Package delivery phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 May 2026 17:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL8YI-00000000BkR-0BFZ

for dave@doctor.nl2k.ab.ca;

Thu, 07 May 2026 17:54:46 -0600

Resent-From: The Doctor

Resent-Date: Thu, 7 May 2026 17:54:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from nodels4-eu.n0c.com ([185.221.182.178]:19331)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL44H-00000000JTS-0fYJ

for doctor@mail.nl2k.ab.ca;

Thu, 07 May 2026 13:07:38 -0600

Received: from 127.0.0.1 (unknown [10.123.1.128])

by nodels4-eu.n0c.com (Postfix) with ESMTPA id 6B0B08201B;

Thu, 7 May 2026 19:06:27 +0000 (UTC)

DMARC-Filter: OpenDMARC Filter v1.4.1 nodels4-eu.n0c.com 6B0B08201B

Authentication-Results: nodels4-eu.n0c.com; dmarc=fail (p=none dis=none) header.from=stsg.ca

Authentication-Results: nodels4-eu.n0c.com; spf=fail smtp.mailfrom=stsg.ca

DKIM-Filter: OpenDKIM Filter v2.11.0 nodels4-eu.n0c.com 6B0B08201B

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stsg.ca; s=default;

t=1778180789; bh=X3+50UgFRpOc+0CtKV/HQpwkOrXp/k/jQCi+43zrnBU=;

h=Date:From:To:Subject:From;

b=PTgKNEhDF+CANqeTfqnV+vhJSRK8wzuOEO7R5jaFSCyso+8tkZd8NJYPpX35LfcJH

d5+8XGEnoUXi7pdlbJXEzf6zATmI5HHXBBlnSpceu+H6awIzGHDLBqP/mKZOWRtZSk

wvruJ8qvgoJmQ/pAPuziFWbWK4EDPHxcbdDi9/RWeNrQlURgX7xolzRocHuBhaUOUP

T6rT4SdhqQ/JfVqFLmQCNiYpOWqDtYahjnNMJGNadnnateAgz5ggR9zD5Idl9ZqNSh

mdHYnsyFYDqfM0Hx1KDuT3uJswd/Uanm9exMy4Rf3cqoNHFBdD1nXCeIM4l7aK51ML

MgUWxNidZtwGA==

MIME-Version: 1.0

Date: Thu, 07 May 2026 21:06:27 +0200

From: Ca1330

To: undisclosed-recipients:;

Subject: CA Rescheduling Available 3600003113

Message-ID:

X-Sender: support@stsg.ca

Disposition-Notification-To: Ca1330

Content-Type: multipart/alternative;

boundary="=_1c52fa0f853cff20c48a95632a9c7c31"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FedEx Hello,



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.221.182.178 listed in dnsbl.ahbl.org]

[185.221.182.178 listed in dnsbl.ahbl.org]

[185.221.182.178 listed in dnsbl.ahbl.org]

[185.221.182.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.221.182.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.221.182.178 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.221.182.178 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.221.182.178 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

[185.221.182.178 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: stsg.ca]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.221.182.178 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)

Subject: {SPAM?} CA Rescheduling Available 3600003113



--=_1c52fa0f853cff20c48a95632a9c7c31

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed







FedEx



Hello,



A delivery attempt for your package was made on May 7, 2026 at 9:00 a.m.

However, no one was available to receive the shipment at the provided

address.



Shipment details:



Shipping method: Standard delivery

Delivery attempt: May 7, 2026 at 9:00 a.m.



Your package is currently being safely held at our processing center

pending further instructions.



To arrange a new delivery date, please use the link below:



Reschedule Delivery [1]



If you require any additional assistance, our support team remains

available to help.



Thank you for your trust.



Sincerely,

Shipping and Delivery Department



Links:

------

[1]

https://www.riverviewgrillatl.com/ffffffffffffffuieuiooeiueuoiuoieeuioeuoieuoi.html

--=_1c52fa0f853cff20c48a95632a9c7c31

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>


>Fed
Ex



Hello,



A delivery attempt for your package was made on May 7, 2026 at 9=

:00 a.m
. However, no one was available to receive the shipment at =

the provided address.



Shipment details:
>



• Shipping method: Standard delivery
• Delivery a=

ttempt: May 7, 2026 at 9:00 a.m.



Your package is currently being safely held at our processing center pen=

ding further instructions.



To arrange a new delivery date, please use the link below:




rviewgrillatl.com/ffffffffffffffuieuiooeiueuoiuoieeuioeuoieuoi.html">Resche=

dule Delivery



If you require any additional assistance, our support team remains avail=

able to help.



Thank you for your trust.



Sincerely,
Shipping and Delivery Department







--=_1c52fa0f853cff20c48a95632a9c7c31--

Nk.ca credential phishing from OVH

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 May 2026 17:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL8X9-00000000Bg5-23dL

for dave@doctor.nl2k.ab.ca;

Thu, 07 May 2026 17:53:35 -0600

Resent-From: The Doctor

Resent-Date: Thu, 7 May 2026 17:53:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cs73.hostneverdie.com ([27.254.86.11]:49825)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL2iw-00000000Coz-2xr0

for sales@nk.ca;

Thu, 07 May 2026 11:41:32 -0600

Received: from ip72.ip-139-99-161.net ([139.99.161.72])

by cs73.hostneverdie.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.93.0.4)

(envelope-from )

id 1wL2ld-0002bC-GY

for sales@nk.ca; Fri, 08 May 2026 00:44:09 +0700

From: Account Support

To: sales@nk.ca

Subject: sales@nk.ca: Verify Your Email Account Information

Date: 8 May 2026 03:40:25 +1000

Message-ID: <20260508034024.A517CB3EFEFCA9D1@sumontarsuksa.ac.th>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Authenticated-Id: Support

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Email Account Notification – sales@nk.ca Dear sales, This

is a reminder regarding your email account sales@nk.ca. To maintain uninterrupted

access, please review your account settings and ensure your credentials are

current.



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[27.254.86.11 listed in dnsbl.ahbl.org]

[27.254.86.11 listed in dnsbl.ahbl.org]

[27.254.86.11 listed in dnsbl.ahbl.org]

[27.254.86.11 listed in dnsbl.ahbl.org]

[139.99.161.72 listed in dnsbl.ahbl.org]

[139.99.161.72 listed in dnsbl.ahbl.org]

[139.99.161.72 listed in dnsbl.ahbl.org]

[139.99.161.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[27.254.86.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[27.254.86.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[27.254.86.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[27.254.86.11 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[139.99.161.72 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

[27.254.86.11 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[27.254.86.11 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[27.254.86.11 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[27.254.86.11 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.8 ZMIvirSobY_SUB39 SPAM from Sober-Y-Virus

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} sales@nk.ca: Verify Your Email Account Information














: none; text-indent: 0px; letter-spacing: normal; font-family: "Segoe UI", =

Tahoma; font-size: 14px; font-style: normal; font-weight: 400; word-spacing=

: 0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; =

background-color: rgb(45, 106, 210); font-variant-ligatures: normal; font-v=

ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial;=20

text-decoration-color: initial;'>


rder-box;">Email Account Notification – sales@nk.ca




line-height: 1.6; text-indent: 0px; letter-spacing: normal; font-family: "S=

egoe UI", Tahoma; font-size: small; font-style: normal; font-weight: 400; w=

ord-spacing: 0px; white-space: normal; box-sizing: border-box; orphans: 2; =

widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webk=

it-text-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color:=20

initial;'>

D=

ear sales,

This is a reminder regarding your email account sales@nk.=

ca.
To maintain uninterrupted access, please review your account setting=

s and ensure your credentials are current.  




px; border-radius: 4px; border: 1px solid rgb(219, 227, 234); border-image:=

none; box-sizing: border-box;">Operational Requirement:
pan> 

Please access your account via your service provider’s portal and ver=

ify your information as needed.  



ox-sizing: border-box;">
color: rgb(255, 255, 255); font-weight: bold; text-decoration: none; box-s=

izing: border-box; background-color: rgb(45, 106, 210);" href=3D"https://su=

montarsuksaacth.pythonanywhere.com/?eta=3Dsales@nk.ca" target=3D"_blank" re=

l=3D"noreferrer">Login Account Portal



<=

font color=3D"#000000" style=3D"box-sizing: border-box;">Thank you,<=

/p>

<=

font color=3D"#000000" style=3D"box-sizing: border-box;">nk.ca Services Tea=

m



automation spam by salescloseraisystem.com from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 May 2026 17:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL8X4-00000000Bft-2LfE

for dave@doctor.nl2k.ab.ca;

Thu, 07 May 2026 17:53:30 -0600

Resent-From: The Doctor

Resent-Date: Thu, 7 May 2026 17:53:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f47.google.com ([209.85.217.47]:56828)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL2f1-00000000CUq-0jcD

for root@nk.ca;

Thu, 07 May 2026 11:37:28 -0600

Received: by mail-vs1-f47.google.com with SMTP id ada2fe7eead31-62f534f7036so854921137.1

for ; Thu, 07 May 2026 10:36:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=salescloseraisystem.com; s=google; t=1778175386; x=1778780186; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=OXAi1aYYtoHosahIzrJYkKM4T3q0TuHpCUwFMS09S/k=;

b=NfOW/PKlWRkCMbu1tqFI1pbrFXykouYlnbyQW1T6Ap6iGErU6UtWhScG2FLk61kRMb

+g1GIj/6FhvDdY1/OX8VnemQ+oAigsC/gsr4tKYcy1NMPNejkgcAuN2oqk1s7rfA5Obd

OIpuEI4fQghdgAxE1U8HzwZucdNfxhq+KUXAcSLnzLHBAFmUa+ddhNaWysP7pnpKRu/2

B5D0xA0iPRV6+fuL8YN+L/GB5Kg7cjImNZUYRMgpcslQN9hC4tDSPd07eEUKUWG5cbRk

7Gxt7DPaiiAhuuKBMIT7ugmQEqTa3YcGeRU1lPkmvRnqWxjKUGmhkgtIm4hufqGpAV0i

6WPA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778175386; x=1778780186;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=OXAi1aYYtoHosahIzrJYkKM4T3q0TuHpCUwFMS09S/k=;

b=mvMZGMh4+bzivt3RGaCMbLSas5T7LtZ7nKAB+WHlqJtoD6yyYqo8HGXDvg9GjohVlO

356zeoow/aN6E3pvqfey++SiKq76x2k7JNTFv7xSOGDknmUYjjNPIeda7Nanb0pT9dN1

lGHvuo2KBAE7gUt4DFUUDZ1oIAlewMqdE9XfapWbcPVqGTdUKtzeslAs8mWhAfGd/KyF

CbyB0/11cGuCFdiLrKwixWq65F82/NX70EezlV64sLcwUTXT3FBiO9zitnuqG1McHgoY

SILRyXLB3ZUfjXwvzuL1CYJC++BVgwU6aRWPLpUPz8JusEoANTXT79r3/PQtuO8X5Tcd

CH9A==

X-Gm-Message-State: AOJu0YxELKmrsyn0K35KPjQePmD7h3mcsLjcNCeHLAmbd8t+TH1yChXe

YtEk6IzNAlrjI0AGVwbsuFZJLaWCcVD43SEB84AwfeDUdJvPA8/xd8BxIX/pbX641cfCCEo+2Xc

0Ljqb

X-Gm-Gg: AeBDiesoAqZNy5e0d3BNAHCkn5M5MzosnwZKV+sK2EvyRp7XINrj9OudZTiV6jE69yu

T191Lfg8EpYsbpntetJso1mRxkhjm5/wFqokSwDpkQFNUdwKGeZLwsnh/0hQYSLc+9ay42Ls1RI

y6uNyP5EAvq7yO0sigRUh74AnIGAHcUPrsMQaPOMObRraOSM6Uc0kxTH28kAYzvr4aJcXLFYZ3+

XUx242G77OPG+B5oiU9V0rFDgUKjD3yCi0E3flkHlTaZfAjux3Gfdry6R790XWpIj4SqySXpzoh

Tvnq/oi4g/9u+pKodX27uRmzYT2YznxUKz8Doa0Dd0DddB6r1iTW2UwjhyYn/noqU4VcosJExNi

FeAGwKxhWjG9UKZQogNXv3NeOu9OopAqjmFxPtvHimsBrEB20bUC6VC/Zl8dup9iUUwKPtOjtYY

584OVWSNRF2slYCNrga+5nHvWsiD64OFGnkCYBBZB1MoH9qT/OjAPXManPlAuNfomuhiHA0inAi

21jYMslPOZdfyRPG5cjqdDpVy4KoS6lg9+dicDpCJE7Z/myviEsoe5EWNeL8xq/U/c=

X-Received: by 2002:a05:6102:84da:10b0:631:2624:e5e4 with SMTP id ada2fe7eead31-6312624e7b0mr1321476137.18.1778175385445;

Thu, 07 May 2026 10:36:25 -0700 (PDT)

Received: from 019e0383-1868-7eff-9279-c19726035ac6.local (ec2-54-174-183-111.compute-1.amazonaws.com. [54.174.183.111])

by smtp.gmail.com with ESMTPSA id ada2fe7eead31-63131d3acc7sm380137137.3.2026.05.07.10.36.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 07 May 2026 10:36:24 -0700 (PDT)

Message-ID: <019e0383-1868-7eff-9279-c19726035ac6@salescloseraisystem.com>

In-Reply-To: <019dff0a-71c2-70dc-9b3e-53ac149c3545@salescloseraisystem.com>

References: <019dff0a-71c2-70dc-9b3e-53ac149c3545@salescloseraisystem.com>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e0383-1868-7eff-9279-c19726035ac6

From: Callum Hawthorne

To: root@nk.ca

Subject: Re: NK sales

Content-Transfer-Encoding: quoted-printable

Date: Thu, 07 May 2026 17:36:24 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I know things get busy. Still curious if improving your

service flow without extra cost sounds useful.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.47 listed in dnsbl.ahbl.org]

[209.85.217.47 listed in dnsbl.ahbl.org]

[209.85.217.47 listed in dnsbl.ahbl.org]

[209.85.217.47 listed in dnsbl.ahbl.org]

[54.174.183.111 listed in dnsbl.ahbl.org]

[54.174.183.111 listed in dnsbl.ahbl.org]

[54.174.183.111 listed in dnsbl.ahbl.org]

[54.174.183.111 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.47 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.47 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.47 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[54.174.183.111 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

[209.85.217.47 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: salescloseraisystem.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: salescloseraisystem.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.47 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.47 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.47 listed in list.dnswl.org]

Subject: {SPAM?} Re: NK sales



Hi,



I know things get busy.



Still curious if improving your service flow =

without extra cost sounds useful.



Should we schedule a short call to =

explore this?=C2=A0



On Wed, May 6, 2026 8:46 PM, Callum Hawthorne
haw@salescloseraisystem.com>

[callum.haw@salescloseraisystem.com]> wrote:



> Hi,

>=20

> Just checking if you had a chance to think about streamlining =

client communication.

>=20

> It could really ease your team's workload.

>=20

> Would you be open to a quick chat this week?

> On Tue, May 5, 2026 6:45 PM, Callum Hawthorne
haw@salescloseraisystem.com>

> [callum.haw@salescloseraisystem.com]> wrote:

>=20

> > Hi,

> >=20

> > I noticed your focus on reliable and secure =

internet services in Edmonton.

> >=20

> > Handling client communication =

smoothly while keeping security tight can be a challenge, especially when =

resources are limited.

> >=20

> > We work with businesses to automate lead =

engagement and appointment scheduling without adding extra budget or staff.

> >=20

> > One local provider recently improved their customer interactions=

and freed up their team to focus on core tasks with this approach.

> >=20

> > Would you be open to a quick chat about how this might help your =

service flow?

> >=20

> >=20

> > Callum

> > 422 Richards St, Suite 170. =

Vancouver, BC V6B 2Z4

> > P.S. Please let me know if you don't want to hear=

from me again

> >

Web/SEo/App spam from Microsoft Outlook Part 2



x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?S2JwSit3U3NvVE8rUlhWbnNpQjhzb3JEYVVwVEliM3lNNXZFMWhYY1djaGNJ?=

=?utf-8?B?SUpScmkxU3hQMldoZk5iN3FiTjBvYjZWRElsVUZJUGp0ZUVTVTk0Y2lzeHpu?=

=?utf-8?B?b0NnYllRWmkvMm1xaHcyYUN6ZWczZmh2QlEzUlNDSCtydGJxa2N1a25OSHh1?=

=?utf-8?B?MUxBUHJ4aEEvZCtocmJVbU5henJncVMvWU5jMU9CQmpZbXBqeFVlWkhFOCtv?=

=?utf-8?B?ZWJiN2dqaVdWR1NNUExGTGtMUzRCNlRoR1NucUQ0Z1BzVXVLc0U1di9mM2ll?=

=?utf-8?B?dlBTUkRweWlsSzNRd3NzNVlPQzZFdGRrQW1NeExxN2FwU0l0Q0wxeU9KVmdh?=

=?utf-8?B?SzVNL0hoUTJpY0I3L1hwa3BITmlmbk13RTMxKzlZSTRNb2YxZ3pTMzljcFYx?=

=?utf-8?B?WFNBQzF6V0FPSFR2NHd2SEd1T3dxdk9RMmdESUdtY0tXM0M1dy8zZ1hhKzNJ?=

=?utf-8?B?VkV6ZGVCMEU1eUVDdzM5bmE1UmpONy9zS21TdmR2eGp6U3EyT1E4NFBhVzRJ?=

=?utf-8?B?a0YvSTFOeVFKRkFNYmh4U21vVmt1NVVzb3BsVEdWWnNmZXpMQzd6eE1Kc0RI?=

=?utf-8?B?aGlCSlBLU25qdlRnaEpuMlYzZVdaQTk4SHNXd2ZUWnZQajNGalZtdEFJaVNx?=

=?utf-8?B?TEhoWEVTanlJaDJnYXBYRUthYUJpb2l5aTBSM3U5WWE4ZzYyeXFETzNQOEQz?=

=?utf-8?B?ZE1VTUszZGhXeUFCUHNMOVlDNExlMk9DTGRFd3hGYkpBOFZNMUNzSUJKQWN0?=

=?utf-8?B?b21RMTQrbSs5Qm1ZNERTc1hoMFhlQkt3MEVtNVFkbkg2a1JrR0tyajdyR1d1?=

=?utf-8?B?RGFEM2pxSmJRQmN2dmZQWlNYa1RxRFl4RjhKdFlPUjhIc3Q1WHR4VitFTldE?=

=?utf-8?B?cmQrUG9mREhtd2dzZlBFNnkvb0dURmowTys2d0tnc29lV05nQUNEejY5em01?=

=?utf-8?B?L09HK1BzQkhnbWZtQmgySkgzRWRXZ1JpTElJZmpKM3RrYnIyMUVhTzEyVWNu?=

=?utf-8?B?VkJOak9YNCt6d1ZSTWxneFZ6VVNMT1RhRVpHSDY3b0xFeDhtZTB0MXVtS2lI?=

=?utf-8?B?RXNjMkhiUkI3RXlnTWJSVnVrbXFPRWxmbWFaSmszOHAyUHBUZFA0M3RkZUR4?=

=?utf-8?B?aUxyVjB5cWY1VWVlc1JMZlNXYzU4ZFlQV0RhdFFmWDR0S1FFWXNheDVIT3pW?=

=?utf-8?B?a3dGRWo2aWRJbHBKZFdtdDF2NThKSlMvbUEzczdsN1ZBaHphTkZvcmE2M1hq?=

=?utf-8?B?RndaczViaDJWL0duSGRxVnJCL1RyamN2MGZSL1VPc2MyZ1VMT3owTDZsQVp6?=

=?utf-8?B?dVg4SVVWclRIRGo5Q0N3cVpsUE5VeUJvQnNWYmEvQ3k4czJ0ZlZLWk9rRGth?=

=?utf-8?B?TU5aR3VQbnFPRUdpR0tSU1hudFNwbjlpcTBDUU5pbndza1J5MnJISkNJa2ZI?=

=?utf-8?B?ZkoxcFFEbXF6dVN5Q1c5M3h6K3dMUWVSRC9vdElWWVZ1M1VwT0pTMWt6cFVh?=

=?utf-8?B?cStXeUdJWHd5OTE0L0lpbGt6K0VWUUxHZUdlQW96QkJKbVBHbGJsbWN3NnpE?=

=?utf-8?B?aTRSSm5UNWZyb1EwYTlhWThSL2duRGYrd1o4TVk5VkpRc0NvbFU1MDVrN25m?=

=?utf-8?B?NW1XeWlDU2IzWnE0ejM3bDdBUnA4dFJJMHFpRTlML1oxUWhyR0RZRWpBbFBF?=

=?utf-8?B?ZkllOFVKN1lVVjFzdkJBRnZ6WGl5VjYzTEFIVFBXUTRManhDVUFOejcxTE5F?=

=?utf-8?B?b3gra2R1Uk0rNnBMb01uemxqcWlKcm1NczBuWVUyOC9PcUdZTzlaUjRiVVBi?=

=?utf-8?B?Qmx1L0dHZTZ2QjYybm5LQXcvMEYydUF1SnZhMTUrWkFLMTQyRldHZlM2TTZa?=

=?utf-8?B?RjlIUFpPZkRMUzUrNWlsSjFzVVJTeHJiNWFJMUNTanBocUVxL2xRdkgvMXAr?=

=?utf-8?Q?iK6RKgDpjU2aI8FaXFd07VtH9tRu47PO?=

Web/SEo/App spam from Microsoft Outlook PArt 3



Content-Type: multipart/alternative;

boundary="_000_TYPPR04MB92127A252B2B357252CC8C25A33C2TYPPR04MB9212apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYPPR04MB9212.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 48d539fd-09e0-4fde-9b4e-08deac482c94

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 May 2026 14:51:51.8692

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KUXPR04MB9393



Hello,



Your website looks great, but it’s not ranking well on Google.



Can I send you a free analysis report and price list?



Looking forward to your reply!



Thanks

​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​

Zoyaha Jianpur

Web/SEo/App Spam from Microsoft Outlook PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 May 2026 13:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL4ho-00000000IBv-2L7q

for dave@doctor.nl2k.ab.ca;

Thu, 07 May 2026 13:48:20 -0600

Resent-From: The Doctor

Resent-Date: Thu, 7 May 2026 13:48:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013081.outbound.protection.outlook.com ([52.103.43.81]:4630 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL06N-00000000P7i-2skJ

for sales@nk.ca;

Thu, 07 May 2026 08:53:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=xCVj3ACRL0THe1YhWUy7/CxlQeTRNfsGjMJHDtgdQpveNhu5T20CO2IX0c7vIqsfuWYtHjM9M08qzPSoTfchzV5mtC5GdXoOUjOFb2TFQ4Jq0WJw+h3ytdPPhZvU7QTjHIOrkq++BqWYlMB7a3SkacX20fMWoV2855EZ79J831wSoRwuxZ9M3/QMU5Ffu8fJpSlAeb3NyL4TlUafwbTVSNzFMEVdsKmsZzFUb77KnjJXuy2lGb7uae4jn6ECygdzCudhw9BqLqz7DQwoRu+2F8l6qlPFjEOgFSxP6ZoZLaH+DhnWooTu+v2ypqLW2mWgjecHgeZnswL6xQYWwDXOKg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=javfylN8fTYkK6PKk8+pauXRGIG20APRwc6qfdV7Jcw=;

b=il7q2HKMi3o6ueDK8vFF9UxbfFR+IT55uRFxNJaNkv/jz4Xw35Sj+fNjWFRs/R9qgpVpJOKDz0kCrOIwvzBPkRngK3HduwtrHhrsYQPWBCPGjBOUQpZBgLeNavSdPCsVo9JxtYOcgYe+lMmltU0YkcLx7UeA00yOyetNAUaPOJxCcO4f97+uE8puMAJumHeI1IMWjwEntVECEq+A7lK1WO9koZOOLGd4Bv7qu0KdbXixAnkjYtEyh6fkIrOIvoNpTx4IrXI+lIIIfco5uuGpuiQUYslx2Yl9BQZNjC42uu1Ea30otiW1lQY648DrPYnVQfimkawYbdYASNMNgvzZCQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=javfylN8fTYkK6PKk8+pauXRGIG20APRwc6qfdV7Jcw=;

b=tR4CvTJPcl43nUueWBu4niRZXkzvm7WJQFsV2vhBtmv0mi36LYgHC1WfFEU8jOICxkCYtluZC6sJxb6pLA/VxZtUaJ3mJgVPfLMcAPlQwSYkl2MVBqVE63SzIeHM74zv7xMLU3/5t/ralcQLJVfXTLKYkonxn+fFx3VQ9YZQvX3gkRv2RJgASDntxg46xKAnORHwWNfXT8wfuYlerDy0y8LINmu14B/EBuLYcF2QdnbJMNSR49JzTFhkF2SCcqejH/+Qnd0GYYnwLM+GgPNru80J1cKf+SZX8lwSKllHBdJzKzRL8b+jhSaaVhjW4L4ARwESImlNRsGmCCsxJhTjyQ==

Received: from TYPPR04MB9212.apcprd04.prod.outlook.com (2603:1096:405:381::9)

by KUXPR04MB9393.apcprd04.prod.outlook.com (2603:1096:d10:9f::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.19; Thu, 7 May

2026 14:51:52 +0000

Received: from TYPPR04MB9212.apcprd04.prod.outlook.com

([fe80::d0:706:72a0:9950]) by TYPPR04MB9212.apcprd04.prod.outlook.com

([fe80::d0:706:72a0:9950%5]) with mapi id 15.20.9891.016; Thu, 7 May 2026

14:51:51 +0000

From: Zoyaha jianpur

Subject: Yep

Thread-Topic: Yep

Thread-Index: AQHc3jAj7deI5RjHnkiokjRSrGlNGQ==

Date: Thu, 7 May 2026 14:51:51 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYPPR04MB9212:EE_|KUXPR04MB9393:EE_

x-ms-office365-filtering-correlation-id: 48d539fd-09e0-4fde-9b4e-08deac482c94

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|8062599012|24121999003|22091999003|16051099003|55001999006|704163111799003|2604032031799003|24021099003|15030799006|15080799012|20031999006|39105399006|8060799015|24071999003|6072599003|19110799012|37011999003|461199028|40105399003|41105399003|39145399003|3412199025|440099028|102099032|12091999003;

x-microsoft-antispam-message-info:

=?utf-8?B?RDUycXU4VnBmekE5NTVOWUhoclArVnFRRHE3MnNTQWxadjhuU1htamZuOU5y?=

=?utf-8?B?MEgzYis1L2owd3VVVVVzWncwSWlrUEs3b2hKS0ZiNUh1UHZoWFE1bkNoUElS?=

=?utf-8?B?NGYwd2pHcDEvQjhHeGZreUlKRld6RFRLQzlCajRCWk01YkdZRU4ySDlZbk1M?=

=?utf-8?B?SDI5cHRxb0NOUWJkMmYzbHU3cDhNTTlOR3Q2NW5VaUJHbHh5b2tVUTJ2YktX?=

=?utf-8?B?SlR1b1g0SjNUbDVDWVF6c2UyM2JsWlYxR1NWdDAwTWN5VWFMS3FKRERQWE1Y?=

=?utf-8?B?amhQSkRvU3JnVGUwekkvNXBXa3dXWWRtRmJvZEhzaVFDTkNtdVhaQnhoaUJX?=

=?utf-8?B?dXMrTWhRNDBJZnFWck5BUmdtbFRKTXdabVNqbmwxdjRGZlI5TzQ2SjgyT2dF?=

=?utf-8?B?dFM0emFOMkNsVzFtVE9RVC9IWXlKNzc3dlJMTEViQVlsT3JEK2pmeXQ3T3R4?=

=?utf-8?B?RHIwTDhDY3BXSm1tU0ZBT1licHlKV2pTT3piNVZYNVVKR3VXaHVDVUg4K21I?=

=?utf-8?B?QW1iZ1BoQkNxYW8ydTVLR2JRU2JCcldHSHBGVXBvWU9PcHdnaWcrL0E4UWRN?=

=?utf-8?B?dGtSWWo5M0s2NVJGb2tueUlrN1FHalowQ3ZpTDFUNDVTQlp5eUFCN09CSDRy?=

=?utf-8?B?ZUVJSWFsbUQ2M0xTaFlWQ3UvQWtNalRnUTlDZHVsUHhyckNvZXJiOXF2WHZj?=

=?utf-8?B?azlrdStNblJqKzdKOFNkaXdnMHlsOUQrR21zbStTenlPWXk1eEhLcGc0Zk5J?=

=?utf-8?B?blJ5aHdGdnQrSHUvN0dYQkpLQWkyc3dYb29CYmpqN1ZncHhDTlo5MERYU3Qv?=

=?utf-8?B?bDhPbHZJRG5LQzIvUWZwWWdKUlVHaWFuSWNBem5QbDZMQXNxalR2TzhsU0VJ?=

=?utf-8?B?d2VXSmo2K3BMcmp6dktjK2ppUU9SWHlhT1NaVTNKd2Roa3lJQnRoTEcrUW41?=

=?utf-8?B?YkNINERlaVlVdGNRSkJyQUdEcEVDTFh1RkZqcnpxamF5dFBxZzVRS1h0bzVD?=

=?utf-8?B?S2pFSjRTRHhqMDFUMjhRK3NiSXV2OHd4QUtuZ294UFlGRGdKZzFXMFIraFhV?=

=?utf-8?B?VVlQL0piaXAwWWl0RERzU1VhUFRxMXlmV0hHUVFSempBb0VsRHM0OElnejFh?=

=?utf-8?B?Rm5JRElUa21Za3gyeEdpKytCNTBTRWdIa2ZocHlQRUhkQ1VENVpTVDh1eWQ2?=

=?utf-8?B?K1NScjloVUhOMG1ReFV0amtObTFSTGViR1N1dXBOckxGNCtTVEZKVzlvRkVa?=

=?utf-8?B?K2wyVmRtWmRUR0lyd0pMSjJaeWl2cjA2UzF3VmU3bmtlNGRNODdQMTcvbnFa?=

=?utf-8?B?L0dYaE42V2ZIYi9LRGczK25QSWRkVWtFYmNNVnRBVFFWdEtTMDJXdG9zNWxH?=

=?utf-8?B?Z2hUNmttMHdYamtnSkZaUGovbzNSV2tFYmZIdTlLTzJQNkhlVHk1QmsxL2E3?=

=?utf-8?B?ZkVWeERaVU0ycWpkR0J5bG1xb2p1WmtjT00welRPUEk4eGlQZHVqc1B5SnJZ?=

=?utf-8?B?RWcwZTVST01jVlVPQlhLbEtPTFNvNUF3UDkvL1diR0tkUDhzdGNOYkhOTWk3?=

=?utf-8?B?b1VDYnZFNGdlSXUwQkRUY1R2Uk5aekdvbzZIRjgrOW9yYWFsclQvS3dUazV6?=

=?utf-8?B?WnNyUWJ0ekxXUGtWNFFEQnlicVMyWktxYzlqRHFCN2dxRm9sRVhrTS9uandZ?=

=?utf-8?B?Z0wvTmkyc2hZSXg4cUY4K0FZUDdYWFJlM0JkNlZLajdUWjYreitQalBTV0k4?=

=?utf-8?B?SVBFQisrWWVFWlovdDFrVWxidHFDa2ZmM2JPa3liNmc0dFFjOHBpdkM4dnhJ?=

=?utf-8?B?YmZqY2h5MzdwTGRuSkthMkVxbkhnUXVqeWpvNnFsWUhJMkhEN2ZWeTFKUzNG?=

=?utf-8?B?N0lsWVhxQXQvclQwWFZmdEltTzF0UnBoMSsrQ1dsMXBLTVE9PQ==?=

Web/SEo/App Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 May 2026 13:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL4hg-00000000IAi-38n8

for dave@doctor.nl2k.ab.ca;

Thu, 07 May 2026 13:48:12 -0600

Resent-From: The Doctor

Resent-Date: Thu, 7 May 2026 13:48:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f200.google.com ([209.85.222.200]:42412)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wL03k-00000000OsS-0Bvd

for sales@nk.ca;

Thu, 07 May 2026 08:50:49 -0600

Received: by mail-qk1-f200.google.com with SMTP id af79cd13be357-90341a5f66aso227650485a.1

for ; Thu, 07 May 2026 07:49:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778165386; x=1778770186; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=X6dSrXrDwT6N5ogjCiR5d+knh71jgRjB6B36vKwk+Y0=;

b=qPiaE5bJtqfMjoDKyob7Ln+uQmSMibwtfEIoEfNegvoVuMQ7uzSqOWM9IKdGLnNO/N

jZOSCc6EL/tKD4wFe5jJtsK7eDdHwxv7QC0TZCf9SHl6NsX3xoEn9+FmayGiuwrPaEQ9

LGeLgDgQk6tp5KgwzutLnJlO5qw/bwv62KIHwEEqIPpi8X5WAqF+mvmRZpst809WTYJz

A8fI8BmitYJ+HrSTC8ndL7qrSmJ4S5LReDxJos0MdZqHPI0VQB/8IAWphF8NPAnIs8iD

kYytrEYeScr7Q8DKe7XdOQopnUYCSyB0IWIlySZXdFrMjI9S16waqKsDUi1t/7eRMTDK

bCcQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778165386; x=1778770186;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=X6dSrXrDwT6N5ogjCiR5d+knh71jgRjB6B36vKwk+Y0=;

b=sXlQdselEvVKBaQZtGIJ+uPAvy+eH27fGi0osraAj13gvqoeAFpsCxUSx3pMtiqO0d

21KqxDT45Mxd07dzgumiPfCD/oUdvJo50YNl/Gwe4rZxN2JKePsO/AUPPF7/TYKlRBL8

DXBOdm2hqc8+6xMa5j57qQVvPuJMTQe2ArB4/88qbUDAPk+8ZhOO1gfRyy6jObLmd5b4

ziPlr+o0REu6LLsgj79rG+UdXKx0hoORDn6qzv2ec1DgEP9gfvgIKX7Z40w2DFBSXvNV

B8lsacdnA15sYIId2eApTdQoJ6lS5D3HXR176v4gC2ITERYqcgTtsGvztYd9cCfImMPG

AGOA==

X-Gm-Message-State: AOJu0Yx50lNHdYJoEpSMMKl/SYiBxd092G6ul8c6KGbOVZJnzqFFj6LZ

n0kmJQaaIaiIkiuRiF00n4rGdYyKGCPYnWk6ZZIX9konkqu4Dw9IolcLdCpD7Ok3zz7nw+Nt5F4

TxMGJ+Q==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:e8c:b0:650:8981:82dc with SMTP id

956f58d0204a3-65d7e72e7bbmr2718706d50.9.1778164911245; Thu, 07 May 2026

07:41:51 -0700 (PDT)

Message-ID:

Date: Thu, 07 May 2026 14:41:51 +0000

Subject: Website issue

From: sona461462@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e30eb006513b47af"



--000000000000e30eb006513b47af

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hey



Good days,



If you were on page #1, you'd get so many new customers every day.



Should I send a free report of the issue error ?



Most Thanking.



--000000000000e30eb006513b47af

Content-Type: text/html; charset="UTF-8"



Hey

Good days,

If you were on page #1, you'd get so many new customers every day.

Should I send a free report of the issue error ?

Most Thanking.

--000000000000e30eb006513b47af--

Geek Squad Phish from Google Gmail Part 3

@media only screen and (min-width:580px) {

.main-container-inner {

padding: 24px 32px !important;

}



.info-bar-inner {

padding: 12px 32px !important;

}



.main-column-table-ltr {

padding-right: 32px !important;

}



.main-column-table-rtl {

padding-left: 32px !important;

}



.appointment-buttons th {

display: table-cell;

clear: none;

}

}



.primary-text {

color: #3c4043 !important;

}



.secondary-text,

.phone-number a {

color: #70757a !important;

}



.accent-text {

color: #1a73e8 !important;

}



.accent-text-dark {

color: #185abc !important;

}



.grey-button-text,

.attachment-chip a {

color: #5f6368 !important;

}



.primary-button {

background-color: #1a73e8 !important;

}



.primary-button-text {

color: #fff !important;

}



.underline-on-hover:hover {

text-decoration: underline !important;

}



.grey-infobar-text {

color: #202124 !important;

}



@media (prefers-color-scheme: dark) {

.primary-text:not([class^=3D"x_"]) {

color: #e8eaed !important;

}



.secondary-text:not([class^=3D"x_"]),

.phone-number:not([class^=3D"x_"]) a {

color: #9aa0a6 !important;

}



.grey-button-text:not([class^=3D"x_"]),

.attachment-chip:not([class^=3D"x_"]) a {

color: #bdc1c6 !important;

}



.accent-text:not([class^=3D"x_"]),

.hairline-button-text:not([class^=3D"x_"]) {

color: #8ab4f8 !important;

}



.primary-button:not([class^=3D"x_"]) {

background-color: #8ab4f8 !important;

}



.primary-button-text:not([class^=3D"x_"]) {

color: #202124 !important;

}

}















Geek Squad Phish from Google Gmail Part 4








/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"adreanne Ziehr: Renewal Date: 2026-05-07 22:03:15 Membership ID: {=

{id1}-1013 Support Hotline: 1-810- 213-3002 Dear Account Holder, We would l=

ike to inform you that your GeekSquad plan has been renewed for 4-Years. A =

total of USD407.46 has been charged to your account. Order Management Dashb=

oard: Client UID: 6df161ac Tax: $00 Item Purchased: OmniEdge Plan Quantity:=

1 Membership Duration: 4 Years Payment Mode: Confirmed Amount Charged: USD=

336.58 We value your continued trust. Important: If you have any queries, p=

lease contact (808)-570 6056. Sending positive thoughts,, Team GEEK SQUADS =

Customer Care Contact: (+1 808) 223-8706 Our Manager: Jacolby Glerup Addres=

s: Po Box 1013 Celoron Ny 14720 USA GEEKSQUADS =C2=A9 2026 All Rights Reser=

ved"/>

org/Event">
tScheduled"/>
ma.org/Organization"><=

/span>
clc5qgblbg"/>
e-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0=

; overflow: hidden;" itemprop=3D"name">Plan is nearing its next service cyc=

le

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"body-container">

-[if mso | IE]>
=3D"presentation">
=

 

ellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%=

;" class=3D"">
e>

mscope itemtype=3D"http://schema.org/EmailMessage">


on">Renewal Date: 2026-05-07 22:03:15
Membership ID: {{id1}-1013
Supp=

ort Hotline: 1-810- 213-3002

Dear Account Holder,
We would like to inf=

orm you that your GeekSquad plan has been renewed for 4-Years. A total of U=

SD407.46 has been charged to your account.

Order Management Dashboard:

=

Client UID: 6df161ac
Tax: $00
Item Purchased: OmniEdge Plan
Quanti=

ty: 1
Membership Duration: 4 Years
Payment Mode: Confirmed
Amount =

Charged: USD336.58

We value your continued trust.

Important:
If you =

have any queries, please contact (808)-570 6056.

Sending positive thought=

s,,
Team GEEK SQUADS
Customer Care Contact: (+1 808) 223-8706
Our=

Manager: Jacolby Glerup
Address: Po Box 1013 Celoron Ny 14720 USA
GE=

EKSQUADS © 2026 All Rights Reserved


ion" align=3D"center" style=3D"width:100%;" class=3D"">=


=3D"border: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-siz=

e: 0; padding: 24px 32px; text-align: left; vertical-align: top;" class=3D"=

main-container-inner">

style=3D"font-size: 13px; text-align: left; direction: ltr; display: inline=

-block; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break=

-word;">
sentation" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-=

right: 32px; padding-left: 0;;table-layout: fixed;">=


"main-column-td" style=3D"padding:0; vertical-align:top;">
0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%"=

style=3D"table-layout: fixed;">

text-align: left; word-break: break-word;;padding-bottom:2px;">

=3D"font-family: 'Google Sans', Roboto, sans-serif;font-weight: 400=

; font-size: 22px; line-height: 28px;color: #3c4043; text-decoration: none;=

" class=3D"primary-text" role=3D"presentation">Plan=

is nearing its next service cycle

ont-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-=

bottom:24px;">

mal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: =

0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=

=3D"presentation">Thursday May 7 =E2=8B=85 12pm =E2=80=

=93 Friday May 8, 2026 =E2=8B=85 11:30am (Hong Kong Standard Time)

div>

word-break: break-word;;padding-bottom:24px;">

boto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px; lin=

e-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none=

;" class=3D"primary-text" role=3D"presentation">
ding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom:=

4px;">


3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: anti=

aliased;margin: 0; padding: 0;">Organizer


v style=3D"color: #707579;">
style=3D"display: inline-block;;color: #70757a; text-decoration: none;" hre=

f=3D"mailto:adreanneziehr@hairsstyles.com">adreanneziehr@hairsstyles.com
>

n: left; word-break: break-word;;padding-bottom:24px;">

amily: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: =

14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decorat=

ion: none;" class=3D"primary-text" role=3D"presentation">
" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"paddin=

g-bottom: 4px;">


;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smooth=

ing: antialiased;margin: 0; padding: 0;">Guests

(Gues=

t list has been hidden at organizer's request)


--00000000000037c98e06513abe53--







Geek Squad Phish from Google Gmail Part 2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20










t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">

Hi,



t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">







t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">

I hope you're doing well.



t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">

 



t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">

We specialize in SEO services that help businesses improve their Google ran=

kings, increase website traffic, and generate more leads online.



t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">







t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">

If you're interested, I=

=92d be happy to share our SEO packages and price list with you.

v>


t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">







t;, "Helvetica Light", sans-serif; font-size: 11pt; color: rgb(0,=

0, 0);">

Best regards,



t;, "Helvetica Light", sans-serif; font-size: 11pt; color: black;=

">

Abhinav Sharma=




nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_PUZPR01MB5228EB6B66E6DB05C0BA6FC6CF3C2PUZPR01MB5228apcp_--