Sydnee Inc Legal
Aug 15 7:55 PM
TEST — Veer 304E, how the Izeal reply will look
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 7:46 PM
Veer Towers 304E - furnished 1BR, corporate housing
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Kelvin Yan
Aug 15 7:34 PM
Veer 304E — three drafts for review before sending
⚠ PHISHING: employee impersonation: display name matches 'kelvin yan' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 5:34 PM
Access test 1 of 3 - link
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 5:33 PM
Access test 3 of 3 - verified
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 5:09 PM
Access test 3 of 3 - verified
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 5:09 PM
Access test 1 of 3 - link
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:48 PM
Access test 1 of 3 - link (opens straight away, no code)
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:26 PM
Veer 304E - all three access levels
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:16 PM
Veer 304E - replacement links
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:10 PM
Veer 304E - short links, one with a code
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:04 PM
Your access code
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:04 PM
Your access code
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:00 PM
Veer 304E - test of the secure file links
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Sydnee Inc Legal
Aug 15 4:00 PM
Your access code
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Amazon Payments
Aug 15 12:52 PM
Action requise sur le compte Amazon Payments
Fake Amazon Payments suspension threat; credential harvesting attempt.
Guest Relations at The Ritz-Carlton, Laguna Niguel
Aug 15 10:49 AM
Kelvin, please complete the travel request form to customize your stay at The Ritz-Carlton, Laguna Niguel
Suspicious Ritz-Carlton email with obfuscation; potential credential theft attempt.
Manus Team
Aug 15 7:33 AM
ACTION REQUIRED: 7 days left to back up Kelvin Yan for future restoration
⚠ PHISHING: phishing subject pattern: 'ACTION REQUIRED' from external sender privaterelay.appleid.com
Benjamin & Williams
Aug 15 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collection demand with 24h payment pressure; spoofed domain.
Sydnee.ai Legal
Aug 14 9:22 PM
Jiao 移民案件最新进展说明(好消息,请放心)
⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydnee.ai
Anthony Patino in Teams
Aug 14 2:34 PM
Anthony Patino sent a message
⚠ PHISHING: employee impersonation: display name matches 'anthony' but sender is teams.mail.microsoft
KanexPro Legal
Aug 14 10:37 AM
Re: FW: RE: DISPUTE — CAB Account No. 6156632 — Kanex Pro, Inc. / Shenzhen PTN Electronics Limited
⚠ PHISHING: domain impersonation: display name contains 'kanex' but sender is email.kanexpro.com
Benjamin & Williams
Aug 14 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector demanding payment on unrelated commercial claim.
Manus Team
Aug 14 2:27 AM
ACTION REQUIRED: Your account Kelvin Yan will be deleted, back up data by August 23, 2026 at 7:59am SGT for future restoration
⚠ PHISHING: phishing subject pattern: 'ACTION REQUIRED' from external sender privaterelay.appleid.com
Marriott Bonvoy Reservations
Aug 14 12:59 AM
Reservation Confirmation #88177752 for The Ritz-Carlton, Laguna Niguel
Fake Marriott reservation confirmation with suspicious invisible characters.
Kelvin Yan
Aug 13 10:00 PM
REVIEW - Draft reply to Tony Tran / Enterprise Bank, Loan #21851 (Sydnee 578 LLC)
⚠ PHISHING: employee impersonation: display name matches 'kelvin yan' but sender is email.sydneeinc.com
DIRECTV
Aug 13 5:06 PM
Set up your Peacock Premium Incl account
DIRECTV domain spoofing—Peacock Premium setup from suspicious email address.
SBA
Aug 13 11:04 AM
New device signed in at SBA Portal
Suspicious SBA Portal device login alert from unfamiliar IP—verify immediately.
[email protected]
Aug 13 5:10 AM
Completed Document: Imprint Required Swiftly (Kanexpro-cNYTf)
Suspicious email impersonating AISquared exec, requesting Dropbox link with urgency.
Benjamin & Williams
Aug 13 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector demand with 24-hour payment ultimatum; spoofed domain.
[email protected]
Aug 12 5:24 PM
Important: Power Outage Alert for Kelvin, Outage # 000800560202
Fake SCE power outage alert with hex ID in subject line — credential harvest attempt.
Anthony DeLorenzo, Sean Sullivan and Sammy Cemo
Aug 12 3:26 PM
99%-Leased Class A Office Tower with ±5 Year WALT | Healthcare Corridor in Orange, CA
⚠ PHISHING: employee impersonation: display name matches 'anthony' but sender is cbre.com
Anthony DeLorenzo, Sammy Cemo and Bryan Johnson
Aug 12 1:52 PM
Call for Offers - Sept. 15th: 90% Leased Trophy Medical Office Tower, Front Row to Hoag's $1B Expansion w/ 57% NOI Upside | Irvine, CA
⚠ PHISHING: employee impersonation: display name matches 'anthony' but sender is cbre.com
Anthony DeLorenzo, Kevin Foley and Sean Kelly
Aug 12 1:37 PM
CALL FOR OFFERS 8/18: Mission Critical MetLife Tampa, FL – Class A Office | Absolute NNN Lease 8+ Years Remaining 3% Annual Escalations | 20+ Year Occupancy History | MetLife just Invested $45M+
⚠ PHISHING: employee impersonation: display name matches 'anthony' but sender is cbre.com
Benjamin & Williams
Aug 12 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector demanding payment; spoofed domain and suspicious urgency.
KanexPro Legal
Aug 11 3:43 PM
Termination of trading relationship — demand for credit and return of goods — response required 9 September 2026
⚠ PHISHING: domain impersonation: display name contains 'kanex' but sender is email.kanexpro.com
KanexPro Legal
Aug 11 3:38 PM
DISPUTE — CAB Account No. 6156632 — Kanex Pro, Inc. / Shenzhen PTN Electronics Limited
⚠ PHISHING: domain impersonation: display name contains 'kanex' but sender is email.kanexpro.com
[email protected]
Aug 11 2:05 PM
Your Enhanced Content login details
Fake Syndigo login credentials — unsolicited password delivery is phishing vector.
[email protected]
Aug 11 12:43 PM
DISPUTE — CAB Account No. 6156632 — Kanex Pro, Inc. / Shenzhen PTN Electronics Limited
⚠ PHISHING: domain impersonation: display name contains 'kanex' but sender is email.kanexpro.com
[email protected]
Aug 11 9:18 AM
Annual Refiling Survey - PASSWORD
Suspicious password email impersonating BLS; likely credential theft attempt.
Benjamin & Williams
Aug 11 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector claiming urgent payment due on unknown commercial claim.
Anthony Patino in Teams
Aug 10 11:26 AM
Anthony Patino sent a message
⚠ PHISHING: employee impersonation: display name matches 'anthony' but sender is teams.mail.microsoft
Benjamin & Williams
Aug 10 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector claiming urgent payment due on unknown commercial claim.
Benjamin & Williams
Aug 9 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collection notice with 24hr payment demand—likely BEC/credential theft.
Benjamin & Williams
Aug 8 5:01 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector demand with 24h payment ultimatum; spoofed sender domain.
DIRECTV
Aug 7 5:06 PM
Reminder: Set up your Peacock Premium Incl account
Suspicious DIRECTV email with spoofed domain attempting credential theft.
Benjamin & Williams
Aug 7 5:02 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector claiming urgent payment demand with vague attachments.
[email protected]
Aug 7 3:05 AM
Change Made to Account
Suspicious account change notification from Equifax; verify legitimately.
Benjamin & Williams
Aug 6 5:03 AM
Commercial Claim Discovery Documents Our file:D-8222 Debtor: VICTORIA ROPA ELEGANTE
Fake debt collector demand; spoofed domain, urgency pressure, suspicious fax routing.
[email protected]
Aug 5 9:52 PM
Change Made to Account
Suspicious Equifax account change notification from no-reply address.
⚠ PHISHING / FRAUD SUSPECTED
This message may be impersonating a known contact or company.
Do NOT click any links or open attachments.
Detection: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
Detection: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
TEST — Veer 304E, how the Izeal reply will look
AI verdict
phishing
urgent
· confidence: high
· by phishing-precheck
“⚠ PHISHING: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com”
Reasoning: domain impersonation: display name contains 'sydnee' but sender is email.sydneeinc.com
📎 1 attachment
· do not open