<table><tr><th>From:</th><th>Bella Klein &lt;bklein575@gmail.com&gt;</th></tr><tr><td>Sent:</td><td>Friday, June 1, 2018 2:49 AM</td></tr><tr><td>To:</td><td>Karyna Shuliak</td></tr><tr><td>Subject:</td><td>Re: Fraud Protection Alert</td></tr></table>

I will cancel it and order a replacement&nb=p;

Thank you,

Bell=

On May 31, 2018, at 6:41 PM, Karyna Shu=iak <karynashuliak@icloud.co= <mailto:karynashuliak@icloud.com> > wrote:

Hi=Bella,

I just received a voicemail and email from A=ex about this as well.
I don’t recognize any of these cha=ges. I haven’t purchased anything today with this card...

On May 31, 2018, at 6:33 PM, Bella Klein <bklein575@gmail.com <mailto:bklein57=@gmail.com> > wrote:

Hi Karyna
Please confirm charge below

Thank you,

Bella


Begin forwarded message:

=div>From: "American Express" <AmericanExpress@welcome.aexp.com <mailto:AmericanExpress@w=elcome.aexp.com> >
Date: Ma= 31, 2018 at 6:26:54 PM EDT
To: <ap@hbrkassociates.com <mailto:ap@hbrkasso=iates.com> >
Subject: Fraud Protec=ion Alert
Reply-To: "" <DoNotReplyUS@service.americanexpress.com <mailto:DoNotReplyUS@ser=ice.americanexpress.com> >

<http://www208.americanexpress.com/axp/bu_logos/2008/b=uebox.gif>

A=count Ending:

83034

=td width="25.76%" rowspan="1" colspan="1"> <=td>

<http://www208.americanexpress.com/=xp/cardart/2008/AMEX_alert.jpg>

Attempted Date=/p>

Merchant

&n=sp;

<= style="margin-top: 0px;font-family: Arial;margin-bottom: 0px;font-size: 9=t;color: black;">05/31/18

CPANEL

<https://cits-tracking-

prod.americanexpress.com=clicktrk/Tracking?mid=HEICN030201805311526270631045840&msrc=ENG-ALE=TS&url=https%3A%2F%2Fonline.americanexpress.com%2Fmyca%2Fcvp%2Faction=3Fg%3D349992331290054%26x%3D005940274191875%26o%3De%26r%3D1%26c%3DHEICN0302=1805311526270631045840>

## <https://cits-tracking-

prod.americanexpress.com/clicktrk/Tracking=mid=HEICN030201805311526270631045840&msrc=ENG-ALERTS&url=http=%3A%2F%2Fonline.americanexpress.com%2Fmyca%2Fcvp%2Faction%3Fg%3D34999233129=054%26x%3D005940274191875%26o%3De%26r%3D2%26c%3DHEICN0302018053115262706310=5840>

<http://www208.americanexpress.com/axp/icons/FraudYE=.png>

Great! Click Yes<=b> to verify and we'll email you shortly to confirm.

## <https://cits-tracking- (cont.)

<http://www208.americanexpress.com/axp/icons/FraudNO.png= height=> Okay. Click No and w='ll help you
protect your account.

</=>

If you or an authorized party has already addressed this concern, ple=se disregard this message.

=tr height="0.846666653951009cm">Privacy Statement

<=td>| Updat= Your Email <https://cits-tracking-
prod.americanexpress=com/clicktrk/Tracking?mid=HEICN030201805311526270631045840&msrc=ENG=ALERTS&url=htt
p://www.americanexpress.com/email>

<=p>

Your account information is included above to help y=u recognize this as a customer care e-mail from American Express. To learn m=re about e-mail security or report a suspicious e-mail, please visit us at <= href="https://cits-tracking-prod.americanexpress.com/clicktrk/Tracking?m=d=HEICN030201805311526270631045840&msrc=ENG-ALERTS&url=https%3A%2F%2Fwww212.americanexpress.com%2Fdsmlive%2Fdsm%2Fdom%2Fus%2Fen%2Ffraudpr=tectioncenter%2Ffraudprotectioncenter_identifytheft.do%3Fvgnextoid%3Db9c75c=d66a4c110VgnVCM1000000defaad94RCRD" shape="rect">americanexpress.com/phish=ng. We kindly ask you not to reply to this e-mail but instead contact u= via Customer Care <https://cits-tracking-prod.americanexpress.com/clicktrk/Tra=king?mid=HEICN030201805311526270631045840&msrc=ENG-ALERTS&url==ttps%3A%2F%2Fglobal.americanexpress.com%2Fhelp%3Finav%3DiNUtilContact%26extl=nk%3Dus-em-serv-footer-helpcenter>.

© 2018 American Express. All rights=reserved.

AGNEUALE0034003=img style="border-style: none; display: block;" src="https://cits-track=ng-
prod.americanexpress.com/clicktrk/Tracking?mid=HEICN030201805311526270=31045840&msrc=ENG-ALERTS"
height="1" width="1" alt="" align="=>

=/td>         <=tr>
=tbody>


=/div>

=