link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Dec 2022 15:18:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p7kux-000CNd-1M

for dave@doctor.nl2k.ab.ca;

Tue, 20 Dec 2022 15:16:59 -0700

Resent-From: The Doctor

Resent-Date: Tue, 20 Dec 2022 15:16:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:39844)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7iJS-000BUC-2s

for root@nk.ca;

Tue, 20 Dec 2022 12:30:11 -0700

Received: by mail-pl1-f170.google.com with SMTP id d15so13279204pls.6

for ; Tue, 20 Dec 2022 11:27:38 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=NTsK8eX5l6l2PLOr1WxCs12NZoTQb60zVWf/83X73+I=;

b=Yxzrfsp++NowPXs4Kc6nZgWGkPw4fNmPp6DMFDVTuypwD6GjSU9aPd+DtiHJktHkTC

q3FSKJ8yvx9Q5Mgz7r9QSf+oj5CNEPiok0Bi/S17ymplwIQjT7Fwu3O4zTSBTX0E1UOX

DcnW0JcdFWgKacJOZrrDAvE7/R4fLxpPXEmH5nBXbkdSaXEXLx9C61wsbEDlD1vPfqFa

F9gNksqA0qCWSxtH9IkWfDN1th1tQbcwM31dRXwz+kUNuYK7PMudgsCI2Tt//C1fN3SO

QAfQUrQTOWMuMUjNlEpNowYSHEB/vaij2Xu3hFHBA+yvlDuOIF7kANiuVwGbdsk77cBK

fxiQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=NTsK8eX5l6l2PLOr1WxCs12NZoTQb60zVWf/83X73+I=;

b=cEDjRJtriegroJtDZrKNvl5bwa6HKLNvyXZZw38VZRYrVol5umg5SfODAT7u5CNvIh

L7BggLI3z3lv4uus0tubXZOZ79uLtMMMkV24GJqpWrcY5gF4BSx5XfXfMAvCEC+Ky6He

vLlc9Vlxswyf4D2dI+9f+IKLCuMCqu3hIe5KSmk0dUqyC0Dtca2rYS/Ai7r04bfZo7YS

VML0YqRwio8JXqP8h3ygFKY0/DS9LrP9OIgl59Cs43ZW/2qjUDXtbq5EQj8F6WraTwj3

TwRfTcoqYisdG9qyRDY2TC9jZ7PJYHkrx6JSBfmz8XanerhuY+7SJ5069Ww9wecSi4D3

4Qdw==

X-Gm-Message-State: ANoB5pmR+yockqmk8nR6S8NUfcVEolHr9mRdEeiegrgzV0u7NK9/ph66

so71S1oVFxRRgxA6VNGrPuaQCM558p1sUYSzRRU=

X-Google-Smtp-Source: AA0mqf42j0nKgqbhQF8GG1yqfUA4TdyDpYYIPYaUI4mgH+Br4qIgDbm5pT3AmNygcXu/Jojd21p/5pyGzb78PbPYqSk=

X-Received: by 2002:a17:902:bd04:b0:189:38a1:30fe with SMTP id

p4-20020a170902bd0400b0018938a130femr77771483pls.47.1671564453078; Tue, 20

Dec 2022 11:27:33 -0800 (PST)

MIME-Version: 1.0

From: John

Date: Tue, 20 Dec 2022 19:29:59 +0000

Message-ID:

Subject:

To: pat , paulie ,

publications , ritzholidayinn , root

Content-Type: multipart/alternative; boundary="00000000000071ebd905f0476d17"



--00000000000071ebd905f0476d17

Content-Type: text/plain; charset="UTF-8"



https://vqd3f.app.link/tvMCMhGUSvb



--00000000000071ebd905f0476d17

Content-Type: text/html; charset="UTF-8"



https://vqd3f.app.link/tvMCMhGUSvb



--00000000000071ebd905f0476d17--

link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Dec 2022 15:18:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p7kux-000CNd-1M

for dave@doctor.nl2k.ab.ca;

Tue, 20 Dec 2022 15:16:59 -0700

Resent-From: The Doctor

Resent-Date: Tue, 20 Dec 2022 15:16:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:39844)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7iJS-000BUC-2s

for root@nk.ca;

Tue, 20 Dec 2022 12:30:11 -0700

Received: by mail-pl1-f170.google.com with SMTP id d15so13279204pls.6

for ; Tue, 20 Dec 2022 11:27:38 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=NTsK8eX5l6l2PLOr1WxCs12NZoTQb60zVWf/83X73+I=;

b=Yxzrfsp++NowPXs4Kc6nZgWGkPw4fNmPp6DMFDVTuypwD6GjSU9aPd+DtiHJktHkTC

q3FSKJ8yvx9Q5Mgz7r9QSf+oj5CNEPiok0Bi/S17ymplwIQjT7Fwu3O4zTSBTX0E1UOX

DcnW0JcdFWgKacJOZrrDAvE7/R4fLxpPXEmH5nBXbkdSaXEXLx9C61wsbEDlD1vPfqFa

F9gNksqA0qCWSxtH9IkWfDN1th1tQbcwM31dRXwz+kUNuYK7PMudgsCI2Tt//C1fN3SO

QAfQUrQTOWMuMUjNlEpNowYSHEB/vaij2Xu3hFHBA+yvlDuOIF7kANiuVwGbdsk77cBK

fxiQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=NTsK8eX5l6l2PLOr1WxCs12NZoTQb60zVWf/83X73+I=;

b=cEDjRJtriegroJtDZrKNvl5bwa6HKLNvyXZZw38VZRYrVol5umg5SfODAT7u5CNvIh

L7BggLI3z3lv4uus0tubXZOZ79uLtMMMkV24GJqpWrcY5gF4BSx5XfXfMAvCEC+Ky6He

vLlc9Vlxswyf4D2dI+9f+IKLCuMCqu3hIe5KSmk0dUqyC0Dtca2rYS/Ai7r04bfZo7YS

VML0YqRwio8JXqP8h3ygFKY0/DS9LrP9OIgl59Cs43ZW/2qjUDXtbq5EQj8F6WraTwj3

TwRfTcoqYisdG9qyRDY2TC9jZ7PJYHkrx6JSBfmz8XanerhuY+7SJ5069Ww9wecSi4D3

4Qdw==

X-Gm-Message-State: ANoB5pmR+yockqmk8nR6S8NUfcVEolHr9mRdEeiegrgzV0u7NK9/ph66

so71S1oVFxRRgxA6VNGrPuaQCM558p1sUYSzRRU=

X-Google-Smtp-Source: AA0mqf42j0nKgqbhQF8GG1yqfUA4TdyDpYYIPYaUI4mgH+Br4qIgDbm5pT3AmNygcXu/Jojd21p/5pyGzb78PbPYqSk=

X-Received: by 2002:a17:902:bd04:b0:189:38a1:30fe with SMTP id

p4-20020a170902bd0400b0018938a130femr77771483pls.47.1671564453078; Tue, 20

Dec 2022 11:27:33 -0800 (PST)

MIME-Version: 1.0

From: John

Date: Tue, 20 Dec 2022 19:29:59 +0000

Message-ID:

Subject:

To: pat , paulie ,

publications , ritzholidayinn , root

Content-Type: multipart/alternative; boundary="00000000000071ebd905f0476d17"



--00000000000071ebd905f0476d17

Content-Type: text/plain; charset="UTF-8"



https://vqd3f.app.link/tvMCMhGUSvb



--00000000000071ebd905f0476d17

Content-Type: text/html; charset="UTF-8"



https://vqd3f.app.link/tvMCMhGUSvb



--00000000000071ebd905f0476d17--

link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Dec 2022 15:18:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p7ksu-000C8P-1U

for dave@doctor.nl2k.ab.ca;

Tue, 20 Dec 2022 15:14:52 -0700

Resent-From: The Doctor

Resent-Date: Tue, 20 Dec 2022 15:14:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f169.google.com ([209.85.221.169]:33598)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7gn4-000L7Y-0g

for root@doctor.nl2k.ab.ca;

Tue, 20 Dec 2022 10:52:38 -0700

Received: by mail-vk1-f169.google.com with SMTP id 6so6126021vkz.0

for ; Tue, 20 Dec 2022 09:50:05 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=PZiurBmxgKgiOmpKXwaxW2FpUr4uxWkgpd45sv1P55E=;

b=GtY7QXPO++ZiklRlA9rL9wW1GIwgROj3+0h0W1BxdCZrrYvaA3040xVDT2JmyQ4b+r

8PJXFNiMe7lrrhhvpZINXs6kkAgbJ0KwzT+DEUKjoX+tShDauB2mZv0euyY06lz0bR1+

2i8S/rJGy90m7Jb3rdG5Q4zF88KqKuBcZb8kaPT6N12qJ7C28c60EazaH2Ia6MtblBpE

qtCuoUPfHArD6esEdI9dia1Ifxxm7dXl81qa67lBRgMNGcn2SvcTqHBHYAck35kSSIay

ntuddqZR4KmKgTV/XjFJXl2GM+aiizGaYLDHLPohhQoX9WXNFrbnfzReQBdUppM3qeHG

wDIA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=PZiurBmxgKgiOmpKXwaxW2FpUr4uxWkgpd45sv1P55E=;

b=0LpvBMQQSVeHjaUm1vL4mWIMKAPlyxrr4hQMzlwsgX0cBpTWd4y3w6B9G9MaU1Tln5

07VzsDQuFFWHiI2MpsUW+uWwX+lZCDe1LiqSCsLkCTv7uXUpMPCYoKC+N0KVOo3vhg0E

0k7FAt/rtTl3o8SPcqpPpu/iVDCe06id4A8sFawo3HZiPIAX8s2ftPJdi0SpjNokb5+l

aYJ0Xzz1UY72yqcgo3IOHGeSOI0Pp4L3O+gyFFZ3iFz/lJz9WCh0plSV3koSis2G/uE/

OVhcEem/INnYTzzy9g+l5mym8V5eMKsqfFmeyrHA/QPmrkFDPkiI4+CGzR4OJ8QPxiL3

NKfg==

X-Gm-Message-State: ANoB5pnbECbsBqc6lyLoFEMLTzTWrxFlEZm8lhxJCBgEl13rkeDAsuI+

p3sSwrU8LDNQEuZhspzznBQKJtGd9jelhM1otlw=

X-Google-Smtp-Source: AA0mqf6so6o6YXV1HEhh1qWqEDhzDA8clSwEKLRfUqVoq1Xc7mfMMIhUsbd+TQeiYP6SjSz2mf0EmlHSdUZdUBK2U20=

X-Received: by 2002:a1f:ca07:0:b0:3b7:ef90:1365 with SMTP id

a7-20020a1fca07000000b003b7ef901365mr52453499vkg.1.1671558599851; Tue, 20 Dec

2022 09:49:59 -0800 (PST)

MIME-Version: 1.0

From: "evs_idea@yahoo.com"

Date: Tue, 20 Dec 2022 17:52:32 +0000

Message-ID:

Subject:

To: patrickhenault1 ,

pierre tremblay , romtrade mtl ,

root , sabby cattery ,

sfang , sissi chocolatier ,

slaszlo1 , ssad oci

Content-Type: multipart/alternative; boundary="00000000000090c26b05f04610bc"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3FEseKv https://bit.ly/3FEseKv



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.221.169 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[juuanramirez[at]gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.169 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FROM_2_EMAILS_SHORT Short body and From looks like 2 different

emails

0.0 TVD_SPACE_RATIO No description available.

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential

shortener and To:name eq To:local

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

Subject: {SPAM?}



--00000000000090c26b05f04610bc

Content-Type: text/plain; charset="UTF-8"



https://bit.ly/3FEseKv



--00000000000090c26b05f04610bc

Content-Type: text/html; charset="UTF-8"



https://bit.ly/3FEseKv



--00000000000090c26b05f04610bc--

Phish for Geek Squad from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Dec 2022 15:16:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1p7krR-000BxU-1E

for dave@doctor.nl2k.ab.ca;

Tue, 20 Dec 2022 15:13:21 -0700

Resent-From: The Doctor

Resent-Date: Tue, 20 Dec 2022 15:13:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f44.google.com ([209.85.160.44]:46729)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1p7ecs-000PZ3-1g

for doctor@netknow.ca;

Tue, 20 Dec 2022 08:34:01 -0700

Received: by mail-oa1-f44.google.com with SMTP id 586e51a60fabf-1443a16b71cso15714661fac.13

for ; Tue, 20 Dec 2022 07:31:26 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=4lpawpiJ9I6BuC+4JOMQrsRbehEdfIpF4/sMUNXPFUc=;

b=Pb51dSmT84YI8dqN6g8AuGR1iod0Yl4W2t7ygwJ3eCKzrZaQ8pcPFTr8IFf0YQzK85

nMFY1MAL8+A0lUvP2R+8JXpiGAkUVp7PRTTTkeylae25XQC1PE9DY8gZ9/FKlIYSSI1L

Pdo0C/z3c5z9P7zpxh0Fd6LMNAqvnJJpYDe1UEj18w4YiIrO5mrVDv3oLQvt1Nasdk0A

vw8yRUZJBEoniYLYQjEthSRFodX33MBcQAYBn7LmPR4oCQvLftgfMMMsLCml1hojPSXr

NxQQK/tQau8MsjB/LDvHAZ25uDFpm87Deu7ZgjcYwe4fM0o/GdTKGGoBh4jsNm+z3JqF

0b4g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=4lpawpiJ9I6BuC+4JOMQrsRbehEdfIpF4/sMUNXPFUc=;

b=MJFlOxdmWqEM2lKUFsRYq6vwzzy8wGfnEsInUYt//TJEjT3AypD/ZB/b8O/eNJhASL

IVIzn/Nj14BZjo/NJck3LLKe9fdOeP2tNfEZSAMT2kUyz2Ab7tHJJZLxHlXX1drlb3v6

6BE0bANIJ3s2bxYnAC9297Q/s96POZGdGC5hQZ0v0uf6WTgGZyS8sMXnMdj0HkzlkwMg

qWGbCxI9SMbN6kktVo8YCFRq8lKD9t3KJnsqK7rmayH7Uz9tMQ8l2Umm62+zE68pjYYC

t87QxKVOWmK0KlQ8gFCBzw63hZiNco0QnPoZqdnKXRhq7DbkH1y8BGMjdM8ArBNINCGg

h8Cw==

X-Gm-Message-State: ANoB5plIOroCbyY5vuXC1ku8Ws7LztaKTVeZB6iVlYAyGB5HH6xz18az

WUkZN+tJ2Cho2YJMWm0a1CCERofeZErNZXXGiQY=

X-Google-Smtp-Source: AA0mqf4rzXjcFO3loJhcrd0WksQkWDwnj+HO9aXj1YHPKV2gKzluETpVetYDD8gpidyKLksryo21nQ==

X-Received: by 2002:a05:6870:82a8:b0:144:e875:5a1b with SMTP id q40-20020a05687082a800b00144e8755a1bmr26116976oae.57.1671550279860;

Tue, 20 Dec 2022 07:31:19 -0800 (PST)

Received: from 86.48.14.149 ([86.48.15.237])

by smtp.gmail.com with ESMTPSA id y18-20020a37f612000000b006fefa5f7fcesm9066652qkj.10.2022.12.20.07.31.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 20 Dec 2022 07:31:19 -0800 (PST)

Message-ID: <63a1d547.370a0220.39c58.ea0c@mx.google.com>

From: "Shaun D. Belcher"

Subject: Transaction alert KSABKA4

To: "doctor"

Content-Type: multipart/alternative; boundary="vV4aUALf3=_x5vRidymb9bDShrHTCxX3ag"

MIME-Version: 1.0

Date: Tue, 20 Dec 2022 21:01:18 +0530



This is a multi-part message in MIME format



--vV4aUALf3=_x5vRidymb9bDShrHTCxX3ag

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Geek Squad Services

Date: 20 December, 2022



Purchase Details





Hey Existing User,



Thank you for using our services.



Your personal subscription GEEKSQUAD CARE will expire today. The subsc=

ription will Auto-Renew.

Please review your purchase subscription summary below.





PRODUCT DESCRIPTION :-

A/C Type: Personal Home Subscription

Product: GSS/PC4

Device: Upto 3 Device

Quantity: 1

Tenure: 1 Year

Payment Mode: Online

Order Number: 330522/ME4026778

Renew Charges: $379.99

Registered Email: doctor@netknow.ca



This email confirms that your subscription has been renewed for anothe=

r one year with Geek-Squad

for $379.99 on December 20, 2022.



This subscription will Auto-Renew every year unless you turn it OFF. N=

o later than 72 hours of=20

before the end of subscription period.



To cancel the subscription, You can call us @ +1 833 228 5585





With deepest sympathy,



McAfee Total Tech & Support Team

Call us: +1 833 228 5585





--vV4aUALf3=_x5vRidymb9bDShrHTCxX3ag

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



=

Geek
span> Squad Services<=

/u>
Date: 20 December, 2022


yle=3D"color: rgb(184, 49, 47); font-size: 18px;">Purchase Details
an>





Hi Dear,

Thank you for usin=

g our services.

Your personal subscription 
yle=3D"font-size: 15px; background-color: rgb(247, 218, 100);">GEEKSQU=

AD CARE will expire today=

=2E The subscription will Auto-Renew.
Please review your purchase s=

ubscription summary below.


PRODUCT DESCRIPTION :=

-
A/C Type: P=

ersonal Home Subscription
Product:
(226, 80, 65);">GSS/PC4
Device:
6, 80, 65);">Upto 3 Device
Quantity:
gb(226, 80, 65);">1
Tenure:
0, 65);">1 Year
Payment Mode:
80, 65);">Online
Order Number:
6, 80, 65);">330522/ME4026778
Renew Charges:
color: rgb(226, 80, 65);">$379.99
Registered Email: 
an style=3D"color: rgb(41, 105, 176);">doctor@netknow.ca

>This email confirms that your subscription has been renewed for anoth=

er one year with Geek-Squad
for 
e: 15px; background-color: rgb(247, 218, 100);">$379.99
yle=3D"font-size: 15px;"> on December 20, 2022.

This subsc=

ription will Auto-Renew every year unless you turn it OFF. No later th=

an 72 hours of 
before the end of subscription period.

=

To cancel the subscription, You can call us @ 
n style=3D"background-color: rgb(247, 218, 100);">+1 833 228 5585
n>





Sincerely yours,

Service Ac=

tivation Dept.
Call us: <=

/span>
0);">+1 833 228 5585







--vV4aUALf3=_x5vRidymb9bDShrHTCxX3ag--