BBB Complaints phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 17:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUvNE-00000000GvL-3OwR

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 17:51:48 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 17:51:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wm4-131.speedhosting.co.kr ([111.92.189.131]:35644)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUqNV-00000000OqY-03fD

for doctor@nk.ca;

Wed, 03 Jun 2026 12:31:54 -0600

X-AuthUser: kschoi@hanulit.co.kr

Received: from WYWUFTKV ([62.42.154.199]:55843)

by wm4-131.speedhosting.co.kr with [XMail 1.27 Inames120228 ESMTP Server]

id for from ;

Thu, 4 Jun 2026 03:30:38 +0900

Message-ID:

From: BBB Great West + Pacific

To:

Subject: =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

Date: Wed, 03 Jun 2026 19:30:33 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="cde5c482645115291312cfd40003efb0"

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MAIN 600.0px CONTAINER   -->  LOGO / HEADER  

--> CARD 1: HEADLINE / INTRO   -->BBB Great West + Pacific sent you

a message about Complaint Received: ID 27621257  NEW CARD: B [...]



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[111.92.189.131 listed in dnsbl.ahbl.org]

[111.92.189.131 listed in dnsbl.ahbl.org]

[111.92.189.131 listed in dnsbl.ahbl.org]

[111.92.189.131 listed in dnsbl.ahbl.org]

[62.42.154.199 listed in dnsbl.ahbl.org]

[62.42.154.199 listed in dnsbl.ahbl.org]

[62.42.154.199 listed in dnsbl.ahbl.org]

[62.42.154.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[111.92.189.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[111.92.189.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[111.92.189.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[111.92.189.131 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[62.42.154.199 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

[111.92.189.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[62.42.154.199 listed in sbl-xbl.spamhaus.org]

[62.42.154.199 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[62.42.154.199 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[111.92.189.131 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 J_CHICKENPOX_22 BODY: 2alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=



BBB Complaints phish Part 2



BBB LOGO





BBB Great West + Pacific sent you a message about

Complaint Received: ID 27621257





TH!NK



Address:

500 Ala Moana Blvd Bldg 7 Ste 400

Honolulu, HI 96813-4920



Phone: (808) 224-6694



Website:https://think-training.com



Email: doctor@nk.ca



Local BBB: BBB Great West + Pacific



BBB File Opened: 3/7/2014



Years in Business: 23



Business Started: 1/6/2003



Category: Management Consultant



⚠ This business is NOT BBB Accredited.





Respond Within 10 Days

Your BBB received a complaint about your business. The complaint was submitted on May 8, 2026 and assigned ID 27621257. Although BBB makes no judgment on validity, we recognize there are two sides to every dispute. We request your good faith effort to resolve it outside the legal system.

⚠ PAY ATTENTION! Nature of complaint: Unsatisfactory product/service quality and delayed delivery! Requested resolution: Full refund plus written apology. The complainant submitted all known details about TH!NK and referenced the email address doctor@nk.ca. Please respond promptly to resolve this matter.

Respond to this Complaint



Please understand that the consumer’s complaint and your response may be publicly posted on the BBB web site (BBB reserves the right to not post in accordance with BBB policy). By submitting your response, you are representing that it is a truthful account of your experience with this consumer. BBB may edit the complaint or your response to protect privacy rights and to remove inappropriate language.





Key Details







Complaint ID: 27621257



Submitted: May 8, 2026



Access Code: 27621257-3D67D



Complainant: click to reveal



Category: Product Quality & Delivery



Business: TH!NK



If you received this complaint via Postal Mail, you may respond online using the link below or respond by mail using the address above.



To access/respond to this complaint online:



Go to:respond-bbb-org/letter/



Enter the following code: 27621257-3D67D





Sender Details









Service Representative - (609) 588-0808 Ext: 11 - complaints@bbb.org



BBB Great West + Pacific





Facebook



Instagram



LinkedIn



Twitter



YouTube





Better Business Bureau® | BBB.org



© 2026, International Association of Better Business Bureaus, Inc., separately incorporated Better Business Bureau organizations in the US and Canada, and BBB Institute for Marketplace Trust, Inc. All rights reserved.



Unsubscribe | Privacy | Log In

BBB Complaints phish Part 2



BBB LOGO





BBB Great West + Pacific sent you a message about

Complaint Received: ID 27621257





TH!NK



Address:

500 Ala Moana Blvd Bldg 7 Ste 400

Honolulu, HI 96813-4920



Phone: (808) 224-6694



Website: https://think-training.com



Email: doctor@nk.ca



Local BBB: BBB Great West + Pacific



BBB File Opened: 3/7/2014



Years in Business: 23



Business Started: 1/6/2003



Category: Management Consultant



⚠ This business is NOT BBB Accredited.





Respond Within 10 Days

Your BBB received a complaint about your business. The complaint was submitted on May 8, 2026 and assigned ID 27621257. Although BBB makes no judgment on validity, we recognize there are two sides to every dispute. We request your good faith effort to resolve it outside the legal system.

⚠ PAY ATTENTION! Nature of complaint: Unsatisfactory product/service quality and delayed delivery! Requested resolution: Full refund plus written apology. The complainant submitted all known details about TH!NK and referenced the email address doctor@nk.ca. Please respond promptly to resolve this matter.

Respond to this Complaint



Please understand that the consumer’s complaint and your response may be publicly posted on the BBB web site (BBB reserves the right to not post in accordance with BBB policy). By submitting your response, you are representing that it is a truthful account of your experience with this consumer. BBB may edit the complaint or your response to protect privacy rights and to remove inappropriate language.





Key Details







Complaint ID: 27621257



Submitted: May 8, 2026



Access Code: 27621257-3D67D



Complainant:𜝸click to reveal



Category: Product Quality & Delivery



Business: TH!NK



If you received this complaint via Postal Mail, you may respond online using the link below or respond by mail using the address above.



To access/respond to this complaint online:



Go to:respond-bbb-org/letter/



Enter the following code: 27621257-3D67D





Sender Details









Service Representative - (609) 588-0808 Ext: 11 - complaints@bbb.org



BBB Great West + Pacific





Facebook



Instagram



LinkedIn



Twitter



YouTube





Better Business Bureau® | BBB.org



© 2026, International Association of Better Business Bureaus, Inc., separately incorporated Better Business Bureau organizations in the US and Canada, and BBB Institute for Marketplace Trust, Inc. All rights reserved.



Unsubscribe | Privacy | Log In



BBB Complaints phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 17:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUvN8-00000000GOZ-1hto

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 17:51:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 17:51:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gamma.tagtech.ru ([83.166.99.196]:40515)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUq9o-00000000OAX-29DM

for doctor@nk.ca;

Wed, 03 Jun 2026 12:17:49 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=rzhevsky.net; s=mail;

h=Content-Type:MIME-Version:Date:Subject:To:From:Message-ID; bh=gBPVGMku9zrpFVXjuMKd8RH5PhMFqMWAe9/Crv1GXrE=;

b=ZDc7p9LqCsSV3FsCnnjt0xRnk/L6X0aJVX7eUjyhm/PQOlfd34LKYI6PNfaB3DoufcCyqP22kOva+knrtxjIgZeDgr2BwQKmSRTyFUcV+fMN81M3ph62ToBdi/iTqoUnp0g2BiIwNAcWW32VlLgdYloMq98kaOuFnvER9iUUMOE=;

Received: from 84-216-123-141.customers.ownit.se ([84.216.123.141] helo=QLITFQJV)

by gamma.tagtech.ru with esmtpsa (UNKNOWN:AES256-GCM-SHA384:256)

(Exim 4.77)

(envelope-from )

id 1wUq91-0005Ma-JU

for doctor@nk.ca; Wed, 03 Jun 2026 21:16:48 +0300

Message-ID: <3998f58fe533c142d158ccb5359d4ca4@rzhevsky.net>

From: BBB Great West + Pacific

To:

Subject: =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

Date: Wed, 03 Jun 2026 19:16:42 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="dc378f2d9c91c5721b21a48400022a40"

X-User: 4682

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: BBB Great West + Pacific sent you a message about Complaint

Received: ID 27621257



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.166.99.196 listed in dnsbl.ahbl.org]

[83.166.99.196 listed in dnsbl.ahbl.org]

[83.166.99.196 listed in dnsbl.ahbl.org]

[83.166.99.196 listed in dnsbl.ahbl.org]

[84.216.123.141 listed in dnsbl.ahbl.org]

[84.216.123.141 listed in dnsbl.ahbl.org]

[84.216.123.141 listed in dnsbl.ahbl.org]

[84.216.123.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.166.99.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.166.99.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.166.99.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.166.99.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[84.216.123.141 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[84.216.123.141 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 J_CHICKENPOX_22 BODY: 2alpha-pock-2alpha

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[84.216.123.141 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

[83.166.99.196 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[83.166.99.196 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[83.166.99.196 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

BBB Compaints phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 17:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUvMm-00000000FVH-198c

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 17:51:20 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 17:51:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [69.160.61.48] (port=64839 helo=1loudgt.nexcess.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUpq4-00000000Gtp-2nHg

for doctor@nk.ca;

Wed, 03 Jun 2026 11:57:20 -0600

Received: (qmail 23777 invoked by uid 108); 3 Jun 2026 13:56:19 -0400

Received: from unknown (HELO 1loudgt.nexcess.net) (127.0.0.1)

by 1loudgt.nexcess.net with SMTP; 3 Jun 2026 13:56:19 -0400

Received: from SLVKVFOW ([82.49.212.43])

by 1loudgt.nexcess.net with ESMTPSA

id N92aCMJqIGrfXAAAzWod9Q

(envelope-from )

for ; Wed, 03 Jun 2026 13:56:18 -0400

Message-ID:

From: BBB Great West + Pacific

To:

Subject: =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

Date: Wed, 03 Jun 2026 18:56:14 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="443f9197c69030d35528e1d10005be10"

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: BBB Great West + Pacific sent you a message about Complaint

Received: ID 27621257



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[69.160.61.48 listed in dnsbl.ahbl.org]

[69.160.61.48 listed in dnsbl.ahbl.org]

[69.160.61.48 listed in dnsbl.ahbl.org]

[69.160.61.48 listed in dnsbl.ahbl.org]

[82.49.212.43 listed in dnsbl.ahbl.org]

[82.49.212.43 listed in dnsbl.ahbl.org]

[82.49.212.43 listed in dnsbl.ahbl.org]

[82.49.212.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[69.160.61.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[69.160.61.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[69.160.61.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[69.160.61.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[82.49.212.43 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

[69.160.61.48 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[69.160.61.48 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.6 J_CHICKENPOX_22 BODY: 2alpha-pock-2alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

BBB Compaints phish Part 2





BBB LOGO





BBB Great West + Pacific sent you a message about

Complaint Received: ID 27621257





TH!NK



Address:

500 Ala Moana Blvd Bldg 7 Ste 400

Honolulu, HI 96813-4920



Phone: (808) 224-6694



Website: https://think-training.com



Email: doctor@nk.ca



Local BBB: BBB Great West + Pacific



BBB File Opened: 3/7/2014



Years in Business: 23



Business Started: 1/6/2003



Category: Management Consultant



⚠ This business is NOT BBB Accredited.





Respond Within 10 Days

Your BBB received a complaint about your business. The complaint was submitted on May 8, 2026 and assigned ID 27621257. Although BBB makes no judgment on validity, we recognize there are two sides to every dispute. We request your good faith effort to resolve it outside the legal system.

⚠ PAY ATTENTION! Nature of complaint: Unsatisfactory product/service quality and delayed delivery! Requested resolution: Full refund plus written apology. The complainant submitted all known details about TH!NK and referenced the email address doctor@nk.ca. Please respond promptly to resolve this matter.

Respond to this Complaint



Please understand that the consumer’s complaint and your response may be publicly posted on the BBB web site (BBB reserves the right to not post in accordance with BBB policy). By submitting your response, you are representing that it is a truthful account of your experience with this consumer. BBB may edit the complaint or your response to protect privacy rights and to remove inappropriate language.





Key Details







Complaint ID: 27621257



Submitted: May 8, 2026



Access Code: 27621257-3D67D



Complainant: click to reveal



Category: Product Quality & Delivery



Business: TH!NK



If you received this complaint via Postal Mail, you may respond online using the link below or respond by mail using the address above.



To access/respond to this complaint online:



Go to:respond-bbb-org/letter/



Enter the following code: 27621257-3D67D





Sender Details









Service Representative - (609) 588-0808 Ext: 11 - complaints@bbb.org



BBB Great West + Pacific





Facebook



Instagram



LinkedIn



Twitter



YouTube





Better Business Bureau® | BBB.org



© 2026, International Association of Better Business Bureaus, Inc., separately incorporated Better Business Bureau organizations in the US and Canada, and BBB Institute for Marketplace Trust, Inc. All rights reserved.



Unsubscribe | Privacy | Log In



BBB compaints phish from Japan Part 2





BBB LOGO





BBB Great West + Pacific sent you a message about

Complaint Received: ID 27621257





TH!NK



Address:

500 Ala Moana Blvd Bldg 7 Ste 400

Honolulu, HI 96813-4920



Phone: (808) 224-6694



Website: https://think-training.com



Email: doctor@nk.ca



Local BBB: BBB Great West + Pacific



BBB File Opened: 3/7/2014



Years in Business: 23



Business Started: 1/6/2003



Category: Management Consultant



⚠ This business is NOT BBB Accredited.





Respond Within 10 Days

Your BBB received a complaint about your business. The complaint was submitted on May 8, 2026 and assigned ID 27621257. Although BBB makes no judgment on validity, we recognize there are two sides to every dispute. We request your good faith effort to resolve it outside the legal system.

⚠ PAY ATTENTION! Nature of complaint: Unsatisfactory product/service quality and delayed delivery! Requested resolution: Full refund plus written apology. The complainant submitted all known details about TH!NK and referenced the email address doctor@nk.ca. Please respond promptly to resolve this matter.

Respond to this Complaint



Please understand that the consumer’s complaint and your response may be publicly posted on the BBB web site (BBB reserves the right to not post in accordance with BBB policy). By submitting your response, you are representing that it is a truthful account of your experience with this consumer. BBB may edit the complaint or your response to protect privacy rights and to remove inappropriate language.





Key Details







Complaint ID: 27621257



Submitted: May 8, 2026



Access Code: 27621257-3D67D



Complainant: click to reveal



Category: Product Quality & Delivery



Business: TH!NK



If you received this complaint via Postal Mail, you may respond online using the link below or respond by mail using the address above.



To access/respond to this complaint online:



Go to:respond-bbb-org/letter/



Enter the following code: 27621257-3D67D





Sender Details









Service Representative - (609) 588-0808 Ext: 11 - complaints@bbb.org



BBB Great West + Pacific





Facebook



Instagram



LinkedIn



Twitter



YouTube





Better Business Bureau® | BBB.org



© 2026, International Association of Better Business Bureaus, Inc., separately incorporated Better Business Bureau organizations in the US and Canada, and BBB Institute for Marketplace Trust, Inc. All rights reserved.



Unsubscribe | Privacy | Log In



BBB compaints phish from Japan Part 1



X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 17:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUvMb-00000000FSH-2ZPz

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 17:51:09 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 17:51:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from nomad.or.jp ([163.44.7.92]:42368)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUpSH-00000000CEL-3Ley

for doctor@nk.ca;

Wed, 03 Jun 2026 11:32:46 -0600

Received: (qmail 29549 invoked by VF by uid 0); 4 Jun 2026 02:31:44 +0900

X-Vade-Tracker: score=549, verdict=spam:high, state=1

spamcause=gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgddukeehvddtucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecupffvvffrveenuceurghilhhouhhtmecufedttdenucgoufhushhpvggtthffohhmrghinhculdegledmnegoufhprghmgfhmrghilhdqohhuthculdehtddtmdenucfjughrpefkhffvufffgggtsegrtdhjredttdejnecuhfhrohhmpeeuueeuucfirhgvrghtucghvghsthcuodcurfgrtghifhhitgcuoehsqdihrghmrghmohhtohesnhhomhgrugdrohhrrdhjpheqnecuggftrfgrthhtvghrnhepteeihefgvddtkedvjeejjeehlefgvdduveeuvddtgeehkefhgeehleekleeuteehnecuffhomhgrihhnpegssggsrdhorhhgpdhthhhinhhkqdhtrhgrihhnihhnghdrtghomhdpsghlohhgshhpohhtrdgtohhmpdhgohhoghhlvgdrtghomhdpfhgrtggvsghoohhkrdgtohhmpdhinhhsthgrghhrrghmrdgtohhmpdhlihhnkhgvughinhdrtghomhdpthifihhtthgvrhdrtghomhdphihouhhtuhgsvgdrtghomhenucfkphepleegrdduudegrdduhedtrdelleenucfuphgrmhfkphepleegrdduudegrdduhedtrdelleenucfuphgrmhfgmhgrihhlpegtohhmphhlrghinhhtshessggssgdrohhrghenucfuphgrmhetlhhphhgrufhusghjvggtthephihouhhrjihfrhhomhgprghlihgrshilrhgvtggvihhvvggurggtohhmphhlrghinhhtrggsohhuthihohhurhgsuhhsihh

nvghsshenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeelgedruddugedrudehtddrleelpdhhvghlohephffrfgfuiffuuegipdhmrghilhhfrhhomhepshdqhigrmhgrmhhothhosehnohhmrggurdhorhdrjhhppdhnsggprhgtphhtthhopedupdhrtghpthhtohepughotghtohhrsehnkhdrtggrpdhmohguvgepshhmthhpohhuthenucfuphgrmhfkphepleegrdduudegrdduhedtrdelle

Received: from unknown (HELO FPUSGSBX) (s-yamamoto@nomad.or.jp@94.114.150.99)

by dc58.etius.jp (163.44.7.92) with ESMTPA; 4 Jun 2026 02:31:44 +0900

Message-ID:

From: BBB Great West + Pacific

To:

Subject: =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

Date: Wed, 03 Jun 2026 18:31:38 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="5bc8b310a424306c638b71c8000670b0"

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: BBB Great West + Pacific sent you a message about Complaint

Received: ID 27621257



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.44.7.92 listed in dnsbl.ahbl.org]

[163.44.7.92 listed in dnsbl.ahbl.org]

[163.44.7.92 listed in dnsbl.ahbl.org]

[163.44.7.92 listed in dnsbl.ahbl.org]

[94.114.150.99 listed in dnsbl.ahbl.org]

[94.114.150.99 listed in dnsbl.ahbl.org]

[94.114.150.99 listed in dnsbl.ahbl.org]

[94.114.150.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.44.7.92 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.44.7.92 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.44.7.92 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.44.7.92 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[94.114.150.99 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

[163.44.7.92 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[94.114.150.99 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[94.114.150.99 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 J_CHICKENPOX_22 BODY: 2alpha-pock-2alpha

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.44.7.92 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=

=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=

French rental demand phish from Google Gmail Part 2

--0000000000003bca7f06535dd183

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Chers locataires,



Nous esp=C3=A9rons que vous allez bien.



Nous vous =C3=A9crivons afin de vous informer d'un changement important

concernant le paiement de votre loyer. Dans un souci de simplification, de

rapidit=C3=A9 et de s=C3=A9curit=C3=A9, nous vous invitons =C3=A0 effectuer=

vos paiements par

virement Interac, et ce =C3=A0 compter de ce mois-ci.



Ce nouveau mode de paiement nous permettra :



- de suivre plus facilement les transactions ;

- de r=C3=A9duire les d=C3=A9lais de traitement ;

- et de nous assurer que chaque loyer est bien re=C3=A7u =C3=A0 temps.



Informations pour le virement :





Adresse courriel du destinataire : agenceimmobilier1990@outlook.com



Question de s=C3=A9curit=C3=A9 : VIREMENT





R=C3=A9ponse : INTERAC



Une fois le virement effectu=C3=A9, merci de nous en informer par retour de

courriel. Si possible, nous vous invitons =C3=A0 joindre une capture d'=C3=

=A9cran ou

une confirmation du virement afin de faciliter la mise =C3=A0 jour rapide d=

e

votre dossier.



Nous comprenons que ce changement puisse n=C3=A9cessiter un temps d'adaptat=

ion.

Soyez assur=C3=A9(e) que nous restons disponibles pour vous accompagner tou=

t au

long de cette transition.



N=E2=80=99h=C3=A9sitez pas =C3=A0 nous contacter pour toute question ou pou=

r obtenir de

l'aide lors de votre premier virement.



Nous vous remercions pour votre collaboration et votre confiance. Votre

confort et votre tranquillit=C3=A9 d=E2=80=99esprit demeurent nos priorit=

=C3=A9s.



Pour toute demande, vous pouvez nous =C3=A9crire =C3=A0 :

agenceimmobilier1990@outlook.com



Bien cordialement,





Service Locative



--0000000000003bca7f06535dd183

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Chers locataires,

Nous esp=C3=A9rons que vous=

allez bien.

Nous vous =C3=A9crivons afin de vous informer d'un c=

hangement important concernant le paiement de votre loyer. Dans un souci de=

simplification, de rapidit=C3=A9 et de s=C3=A9curit=C3=A9, nous vous invit=

ons =C3=A0 effectuer vos paiements par virement Interac, et ce =C3=A0 compt=

er de ce mois-ci.

Ce nouveau mode de paiement nous permettra :


>
  • de suivre plus facilement les transactions ;
  • de r=C3=A9duire l=

    es d=C3=A9lais de traitement ;
  • et de nous assurer que chaque loyer =

    est bien re=C3=A7u =C3=A0 temps.
  • Informations pour le v=

    irement :


    Adresse courriel du destinataire :
    color=3D"#0000ff">=C2=A0
    ,246);font-family:"Google Sans",Roboto;font-size:14px;text-align:=

    center">
    ook.com" target=3D"_blank">agenceimmobilier1990@outlook.com

    n>

    Question de s=C3=A9curit=C3=A9 :=C2=A0
    s,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;color=

    :rgb(200,38,19)">VIREMENT


    R=C3=A9ponse :=C2=A0
    =3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvet=

    ica,sans-serif;font-size:16px;color:rgb(200,38,19)">
    tyle=3D"vertical-align:inherit">
    inherit">INTERAC

    Une fois le virement effectu=

    =C3=A9, merci de nous en informer par retour de courriel. Si possible, nous=

    vous invitons =C3=A0 joindre une capture d'=C3=A9cran ou une confirmat=

    ion du virement afin de faciliter la mise =C3=A0 jour rapide de votre dossi=

    er.

    Nous comprenons que ce changement puisse n=C3=A9cessiter un temps=

    d'adaptation. Soyez assur=C3=A9(e) que nous restons disponibles pour v=

    ous accompagner tout au long de cette transition.

    N=E2=80=99h=C3=A9si=

    tez pas =C3=A0 nous contacter pour toute question ou pour obtenir de l'=

    aide lors de votre premier virement.

    Nous vous remercions pour votre =

    collaboration et votre confiance. Votre confort et votre tranquillit=C3=A9 =

    d=E2=80=99esprit demeurent nos priorit=C3=A9s.

    Pour toute demande, vo=

    us pouvez nous =C3=A9crire =C3=A0 :=C2=A0
    b(233,238,246);font-family:"Google Sans",Roboto;font-size:14px;te=

    xt-align:center">
    1990@outlook.com" target=3D"_blank">agenceimmobilier1990@outlook.com

    ont>

    Bien cordialement,


    Service Locative





    --0000000000003bca7f06535dd183--

    French rental demand phish from Google Gmail Part 1

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    Return-path:

    Envelope-to: dave@doctor.nl2k.ab.ca

    Delivery-date: Wed, 03 Jun 2026 12:46:00 -0600

    Received: from mail-dl1-f48.google.com ([74.125.82.48]:48466)

    by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

    (Exim 4.99.3 (FreeBSD))

    (envelope-from )

    id 1wUqaf-00000000PWE-2lZ4

    for dave@doctor.nl2k.ab.ca;

    Wed, 03 Jun 2026 12:45:30 -0600

    Received: by mail-dl1-f48.google.com with SMTP id a92af1059eb24-137dd523634so6690896c88.1

    for ; Wed, 03 Jun 2026 11:44:33 -0700 (PDT)

    ARC-Seal: i=1; a=rsa-sha256; t=1780512268; cv=none;

    d=google.com; s=arc-20240605;

    b=lROFAqEKpNULqImhAoOmCP3sMsPBvTZpORL5ZZNn/QU6xbPk1T5W1+XgsxMAQ6Sud+

    wWMZiZF5im2ZvI7XbFpkN2jsnA9A0//e3yX6z50f2dQpJrRQXCzY3tVv1ZeK2rtfew9Q

    lbtemD0mPvOoYrQAarvlesu4aDcb1Syo5PEz9n3DwsjW9+5xc6oVicr+nxMl3dLg0HFY

    aq8itXxcWDl55fuxyPx1vjYyI/bTQCQHZRKkEfhIHZARM9xa3bF6TjY04LmsfkDLy+04

    oWjDXThlca32wytLoLYsaMCFrrI5htqJnq8qZJhzNLej9KLE7CWiYjarhWOmJtsWgy3m

    u/TQ==

    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

    h=to:subject:message-id:date:from:reply-to:mime-version

    :dkim-signature;

    bh=O/5wFZUtNunhXLGC5aJYw/gHqbalIm305kc+HXYesNY=;

    fh=zVbOMpQjN1ElltPgYQHeloHI1ULle2HETGB3YJEe754=;

    b=AkIed8FKjZ2zIGaARfsGaanXUZrUL0c10xqqIBFBEURXScjs1BDFWXxqv35VIWCnYk

    l5Nt2WtEGBA6HPniJq7Gdj9Nsd1+RFwPue2p9ZvB8W2/iTQUHgSV2uR2r/NuYiueigMm

    xcW/cJ8Hxu0nnsbW5yE6/M9H36MRMs6Q/f9z4l/oKEpT0G4idh6LDqnKxPmoXwvOkH1w

    oJfPmORsC1LpP6jrss0DsGoTm8xFWHcfxodanrBmaei9Ra6p9jpQ3ytqrZGqXbir0ioi

    nWi+rWjLsM7eKhs5MrhGhdTb6C5NwZD87egOWSCDqd8TyQc5eS3fZWaDF5d4d93QRc7A

    0BoQ==;

    darn=doctor.nl2k.ab.ca

    ARC-Authentication-Results: i=1; mx.google.com; arc=none

    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=edutec-sed-ms-gov-br.20251104.gappssmtp.com; s=20251104; t=1780512268; x=1781117068; darn=doctor.nl2k.ab.ca;

    h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

    :subject:date:message-id:reply-to;

    bh=O/5wFZUtNunhXLGC5aJYw/gHqbalIm305kc+HXYesNY=;

    b=GzScLCVnafy9HCuKhLZeCNrBvyoWCDYvML3W8f9D/pEZ/ZHnTkQ3iXxGnTyhV3H6wF

    /4/NghM0JfynWn6FcY2sixceWF9M6UNR0zPhDmfvncXb1oEWgmp6np6CVwfwc2cJkpRa

    NHpdLGaqa74UxYgk1GqDH+XuIuD/A6Vstel/4/ixFXq5O2PNWrHuJqKZ5iSAyyw8OLUA

    CqxVw0WwnC0DTZzhj8akaWZa97HonDaOogs522yA47HZKfXGTAHt1ht9R/sGS/L8v9Bl

    QYWQtGIhN5mHjxzWOwEaXQvkOU4K21HGHI6oeoAB9Op1zQpwXF6zMxosGthB5bllkrq9

    Xc7w==

    X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=1e100.net; s=20251104; t=1780512268; x=1781117068;

    h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

    :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

    bh=O/5wFZUtNunhXLGC5aJYw/gHqbalIm305kc+HXYesNY=;

    b=a7lWdL9JdxVpnmd+8tlZPBrtxQ6SAfv0vfBoVtCcaUaVM6fRd426LCwNLoEkdYKYJH

    qn8K7Jl2BcJZ85wWtt0GAt1HNTy8ukroOHGD78gEGfuCI2EdZa/R03Tk0iU6jJBgYV93

    4rw5g788cPj7GwWS2smj4/FwW/AAtuY5/gfhNctHVfhQ+oJg3neg0fKcR8Eq3twxhAKN

    5D5huIdO2PAMTwSRPMJZm/Kj3hevaYr7SrVoF+a69pivQkGLJKFpSI+c9cmUMzax0SwC

    e+hVWL85eZxtcut+CUX42MmjScfozQBf+298LPs83ccHAPC0C7RBNyqJh6pQg1v4Ohmi

    cjCQ==

    X-Forwarded-Encrypted: i=1; AFNElJ8v4rZW1ja2PEzIY9Hk615FP78PIjK5SceI/inDF29vHRjmPIFls7YMrboto4xkb1a/JAMz@doctor.nl2k.ab.ca

    X-Gm-Message-State: AOJu0Yxj5tF+g7uhYh/jMl5uT6uyjQInQ+xgKMu6bcHXYaobApsaYCNc

    gBjBizkhfARqff7yhkP66sx5vQeSH2QpOIowtsF7vXLty8HGlOVBSGviA9loqFqBBml5g6PErVp

    pTzIQL5/8Fg4ALCqTb0+oxJBHXYPNXdC8YMbyXrxKsw==

    X-Gm-Gg: Acq92OGBOM9Rk1EhY0vhEB4pDkquu5rDBjeqdFHNHwZuoVRYqSVoQLy1T9DU5elIwak

    TLbsjMDZboB5rwImGmWrmvyhB2frGgEgDjXz8kXf+9f34GqvcdM3KBwenRnrnXnkFQtGIx4fDme

    jyFaGaDcVNdMlnej9358NAclSyeHCIYwsLCJNJW3yIHdGOpaUlf2NTZXcI24e8FKaYc0jT8eDKT

    AgK3h4S/77tzqJSPsm6tQyTt/ckD2CRSuQCOeeKZAgR0HK4PwWB/r4Gu24wwEkBhCaeIuRqwwqJ

    EaxaKfbdAzjGKf5l99sI

    X-Received: by 2002:a05:7022:7a4:b0:136:fac0:84dc with SMTP id

    a92af1059eb24-137f693a12amr1817845c88.3.1780512267680; Wed, 03 Jun 2026

    11:44:27 -0700 (PDT)

    MIME-Version: 1.0

    Reply-To: servicelocative10@gmail.com

    From: Service Locative

    Date: Wed, 3 Jun 2026 20:44:07 +0200

    X-Gm-Features: AVHnY4L-_t2ltkxYbpdNMkg7WtLilyqSwEwp1Qz6Fb5N1eO5NUDf5udQOqiiLmI

    Message-ID:

    Subject: =?UTF-8?Q?Re=3A_Rappel_=3A_Loyer_Mai_=2D_r=C3=A9gulariser_votre_paiement?=

    =?UTF-8?Q?_=F0=9F=8F=A0?=

    To: undisclosed-recipients:;

    Content-Type: multipart/alternative; boundary="0000000000003bca7f06535dd183"

    Bcc: dave@doctor.nl2k.ab.ca

    X-Spam_score: 9.5

    X-Spam_score_int: 95

    X-Spam_bar: +++++++++

    X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

    has identified this incoming email as possible spam. The original

    message has been attached to this so you can view it or label

    similar future email. If you have any questions, see

    @@CONTACT_ADDRESS@@ for details.



    Content preview: Chers locataires, Nous espérons que vous allez bien. Nous

    vous écrivons afin de vous informer d'un changement important concernant

    le paiement de votre loyer. Dans un souci de simplification, de rapidité

    et de sécurité, nous vous invitons à effectu [...]



    Content analysis details: (9.5 points, 5.0 required)



    pts rule name description

    ---- ---------------------- --------------------------------------------------

    1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

    [74.125.82.48 listed in dnsbl.ahbl.org]

    [74.125.82.48 listed in dnsbl.ahbl.org]

    [74.125.82.48 listed in dnsbl.ahbl.org]

    [74.125.82.48 listed in dnsbl.ahbl.org]

    0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

    [74.125.82.48 listed in dnsbl.ahbl.org]

    1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

    [74.125.82.48 listed in dnsbl.ahbl.org]

    0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

    [74.125.82.48 listed in dnsbl.ahbl.org]

    0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

    [74.125.82.48 listed in dnsbl.ahbl.org]

    1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    [74.125.82.48 listed in will-spam-for-food.eu.org]

    -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

    trust

    [74.125.82.48 listed in list.dnswl.org]

    -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

    safe-sa@returnpath.net

    [Excessive Number of Queries | ]

    -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

    cert-sa@returnpath.net

    [Excessive Number of Queries | ]

    -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

    [74.125.82.48 listed in wl.mailspike.net]

    1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

    https://senderscore.org/blacklistlookup/

    [74.125.82.48 listed in bl.score.senderscore.com]

    -0.0 SPF_PASS SPF: sender matches SPF record

    -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

    1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

    0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

    headers

    0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

    [servicelocative10(at)gmail.com]

    0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

    0.0 HTML_MESSAGE BODY: HTML included in message

    0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

    1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

    freemails

    2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

    2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

    Subject: {SPAM?} =?UTF-8?Q?Re=3A_Rappel_=3A_Loyer_Mai_=2D_r=C3=A9gulariser_votre_paiement?=

    =?UTF-8?Q?_=F0=9F=8F=A0?=

    Geek Squad phish from Microsoft Outlook Part 3

    1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [209.85.221.69 listed in will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    [40.93.20.59 listed in will-spam-for-food.eu.org]

    -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

    trust

    [40.93.20.59 listed in list.dnswl.org]

    -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

    safe-sa@returnpath.net

    [Excessive Number of Queries | ]

    -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

    cert-sa@returnpath.net

    [Excessive Number of Queries | ]

    -0.0 SPF_HELO_PASS SPF: HELO matches SPF record

    -0.0 SPF_PASS SPF: sender matches SPF record

    1.0 HK_RANDOM_REPLYTO Reply-To username looks random

    1.0 HK_RANDOM_FROM From username looks random

    0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

    3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

    1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

    https://senderscore.org/blacklistlookup/

    [40.93.20.59 listed in bl.score.senderscore.com]

    -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

    [40.93.20.59 listed in wl.mailspike.net]

    0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

    [haressaznzxrrsxaxz321(at)gmail.com]

    0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

    [haressaznzxrrsxaxz321(at)gmail.com]

    -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

    domain

    0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

    domains are different

    0.1 TW_RW BODY: Odd Letter Triples with RW

    0.6 MEGALONGWORD BODY: Uses really overlong words

    0.3 LONGWORD BODY: Uses overlong words

    0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

    0.0 HTML_MESSAGE BODY: HTML included in message

    0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

    freemail headers are different

    0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

    2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

    0.1 TO_IN_SUBJ To address is in Subject

    3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

    Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Geek_Squad_Renewal_Transaction_Record_=40_s?=

    =?UTF-8?Q?t_3=2E_j=C3=BAn_=2D_=C5=A1t_4=2E_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutl?=

    =?UTF-8?Q?ook=2Ecom=29?=



    Geek Squad phish from Microsoft Outlook Part 4



    Haresasz Nxysarwsa has invited you to Geek Squad Renewal Transaction Record

    Title: Geek Squad Renewal Transaction Record

    Location: https://meet.google.com/kjr-gvik-rir

    When: June 3 – 4, 2026

    Organizer:

    Haresasz Nxysarwsa

    Description: Dear Client,



    We are pleased to notify you that the Geek Squad 365 Advanced Protection Plan has undergone a successful renewal for another three-year term.



    The required amount of $214.99 was charged against your saved payment option. Please wait up to twenty-four hours for this activity to reflect on your personal bank account statements.



    Transaction Overview:

    Item: 365 Advanced Protection Plan

    Span: 3 Years

    Charged: $214.99



    If this charge is unfamiliar or unauthorized by you, dial our Billing Specialists right now at +1 800 388 3980 to request instant and complete cancellation help.



    Thank you for continuing to prefer Geek Squad for safety.



    Respectfully,

    Geek Squad Billing Team



    -::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

    Pripojiť sa cez Google Meet: https://meet.google.com/kjr-gvik-rir



    Viac o službe Meet sa dozviete na https://support.google.com/a/users/answer/9282720



    Túto sekciu neupravujte.

    -::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

    Attendees:



    cynthiaperez389903@groups.outlook.com



    Geek Squad Renewal Transaction Record

    Pripojiť sa cez Google Meet – Dear Client, We are pleased to notify you that the Geek Squad 365 Advanced Protection Plan has undergone a successful renewal for another three-year term. The required amount of $214.99 was charged



    Pripojiť sa cez Google Meet

    Odkaz na stretnutie

    meet.google.com/kjr-gvik-rir

    Dear Client,



    We are pleased to notify you that the Geek Squad 365 Advanced Protection Plan has undergone a successful renewal for another three-year term.



    The required amount of $214.99 was charged against your saved payment option. Please wait up to twenty-four hours for this activity to reflect on your personal bank account statements.



    Transaction Overview:

    Item: 365 Advanced Protection Plan

    Span: 3 Years

    Charged: $214.99



    If this charge is unfamiliar or unauthorized by you, dial our Billing Specialists right now at +1 800 388 3980 to request instant and complete cancellation help.



    Thank you for continuing to prefer Geek Squad for safety.



    Respectfully,

    Geek Squad Billing Team

    Kedy

    streda 3. jún – štvrtok 4. jún 2026

    Organizátor

    Haresasz Nxysarwsa

    haressaznzxrrsxaxz321@gmail.com

    Hostia

    (Zoznam hostí bol na žiadosť organizátora skrytý)

    Odpoveď na cynthiaperez389903@groups.outlook.com

    Áno



    Nie



    Možno

    Ďalšie možnosti



    Pozvánka z Kalendára Google



    Túto správu ste dostali, pretože ste účastníkom danej udalosti.



    Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

    Geek Squad phish from Microsoft Outlook Part 2

    X-Microsoft-Antispam-Message-Info:

    =?utf-8?B?S3B4c0lzaXlvcDJUcUJzc3d4dVg0MlVLYjRtSHZrcWQ3TEo5am9XazhJYmlV?=

    =?utf-8?B?bFBRUXJSaG42Q2pEdFIwQjZhZUxvTDNNK0tnYlNlUERLVmdKT0FFd21CVFla?=

    =?utf-8?B?c2M3bzZRTURhWVdKT0w3YzZicU5ERGFEa0o3YndTRFZzSWhjWVhUVGZ5ek9a?=

    =?utf-8?B?ak1KZklOR0VtakhGNnk3cTVlVzFyYWxxTGJNRTBYZGY5N3Nzekg5cG9na1Ft?=

    =?utf-8?B?NHZpeVlrSjUwSzJ5d0VSa2M2SlFtZy9Tcmp3NjVXcHNLdTlPaTVVdC9NZElJ?=

    =?utf-8?B?Ui94K1k1b0NoTkIzZnE5L0MzMmlzajh6MFhLdDc3TUxWaVUyTG8rcUJIcG9p?=

    =?utf-8?B?ajB1VWgrckY5bDdOdzBMR2pqbkREUEJrZDB2UzNGMnlYclFJZFNVWDBXSWZJ?=

    =?utf-8?B?U0NZVlhZRjByUUVWU05Gc0k2Rmx2ZEM2OWV1bE1OdWhEZW8yNWROTlRpSmVu?=

    =?utf-8?B?RU1SRVZWU28zZlRoR2k0N0doc0UrY2ZiK1lHaExmd21NWjlkd2Z2U2FMZmx0?=

    =?utf-8?B?V0JkVlplcFJac2ZRVGFkc1Y4SmdieEUxbFJZZkNQMzZRN2ZnTHExWXNoZjJo?=

    =?utf-8?B?QnNwam9HNCtaN0Uvc2ZoVDcwWElCdzBzSmlvS3FpU1lpNUpTZkxLSnVjbnBX?=

    =?utf-8?B?TThPdzM3OEpIMU5CNEZGWnc3MUZ5cjlnUlZUSENoQTlWMmVVL1VtUFFCT3l0?=

    =?utf-8?B?N3V0c1BrYWJKa3hGQVRuS0NLNEZVVWtLOThBeVBCMmp6eXZMVHZqbW91ZnBs?=

    =?utf-8?B?cG9DUG9VOS9EVENOM2J6T3Q0SmMyeXRqb3F2OVZvQ0lyendQUjJ5Z1ZLQUFL?=

    =?utf-8?B?aCt2dkoxZHFuL3cxdWgxYmJnM25aN1hJbWNZWXNqVHg1L1FKZ2VMdGhCczJQ?=

    =?utf-8?B?VkF3SzRKUktxTEtSdjRoNU1RNmFQMU5YTXVFc3ZOQlg1OGJkc1o1L2xKVG1P?=

    =?utf-8?B?SnQrTGNjV1dldlpIQVVYSnJrRlZ6aXlIRUk1RmFUOHVkeUFjaVprbTVacVRL?=

    =?utf-8?B?K0t4R2dBVWNSNjBET0gxSzdCUEpuRWVDRFdBanNTVE9xWU94OFhnTFJ3RVA4?=

    =?utf-8?B?OVJNeW8wSy9GTy93R2xaMnBDODdYeVU0K3ViaGh6TDNwV0ZLdXByNnpablRk?=

    =?utf-8?B?ZFFhbGpoVVlad2lxTmdlUVF6dmwzSVhHeExYc3drVUZNNklzTEhkVWRhemd4?=

    =?utf-8?B?S2ZMM29OaUFiR1FlRnNYSitmd1pPMjFhMDFXU0lyNzIyQXZQM29leWNyNEJ0?=

    =?utf-8?B?ck1QM0NVV0dxUXRpZ2lveTdDUjRPVklmaHROYW4vdmxpSVp0YjJiRVpuSElZ?=

    =?utf-8?B?c3U3T3pWblE0WnM3UnEwMHhiK2xwbWFUQWtSbG9hdFFXV2RQZHI4QVFVMTkw?=

    =?utf-8?B?dTZUTExWZzA0T3A2M3IxeUNDajE0V2pyY0FLM2ZDamJDaEovVkx3djl3Snlu?=

    =?utf-8?B?Q1RDaFhtTHNhYUJJNVBlR2dPUmpWSGllRVUyUHR0NENqVWxZRVd3YzZieU9T?=

    =?utf-8?B?eUxNQ1RIS3VYVWZSeU50Wmp1NmJ0bHBGU0N6eGlPdWRWY041eHY2ZW13ZlZv?=

    =?utf-8?B?ZlM0RlRoRmVBQ2ZWdVg1ZmxpTmI0YTNhUTliai9aT01xV2cyUGxWWHdSSzdv?=

    =?utf-8?B?YUxqNWd3dkl6azJlUkRCd3JPQ1I1RzBpRExFb3VrOFRIdWJyVEoySTFaUE9l?=

    =?utf-8?B?MS9mdnBqN1VLVmNhNHBQU0NUMy85TmhQQ0RrdjhvTkhLNWw3WHdEREVFRGhs?=

    =?utf-8?B?MFRHcG1UcUl1cVdaMXZ0dlVRNDN1dUlGZVdsQUlQRGFEZDJjUjhrOEVhdG5D?=

    =?utf-8?B?YlpiWCs3MkE2N1B1UXhqSzdhaFp6cXZGdloveE9BQVRhaEdIMFF2TDhVaXVK?=

    =?utf-8?B?KzQ5eGVUTmRKaWkvQ1NHOFpwc0lmeWZvSDN5VnF0WFlrVk84OWQ5VXRoKzNR?=

    =?utf-8?B?Q2xxZS9CbEUvYUlSakF4VUhxeFpsYzlSbit2MCtWUGpmTFVoWC9CYkpVakpo?=

    =?utf-8?B?bzZLUjJRWWlYWE5ianlUYTI4dDduRWlFRnFpZ1ZZTjlqaUxmQ015NzdtSmYv?=

    =?utf-8?B?MEVMV2VZVUM1Z2I3Q3V1K0pCUVdNK1J2aHlVM3RtM2psblliL1hHMHdDTHd2?=

    =?utf-8?B?UHJheG5NRkJwZHJFM21hbWJPN3Yxak5YdWpub2J5dXMraVhFNmRnOGxpVzBS?=

    =?utf-8?B?Zk1IalNHSGc2SExCZlpOclM2V1RMNUo2QnJTYUhjNHhpcUVBUnBtNnVMQUxy?=

    =?utf-8?B?MEhIT0JwYkVWVTRrMzR3MEVFUTM0UkFlZ2dwQzB0bGIxSGVVVzJ0eFYwZlpQ?=

    =?utf-8?B?UlZhRExQeFRIT3ErOEg3emhsM3g1aUFsaVJTNm5hK0ZKZm1oNmdaL2RINEkr?=

    =?utf-8?B?RkdldkV2STdQSGcxcFl1ZW9TSEtvcXorcTZDOWNZZ092OUx0M0JwSVdBT3M0?=

    =?utf-8?B?bnR3OEJuLy9KQzExZ3QxcHZCZGVzZld5SXlmQVZRbVVBeUZGcjNIZFQ1WFB1?=

    =?utf-8?B?WlovSGdJenR3WEdESVJxNDhMMDd3bXhQUUFSTzJmWjZDYzJJejNYeHY3MTVa?=

    =?utf-8?B?SVpLQ2pSSDFtVTgxeGlKUEtEbXNmblhNcERjT241L3NTZVlCSnFpU3Yzckxj?=

    =?utf-8?B?SC9DYld1aGpoZU1ZdEpPelRuNGF6WjV3YUpwLzZHZUpBNGZFNTVlcDhIUFpy?=

    =?utf-8?B?OEtEb21pbXhhYTgxaWoraGxZRnRPNkdBYkRoUWUvZGRBQjVUTTMrQmN3VnBW?=

    =?utf-8?B?SDdpRmhLZ0FVS0tuaEJjcTVoMi81YVIwQmtTeW1OdVZYUndWWFI0RnlWNXo0?=

    =?utf-8?B?Qm00WCtpRmo1S003TGpTQ0xVWDk3ZW5MVzl2RkpFUEZxdURHeUd1T1ZiUXRy?=

    =?utf-8?B?YTBIQmU0L01Yb0hROXJyU25yd05vS09rdnQrRWtya3FCUlpNN0l6aFIxNTYv?=

    =?utf-8?B?RmVncjk3VmErbUdxV1h1Rng3bjF6elFaSE1LV2czV2NaSHlRRGZSMVlTdW5G?=

    =?utf-8?B?TGdpZnVqNVUyWktsM0FZVHFoYk9xK2p3d1lGNkp4SXFacW1GOUF1ZGVMaWZp?=

    =?utf-8?B?VENtbExOaGJnMFErMjZQNHZsbUZnMkJOQXdJendCdnZDaEc1NnhNaHcxSVNy?=

    =?utf-8?B?ZG9kQm1tRVNUSVZzM0xheENrV1Y3V2oxY1BZWDh1endUcTVEeXBrcENHT1p2?=

    =?utf-8?B?ZFlsdTE2eU1VRDRjNTRYbCsxS3E2V3BDZTR4eHZ4K20zRGVidVRGUVYzS2xq?=

    =?utf-8?B?WHB4WUQ2ZEN6OWJWblI3VkdXNmhkREF4YkpBNlZKT1VYcm52ajVlcTRkNFlN?=

    =?utf-8?B?RWZ2MFZzV3ZJK0FEZTF0VnFnZXRIbmpnWHFvQk1QQnpEeVZ2cldWUGxCZjdJ?=

    =?utf-8?B?NGFpZWFrN1BkRXNNN0tsTUtyMWwzVnR2dnBDc2sxdTBFa2owYmUxSVlJd0Ri?=

    =?utf-8?B?THVBWk55bnhyYi9jZ1hZREZPN1ZWd2IySGlwdHhZZFBPTmE2UDNiZWtmQTFW?=

    =?utf-8?B?aWFOOFphNzh1aWZwTnZaM3c9PQ==?=

    X-Auto-Response-Suppress: DR, OOF, AutoReply

    X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jun 2026 17:05:34.8517

    (UTC)

    X-MS-Exchange-CrossTenant-Network-Message-Id: d44c84cf-baf1-40b4-10fc-08dec19253d3

    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

    X-MS-Exchange-CrossTenant-AuthSource: BN3PEPF0000B070.namprd21.prod.outlook.com

    X-MS-Exchange-CrossTenant-AuthAs: Anonymous

    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

    X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA0PPFBD61E95DF

    X-Spam_score: 13.7

    X-Spam_score_int: 137

    X-Spam_bar: +++++++++++++

    X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

    has identified this incoming email as possible spam. The original

    message has been attached to this so you can view it or label

    similar future email. If you have any questions, see

    @@CONTACT_ADDRESS@@ for details.



    Content preview: Geek Squad Renewal Transaction Record streda 3. jún – štvrtok

    4. jún 2026 Pripojiť sa cez Google Meet https://meet.google.com/kjr-gvik-rir?hs=224

    Dear Client,



    Content analysis details: (13.7 points, 5.0 required)



    pts rule name description

    ---- ---------------------- --------------------------------------------------

    1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

    [40.93.20.59 listed in dnsbl.ahbl.org]

    [40.93.20.59 listed in dnsbl.ahbl.org]

    [40.93.20.59 listed in dnsbl.ahbl.org]

    [40.93.20.59 listed in dnsbl.ahbl.org]

    [209.85.221.69 listed in dnsbl.ahbl.org]

    [209.85.221.69 listed in dnsbl.ahbl.org]

    [209.85.221.69 listed in dnsbl.ahbl.org]

    [209.85.221.69 listed in dnsbl.ahbl.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:cafe:0:0:53 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [dnsbl.ahbl.org]

    [2603:10b6:408:106:0:0:0:29 listed in]

    [dnsbl.ahbl.org]

    0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

    [40.93.20.59 listed in dnsbl.ahbl.org]

    1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

    [40.93.20.59 listed in dnsbl.ahbl.org]

    0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

    [40.93.20.59 listed in dnsbl.ahbl.org]

    0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

    [40.93.20.59 listed in dnsbl.ahbl.org]

    Geek Squad phish from Microsoft Outlook Part 1

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    Return-path:

    Envelope-to: dave@doctor.nl2k.ab.ca

    Delivery-date: Wed, 03 Jun 2026 11:24:00 -0600

    Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

    (envelope-from )

    id 1wUpJK-00000000ByD-1xNL

    for dave@doctor.nl2k.ab.ca;

    Wed, 03 Jun 2026 11:23:22 -0600

    Resent-From: The Doctor

    Resent-Date: Wed, 3 Jun 2026 11:23:22 -0600

    Resent-Message-ID:

    Resent-To: Dave Yadallee

    Received: from mail-northcentralusazlp17013059.outbound.protection.outlook.com ([40.93.20.59]:47803 helo=CH4PR04CU002.outbound.protection.outlook.com)

    by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

    (Exim 4.99.3 (FreeBSD))

    (envelope-from )

    id 1wUp36-00000000B1F-1Yuk

    for doctor@doctor.nl2k.ab.ca;

    Wed, 03 Jun 2026 11:06:48 -0600

    Received: from BN9PR03CA0624.namprd03.prod.outlook.com (2603:10b6:408:106::29)

    by IA0PPFBD61E95DF.namprd18.prod.outlook.com (2603:10b6:20f:fc04::c3b) with

    Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.15; Wed, 3 Jun

    2026 17:05:35 +0000

    Received: from BN3PEPF0000B070.namprd21.prod.outlook.com

    (2603:10b6:408:106:cafe::53) by BN9PR03CA0624.outlook.office365.com

    (2603:10b6:408:106::29) with Microsoft SMTP Server (version=TLS1_3,

    cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.7 via Frontend Transport; Wed, 3

    Jun 2026 17:05:34 +0000

    Authentication-Results: spf=pass (sender IP is 209.85.221.69)

    smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

    header.d=google.com;dkim=pass (signature was verified)

    header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

    reason=100

    Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

    209.85.221.69 as permitted sender) receiver=protection.outlook.com;

    client-ip=209.85.221.69; helo=mail-wr1-f69.google.com; pr=C

    Received: from mail-wr1-f69.google.com (209.85.221.69) by

    BN3PEPF0000B070.mail.protection.outlook.com (10.167.243.75) with Microsoft

    SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.0 via

    Frontend Transport; Wed, 3 Jun 2026 17:05:34 +0000

    X-IncomingTopHeaderMarker:

    OriginalChecksum:4393FAFFF573B6344E0942E1A3E986FE019F76EEA5C027EBBE854F8478FD43C4;UpperCasedChecksum:6C48A0AE42715420D9BAAF9ACF7C6428DB02FDB6AFC9B8F42A4CDC5DF256BFD8;SizeAsReceived:3416;Count:15

    Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-45f3d008865so763646f8f.0

    for ; Wed, 03 Jun 2026 10:05:34 -0700 (PDT)

    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=google.com; s=20251104; t=1780506334; x=1781111134; darn=groups.outlook.com;

    h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

    :to:cc:subject:date:message-id:reply-to;

    bh=PBWU+eC0P7pnKJ0K3qMkl+o1ZDueEqy3btmI3kpVTOs=;

    b=Kilc2Yf2j1v0zmI7O/K+kluhbrQNw9EbsRTcJ3AWsG8k5Yu5uimk7MShtw07u/iZD7

    /yGhtYkdTHLwtb24kD/u6KXrjk//Gf6GvFRiTfSKop4pegawYd7KraHgnfCB+b+bIYJz

    HCwIAQDmpBQ18kmyE5ld9fNfjmbqB/2VwU5m6UsHPvxeZplpwepOvheH9IIasWdVSOmw

    cLOXlLXYRseMnKG6hUw4DX6yfAYTPGI/OhaP2zCOFkb1AQxd827PzcLAn0k1IXUMHm+h

    OyR1c3m4g0EqwQFOKA6HZtQDgZPm9bKPSl4lI+j8PO1v42kjzrFm20lvc92Z/pJeOofR

    x06Q==

    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=gmail.com; s=20251104; t=1780506334; x=1781111134; darn=groups.outlook.com;

    h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

    :to:cc:subject:date:message-id:reply-to;

    bh=PBWU+eC0P7pnKJ0K3qMkl+o1ZDueEqy3btmI3kpVTOs=;

    b=XZqi/rLtpgXBixnP1OUxPf8Zb3vte7gUPGjS7rsHKIDvWTA32x73i1yexUablTAnzY

    p/bJvVG8UOil7ad7elLbffvrLHqDwSQkSQE/W4uXw4SlPLlf3G3M/jyb/UgIOcj6OCoq

    YDVIzotYcP0Tr+TwotigPgx6srVoU7Ei7Zs/rLIY4oWB1V3fEgqGuPVUzVDV0jo1kUfo

    Hf/uxoWzfKlGF5Zq0OIJ+eI+MeD09JdUFM/ujhUpfKXADEC/WE9vL96Cfm1j0EbV1Gkw

    kUj3C1MXsrZXwtTBw7pCeZ+G1J1z2tCz4ztJ1UiBd8fo8sP0hTa9lvls/KEPPcrI63op

    t7Wg==

    X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=1e100.net; s=20251104; t=1780506334; x=1781111134;

    h=to:from:subject:date:message-id:sender:reply-to:mime-version

    :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

    bh=PBWU+eC0P7pnKJ0K3qMkl+o1ZDueEqy3btmI3kpVTOs=;

    b=qU10m/oV1WHaldD126B7qDkbGGymmMKeanJDnTlh25MtLPm0rkiL9E0pcjfKZDwUME

    NmFDqn7w7lkmHIYp+wdhuKT/9uhka3sQKTxG/qHlP3B0RpQ6zJv79PzuECGfC1QnzHEh

    DE5HE7js70o+k72ToLvEVlfSqSM8QvbSEDmITb+bBGcvhJzjs5vrNqefwmTT1dUHvFA8

    8vABUMEBZplisU7wqQMfJVMQ1F9ProunS71R4EU3LgUitVvjVhhxU9LITsr/E0WaR7ru

    EAlDrgE+86PqBV1qqkO7opbP5eeXWhfa+xj4wvT1vntVZ5ObrxoAuVTptPiabldYeZ0y

    G20Q==

    X-Gm-Message-State: AOJu0Yy87BKxALg91RcOe/3udk4fEG/Wjp8UlhHnCJtYPIpvRyNFKzt7

    rDtLt2nRnC4tDSi3Oe6KDKvZo4ImfeCBtgodq0c925KKye84KpGrE0OXIcC1eADOO26r+Z46DOH

    bYlAo9Ed9Q0e9RH6+Vg4eh+DVDphrJHnuT0A=

    MIME-Version: 1.0

    X-Received: by 2002:a05:600c:5488:b0:489:32b:ac0b with SMTP id

    5b1f17b1804b1-490bc4d2697mr4131715e9.6.1780506333141; Wed, 03 Jun 2026

    10:05:33 -0700 (PDT)

    Reply-To: Haresasz Nxysarwsa

    Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

    Message-ID:

    Date: Wed, 03 Jun 2026 17:05:33 +0000

    Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Geek_Squad_Renewal_Transaction_Record_=40_s?=

    =?UTF-8?Q?t_3=2E_j=C3=BAn_=2D_=C5=A1t_4=2E_j=C3=BAn_2026_=28cynthiaperez389903=40groups=2Eoutl?=

    =?UTF-8?Q?ook=2Ecom=29?=

    From: Haresasz Nxysarwsa

    To: cynthiaperez389903@groups.outlook.com

    Content-Type: multipart/mixed; boundary="00000000000081e1e506535c6f68"

    X-IncomingHeaderCount: 15

    X-EOPAttributedMessage: 0

    X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

    X-MS-PublicTrafficType: Email

    X-MS-TrafficTypeDiagnostic: BN3PEPF0000B070:EE_|IA0PPFBD61E95DF:EE_

    X-MS-Office365-Filtering-Correlation-Id: d44c84cf-baf1-40b4-10fc-08dec19253d3

    X-MS-Exchange-EOPDirect: true

    X-Sender-IP: 209.85.221.69

    X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

    X-SID-Result: PASS

    X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

    X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

    X-Microsoft-Antispam:

    BCL:0;ARA:1444111002|5149299006|9020799019|6019299003|24102599021|9400799043|6092099016|1680799066|22000799015|5139299004|3069299007|9000799056|3151999006|16200799027|29080799009|34130799006|26000799027|970799063|4040799016|26130799012|32020799003|440099028|3412199025|4302099013|18021999003|26104999009|2145499017|30041999003|1380799030|1370799030|1360799030|21002599022;

    Chinese products spam

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    Return-path:

    Envelope-to: dave@doctor.nl2k.ab.ca

    Delivery-date: Wed, 03 Jun 2026 11:23:00 -0600

    Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

    (envelope-from )

    id 1wUpIj-00000000Bwc-1PQh

    for dave@doctor.nl2k.ab.ca;

    Wed, 03 Jun 2026 11:22:45 -0600

    Resent-From: The Doctor

    Resent-Date: Wed, 3 Jun 2026 11:22:45 -0600

    Resent-Message-ID:

    Resent-To: Dave Yadallee

    Received: from mail-m83212.xmail.ntesmail.com ([156.224.83.212]:24690)

    by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

    (Exim 4.99.3 (FreeBSD))

    (envelope-from )

    id 1wUoJc-0000000099r-43ts

    for sales@nk.ca;

    Wed, 03 Jun 2026 10:19:48 -0600

    Content-Type: multipart/alternative; BOUNDARY="=_Part_2004951_755439476.1780503520464"

    To: sales

    Subject: =?UTF-8?B?RWxldmF0ZSBZb3VyIE91dGRvb3IgQnVzaW5lc3Mgd2l0aCBQcmltaXRpdmUgT3V0ZG9vcuKAmXMgUHJlbWl1bSBTb2x1dGlvbnM=?=

    X-Priority: 3

    MIME-Version: 1.0

    Received: from carson@ysr.cn( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Thu, 4 Jun 2026 00:18:40 +0800 (GMT+08:00)

    From: carson

    Date: Thu, 4 Jun 2026 00:18:40 +0800 (GMT+08:00)

    X-WM-Tid: 0a9e8e47a4c30511kunm3815fd1e2828de

    Message-ID:



    Dear Sales,



    I hope this email finds you well. My name is Carson from Primitive Outdoor, a leading manufacturer of high-performance outdoor furniture, tents, and wagons. We specialize in delivering durable, innovative products designed to enhance any outdoor experience—from family camping to commercial events.



    Why Partner with Us?

    ✅ Advanced Manufacturing: Fully automated production lines with laser cutting and robotic arms ensure precision and efficiency.

    ✅ Certified Quality: BSCI and ISO 9001 compliance guarantee rigorous quality control at every stage.

    ✅ Market Leadership: As a top-tier brand in China, we consistently lead in sales and customer satisfaction.

    ✅ Custom Solutions: Flexible OEM/ODM services tailored to your brand’s unique needs.



    Our Product Highlights

    Outdoor Furniture: Lightweight, weather-resistant designs for all terrains.

    Tents: All-scenario models with 3000mm+ waterproof ratings.

    Carts: Heavy-duty, foldable carts for effortless transport over rough terrain.

    Next Steps

    Interested in exploring collaboration? We’d be happy to share catalogs, samples, or a customized quote. Reply directly or contact me at carson@ysr.cn to discuss how we can support your business growth.

    Looking forward to connecting!





    Carson

    Sales Manager

    ZHEJIANG PRIMITIVE LEISURE PRODUCTS CO.,LTD

    EMAIL:Carson@ysr.cn

    TEL:+86 18757825476

    ADD:Building 4-2, Yongkang Industrial Investment New Materials Industrial Park, No. 309 Huajin Road, Huajie Town, Yongkang, Zhejiang,China