interactive Brokers Multifactor authentication phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjtz-000000006FL-3b8t

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:59 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from eqhwz.com ([35.217.92.132]:37455 helo=mx02.eqhwz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjXJ-000000005G0-37gN

for root@nk.ca;

Fri, 17 Jul 2026 08:27:41 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=mx02.eqhwz.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=tech@qogjbt.mx02.eqhwz.com;

bh=Zuwvw2PO9GLJIjcIKdhq6K+k598Z9gLCoZ8NAm+1tYo=;

b=IZm9ej6AxmdmRwpvH5Depqh9cy3aKmyFpLbOpQcrtqa1S4hrO2XfnBtCeS+E4aKF1O8RSikn34AQ

gxcGEL2kZoD8oL4sArKGopjvXRPOUuaz4ZkvEcb/CsHPLB7Z+Nyxs8+r/0WNZNb4jpOCVv0itlGl

fLuXblmxOWkJKpM7VzM0dkilRoerFYvKoXUdrGp5Yshn3TENVBUV13z1MAQiJfVE2GmDdWMnC4xH

HAfRdQ+mAM2XiCY+Xvt3qnbQCWTaZ2slu0mhiF6ISP98SvEpxbvlWdUgy3TVMW/LT9s/qEWE1LVZ

f921ZIa9vWXkRlb2Z5BwIJiBD2O9RLd5vsngDw==

Content-Type: multipart/alternative;

boundary="===============2348890638342255397=="

MIME-Version: 1.0

From: IBKR Statements

To: root@nk.ca

Subject: [Security Mandate] Multi-Factor Authentication Enrolment - Trading

Restriction Notice

Date: Fri, 17 Jul 2026 23:26:46 +0900

Message-ID: <178429840627.5033.16420530282242456587@qogjbt.mx02.eqhwz.com>

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [URGENT] Multi-Factor Authentication Mandate - Trading Restriction

Pending root, Interactive Brokers Canada Inc. hereby notifies you of a mandatory

upgrade to the authentication framework governing access to your brokerage

account. Effective immediately, all clients are required t [...]



Content analysis details: (12.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.217.92.132 listed in dnsbl.ahbl.org]

[35.217.92.132 listed in dnsbl.ahbl.org]

[35.217.92.132 listed in dnsbl.ahbl.org]

[35.217.92.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.217.92.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.217.92.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.217.92.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.217.92.132 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

[35.217.92.132 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eqhwz.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 TVD_PH_7 BODY: No description available.

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.217.92.132 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} [Security Mandate] Multi-Factor Authentication Enrolment - Trading

Restriction Notice



--===============2348890638342255397==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



[URGENT] Multi-Factor Authentication Mandate - Trading Restriction Pending



root,



Interactive Brokers Canada Inc. hereby notifies you of a mandatory upgrade to the authentication framework governing access to your brokerage account. Effective immediately, all clients are required to enrol in Multi-Factor Authentication (MFA) as a condition of continued account access and trading privileges.



This requirement is imposed in accordance with the enhanced cybersecurity standards adopted by the Canadian Investment Regulatory Organization (CIRO) and the Canadian Securities Administrators (CSA), which mandate that all Dealer Members implement and enforce phishing-resistant multi-factor authentication across all client-facing access channels.



COMPLIANCE DEADLINE: Within 7 Calendar Days of Receipt



Accounts not enrolled in MFA by the deadline shall be subject to automatic trading restrictions.



Upon expiration of the compliance window, the following account functions shall be SUSPENDED until MFA enrolment is completed and verified:



Order Entry & Trade Execution -- All new order submission,

modification, and cancellation capabilities.



Funds Withdrawal & Transfer -- All outward electronic fund

transfers, wire transfers, and internal account transfers.



* Account Profile Modification -- Changes to personal information,

banking instructions, and beneficiary designations.

Web/SEO/App spam from Microsoft OutLook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjte-000000006Cp-3hhA

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:38 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011034.outbound.protection.outlook.com ([52.103.74.34]:10223 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkj0n-000000003zd-2PVO

for sales@nk.ca;

Fri, 17 Jul 2026 07:54:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Q3/HD4Z8um6bnJdptBT/n+96zH+qaVeP6lSZIkR0XkLkppr8PSU8c0LXeJ76PYHvV+Kp2m2vVHB9Vstzs7YCncas31CHdT07q52ERY4zmE7J5WiDvCffPYY/SXEzYyOC4Or1chxI8M6brSMyKanQWUOEzx4rEJJmIAR/mPeMARBxuPvyTfSRpZnvNDkyiMeAwVSseCKigEVpllYFSVVF8R7kFUE3m2PIUdjwPkyM0KgLaDevvXv3MjY+VHl8czphc5K0Sy9DDiVs9RyMV+ICdnsre9/D3DESUCKCWXHMFOe8Xm4uGWIKsrEwUMuOxucQZTZAB6zm5kdl8bAbAQWxvw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=TKrqQZ9hjgMqIeEuzkA8MmoDrLag/k/5XZjw5i36v8Y=;

b=HXkQR0ABcJQVT+z5Ds36vHy1GgS5vvv0mo2vEQPDaPY8qPwmb+2hIgbOYWHyN++z9oc7nDvSZuwHjWit6K4nS3ceIgxxhttdy3Qs2WSHN/55CWt73x+zAYdqZ+sCC4MjU+KQAnJuqPg1peTxAuAOc3TngdtGfMRXaKXZY4RXKe3WJo4hkEcve8VHAqM/fRUjgTbBhnYvo6dgMXbFmXF3N3oiheYTGQHWMBx/vU7f4aMjgYkinWx8XC4HReFsInY1JU0ZYP122TkoUxIqHT/dCP9jcWut2LzddcYTEtv+Lf0K9qasAra9+0HJuAlxdJb0CB1Lq+cWizLgLu3Wtg4Umg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=TKrqQZ9hjgMqIeEuzkA8MmoDrLag/k/5XZjw5i36v8Y=;

b=pll37Kh/25vNj2mEryieZZAh24IJPIZ3jUHLwdWYn3TfP/lwE4dKxDZaw8jTuGC+GQSzp/SUImOIC4uF9Sh8yyt3f8nY7j9hI+2lVevlfCS0AfTLpRqD69vWcslv8eVY8T924VBZumQ/MNYTtsP+hj+RcZZvxdI8DwcJmOLKEdbtKFme4C8w1pBmVVpbrMLz2ecKsdUfpFWu9A1Xj9844mrVwGJtJyyBop16AI7GMGg2qNMGJNLSR4VLyNV3ndEU9cg1ylMjA77oQG65q+ERhI9SR1zkbfEd1hSliNtvbsZXQTf4FXbnMhC8WsQF0N9isSYbmIL5mhaFMZEQzgz11w==

Received: from SE1P216MB2708.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1ce::11)

by PU4P216MB2222.KORP216.PROD.OUTLOOK.COM (2603:1096:301:130::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.13; Fri, 17 Jul

2026 13:52:45 +0000

Received: from SE1P216MB2708.KORP216.PROD.OUTLOOK.COM

([fe80::b573:ec00:c35f:83b4]) by SE1P216MB2708.KORP216.PROD.OUTLOOK.COM

([fe80::b573:ec00:c35f:83b4%6]) with mapi id 15.21.0223.011; Fri, 17 Jul 2026

13:52:45 +0000

From: Jhansi Reddy31

To: Jhansi Reddy31

Subject: Re : Portfolio

Thread-Topic: Re : Portfolio

Thread-Index: AQHdFfMljOQifezBukitcRdDqjuh1g==

Date: Fri, 17 Jul 2026 13:52:12 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE1P216MB2708:EE_|PU4P216MB2222:EE_

x-ms-office365-filtering-correlation-id: 6b075e1d-55ce-482f-6deb-08dee40aae29

x-microsoft-antispam:

BCL:0;ARA:14566002|15001099006|22091999003|24121999003|37011999003|39105399006|4140399003|2604032031799003|25010399006|15030799006|15080799012|704163111799003|8060799015|8062599012|31061999003|16051099003|19110799012|19101099003|55001999006|440099028|3412199025|102099032|51015399003|40105399003|26121999007|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?ihgK2OtgkiCL2mDUkZqM2lg/psZxRP0ZFwFW5G+NhhO03tWhnR0aaisWHS?=

=?iso-8859-1?Q?COqeJfizv0ObPbwjbLPOH0nNz1GGpy8aR0yTOVIe2+PorsDxqOSd30Xs3m?=

=?iso-8859-1?Q?o4LovmUv1z1eGLNr2EHQJkKhv3WlujH0LGwf2nAQxfWZH7fiOcmTMvZM5z?=

=?iso-8859-1?Q?PKVKmJZNqcgzaNliVJPTqlTepP4lsMeOdnt/Evw57NS4Othy7vxtLt8TvT?=

=?iso-8859-1?Q?K8LIZwR8QMPX1TQF6xtwc0A26zGmQp8hBsQc05R+o1MRtvuyEUx3KqRg6K?=

=?iso-8859-1?Q?ukWcgocZm/o/oFXLJ9/0qTI+WKzmh7TUPZycO1zWOGHoVjDfNyrp+FhGcq?=

=?iso-8859-1?Q?VoSQByriXEOvC6nYrHk4AWFFyPUMp3MHReofjmsxt9AFLOg7GCsliq1gkT?=

=?iso-8859-1?Q?zVhgifR+Rop4mHkdhVICAbEolPH4NkNlLwPPdnMDNgbR05k9Ie4wOPA4Om?=

=?iso-8859-1?Q?qoJa5wEYUEgCF6/lKC//hNk4Z301LEYgvemXpPE8F+Hh6rU2ym7h4jSC1w?=

=?iso-8859-1?Q?D/JgVHBruHasHiHwH4/I1CaIWGmQ1ZOjj8cTPYnzsUP9XuwU27JUay+WK3?=

=?iso-8859-1?Q?nLesLeVRsoD+n5+u7IkRyldDEGbo5PyX8NXXaqxrrsVNRr96E23VVtK0PU?=

=?iso-8859-1?Q?m+2ZQ0LlBKE/+FLBCcwX51QufCZ7GwHSKXxZETwTSV/fAR9tDyHef+ysun?=

=?iso-8859-1?Q?U4sfaOECY/Hu664LrYqpzO7vqdPISUakF79VIGMprgLFh29GsCm2a1wWVi?=

=?iso-8859-1?Q?1q+h0Lt6maqVy5Alh/snNPZzzugfEPhhDpMQi6PJRbqnKW/YPb5jqp521P?=

=?iso-8859-1?Q?jEtL/IchqseLpk+bGZdn7qQEhzjPxcsJ9m+qg2oAOk7VPbWgPlFJnGRoEw?=

=?iso-8859-1?Q?nXEYMoip0I9LwHzOw5+uYcFooVV+F5yhBWwgllr+qSrUJdVBld3EZVHIgI?=

=?iso-8859-1?Q?pWSFB4stl1BRhZBJW4+RtY6KqOQUVX8RNilFENm/usRKepiuJrwhBW7ZIg?=

=?iso-8859-1?Q?QfoRcoBwoLwj2N8w+TdlarlR2ctMVmDWzVaUnSgpAKP9SVVVJMrHV29DQi?=

=?iso-8859-1?Q?fcbv8kE2cDZcdzA96ag+F3SjQuy5643HtX/Oixser7D3YdBMW9eCUam9DE?=

=?iso-8859-1?Q?o+8TvNXPnddEM7xsy9Mw71PFgWT07483HRL//LRSwK3Rwn83ObKB0Uaoli?=

=?iso-8859-1?Q?2zahU3iAOoWnS/+1S99Y9SZ14jn7WxMSsu1p8ESVZzJNSDkq9XtBNzAjL7?=

=?iso-8859-1?Q?EtRQZ/O3S7fwGesUrzp/JulWEcmCd80vu6Hz6YYJB4TckMnq21SZuHjfh6?=

=?iso-8859-1?Q?5A8ifFYU9sIl2zKKLu/y3uTFHTM6JhEUlrwiKVZZlw6rw3RleRYs1mf/Q2?=

=?iso-8859-1?Q?6bsmfM3mediGxGak8ebxgIlyKWHLFatJUsz3LPlXH5FmJg8B9TTB8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?XaGgssedSUT8OxxpmhtT8lkY1OHd1YrtmUmZjBc1n2l+wtsxJGrQM92B0v?=

=?iso-8859-1?Q?qNLs+AORFd1s9xrquzDP5S0S3wfkfbLAUuk+Cf0aMhpyrebLSck3zkzbln?=

=?iso-8859-1?Q?OanhHuKBneUwzYuID5gCpp6yyN/y8gUIjSfNxljtcIQpHeMrLNYn9ZKbho?=

=?iso-8859-1?Q?/TI4ijucBZss4wmXiUnGNF44Coxv1MlqRjxN7KlbBMU4qD26sqgfmWYRrZ?=

=?iso-8859-1?Q?sjA+nF7n3hkp7r2YHq6ezvBVFDSK14KgjJFoUqZV5EViGnDrDvMztiC7xa?=

=?iso-8859-1?Q?e3WMO/9yed8HjhnvySq1M1bd1LpG8lkT24MJ5amfBnhOH1HuRzODr/CEw4?=

=?iso-8859-1?Q?ofxOBMcEsCmOVVZ/z8fmRbrcT/hb1iXir7O3E4XPLfrSx+m7QSFlOyG6/T?=

=?iso-8859-1?Q?aPihmvaKBwMCAYhUxJcz9N/fEbyo1zjoqlcrpwKLP50DRgz7hDrDR+nl0O?=

=?iso-8859-1?Q?IZ86hMo/Q6I/p/lTwfQSZJ2KDKfb6huTbb6FdxvzR0ztLfRq9paRKHbfgP?=

=?iso-8859-1?Q?UEr+Bl0vhGMs6zElurvIpctBQCxjVnNmKInZ1RNGPfNxEYMThJE4wqKEAW?=

=?iso-8859-1?Q?q/yzaYgeRt5jPpYhNLWIgVvK7HV/bSijoRkCoGR+O+2fcfEmtitbjHg/dI?=

=?iso-8859-1?Q?G60wLfqAn0x2WpsQITGixD2vG8w/k3iekGPqmQEPDBUamGHtQS8LiMinQe?=

=?iso-8859-1?Q?MlU4RbSMKMKYICUGJglJYArKmw1NxqX8XM64kdqRA4aw2B+uE7C6UJqyPE?=

=?iso-8859-1?Q?7IBS+EpGkzWMNYn6xBCr28OMGeNFza8xB/wVL9drwHmA8kE/a7ymppQGzM?=

=?iso-8859-1?Q?lNVkBt+N7OuO54RTgkpLQCjGWhwO3hpB/CpdJ+G1FewH9d1p65Q3xQLXUf?=

=?iso-8859-1?Q?sW/ynVy12Eh/Fu1nx0qYsXDcBCidP02tBl4IZj2j5zexmfhVZn7epXUTnH?=

=?iso-8859-1?Q?OWjyDZVN2EGYsXxtoHa+/r7QTzl3JEKcnNUi5JCouRHfCjmJqb22RkQhJl?=

=?iso-8859-1?Q?t7oVnd6R3PNSBdqq5pz1HgM/Izgg5FKzkZJFwGrWF2Xcb9sXdbr8wcsM9v?=

=?iso-8859-1?Q?oys2f7jiqeC8aodFynpIKJo7jLX2Em7F+vzj38GQrxeTUrQPv0hQ4Epu79?=

=?iso-8859-1?Q?1YWc5zj+caDW44jZu28MLt3EPfhferFzOxZo9Vq+WlWQ/gJkqfrBVEgSjP?=

=?iso-8859-1?Q?Xe/Vu0nLqBLHZaUvurzBl8ySYkjC8jv2nK4YF1G8iFBaOcZSuScEJ2oJL4?=

=?iso-8859-1?Q?9l56dYslVDDttiSgc6WTOFtUzGadpy9xw1QBcC2twxmS69sQDsxWd2Uf9X?=

=?iso-8859-1?Q?lMTZrKGv9RtFz9xtJ4gLB8FveYZEY3yqQHT170vWZ2GAuSiwSOF6TBeEU8?=

=?iso-8859-1?Q?/78t8p2SQYKW34/6zdMBb9hm/41RI2cQ3q3Mr1J9LEEFbVgDmmQhTY+gnO?=

=?iso-8859-1?Q?Vjk5EGJ9QrRfj1UPiXiHtIAcpfD1uT9L4VVHq8vLmhbD0pIstPdnRzsM6t?=

=?iso-8859-1?Q?PU7tNceJk55EQe55+NAZ9g?=

Web/SEO/App spam from Microsoft OutLook Part 2



Content-Type: multipart/alternative;

boundary="_000_SE1P216MB270892A2C76F51093403198CA7C62SE1P216MB2708KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE1P216MB2708.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6b075e1d-55ce-482f-6deb-08dee40aae29

X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2026 13:52:12.3459

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU4P216MB2222



--_000_SE1P216MB270892A2C76F51093403198CA7C62SE1P216MB2708KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I was going through your website and personally checked your business websi=

te. I would like to send you a portfolio of your website. It will show you =

exactly what needs to be done to move your website up in the rankings.



May I send you the portfolio with pricing?



Thanks





--_000_SE1P216MB270892A2C76F51093403198CA7C62SE1P216MB2708KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Hello,



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

 



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

I was going through your website and personally checked your business websi=

te. I would like to send you a portfolio of your website. It will show you =

exactly what needs to be done to move your website up in the rankings.
>


background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

 



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

May I send you the portfolio with pricing?



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

 



background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Thanks



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_SE1P216MB270892A2C76F51093403198CA7C62SE1P216MB2708KORP_--

WEb/SEO/APp spam From Microsoft Outlook Part 2



Content-Type: multipart/alternative;

boundary="_000_SE2P216MB1796E0B6344F4094C53D3AC5DFC62SE2P216MB1796KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB1796.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e304bb68-4795-4ad1-79fb-08dee4062319

X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2026 13:20:14.2796

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE5P216MB3232



--_000_SE2P216MB1796E0B6344F4094C53D3AC5DFC62SE2P216MB1796KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

I am still waiting for your reply. Please let me know.

If you are interested in my services below?

Thank you!

________________________________

From: Swati Verma

Sent: May 25, 2026, 6:57 AM

Subject: Re: SEO Services.



Hello,



I came across your website and really liked the design. With a few SEO twea=

ks, it could rank much higher on Google.



Our team focuses on improving search visibility and driving organic traffic=

.



Can I send you our SEO plan and pricing details?



Thanks,



Swati



--_000_SE2P216MB1796E0B6344F4094C53D3AC5DFC62SE2P216MB1796KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I am still waiting for your reply. Please let me know.



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

If you are interested in my services below?



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you!






x_x_x_x_x_divRplyFwdMsg">


11pt; color: rgb(0, 0, 0);">

From: Swati Verma <swati.verma910@outlook.com>


Sent: May 25, 2026, 6:57 AM


Subject: Re: SEO Services.


 





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hello,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I came across your website and really liked the design. With a few SEO twea=

ks, it could rank much higher on Google.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Our team focuses on improving search visibility and driving organic traffic=

.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I send you our SEO plan and pricing details?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Swati








--_000_SE2P216MB1796E0B6344F4094C53D3AC5DFC62SE2P216MB1796KORP_--

WEb/SEO/APp spam From Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjtS-000000006Bq-1MbN

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreasouthazolkn19010006.outbound.protection.outlook.com ([52.103.75.6]:28795 helo=PUWP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkiVK-000000002GY-0P15

for sales@nk.ca;

Fri, 17 Jul 2026 07:21:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=MV/QhAvOfEbapbjYa4BZSZ7UHEWJlvzOgL/OIF8U0Pt9/ZvbqeWSWaIlkSSmdXrYllOBN61niE+ss6GSwzKBOny2rPwWo3v9KXsURvWfloZyNsJPeqrev5pvEFWmobJz7AgV9yyz0pv4kP1v0ddDw9banjrcqsUJbvn33CTkgN4ijnF4++MvBRDgilXsqGtlQoUbPvUSaB1DU8ynmC+Cs52jTPysJzMS193WsotVlwxLfImyToGw5l1eeZmA3OVj0T4ItjhBgWG2NnQNmRT8T4jxEAeA9zkvagTPzgfbn5VpKYokd2cQSoLrzk2tRX9e/9XjBfLpdv1qO5qevjb9WQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=BTXjubRtT5vhAY2N8+9XLcvjhMLS2nu6N0uaT2D8bTE=;

b=lMh/2hL0mMDWm0eRJRoLzELKuyTfCjJRXf7QNbmkry1myWLMnMDT969tnVSzioT8S/jbYfthQnw+jwdMI8VVXOB15gQMl36x25Pq7L33XW3gg8cyaoMLKVhgdIiq0zW5767ZTX+rPdtN7ezroSAbIRedVghB/dPDlG1znsyBuJLb+90xd7/3/qdqukbBnHqgPk+dHdpfR8rpJc/pQzJ5oEHvglJ0VFuv5NKiTJADlRgt9Tcms0utSEP8jShBiwdfrT5Y1BkmXOEbKwVbNTBXUtgP7ALb1koyYkC4bzGGDeBFgyilcm6JKVb3l1l1Ssyc0P/csC5uST4Z5Kn8PmhBHg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=BTXjubRtT5vhAY2N8+9XLcvjhMLS2nu6N0uaT2D8bTE=;

b=tFhGMtEI0bG8aU5laqpgJQvCwoEc2LuJJtHcgJnuuX79cRkOsq8GmcbPY3K3ZRFj1AnHZ5xS/hnLfELPkpAQapdjFT+OeZ/x6XiuEC+FgSAkdA9FGPv06icDetLk6WGXkQmN686RsV7sj2Us3S2sQEbGKm5w6yNpVLvYjTUC2NcwPVXyqmHMkD7gHG+1vNYDEoGD7iO9IuiScS9ztbULbKvbbancS2P0YxbeYnKX997W6mIlhXFah/9cQ6525rHyivIAEBC2TpSFlA+AGP/qm3+GITx7UYDxysaHFkho5qnESgBn7xOQvvPJO5aAX60rIxkmao5YsCR9XXZYtrfECw==

Received: from SE2P216MB1796.KORP216.PROD.OUTLOOK.COM (2603:1096:101:f8::8) by

SE5P216MB3232.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2fb::23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.223.12; Fri, 17 Jul 2026 13:20:14 +0000

Received: from SE2P216MB1796.KORP216.PROD.OUTLOOK.COM

([fe80::9ec8:f81:ee48:bda3]) by SE2P216MB1796.KORP216.PROD.OUTLOOK.COM

([fe80::9ec8:f81:ee48:bda3%6]) with mapi id 15.21.0223.012; Fri, 17 Jul 2026

13:20:14 +0000

From: Swati Verma

To: Swati Verma

Subject: Re: Send Offer?

Thread-Topic: Send Offer?

Thread-Index:

AQHdCvFIrfSiZb8ea0i63vK/fM40E7ZbzSFrgAtL31qAAAEruYAAAOg+gAAAVn+AAVlSQYAAAWc1gAABHpiAAAF4UoADGwXhgAAIM4CAAAL4SIAAAL4qgAYi48+AAAEsG4AABFgU

Date: Fri, 17 Jul 2026 13:20:14 +0000

Message-ID:



References:





























In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB1796:EE_|SE5P216MB3232:EE_

x-ms-office365-filtering-correlation-id: e304bb68-4795-4ad1-79fb-08dee4062319

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|15001099006|25010399006|8060799015|704163111799003|22091999003|37011999003|24121999003|37102599003|15030799006|8062599012|4140399003|55001999006|2604032031799003|16051099003|31061999003|45011099003|15080799012|19110799012|11031999003|3412199025|440099028|102099032|40105399003|51015399003|18071099003|11120399003|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?Mu6W2GZlHN4Hcvt2g0Gbxz9PwONUaTuqwky/wyEPd8LEfwT94GRBMl87Xu?=

=?iso-8859-1?Q?jMLsCYm54quWNUeWmM+8NTMa0Uh/kRD8dzFLL1od8TpSYQgOea79P1TsnZ?=

=?iso-8859-1?Q?DRLyFtbxMmx5JLgSe2l/M9xLm+Ie2p10MgYRpfA4SsPKViefEPMHlI/K5l?=

=?iso-8859-1?Q?c07C6qo1zymzRcJXojTHKwCvAQInQfOeXj9S4F/9OXMtLNPYV8v5I3PiJP?=

=?iso-8859-1?Q?br/L7B6SNqTGtt2+zNSysHPLou4T2X32jJZev1wAowm+EQ+zuVSbvElDx3?=

=?iso-8859-1?Q?FGcCvcU1hyL2ZApMl3pa2HsXFRkJKVLSwHxyt438vTYXPvt7dB4RRIEz31?=

=?iso-8859-1?Q?SfNZunpCFa5BnCgsPSJPNbwKq7rKqqr0FATjoNuhj7TgaBcxV5ziCZuCT5?=

=?iso-8859-1?Q?LpAH5rYYDtqOqSSHt1ImS9+s1kcl0C3rGyvNoKfglVHaJkEM5B7TI1UB9I?=

=?iso-8859-1?Q?V4LM9yrlklIhvUCBAMcDmEFjB/xPrQI8K71fyvQfkjfAJ60ICaScBO5WyL?=

=?iso-8859-1?Q?8vbG43DlYspCp02DI1w373055IvfAAmaN3IKgsel0jfsXcyKRtbSuU3Fzu?=

=?iso-8859-1?Q?KXSuppfm5tyH5noXb3KiX5bLUfVMmxD+VwEhRWenjw3tC26rczBzlvoJkV?=

=?iso-8859-1?Q?ZGrWGHI8jLHmlQ0mVuGHTv5WH8Z2qodD2bXE5OsVKWIzWCfZUhJ1JgYhON?=

=?iso-8859-1?Q?FP5NMPTH2ulLhh30Vmcii1RwHTG25YDE5r8nnJCcSy3F9uxfK/KjzDVxVO?=

=?iso-8859-1?Q?jQO1VfKAR62u9FB8uuiZh48FQKFjobdo2U4vf4E9oSDb0p79gr20Dz75Hg?=

=?iso-8859-1?Q?vT8B7AFAw62Oyd8rkmYLeCbbIPL7ODW9SZUYjgZULHPFRpPFu2VDYFhvqM?=

=?iso-8859-1?Q?3Fwsk28XN0UpGYzCjN02ggKxWbaXzHkxECYzEvOVqZTrXlZxqdjIydFqTm?=

=?iso-8859-1?Q?CqGHTWhVmXHw7E5z3c7cWjWRav0JIocV5AnDCouglHDAXEUtNEwnDytVHc?=

=?iso-8859-1?Q?YmtXV3Oe5e542XOyAqBnRGnr/13dEblG6IvF4hH3KpkmmM9KZngK5zu0zg?=

=?iso-8859-1?Q?zSHMgGSOVwXSWI3jITAJy0IwrNFkguLyB/BsbbNEqOcjyfjf1t+BH/m7JX?=

=?iso-8859-1?Q?SyD5sR4+ljJrEIV9S7IyAnk5O6oJBFIilBKLtzqf+0u840hXe/RMK3brbx?=

=?iso-8859-1?Q?VCtYW+UqDBbH4RFhdmWzGnfpFypvCz5SohMOXfkAanGGofbyklHSU9+A9S?=

=?iso-8859-1?Q?DJYuFQRq1SNHeXzaCwm7zpZ+GhOGff8Z/6SPrxugw4mEWenUgStwMrQnGo?=

=?iso-8859-1?Q?kpcQxDCmUvILgZlgXnETXPBHvtuIvfqF4gexfI81VVvnuGduoq4LrYVmNp?=

=?iso-8859-1?Q?X1RtKEdtpQDa0iAoOcz/hs2e3vmhz52eJl912OPL5D5hBlkeAk+GrKHA+O?=

=?iso-8859-1?Q?HXvJACmMqw4gRQy2ZY0OXqZxEzLB9I6H/OzM9Dv8K+3ZC4ffwFyHQXPZzC?=

=?iso-8859-1?Q?CtQvC/a5/PoV0HZyCVyaac?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?urn448a9Qj5YudnjxuN2oyqwAXFMXzdZI4NXQbu4E2CrFIG+H6FSfXQJ5E?=

=?iso-8859-1?Q?VA31U2UlbJ05XqX2gSMxaXAOWQiotqYNjrAZ7KGmY/LDbLj0tlbAd+GJqq?=

=?iso-8859-1?Q?E3QFeHj45/NEtrnX6anSYnTwH8GM9LIFYFQED1vuZbN7MkayKXefbtoZed?=

=?iso-8859-1?Q?FbUwHzoZtCKFBIO268Ct3c4t6+aD/WHCd1KnxvDpvqA9t32MZNDafbgm4S?=

=?iso-8859-1?Q?9EwBvIFgxGsBchv/AJiceuS0OUXzz+aZUJ7qJGVm5Ku1G2jdUuU2TOnQz+?=

=?iso-8859-1?Q?q5bvrC3TLmop4abkxf7zyawFQ5XuZg+rMSS/xLrTOzi8I1uLuiTAb4oyBU?=

=?iso-8859-1?Q?HZp1IEg2cFS+nSl8ly9Azj69lGxjShkCnd1fQtN0GpvWI0XCI7ggUyWBM4?=

=?iso-8859-1?Q?LHdDlmHB9tZt89YEddHZvoepFw6+w7cCfCpvU84oxql1v3TWEnjNr2u/v0?=

=?iso-8859-1?Q?IPAVMgKIqaNHOA0nd2HrW3q3AaMWjbvwCujed/qozQBL90AC9ViuXFJdBQ?=

=?iso-8859-1?Q?b0JBLUE0T18k73W200dGBnW1piD1MrYZKTn3IxS1x3tM9HlPa0L5DTT8jW?=

=?iso-8859-1?Q?+DmzPr34VNrpUmt6TWlgegxiU0tlgtvWrP1j2miYCHLMIx5IgwCA605u2j?=

=?iso-8859-1?Q?YQyQlI7DYOvSW1SU/toWFWNvRLxxNL+ivZNqr+hMmev6FEfNvlTvRHW3Ab?=

=?iso-8859-1?Q?iXv0pCJk+V6vJrgqNRs2taj7haw38Cqh50EgY7wxsuFc0ddHPFfoBm4y4L?=

=?iso-8859-1?Q?ILbI4b9+RU77izp6cqn+KhSe5kiKJ5w9ZLNrZ3idT6qc1/UXOp9TkVASP8?=

=?iso-8859-1?Q?F+Y1fDGZuEllgtMWk0Aoxt6v7qK/X0P1m5K/X6FEVVTWGJabmQD/lzmUew?=

=?iso-8859-1?Q?wiF/9r97PwO0p0XNfns7wBbVLGra+0mEsCcGa3FuqHX2tvlC8mp5hWaabN?=

=?iso-8859-1?Q?oNL1YXujnamY8e9soCGfMdRbab7WkFnKgzmpuJ6XgGbBu+XvvwO+8+/bs+?=

=?iso-8859-1?Q?XBXBQdAI1VMNwpfJVJJzc5UysX5e7g9EnQTd7fJBzHdaAiB2kh8rIu1hSi?=

=?iso-8859-1?Q?IcCOoCEdl4lPyIywqDW0ww/Ei/Hru5/ZSiZfVAeFso6QHVZfG3mNxkTBSD?=

=?iso-8859-1?Q?/lGwxMv7sfA6h1UhrIt+ewJKsNfNzQB129H4TfnFA2cqrAjlgr1bF/Eai8?=

=?iso-8859-1?Q?45e+sZcqFwaHWvnDc/ZaxVC6qGdt4e8SMEx5bkPxYyB8DOTqKb0cwxJewc?=

=?iso-8859-1?Q?Yk54iEXXQfyv6YnzL4pD/entvPr7+6NjFDHwKP02sZHNz2zf+vpp7IqMrd?=

=?iso-8859-1?Q?pKFje10ezwuU8p/NR1WscO7LKx6ntG1ZfhGmtxgINSsXXBviFUdSWlY43h?=

=?iso-8859-1?Q?n637khh7BXuZHX2iVCPZFBdxiNtYivNGWuuqZJA8xXxlAy5dDdp4ToE2Ax?=

=?iso-8859-1?Q?KkAcU8QBreByoAYmdyC8kZqsPzQfOeO6zXrgRcehW9tTqCaRPYM+1X0I8D?=

=?iso-8859-1?Q?KEbUl1DZ67Xb4gATCZ+vRi?=

Document phishing from Google Gmail Part 2














0">

SharePoint Portal











A new document is available in your SharePoint portal.






bgcolor=3D"#eef2f7">












bgcolor=3D"#ffffff">


























































font-family:Segoe UI,Arial,sans-serif;

font-size:38px;

font-weight:300;

color:#0078d4;

">

SharePoint






padding-top:10px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

color:#605e5c;

">

Document Portal










style=3D"background:#f8fafc;border:1px solid #dbe3ea;">
















font-family:Segoe UI,Arial,sans-serif;

font-size:22px;

font-weight:600;

color:#323130;

">

New Document Available






padding-top:15px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

line-height:24px;

color:#605e5c;

">

A document has been added to your workspace and is ready for viewing.














































font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

Document


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

font-weight:600;

color:#323130;

padding:12px 0;

">

Payroll_31986.pdf


font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

User


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

color:#323130;

padding:12px 0;

">

doctor@doctor.nl2k.ab.ca






















SkyGoo-2FemZT6Xc-2Fn1lGbnl7r-2B3uFRCBtduT-2FqQ3bNv8lQNNj9PvO9ZzCSjxdBbGfyGv=

Qbe9E2SD9eXvqg3Ncng-3D-3DMrT6_cM6xqQKqj3KI5xO9XCJRzBeObBvDoC8528rO5Qf-2FGG0=

zlJKL3HhLkU3gBOKQ6VQ0q-2FxJGsuCo8D5PswMvratO-2BVDdOMI00mIXlxAzC-2FatPncrUjU=

swESbcG6yiZVM1PyLlqOe9OTX8iUobb4onyWqD5bx9th8UER3rssdQKtu-2FeYR34BhEEKa5EGG=

ih3GR6v2a-2FYTdbWcB7PTL9JHhgfVCY4jPB7yDjVepTrKu-2FDXETzoskETT9KgUoYtfsBOQY7=

v6ZwXqIwkik8wbEh9QFEGyN8CDq0gbakmJ2iFYvE2rZi881hbaq1k2WgSb5YivF6j2uGaweO91-=

2F4y9mtQJzyLAYg8rkd32p5P4NsbwnC6ubGfHLF1ntVS9nABL9yI8-2B7E4AfYYAJeiRAVpvqyE=

wxbNpg4IsBd87Fv8A7tQOQleYQVsJw2mLyt0uTZ53mwj4M5aAe3MsusgVhRlHKEfkAO-2FxwIIw=

x0Jpg80EG78psET0gIF9Y9JD1uIaeWmyudkkVnE9OWcSuhpbNWA6i5LqlKFc4waE0h3aOaDuZcO=

NDjgC-2BC2xlre2ZPLp8jOyw-2F8tO-2FxkkF3rUAEUBjFfj1jcYwXJz8TObV-2F8TYiMEgkr8M=

hVUFykj1cFK39dU-2B8BAEJY8-2FD2usF3x-2FFHx0p3txQMJ016n2vt0CjcCduUHu15HgNo9Uc=

e0u-2B2IxEVZ69SiK4ZFNv1tTT18V-2Buy2aV7-2BG5w9Zfed4mhsU4FmaC-2BrYRSyiDptNUkb=

GvA5x0BaPogl-2BeLpSptVfUBwniUl8XwOtJri12CR2bBZu6Ms72qdTXuD2-2FgOk-2FvuzR-2F=

KwDekMEN4knE6Q2RDGSE5UFaSZPFSRp7NcVyLCEbjqA1-2FSMjvdesMZIHcBbyzgbDdlhRRa-2B=

yQXxYqBJD3HudOooy-2B1v47TQxMqfRG2l5fFnl-2FJKFcgfrnYFwiaV1WsvduWDLQkwnNexsTy=

pWX07aHNEgQxv5uhZWNWx8-2BqHIBT3HUrEE9wrD-2FCYekUQUf5ls5zTvV0XziHZNYK-2Ft31Q=

-2FApabeilbQK4bo8tqzFJvuhb7ie2GvHENjg-2FZbBtmZoJANY1MfukxjrHr7NtYXlm5i8Xyl7=

kJ-2BKF6sZHrgWM8A4XbX1DOD-2F2c4x6mjSP91PJJOuOqEMOY9B1S8ozuX3Xtod9ks1vI-2FVX=

byp9HcsmhzWSr2VgSLDmIUtwzHqTPjI3TjRQyjCDwsxv49V7cBVYnPXN3Kv7RMqgnrU64Aww4jt=

8kWPO-2BhcyGPSJfPubuwsbMKGSHyhAAWoXaRej9KtOZECSBE4CNtuAptERueyHlBOfTtUjxajU=

Xlgd-2B8hLJdQFDhBO6nWGlWR5A#?abcfamily=3DZG9jdG9yQGRvY3Rvci5ubDJrLmFiLmNh"

style=3D"

display:inline-block;

padding:15px 50px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

font-weight:600;

color:#ffffff;

text-decoration:none;

">

View Document










padding:30px 40px;

background:#fafafa;

border-top:1px solid #e5e5e5;

">




font-family:Segoe UI,Arial,sans-serif;

font-size:12px;

line-height:20px;

color:#605e5c;

">



Reference ID: A6756F11989F4294AD8256DB8CB89D713









SharePoint Portal Services =C2=A9 2026



















Document phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjtJ-000000006BQ-2LlA

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f231.google.com ([209.85.128.231]:60669)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkiEY-000000001eV-2HP9

for doctor@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 07:04:14 -0600

Received: by mail-yw1-f231.google.com with SMTP id 00721157ae682-80e24970f1dso35238107b3.0

for ; Fri, 17 Jul 2026 06:03:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=asecureltd-com.20251104.gappssmtp.com; s=20251104; t=1784293393; x=1784898193; darn=doctor.nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LPIc1xubsPsWfrtG6LpKbOayil/5FXUUg/NzNyFeuXE=;

b=xzrTeI0qXsLmPvhO64nwnTrcRmwP9dDip9c5gGtrbEu+jckdxpRkYNOtPkD2BJyTCr

PPsBMy0LORTgWGMXUpuSS+n0eYg+GC4DV+IvmTcof/CTSjp1d1hqplshHCRbBSEV0wmj

eJzzO+WmMafkv+/lRkwS42b99sMr0nwV7BfTww8fJc8MvSn6FCRO1kjViNUlyiOitzh0

yNbG9Xp1zfYRCCf+iFFSxW1tChRnNuuosuUK1LjwEKzwcmXXjmLZNsIcaOufBxIQQ61N

nyyjXTtutC7DiiRi0Jz8VmZQtOqKuZSXE1hk0h5/OxKPrz1DvKpfZgb8NBUafJ5SyQBq

67xw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784293393; x=1784898193;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=LPIc1xubsPsWfrtG6LpKbOayil/5FXUUg/NzNyFeuXE=;

b=ScxT8hl4l/cGZwNRhu6I0guFd/ziRs/xoDeU6bx5X7RDUbIebRROSq+vQ/snVSeMQ8

9K5qsLBDn4IlzL4ac8M96iO6/m5mcJ3ZdC5Fm6N73ETs7w2HKFok+W5Lm2R2Ux5IvEkQ

lnz/NzjedTszxfb3odNYZWvXrHQGb/f3MP8tYJ664pCrGj9hjd8Krg92a5g8lMuSEEGB

UMNt0n10x9jiliNrZQ38k3qb6OaOWCcvspt+rB150DtMe/Vk8Xevywn+2kUbLHRoVmzQ

QGSDxNbbXsNX//lgQD0Pk6TDMDxCJTxyNQr/fcu29pF45oqXoxdbKhBW0echShxB6gYn

v4+A==

X-Gm-Message-State: AOJu0YwTxXS2ajnu8vvoJFeZeyi5jf4Q0itpW/hMvnpQG5mxafODoLPW

oYBdcThJ3b9us3GtR3G1kGCfZMRKJoGTMOL3c0vZ9shE8/WzvLgqYzFen1necRxL+cQdtP7k+DZ

G/nUeM970tGDtNB85JLCS5KRMKEbtQgIHjreNWwY4IztCvjU=

X-Gm-Gg: AfdE7cldy7h+jMxlUd0yv3Vef1YDxcR93ABD0iOq+Dh4Qs6RTCqlko3eXleJoCIjBme

TQH68XmeAgAggVwp3dYOkqtrukn1dS5mbbBTRovuQ0rhdP42sranLLTbgNvqYPjqad6wNvTJE31

Ks55Di/J7GKNs6toedJJmJB7ap5ij2OHQSGsZe6szN3uKRLWZe35Y/Q8YhnZ0Toh+8nA97Ateye

AKWJDtCyjPC1LyJ9khiJcF9EdfVKfEAB/IL5ABJwltyKxLWkYQDG4tk46DhbetzkPp+LxYKgbde

AB2MeWTsB9MfAuaFU8kW0hIrzPBjVal8xtWV7TwDC0fLX88vlHazBHWqGg5O4cLF1WXFdmFAuF+

X8e07JGj6x8QtWg==

X-Received: by 2002:a05:690c:7093:b0:80b:fb24:4589 with SMTP id 00721157ae682-81ef22ca2fbmr7623567b3.2.1784293392391;

Fri, 17 Jul 2026 06:03:12 -0700 (PDT)

Received: from asecureltd.com ([172.245.244.97])

by smtp-relay.gmail.com with ESMTPS id 00721157ae682-81ef4258e7esm682857b3.21.2026.07.17.06.03.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 17 Jul 2026 06:03:12 -0700 (PDT)

X-Relaying-Domain: asecureltd.com

From: "Docs@doctor"

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Shared_Document_Notification_=E2=80=93_R?=

=?UTF-8?Q?esponse_Requested_-_doctor=40doctor=2Enl?=

=?UTF-8?Q?2k=2Eab=2Eca?=

Message-ID: <57b7876f-4087-0b75-d1eb-86f3b11cf19a@asecureltd.com>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 17 Jul 2026 13:03:10 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SharePoint Portal A new document is available in your SharePoint

portal.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

[209.85.128.231 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.245.244.97 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.231 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.3 LONGWORD BODY: Uses overlong words

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.231 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.231 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

[209.85.128.231 listed in will-spam-for-food.eu.org]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} =?UTF-8?Q?Shared_Document_Notification_=E2=80=93_R?=

=?UTF-8?Q?esponse_Requested_-_doctor=40doctor=2Enl?=

=?UTF-8?Q?2k=2Eab=2Eca?=

Document phish from Google GMail PArt 2












0">

SharePoint Portal











A new document is available in your SharePoint portal.






bgcolor=3D"#eef2f7">












bgcolor=3D"#ffffff">


























































font-family:Segoe UI,Arial,sans-serif;

font-size:38px;

font-weight:300;

color:#0078d4;

">

SharePoint






padding-top:10px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

color:#605e5c;

">

Document Portal










style=3D"background:#f8fafc;border:1px solid #dbe3ea;">
















font-family:Segoe UI,Arial,sans-serif;

font-size:22px;

font-weight:600;

color:#323130;

">

New Document Available






padding-top:15px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

line-height:24px;

color:#605e5c;

">

A document has been added to your workspace and is ready for viewing.














































font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

Document


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

font-weight:600;

color:#323130;

padding:12px 0;

">

Payroll_46460.pdf


font-family:Segoe UI,Arial,sans-serif;

font-size:13px;

color:#605e5c;

padding:12px 0;

">

User


font-family:Segoe UI,Arial,sans-serif;

font-size:14px;

color:#323130;

padding:12px 0;

">

doctor@nl2k.ab.ca






















SkyGoo-2FemZT6Xc-2Fn1lGbnl7r-2B3uFRCBtduT-2FqQ3bNv8lQNNj9PvO9ZzCSjxdBbGfyGv=

Qbe9E2SD9eXvqg3Ncng-3D-3DMrT6_cM6xqQKqj3KI5xO9XCJRzBeObBvDoC8528rO5Qf-2FGG0=

zlJKL3HhLkU3gBOKQ6VQ0q-2FxJGsuCo8D5PswMvratO-2BVDdOMI00mIXlxAzC-2FatPncrUjU=

swESbcG6yiZVM1PyLlqOe9OTX8iUobb4onyWqD5bx9th8UER3rssdQKtu-2FeYR34BhEEKa5EGG=

ih3GR6v2a-2FYTdbWcB7PTL9JHhgfVCY4jPB7yDjVepTrKu-2FDXETzoskETT9KgUoYtfsBOQY7=

v6ZwXqIwkik8wbEh9QFEGyN8CDq0gbakmJ2iFYvE2rZi881hbaq1k2WgSb5YivF6j2uGaweO91-=

2F4y9mtQJzyLAYg8rkd32p5P4NsbwnC6ubGfHLF1ntVS9nABL9yI8-2B7E4AfYYAJeiRAVpvqyE=

wxbNpg4IsBd87Fv8A7tQOQleYQVsJw2mLyt0uTZ53mwj4M5aAe3MsusgVhRlHKEfkAO-2FxwIIw=

x0Jpg80EG78psET0gIF9Y9JD1uIaeWmyudkkVnE9OWcSuhpbNWA6i5LqlKFc4waE0h3aOaDuZcO=

NDjgC-2BC2xlre2ZPLp8jOyw-2F8tO-2FxkkF3rUAEUBjFfj1jcYwXJz8TObV-2F8TYiMEgkr8M=

hVUFykj1cFK39dU-2B8BAEJY8-2FD2usF3x-2FFHx0p3txQMJ016n2vt0CjcCduUHu15HgNo9Uc=

e0u-2B2IxEVZ69SiK4ZFNv1tTT18V-2Buy2aV7-2BG5w9Zfed4mhsU4FmaC-2BrYRSyiDptNUkb=

GvA5x0BaPogl-2BeLpSptVfUBwniUl8XwOtJri12CR2bBZu6Ms72qdTXuD2-2FgOk-2FvuzR-2F=

KwDekMEN4knE6Q2RDGSE5UFaSZPFSRp7NcVyLCEbjqA1-2FSMjvdesMZIHcBbyzgbDdlhRRa-2B=

yQXxYqBJD3HudOooy-2B1v47TQxMqfRG2l5fFnl-2FJKFcgfrnYFwiaV1WsvduWDLQkwnNexsTy=

pWX07aHNEgQxv5uhZWNWx8-2BqHIBT3HUrEE9wrD-2FCYekUQUf5ls5zTvV0XziHZNYK-2Ft31Q=

-2FApabeilbQK4bo8tqzFJvuhb7ie2GvHENjg-2FZbBtmZoJANY1MfukxjrHr7NtYXlm5i8Xyl7=

kJ-2BKF6sZHrgWM8A4XbX1DOD-2F2c4x6mjSP91PJJOuOqEMOY9B1S8ozuX3Xtod9ks1vI-2FVX=

byp9HcsmhzWSr2VgSLDmIUtwzHqTPjI3TjRQyjCDwsxv49V7cBVYnPXN3Kv7RMqgnrU64Aww4jt=

8kWPO-2BhcyGPSJfPubuwsbMKGSHyhAAWoXaRej9KtOZECSBE4CNtuAptERueyHlBOfTtUjxajU=

Xlgd-2B8hLJdQFDhBO6nWGlWR5A#?abcfamily=3DZG9jdG9yQG5sMmsuYWIuY2E=3D"

style=3D"

display:inline-block;

padding:15px 50px;

font-family:Segoe UI,Arial,sans-serif;

font-size:15px;

font-weight:600;

color:#ffffff;

text-decoration:none;

">

View Document










padding:30px 40px;

background:#fafafa;

border-top:1px solid #e5e5e5;

">




font-family:Segoe UI,Arial,sans-serif;

font-size:12px;

line-height:20px;

color:#605e5c;

">



Reference ID: A6756F11989F4294AD8256DB8CB89D713









SharePoint Portal Services =C2=A9 2026



















Accounting service spam from Google Gmail Part 3










link=3D"#467886" vlink=3D"#96607D" style=3D'word-wrap:break-word'>

class=3DWordSection1>


style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>I =

thought I’d send a quick note to reconnect regarding our remote =

accounting support services.


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>If your team ever needs an =

extra hand with bookkeeping, payroll, tax preparation support, or =

routine accounting work, we’d be happy to =

help.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Would it make sense to have a =

brief chat?


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Best regards,
Lauren =

Smith


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>From:

style=3D'font-family:"Calibri",sans-serif'> Lauren Smith
Sent: =

Monday, July 13, 2026 6:20 PM
To: =

sales@nk.ca
Subject: Re: Do You Require Bookkeeping =

Support?


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Just following up to see if =

you’re currently exploring remote bookkeeping, payroll, or tax =

prep support.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>If it’s not a priority =

right now, no problem—just let me know. If that's the case, we can =

schedule a quick call to discuss.


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Looking forward to your =

reply.


style=3D'font-family:"Calibri",sans-serif'>Regards,

=


style=3D'font-family:"Calibri",sans-serif'>Lauren Smith

style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>From:

style=3D'font-family:"Calibri",sans-serif'> Lauren Smith
Sent: =

Wednesday, July 8, 2026 6:32 PM
To: =

sales@nk.ca
Subject: Quick chat? =

Accounting-Bookkeeping


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Hi,


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>A =

quick overview of our accounting =

support.


style=3D'font-family:"Calibri",sans-serif'>About =

us:


style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing =

style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Team of 750+ trained =

bookkeeping and accounting professionals based in =

India


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Experts in Xero, QuickBooks =

Online, and more


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Currently supporting over =

1,000 clients


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>ISO-certified and =

GDPR-compliant company


style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =

lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'>         =


style=3D'font-family:"Calibri",sans-serif'>Happy to share client =

references upon request


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Are you considering a remote =

accounting partner?
 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Best =

Regards,


style=3D'font-family:"Calibri",sans-serif'>Lauren Smith

style=3D'font-family:"Calibri",sans-serif'>


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Disclaimer

style=3D'font-family:"Calibri",sans-serif'>: If you no longer wish to =

receive emails from us, simply reply with "NO " to =

unsubscribe.


style=3D'font-family:"Calibri",sans-serif'> 


class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'> 


div>

------=_NextPart_000_0650_01DD160E.264DA980--



Document phish from Google GMail PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 08:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkjtC-000000006BB-1R6i

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 08:50:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 08:50:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f103.google.com ([74.125.224.103]:53383)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wki9s-00000000MNt-3tL8

for doctor@nl2k.ab.ca;

Fri, 17 Jul 2026 06:59:25 -0600

Received: by mail-yx1-f103.google.com with SMTP id 956f58d0204a3-667b0ced2d3so9098492d50.2

for ; Fri, 17 Jul 2026 05:58:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=asecureltd-com.20251104.gappssmtp.com; s=20251104; t=1784293102; x=1784897902; darn=nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=MkXn1VO2szHdGLho3kpArWaHUVUHDEfu/0zHD5wDSiw=;

b=oRp13+qCFGHzcgdbtZECBPxlt2zzBV1kLY32FPeQRpPI3hWqMYLbJK0ap2IL9KVTsO

DKz1+bfknQhaPnWQTUzd0Qkj+EinEZeAMAQd9ltbhJXX/7M4+gtXDAptDO/u8WrzxKV7

2C6p+jdfXL/l6pnkicRmc814tHuusRGq8JeMyp3TioweR9QlZkHrKlbXdTBygN/5ksBt

PjdjV/kBrmY472Fs3UkIeLsJZP99kYE+/7oNaP8eACmajIrV8B8y4FuukQ0Kj63g/V23

cM3i8Rkj3ip9KGB6v7xpD+Qab1j6PqApwgjbqrkG6E84y69GRPJJdXKlYVY/rJf0lnZQ

aKIQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784293102; x=1784897902;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=MkXn1VO2szHdGLho3kpArWaHUVUHDEfu/0zHD5wDSiw=;

b=Dt3lPqeqd9kqumBTd0YbIKLPpa3HaywHri19gdL7f2apEqfxd8GyxS6q9gvEwHKU3f

txjZOkMWa/v/D+AmpNKI/WtFMTZdiBjwuPXEVxprOTfH5bvsu0/ikCs1OrYJSQIeEWrq

7Qqm6yzuD2TSGEw5zRDGt5njqFAVR+GS9bcJosO6XQRiM+IN/Ve2HyREtwdB2KrEQqzV

LkZqyZmSL6au2zysuTyNKisMpRPvwiA4C+6mrH/ajIG/3eqs3FGTRAT/SOmvzeGNUJi9

XvaovcxlgQFqxJYj0AFDLvTCROkNWcf6G9vO0+7qmWVWDaHBcYJ3LxsxwHIV4oXrxuc6

IZzA==

X-Gm-Message-State: AOJu0YwykUBNqe/4NuQRH710O2p0uSUGoVWNOzDSZMvQcRnhYnQwOIOG

fIFCXZzVMrQePtSUVdszrj8S4t4o89gZ+KvtYOxkDKpo816NHanhus2yWotVFVA7uqj8nKmqFWJ

h5kXYesJcUuf2MuRGqWqISb2/SpKWQ1JY1UJOyQ7ua31rGsQ=

X-Gm-Gg: AfdE7cm2lAXkH03szWPmU4/G02LL+BbH+2e5hyhXyhlIAxaPv6OzPSRzvbdToGRD22g

MlNY8OOVAVhGgZxJpcV3e76hMYWYmi8na0qfZ5ROaOxdNJfxkGbQpkax/KM4AtC4FW3oMuEOHla

Jaw9YDfc4dGZKYB1o4wMBI/R0N18VC/f2IkX3r/W2JCVba150hN+iBz2lI3N9RPXvV9Pr8KhGdG

XN3EDGKxA+n4vEKb+xkiGGbjpn0l5EXmjzB6R+s3yUD/qkQoF8ow+WtV2gWnDT7zBHG864uQQgv

hGsZHOGIE9UZe1tepbwsuZP2WPsr9smxuNmajNDg77yH7bOtZyRpBkXWAz8jCcyVeGYYhgZyBQ7

/OPdCVHRYNDSTt+YpDdo=

X-Received: by 2002:a53:ac03:0:b0:667:bc08:e995 with SMTP id 956f58d0204a3-6683bc3851emr477163d50.50.1784293101695;

Fri, 17 Jul 2026 05:58:21 -0700 (PDT)

Received: from asecureltd.com ([172.245.244.97])

by smtp-relay.gmail.com with ESMTPS id 956f58d0204a3-6683b5483d3sm114237d50.9.2026.07.17.05.58.21

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 17 Jul 2026 05:58:21 -0700 (PDT)

X-Relaying-Domain: asecureltd.com

From: "Docs@nl2k"

To: doctor@nl2k.ab.ca

Subject: Your Requested Document Is Now Available - doctor@nl2k.ab.ca

Message-ID: <3cdc056b-5700-b5b5-2d41-ad55a73b73cd@asecureltd.com>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 17 Jul 2026 12:58:20 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SharePoint Portal A new document is available in your SharePoint

portal.



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

[74.125.224.103 listed in dnsbl.ahbl.org]

[74.125.224.103 listed in dnsbl.ahbl.org]

[74.125.224.103 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

[172.245.244.97 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[172.245.244.97 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

[74.125.224.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.103 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.103 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Your Requested Document Is Now Available - doctor@nl2k.ab.ca

Accounting service spam from Google Gmail Part 2

From: Lauren Smith

Sent: Wednesday, July 8, 2026 6:32 PM

To: sales@nk.ca

Subject: Quick chat? Accounting-Bookkeeping







Hi,







A quick overview of our accounting support.







About us:







Team of 750+ trained bookkeeping and accounting professionals

based in India



Experts in Xero, QuickBooks Online, and more



Currently supporting over 1,000 clients



ISO-certified and GDPR-compliant company



Happy to share client references upon request







Are you considering a remote accounting partner?





Best Regards,



Lauren Smith















Disclaimer: If you no longer wish to receive emails from us, simply reply

with "NO " to unsubscribe.













------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

Accounting Service spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jul 2026 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkhrV-00000000Bhf-2igI

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jul 2026 06:40:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jul 2026 06:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:55356)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wkgpR-000000008Gb-3d0p

for sales@nk.ca;

Fri, 17 Jul 2026 05:34:17 -0600

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-2caf228a910so59999655ad.2

for ; Fri, 17 Jul 2026 04:33:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784287992; x=1784892792; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=AcyQXmo7K5uEcu42v3pnNrmQgyU+6RdKZYmyoKXePXn0rbMCwvsMqGYboq8FIrNyoS

084g4sjL3bPADnVB5hWHuQZss+cY+Lw7rZdl2EDdCY1gXDezdFQ0WI7kJlXdTvTukBSe

jW85eUy0bVhwYjV4m+GvlMqvjBsxlYnvoTHEfl1SbMZ/K+bcBjD3mmqkYI5/x1ttALZ2

GMyeykqXPO1PICMHkkIga7aJ5sI7ww6LOZcbexwc4E/XKja1TYgyzRX9SsPoh7zP25Xx

RLMMGWJIFXWG1NLk0QMqXeW1/H1ErW5LehGQXu/o6IivvN4GRDeio45UQQXik5J4f3Sr

SG/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784287992; x=1784892792;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=JQUgmTcfXpvfzE3f03R8/xFlP/o9eTkvFUFP0IwQOck=;

b=HHTWwC7H9zuNrLZ04wPnO9Gct6r5mBg4/8o8TOUbihPmY2LP0b60r10ISrnaufuR6j

PVCX7mh2qpXyDNh8bCzpz1sdE525vLBquUlqphdNAmXO/Sy138+FDCRCpHVqRtGoN91k

xE4u04mfEMOXH5m2VyCp7BgNNdPSdzzrQ7xdOlRqy+mxk6oOYSPKYFKWdhr+BJXgjf5E

BEBcbh5kzSwcbhgdP5XdH/l11ON/ONMzhuSx3E9imMXXfZzWGjqhVDTMreCRXwFhbF6V

POsEugW+MSCEodi70HbFyq+BXKQKbxYArSRP+IiB8fvkzAKjdwNSGUVWa3Tc2SS4woFc

70WQ==

X-Gm-Message-State: AOJu0YxkhgfL2kLHLKRZ76kKnl4qkG2cV4sayI6lIwXXybVcNA91tRGL

E9v1pEoXtM9uyGLcu+vTAk0rESOfYYB2bCyGa3VUpivg3y/zEVwdNrzVukzg+vpHSWA=

X-Gm-Gg: AfdE7cn1Mu/f0fGnlZ+nWjwYoIgxkRnVU9RfHk0+ktKYEelEr4/1RG5w8nKjyjm41xz

eeJjkLPB1xYvIdSllxz7dcAKeLApJh9gh1c3QZXWOcw4pNPk+wxU9olF5oihJQED4ZAwYo++r/9

6RPAVVc+vnd5v7mPE05lfSQ71py0sjDE644Na30ijQPQzgmzcwYd/+09CAS2xIaaFzf8shxfAYN

KXW/ITvqUf/sBuIWYt0BnzlaAALxJfWrj1IemGsylEXOJIJXapsRE9k0x7ZxdrV7RsE1ro6dKRw

Aqg+lOxqcAjyGuKz7/wYFOuMBnUOpB+D7cR0BpVJ6A88/85KannL92dNI8vrvgdVAEAvs5Zyf8x

xYcteSiXZzjSu2SXV0fNCbVGxEgvfXwWvag+IVFtRai4tQ6LTlFvwj74p+N89D8Keb3KyZcHOM+

oDa4bxb8WIT6AZwK/7nuyWDw==

X-Received: by 2002:a17:903:f8c:b0:2c6:9d3d:dfbd with SMTP id d9443c01a7336-2cf34866be5mr23521665ad.16.1784287992361;

Fri, 17 Jul 2026 04:33:12 -0700 (PDT)

Received: from DESKTOP5AD1N3E ([2401:4900:8846:6185:d508:75a2:69f0:d8e2])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2cf346d9f9dsm9078685ad.41.2026.07.17.04.33.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 17 Jul 2026 04:33:11 -0700 (PDT)

From: "Lauren Smith"

To:

Subject: Re: Checking In Again

Date: Fri, 17 Jul 2026 17:03:04 +0530

Message-ID: <064f01dd15e0$0c94aa30$25bdfe90$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0650_01DD160E.264DA980"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0V373S5MT8eBHBS7af76T46dnwug==

Content-Language: en-us

Disposition-Notification-To: "Lauren Smith"



This is a multipart message in MIME format.



------=_NextPart_000_0650_01DD160E.264DA980

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I thought I'd send a quick note to reconnect regarding our remote accounting

support services.







If your team ever needs an extra hand with bookkeeping, payroll, tax

preparation support, or routine accounting work, we'd be happy to help.







Would it make sense to have a brief chat?







Best regards,

Lauren Smith







From: Lauren Smith

Sent: Monday, July 13, 2026 6:20 PM

To: sales@nk.ca

Subject: Re: Do You Require Bookkeeping Support?







Hi,







Just following up to see if you're currently exploring remote bookkeeping,

payroll, or tax prep support.







If it's not a priority right now, no problem-just let me know. If that's the

case, we can schedule a quick call to discuss.







Looking forward to your reply.







Regards,



Lauren Smith