NetKnow Corporate Blog

NetKnow now in Netcraft's Top 14150 Part 1

Posted by Dave Yadallee on Monday, May 11. 2026

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 14135 from 13720 at Netcraft and pfs compliant

A significant decrease! We must do

security audits regularly
check on illegitimate traffic hitting the web server

keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 3294 from 3268 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .

Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

NCIX FORUMS

DSL Reports

Rogers

Rogers Business Solutions

which rank 5340 from 5301 and are hosted in Europe.

Netknow again

We at Netknow are at 14135 from 18857 since the start of 2026.

Government of Alberta

The Government of Alberta Website

ranks 14965 from 14881 by Netcraft and seems to hosted on Cloudfare.

City of Edmonton

The City of Edmonton ranks 35659 from 35258 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 48074 from 49540 hosted by Amazon Techonologies.

Juno and NetZero

We have Juno Internet ranked on top

at 338371 from 357944 who are the owners of

US Based Netzero at Netcraft Rank 81686 from 79821 .

Grant MacEwen University

MacEwan ranks 125814 from 123063 .

NAIT / Northern Alberta Institute of Technology

NAIT ranks 126640 from 120708 hosted by Microsoft .

TekSavvy

TekSavvy ranks 234602 from 231028 and are hosted by Microsoft

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 331219 from 347027 and hosted by Akamai in Europe .

Reviews of Shaw are available :

Rate It All

Review Stream

Review Stream Number 2

DSL reports

Internet Centre / CCINet

Internet Centre

rank 410140 from 397863 . Their partner Rack Nine ranks > 2000000.

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 429846 from 401525 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Distributel / 3Web / CIA

Cybersurf

is ranked 879038 from 881993 and seems to be hosted in USA by DigitalOcean.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

MCSnet

MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

4Web

4web ranks >2000000 from >2000000 .

Alentus / Wolfpaw

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

DHL Phish from Sendgrid Part 2

Posted by Dave Yadallee on Monday, May 11. 2026

font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>

color:#333333;">Hello,

color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">

:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45=

:1.5; color:#333333;">

Status:** Re=

ceived at local DHL terminal

lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges

0; font-weight:bold; line-height:1.3;">Pending Charges

color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">

ding:0;">

tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">

der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">

:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now

0; font-weight:bold; line-height:1.3;">Need Assistance?

style=3D"color:#d40511; text-decoration:underline;">Customer Support

Phone: 01 800 71=

2 3456

color:#333333;">Thank you for using DHL .

33333;">Sincerely,
DHL
p>

px solid #eeeeee;">

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">

ding:0; font-size:12px; color:#777777;">

; color:#777777;">

style=3D"color:#777777; text-decoration:underline;">Privacy Policy |=20

tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions

; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.

Z6QKeFEUiu7Ze4oT3Osa2V9TYZDe9EcRJuEsxCw2ho6goSaCVPLt6XmvJUm-2FC5EtNn0-2B3E6=

E9BU0JYWdtaBG4o4LT1Q17Qnrnq2mIhw0c2fYAagMoT1FxJZA965zOULXX-2FLOnV66ksHmOMHW=

ITEcETXkQHaL8urEp3ZyTh0slUM-2FLVBkLGmTjTC9c1ru0FEJBCCIK8WaAD904t3AGnFYX5bKk=

-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !im=

portant;width:1px !important;border-width:0 !important;margin-top:0 !import=

ant;margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !imp=

ortant;padding-top:0 !important;padding-bottom:0 !important;padding-right:0=

!important;padding-left:0 !important;"/>

DHL Phish from Sendgrid Part 1

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 13:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMWIn-00000000L10-3fWp

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 13:28:29 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 13:28:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsv.outbound-mail.sendgrid.net ([159.183.224.104]:61810)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVfO-00000000HXO-1d9X

for doctor@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:47:55 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778525211;

bh=qaaailjDfdKqNsYp0ccPBkmNLe8hMNvs27HhIZdK8VA=;

b=M2pdXY18/wCNruLM5DmIIXKXgEDgCR2jEi7/oEzVP+VgzrIYKsqCIzFloqAMTJ/x9xcB

TVBbfFMeRvAKsSlvGP0uhZ/DYGwT6IFz8BRnOWgULqsRHfCuN+hdqH9fLNfBLGU20iW3+M

oXx7QgEDxKSVFywh6HNqFl9Uurb9DhFlvkP3FtqJDWxz2IBzzO/buBYrRg02YCXTxdGiOt

ksMGesVGu/Lb6e+MHhip56a1PxX80aaPYDIi3ZissJ5JxwEFAGhHZHd728gDxWio34yEjp

waAaRb51YuEXWcCkjsvgi2HlEJjJL3GaCF3mnnQqEyZSI537MYxLyfQRn54MW9gg==

Received: by recvd-5b899c689-l6gmk with SMTP id recvd-5b899c689-l6gmk-1-6A02241B-70

2026-05-11 18:46:51.759374185 +0000 UTC m=+1112869.491312075

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-7 (SG) with HTTP

id K2AHKi51SYSie42NcnB2sg

Mon, 11 May 2026 18:46:51.714 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 18:46:51 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID:

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQFESKzms33ZH?=

=?us-ascii?Q?gDAjTaoMIbgCPxJleMyv+irwFkr27aeGeff54be?=

=?us-ascii?Q?XE6dU8EuHEN31ieX7zA9q1lyeAZE1ERsAmFYLYv?=

=?us-ascii?Q?R9mHL2oea7oIe05oBVHVBsxoCdto62L8xcleRJy?=

=?us-ascii?Q?JBcF1LWX9Q8nvCGFI9DT=2FycvVfUHRoR+BUUi0PU?= =?us-ascii?Q?sNte?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 22.7

X-Spam_score_int: 227

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: DHL Delivery Notification DHL Delivery Notification

Content analysis details: (22.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: fedax.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fedax.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.224.104 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[159.183.224.104 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive

0" />

DHL Delivery Notification

tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">

e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">

padding:0;">

style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>

Norton 360 phish from Google Gmail

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVbV-00000000HI2-3Tni

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f73.google.com ([209.85.161.73]:53669)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMV1v-00000000EaI-3RjO

for root@nk.ca;

Mon, 11 May 2026 12:07:10 -0600

Received: by mail-oo1-f73.google.com with SMTP id 006d021491bc7-6853c2438b9so7871699eaf.3

for ; Mon, 11 May 2026 11:06:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1778522767; x=1779127567; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=oj1ijEtnz0oriYbSQILDK+nMGRDVqc/Y0Q5ErXnVhQw=;

b=XmcZ9ee+1GYh4768VjgVb4h2kN1r37hU1pCVKq2yZDOK9q/v817cGTW5zxXiWsoJSX

+xvaX7jRxXUjIwJlsxVQFjTRlMZvsIPGPMVLMdtwEMwfZ/082jXHl1DpE2CQ6hkT+NG7

rA23xENuRLQKoPk+EXu5ZA9uctUTjZiM8FDmSLodzvlut5V0jp2dkQtWkWX6Z5OiQ4vk

7BcADH33VhJq36krS+BJS7vwB8WNmWjzpTU11NY+98N5LIkLe6PtOuxvzaHYiGzBYge8

/1HJlU6g3iV2S/6nQa6vLiIuth3KQ/XLkjf8dehvwe6x84HSQneRiGraZ47/5GYZYwBM

Dj+g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailvora-org.20251104.gappssmtp.com; s=20251104; t=1778522767; x=1779127567; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=oj1ijEtnz0oriYbSQILDK+nMGRDVqc/Y0Q5ErXnVhQw=;

b=bJomretyQhGRaYOLPQpb4tRZd2H2ML3d39ho3DxyYzFoMsSERkC/hH1GLx9UQPDlQF

Wt4LoJWTj6kTu0b00kEx7zDy5Awwd+VnNwF4TrGiTu03p92Qvh1JPXYFgBEp6MjM7t/Q

X31YR13Rdm1gB3j/6vJrjxQ24s9ReeImqGDsWFmDYvSZczrTx4GdiPZvPjBqGkjEHD4Z

1ctjb0CzCUj9ZfRalB2pXw9gmKripJ/xSz2wXe6cjbGyZvLzxL/tC87L1zeLqmRq+0c1

/xcNS2ZCv1p6k1WlSDwcLKxTdsa0gcjaCMgAsWfbjF0weGpJGBqWpdmI/Dw6B6I3UAM8

002Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778522767; x=1779127567;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=oj1ijEtnz0oriYbSQILDK+nMGRDVqc/Y0Q5ErXnVhQw=;

b=gFsVj1h74d2kyB8q46dIcHiFmJU/9TFViIsCaZg1MuBe5u/cNjn3NLu3y7U6DPj5oe

zrbwfh+ISdG42Icbz8WWYKV7oPCZbaQMFM0x/Zvbche3Zbosri02VBAbYIgiVka+J0sb

H/eCN6Zan+NAmmFFRXUCiV/RLCEiwsqhDzQ6bhvkSvX6oUCMg3kfSTd2URqKvg9ZNFe/

Z0gHJZE1O2I0YruyAwyu3HNVRm0wlvNFEWoSgz2ps6D3hthgzOh5dAtcBuqXcdcd1msS

vZ7fVfHAHKEjUjM5O+mqXib5GbP1yO//jsvzaOhl3+p2VXznf8kY3cZYkPQi364Tq9Fk

EFpw==

X-Forwarded-Encrypted: i=1; AFNElJ/HmKP/Z+FFhCmTw99U3Ilxwj32AJ0qJM14J/wET2ohKC7vUq6kD2+xPeRZD7bDuI56WUxx@nk.ca

X-Gm-Message-State: AOJu0YyaOf5ql9h0I5Q5mAvd/uiKfoo1sLyAG6sSAcv6LFwhVG1cfc8q

LrhekhqLbzsc0hqfzRbncXTJi5GVWgXGETna4q8Q86GF+NzuHIJL6c3DhTIAZe7+YwxKXCy0qSg

qAvSpWIrSGuP/y+tdbFJOvG4DNdMZbLa3/tEK8DyzHWwjIw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:c3d8:b0:69b:3360:3f90 with SMTP id

006d021491bc7-69b336041eemt5323085eaf.3.1778522766891; Mon, 11 May 2026

11:06:06 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 11 May 2026 18:06:07 +0000

Subject: #ABC_123(6)

From: no reply

Content-Type: multipart/alternative; boundary="000000000000c3026506518e9948"

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: #ABC_123(6) #ABC_123(6) Tuesday May 12, 2026 â‹… 3:05am Eastern

Time - New York Your current subscription linked with Norton 360 is set to

renew on Tuesday, 12 May 2026.

Content analysis details: (7.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

[209.85.161.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.73 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

[209.85.161.73 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.73 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.73 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.73 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} #ABC_123(6)

#ABC_123(6)

#ABC_123(6)

#ABC_123(6)

Tuesday May 12, 2026 ⋅ 3:05am (Eastern Time - New York)

Your current subscription linked with Norton 360 is set to renew on Tuesday, 12 May 2026.

An automatic charge of USD401.77 will be applied. For help, call 1 856 353-0411.

Receipt Overview

Plan: Full Membership

Devices: x2

Length: 60 Months Year(s)

Payment: Auto Pay

Amount Due: USD401.77

Reference: N88B3NQZXW

Auth Code: 39e2459a-32c5-4f1b-be1f-f4cbd532f74b

Ensure updates or cancellation 48 hours before renewal.

Support: 1 856 353-0852

Guests

(Guest list has been hidden at organizer's request)

Norton 360 phish from Google Gmail

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVbS-00000000HHk-0nGl

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:42 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f74.google.com ([209.85.161.74]:51363)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMV1m-00000000EZN-3jDo

for root@nk.ca;

Mon, 11 May 2026 12:06:59 -0600

Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-696906ddd6eso5165950eaf.2

for ; Mon, 11 May 2026 11:06:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1778522758; x=1779127558; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=ssYc05F2q0uo3r4JSOkCxFZkLG6RGcbhpNE5vm3trVQ=;

b=eM9KR9nvF2QZKC6YB2DnQ6HbV+Ybl5lhPPSSd314sfYlqE7w7490FhQ8G0bso3tK/V

G1TSeJMJXuqgYpzLu1S4C9GuvJDBj6d5XcSuJF+I6Ls++PlMZhp0GK624I5JRItPTEx0

nSDA7CjHhCM6NrRJigS1PCPV1K3EyW4ZEeGw+zzMeo6J09IrO061KUA0IQKGs2u4DEpZ

N72hl7SJPXUnwLQ8q/cf0WnJ99BC27gBxnAwbY0WAdOdylTOIfSe5Ad4OlJ0/2CLBcvZ

ZJfG6rWpAVJdBJUOSiqqQx8Jp7JBpyPXtm0lsJE/3tZVnhYkeyJ9oUT2e0rixepxxo2Y

0teg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailvora-org.20251104.gappssmtp.com; s=20251104; t=1778522758; x=1779127558; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=ssYc05F2q0uo3r4JSOkCxFZkLG6RGcbhpNE5vm3trVQ=;

b=MYP2LF74eHWZnsPdqHNMdVdUjUFlZB9BUGyt461j8NUUtFXNc49MwnAwdKbN1CgJVZ

aFge+d2ljIfwGHwIgXBUKs6GIdXoTJ0oYObMjeCPUqQINkd+7tc/Iv8DMUILsm2NTvHb

PWeb3rpUTJpHazG9P4V4zJkP1LFYXu8PjrbJSGFU5tIZntM1FY+GzADanVEP5337j8CB

hNB+KdG/v6fkA5fI7H1DIuyuG9L9bbsQxOPOCAUTXENk55ROu3ApDwIVZbaisJAw9xzV

x8Ko9qGtgHhqMRhQZkHF497tH4MiGYHRUlWewHXfbvDK2Uj6G4kyqf4vkoSjuhB6kS6d

/glw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778522758; x=1779127558;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ssYc05F2q0uo3r4JSOkCxFZkLG6RGcbhpNE5vm3trVQ=;

b=WduUUnr23wgAu7bEmDHfkcAmeb8ERZhmgmhKv7lZIqP759fTFaEH2pMCa1XPLnd99i

ALb3FftN0qXAvAA168/Ej/46OFlv41BxKAk9+h7dbJwy4rFvg5EZ1I/xST2LzaklCvKB

sDfBiSoMt/C6VQTWY6GpRLSCs1sFzWBKvlR9i9M2E37ymd4unCD7Eq5YBL223jIdWzSK

Sdj9HFi7Pnn5FZjI/hFIt9tm1Kr3L/lpPhyesv7utsRqovyljzNDDU0OsWnHCNSqiVAS

HbSzu8xfvIsseQp3yy+/XUpIdMOM5U1+8EXfC4mzQQ0XVX7YJinXQsrBeFRX68NQgzd4

LSAA==

X-Forwarded-Encrypted: i=1; AFNElJ+g7VSrWQM6WTjV3iwEKAhphJfr6xFgpTSwT4MsgWgipWo/gx3+fzIihy88nt2F5b+a0Jj2@nk.ca

X-Gm-Message-State: AOJu0Yz3bIrpL6Tlh6sx9JR2JpIzX6iiWid+Ld35LqVkSDVM6FIfyq9I

lDCAJ2TKFbLmrTmwFKvTYkQX3QXnq53hfEblEo/fTczjP/hiQavXUhhE0xJlPhQNLoKzu0aFsDo

xmLgJ9E7B03J1DVShO/zMf4ENtl52a/QFk2CD+SD8DBGrkg==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:1b08:b0:695:3a00:853c with SMTP id

006d021491bc7-69998c9581cmt14337978eaf.12.1778522757439; Mon, 11 May 2026

11:05:57 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 11 May 2026 18:05:57 +0000

Subject: #ABC_123(6)

From: no reply

Content-Type: multipart/alternative; boundary="000000000000327c4606518e99d0"

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: #ABC_123(6) #ABC_123(6) Tuesday May 12, 2026 â‹… 3:05am Eastern

Time - New York Your current subscription linked with Norton 360 is set to

renew on Tuesday, 12 May 2026.

Content analysis details: (7.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.74 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.74 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.9 REPLYTO_WITHOUT_TO_CC No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} #ABC_123(6)

#ABC_123(6)

#ABC_123(6)

#ABC_123(6)

Tuesday May 12, 2026 ⋅ 3:05am (Eastern Time - New York)

Your current subscription linked with Norton 360 is set to renew on Tuesday, 12 May 2026.

An automatic charge of USD401.77 will be applied. For help, call 1 856 353-0411.

Receipt Overview

Plan: Full Membership

Devices: x2

Length: 60 Months Year(s)

Payment: Auto Pay

Amount Due: USD401.77

Reference: N88B3NQZXW

Auth Code: 39e2459a-32c5-4f1b-be1f-f4cbd532f74b

Ensure updates or cancellation 48 hours before renewal.

Support: 1 856 353-0852

Guests

(Guest list has been hidden at organizer's request)

DHL Phish from Sendgrid Part 2

Posted by Dave Yadallee on Monday, May 11. 2026

ollapse; padding:15px 0; text-align:center;">

-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">

:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45**=

****

:1.5; color:#333333;">

Status: Re=

ceived at local DHL terminal

lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges

0; font-weight:bold; line-height:1.3;">Pending Charges

color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">

ding:0;">

tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">

der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">

:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now

0; font-weight:bold; line-height:1.3;">Need Assistance?

style=3D"color:#d40511; text-decoration:underline;">Customer Support

Phone: 01 800 71=

2 3456

color:#333333;">Thank you for using DHL .

33333;">Sincerely,
DHL
p>

px solid #eeeeee;">

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">

ding:0; font-size:12px; color:#777777;">

; color:#777777;">

style=3D"color:#777777; text-decoration:underline;">Privacy Policy |=20

tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions

; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.

h8zSh3F0f0IeZiwAoLfCvbUSDGmoGtbzkF-2B96goCvzJB-2BVQoH68Wj-2Bvtmfw4GD8sV5yzu=

5iJS-2BBqYNEMwH7OPVTgfWNCHc9ISp-2BcBYV6UxPXTZF4tMq2MOS76sskFQPoEmZKUkOnH03C=

6ZI-2FEQJJ6d8y5LPGTREmYQ8mDDOJxZ48idkq-2BN5810iGIKiVXUFawnLg-3D-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>

DHL Phish from Sendgrid Part 1

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVbg-00000000HIj-3xRt

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:56 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvwxzv.outbound-mail.sendgrid.net ([149.72.154.232]:23904)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVHx-00000000Fmh-3xcF

for root@nk.ca;

Mon, 11 May 2026 12:23:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778523762;

bh=f9yjCOqbSbiP76jjxTQQryAuWQflEMcvCUGdY4W2T1s=;

b=kV3bL/h2xjphTHruhDOMW244tA36Zhgl3zA6fHYOuYfD8uWFA99Q5ZsI1S88LMPhKEqq

5xMmJ+OqZBQY9mGNIzXQYBppqff8c6Liua6yluZ1kWC4D3n8V5gEmSe9dUgxEI9NMF2W8c

qrfP04hHTp64DN7UpOTOSKjq7qYaHqisIXo+OxPtFzs9WbbfouEB5WTmgxHQIdtLXG2OVK

4U6hlDe+qtnSs0V2MKRkKVjb7AtbfFdRzpzuNNFtmTbKJjCzMIsbUbFNMv6kVxX/kshi9O

6npQDGMWReHALlS88FjXZA97MihJhXW5CO4Dm0U/J6MNXPoOqG4+ZF4SpIOhPtjQ==

Received: by recvd-58d6d9468b-6tlch with SMTP id recvd-58d6d9468b-6tlch-1-6A021E72-3D

2026-05-11 18:22:42.383585882 +0000 UTC m=+1111711.151683161

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-20 (SG) with HTTP

id LmZKPBvTRkK0I1Z-GAl8NA

Mon, 11 May 2026 18:22:42.343 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 18:22:42 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID:

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQNOv40wDiV2n?=

=?us-ascii?Q?l8Jy8WjEh5JUo4M0=2Fl=2FJvu0vu4w9XBo59ZB82P9?=

=?us-ascii?Q?x9NMfnPiZupWKyXPC1ZN9PNUEUnmorRfDnPxW1v?=

=?us-ascii?Q?TBLQDIfPsJOzTCoAevaagDKlGSB0Fuwb=2FF5qtdx?=

=?us-ascii?Q?T30lTnYIHvpMgJPISZapwg=3D?=

To: root@nk.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: DHL Delivery Notification DHL Delivery Notification

Content analysis details: (21.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

[149.72.154.232 listed in dnsbl.ahbl.org]

[149.72.154.232 listed in dnsbl.ahbl.org]

[149.72.154.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive

0" />

DHL Delivery Notification

tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">

e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">

padding:0;">

style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>

ollapse; padding:15px 0; text-align:center;">

-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />

font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>

color:#333333;">Hello,

color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.

Categories: Phish, sendgrid.net spam and phish

0 Comments

DHL Phish from Sendgrid Part 2
Posted by Dave Yadallee on Monday, May 11. 2026

font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>

color:#333333;">Hello,

color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">

:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45=

:1.5; color:#333333;">

Status:** Re=

ceived at local DHL terminal

lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges

0; font-weight:bold; line-height:1.3;">Pending Charges

color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">

ding:0;">

tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">

der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">

:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now

0; font-weight:bold; line-height:1.3;">Need Assistance?

style=3D"color:#d40511; text-decoration:underline;">Customer Support

Phone: 01 800 71=

2 3456

color:#333333;">Thank you for using DHL .

33333;">Sincerely,
DHL
p>

px solid #eeeeee;">

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">

ding:0; font-size:12px; color:#777777;">

; color:#777777;">

style=3D"color:#777777; text-decoration:underline;">Privacy Policy |=20

tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions

; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.

Z6QO5nHB-2BRqScg2OszQc7WdtPVekyRzQCwNg0mQMaP3s5V88DSz2WjxeYEs39fD1kGsqHDEN3=

W9iM1DQWN5vxBBPDOIE-2FcOTIfn7VxiTktB7UYGmz2iGn3Yuq7r8yQb0gZvZ-2FjHDWOSbkWc5=

-2BKy1Q4-2BmGgIQfe7YmSTQ52UjX8Wp5R07wE-2FMomqze6ESf5bhN-2BXA-3D-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>

DHL Phish from Sendgrid Part 1

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVbB-00000000HGa-0XDk

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:25 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsw.outbound-mail.sendgrid.net ([159.183.224.105]:59380)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMUrh-00000000Dm0-1kZ8

for doctor@nk.ca;

Mon, 11 May 2026 11:56:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778522132;

bh=o0zF4zdFg7nScQJm94SDc+Sd87uTRRH7xeQlkj+v/nc=;

b=wzcszvRKqbZ0IXXFP0ZOCyhxjteMgwhNkP/P9RR5THBdIgLTooajxybISinNGCD8DJuJ

Zdx6kic9lppCoZf5pZFMOfz1zsIx/4lm0lWUHyMf0wZzd1S96zBHs5X1s6j/SQkhyalXqf

bOKpZvAhmejgynwiFby3r9y+7xWzahRiS18rIs0AKuHO6OZlRBfHFXGIhbFM/USyy9pZ0N

38WWQnEqL8rvCEOoHW28l6l29v26CvElSDADT/A2d6839QRH3kf5PrdM+S6rIX4X0g+Y/m

V0N72BLXqLuS40vwwMt8PRdWMNZbjSgcV/02t8rtqIzSd8aB2V/vonL7BRMWf+Ig==

Received: by recvd-66f8c77d66-dtnxj with SMTP id recvd-66f8c77d66-dtnxj-1-6A021814-45

2026-05-11 17:55:32.543527574 +0000 UTC m=+1110112.512964107

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-11 (SG) with HTTP

id Eb7OnCsVThirsFP_XtW0Hw

Mon, 11 May 2026 17:55:32.514 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 17:55:32 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID:

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQJgfcJHv5ICf?=

=?us-ascii?Q?66K2jIRSkIzECvChasTu4w+aMpzCfxUbzQSHn61?=

=?us-ascii?Q?vOuVqQ1bP2JJfsLtl3qgeDUpi2L53y2V5pfqnAm?=

=?us-ascii?Q?PKmK8Ohgnvj4ZGaP3hJCxfdn9K+ftKwyxqTXZ6n?=

=?us-ascii?Q?DayiL1NqH0cQVn9BrPvTwE=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 22.7

X-Spam_score_int: 227

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: DHL Delivery Notification DHL Delivery Notification

Content analysis details: (22.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: fedax.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fedax.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.224.105 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive

0" />

DHL Delivery Notification

tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">

e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">

padding:0;">

style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>

DHL Phish from Sendgrid Part 2

Posted by Dave Yadallee on Monday, May 11. 2026

ollapse; padding:15px 0; text-align:center;">

-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />

font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>

color:#333333;">Hello,

color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">

:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45=

:1.5; color:#333333;">

Status:** Re=

ceived at local DHL terminal

lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges

0; font-weight:bold; line-height:1.3;">Pending Charges

color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">

ding:0;">

tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">

der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">

:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now

0; font-weight:bold; line-height:1.3;">Need Assistance?

style=3D"color:#d40511; text-decoration:underline;">Customer Support

Phone: 01 800 71=

2 3456

color:#333333;">Thank you for using DHL .

33333;">Sincerely,
DHL
p>

px solid #eeeeee;">

=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">

ding:0; font-size:12px; color:#777777;">

; color:#777777;">

style=3D"color:#777777; text-decoration:underline;">Privacy Policy |=20

tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions

; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.

Z6QLc8x-2F-2BKGnvk5srZX-2BTJdMKNZrrtjUtlUV4-2F9tH2DkbSuNus-2FhMkX8kepVdZlct=

Qt80YR41nbTPDMokX1L7rV7jZP7C117hmQ0qvFa8BMF70Ol-2BIOa5CybPR3WxBOTkCV-2BtQ4I=

r5Uhz6aK1abtWRF-2FCVv8eqUX4SsjLqZ2y23Z3oDP8NdoIRhe2QwAZeGBn75A-3D-3D" alt=

=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;=

width:1px !important;border-width:0 !important;margin-top:0 !important;marg=

in-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;p=

adding-top:0 !important;padding-bottom:0 !important;padding-right:0 !import=

ant;padding-left:0 !important;"/>

DHL Phish from Sendgrid Part 1

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVay-00000000HFm-1jXZ

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsv.outbound-mail.sendgrid.net ([159.183.224.104]:52656)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMTyZ-00000000A0R-43zR

for doctor@nk.ca;

Mon, 11 May 2026 10:59:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778518711;

bh=XnxtfW9YnmxIAXe5UecAIVvzkjXgSj649+Qsszil+/Y=;

b=RbDY6hUvyk/RbmGl4wjKl7fHVDXLIbpTMkTLOjZH2KhHySDIWcBLmORxo+piBkgVY5/2

2jcwiCtdlSiC5rSE5YTW5D9jk71LxWEppsdONGPWvqz99IxAIKS527+8cOsNu6MUUYovWL

mS6aMZVsrlY9psYBMY0dFfWbrSd6OTP82S/xRnZlw2fyBB542hXUq6O5misW6/xGgDSGJf

qSPYnKIbTejnmVRESj08cITv7M/C5j59+BJMVkm3X1cjzUO7l2UmPRQq158IGvfk/lcJol

RLQ/d7DxQ6Uchis6yVUp27/mZT3iRGMAePK75DbX/3MTbrbIxSq8gkwIYP90d3CQ==

Received: by recvd-5744f687b-qqpbk with SMTP id recvd-5744f687b-qqpbk-1-6A020AB7-85

2026-05-11 16:58:31.751043528 +0000 UTC m=+1106502.810733405

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-6 (SG) with HTTP

id 1XIZxw42TlaFQsdhsauzPw

Mon, 11 May 2026 16:58:31.744 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 16:58:31 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID: <1XIZxw42TlaFQsdhsauzPw@geopod-ismtpd-6>

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQMfj88GV4LAK?=

=?us-ascii?Q?2kmQfjFl80OQtEeHDi7goxN81WmYHjny+kq3hBP?=

=?us-ascii?Q?6YYv6fcjgfXlEGP9AmRMX8k5KSTlT7iRCPo6dMy?=

=?us-ascii?Q?gu3glY4XXbqEP5jDrVQh5Ai3YtAbQHkLYI7b18u?=

=?us-ascii?Q?HDWAJRUzU0CcBNKMmtRoyA=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 21.4

X-Spam_score_int: 214

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: DHL Delivery Notification DHL Delivery Notification

Content analysis details: (21.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: fedax.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fedax.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive

0" />

DHL Delivery Notification

tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">

e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">

padding:0;">

style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>

Geek squad phish from Microsoft Outlook Part 4

Posted by Dave Yadallee on Monday, May 11. 2026

Haresasz Nxysarwsa has invited you to Subscription Renewal Confirmation – Geek Squad Protection

Title: Subscription Renewal Confirmation – Geek Squad Protection

Location: https://meet.google.com/rif-vdsd-fgi

When: May 11, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,

We appreciate your continued trust in Geek Squad Protection Services. Your membership for the 365 Premium Security Plan has been renewed successfully for the next 3 years.

The renewal amount of $259.99 will be deducted from your registered billing method shortly, and it may take up to 24 hours for the transaction to appear on your statement.

Subscription Information:

Service Plan: 365 Premium Security Plan

Coverage Duration: 3 Years

Renewal Charge: $259.99

If you believe this renewal was made in error or would like to cancel the subscription before processing is completed, please contact our billing department immediately at +1 801 457 9438.

Thank you for choosing Geek Squad Protection Services.

Best Regards,

Geek Squad Billing Team

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Pripojiť sa cez Google Meet: https://meet.google.com/rif-vdsd-fgi

Viac o službe Meet sa dozviete na https://support.google.com/a/users/answer/9282720

Túto sekciu neupravujte.

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Attendees:

cynthiaperez389903@groups.outlook.com

Subscription Renewal Confirmation – Geek Squad Protection

Pripojiť sa cez Google Meet – Dear Customer, We appreciate your continued trust in Geek Squad Protection Services. Your membership for the 365 Premium Security Plan has been renewed successfully for the next 3 years. The renewal

Pripojiť sa cez Google Meet

Odkaz na stretnutie

meet.google.com/rif-vdsd-fgi

Dear Customer,

We appreciate your continued trust in Geek Squad Protection Services. Your membership for the 365 Premium Security Plan has been renewed successfully for the next 3 years.

The renewal amount of $259.99 will be deducted from your registered billing method shortly, and it may take up to 24 hours for the transaction to appear on your statement.

Subscription Information:

Service Plan: 365 Premium Security Plan

Coverage Duration: 3 Years

Renewal Charge: $259.99

If you believe this renewal was made in error or would like to cancel the subscription before processing is completed, please contact our billing department immediately at +1 801 457 9438.

Thank you for choosing Geek Squad Protection Services.

Best Regards,

Geek Squad Billing Team

Kedy

pondelok 11. máj 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno

Nie

Možno

Ďalšie možnosti

Pozvánka z Kalendára Google

Túto správu ste dostali, pretože ste účastníkom danej udalosti.

Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Geek squad phish from Microsoft Outlook Part 3

Posted by Dave Yadallee on Monday, May 11. 2026

Content analysis details: (11.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

[40.93.12.12 listed in dnsbl.ahbl.org]

[40.93.12.12 listed in dnsbl.ahbl.org]

[40.93.12.12 listed in dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.12.12 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.12.12 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.12.12 listed in wl.mailspike.net]

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 TO_IN_SUBJ To address is in Subject

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Subscription_Renewal_Confirmation_=2D_Geek_?=

=?UTF-8?Q?Squad_Protection_=40_po_11=2E_m=C3=A1j_2026_=28cynthiaperez389903=40grou?=

=?UTF-8?Q?ps=2Eoutlook=2Ecom=29?=

Geek squad phish from Microsoft Outlook Part 2

Posted by Dave Yadallee on Monday, May 11. 2026

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?S1Y0VlArSnQyWSt4L1g2aHpkR094b2VsYWpodHRVWjBIWmt2S0tvNlBkaFNk?=

=?utf-8?B?VU1PSERYclNNV0d1eU1CTWpGRlRYVTVQRjNHMVFzbGNaQUd4VnRnSmQybkFi?=

=?utf-8?B?TGF3eGorekJ6MVYrWlBEZWFxaDFMQjFJb1EwSDdrNDFFMmN1anVzRmhqejY5?=

=?utf-8?B?Wi9FUGNISFpxMFBpb1BkNFJnVWswSkxZSi9HNTMyWVlKQjZhMm4rVUkzUWxP?=

=?utf-8?B?akFWRE03VEtTR2xqRlVPWGdwdjB3UHhZRWNsaWxSc3g0OENqb1NVWWtWSjBB?=

=?utf-8?B?MVJmU0RsUEY0bitGN3JCWW5uaG5QdjgxanBmNHQ3RUE2UnZQTnkrWmRWTEsw?=

=?utf-8?B?WWlpNElReTByY3V3ZkVOSlhxMC9GK2VEa2cyaHJnUEtLOGxDbytLK0F6azJt?=

=?utf-8?B?Sk5IV3VHeWNGSDhTcXp0a200TlNqNFphTyszOFk4N1ZvMWkyZ3JtM1VydXhk?=

=?utf-8?B?V2NLNzRyemppaFF3ZFpHTWhWRGFLSXZrYVZUOXJ5aE9qQTVjZ05YVEhmSXFv?=

=?utf-8?B?ZDBUSmU2V0x1K3JyVXlFOXFOeHowZ1kzR2VRVVYzT1VnQUdLdmpjZ2NGU0RC?=

=?utf-8?B?d0V2TUVOdTVHZUdGTVhxSjFMOWlHSzlpcElHN3VtQjFYWGlHamNIVVdQSlFV?=

=?utf-8?B?OVF0NDR1N2dvOE56L1g3ZGFDd1R1MU9oZmFpSXMyRGJtcW9kOXk5d2xpZlFW?=

=?utf-8?B?eDNwcldTMG1UUFMyWHlsVEdLZTJwbzAyR0V1eTA1bEUxOXlHRlpnMmM1OGFR?=

=?utf-8?B?YSszNmRmM29LRkRONkxYUUg3aHY2SzR2RzMweFBnaHRVNjA3SU5DYXp1Y0xV?=

=?utf-8?B?NGFqK1V6d2lxbmNldTRmM0cvK2UzdEZJY2RCSk5zZllMY05WM3c4bDN6aFgx?=

=?utf-8?B?SWY1QysraEdNdGZzSFoyQlF5bGhwTkZ2em0xSFA2QStNZDVudVBjV3RHWmpm?=

=?utf-8?B?cHJOYnF3aCtEemZhOHdidEhsQVNJSHRUVEJqcFpQMmZqbGdZM013Ni8vblpK?=

=?utf-8?B?MlpPUGhUVjN4YzErNzFqYlkzS29iOUVxcnFkT2ZjeUpQaFNtZnlyM2xpdURq?=

=?utf-8?B?YXUrcWZDclpSSXBpWG5zamxxTGh1aHAwcGh5VjJuaUsyZmZENWVhMUlzbHky?=

=?utf-8?B?NkhhOHo0b01SQXhXdGFHMk0yb2ZRWnhyWG1USXJLVU5zcS9LMEJEWERkRWtw?=

=?utf-8?B?SndiVmR0SVlMdHZoT21vQVhTOThjOXZxbDNGN3AwWXBmaVg0a3c5Skd0aHFK?=

=?utf-8?B?cXNKL0lZbmNpeWtQSzRyOFk3T2tqbUJiL0RsVExLVmttMUxGWVRLK0k0MEVG?=

=?utf-8?B?SFRpMk1YcnBUSnVHOGVPNGNtMEYxQndSSktRbGZDTHphakJJOHY5aFJsbUE3?=

=?utf-8?B?aUNOalpnWTFsWDZGTHRPK3NiOXk1cG5Ed0MvZDEwUEpnS3ZzZm03MkVFWW5Q?=

=?utf-8?B?d0c3dnM5SDBHUWhiVHgwTFF1cFZMOWNNTVRkbHp6cjZxZVZ4bUhadmROYk5T?=

=?utf-8?B?TUphekVaam9na0M4SnViYUVERWVpdDJETjh5bXlMM3hKc21uR0NhSVhHYUR2?=

=?utf-8?B?aHZlRzE5S0V6QUFuNlFKdWpKZ1owR2lFSFFCTDVnN2FtK2M4dG1ldVBFRy9O?=

=?utf-8?B?UWRRUHBRZ29KU2NqVmg5NVpIN3lwU05uMkpIUVBNL2pzWngva0FUaGpWUDVq?=

=?utf-8?B?SHd3UzlTcy9QNmVCODVpT0hJUnJTcWE1MTBKVUhEclI2VDhCM256U2FTSnh4?=

=?utf-8?B?ZW1vMU9sNUJRQW9weFNWQkVkcEQ1TTk1VmpjaU55V3hONmU1Yk95amxaZThz?=

=?utf-8?B?ZlNNY2tFaWZXMldpUmpjMFVVTEhUTlJ5VWRYTFdLQ2pkeWFXcFZYeXhtK2No?=

=?utf-8?B?VWJ0ZWMyNkFNVWFid3dPd0lpSm00TmdERTVTRWVjeFF6eGo0WHB2eExMdVR4?=

=?utf-8?B?bFhSRnlvc2M3QStpOWFqV0RBRklwTXh0YUtwQTNibkh0dStQYVcyL2NyajZ4?=

=?utf-8?B?UUIvb3pueUN5cHZPL2tFMHRheDk5ckFVS2FBUmZYeEdzOFNFbDh4RzRHZkhR?=

=?utf-8?B?dkNHbFJUYTlaNm5VTnRkZHFDTzZaREJQUVpVODRZVDJaaWsza3M4QlA3bENk?=

=?utf-8?B?cGRBaG1TSnowV2pXOFZ2OENheDV4TmpWazZSSkp4M3BkYVd1MnlXNFg4NzVV?=

=?utf-8?B?eGdBSVZ5WEZYeUJOWDBYVjJiaG1ZRStnWkt3SGJ4V1FTWENhbHVXb0NJVmtj?=

=?utf-8?B?VTljbHlyQitDQjdSWVoxdjBocDVFOEFsNlU5YmFuTXZjaC9ONWVYUWNWWmxw?=

=?utf-8?B?NzRVTGZMc1loWjRqTXhQL0xBMm5ZbmZib0h0WlRWcDFhUnhDKzZucnk1clU3?=

=?utf-8?B?cVlCbDJFTDI3VElySWc5d2l4OGQ0Mk9XWmYzaldzZzRya3JnbFZkWE0xYTVF?=

=?utf-8?B?K29BT1Mvb29yVkU3ZTdEN0RlWjEyUEp3VWpYak43OTZSejI4bE5vNnlYV2Z0?=

=?utf-8?B?bFQ3ZDBiYnRFV3BXcnZoU215RUtzQlpPVEV0NGhBU0ZaTmhRK21ieGpjYW9s?=

=?utf-8?B?WmloOFBGMUZpWTdNcWlFR09YVit3cXAvVHMrb2hYclkyKzBuRURwd3pla1BK?=

=?utf-8?B?ZWw2aHo3N3RmSXE4ZkJqVTVWK3hCN1JiRSswZ1dURVhXRUhnVkdSeGtQcE1i?=

=?utf-8?B?YUtGTWQ0RXkyZllVVS9VZkJHaUxldC85dHJuLzgxYitCVW9HbkFOVXF6ajVG?=

=?utf-8?B?RDROMlN3cklmRWVFSkt5aDhWNzd1aVdJSHBER3A3dzM2VkxnSXZJUXdITHBt?=

=?utf-8?B?MllzZjRQdjh1UkVzYmdUbXFRZHBrZkRVMkVnUXN4SnNjWm03eXRCbTZOVy84?=

=?utf-8?B?V25zTXhnWUZseDRuTmdZTEZCMDZvWDRYSGk0S3IzZ0hzVHIyVXI0OUlmMkZy?=

=?utf-8?B?a1crTDRCYWtzTnR5TlBmbmRyL3psbHJQRGx5YXdwdndDaDRiZjRnZ0t0b25a?=

=?utf-8?B?clBwWlpnSEpYZnRzRnVJazBYTkQxemZQZ1loMjNvRUcyakJBVGdlWGtvcnZm?=

=?utf-8?B?SmY5NUFNTll6UnpnRVFWd3ZxamlZTVVjZlpiSnF6VXgzaE9mMDFmWFNraHJY?=

=?utf-8?B?bHVrZkJuWHBlVm1IVjNDTWNoUzNJTUgzd2oyVkU0b0JKRitsT245OVdlUzBM?=

=?utf-8?B?dkNiZnNwRnA2bk4zcUpkYmZFMGJlYUY0dCtWQ2xya1RFMGJqVkhwU3IvUEdR?=

=?utf-8?B?ZjB3OUx1ZUZvM1I3cVh3MDVoME5mZTdpUVM1V2xWVVQ2K0Rsd2RvTzQ5UmxX?=

=?utf-8?B?RjV0VHh5aTZjNnNtNWRMTzRLWEM2Z3RSRkJhZ1Z6RXdCYXJCYTNaUFlSSlFw?=

=?utf-8?B?Sm45N2kvVDVsdkYyYmhmUEN5d3pFWXVwYkt3c3NoOGVMQVp0bUs5VlJLSWdF?=

=?utf-8?B?S24rODE3UHlNSXgrK3Y3TnlZUUNtenc2aWIvZzZlaHU2WWJoSllxZFg4Ym9z?=

=?utf-8?B?dk13VzBoakxlc2xsL2Y3UmZEVDU4YmgzenhYRFpIWThsWjk3cWdSKzNTUkhR?=

=?utf-8?B?OHlNeGlUZmVVYWFIZUN6TmZuSFFjK2RXbUh3YXROK0VpZ3dvZWh1NG02SU05?=

=?utf-8?B?ai9SQmcrbUVya21QbDdVNFFicStWUE11UXZGNGQ4S1pQWDM2VzVidTFqOUk1?=

=?utf-8?B?VENXdzdQNWN6WWdwNXNzV3p6am1KV2xpcnBvcGd0UzJwc3RCWkJMSzNvV2Qy?=

=?utf-8?B?d2hCUFhNVFZGL05iRXhkbUV6YjVWdWNrQm1OZHV5SXprR1FTNzYxbkVRQVdi?=

=?utf-8?B?NGUzSEdzb1FMZGkvV1RTSVA1MjJ1eEFBejY5WmlPRlpMeTMxZlk5K1hxT0FC?=

=?utf-8?Q?LfMR0loDAg9/yb+O/jbGM+Ook/lBKTVu3+j8oOXvCjf8m?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 May 2026 16:05:58.1980

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 3f8accb7-7425-4a05-ad0c-08deaf773077

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF0001AB54.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN6PR18MB5444

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Subscription Renewal Confirmation â€“ Geek Squad Protection

pondelok 11. mÃ¡j 2026 PripojiÅ¥ sa cez Google Meet https://meet.google.com/rif-vdsd-fgi?hs=224

Dear Customer,

Geek squad phish from Microsoft Outlook Part 1

Posted by Dave Yadallee on Monday, May 11. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVae-00000000HDs-19Ie

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:42:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:42:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastus2azlp17011012.outbound.protection.outlook.com ([40.93.12.12]:14068 helo=BN8PR05CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMTA8-000000006B1-2dLe

for doctor@doctor.nl2k.ab.ca;

Mon, 11 May 2026 10:07:32 -0600

Received: from MN0PR03CA0002.namprd03.prod.outlook.com (2603:10b6:208:52f::31)

by MN6PR18MB5444.namprd18.prod.outlook.com (2603:10b6:208:47b::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.23; Mon, 11 May

2026 16:05:58 +0000

Received: from BL6PEPF0001AB54.namprd02.prod.outlook.com

(2603:10b6:208:52f:cafe::99) by MN0PR03CA0002.outlook.office365.com

(2603:10b6:208:52f::31) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9891.23 via Frontend Transport; Mon,

11 May 2026 16:05:58 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.73)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.73 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.73; helo=mail-wm1-f73.google.com; pr=C

Received: from mail-wm1-f73.google.com (209.85.128.73) by

BL6PEPF0001AB54.mail.protection.outlook.com (10.167.241.6) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.25.13

via Frontend Transport; Mon, 11 May 2026 16:05:58 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:FBB4CA4D47C93B9940D02205B933F92718B1A45AA160ECCFC838564C847EA15A;UpperCasedChecksum:CFCF916B377C88208D20496F88AE3078B6FDDF4CCEE9242F9E7D660DC80F049A;SizeAsReceived:3418;Count:15

Received: by mail-wm1-f73.google.com with SMTP id 5b1f17b1804b1-48d035e8593so31985825e9.0

for ; Mon, 11 May 2026 09:05:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1778515557; x=1779120357; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hB8DMu1EBHSxViXdZ9sEisTr6GqeccGRk+mIXlkgBiI=;

b=jcWRlPWBAVwGvpsAMexnarF2mn4vatcjQ1z1ZtZUYSpesrt0xiNBZoUpBxtZWwsthD

/FJMl4HgUs5EipD5DwYorGANIbOrsZ7HR6eJL5R63WOP0//FA/EbdZmbOa8KA87B3UxE

82Do5soLia3DEkGfwiyjN/OJ2agKVwkaZ8p73ZNPC6aUke0Y9adVyQyI/CYODkcS2tfo

HDryoZ/+iGTjE4ViQP3Uc+K6sh3L6sACoiTBPZakZMHsl8iZ5RTkOtq8cP0Qz3nBxNy7

y1m5Bkd53XjnVhW/GjNDimm+l66lab20FzcbS4hRIc0AandEWKiKM2bOs4/X9aRlHgwk

iLEw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778515557; x=1779120357; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hB8DMu1EBHSxViXdZ9sEisTr6GqeccGRk+mIXlkgBiI=;

b=Qrt64AAGJnqvB4tK9kCa4Ibsmqd2MmdGxQ24HeKsoULsMzlBYf4Pi60VW/izvaol8e

1agDpQC3fiuoX6vX8mEvim34QiW98AgsfHB+L0dWY6uLEcvssMgnXyMGB50lDrIEyg49

55iwEJmdE9NZ2HwFVCbTMfbPX5xPEaZqLA7EMW3gkfApxw38XBpO+/Jpr2Oq3XRGufmS

5OANrihj0hNs6Et11sdT7EnOSVXFmE23gS+bO8Px6nJRSLAbfpy23J0D4EGsw9cJix6U

xGT7l6k9s1QPeqQHTCEtGHBgdI2+2oRzWZHo8a56+ux4fmOfpUrikDIL8eI1K/3woZkY

6BdQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778515557; x=1779120357;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=hB8DMu1EBHSxViXdZ9sEisTr6GqeccGRk+mIXlkgBiI=;

b=KEeAjmYRmE0Lr1go/0x3mH2qzoDGgFMnWCyQcsI2nrnqd2g7O4TDU8vJHkWQqd1nEi

LLPBxm/4M5oyKvsp1kyEiNNphNus5+2fjyH2vrAB8eOkRawvKrd+AQJqHqFpgObZbPMu

VxoVKQs2e/SDXmfyNNXNwgUYZXSgWwNCchyjN5DtHipjxn6UfYrSygeTd8xwkS+Iy9iW

diLnAY5fWYZmLfMs34lgl8N+Lt5B5COWx/YCZuALx0yojUiI3S+Htbh/6Sin4OzEfNOw

OB73YzpgY1FIVcCxMWzglCGo7Vgm5p6Q6pBCeN5mGY7xucujbf4v08bfv6oUEHCv0k/G

KI7w==

X-Gm-Message-State: AOJu0YxSiftIo+pSGZAhPX0kATuPF53Eh0bC191tBK8/ga4MW891TjyE

maQuoCH2Vj7zuxnRyte2LcCRcUlNS5pgLOCM9+H9yi4J85ZXZwKAtqrJbsxkMt980wMil8/iJvF

6gt9OZ7DgX68eAmvY+HzC9x+P9VTQWch0Gfk=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:3e0c:b0:489:fec9:a17e with SMTP id

5b1f17b1804b1-48e6768514dmr259024865e9.12.1778515557097; Mon, 11 May 2026

09:05:57 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Mon, 11 May 2026 16:05:57 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Subscription_Renewal_Confirmation_=2D_Geek_?=

=?UTF-8?Q?Squad_Protection_=40_po_11=2E_m=C3=A1j_2026_=28cynthiaperez389903=40grou?=

=?UTF-8?Q?ps=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="00000000000002327306518cec99"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB54:EE_|MN6PR18MB5444:EE_

X-MS-Office365-Filtering-Correlation-Id: 3f8accb7-7425-4a05-ad0c-08deaf773077

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.73

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|9400799043|3151999006|6019299003|32020799003|1680799066|9020799019|34130799006|4040799016|970799063|26000799027|5139299004|26130799012|22000799015|16200799027|9000799056|29080799009|6092099016|24102599021|21002599022;

ollapse; padding:15px 0; text-align:center;">

-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />

NetKnow

Telus and reviews

Rogers

Netknow again

Government of Alberta

City of Edmonton

University of Alberta

Juno and NetZero

Grant MacEwen University

NAIT / Northern Alberta Institute of Technology

TekSavvy

Shaw Cable

Internet Centre / CCINet

Xplornet

Distributel / 3Web / CIA

Primus

Northern lights Fiber

OkayVPN

OkayVPN are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Tera Byte Edmonton and reviews

MCSnet

Nucleus Internet Services

4Web

Alentus / Wolfpaw

0; font-weight:bold; line-height:1.3;">Pending Charges

0; font-weight:bold; line-height:1.3;">Need Assistance?

0; font-weight:bold; line-height:1.3;">Pending Charges

0; font-weight:bold; line-height:1.3;">Need Assistance?

0; font-weight:bold; line-height:1.3;">Pending Charges

0; font-weight:bold; line-height:1.3;">Need Assistance?

0; font-weight:bold; line-height:1.3;">Pending Charges

0; font-weight:bold; line-height:1.3;">Need Assistance?

Archives

Categories

Syndicate This Blog

Blog Administration

Powered by

NetKnow Navigation

Remote RSS/OPML-Blogroll Feed

Error

addthis

Empire Avenue

Error

Error

Error

Syndicate This Blog

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.