McAfee Phish from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 19 Dec 2022 14:33:09 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p7Nkq-00053j-0y

for dave@doctor.nl2k.ab.ca;

Mon, 19 Dec 2022 14:33:00 -0700

Resent-From: The Doctor

Resent-Date: Mon, 19 Dec 2022 14:33:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f47.google.com ([209.85.160.47]:35388)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7Jbf-000Ab9-0j

for sales@netknow.ca;

Mon, 19 Dec 2022 10:07:21 -0700

Received: by mail-oa1-f47.google.com with SMTP id 586e51a60fabf-143ffc8c2b2so12282548fac.2

for ; Mon, 19 Dec 2022 09:04:46 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=UkQw+3Fw6RFbu9o/PbHmk7HYRi8SEWvGsqRoX40AkS4=;

b=hL7qBkBIsbbQkAi7BSpHTLXZrBl4LvXZBw6NhtGfk3TFZnSBSCrGzkBSK1+ixPvPtS

wLvH1gg7fstttC0ZNc11A0FW/OvV+0CP8e+EBFxRTyptat7Y4aqSfPwMbwIma1dBP2mM

vJ7eQGkQn0fHtDcl+AigGcMgs63C4MlcCeyHPfeJUQj/Be7+ZeqRrg9GZWVSoUJmixhE

Q+Y1lBZW447zoQkt1wbF4srT7uMLv63+dtT2M6IBassOPrfaDtA0hukpwFMyNKObVfon

SGNfIVOfi8K3BO800vtDuYWgNw3+ENf/7hRB0g5MISNqcIq607aujyqhb915onS+PH7h

TF9Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=UkQw+3Fw6RFbu9o/PbHmk7HYRi8SEWvGsqRoX40AkS4=;

b=0tEFgJe/oiG+vAMGkPzeZ1338ebvKkLejTt3j2XNlXFQZYaZIVi8O57idzJKzMYgwL

AX4CXlh19ncjDpahwvyyblFe2WcxVvukVjXObvDnuM4QhrvebY8EeWuCeCtz891YAkHF

u+KdWu+r5dRdhBafSo5Xz2+1rMtzLpYOhnZNu0QKJDsJ/4fUflKZSSdymldwroKP9suf

ewQyAtMj80LiajYzgPxUlzUJWRJd12+sWT5zZB3x0Qwlvg2P1V9LCy6mTPZCgrYHdF8r

3T73hrTW0cxGX1QmrNV9XsIW3binkkoLrimxGKGaDBPls1W8KLfZJtV4GI09ux1G/vTT

Ho1Q==

X-Gm-Message-State: ANoB5plvVR4edjmN2QKvfAQ0IZ04WoNUxfVps3wQ/L5RcERVKEZFl0B/

gb48pM1rM02n/BG25vJWf25tsPmAFsUDs8hj+Sw=

X-Google-Smtp-Source: AA0mqf4ziioLZZPTWftB/X5V/dlYeOeSyI8UlrgHZRXdtbVfLpAwd94j3SAeYd9YERjEpVFseSu6cw==

X-Received: by 2002:a05:6871:4412:b0:144:957c:bcd9 with SMTP id nd18-20020a056871441200b00144957cbcd9mr23161592oab.4.1671469480059;

Mon, 19 Dec 2022 09:04:40 -0800 (PST)

Received: from 37.120.215.100 ([185.203.218.240])

by smtp.gmail.com with ESMTPSA id k26-20020ac8475a000000b003999d25e772sm6256190qtp.71.2022.12.19.09.04.37

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 19 Dec 2022 09:04:39 -0800 (PST)

Message-ID: <63a099a7.c80a0220.19acb.281f@mx.google.com>

From: "Shelley J. Ford"

Subject: Your amount key (0SE0JHHR)

To: "sales"

Content-Type: multipart/alternative; boundary="o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7"

MIME-Version: 1.0

Date: Mon, 19 Dec 2022 09:04:38 -0800



This is a multi-part message in MIME format



--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



McAfee Total Protection 2022 |=20

5 Device | Antivirus Internet Security Software

$329.99 1 Year Subscription



Receipt From : 19 December, 2022ac



One year of premium antivirus, safe web browsing and password manager =

with VPN.

Protect your computer and avoid fraud McAfee. We have put together a l=

imited offer specially for you.





Hello User sales@netknow.ca

Your protection plan fr=C3=B3m last year has come to an end. However, =

we are extending your plan's validity for another year so that you won=

't run into any issues.



And in the next 24 hours, $329.99 will be taken out of your account as=

payment for this. Your auto debit services have been switched since l=

ast year, so they have been reactivated for you.



The remaining details have been sent to you at this email address, sal=

es@netknow.ca.

You can reach our customer support staff at this toll-free number for =

more information: +1 833 310 1016.





sincerely,



Cunsumer Helpline Dept.

Call us : +1 833 310 1016





--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">


; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=

nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=

rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=

ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;'>
84, 49, 47);">
size: 14px;">McAfee

px;"> Total Protection 2022 | 
5 Device | Antivirus Inter=

net Security Software

; font-size: 14px;">$329.99
g>
 1 Year Subscription
>
Receipt From : 19 December, 2022ac


gn: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0p=

x; letter-spacing: normal; font-family: "Times New Roman"; font-size: =

medium; font-style: normal; font-weight: 400; margin-bottom: 10px !imp=

ortant; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2;=

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=

xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial;'>
nt-size: 14px;">One year of premium antivirus, safe web browsing and p=

assword manager with VPN.
Protect your computer and avoid fraud McA=

fee. We have put together a limited offer specially for you.

>



none; text-indent: 0px; letter-spacing: normal; clear: both; font-fam=

ily: "Times New Roman"; font-size: medium; font-style: normal; font-we=

ight: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows:=

2; break-after: page; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al; user-select: none;'>


0, 0); text-transform: none; text-indent: 0px; letter-spacing: normal;=

font-family: "Times New Roman"; font-size: medium; font-style: normal=

; font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px;=

white-space: normal; orphans: 2; widows: 2; font-variant-ligatures: n=

ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial; text-decoration-style: initial; text-d=

ecoration-color: initial;'>Dear Exist=

ing Customer 

-size: 15px;">sales@netknow.ca
rong>

Your protection plan =

fr=C3=B3m last year has come to an end. However, we are extending your=

plan's validity for another year so that you won't run into any issue=

s.


-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=

y: "Times New Roman"; font-size: medium; font-style: normal; font-weig=

ht: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spac=

e: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font=

-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-c=

olor: initial;'>And in the next 24 ho=

urs, $329.9=

9
 will be taken out of your account as paymen=

t for this. Your auto debit services have been switched since last yea=

r, so they have been reactivated for you.


lign: center; color: rgb(0, 0, 0); text-transform: none; text-indent: =

0px; letter-spacing: normal; font-family: "Times New Roman"; font-size=

: medium; font-style: normal; font-weight: 400; margin-bottom: 10px !i=

mportant; word-spacing: 0px; white-space: normal; orphans: 2; widows: =

2; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=

text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=

ation-style: initial; text-decoration-color: initial;'>
font-size: 15px;">The remaining details have been sent to you at this =

email address, 

nt-size: 15px;">sales@netknow.ca.

;">
You can reach our customer support staff at this toll-free numb=

er for more information: 
t: 700;">+1 833 310 1016.
an>



0, 0); text-transform: none; text-indent: 0px; letter-spacing: normal;=

clear: both; font-family: "Times New Roman"; font-size: medium; font-=

style: normal; font-weight: 400; word-spacing: 0px; white-space: norma=

l; orphans: 2; widows: 2; break-after: page; font-variant-ligatures: n=

ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial; text-decoration-style: initial; text-d=

ecoration-color: initial; user-select: none;'>


center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; l=

etter-spacing: normal; font-family: "Times New Roman"; font-size: medi=

um; font-style: normal; font-weight: 400; margin-bottom: 10px !importa=

nt; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; fon=

t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-=

style: initial; text-decoration-color: initial;'>
ize: 14px;">regards,


Sr=

=2EHead Accounts Handling Team
Call us : 
yle=3D"color: rgb(226, 80, 65);">+=

1 833 310 1016







--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7--



link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 19 Dec 2022 10:26:08 -0700

Received: from mail-pf1-f175.google.com ([209.85.210.175]:44976)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7JsK-000EZt-1V

for dave@doctor.nl2k.ab.ca;

Mon, 19 Dec 2022 10:24:33 -0700

Received: by mail-pf1-f175.google.com with SMTP id d82so6720611pfd.11

for ; Mon, 19 Dec 2022 09:22:00 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VlhfIP/4l9vye+FftpLy6uLMYbYhr/dX4b3+Rr5v0Tw=;

b=O976EQKaqD4JPFUFw9vVP+vaqKSyo7dUulaNR+MTOiSLoxVQP2LLS1tEc0Hs0YnnQ4

Ld/7Rj8V3WCDX6Sj2CoKHvJKnRliB0iMSPuC/Y4WuXKxNB14Kd7LglWbhawCuyVDKdVX

fC5rNfBCQj7k7gIZgzHy/BOiMu61Jhm2pzDXghKtYdMkNFZDvY4s5HoXxFCF7B0Ts1la

tp8VDGmqoPKng6WUS8Jk0+R1W5PMQwAWAx9cNGAw1TLc3hHt0D0Om6Lpio5aRpRta+V8

8Hg48aXAFizR3wVJfT6XlFKEhNnRH4KNallQPk1YweEWwA2UxwhriP8KBjf24tJ6nOMV

8YeQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VlhfIP/4l9vye+FftpLy6uLMYbYhr/dX4b3+Rr5v0Tw=;

b=zMlRTubOQ81oDgRhiBqMcGXbDl5I6Zgw35yZJIMaC+n3mVXWT1xQSawYg/MysToXgw

BUJV8hpJSowBt9wTgfAp+8KfMjp4laBBMkOpS7yh21qZyS/O6sEzxAFaK0ILLLCF9dSM

ocX67inEBs2d0WQKxpBrg1PmVLKvdr5hnRc/06l8RvwaNa37jXavzVi+t/vU4XuzGndx

EaNIpMUDvxAO9JeSOpNXneilHa40nEzsmOGh/zvhTmL7FMRlkCowwqQmVfZibpjm3zNc

FQtLZlmoQac4h+ALB1FlBJn5w9KwHC47mvButlUsXxh2Dv/kPm5rKoZG9li+Qc9WB06Z

aYIw==

X-Gm-Message-State: ANoB5plvTtNg08wT4/4ZA1RuElwhRhT+86JRg62ae463yRsPXtH4PV4V

dFaLWKk9zJRWN2LI9YtDxuOBsllsn0MnT6s6ags=

X-Google-Smtp-Source: AA0mqf5PvRCYOMby5iLD63MXBXy8cUocGQwN6NbC0Vh/ZdHpWSIeK1fzmPrvezdqnmtTFCg5zP27+p1KsWzdUwb8D2U=

X-Received: by 2002:a62:1981:0:b0:578:50b7:cb6f with SMTP id

123-20020a621981000000b0057850b7cb6fmr1976755pfz.3.1671470514467; Mon, 19 Dec

2022 09:21:54 -0800 (PST)

MIME-Version: 1.0

From: "Dr.Charles Edward"

Date: Mon, 19 Dec 2022 17:24:25 +0000

Message-ID:

Subject:

To: daria b55 ,

darnaque leschats2011 , dave ,

davidramos333 , david williams52000 ,

dayreynaud

Content-Type: multipart/alternative; boundary="00000000000044769e05f0318ee4"

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://ugjld.app.link/qTSaq6bUSvb https://ugjld.app.link/qTSaq6bUSvb





Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[pandubramantyo3[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[pandubramantyo3[at]gmail.com]

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.175 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.210.175 listed in list.dnswl.org]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 T_HK_NAME_FM_DR No description available.

0.0 TVD_SPACE_RATIO No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?}



--00000000000044769e05f0318ee4

Content-Type: text/plain; charset="UTF-8"



https://ugjld.app.link/qTSaq6bUSvb



--00000000000044769e05f0318ee4

Content-Type: text/html; charset="UTF-8"



https://ugjld.app.link/qTSaq6bUSvb



--00000000000044769e05f0318ee4--

McAfee PHish from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 19 Dec 2022 08:16:09 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p7Hrc-000F5C-0w

for dave@doctor.nl2k.ab.ca;

Mon, 19 Dec 2022 08:15:36 -0700

Resent-From: The Doctor

Resent-Date: Mon, 19 Dec 2022 08:15:36 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f49.google.com ([209.85.216.49]:54824)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7Dzp-0005UZ-1R

for doctor@nl2k.ca;

Mon, 19 Dec 2022 04:07:55 -0700

Received: by mail-pj1-f49.google.com with SMTP id o12so8648261pjo.4

for ; Mon, 19 Dec 2022 03:05:21 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=XvlRDBsf8XwSxmEUBSxm0vZxbUnjnHVibbm3POzwEMg=;

b=SmjarGH8Jz582Khym8x3hbqZTN9eVnzGOUDEAuJ9hsqRscRiJoDdj01rnRv9ORXENm

gXulk1nxIzZwgFkYLVKnmMGonsYEm9sETYe/I2+19kPHE8JuLUc9myT03/7eiN1XMvPg

ORtEyCs2KbGElxTkWFLCvW7HV28ZWqTR0/ngLPuPOySPm5GOdHGu+iSrITeTEJ15Dp9i

N1+8EWf0a4fGJOS7/cvGJbBLIuPiQaEpA2dHjACNQwhUDKltHB1Y2Sn0omFoE9etrWJY

eMhraVcyEcVgCRSjmcp/eapc7KLK5TTY+x6v7+N1/bOdYmsvIsR5oeFIqnKNAFJl77X5

x6sA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=XvlRDBsf8XwSxmEUBSxm0vZxbUnjnHVibbm3POzwEMg=;

b=kYN8XMNYi+nCvkliLfV1qzQ0DU1UWXMEXUV5eFMSozw33qajwWGkWawX4u8GySWIwF

cNJf9YpGMizeSAWaPX0a/J3C5UEd1M60IIG+CA+vI73dtUFjl0ThQqQBlCflLAHMSIru

1SkJUEWgF5H2XesuwaqgJoXYsy88Sxk2uoA7IhIhPkGrybasWZatmiu+WAFucKPLEwTB

Ea0N6CKzjAycrKNOjDNqKcf+si6HGG06lp7E4GHW61kT9Zt2BW2/i9n2uZp414CT8UP+

/qYGbSYq5Av4N4x9jz5Huf4raNsNve9Mh7xmzMR9kcknupqeHtN5PyvlhowQiQrnk7YM

lmoA==

X-Gm-Message-State: AFqh2kpTDUupJZ6F0N6+RHIPSm+8PsDa5ehWG0GhdZk4kdZjgiZIDjWe

eWvTmcbHW7Lxn5WeFwAk8q7tsTBvxVroY8INpyA48Q==

X-Google-Smtp-Source: AMrXdXtBQr4IIVJy13Q9iojT3WFOTd4inYgxOVICU59Hi0Z566aT4E5NhTCnlFCeTxTqX5yhheu41w==

X-Received: by 2002:a17:902:fe82:b0:190:fb26:7f3b with SMTP id x2-20020a170902fe8200b00190fb267f3bmr9364586plm.49.1671447915041;

Mon, 19 Dec 2022 03:05:15 -0800 (PST)

Received: from 157.97.134.92 ([157.97.134.92])

by smtp.gmail.com with ESMTPSA id i7-20020a17090332c700b001897de9bae3sm6799552plr.204.2022.12.19.03.05.13

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 19 Dec 2022 03:05:14 -0800 (PST)

Message-ID: <63a0456a.170a0220.58b29.b9fe@mx.google.com>

From: "Rolando Morales"

Subject: Your Agreement ID#(802466)

To: "doctor"

Content-Type: multipart/alternative; boundary="fTHDed2LKI6Q6BXEun7yrQpm=_7xxSgTK7"

MIME-Version: 1.0

Organization: Online Helpdesk Team

Date: Mon, 19 Dec 2022 16:35:14 +0530



This is a multi-part message in MIME format



--fTHDed2LKI6Q6BXEun7yrQpm=_7xxSgTK7

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



McAfee Total Protection 2022 |=20

5 Device | Antivirus Internet Security Software

$329.99 (1 Year Subscription)



Receipt From : 19 December, 2022



One year of premium antivirus, safe web browsing and password manager =

with VPN.

Protect your computer and avoid fraud McAfee. We have put together a l=

imited offer specially for you.





Dear Client! doctor@nl2k.ca



Your protection plan from last year has come to an end. However, we ar=

e extending your plan's validity for another year so that you won't ru=

n into any issues.



And in the next 24 hours, $329.99 will be taken out of your account as=

payment for this. Your auto debit services have been switched since l=

ast year, so they have been reactivated for you.



The remaining details have been sent to you at this email address, doc=

tor@nl2k.ca.

You can reach our customer support staff at this toll-free number for =

more information: +1 (833) 200 5187.





Regards,



Online Helpdesk Team

Call us :+1 (833) 200 5187





--fTHDed2LKI6Q6BXEun7yrQpm=_7xxSgTK7

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




"color: rgb(184, 49, 47);">Mc=

Afee
 Tota=

l Protection 2022 | 
5 Device | Antivirus Internet Security So=

ftware

px;">$329.99
&=

nbsp;(1 Year Subscription)

Receipt From : 19 December, 2022
an>



One =

year of premium antivirus, safe web browsing and password manager with=

VPN.
Protect your computer and avoid fraud McAfee. We have put tog=

ether a limited offer specially for you.






Dear=

Client! 

e: 15px;">doctor@nl2k.ca

ze: 15px;">

Your protection plan from last year has come to an =

end. However, we are extending your plan's validity for another year s=

o that you won't run into any issues.



And =

in the next 24 hours, $329.99=

will be taken out of your account as payment for this. Your au=

to debit services have been switched since last year, so they have bee=

n reactivated for you.



The =

remaining details have been sent to you at this email address, 
span>doctor=

@nl2k.ca.

You can reach our=

customer support staff at this toll-free number for more information:=

+1 (833) 200 5187
span>
.
trong>






Best=

regards,


Online Helpde=

sk Team
Call us :
07, 86);">+1 (833) 200 5187

<=

/html>





--fTHDed2LKI6Q6BXEun7yrQpm=_7xxSgTK7--



Charity nigerian spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 18 Dec 2022 20:30:32 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p76pj-000EMU-1P

for dave@doctor.nl2k.ab.ca;

Sun, 18 Dec 2022 20:28:55 -0700

Resent-From: The Doctor

Resent-Date: Sun, 18 Dec 2022 20:28:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f66.google.com ([209.85.166.66]:44662)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p75Qk-0001iI-1B

for doctor@doctor.nl2k.ab.ca;

Sun, 18 Dec 2022 18:59:36 -0700

Received: by mail-io1-f66.google.com with SMTP id i83so4007251ioa.11

for ; Sun, 18 Dec 2022 17:56:33 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:sender

:reply-to:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=LmDAUgFsa8vlpGFJHwrUrP5f3WeJErAWYUjneOh16YU=;

b=LfLayG5Kjgqxj6tNYrirnoaMZQbGwc6Nc7ZyYU1SgUSudWaLSZIY4r8jbgSKYtJUTG

6DyOHA4yUVWfz6maRJzdgzcd7xYWvO48079CU8IrDxjb68sV+gHZGNdzyLmhfHHn33E8

2RaX7HHLIvcnbgC29O80UaPVDIxw+y1Ukci4U/RcsOlvUKCObK/CRJrqZoAqBu1Y7ueS

eY/llOjXmCfb7xasmYGKmPgwcSWUUV33WlixBHEWiIM8Zv4IpLZ47vYSPvSXKJ6OdLKI

NZsVVp9phNjhZDEUsYmdU5KxXiij/bsYeifQMI38N61jzGN7ONRvOBi2u9nNOITBWvQC

t2wQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:sender

:reply-to:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=LmDAUgFsa8vlpGFJHwrUrP5f3WeJErAWYUjneOh16YU=;

b=0pPfGvwoK8LqUile7ctjZsGQsNQbP8IO0Dv9f6UjRJRCQ4O0Qbrm/QmZ1YmvR65bAb

C8bcGt6t8Y2Y9wldI/brdT+tRysTeQiWDROBhMuq+cbd9Ts40XmEFebhBeQUj/sgfSQj

S0U8qEOyesfcct4s8kyWvgfmJQNBP+43Ap1dgWeif9RZhaHchYoGTSMJQVoy9+eR9r96

duwz/hJ5kMb0DL4PpU6skF5aMEW+AGXouuxzKarQprRc+fIGwpUkIuU8l8bkFnbyw15o

IlE85DJybOD1hFoH1hGyts4CM6yzmXLx9vMHVXhkCD4rR3cBeMb58BTK7+cSmQ5EleAE

1VBQ==

X-Gm-Message-State: ANoB5pnqDWRvfh2eFunPm432zaJCrpjuwOeXz30QoxPvMFUUyWNT3ULY

w8pUcuF4YBMtxG5p4lcvoyXgMQ7xKs/1X3oNpls=

X-Google-Smtp-Source: AA0mqf7HiHYhw6f9P+5M+KUwFtoEVsNJ9GcF/nfaqWdY1fqzEq3c/PeO++o1B32j4zzBMgdTQCgzG8zD5KNtNx3OQcs=

X-Received: by 2002:a02:b397:0:b0:38a:830:3b7d with SMTP id

p23-20020a02b397000000b0038a08303b7dmr19273374jan.87.1671414987164; Sun, 18

Dec 2022 17:56:27 -0800 (PST)

MIME-Version: 1.0

Reply-To: elizabetthwerd@gmail.com

Sender: clara.ouedrago14@gmail.com

Received: by 2002:a05:6638:3398:0:0:0:0 with HTTP; Sun, 18 Dec 2022 17:56:26

-0800 (PST)

From: "Mrs. Elizabeth Edward."

Date: Mon, 19 Dec 2022 01:56:26 +0000

X-Google-Sender-Auth: 5-94RuAx0kZV92nYKJx4ifkrQF8

Message-ID:

Subject: Please I Need Your Urgent Response.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My Dear Friend, Please forgive me for stressing you with my

predicaments as I know that this letter may come to you as big surprise.

Actually, I came across your E-mail from my personal search afterward I decided

to [...]



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.66 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.166.66 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[clara.ouedrago14[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[clara.ouedrago14[at]gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Please I Need Your Urgent Response.



My Dear Friend,



Please forgive me for stressing you with my predicaments as I know

that this letter may come to you as big surprise. Actually, I came

across your E-mail from my personal search afterward I decided to

email you directly believing that you will be honest to fulfill my

final wish before i die.



I am Mrs. Elizabeth Edward, 63 years, from USA, and I am suffering

from a long time cancer and from all indication my condition is really

bad and deteriorating as my doctors have confirmed and courageously

Advised me that I may not live beyond two months from now for the

reason that my tumor has reached a critical stage which has defiled

all forms of medical treatment, As a matter of fact, registered nurse

by profession while my husband was dealing on

Gold Dust and Gold Bars till his sudden death, then I took over his

business till date. In fact, at this moment I and my late husband have

a

deposit sum of ($5.000.000.00 US). five million dollars with one of

the leading bank but unfortunately I cannot visit the bank since I=E2=80=99=

m

critically sick and powerless to do anything myself but my bank

account officer advised me to assign any of my trustworthy relative,

friends or partner with authorization

letter to stand as the recipient of i and my late husband funds but

sorrowfully I don=E2=80=99t have any reliable relative and no child.



I want you to know there are no risk involved, it is 100% hitch free &

safe. If you will be interesting to assist in getting this fund into

your account for charity project to fulfill my promise before anything

happens to me, please let me know immediately.



Therefore, I want you to receive the money and take 50% to take care

of yourself and family while 50% should be use basically on

humanitarian purposes mostly to orphanages home, Motherless babies

home, less privileged and disable citizens and widows around the

world. And as soon as I receive your respond I shall send you the full

details with my pictures, banking records and with full contacts of my

banking institution to communicate them on the transaction.

You can only get me through by my

private email Enclosed here (elizabetthwerd@gmail.com) As i wait

for your urgent reply.



Hope to hear from you soon.



Best Regards



Mrs. Elizabeth Edward.

Charity Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 18 Dec 2022 20:30:32 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p76pj-000EMU-1P

for dave@doctor.nl2k.ab.ca;

Sun, 18 Dec 2022 20:28:55 -0700

Resent-From: The Doctor

Resent-Date: Sun, 18 Dec 2022 20:28:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f66.google.com ([209.85.166.66]:44662)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p75Qk-0001iI-1B

for doctor@doctor.nl2k.ab.ca;

Sun, 18 Dec 2022 18:59:36 -0700

Received: by mail-io1-f66.google.com with SMTP id i83so4007251ioa.11

for ; Sun, 18 Dec 2022 17:56:33 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:sender

:reply-to:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=LmDAUgFsa8vlpGFJHwrUrP5f3WeJErAWYUjneOh16YU=;

b=LfLayG5Kjgqxj6tNYrirnoaMZQbGwc6Nc7ZyYU1SgUSudWaLSZIY4r8jbgSKYtJUTG

6DyOHA4yUVWfz6maRJzdgzcd7xYWvO48079CU8IrDxjb68sV+gHZGNdzyLmhfHHn33E8

2RaX7HHLIvcnbgC29O80UaPVDIxw+y1Ukci4U/RcsOlvUKCObK/CRJrqZoAqBu1Y7ueS

eY/llOjXmCfb7xasmYGKmPgwcSWUUV33WlixBHEWiIM8Zv4IpLZ47vYSPvSXKJ6OdLKI

NZsVVp9phNjhZDEUsYmdU5KxXiij/bsYeifQMI38N61jzGN7ONRvOBi2u9nNOITBWvQC

t2wQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:sender

:reply-to:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=LmDAUgFsa8vlpGFJHwrUrP5f3WeJErAWYUjneOh16YU=;

b=0pPfGvwoK8LqUile7ctjZsGQsNQbP8IO0Dv9f6UjRJRCQ4O0Qbrm/QmZ1YmvR65bAb

C8bcGt6t8Y2Y9wldI/brdT+tRysTeQiWDROBhMuq+cbd9Ts40XmEFebhBeQUj/sgfSQj

S0U8qEOyesfcct4s8kyWvgfmJQNBP+43Ap1dgWeif9RZhaHchYoGTSMJQVoy9+eR9r96

duwz/hJ5kMb0DL4PpU6skF5aMEW+AGXouuxzKarQprRc+fIGwpUkIuU8l8bkFnbyw15o

IlE85DJybOD1hFoH1hGyts4CM6yzmXLx9vMHVXhkCD4rR3cBeMb58BTK7+cSmQ5EleAE

1VBQ==

X-Gm-Message-State: ANoB5pnqDWRvfh2eFunPm432zaJCrpjuwOeXz30QoxPvMFUUyWNT3ULY

w8pUcuF4YBMtxG5p4lcvoyXgMQ7xKs/1X3oNpls=

X-Google-Smtp-Source: AA0mqf7HiHYhw6f9P+5M+KUwFtoEVsNJ9GcF/nfaqWdY1fqzEq3c/PeO++o1B32j4zzBMgdTQCgzG8zD5KNtNx3OQcs=

X-Received: by 2002:a02:b397:0:b0:38a:830:3b7d with SMTP id

p23-20020a02b397000000b0038a08303b7dmr19273374jan.87.1671414987164; Sun, 18

Dec 2022 17:56:27 -0800 (PST)

MIME-Version: 1.0

Reply-To: elizabetthwerd@gmail.com

Sender: clara.ouedrago14@gmail.com

Received: by 2002:a05:6638:3398:0:0:0:0 with HTTP; Sun, 18 Dec 2022 17:56:26

-0800 (PST)

From: "Mrs. Elizabeth Edward."

Date: Mon, 19 Dec 2022 01:56:26 +0000

X-Google-Sender-Auth: 5-94RuAx0kZV92nYKJx4ifkrQF8

Message-ID:

Subject: Please I Need Your Urgent Response.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My Dear Friend, Please forgive me for stressing you with my

predicaments as I know that this letter may come to you as big surprise.

Actually, I came across your E-mail from my personal search afterward I decided

to [...]



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.66 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.166.66 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[clara.ouedrago14[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[clara.ouedrago14[at]gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Please I Need Your Urgent Response.



My Dear Friend,



Please forgive me for stressing you with my predicaments as I know

that this letter may come to you as big surprise. Actually, I came

across your E-mail from my personal search afterward I decided to

email you directly believing that you will be honest to fulfill my

final wish before i die.



I am Mrs. Elizabeth Edward, 63 years, from USA, and I am suffering

from a long time cancer and from all indication my condition is really

bad and deteriorating as my doctors have confirmed and courageously

Advised me that I may not live beyond two months from now for the

reason that my tumor has reached a critical stage which has defiled

all forms of medical treatment, As a matter of fact, registered nurse

by profession while my husband was dealing on

Gold Dust and Gold Bars till his sudden death, then I took over his

business till date. In fact, at this moment I and my late husband have

a

deposit sum of ($5.000.000.00 US). five million dollars with one of

the leading bank but unfortunately I cannot visit the bank since I=E2=80=99=

m

critically sick and powerless to do anything myself but my bank

account officer advised me to assign any of my trustworthy relative,

friends or partner with authorization

letter to stand as the recipient of i and my late husband funds but

sorrowfully I don=E2=80=99t have any reliable relative and no child.



I want you to know there are no risk involved, it is 100% hitch free &

safe. If you will be interesting to assist in getting this fund into

your account for charity project to fulfill my promise before anything

happens to me, please let me know immediately.



Therefore, I want you to receive the money and take 50% to take care

of yourself and family while 50% should be use basically on

humanitarian purposes mostly to orphanages home, Motherless babies

home, less privileged and disable citizens and widows around the

world. And as soon as I receive your respond I shall send you the full

details with my pictures, banking records and with full contacts of my

banking institution to communicate them on the transaction.

You can only get me through by my

private email Enclosed here (elizabetthwerd@gmail.com) As i wait

for your urgent reply.



Hope to hear from you soon.



Best Regards



Mrs. Elizabeth Edward.