DHL Phish from Sendgrid Part 2








=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">










:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45**=

****





:1.5; color:#333333;">

Status: Re=

ceived at local DHL terminal




lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges








0; font-weight:bold; line-height:1.3;">Pending Charges




color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.








=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">








ding:0;">


tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">








der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">


:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now









0; font-weight:bold; line-height:1.3;">Need Assistance?








color:#333333;">Thank you for using DHL .




33333;">Sincerely,
DHL
p>












px solid #eeeeee;">


=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">








ding:0; font-size:12px; color:#777777;">


; color:#777777;">


style=3D"color:#777777; text-decoration:underline;">Privacy Policy
|=20


tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions





; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.




; color:#777777;">© 2025 DHL . All rights reserved.






















"> 



h8zSh3F0f0IeZiwAoLfCvbUSDGmoGtbzkF-2B96goCvzJB-2BVQoH68Wj-2Bvtmfw4GD8sV5yzu=

5iJS-2BBqYNEMwH7OPVTgfWNCHc9ISp-2BcBYV6UxPXTZF4tMq2MOS76sskFQPoEmZKUkOnH03C=

6ZI-2FEQJJ6d8y5LPGTREmYQ8mDDOJxZ48idkq-2BN5810iGIKiVXUFawnLg-3D-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>



DHL Phish from Sendgrid Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVbg-00000000HIj-3xRt

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:56 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvwxzv.outbound-mail.sendgrid.net ([149.72.154.232]:23904)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVHx-00000000Fmh-3xcF

for root@nk.ca;

Mon, 11 May 2026 12:23:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778523762;

bh=f9yjCOqbSbiP76jjxTQQryAuWQflEMcvCUGdY4W2T1s=;

b=kV3bL/h2xjphTHruhDOMW244tA36Zhgl3zA6fHYOuYfD8uWFA99Q5ZsI1S88LMPhKEqq

5xMmJ+OqZBQY9mGNIzXQYBppqff8c6Liua6yluZ1kWC4D3n8V5gEmSe9dUgxEI9NMF2W8c

qrfP04hHTp64DN7UpOTOSKjq7qYaHqisIXo+OxPtFzs9WbbfouEB5WTmgxHQIdtLXG2OVK

4U6hlDe+qtnSs0V2MKRkKVjb7AtbfFdRzpzuNNFtmTbKJjCzMIsbUbFNMv6kVxX/kshi9O

6npQDGMWReHALlS88FjXZA97MihJhXW5CO4Dm0U/J6MNXPoOqG4+ZF4SpIOhPtjQ==

Received: by recvd-58d6d9468b-6tlch with SMTP id recvd-58d6d9468b-6tlch-1-6A021E72-3D

2026-05-11 18:22:42.383585882 +0000 UTC m=+1111711.151683161

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-20 (SG) with HTTP

id LmZKPBvTRkK0I1Z-GAl8NA

Mon, 11 May 2026 18:22:42.343 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 18:22:42 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID:

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQNOv40wDiV2n?=

=?us-ascii?Q?l8Jy8WjEh5JUo4M0=2Fl=2FJvu0vu4w9XBo59ZB82P9?=

=?us-ascii?Q?x9NMfnPiZupWKyXPC1ZN9PNUEUnmorRfDnPxW1v?=

=?us-ascii?Q?TBLQDIfPsJOzTCoAevaagDKlGSB0Fuwb=2FF5qtdx?=

=?us-ascii?Q?T30lTnYIHvpMgJPISZapwg=3D?=

To: root@nk.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Delivery Notification DHL Delivery Notification



Content analysis details: (21.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

[149.72.154.232 listed in dnsbl.ahbl.org]

[149.72.154.232 listed in dnsbl.ahbl.org]

[149.72.154.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.154.232 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

[149.72.154.232 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive












0" />



DHL Delivery Notification




tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">


e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">








padding:0;">


style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>
































ollapse; padding:15px 0; text-align:center;">


-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />




font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>


color:#333333;">Hello,




color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.




font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>


color:#333333;">Hello,




color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.








=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">










:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45**=

****





:1.5; color:#333333;">

Status: Re=

ceived at local DHL terminal




lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges








0; font-weight:bold; line-height:1.3;">Pending Charges




color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.








=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">








ding:0;">


tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">








der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">


:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now









0; font-weight:bold; line-height:1.3;">Need Assistance?








color:#333333;">Thank you for using DHL .




33333;">Sincerely,
DHL
p>


px solid #eeeeee;">


=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">








ding:0; font-size:12px; color:#777777;">


; color:#777777;">


style=3D"color:#777777; text-decoration:underline;">Privacy Policy
|=20


tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions





; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.




; color:#777777;">© 2025 DHL . All rights reserved.














"> 



Z6QO5nHB-2BRqScg2OszQc7WdtPVekyRzQCwNg0mQMaP3s5V88DSz2WjxeYEs39fD1kGsqHDEN3=

W9iM1DQWN5vxBBPDOIE-2FcOTIfn7VxiTktB7UYGmz2iGn3Yuq7r8yQb0gZvZ-2FjHDWOSbkWc5=

-2BKy1Q4-2BmGgIQfe7YmSTQ52UjX8Wp5R07wE-2FMomqze6ESf5bhN-2BXA-3D-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>



DHL Phish from Sendgrid Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVbB-00000000HGa-0XDk

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:25 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsw.outbound-mail.sendgrid.net ([159.183.224.105]:59380)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMUrh-00000000Dm0-1kZ8

for doctor@nk.ca;

Mon, 11 May 2026 11:56:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778522132;

bh=o0zF4zdFg7nScQJm94SDc+Sd87uTRRH7xeQlkj+v/nc=;

b=wzcszvRKqbZ0IXXFP0ZOCyhxjteMgwhNkP/P9RR5THBdIgLTooajxybISinNGCD8DJuJ

Zdx6kic9lppCoZf5pZFMOfz1zsIx/4lm0lWUHyMf0wZzd1S96zBHs5X1s6j/SQkhyalXqf

bOKpZvAhmejgynwiFby3r9y+7xWzahRiS18rIs0AKuHO6OZlRBfHFXGIhbFM/USyy9pZ0N

38WWQnEqL8rvCEOoHW28l6l29v26CvElSDADT/A2d6839QRH3kf5PrdM+S6rIX4X0g+Y/m

V0N72BLXqLuS40vwwMt8PRdWMNZbjSgcV/02t8rtqIzSd8aB2V/vonL7BRMWf+Ig==

Received: by recvd-66f8c77d66-dtnxj with SMTP id recvd-66f8c77d66-dtnxj-1-6A021814-45

2026-05-11 17:55:32.543527574 +0000 UTC m=+1110112.512964107

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-11 (SG) with HTTP

id Eb7OnCsVThirsFP_XtW0Hw

Mon, 11 May 2026 17:55:32.514 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 17:55:32 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID:

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQJgfcJHv5ICf?=

=?us-ascii?Q?66K2jIRSkIzECvChasTu4w+aMpzCfxUbzQSHn61?=

=?us-ascii?Q?vOuVqQ1bP2JJfsLtl3qgeDUpi2L53y2V5pfqnAm?=

=?us-ascii?Q?PKmK8Ohgnvj4ZGaP3hJCxfdn9K+ftKwyxqTXZ6n?=

=?us-ascii?Q?DayiL1NqH0cQVn9BrPvTwE=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 22.7

X-Spam_score_int: 227

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Delivery Notification DHL Delivery Notification



Content analysis details: (22.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: fedax.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fedax.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.224.105 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive












0" />



DHL Delivery Notification




tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">


e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">








padding:0;">


style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>


























ollapse; padding:15px 0; text-align:center;">


-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />




font-weight:bold; padding:0; line-height:1.3;">DHL Delivery Notification
2>


color:#333333;">Hello,




color:#333333;">

We would like to inform you that your package has arrived at =

our facility and is ready for delivery.








=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; background-color:#fff4e6; border-left:4px solid #d40511; marg=

in:15px 0;">










:1.5; color:#333333;">

Tracking Number:
trong>=20

cs45**=

****





:1.5; color:#333333;">

Status: Re=

ceived at local DHL terminal




lor:#333333;">

Action Required:
trong> Confirm delivery and pay pending charges








0; font-weight:bold; line-height:1.3;">Pending Charges




color:#333333;">

To proceed with delivery, a standard handling and processing =

fee of $12.47 USD is required.








=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt; margin:15px 0;">








ding:0;">


tyle=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0p=

t;">








der-collapse:collapse; padding:12px 25px; background-color:#d40511; border-=

radius:4px;">


:16px; font-weight:bold; color:#ffffff; text-decoration:none; display:inlin=

e-block; line-height:1.5;">Confirm and Pay Now









0; font-weight:bold; line-height:1.3;">Need Assistance?








color:#333333;">Thank you for using DHL .




33333;">Sincerely,
DHL
p>


px solid #eeeeee;">


=3D"100%" style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-tabl=

e-rspace:0pt;">








ding:0; font-size:12px; color:#777777;">


; color:#777777;">


style=3D"color:#777777; text-decoration:underline;">Privacy Policy
|=20


tyle=3D"color:#777777; text-decoration:underline;">Terms & Conditions





; color:#777777;">

This message was sent to you because you previously int=

eracted with our delivery services.




; color:#777777;">© 2025 DHL . All rights reserved.














"> 



Z6QLc8x-2F-2BKGnvk5srZX-2BTJdMKNZrrtjUtlUV4-2F9tH2DkbSuNus-2FhMkX8kepVdZlct=

Qt80YR41nbTPDMokX1L7rV7jZP7C117hmQ0qvFa8BMF70Ol-2BIOa5CybPR3WxBOTkCV-2BtQ4I=

r5Uhz6aK1abtWRF-2FCVv8eqUX4SsjLqZ2y23Z3oDP8NdoIRhe2QwAZeGBn75A-3D-3D" alt=

=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;=

width:1px !important;border-width:0 !important;margin-top:0 !important;marg=

in-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;p=

adding-top:0 !important;padding-bottom:0 !important;padding-right:0 !import=

ant;padding-left:0 !important;"/>



DHL Phish from Sendgrid Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVay-00000000HFm-1jXZ

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:43:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:43:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsv.outbound-mail.sendgrid.net ([159.183.224.104]:52656)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMTyZ-00000000A0R-43zR

for doctor@nk.ca;

Mon, 11 May 2026 10:59:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opencv.org;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1778518711;

bh=XnxtfW9YnmxIAXe5UecAIVvzkjXgSj649+Qsszil+/Y=;

b=RbDY6hUvyk/RbmGl4wjKl7fHVDXLIbpTMkTLOjZH2KhHySDIWcBLmORxo+piBkgVY5/2

2jcwiCtdlSiC5rSE5YTW5D9jk71LxWEppsdONGPWvqz99IxAIKS527+8cOsNu6MUUYovWL

mS6aMZVsrlY9psYBMY0dFfWbrSd6OTP82S/xRnZlw2fyBB542hXUq6O5misW6/xGgDSGJf

qSPYnKIbTejnmVRESj08cITv7M/C5j59+BJMVkm3X1cjzUO7l2UmPRQq158IGvfk/lcJol

RLQ/d7DxQ6Uchis6yVUp27/mZT3iRGMAePK75DbX/3MTbrbIxSq8gkwIYP90d3CQ==

Received: by recvd-5744f687b-qqpbk with SMTP id recvd-5744f687b-qqpbk-1-6A020AB7-85

2026-05-11 16:58:31.751043528 +0000 UTC m=+1106502.810733405

Received: from NDg1ODgzNDM (unknown)

by geopod-ismtpd-6 (SG) with HTTP

id 1XIZxw42TlaFQsdhsauzPw

Mon, 11 May 2026 16:58:31.744 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Mon, 11 May 2026 16:58:31 +0000 (UTC)

From: DHL =?iso-8859-1?b?rg==?=

Mime-Version: 1.0

Message-ID: <1XIZxw42TlaFQsdhsauzPw@geopod-ismtpd-6>

Subject: Package held - awaiting owner's directive

X-SG-EID:

=?us-ascii?Q?u001=2ETa3OM1HXsMIo6wnNDuyzVthb71LIukiXG0810I=2Fp=2FTQY2el+W6mlL5eS2?=

=?us-ascii?Q?h3UkJ3TRxomITXR6PXI3UIGWy8dQMfj88GV4LAK?=

=?us-ascii?Q?2kmQfjFl80OQtEeHDi7goxN81WmYHjny+kq3hBP?=

=?us-ascii?Q?6YYv6fcjgfXlEGP9AmRMX8k5KSTlT7iRCPo6dMy?=

=?us-ascii?Q?gu3glY4XXbqEP5jDrVQh5Ai3YtAbQHkLYI7b18u?=

=?us-ascii?Q?HDWAJRUzU0CcBNKMmtRoyA=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.fXN7s6z0UzuLoU+akud0bw==

X-Spam_score: 21.4

X-Spam_score_int: 214

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Delivery Notification DHL Delivery Notification



Content analysis details: (21.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: fedax.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: fedax.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Package held - awaiting owner's directive












0" />



DHL Delivery Notification




tant; font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, He=

lvetica, Arial, sans-serif; line-height:1.5; color:#333333; background-colo=

r:#f7f7f7; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">


e=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:0pt; =

background-color:#f7f7f7;">








padding:0;">


style=3D"border-collapse:collapse; mso-table-lspace:0pt; mso-table-rspace:=

0pt; max-width:600px; width:100%; background-color:#ffffff; margin:0 auto;"=

>









Geek squad phish from Microsoft Outlook Part 4



Haresasz Nxysarwsa has invited you to Subscription Renewal Confirmation – Geek Squad Protection

Title: Subscription Renewal Confirmation – Geek Squad Protection

Location: https://meet.google.com/rif-vdsd-fgi

When: May 11, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



We appreciate your continued trust in Geek Squad Protection Services. Your membership for the 365 Premium Security Plan has been renewed successfully for the next 3 years.



The renewal amount of $259.99 will be deducted from your registered billing method shortly, and it may take up to 24 hours for the transaction to appear on your statement.



Subscription Information:



Service Plan: 365 Premium Security Plan

Coverage Duration: 3 Years

Renewal Charge: $259.99



If you believe this renewal was made in error or would like to cancel the subscription before processing is completed, please contact our billing department immediately at +1 801 457 9438.



Thank you for choosing Geek Squad Protection Services.



Best Regards,

Geek Squad Billing Team



-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Pripojiť sa cez Google Meet: https://meet.google.com/rif-vdsd-fgi



Viac o službe Meet sa dozviete na https://support.google.com/a/users/answer/9282720



Túto sekciu neupravujte.

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Attendees:



cynthiaperez389903@groups.outlook.com



Subscription Renewal Confirmation – Geek Squad Protection

Pripojiť sa cez Google Meet – Dear Customer, We appreciate your continued trust in Geek Squad Protection Services. Your membership for the 365 Premium Security Plan has been renewed successfully for the next 3 years. The renewal



Pripojiť sa cez Google Meet

Odkaz na stretnutie

meet.google.com/rif-vdsd-fgi

Dear Customer,



We appreciate your continued trust in Geek Squad Protection Services. Your membership for the 365 Premium Security Plan has been renewed successfully for the next 3 years.



The renewal amount of $259.99 will be deducted from your registered billing method shortly, and it may take up to 24 hours for the transaction to appear on your statement.



Subscription Information:



Service Plan: 365 Premium Security Plan

Coverage Duration: 3 Years

Renewal Charge: $259.99



If you believe this renewal was made in error or would like to cancel the subscription before processing is completed, please contact our billing department immediately at +1 801 457 9438.



Thank you for choosing Geek Squad Protection Services.



Best Regards,

Geek Squad Billing Team

Kedy

pondelok 11. máj 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Geek squad phish from Microsoft Outlook Part 3

Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

[40.93.12.12 listed in dnsbl.ahbl.org]

[40.93.12.12 listed in dnsbl.ahbl.org]

[40.93.12.12 listed in dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

[209.85.128.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.12.12 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[209.85.128.73 listed in will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:cafe:0:0:99 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52f:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

[40.93.12.12 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.12.12 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.12.12 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.12.12 listed in wl.mailspike.net]

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 TO_IN_SUBJ To address is in Subject

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Subscription_Renewal_Confirmation_=2D_Geek_?=

=?UTF-8?Q?Squad_Protection_=40_po_11=2E_m=C3=A1j_2026_=28cynthiaperez389903=40grou?=

=?UTF-8?Q?ps=2Eoutlook=2Ecom=29?=

Geek squad phish from Microsoft Outlook Part 2

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?S1Y0VlArSnQyWSt4L1g2aHpkR094b2VsYWpodHRVWjBIWmt2S0tvNlBkaFNk?=

=?utf-8?B?VU1PSERYclNNV0d1eU1CTWpGRlRYVTVQRjNHMVFzbGNaQUd4VnRnSmQybkFi?=

=?utf-8?B?TGF3eGorekJ6MVYrWlBEZWFxaDFMQjFJb1EwSDdrNDFFMmN1anVzRmhqejY5?=

=?utf-8?B?Wi9FUGNISFpxMFBpb1BkNFJnVWswSkxZSi9HNTMyWVlKQjZhMm4rVUkzUWxP?=

=?utf-8?B?akFWRE03VEtTR2xqRlVPWGdwdjB3UHhZRWNsaWxSc3g0OENqb1NVWWtWSjBB?=

=?utf-8?B?MVJmU0RsUEY0bitGN3JCWW5uaG5QdjgxanBmNHQ3RUE2UnZQTnkrWmRWTEsw?=

=?utf-8?B?WWlpNElReTByY3V3ZkVOSlhxMC9GK2VEa2cyaHJnUEtLOGxDbytLK0F6azJt?=

=?utf-8?B?Sk5IV3VHeWNGSDhTcXp0a200TlNqNFphTyszOFk4N1ZvMWkyZ3JtM1VydXhk?=

=?utf-8?B?V2NLNzRyemppaFF3ZFpHTWhWRGFLSXZrYVZUOXJ5aE9qQTVjZ05YVEhmSXFv?=

=?utf-8?B?ZDBUSmU2V0x1K3JyVXlFOXFOeHowZ1kzR2VRVVYzT1VnQUdLdmpjZ2NGU0RC?=

=?utf-8?B?d0V2TUVOdTVHZUdGTVhxSjFMOWlHSzlpcElHN3VtQjFYWGlHamNIVVdQSlFV?=

=?utf-8?B?OVF0NDR1N2dvOE56L1g3ZGFDd1R1MU9oZmFpSXMyRGJtcW9kOXk5d2xpZlFW?=

=?utf-8?B?eDNwcldTMG1UUFMyWHlsVEdLZTJwbzAyR0V1eTA1bEUxOXlHRlpnMmM1OGFR?=

=?utf-8?B?YSszNmRmM29LRkRONkxYUUg3aHY2SzR2RzMweFBnaHRVNjA3SU5DYXp1Y0xV?=

=?utf-8?B?NGFqK1V6d2lxbmNldTRmM0cvK2UzdEZJY2RCSk5zZllMY05WM3c4bDN6aFgx?=

=?utf-8?B?SWY1QysraEdNdGZzSFoyQlF5bGhwTkZ2em0xSFA2QStNZDVudVBjV3RHWmpm?=

=?utf-8?B?cHJOYnF3aCtEemZhOHdidEhsQVNJSHRUVEJqcFpQMmZqbGdZM013Ni8vblpK?=

=?utf-8?B?MlpPUGhUVjN4YzErNzFqYlkzS29iOUVxcnFkT2ZjeUpQaFNtZnlyM2xpdURq?=

=?utf-8?B?YXUrcWZDclpSSXBpWG5zamxxTGh1aHAwcGh5VjJuaUsyZmZENWVhMUlzbHky?=

=?utf-8?B?NkhhOHo0b01SQXhXdGFHMk0yb2ZRWnhyWG1USXJLVU5zcS9LMEJEWERkRWtw?=

=?utf-8?B?SndiVmR0SVlMdHZoT21vQVhTOThjOXZxbDNGN3AwWXBmaVg0a3c5Skd0aHFK?=

=?utf-8?B?cXNKL0lZbmNpeWtQSzRyOFk3T2tqbUJiL0RsVExLVmttMUxGWVRLK0k0MEVG?=

=?utf-8?B?SFRpMk1YcnBUSnVHOGVPNGNtMEYxQndSSktRbGZDTHphakJJOHY5aFJsbUE3?=

=?utf-8?B?aUNOalpnWTFsWDZGTHRPK3NiOXk1cG5Ed0MvZDEwUEpnS3ZzZm03MkVFWW5Q?=

=?utf-8?B?d0c3dnM5SDBHUWhiVHgwTFF1cFZMOWNNTVRkbHp6cjZxZVZ4bUhadmROYk5T?=

=?utf-8?B?TUphekVaam9na0M4SnViYUVERWVpdDJETjh5bXlMM3hKc21uR0NhSVhHYUR2?=

=?utf-8?B?aHZlRzE5S0V6QUFuNlFKdWpKZ1owR2lFSFFCTDVnN2FtK2M4dG1ldVBFRy9O?=

=?utf-8?B?UWRRUHBRZ29KU2NqVmg5NVpIN3lwU05uMkpIUVBNL2pzWngva0FUaGpWUDVq?=

=?utf-8?B?SHd3UzlTcy9QNmVCODVpT0hJUnJTcWE1MTBKVUhEclI2VDhCM256U2FTSnh4?=

=?utf-8?B?ZW1vMU9sNUJRQW9weFNWQkVkcEQ1TTk1VmpjaU55V3hONmU1Yk95amxaZThz?=

=?utf-8?B?ZlNNY2tFaWZXMldpUmpjMFVVTEhUTlJ5VWRYTFdLQ2pkeWFXcFZYeXhtK2No?=

=?utf-8?B?VWJ0ZWMyNkFNVWFid3dPd0lpSm00TmdERTVTRWVjeFF6eGo0WHB2eExMdVR4?=

=?utf-8?B?bFhSRnlvc2M3QStpOWFqV0RBRklwTXh0YUtwQTNibkh0dStQYVcyL2NyajZ4?=

=?utf-8?B?UUIvb3pueUN5cHZPL2tFMHRheDk5ckFVS2FBUmZYeEdzOFNFbDh4RzRHZkhR?=

=?utf-8?B?dkNHbFJUYTlaNm5VTnRkZHFDTzZaREJQUVpVODRZVDJaaWsza3M4QlA3bENk?=

=?utf-8?B?cGRBaG1TSnowV2pXOFZ2OENheDV4TmpWazZSSkp4M3BkYVd1MnlXNFg4NzVV?=

=?utf-8?B?eGdBSVZ5WEZYeUJOWDBYVjJiaG1ZRStnWkt3SGJ4V1FTWENhbHVXb0NJVmtj?=

=?utf-8?B?VTljbHlyQitDQjdSWVoxdjBocDVFOEFsNlU5YmFuTXZjaC9ONWVYUWNWWmxw?=

=?utf-8?B?NzRVTGZMc1loWjRqTXhQL0xBMm5ZbmZib0h0WlRWcDFhUnhDKzZucnk1clU3?=

=?utf-8?B?cVlCbDJFTDI3VElySWc5d2l4OGQ0Mk9XWmYzaldzZzRya3JnbFZkWE0xYTVF?=

=?utf-8?B?K29BT1Mvb29yVkU3ZTdEN0RlWjEyUEp3VWpYak43OTZSejI4bE5vNnlYV2Z0?=

=?utf-8?B?bFQ3ZDBiYnRFV3BXcnZoU215RUtzQlpPVEV0NGhBU0ZaTmhRK21ieGpjYW9s?=

=?utf-8?B?WmloOFBGMUZpWTdNcWlFR09YVit3cXAvVHMrb2hYclkyKzBuRURwd3pla1BK?=

=?utf-8?B?ZWw2aHo3N3RmSXE4ZkJqVTVWK3hCN1JiRSswZ1dURVhXRUhnVkdSeGtQcE1i?=

=?utf-8?B?YUtGTWQ0RXkyZllVVS9VZkJHaUxldC85dHJuLzgxYitCVW9HbkFOVXF6ajVG?=

=?utf-8?B?RDROMlN3cklmRWVFSkt5aDhWNzd1aVdJSHBER3A3dzM2VkxnSXZJUXdITHBt?=

=?utf-8?B?MllzZjRQdjh1UkVzYmdUbXFRZHBrZkRVMkVnUXN4SnNjWm03eXRCbTZOVy84?=

=?utf-8?B?V25zTXhnWUZseDRuTmdZTEZCMDZvWDRYSGk0S3IzZ0hzVHIyVXI0OUlmMkZy?=

=?utf-8?B?a1crTDRCYWtzTnR5TlBmbmRyL3psbHJQRGx5YXdwdndDaDRiZjRnZ0t0b25a?=

=?utf-8?B?clBwWlpnSEpYZnRzRnVJazBYTkQxemZQZ1loMjNvRUcyakJBVGdlWGtvcnZm?=

=?utf-8?B?SmY5NUFNTll6UnpnRVFWd3ZxamlZTVVjZlpiSnF6VXgzaE9mMDFmWFNraHJY?=

=?utf-8?B?bHVrZkJuWHBlVm1IVjNDTWNoUzNJTUgzd2oyVkU0b0JKRitsT245OVdlUzBM?=

=?utf-8?B?dkNiZnNwRnA2bk4zcUpkYmZFMGJlYUY0dCtWQ2xya1RFMGJqVkhwU3IvUEdR?=

=?utf-8?B?ZjB3OUx1ZUZvM1I3cVh3MDVoME5mZTdpUVM1V2xWVVQ2K0Rsd2RvTzQ5UmxX?=

=?utf-8?B?RjV0VHh5aTZjNnNtNWRMTzRLWEM2Z3RSRkJhZ1Z6RXdCYXJCYTNaUFlSSlFw?=

=?utf-8?B?Sm45N2kvVDVsdkYyYmhmUEN5d3pFWXVwYkt3c3NoOGVMQVp0bUs5VlJLSWdF?=

=?utf-8?B?S24rODE3UHlNSXgrK3Y3TnlZUUNtenc2aWIvZzZlaHU2WWJoSllxZFg4Ym9z?=

=?utf-8?B?dk13VzBoakxlc2xsL2Y3UmZEVDU4YmgzenhYRFpIWThsWjk3cWdSKzNTUkhR?=

=?utf-8?B?OHlNeGlUZmVVYWFIZUN6TmZuSFFjK2RXbUh3YXROK0VpZ3dvZWh1NG02SU05?=

=?utf-8?B?ai9SQmcrbUVya21QbDdVNFFicStWUE11UXZGNGQ4S1pQWDM2VzVidTFqOUk1?=

=?utf-8?B?VENXdzdQNWN6WWdwNXNzV3p6am1KV2xpcnBvcGd0UzJwc3RCWkJMSzNvV2Qy?=

=?utf-8?B?d2hCUFhNVFZGL05iRXhkbUV6YjVWdWNrQm1OZHV5SXprR1FTNzYxbkVRQVdi?=

=?utf-8?B?NGUzSEdzb1FMZGkvV1RTSVA1MjJ1eEFBejY5WmlPRlpMeTMxZlk5K1hxT0FC?=

=?utf-8?Q?LfMR0loDAg9/yb+O/jbGM+Ook/lBKTVu3+j8oOXvCjf8m?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 May 2026 16:05:58.1980

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 3f8accb7-7425-4a05-ad0c-08deaf773077

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF0001AB54.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN6PR18MB5444

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Subscription Renewal Confirmation – Geek Squad Protection

pondelok 11. máj 2026 Pripojiť sa cez Google Meet https://meet.google.com/rif-vdsd-fgi?hs=224

Dear Customer,

Geek squad phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 12:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMVae-00000000HDs-19Ie

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 12:42:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 12:42:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastus2azlp17011012.outbound.protection.outlook.com ([40.93.12.12]:14068 helo=BN8PR05CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMTA8-000000006B1-2dLe

for doctor@doctor.nl2k.ab.ca;

Mon, 11 May 2026 10:07:32 -0600

Received: from MN0PR03CA0002.namprd03.prod.outlook.com (2603:10b6:208:52f::31)

by MN6PR18MB5444.namprd18.prod.outlook.com (2603:10b6:208:47b::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.23; Mon, 11 May

2026 16:05:58 +0000

Received: from BL6PEPF0001AB54.namprd02.prod.outlook.com

(2603:10b6:208:52f:cafe::99) by MN0PR03CA0002.outlook.office365.com

(2603:10b6:208:52f::31) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9891.23 via Frontend Transport; Mon,

11 May 2026 16:05:58 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.73)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.73 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.73; helo=mail-wm1-f73.google.com; pr=C

Received: from mail-wm1-f73.google.com (209.85.128.73) by

BL6PEPF0001AB54.mail.protection.outlook.com (10.167.241.6) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.25.13

via Frontend Transport; Mon, 11 May 2026 16:05:58 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:FBB4CA4D47C93B9940D02205B933F92718B1A45AA160ECCFC838564C847EA15A;UpperCasedChecksum:CFCF916B377C88208D20496F88AE3078B6FDDF4CCEE9242F9E7D660DC80F049A;SizeAsReceived:3418;Count:15

Received: by mail-wm1-f73.google.com with SMTP id 5b1f17b1804b1-48d035e8593so31985825e9.0

for ; Mon, 11 May 2026 09:05:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1778515557; x=1779120357; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hB8DMu1EBHSxViXdZ9sEisTr6GqeccGRk+mIXlkgBiI=;

b=jcWRlPWBAVwGvpsAMexnarF2mn4vatcjQ1z1ZtZUYSpesrt0xiNBZoUpBxtZWwsthD

/FJMl4HgUs5EipD5DwYorGANIbOrsZ7HR6eJL5R63WOP0//FA/EbdZmbOa8KA87B3UxE

82Do5soLia3DEkGfwiyjN/OJ2agKVwkaZ8p73ZNPC6aUke0Y9adVyQyI/CYODkcS2tfo

HDryoZ/+iGTjE4ViQP3Uc+K6sh3L6sACoiTBPZakZMHsl8iZ5RTkOtq8cP0Qz3nBxNy7

y1m5Bkd53XjnVhW/GjNDimm+l66lab20FzcbS4hRIc0AandEWKiKM2bOs4/X9aRlHgwk

iLEw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778515557; x=1779120357; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=hB8DMu1EBHSxViXdZ9sEisTr6GqeccGRk+mIXlkgBiI=;

b=Qrt64AAGJnqvB4tK9kCa4Ibsmqd2MmdGxQ24HeKsoULsMzlBYf4Pi60VW/izvaol8e

1agDpQC3fiuoX6vX8mEvim34QiW98AgsfHB+L0dWY6uLEcvssMgnXyMGB50lDrIEyg49

55iwEJmdE9NZ2HwFVCbTMfbPX5xPEaZqLA7EMW3gkfApxw38XBpO+/Jpr2Oq3XRGufmS

5OANrihj0hNs6Et11sdT7EnOSVXFmE23gS+bO8Px6nJRSLAbfpy23J0D4EGsw9cJix6U

xGT7l6k9s1QPeqQHTCEtGHBgdI2+2oRzWZHo8a56+ux4fmOfpUrikDIL8eI1K/3woZkY

6BdQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778515557; x=1779120357;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=hB8DMu1EBHSxViXdZ9sEisTr6GqeccGRk+mIXlkgBiI=;

b=KEeAjmYRmE0Lr1go/0x3mH2qzoDGgFMnWCyQcsI2nrnqd2g7O4TDU8vJHkWQqd1nEi

LLPBxm/4M5oyKvsp1kyEiNNphNus5+2fjyH2vrAB8eOkRawvKrd+AQJqHqFpgObZbPMu

VxoVKQs2e/SDXmfyNNXNwgUYZXSgWwNCchyjN5DtHipjxn6UfYrSygeTd8xwkS+Iy9iW

diLnAY5fWYZmLfMs34lgl8N+Lt5B5COWx/YCZuALx0yojUiI3S+Htbh/6Sin4OzEfNOw

OB73YzpgY1FIVcCxMWzglCGo7Vgm5p6Q6pBCeN5mGY7xucujbf4v08bfv6oUEHCv0k/G

KI7w==

X-Gm-Message-State: AOJu0YxSiftIo+pSGZAhPX0kATuPF53Eh0bC191tBK8/ga4MW891TjyE

maQuoCH2Vj7zuxnRyte2LcCRcUlNS5pgLOCM9+H9yi4J85ZXZwKAtqrJbsxkMt980wMil8/iJvF

6gt9OZ7DgX68eAmvY+HzC9x+P9VTQWch0Gfk=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:3e0c:b0:489:fec9:a17e with SMTP id

5b1f17b1804b1-48e6768514dmr259024865e9.12.1778515557097; Mon, 11 May 2026

09:05:57 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Mon, 11 May 2026 16:05:57 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Subscription_Renewal_Confirmation_=2D_Geek_?=

=?UTF-8?Q?Squad_Protection_=40_po_11=2E_m=C3=A1j_2026_=28cynthiaperez389903=40grou?=

=?UTF-8?Q?ps=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="00000000000002327306518cec99"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB54:EE_|MN6PR18MB5444:EE_

X-MS-Office365-Filtering-Correlation-Id: 3f8accb7-7425-4a05-ad0c-08deaf773077

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.128.73

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|9400799043|3151999006|6019299003|32020799003|1680799066|9020799019|34130799006|4040799016|970799063|26000799027|5139299004|26130799012|22000799015|16200799027|9000799056|29080799009|6092099016|24102599021|21002599022;

Chinese language spam from Microsoft Outlook Part 2



--339bf32e861243b26b52b7f5000df721

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



lNIr=E8=B4=B5=E5=85=AC=E5=8F=B8=E6=82=A8=E5=A5=BD=EF=BC=81=E6=89=93=E6=89=

=B0=E4=B8=8B=EF=BC=8C=E6=88=91=E4=BB=AC=E5=85=AC=E5=8F=B8=E9=95=BF=E6=9C=9F=

=E9=9C=80=E8=A6=81=E7=BE=8E=E9=87=91=E6=9D=A5=E6=94=AF=E4=BB=98=E9=A6=99=E6=

=B8=AF=E8=88=AA=E7=A9=BA=E5=85=AC=E5=8F=B8=EF=BC=8C=E8=88=B9=E5=9D=9E=EF=BC=

=8C=E5=9B=BD=E9=99=85=E5=BF=AB=E9=80=92=E8=BF=90=E8=BE=93=E8=B4=B9=E7=94=A8=

=EF=BC=8C=E6=89=80=E6=9C=89=E6=96=B0=E8=80=81=E5=AE=A2=E6=88=B7=E6=8C=89=E5=

=BD=93=E5=A4=A9=E4=B8=AD=E8=A1=8C=E7=89=8C=E4=BB=B7=E4=B8=8A=E6=B5=AE6-9=E5=

=88=86=E6=94=B6=EF=BC=81=E9=87=91=E9=A2=9D=E5=A4=A7=E8=BF=98=E5=8F=AF=E5=95=

=86=E9=87=8F=EF=BC=81=E6=88=91=E5=8F=B8=E5=83=8F=E6=82=A8=E4=BF=9D=E8=AF=81=

=E6=89=80=E6=9C=89RMB=E9=83=BD=E6=98=AF=E5=9B=BD=E5=86=85=E5=B7=A5=E5=8E=82=

=E6=88=96=E8=80=85=E5=90=8C=E8=A1=8C=E8=BF=90=E8=BE=93=E8=B4=B9=E7=94=A8=EF=

=BC=8C=E7=99=BE=E5=88=86=E7=99=BE=E5=AE=89=E5=85=A8=EF=BC=81=E5=8F=AF=E9=9D=

=A0=EF=BC=81=E6=9C=89=E9=9C=80=E8=A6=81=E9=BA=BB=E7=83=A6=E6=82=A8=E6=B7=BB=

=E5=8A=A0=EF=BC=9Ache1666990 =E5=BE=AE=E4=BF=A1=E5=A6=82=E6=9C=89=E6=89=93=

=E6=89=B0=EF=BC=8C=E6=95=AC=E8=AF=B7=E8=B0=85=E8=A7=A3=EF=BC=81 Chapter 1.=

Beauty of the Brigades.=E4=BB=98=E5=B0=8F=E7=BE=8Ehj481@888.com

--339bf32e861243b26b52b7f5000df721

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable











lNIr

=E8=B4=B5=E5=85=AC=E5=8F=B8=E6=82=A8=E5=A5=BD=EF=BC=81=E6=89=

=93=E6=89=B0=E4=B8=8B=EF=BC=8C=E6=88=91=E4=BB=AC=E5=85=AC=E5=8F=B8=E9=95=BF=

=E6=9C=9F=E9=9C=80=E8=A6=81=E7=BE=8E
=E9=87=91=E6=9D=A5=E6=94=AF=E4=BB=

=98=E9=A6=99=E6=B8=AF=E8=88=AA=E7=A9=BA=E5=85=AC=E5=8F=B8=EF=BC=8C=E8=88=B9=

=E5=9D=9E=EF=BC=8C=E5=9B=BD=E9=99=85=E5=BF=AB=E9=80=92=E8=BF=90
=E8=BE=

=93=E8=B4=B9=E7=94=A8=EF=BC=8C=E6=89=80=E6=9C=89=E6=96=B0=E8=80=81=E5=AE=A2=

=E6=88=B7=E6=8C=89=E5=BD=93=E5=A4=A9=E4=B8=AD=E8=A1=8C=E7=89=8C=E4=BB=B7=E4=

=B8=8A=E6=B5=AE
6-9=E5=88=86=E6=94=B6=EF=BC=81=E9=87=91=E9=A2=9D=E5=A4=

=A7=E8=BF=98=E5=8F=AF=E5=95=86=E9=87=8F=EF=BC=81=E6=88=91=E5=8F=B8=E5=83=8F=

=E6=82=A8=E4=BF=9D=E8=AF=81
=E6=89=80=E6=9C=89RMB=E9=83=BD=E6=98=AF=E5=

=9B=BD=E5=86=85=E5=B7=A5=E5=8E=82=E6=88=96=E8=80=85=E5=90=8C=E8=A1=8C=E8=BF=

=90=E8=BE=93=E8=B4=B9=E7=94=A8=EF=BC=8C
=E7=99=BE=E5=88=86=E7=99=BE=E5=

=AE=89=E5=85=A8=EF=BC=81=E5=8F=AF=E9=9D=A0=EF=BC=81



=E6=9C=89=E9=9C=80=E8=A6=81=E9=BA=BB=E7=83=A6=E6=82=A8=E6=B7=BB=E5=8A=A0=

=EF=BC=9Ache1666990 =E5=BE=AE=E4=BF=A1



=E5=A6=82=E6=9C=89=E6=89=93=E6=89=B0=EF=BC=8C=E6=95=AC=E8=AF=B7=E8=B0=85=

=E8=A7=A3=EF=BC=81


 




osoft YaHei"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: =

none; FONT-WEIGHT: 400; COLOR: rgb(86,86,86); PADDING-BOTTOM: 0px; FONT-STY=

LE: normal; TEXT-ALIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS:=

2; WIDOWS: 2; MARGIN: 1em 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px;=

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px">
=


 













Chapter 1. Beauty of the Brigade=

s.
=E4=BB=98=E5=B0=8F=E7=BE=8E
hj481@888.com





--339bf32e861243b26b52b7f5000df721--

Chinese language spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 11:25:00 -0600

Received: from mail-northcentralusazolkn19010006.outbound.protection.outlook.com ([52.103.20.6]:25039 helo=CH1PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMUMZ-00000000BiK-0dgz

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 11:24:25 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AfUxKbbPuDDuh+429UE2Lsot6d7QZJslRuVramWBwmAlnQ7sMUMye3Ed6845EXDVKRw85paibdsEdXeFn/s5KDUk1Ns3PswIu3TEln6BbtjuPw+wocY5SXmb+UxoGH/pR1Qe0RAGXxL329VjeYZkDMlpJ0qKins7opdmLWeCawqvIu7KPR+EUKS6MjBQTy5GxNjv04nfLB5zAgG1N29W1nFvtWtPlLVXYD8NXVSvXqzWWavP0qKL7aNsiSeosNWoyO0lR8yJLlM1c011D4DGGRa3fcgPw0ZZtFA3em7+mjSuDiOJ8k2DaBkOVEKr9SMk1WbO0s6FcC1hLPzN80vf1A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=49WIIzvJwTDD/strXjdpx9XICP67PyebnpXGZVw6FzY=;

b=NwZcB8iZpjCJIciULaU7g4rentoufRHK3FlAG8ncPXY6Fi6kT7xkkTIW4KaDemv21rs+g595Tdvd/re0WVLEYWEl4nHCJFODeoD05Xbm+3qmC3hnmuutvl/rC4pI/YKvQIssCVcRWfeQoosXzd3GJq26KCNK+guhARoq/vDv2eDFv9VOUIAoQmxCybEqwChZBgxsJbZ7wpUJifR98z2IOBGOKQnVPfRgXYALczgpiBROedhnqsIRxDmENlzsvAK2jrMIB6awxTCTG4vJFi1bo3GLfkaZEVHRGu7naD9eLzZ/4pKHgJw0falQDf5YVmSM+ySIXkyeT6BtY0Q95WkQbw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=49WIIzvJwTDD/strXjdpx9XICP67PyebnpXGZVw6FzY=;

b=LMywMtO124wRdE8s2M7L2xHH5/0ZghXZBMAb/aJRJMYNRNxc+Vm4XvUlKIxBcESvCXtXddRk9N9nIl8e6maY3RywyV3pZyGMCByDvyXT3En0ZYcaRtBEyyTr59/9Dv6Kri2vuJaDgdrHflEvDhgHjJLUqJbheA1Z3HH0hHI/DGxaYLq/zWMYxeMybAyp5HhDSCZ3IVX7c5QHLbB5ZoQvlx02lgzO2Lg8trwNy0R3ulgI7+X8F8uJWUwxVMdRCNDwVLjMekvc+YvZsyTd3TbMv0A0dBAE/oq18UiMAvKRzVwWPhU7AYDpZeJdC581hWBrOpf0sRIXXrGEHx60PmtH9Q==

Received: from PH0PR05MB9869.namprd05.prod.outlook.com (2603:10b6:510:297::20)

by DS7PR05MB11207.namprd05.prod.outlook.com (2603:10b6:8:268::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.15; Mon, 11 May

2026 17:23:20 +0000

Received: from PH0PR05MB9869.namprd05.prod.outlook.com

([fe80::c30c:df79:3559:1a73]) by PH0PR05MB9869.namprd05.prod.outlook.com

([fe80::c30c:df79:3559:1a73%2]) with mapi id 15.21.0025.012; Mon, 11 May 2026

17:23:20 +0000

Message-ID:



From: =?utf-8?B?VmtMTOe+jumHkeaNolJNQg==?=

To: hj481

Subject: =?utf-8?B?M0IyVmkt576O6YeR5p2l5o2iUk1CLS1WZTI=?=

Date: Tue, 12 May 2026 01:23:12 +0800

X-Mailer: Xneuxveui 847

Content-Type: multipart/alternative;

boundary="339bf32e861243b26b52b7f5000df721"

X-ClientProxiedBy: TP0P295CA0021.TWNP295.PROD.OUTLOOK.COM

(2603:1096:910:5::12) To PH0PR05MB9869.namprd05.prod.outlook.com

(2603:10b6:510:297::20)

X-Microsoft-Original-Message-ID:

<8f32103361885f03e4356f4d1dc32d4c@outlook.com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PH0PR05MB9869:EE_|DS7PR05MB11207:EE_

X-MS-Office365-Filtering-Correlation-Id: fb5f52b9-33e1-40f4-7600-08deaf81feca

X-Microsoft-Antispam:

BCL:0;ARA:14566002|12121999013|15080799012|19110799012|8060799015|23021999003|7042599007|5072599009|5062599005|39105399006|45011099003|20031999006|3412199025|440099028|18061999006|3430499032|40105399003;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?NHRiSlhNUDh0OHQwWXNIeVQydmp6MHdEVmtENE0rRk1TYkhmQys0Y25WeVpW?=

=?utf-8?B?NjZQZEVwUjRFRGJYSFdwYXNqRGdzSlZDRGJrYmp6bU0wZm10RGZDaC9RUnBQ?=

=?utf-8?B?amhvUU5CNzZjV1Vja3J6T2dad2dvY1hqLzZjdkFtbXN0RVpQb1lzT2dmRTl5?=

=?utf-8?B?Vk9LSytsYXRpdW13ek4ycFpWZ05LUVpFYkVsU0I1azhETktKQ1B2TjMrbXUw?=

=?utf-8?B?YmxEUUZmYTdjNnNVbXhFME9EUlpvR3Q1OVRzVDUxYXBEdS9XUkFJV1hTVWlm?=

=?utf-8?B?R2RybERrTXVodFkzYTdTdkxndUFGZFM2KzZrOExtQzhwb3Y1WE4veElzd212?=

=?utf-8?B?M1dXQlhLM3pEdm9rZ0pkdUZERUxTYmtpNnpQVzN5YmVEcjY3cWRZVWxPd2Zp?=

=?utf-8?B?OUdBem1rUUlUT3JuOTBwenNoNnRaU1U0cjU1Z3BJNGs2Rmo3aFFySGo0QnFt?=

=?utf-8?B?bkZsS0Rpd2p3b0RVRWNlQzVtSEpuaDEwUUIxWFYyWnNsOFJWSXBKMGZ1OEhI?=

=?utf-8?B?TEZHWHhBaWxDTlRNWmdSU0tpY2l0MDNzeGRZakRvRUFZOWZVMVJVRmNuR0dF?=

=?utf-8?B?dmUvZk01NUdWTlNNTFFHV1lNTmFOQTdNZmJTZ21YdHZBZmdPb3ZtcGZXREMv?=

=?utf-8?B?bEowUkNZRTVudjd4TmhRKzVyQm55bVJVNllGbVZIZUIzczZuRmN2RnRFOXdY?=

=?utf-8?B?QVhpeloyWU5sVUxiZzdEYVpDNzNjdXpBT0dsUzhzaDJKTUtjMlRoOE15R3FP?=

=?utf-8?B?WWkwNFVZNkxjT05CNWZUQmZmeHJJaCtpekdnQk90ZUZQZkQ2TDlhVkpJeVc3?=

=?utf-8?B?VG9wOENLa0VDOFA0K1dDK2YwdDlTTHdGZG1QK0xSVHdUSENUQ0pwVXNUOGxL?=

=?utf-8?B?UDF1UUJnNVQ1WEJjRHV0enJVUWxZSmliR0RqbkxtcE1NeDhvZ09wMTlmQ0g0?=

=?utf-8?B?SW9DZGN2V0VBMDR4a0x6c3NSUDFRRVdQT2s3bzRZd0YzRWEwWHZsandFakNv?=

=?utf-8?B?YW50YjJFT1lhSEU2Wm5Sazh5d281RlozenVHb0dPeFE0YU5uQ21iajlxS3Yx?=

=?utf-8?B?eUdZbEZzTklBZkNVOFVsYVpRdlUrQWtiaUdDcU9PT3g0YUN0M210cDJvU01h?=

=?utf-8?B?akhXRTJDU0VQUFY1R3Q0MXU5OGZJZ0lsT0FYc1JKb2c3akswRnpKYzNaVEF4?=

=?utf-8?B?c2lSU1pMckhYU1R2Z2FCSW9UWkxYb3JVVUhTeWRlbGJVTElreUFHczlJbEpK?=

=?utf-8?B?MFFhV040UGMvZ3ZJbGpiZk9CbjEwa01tb3RsZ2wyL0d2TURYNVk0dW9MRko1?=

=?utf-8?B?Z09IcTVqK2dZVGI5THdxa2s3djNSMDNhSkZPWHFkQm5CMVllU2w2UjdScm1v?=

=?utf-8?B?aGRmSk0remtocUdRRW1VSzVrbE9GMkZTQ2IwSW85Zkp3MzhlOFkrdFFqUDZY?=

=?utf-8?B?N0V3NS95bWd5K2s1NHJLSEMwbmV4NnVoVEdsdUtRPT0=?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RlRHNm1NRFNmTUNmYUZrU1VLaCs2TTRjbXlocGF5eUw0RHJwcURxdkZwT0oz?=

=?utf-8?B?enVRckFnT1NQTzVsRm95emJ5NGJWWTRBM1IrUDBSV1pxSmtNakRlS1d4OVh0?=

=?utf-8?B?VkVqRXpSQjBNK0tvSlRYZ21pcnJmNW9KYllhVVNvNXQ4S3cyMEdjRExhQVRE?=

=?utf-8?B?UXdOVHB3NDJtcUNxejdvYkxqMXd5bEtpWHdPQnZNSHJBN1pXbk9pTTBmNDR2?=

=?utf-8?B?SVNOSklCbjcvRGV4R290RDFoTDlWS2xOVEEwa1Fna2VLbytVYzFlSkE4Tzcx?=

=?utf-8?B?YVFIUXd2Wkx1MEZNemxqUDhmajlRVmJmZ0VIZ1J3QVVIbk04UlNuS1U5SnQ5?=

=?utf-8?B?SnYzbXdoNHRsY1BvWk1mN0V4eXBydGlMSGk5Tk9yQ1lITUc1QmtRbm9NOGlE?=

=?utf-8?B?TDJHZkR5SUlVMHlSRCs5b1pTOXhWSkpPdnczV2gzVHVDbTFpZkt0UTh6SUIy?=

=?utf-8?B?NHdRMWpLbWM5cVpTc0lER01jcnBsN2VhOHU1a3lKNnp5ZEFRdEpSYnRLMTdC?=

=?utf-8?B?YU8xcWt0SStiZHBiSUloSWovTmZWaE5XUE04UFNaVGVJTDZ5Q2RvSFZBRnVa?=

=?utf-8?B?R1F3d0QraUlFZnNyQnljajRzVEFUbWl2Y1RDNFBHeFpieW9JdTNGaHdiZm9V?=

=?utf-8?B?SU9XL0hXblNtK1JRbnJITUR4bE5BdnhNUGlyVHhzWHo3bUo0TlBCSWxmWTYz?=

=?utf-8?B?Z21PMGhZV3lPcXo2dU5weFplaXZIdVVRK2c5YUVhU0tTNFU4eldaV1U0REEx?=

=?utf-8?B?clBvTzYzOTBFTWlzMGNHcGx5UTRYMU8wSnYxSkplOFAyTnd2OFZaeDltK0RD?=

=?utf-8?B?MktjdVFDNTFpRUl2Z0x4V1dWY09oMVIvbmo1RFFyWnhyeWNSVDJzOHlOZk15?=

=?utf-8?B?eVpJNDUxd0dGV055VGdHc3hyVndBbGlUL1VXYnBwK3NMNHJIKzVBMFRPcUl2?=

=?utf-8?B?RHhEamRuemR1ZVk2RFl4K21UTC84NTFxWTVHeEUyL016eWQxV1VHNFMvNDZB?=

=?utf-8?B?bEVzd083Mmx0a2Z1V0FWb0JMTGQ3RkJWTm55SkF3N1dMQTgyY1Q3S216WUtT?=

=?utf-8?B?SGVhY3UzMVFaWUxxMmoraXM1S1ozenN6cEZnUnB5RXRyM1RRcjRDaEx6Ukd4?=

=?utf-8?B?S3VkcG92aXFNR1o3ZHdSOStnQlRNLzF3RzdMUEcxRGQrMTdUTk43RTFFQVNM?=

=?utf-8?B?eHV0ald4cEk2eXk4WmdzWEp1UHdQNGFxTExHZ3U5Y3g3L0ZoQ3RiOUNBV2pT?=

=?utf-8?B?azJicUpCdEswMzdrcUY4bjVkV00yZUhRRTdZVVB3dDNPSEdKU2lQNlllOWpQ?=

=?utf-8?B?dXQwUDd6YlNOZjF0VkJPOE1HaTBnTDVFVS92VzVLT0dvMDNNemxVTkVQalZn?=

=?utf-8?B?aUNDOGdGRk04MzRVM2ZQcGZYcEV2ZGhwN0hOblo4dExXUTQwcHptbnY1NU56?=

=?utf-8?B?MWt1SEVnSk8rVUZNMFNnY1NLV0JXZVh1c1NrYmJxUGZzckJpZkxvQ1lGYzg1?=

=?utf-8?B?dlVvcVBCc0J6T25kOFVxZ2p5NWU2d2I5TndSZXZEaFdyb2lsclplVllJQWsz?=

=?utf-8?B?alRWbENQeGNDUFVwVkx3Q0R5ajZWRkVqWmtITmdEN3pUZU1zMC9HUFhoNVFl?=

=?utf-8?B?cndScmRBcytlQnZoTUZqNFFGSXF1RHQ3RHR2L05rcXg2S2NHQXhrNVV6MXJR?=

=?utf-8?B?RlliUm4wRnNXSzAvMHRIcjgvYWNsaUtMcUZHZlc1MWp1RnltQ25RT0FNRGVL?=

=?utf-8?B?ZGRQbktMam4zSDE1bEZuOUR6dzRNZXU2elpnSldseWo3NmhSQ0d1TngxWkRk?=

=?utf-8?B?bS9KL1ZqSE1RR1NWcU1obDNGSmNZNGc2c3M4YVdYRS96U21WQ2NudWxMYmNz?=

=?utf-8?B?VDdab3U3R3pmMFkxZzlRL1N2WHZVTzRrbVdJdGJMLzVaS2c9PQ==?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: fb5f52b9-33e1-40f4-7600-08deaf81feca

X-MS-Exchange-CrossTenant-AuthSource: PH0PR05MB9869.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 May 2026 17:23:19.8921

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB11207

salescloseraisystem spam Google Gmail part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 09:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMSCs-000000001hS-073u

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 09:06:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 09:06:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f174.google.com ([209.85.222.174]:51643)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMQae-00000000JfH-1FOL

for root@nk.ca;

Mon, 11 May 2026 07:22:41 -0600

Received: by mail-qk1-f174.google.com with SMTP id af79cd13be357-8d65f4073bfso597039685a.3

for ; Mon, 11 May 2026 06:21:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=salescloseraisystem.com; s=google; t=1778505697; x=1779110497; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=gJrgY2WhBrj1YMy8yVZ/PraAhCVnV2PqGmf8UZVDSZo=;

b=KOHsWvG2kjVU680bDwQ1c7NYgEW6xjvdBy42RG9ZfR3sT7pIKBVj8EHc8MITy9od+w

E9Qw3gUgtSa46g7TCYzohDqi8KUqCf3Q/KhMZsk9bBVcp6CWxHXaS9hylJo4u6qOSetX

ZOzh2UNgIDsezyj4M+Oix7BfGnOtw7xYKCoU0j3vPVRwwhFR3yoo9t5j733iE77FeMbe

5oVi0h8Go6JUR3hZ7P+pqdVW9g5xjZYTgQXlWbaOvBljwYyi2qh7gYNDV458z35fp/uN

z7fgOy5bBqIE+gZfCd4Tw4ND31NJ9oy+iH91LLTLAoi4XNxgUjWDSSMGwXaLHBOoroqm

sOog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778505697; x=1779110497;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=gJrgY2WhBrj1YMy8yVZ/PraAhCVnV2PqGmf8UZVDSZo=;

b=oIjuG4IM7MyZ2esluTCZCFi+0jihdH86YZgJT3eFqNC7lIY70kLafdjQ7K3lrGFgph

24aGulf4FUD+7EXoctW9g/NRDh3ZU0sDowaVlh104G9AX2Cn/bkLFEPoV46s9EGCckEG

D7+3MdvZRx/06QaQUKziUy5DNZqf0m95bujwZfbqs9QRMylTl1TT80bQ1uSIdUzNhAHk

R1do5xH1WzuYtJJif5VodreeRJPMtGp12mu+ukisbMcW61sLnryz4fJRf3QIWLIik+Tt

Tb10rD6H0ISPGWihGRtayvZJm4FRE8Xj7BZZZzSZA9zYNeaSg05NnwAH2pc1Uogk2keQ

02Sg==

X-Gm-Message-State: AOJu0YwZ+Z0XUe1qQkPxeV1bPRl/9Q1W3KCmjCJtDS9nZDfWi8ZZtTzK

GXxX3YSrO0PezMu9hzkR2cqnUxsXXxdIWn/XoO6Snv4WMDPixbFsk5rWIjpu6XeLS0JPo8NEC6P

zy9U+

X-Gm-Gg: Acq92OHKTw+lvy6sfkY/ktTqsD+8WdNWQGfMcE+/jNejZBFxwRDmEs4ZjQG73gRHQwZ

FteMUZUTHI99lrdj/stG6uMdlSsUs24X4ItIW4DvRYkCazybp+gevx0bbMvDZDLcK4WjD7pmOtv

LsjUyvBWe2fUkqKjW1QqRXTf3kDFA2ZCMTgw3HzOoQMXdN5XMxJpXpEoF4+btuTYZ7VU8AGmk5V

dXjPyDqWfge8+rT7tPriHdVrpGiARO/Slb+SELk+zkYgZ0pba0Jt1NtOB3eJB7BdAPsVB/cvuqO

mveJuZ5gqJGG2sz8fykrBhE2QfXtInLcGVsMVpDcFO7sZh0opntm3DEO7+tIVU9x6K1AszBiiOn

tbLa8qu+rj8IV/S7U6Han4h+fbLKiFiURVxqIJM3/RwwgwfQ6A0xW3HQuexjAe6+yua/wKrlRVK

25zWdLiGePQRNfbQiHFUObfdYbUZmVkUmRge3yCc1qsIqVPnsCFfu5ByIp2se1CmneKGNJv6FLb

LVZ4P3VgnHnIvQyD1+cTS6So0qXiSRai5ikek8fuiu5T9G5Et+EYNo8Kj6qWkGrXnhMaJ3mjMs=

X-Received: by 2002:a05:620a:414e:b0:8cd:d872:c2c9 with SMTP id af79cd13be357-904d6cd5d09mr3646279585a.50.1778505696546;

Mon, 11 May 2026 06:21:36 -0700 (PDT)

Received: from 019e1732-9c01-7813-b87a-ca859a325766.local (ec2-52-90-157-137.compute-1.amazonaws.com. [52.90.157.137])

by smtp.gmail.com with ESMTPSA id af79cd13be357-907b87c037esm1046691685a.30.2026.05.11.06.21.35

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 11 May 2026 06:21:36 -0700 (PDT)

Message-ID: <019e1732-9c01-7813-b87a-ca859a325766@salescloseraisystem.com>

In-Reply-To: <019e0936-f4e0-7934-bc73-3fe69189658b@salescloseraisystem.com>

References: <019e0936-f4e0-7934-bc73-3fe69189658b@salescloseraisystem.com>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e1732-9c01-7813-b87a-ca859a325766

From: Callum Hawthorne

To: root@nk.ca

Subject: Re: NK sales

Content-Transfer-Encoding: quoted-printable

Date: Mon, 11 May 2026 13:21:35 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Not sure if this is still on your radar. Even a 10 minute

chat could show quick wins for your team.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[52.90.157.137 listed in dnsbl.ahbl.org]

[52.90.157.137 listed in dnsbl.ahbl.org]

[52.90.157.137 listed in dnsbl.ahbl.org]

[52.90.157.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[52.90.157.137 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.174 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: salescloseraisystem.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: salescloseraisystem.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.174 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.174 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Re: NK sales

salescloseraisystem spam from Google Gmail Part 2



Hi,



Not sure if this is still on your radar.



Even a 10 minute chat could =

show quick wins for your team.



Would next Tuesday work to connect?=C2=A0



On Fri, May 8, 2026 8:10 PM, Callum Hawthorne
haw@salescloseraisystem.com>

[callum.haw@salescloseraisystem.com]> wrote:



> Hi,

>=20

> Wanted to follow up one last time.

>=20

> We've helped similar providers in Edmonton automate client engagement =

easily.

>=20

> Would you like me to share a short example?

> On Thu, May 7, 2026 5:36 PM, Callum Hawthorne
haw@salescloseraisystem.com>

> [callum.haw@salescloseraisystem.com]> wrote:

>=20

> > Hi,

> >=20

> > I know things get busy.

> >=20

> > Still curious if improving your service flow without extra cost sounds =

useful.

> >=20

> > Should we schedule a short call to explore this?

> > On Wed, May 6, 2026 8:46 PM, Callum Hawthorne
haw@salescloseraisystem.com>

> > [callum.haw@salescloseraisystem.com]> =

wrote:

> >=20

> > > Hi,

> > >=20

> > > Just checking if you had a chance to=

think about streamlining client communication.

> > >=20

> > > It could really ease your team's workload.

> > >=20

> > > Would you be open to a quick chat this week?

> > > On Tue, May 5, =

2026 6:45 PM, Callum Hawthorne

> > > [callum.haw@salescloseraisystem.com]> wrote:

> > >=20

> > > > Hi,

> > > >=20

> > > > I noticed your focus on reliable and secure internet =

services in Edmonton.

> > > >=20

> > > > Handling client communication =

smoothly while keeping security tight can be a challenge, especially when =

resources are limited.

> > > >=20

> > > > We work with businesses to =

automate lead engagement and appointment scheduling without adding extra =

budget or staff.

> > > >=20

> > > > One local provider recently improved =

their customer interactions and freed up their team to focus on core tasks =

with this approach.

> > > >=20

> > > > Would you be open to a quick chat =

about how this might help your service flow?

> > > >=20

> > > >=20

> > > > Callum

> > > > 422 Richards St, Suite 170. Vancouver, BC V6B 2Z4

> > > > P.S. Please let me know if you don't want to hear from me again

> > > >


ollapse; padding:15px 0; text-align:center;">


-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" width=3D"120" style=3D"bor=

der:0; height:auto; line-height:100%; outline:none; text-decoration:none; -=

ms-interpolation-mode:bicubic; display:block; max-width:100%;" />



















































































--===============9056892093932579782==--