------=_NextPart_e9267392b77df326b3517d767f9d78d7
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
|
New Windows sign‑in just happened
|
We saw a successful login from a Windows PC that hasn't been used to access your rootnk account before.
|
Device: Opera on Windows 11
Location: Sydney, Australia
|
Review access
|
If this was you, no action is required. Otherwise, please take a moment to review your account access.
|
Help |
Email security tips
|
X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103
|
|
------=_NextPart_e9267392b77df326b3517d767f9d78d7--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 08 Jul 2026 13:41:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whY8O-000000000bg-3Kvc
for dave@doctor.nl2k.ab.ca;
Wed, 08 Jul 2026 13:40:40 -0600
Resent-From: The Doctor
Resent-Date: Wed, 8 Jul 2026 13:40:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out13-75.antispamcloud.com ([185.201.17.75]:38108)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whWMD-00000000J7F-12Iu
for doctor@doctor.nl2k.ab.ca;
Wed, 08 Jul 2026 11:46:58 -0600
Received: from s11145.sgp1.stableserver.net ([103.138.189.5])
by mx300.antispamcloud.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.94.2)
(envelope-from )
id 1whWLH-005P0V-T4
for doctor@doctor.nl2k.ab.ca; Wed, 08 Jul 2026 19:45:53 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=campuskh.com; s=default; h=Date:Content-Type:MIME-Version:Message-ID:
Reply-To:From:Subject:To:Sender:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=4M+8eyOy6e70gQDcos4rg4n9/nm1mSJxQ+BTj3i+bTI=; b=E/kGYf7IEaKEo+2Hmi0DwmWc0N
Kw4JOr1+zk01pzRTsSfaZsAu7t9thhcN/ckSb/P+4FCwNpSl6MKQAu//oSXjglfoWcCQvmuNtUt3I
QxxpN6Gaks6FZRYCDdm91Gzx+aBUa/7DyylB4B5kTVYef8sFHsdGLRx7fOS13y9x4ivdhPybb6qiM
FUJU1td5k6p2xncl7BAAEXrQxdueMly6caY5Fv4cJmzoJql8bZR7feGu9XKbSTm6fs/bBgEdNzv8Q
T/S59pqpWA8mVSn0RtK9s5ZXRaQ63rBViTcOinEoil4hMlWMa7p73iRDFBTXiXkREkHU295tLjTAh
+RwN5IKA==;
Received: from diigroup by s11145.sgp1.stableserver.net with local (Exim 4.99.4)
(envelope-from )
id 1whWLE-0000000CC8E-1Efe
for doctor@doctor.nl2k.ab.ca;
Wed, 08 Jul 2026 17:45:49 +0000
To: doctor@doctor.nl2k.ab.ca
Subject: rootnk account accessed on a new Windows device
From: =?UTF-8?B?WA==?=
Reply-To: info@campuskh.com
Message-ID:
X-Mailer: PHP/8.3.31
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_e9267392b77df326b3517d767f9d78d7"
Date: Wed, 08 Jul 2026 17:45:48 +0000
X-Get-Message-Sender-Via: s11145.sgp1.stableserver.net: authenticated_id: diigroup/from_h
X-Authenticated-Sender: s11145.sgp1.stableserver.net: info@campuskh.com
X-Originating-IP: 103.138.189.5
X-Spampanel-Domain: s11145.sgp1.stableserver.net
X-Spampanel-Username: 103.138.189.5
Authentication-Results: antispamcloud.com; auth=pass smtp.auth=103.138.189.5@s11145.sgp1.stableserver.net
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.53)
X-Recommended-Action: accept
X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuVBxyzvfnEjdIbeQRlZaWueaAwYVPd1bTls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=
X-Report-Abuse-To: spam@quarantine14.antispamcloud.com
X-Complaints-To: abuse@master.antispamcloud.com
------=_NextPart_e9267392b77df326b3517d767f9d78d7
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
New Windows sign‑in just happened
We saw a successful login from a Windows PC that hasn't been used to access your rootnk account before.
Device: Opera on Windows 11
Location: Sydney, Australia
Review access
If this was you, no action is required. Otherwise, please take a moment to review your account access.
Help |
Email security tips
X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103
Haresasz Nxysarwsa has invited you to PayPal Payment Received – Bitcoin Order Processing
Title: PayPal Payment Received – Bitcoin Order Processing
When: July 8, 2026
Organizer:
Haresasz Nxysarwsa
Description: Dear Customer,
We are pleased to confirm that your PayPal payment has been received successfully. Your Bitcoin (BTC) purchase request is now being processed by our system.
Transaction Summary:
Order Type: Bitcoin (BTC)
Payment Method: PayPal
Amount Charged: $520.00
Status: Processing
Your order is currently undergoing verification and will be completed shortly.
If you did not authorize this transaction, please contact our support team immediately at +1 802 610 2070.
Thank you for choosing our service.
Sincerely,
Billing Department
Attendees:
cynthiaperez389903@groups.outlook.com
Dear Customer,
We are pleased to confirm that your PayPal payment has been received successfully. Your Bitcoin (BTC) purchase request is now being processed by our system.
Transaction Summary:
Order Type: Bitcoin (BTC)
Payment Method: PayPal
Amount Charged: $520.00
Status: Processing
Your order is currently undergoing verification and will be completed shortly.
If you did not authorize this transaction, please contact our support team immediately at +1 802 610 2070.
Thank you for choosing our service.
Sincerely,
Billing Department
Kedy
streda 8. júl 2026
Organizátor
Haresasz Nxysarwsa
haressaznzxrrsxaxz321@gmail.com
Hostia
(Zoznam hostí bol na žiadosť organizátora skrytý)
Odpoveď na cynthiaperez389903@groups.outlook.com
Áno
Nie
Možno
Ďalšie možnosti
Pozvánka z Kalendára Google
Túto správu ste dostali, pretože ste účastníkom danej udalosti.
Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?ODN4aVY5WlM4enpqR3dUbklEelhTZ2tZUlQyYjFlRXplM1h6Zk56ajNubmJD?=
=?utf-8?B?akI1YUEwSWN5V3RRYTZJRm1SZXlNNHBFbjUrNUxZUlR2NlpXakxURndFbG1r?=
=?utf-8?B?MVROVFFrNEpyNEo3SnN4cDd1aTBBSVFlYno5TjloclBCQUk3TVM0NzJRdkpY?=
=?utf-8?B?a1NteGZjTk1YMjJwUWNtWFVhTmFEWXNyMGlFK1lTSGtERllVNFJyMlhMMlBr?=
=?utf-8?B?QlE4UUxrK2pLWlJMUGVSTDYyc1Y1dEJyS3ZqQ3krSFI5cThhdVpBNThHVXgv?=
=?utf-8?B?UWRIdzBTZ25tS0lkb0E2UXN5ZjFELzlWL29oUGtoNEo4STk4RUxETE9Fa0dn?=
=?utf-8?B?Vk1WWDZZdEVRNTBTZ1IxQTdLeHNDUGlNVi9uTmVOOENhQ2F0Zm1CaFdmalAw?=
=?utf-8?B?MENNZVhZczBncmw5bE9IZUt5Ty9JbFBFeU54dnNrT3h0ejlScXJLU00xZDEv?=
=?utf-8?B?eGYyWjE4Tk80V0xEVzh5Z1EvTk1jT1lkNGJRaExobUFMUFdHS05LREVSK2Y0?=
=?utf-8?B?YkErQnhNNTFlSHU0TTZZbVNPVEpZZEx5QjZlUVdHL1VuZENseTQvUWhvV0hF?=
=?utf-8?B?aU1EL1NoczNwdHdnRElyWXlONnFIU1J3aHhadHhSc3ZUZ1VKQmJYQy9NN1Bo?=
=?utf-8?B?WUNtaHR4Zk9FeitEMCtPV2pBRlcwM0FuUnZES05mSi90R2p4NFFJNUtKV1Jq?=
=?utf-8?B?SGljVkw4RTNKUWYvVmFWVkJVT2NVMFBnL1JMQVhkeXF0dXZ3UEdaaVpoRUps?=
=?utf-8?B?aGpOVGNvYnFjcnJRSFZrNmdycnhpS21OV0pPcXBhQ2t2dGJPc1Z5eEd4cm56?=
=?utf-8?B?TFdGZ2dSQWZFaG5XakVBU3ZFSnYvNWFnZDlUNmhvOUFsTzJ1YUw5bU9Rb3dG?=
=?utf-8?B?N0tKdDVvNWlYWVN2aGRNSmNSSUhnUUxlYjR5TUJHc2R5YVlEcDRpS3RtNDRF?=
=?utf-8?B?QXUrVU02ZnNNSjM4R3F4b1pUOTJyMlQyRlNmSERrMG1qZ1hRaVJhMnpmY2dH?=
=?utf-8?B?anliR25obU0weS84YkpzWDhVQ2xoRVZOY21DQ1RhdThOaVR4dG5FY3R5SlZN?=
=?utf-8?B?b0VDY3RlOVNYQ3Q2ZHVhOElPa3lNUVRzS1dUVENLYU95STRwRnc5WGM5UEVI?=
=?utf-8?B?TnJnN1R2bWJaWlNxbmhNUGZsWWV4aDBHMXhkZW04dU5IL3ZuRnBtL1pJREtk?=
=?utf-8?B?aDg2RVQ5MWVXOVFrZ0NCVko1NE1ocHB2Rm90ZnlJcUMvZ2JKMy8zR0lyN2ds?=
=?utf-8?B?cWxqK1JZaEVLWDR6VGJRZTkyTkZsdHRJVnFRL0x6TFdVLzB6NHEzS2hGaDBt?=
=?utf-8?B?R2JqekRiQkRaZk1CalVOOFBhT3RHaXMyZFNLMThHUXYxRm1BZU5SSSsxVklD?=
=?utf-8?B?bzhPTmRBdHJaSkNmMUlWd1pncFpZQk5YOThScjFsQXpxT05pODVRTHU2Y0FG?=
=?utf-8?B?V3pFcGJoOXhKeHFlaGExWVI0a0xFWFJ1UjVyNnAwalFIVzFLcUJXWm56a1Nq?=
=?utf-8?B?SS9wQ05OK3Vzc0J6eHBGYkU5UTZlVFV1THlHRm5vcFZkd2ZDVjNRRG44blVQ?=
=?utf-8?B?THFUY2RjU05BNlgvNDJ6ZUxYdFpWNGtmck9kTGpEMXByMHYwTkFhWlJHclBY?=
=?utf-8?B?K2dwdG1lM0NqVzVVNkxwUy9ML0hjUEV0d240dVZ0TTQxVEYrc2tRMFNBWGpz?=
=?utf-8?B?R0wzdzlsdnJwYTJRMGRpTlRNejFSSWlQUVBzREZLL2ZpZFdJdGFwVVA5eVU0?=
=?utf-8?B?dVkxRk1KZEIxQlN0L2QwSm9PUm5KRU00aFlxbEFaR1JSamkzOEswR1dNNVVw?=
=?utf-8?B?QlJidFJRcVR0cTR2bVFiVi81elBOcFRLSTJEaUpyVTVTV0xrTVRYZ3dVc0I2?=
=?utf-8?B?QlVyWkN2bXFGcXgrM3RXVTNUcEs2ZjZXbmd0K0QwSFJPcFlFZXppdmFSa1pj?=
=?utf-8?B?QlN6bTQxOTl4N3BMZzRHUVhRMHNEY1NVWHh2QUhEcERrbUk3dHpoMWdITmdI?=
=?utf-8?B?dlRBNytLZC9ZZmlzaSt1SUhNTkxUbGF6dGJDbjl4R0tuZE5sM2lWazZaeUNT?=
=?utf-8?B?bkx2NDJlN0hORTg2UGZYRzRKR3RseW9CZGtVU1lnNU8xalA4NkpRWXRzWkFH?=
=?utf-8?B?UE9BV3c4N2libGxhT01PL0dtM2xpWVpPaVgza0VFKzc3QzdUYnV3VkZJa01B?=
=?utf-8?B?aUVBcXFZcDBZcWRCcGowUUtQSVMzS3BCYUkzUTllZGtkYVltdVZTSmtEY3Bj?=
=?utf-8?B?ZkdBWUF1MW82YXQ0anoyMzJpd2VEeEJlWDVjeHRFVGlKUy80cTVudnN4Q2N2?=
=?utf-8?B?VmF0Y3ZlUHNrblhSanVPZ0t3QjZtTlhESWt0MlR1WjUzUVhra3g4Y0NtS2RZ?=
=?utf-8?B?eElpVkVoQVJmZDkwMXljV2h4anpzaU9pYkNjVUt3UENDdm8rMCtDVjVzc29N?=
=?utf-8?B?R1JBd3Z3dlQyR3lQN1F2ZERqRkZHdGFuNk1NcTdWSHc4Mk1sWXhRS0dGcDJ3?=
=?utf-8?B?S1VWbzBxSDFSQWJHY0xoYjIvd0NobjlPR3ZpcG1xeitkSlBpVHFkTHZnS1pH?=
=?utf-8?B?aUx5RTJWSVBKbTJCcmJYYUVtQTl4bVRpcW5YYVpxQ3dkVWU0NDV2MEhObGtE?=
=?utf-8?B?MHFaVWZrMzFkUUg0VDRORG05ZXZrdTdveGszc0hoNnFOM3UydUdKNGZFWXhQ?=
=?utf-8?B?aWVzN09mYmdnbnpRMHQ1Tm5icTYzRGJ6amIreXdPa1F4K2hiemtoMTlocDVY?=
=?utf-8?B?cjJoN0F4SGkvTlJlbUZxdCtIN1pTVHJsV082Y0JUbSt3b1NlaDlXMWUyQ3RF?=
=?utf-8?B?bVpNMzZjNHNwVkwwR1hzY1JWbG0zVEFqRGQrVnhKeDBRTk9PU0JMTXlpS05E?=
=?utf-8?B?S0FyZit3ZngyNThERFVraXU2aExqNTZ3SzROOXhtOFEzWHJKamllZ2wxZk03?=
=?utf-8?B?L1Qxc3c4Q0luaHNreC9tdHhDdXhNVzRXZFVJVC82bkwxWE1MSTg1cU5qenl3?=
=?utf-8?B?d2Y0aXZDZ2M5YXFrOXZwdEJkRklmSWNBRUkzeGlhYm0zbVRWNS83bHd4dzFw?=
=?utf-8?B?VC8rWFViUWVrNDc4UXp3Tkp5d3hIbjFBeWJVSXljREVxUXFVcTFiMnA0T2o5?=
=?utf-8?B?TW9YT2Z4V25KQUd5UWFnQTlSMkNsaWxqUCthRWRncmo5NENZbENQSHlsOUtx?=
=?utf-8?B?Rmw2WFg4YzBCczlPRkRNQ05vTVBweWltampDTGNNYit3TDdydEtJUlllRUJw?=
=?utf-8?B?eUdOcW1GeW1ubk8wTWMxNnRlRTY3R3I0Vmh5VnRoNndLV3FsZ0pmdHNURFlC?=
=?utf-8?B?OU1XZmpOdjdSZ042U1hNRGZXSnFZR0ZZai9wMlZuNnNNMURGTWljdWdyZUVj?=
=?utf-8?B?U0NZY1YyaXgwdFdMUHpiV1pkdnJNVlJqN2l4L0l6bjJzeFYyL2dpNGs2bGQw?=
=?utf-8?Q?45yISvSLdjgXgZ38QV0=3D?=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Jul 2026 16:16:52.5695
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f7c0d972-a3cd-4503-0b98-08dedd0c5276
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource: CH2PEPF00000142.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA3PR18MB5297
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: PayPal Payment Received – Bitcoin Order Processing streda
8. júl 2026 Dear Customer, We are pleased to confirm that your PayPal payment
has been received successfully. Your Bitcoin (BTC) purchase request is now
being processed by our system.
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.93.20.59 listed in dnsbl.ahbl.org]
[40.93.20.59 listed in dnsbl.ahbl.org]
[40.93.20.59 listed in dnsbl.ahbl.org]
[40.93.20.59 listed in dnsbl.ahbl.org]
[209.85.208.71 listed in dnsbl.ahbl.org]
[209.85.208.71 listed in dnsbl.ahbl.org]
[209.85.208.71 listed in dnsbl.ahbl.org]
[209.85.208.71 listed in dnsbl.ahbl.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.93.20.59 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.93.20.59 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.93.20.59 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.93.20.59 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[209.85.208.71 listed in will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:cafe:0:0:21 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:1f3:0:0:0:26 listed in]
[will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
[40.93.20.59 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.93.20.59 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.93.20.59 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[40.93.20.59 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 HK_RANDOM_FROM From username looks random
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[haressaznzxrrsxaxz321(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[haressaznzxrrsxaxz321(at)gmail.com]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.6 MEGALONGWORD BODY: Uses really overlong words
0.3 LONGWORD BODY: Uses overlong words
0.1 TW_RW BODY: Odd Letter Triples with RW
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 TO_IN_SUBJ To address is in Subject
3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Received_=2D_Bitcoin_Order_P?=
=?UTF-8?Q?rocessing_=40_st_8=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutlo?=
=?UTF-8?Q?ok=2Ecom=29?=
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 08 Jul 2026 13:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whY7j-000000000ZX-144P
for dave@doctor.nl2k.ab.ca;
Wed, 08 Jul 2026 13:39:59 -0600
Resent-From: The Doctor
Resent-Date: Wed, 8 Jul 2026 13:39:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-northcentralusazlp17013059.outbound.protection.outlook.com ([40.93.20.59]:43609 helo=CH4PR04CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whUyC-00000000F9w-42iL
for doctor@doctor.nl2k.ab.ca;
Wed, 08 Jul 2026 10:18:08 -0600
Received: from CH5P223CA0012.NAMP223.PROD.OUTLOOK.COM (2603:10b6:610:1f3::26)
by SA3PR18MB5297.namprd18.prod.outlook.com (2603:10b6:806:2f5::21) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 8 Jul 2026
16:16:52 +0000
Received: from CH2PEPF00000142.namprd02.prod.outlook.com
(2603:10b6:610:1f3:cafe::21) by CH5P223CA0012.outlook.office365.com
(2603:10b6:610:1f3::26) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8
Jul 2026 16:16:52 +0000
Authentication-Results: spf=pass (sender IP is 209.85.208.71)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=google.com;dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.208.71 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.208.71; helo=mail-ed1-f71.google.com; pr=C
Received: from mail-ed1-f71.google.com (209.85.208.71) by
CH2PEPF00000142.mail.protection.outlook.com (10.167.244.75) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6
via Frontend Transport; Wed, 8 Jul 2026 16:16:52 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:1EA79E97E65E2B7DC29FE722E92FD6438F828F1DF45FA6321AA092EA34F57726;UpperCasedChecksum:244DFA4593E86FB87BCE59FFACB32ECD109CBFAE4326CA501E630FAB11B03B90;SizeAsReceived:3520;Count:15
Received: by mail-ed1-f71.google.com with SMTP id 4fb4d7f45d1cf-698a99b6140so1406083a12.1
for ; Wed, 08 Jul 2026 09:16:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1783527411; x=1784132211; darn=groups.outlook.com;
h=content-type:to:from:subject:date:message-id:sender:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=RrtI0PdFi3vgg3TInDGMo/ZU5qO8Ll+UGGMq3GBIYEE=;
b=PVc5h7c1qBW/JSCrCqYJJwNFfWgAKb1ra4ewKfGNPWpw4XHamMu3do/Jama5ez6RoW
ho1QSxTU5fPWKnxx1Cou65p0Gw2uOxqIrFAzZZ7GCbgT722d28ePD49N5Pw07NH3J3/G
2P23wjEpHe9BfRuksgS6l2M4mr/O5vG5RDOJqlUYQTGIq1BEb0WHREb0u+QIG7nOH8Y3
oXAWelfwFcWTyKn1idoBcTQLKcPGWjvudb3ESaAgcYJaBPEw5J5kRpDTEUnlei7rH6Q2
UxpHp/SAWI/xaUHagBbuvE3jEPb9M9aWrBr5I0Jnp3wdrcCgVrXdOwkaXvtNDkplbnNQ
bGmg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1783527411; x=1784132211; darn=groups.outlook.com;
h=content-type:to:from:subject:date:message-id:sender:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=RrtI0PdFi3vgg3TInDGMo/ZU5qO8Ll+UGGMq3GBIYEE=;
b=ZpEaA5Ugie+Jv/Ua3KJNyziiqJPvWYdHGc/tYKGG55BT/RW/CMzaBqmx7vxPuM7vQT
o9ILwrD1GdtMVfYw+bjmgx7KmNGaqUplCk81KrVelnLOoaSQ4pdRzGjx88j/wEZP7J3R
KKYW5Vwq9ttRjXHruBeV572nj25iErtIHvjbbo6FX7e6tzgaH/qiUBbCZ5rD4VmoHlLU
Qy5OBMc2FoP4CjKHVaPskusy99CP5+2tKpeYW7VEBikAhfh4aQy3Mt+Ujo+naBhgj9kT
r06ytSwQGSVRMOaOkeYOqFzGkhZQzXmyh+sGHlD39LKb5Iy3QoTeAg9Ds1pKaNI8OdDV
3ilg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783527411; x=1784132211;
h=content-type:to:from:subject:date:message-id:sender:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=RrtI0PdFi3vgg3TInDGMo/ZU5qO8Ll+UGGMq3GBIYEE=;
b=GDJAcSLxs+N2GoIbEOk2wjzFYiquRJsRcf4aYQnAJxYO7fm3MjamcFH57aFevbff9p
LubTLedlsJ/6+c70tFAyrlXbnHm8vKV5ZjauFDgOwxd8n0d/9s7wXkt1A67RcdVqfY0J
BOOpLdHB6KwtbsDC8Jd7uPrPH4qaPwfz65H3jXhDArS/OdEhvMBlz6jmJDJD5IjWsvO7
7AGzZZidcoKm2U4GdlNYgcX/8W+63e6CTaExfAmeajxk6R2NyENV9rWVQIKeAIUZFe4Q
XlfL0Oync0gyEpKLipGaZPGeclGhpfy68rytqkoZMxtxq4UMV+bxHwNYLiHmK83pYSiY
oDzQ==
X-Gm-Message-State: AOJu0YwIvLOiPiqvefjlYpnUfl3T4bRFqxBYcOj4EY21vff1Je9KKn+3
KzobdRfkQygIv0rmpVOYznkaqIov77BkuWMAWb3MuUL6ts5LUSkOyE2uC20//6HNU3DF1jZ/VcO
gnhPJb2ygxL8UQudhrfseuzfMUKUh+pWFp6s=
MIME-Version: 1.0
X-Received: by 2002:a05:6402:146b:b0:698:821d:aa37 with SMTP id
4fb4d7f45d1cf-69ab449d979mr1296070a12.24.1783527411343; Wed, 08 Jul 2026
09:16:51 -0700 (PDT)
Reply-To: Haresasz Nxysarwsa
Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=
Message-ID:
Date: Wed, 08 Jul 2026 16:16:51 +0000
Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Received_=2D_Bitcoin_Order_P?=
=?UTF-8?Q?rocessing_=40_st_8=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutlo?=
=?UTF-8?Q?ok=2Ecom=29?=
From: Haresasz Nxysarwsa
To: cynthiaperez389903@groups.outlook.com
Content-Type: multipart/mixed; boundary="000000000000cce8b006561bd54f"
X-IncomingHeaderCount: 15
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: CH2PEPF00000142:EE_|SA3PR18MB5297:EE_
X-MS-Office365-Filtering-Correlation-Id: f7c0d972-a3cd-4503-0b98-08dedd0c5276
X-Sender-IP: 209.85.208.71
X-MS-Exchange-EOPDirect: true
X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM
X-SID-Result: PASS
X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com
X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com
X-Microsoft-Antispam:
BCL:0;ARA:1444111002|1680799066|6019299003|6092099016|9400799043|5139299004|9020799019|3151999006|6149299003|9000799056|22000799015|34130799006|29080799009|16200799027|970799063|26000799027|24102599021|32020799003|26130799012|4040799016|4302099013|3412199025|440099028|21002599022;
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 08 Jul 2026 09:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whU3q-00000000BwY-2QmT
for dave@doctor.nl2k.ab.ca;
Wed, 08 Jul 2026 09:19:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 8 Jul 2026 09:19:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f179.google.com ([209.85.210.179]:48306)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whSWj-00000000MCm-2OVg
for doctor@nl2k.ab.ca;
Wed, 08 Jul 2026 07:41:35 -0600
Received: by mail-pf1-f179.google.com with SMTP id d2e1a72fcca58-8478fe07f0fso660939b3a.0
for ; Wed, 08 Jul 2026 06:40:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1783518032; x=1784122832; darn=nl2k.ab.ca;
h=to:from:subject:mime-version:date:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=qX1F1lIVnxcr4Ooy7aQlME6qLGyJQBhSvG7at1banGs=;
b=DsGVTQzONr/m8PlwufmmtNp3372Xb+yEphXqu92rCsyimQrSqOlYC6A+lbLP8fphcS
XKpAA7GsJ75m9Ntys26miP/3cDfYIBnpGYaq9EsKQeLsbHfeJxy+h9fS5xXDljv5LKfl
dDj8BzPHOU9EZBYVMNuEUkaDQChO8jkGKGFminRv1TB4nbHSJmqRmDhh7oqs8XdJenVm
vBehtKOrIGvgLWcnWjFfKbEwH6DVFNqlWiEZ+lbK/2MRiEmd13Sr0XwvDZNlB+4bFP8i
OjCDshG3wlZoQXwk6HiRGYahorWNAb10TUp7EVIrgDccrJZSscmV/s1pVw9uEubg/F94
Xi9g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783518032; x=1784122832;
h=to:from:subject:mime-version:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=qX1F1lIVnxcr4Ooy7aQlME6qLGyJQBhSvG7at1banGs=;
b=VW14L6x0jQxFLl5vzav4XZPlGGHaVskrJwvnhzCi5jEcv2qe6ZjF8aEPI3Qytgxs0C
sM4mFkgvEP14n5/XzP7rrrBJ/oZZTRIdGfCPsv0+JSx7SdjE15C3tleFqqkE+wYDN45r
qymXYZwtQ04W72okBm/MugWbCgfYVNJ4Z2xuhLaVm9GPIIdvXsx4s0M3uK6fLrcLUnbG
Kp0/7Bsup+OnTfU8QwQnzzAwJR/vpQHtY+UqAogVSFqU1ko6IE5jvT4xP0tEKZqJ+rVK
3ISF6dEtkZ8Pz21vrE3aQpjXuzeyz8YEYhhi8I8MtaYUJR8MIIjBBDZ7N1O0s6vDKAtj
3kXg==
X-Gm-Message-State: AOJu0Yz1HloL+bvB10ydiVUmzROiWjzzwMxCu+dGKGnQXm0seH6vzF6t
G+fdyAlLyBUlzloch6uRd/leOK3VwyRmaL3+IlUYV/QC5EG6zIb+HJxsqYcaxzaxFm6EB3z9
X-Gm-Gg: AfdE7cmzHh4NHcgOsc0zeqPo5lU0blnlNQzo65O5EGrfLly/SX8hh7xQRSF4BowLC/x
+yld1UrXRjQqcMnM+Fh5S3I/JSpZzRYilfxjbH+67SuDHeyhNKkxET67LhEfFzhs8sn+dyKWcC2
EcFnsfJi19E4Q/49ZigIPpKizG+7FCGx4YFOsubnHBiMLJaoY9jkkt6DH2RGj65WAaQZqDwKO18
hxqaIU2qy8GbgWtpr/kUMZp3ojlNGo9i9fqwq+rTDXYPPu63xTJWxNVnFEU2KmGhzAZ4aZznaSM
lH5pnT+gvs9jIsvcrOg+1xjsx9DPFRpm39SOd9EjjpPJ9Rj/8H13nH3SH7nG5FXO9eGQp+cEOCX
SXpal3kFCU25FxRwaf9V/A+R70Pa6uVQc/EtL3e3SvJUivtkc7DsEZksSR2QlWfw/oVs+InQlDA
d1zcQcO13FoTSIE7ZtkesWPdeBil1L8qpt9QfVUfpvWh6M9JDC
X-Received: by 2002:a05:6a00:9510:b0:848:2d1d:836f with SMTP id d2e1a72fcca58-84842f090c1mr2597088b3a.28.1783518031879;
Wed, 08 Jul 2026 06:40:31 -0700 (PDT)
Received: from [10.203.17.91] ([43.163.207.239])
by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-847f6b609acsm6981812b3a.1.2026.07.08.06.40.31
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Wed, 08 Jul 2026 06:40:31 -0700 (PDT)
Message-ID: <6a4e534f.4f595882.28ff01.a729@mx.google.com>
Date: Wed, 08 Jul 2026 06:40:31 -0700 (PDT)
Content-Type: multipart/alternative; boundary="===============1313688276998946526=="
MIME-Version: 1.0
Subject: Transaction 39666186 is processed
From: Doctor
To: doctor@nl2k.ab.ca
Webroot
Transaction Date: Wednesday, July 8, 2026
Transaction No: 39666186
Reference Id: 98J36QIEXFT118
Order received and being prepared.
Hey Doctor
We appreciate your continued membership. This is to inform you that your Webroot subscription will renew automatically today.
Your payment will be processed securely using the payment method on file.
Invoice Info
Product: Webroot All-in-One Protection
Product Key: IZFR8-2RKTQ-OKESA-NC54A-O2I2L
Quantity: 2 Devices
Subscription Period: 2 Years
Renewal Amount: $200.79
No further action is necessary unless you wish to make changes before the renewal is processed.
Respectfully,
Webroot SecureAnywhere
+1 (805) 215-5466
+1 (810) 228-0845
© 2009-2026 Webroot, Inc. All rights reserved.
link=3D"#467886" vlink=3D"#96607D" style=3D'word-wrap:break-word'>
class=3DWordSection1>
style=3D'font-family:"Calibri",sans-serif'>Hi,
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>
class=3DMsoNoSpacing>A =
quick overview of our accounting =
support.
style=3D'font-family:"Calibri",sans-serif'>About =
us:
style=3D'font-family:"Calibri",sans-serif'>
class=3DMsoNoSpacing =
style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =
lfo2'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'> =
style=3D'font-family:"Calibri",sans-serif'>Team of 750+ trained =
bookkeeping and accounting professionals based in =
India
style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =
lfo2'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'> =
style=3D'font-family:"Calibri",sans-serif'>Experts in Xero, QuickBooks =
Online, and more
style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =
lfo2'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'> =
style=3D'font-family:"Calibri",sans-serif'>Currently supporting over =
1,000 clients
style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =
lfo2'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'> =
style=3D'font-family:"Calibri",sans-serif'>ISO-certified and =
GDPR-compliant company
style=3D'margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 =
lfo2'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
Roman"'> =
style=3D'font-family:"Calibri",sans-serif'>Happy to share client =
references upon request
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Are you considering a remote =
accounting partner?
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Best =
Regards,
style=3D'font-family:"Calibri",sans-serif'>Lauren Smith
style=3D'font-family:"Calibri",sans-serif'>
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>
class=3DMsoNoSpacing>
style=3D'font-family:"Calibri",sans-serif'>Disclaimer
style=3D'font-family:"Calibri",sans-serif'>: If you no longer wish to =
receive emails from us, simply reply with "NO " to =
unsubscribe.