Web Partnership spam from Google / Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 May 2023 08:35:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwOPO-000O98-FD

for dave@doctor.nl2k.ab.ca;

Tue, 09 May 2023 08:33:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 9 May 2023 08:33:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f180.google.com ([209.85.215.180]:56813)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwNRt-000AaE-CQ

for sales@nk.ca;

Tue, 09 May 2023 07:32:17 -0600

Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-52c6f81193cso4158256a12.1

for ; Tue, 09 May 2023 06:30:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1683639008; x=1686231008;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=YI7GS2tuQLihVsOaaqOJwSqHNgEky3hSUC+IqZt/wYg=;

b=kfc9ka7Y2pgLC/JG2EII45KfAcosIKiiX7MQv+YVdEXm+YJxy5DDoakljAscr2bCMh

EFaUDSr5qi/i20f6Id7M2mfCNGHR9BMKuIhhPew0e1A5d9hTv0mYbFIV1/YhM2Wh12AE

1bvdyrWUXyqxxlKjI+Kd+hYUf1GcAx394zASqIjuxAirT4wKjh3d0aLA8kfGMEv6mKA5

JobUQWTy+4eYsjVwrPL7OCFEGknqly2TYQET3/7VcYxJ7M30wswDfnHPproR+k2fiDCz

P4d4w0L93pstVco38ztPE/WUHAG1lZWD+CUbHL8J7wE6QoQgSPbj2Bd1dROg63tyV6tV

anUg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683639008; x=1686231008;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=YI7GS2tuQLihVsOaaqOJwSqHNgEky3hSUC+IqZt/wYg=;

b=PGUe4jPv23woXbNfwMDF4JlLZAdGBLh+FTGlnTMwP2+ZAilrkljOEuhFSfjCSQKrP3

mtYw2vR2EZJKog6yGqVXrt19jcbfKiN9Cy6DbykloB3QBw1WkChfimTeqskQo0EUV7fl

IYr0fnOdh/ViPwZFL4/8SCEi7P7YDg+dxvmOPy+BGf9qnfS8reCQ40Lo1lUF2JKaqcVy

iOlkiNcUSIKehIaQyoOE/WWlMBtA4YAjYDZJxWfycQEXX6I5d01t83CANdPW6W7nSBL0

QLAoSID6v9INGUdpo5/e6rP1AWFlRW5/FFMEJ3R84sTwMsiBEVXJbN8bwCBauZAoYXEe

QmsA==

X-Gm-Message-State: AC+VfDxn4BecbksKfglzzw69eBb+sXu8EGqksI3Gf3SlstSg2YMCb5RR

2423EZ4j1NbouZ/8QirDdfRae038yghilPkCzpS4+O1HLMw=

X-Google-Smtp-Source: ACHHUZ76mcvzovCRP4wVuMYpFxuiUSxpTD0rJ3/WUag5zjmtUIeJ+Os62aCvIobkKv8+QMqVxVDv8zL0PTNFNQHa1Cg=

X-Received: by 2002:a17:903:1248:b0:1ab:224b:d1fc with SMTP id

u8-20020a170903124800b001ab224bd1fcmr17751523plh.41.1683639007772; Tue, 09

May 2023 06:30:07 -0700 (PDT)

MIME-Version: 1.0

From: Reylyn Montefalco

Date: Tue, 9 May 2023 21:32:55 -0700

Message-ID:

Subject: Sponsored Inquiry To:nk.ca

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000fd03e105fb42c01c"



--000000000000fd03e105fb42c01c

Content-Type: text/plain; charset="UTF-8"



Hi,



We have some articles we would like to publish on your site



What would be your best quote for it?



We work with PayPal > is that ok with you?



Looking forward to your positive reply!



Regards,

Reylyn





Virus-free.www.avg.com



<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>



--000000000000fd03e105fb42c01c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

We have s=

ome articles we would like to publish on your site
<=

br>
What would be your best quote for it?

dir=3D"auto">
We work with PayPal > is that o=

k with you?

Looking forw=

ard to your positive reply!


to">Regards,
Reylyn

Nigerian Spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 May 2023 13:40:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwT9G-000BX6-1b

for dave@doctor.nl2k.ab.ca;

Tue, 09 May 2023 13:37:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 9 May 2023 13:37:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f173.google.com ([209.85.208.173]:51376)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwOn0-0000QY-Es

for doctor@doctor.nl2k.ab.ca;

Tue, 09 May 2023 08:58:09 -0600

Received: by mail-lj1-f173.google.com with SMTP id 38308e7fff4ca-2ac7f53ae44so65705661fa.2

for ; Tue, 09 May 2023 07:56:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1683644160; x=1686236160;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=fFghqr+TctbTH4d/HJ8uBOzmYVXaplmFhk/9J8jhf+g=;

b=NSjQNAYlObDHa90DkCv4IobHjlua0a2CFbLxqqMr6gIBWI6KN83hT1/5zcwwUOZmuO

yVHd/VRd8pNbxTdrNHLn/Ak8Hvwk71V1HNZxRPye8oUcHDj1dN1tMZw6LfK4fsACCDFO

8xJ/d5D5Nu6G9Va61j+BNgLbLXzNZstsOyU7xOUlY+jia9tp31y1B84QBufAUY4FVpes

RxhtCpveh0AXPHitUT+t9p89etGbenm4H38MG6e2tzR9GBnYcLobTMy3uioGvIXWVf4F

gePTPyFqpPY5NaUOT6p3qBtKKHNCLzUgo0a1Pcyi3Htmlw8joTqw8t/r6/rDo+utBewf

D2dA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683644160; x=1686236160;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=fFghqr+TctbTH4d/HJ8uBOzmYVXaplmFhk/9J8jhf+g=;

b=iRIrixP8vyXI1NwuhmMKu4a/DTnWzwzYAuzcom6EBUqtUAmigI5zklGBXrPbslZEBB

aD13I/usyPVvkIfpG7Bpj+OKFEFHHE2pSpc+hX5AcKqlquwsGEnZfxlBgsP6YkuTiefb

fwGkE/UIJrpnTg6GwWTUsSQR6j6dbhr5cpI4wEonFf1ryPoXt2SUfAta3o1ml3I3TVee

nXVoLMbaCRDeRLGcNtfvSmZ93j/iP5XXcX44Tv/xSFs8sO9Pi3j5sOILaS5o0G9GVaAb

ANLyQtrd3/3tebIoXTAupcuEd9lw0lhW3+OZnwbLT1Zl0Xogyu+Bm6iRvjxg9yGJijf+

U0mQ==

X-Gm-Message-State: AC+VfDx+xDadfb6PRULyY9DvPmKr3SzBjDZwQKiNDxWUzy2RIrqIVt10

V2BKoF6yv/+qUrXFml2x5kdN9YSEbG+9HmbrdQ4=

X-Google-Smtp-Source: ACHHUZ52/QD6UPER/FwGJTG9B69bQjnmQyF8oS4kIJmbJNfJYH2eUU+hoOYp/zPfi231hmNod8knVt87ml4rPlPlt+E=

X-Received: by 2002:a2e:94c7:0:b0:2aa:41a1:cd6c with SMTP id

r7-20020a2e94c7000000b002aa41a1cd6cmr855815ljh.23.1683644160296; Tue, 09 May

2023 07:56:00 -0700 (PDT)

MIME-Version: 1.0

Sender: yacoubatao78@gmail.com

Received: by 2002:a05:6022:73a6:b0:3e:897e:3bcb with HTTP; Tue, 9 May 2023

07:55:59 -0700 (PDT)

From: "Mrs Yu. Ging Yunnan"

Date: Tue, 9 May 2023 14:55:59 +0000

X-Google-Sender-Auth: ZbjJWKD_edQD-qor0-1lpgfL7e8

Message-ID:

Subject: hello dear

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the

doctor said I will not survive it because all vaccines has been given to

me but to no avian, am a China woman but I base here in France beca [...]



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.173 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yacoubatao78(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[yacoubatao78(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 HK_SCAM_N2 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

2.0 HK_SCAM No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.173 listed in wl.mailspike.net]

Subject: {SPAM?} hello dear



hello

I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I

will not survive it because all vaccines has been given to me but to

no avian, am a China woman but I base here in France because am

married here and I have no child for my late husband and now am a

widow. My reason of communicating you is that i have $12 .2million USD

which was deposited in BNP Paribas Bank here in France by my late

husband which am the next of kin to and I want you to stand as the

beneficiary for the claim now that am about to end my race according

to my doctor. I will want you to use the fund to build an orphanage

home in my name there in your country, please kindly reply to this

message urgently if willing to handle this project

Norton phish from google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 May 2023 08:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwOOg-000NIQ-KS

for dave@doctor.nl2k.ab.ca;

Tue, 09 May 2023 08:32:58 -0600

Resent-From: The Doctor

Resent-Date: Tue, 9 May 2023 08:32:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f177.google.com ([209.85.210.177]:62582)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwOHL-000Aqh-Qz

for support@nk.ca;

Tue, 09 May 2023 08:25:27 -0600

Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-64115e652eeso42945505b3a.0

for ; Tue, 09 May 2023 07:23:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1683642199; x=1686234199;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=lmZiZCTUnTMjrGjFG2soSYLrepKlYzB05nFi3XlAc9Y=;

b=GC0xp79frnmJvs2QthaZnNlokJF8XiUcZ4+zf/42YMAv3PUM5aeBbxQzhBsvi+QAkv

FNh415sJdgAWIoibRaZZNOhcePNT9yC3xVXcMu4kM3uUNo5PQ3W6bBYBuQeRSxAlnOxX

/cZcjGZhG3r2YoY7Z5GrWKFZ2XVkFLdV7u7mPnogrxilVLVfJtn7+h7GDCHyGcEKMEqm

N3HtEs57ANDJAQ7xojuCCVaWkn0PCvNrxoJRHAVxciCoTMIe7wtcOmK5H65/LFZJi/xo

EPs8uhgVdcSfWIX5QZkBGOeJL2RzMfvRvBHyKX8ZHw2/DsmadKFjMWs+9+ABMqB7Ch2/

19YQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683642199; x=1686234199;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=lmZiZCTUnTMjrGjFG2soSYLrepKlYzB05nFi3XlAc9Y=;

b=F4e0q3ouYM/6qiJ5bbxQFbEu3tXMok97B9LxJedeBMwYiB5MyMFVypUMWtqSQKB3Q2

3fuhLUBxmGbW9Fw2QdymTz8n1VcSumrukQJXCOc7APkRbS7d81leDV4e1imyJuDrTyq3

LZq6cQ9k5o7duEOfELolVMtv8odJlmVGflcHHT9WAH5EOJPi+B9Cr5/39yboJP0cpqJt

+H1lALA2/NQGmz3OiUMbScG2YxmAh/0tIJ+fCsFpxgENHgOpgYcw295M3gWIC3PeqinC

yFyZt++ycH6/a1mlgWbnx7qe84YnxcgT9LJfit7wJjuNbLbX/VBf3gOfYChVXzIwZ19V

QWoQ==

X-Gm-Message-State: AC+VfDwnyloLX/GqzDDIfhs1we7My/MvYCcMFTkxbAvpp++QH2H2/Tc8

j6FOkEkwlymkNklW5ggkbtdb4GWdfOYv2YpODHGfBA==

X-Google-Smtp-Source: ACHHUZ5Z7jiP0TrbH0EgDmx3Xo5DzT47eFwsZx87tvd7ka3oG65OMBhNwBkbE2LtudxXvAJlTDZD8Q==

X-Received: by 2002:a17:902:e751:b0:1a9:a408:a52f with SMTP id p17-20020a170902e75100b001a9a408a52fmr21902279plf.24.1683642196779;

Tue, 09 May 2023 07:23:16 -0700 (PDT)

Received: from 193.29.61.200 ([185.187.168.90])

by smtp.gmail.com with ESMTPSA id i8-20020a170902c94800b001a96562642dsm1586049pla.277.2023.05.09.07.23.14

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 09 May 2023 07:23:15 -0700 (PDT)

Message-ID: <645a5753.170a0220.f343.2c8b@mx.google.com>

From: "Carl D. Tucker"

Subject: Service Upgraded Again

To: "support"

Content-Type: multipart/alternative; boundary="CHVtM4Sx1w4hSl5pmCPWINyOkvli7=_ekq"

MIME-Version: 1.0

Date: Tue, 9 May 2023 07:23:13 -0700



This is a multi-part message in MIME format



--CHVtM4Sx1w4hSl5pmCPWINyOkvli7=_ekq

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello there, support@nk.ca





Order ID: 935-2117-69726

Dated: 09-05-2023



Subscription Renewal Notice!!





Congratulations!! We have once again renewed your annual subscriptio=

n.



As per our annual contract, you opted for automatic renewal for PC Car=

e and Network Security, which renewed today.



The amount of ($425.89) has been successfully debited from your update=

d bank account, and the charge will appear on the statement shortly.



For any kind of assistance, contact us at +1 {818} 527-4952.



Here are your subscription and transaction details:



Seller's Name: Norton Total Inc.

Advanced PC Shield and Network Protection

Expiration Date: May 8, 2024

Service Fee: $425.89



Please note that if you find an error in this transaction or wish to u=

nsubscribe and get the refund, please contact us immediately to avoid =

payment disputes.



=20



Thank you!=20



John Wilson

Customer Support Helpdesk Dept.

Toll-free Number: +1 {818} 527-4952.



=20



=20





--CHVtM4Sx1w4hSl5pmCPWINyOkvli7=_ekq

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline














: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>Hello there,   support@nk.ca




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>
 Order ID: 935-2117-69726
 Dat=

ed: 09-05-2023




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>Subscription Renewal Notice!!




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">

style=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times=

, serif; font-size: 16px;'>Congratulations!!   We have once again=

renewed your annual subscription.




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>As per our annual contract, you opted for autom=

atic renewal for PC Care and Network Security, which renewed today.
pan>




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>The amount of ($425.89) has been successfully d=

ebited from your updated bank account, and the charge will appear on t=

he statement shortly.




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>For any kind of assistance, contact us at
ng>+1 {818} 527-4952.




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>Here are your subscription and transaction deta=

ils:




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>Seller's Name: Norton Total Inc.
 Advan=

ced PC Shield and Network Protection
 Expiration Date: May 8, =

2024
 Service Fee: $425.89




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>Please note that if you find an error in this t=

ransaction or wish to unsubscribe and get the refund, please contact u=

s immediately to avoid payment disputes.




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'> 




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>Thank you! 




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'>John Wilson
 Customer Support Helpdesk =

Dept.
 Toll-free Number: 
(37, 37, 37); font-family: "Times New Roman", Times, serif; font-size:=

16px;'>+1 {818} 527-4952
rgb(37, 37, 37); font-family: "Times New Roman", Times, serif; font-s=

ize: 16px;'>.




: 107%; font-family: Calibri, sans-serif; font-size: 15px;">
e=3D'color: rgb(37, 37, 37); font-family: "Times New Roman", Times, se=

rif; font-size: 16px;'> 




107%; font-family: Calibri, sans-serif; font-size: 15px;">
'font-family: "Times New Roman", Times, serif; font-size: 16px;'> =

;













--CHVtM4Sx1w4hSl5pmCPWINyOkvli7=_ekq--



Instragram followers pihsh from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 May 2023 08:33:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwOO0-000MWm-0Q

for dave@doctor.nl2k.ab.ca;

Tue, 09 May 2023 08:32:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 9 May 2023 08:32:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:57459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwNil-0009rP-9b

for sales@nk.ca;

Tue, 09 May 2023 07:49:43 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-55a37bf6fd0so101192587b3.2

for ; Tue, 09 May 2023 06:47:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1683640054; x=1686232054;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=7sESnFg8HNoZN/E17UIAXFyf3tekV9fvaw2/BA+r8GM=;

b=Rl0kc8DywDVaBGf87kZRz4kCW+shBrVIbUxJP35vmDHf2DDLc95OirgoWRkyWvIURv

ddyaTZgi1+PVrTSafuRWpYDrJRgJogPYH2Y4okNvcwwr2htppsHn8ZNNtebwCmNos2JF

0+MTdZjFq0RdFdjDfI/oIT14UMw+AMkTgEAN5JLMRt3lQ+k/NjfisOcyOxiwM0hgHzg5

BeNzJYFvxWA/kfkVaiJgoVb9UtYtSHBTv78If6TzldskDmZ6cYcArqvweQQCOH4ZfJPN

ivbiYRgTgu08YIYzJi8hiIE/XPEYQiFMt36Ot5HQFC7tB6vg/k49++w9wUlzBNmDVlxI

zzhQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683640054; x=1686232054;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=7sESnFg8HNoZN/E17UIAXFyf3tekV9fvaw2/BA+r8GM=;

b=Pv1l4BCCNtCLupdZRz0+gFzqgzYO0D6aahMGYD4b2Szqe49dAAdrWU85Rx9Tz57iF+

MDvTgWkj8NFDeZlk6Dp8JZ0Yinqc/k0TBZsOOsnonB1Ip8uhoekW1XlH6q5nTMPn6H4w

En4Humpr6Y6x0Q+GIJFNLyBSpYCLer7wkLyIBjR6NZNZcrdsUIT01paG2yvVRjCDB9dd

e47Y0ZmtLU1Lu1VwYgUiTAdvxUQQcdtPE1v664RoIas9EplbjROuSFL6czQZ+l+BQyWC

LtpJYQVIIBbYWAaub4VQddXOxKTYORhCrNzSL/EBakihc6EvJ7/fRKZipsgxP952HYJ0

hhMw==

X-Gm-Message-State: AC+VfDwXIefH6c0JVPoOaMptJE5hnEXotC7nmBa3bWMqMoiC6cke48kP

qqN2YQKAz/zbXGks/I8nn9TX7i23vQsT

X-Google-Smtp-Source: ACHHUZ5/kJ7NKwQMlTrvUSWWEx3eiTed7ljGpanSOuoaKQ8wQ9iZPzt7J/Sb73gqT5JACrfNsrPVNfKKJg==

MIME-Version: 1.0

X-Received: by 2002:a81:b203:0:b0:55a:3133:86fa with SMTP id

q3-20020a81b203000000b0055a313386famr8888767ywh.3.1683640054538; Tue, 09 May

2023 06:47:34 -0700 (PDT)

Message-ID: <0000000000006194f205fb42ffc7@google.com>

Date: Tue, 09 May 2023 13:47:34 +0000

Subject: daveyadallee, Get More Instagram Followers and Likes here

From: tardostierra@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi daveyadallee,



We are from Instasocial. We found your Email address on your Instagram page

@daveyadallee.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.



Now you have 1864 Followers, maybe you are Interested?



With having Thousands of followers you can Increase your credibility on

Instagram,

Also If you are running an Instagram account to promote your own business,

having followers will get you more clients.



You can See all packages here :



https://bit.ly/instasocialmacpro



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

Mcafee phish from google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 May 2023 07:27:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwNLU-0004Dc-Sg

for dave@doctor.nl2k.ab.ca;

Tue, 09 May 2023 07:25:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 9 May 2023 07:25:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f50.google.com ([209.85.161.50]:48423)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwLDB-0002bj-4l

for doctor@nl2k.ca;

Tue, 09 May 2023 05:08:56 -0600

Received: by mail-oo1-f50.google.com with SMTP id 006d021491bc7-54f811ad4b2so1061069eaf.1

for ; Tue, 09 May 2023 04:06:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1683630407; x=1686222407;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=0CqISwBcPF4pEyDRwGRZq/fl7m2L9H8wgDkJt3QXM7k=;

b=WDWaywFTg/p3gmIWu3bak4ZcSNIpkOYFKj+9vlsDLKL9FV0vZpuh2p3ZaCvnJq6nJK

RvwNiDOdLtC9v0oCosDZk+cZzqnEJbRdJ8A0UubQBPIFUYbhIU4nhXIEJ1GcBW+gWTAm

YPWy8/C31Y5FL78sSresvUYBsA8dyUxNPZiiGbSUsl9qbQnha+ucrq46GRUQlkdz4NhT

pZItPJDP1MqJzGD2s+2fFJPpsJDORiNJkA5n89OS6bvT/w5s2av7geXuBE4qk4XYUd3b

N8QAcB32gAZmO9u64PqwutzOf7MWu82evetuBTsNr8a+vHHzY5aTVNo7yim2b11r3Xno

XR1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683630407; x=1686222407;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=0CqISwBcPF4pEyDRwGRZq/fl7m2L9H8wgDkJt3QXM7k=;

b=OVW8xBAfkLPFC+/tVj5Nugqo5uyljCP17wVBzZXGbsX8KykKtQdhtnBvxG275NErzE

qq9QLmicZjHOBgD2CqJ71LoUyhdn4DHHvmeNg4W47o+ccT0Fk2Fj9REioAVi0nqp409V

DMavAejRKdaqi8VUcdBizgskyw1EF5eiNE6muVObAaGiSCAgP41uFm9TmVYsOmL2+hjr

d4hRc+qU8itLDDqi4U5/LcvuI89Zmei8HSFoKMk7JnpR2WLW1ICEJGHpaHfiCOZH2B4K

WXiGZhmNKcBpfk9RyMUfgDNawS9CPPJOajYckcCQPJ/jrI0QstUebssZQdOkdFPt9lfy

fTqA==

X-Gm-Message-State: AC+VfDwe/5dqBlbhw0nYz4UbidDFDCuQ7vfdGzh/ZgjEYoZDOji1gVvt

GZKjr+PVnwsC9QsgdYmcLVAiy7t3e/NuSw==

X-Google-Smtp-Source: ACHHUZ7wOBRONIGoVdyCsuJZqoryOWwK7RWtRbKZZCij3qwna8TBQbBtUkHjWyLR6dY1j06IgDnf8w==

X-Received: by 2002:a05:6820:291:b0:54f:51f3:48b0 with SMTP id q17-20020a056820029100b0054f51f348b0mr1042493ood.7.1683630407552;

Tue, 09 May 2023 04:06:47 -0700 (PDT)

Received: from 145.14.135.102 ([145.14.135.102])

by smtp.gmail.com with ESMTPSA id e1-20020a056830200100b006a5fae26f18sm5043575otp.39.2023.05.09.04.06.45

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 09 May 2023 04:06:46 -0700 (PDT)

Message-ID: <645a2946.050a0220.86010.76a3@mx.google.com>

From: "Jeremiah Gallagher"

Subject: Regarding Your Amount deduction#814794

To: doctor@nl2k.ca

Content-Type: multipart/alternative; boundary="eSCKIwGcM5wlWxQQOfz1qN=_AT2G37pFt2"

MIME-Version: 1.0

Date: Tue, 9 May 2023 16:36:46 +0530



This is a multi-part message in MIME format



--eSCKIwGcM5wlWxQQOfz1qN=_AT2G37pFt2

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello there, doctor@nl2k.ca





Order ID: 935-2117-441343

Dated: May 9, 2023



Subscription Renewal Notice!



Congratulations! We have once again renewed your annual subscription=

=2E



As per our annual contract, you opted for automatic renewal for PC Car=

e and Network Security, which renewed today.



The amount of ($425.89) has been successfully debited from your update=

d bank account, and the charge will appear on the statement shortly.



For assistance, contact us at +1{844}-675-1971.



Here are your subscription and transaction details:



Seller's Name: MCAfee Total Inc.

Advanced PC Shield and Network Protection

Expiration Date: May 8, 2024

Service Fee: $425.89



Please note that if you find an error in this transaction or wish to u=

nsubscribe and get the refund, please contact us immediately to avoid =

payment disputes.



=20



Yours sincerely!=20



Jeremiah Gallagher

Customer Support Helpdesk Dept.

Toll-free Number: +1{844}-675-1971.



=20





--eSCKIwGcM5wlWxQQOfz1qN=_AT2G37pFt2

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">


; color: rgb(37, 37, 37); text-transform: none; text-indent: 0px; lett=

er-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; margin-bottom: 10px !important;=

word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial;'>Hello there,   doct=

or@nl2k.ca


text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: "Times New Roman"; font-size: medium; font-style: normal; font-=

weight: 400; margin-bottom: 10px !important; word-spacing: 0px; white-=

space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decora=

tion-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial;'>
Order ID: 93=

5-2117-538613
Dated: May 9, 2023<=

/p>


orm: none; text-indent: 0px; letter-spacing: normal; font-family: "Tim=

es New Roman"; font-size: medium; font-style: normal; font-weight: 400=

; margin-bottom: 10px !important; word-spacing: 0px; white-space: norm=

al; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;'>Subscription Renewal Notice!


r; color: rgb(37, 37, 37); text-transform: none; text-indent: 0px; let=

ter-spacing: normal; font-family: "Times New Roman"; font-size: medium=

; font-style: normal; font-weight: 400; margin-bottom: 10px !important=

; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-=

variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-st=

yle: initial; text-decoration-color: initial;'>Congratulations!  =

We have once again renewed your annual subscription.


ext-align: center; color: rgb(37, 37, 37); text-transform: none; text-=

indent: 0px; letter-spacing: normal; font-family: "Times New Roman"; f=

ont-size: medium; font-style: normal; font-weight: 400; margin-bottom:=

10px !important; word-spacing: 0px; white-space: normal; orphans: 2; =

widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=

xt-decoration-style: initial; text-decoration-color: initial;'>As per =

our annual contract, you opted for automatic renewal for PC Care and N=

etwork Security, which renewed today.


r; color: rgb(37, 37, 37); text-transform: none; text-indent: 0px; let=

ter-spacing: normal; font-family: "Times New Roman"; font-size: medium=

; font-style: normal; font-weight: 400; margin-bottom: 10px !important=

; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-=

variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-st=

yle: initial; text-decoration-color: initial;'>The amount of ($425.89)=

has been successfully debited from your updated bank account, and the=

charge will appear on the statement shortly.


n: center; color: rgb(37, 37, 37); text-transform: none; text-indent: =

0px; letter-spacing: normal; font-family: "Times New Roman"; font-size=

: medium; font-style: normal; font-weight: 400; margin-bottom: 10px !i=

mportant; word-spacing: 0px; white-space: normal; orphans: 2; widows: =

2; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=

text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=

ation-style: initial; text-decoration-color: initial;'>For assistance,=

contact us at +=

1{844}-675-1971
weight: 700;">.


(37, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: =

normal; font-family: "Times New Roman"; font-size: medium; font-style:=

normal; font-weight: 400; margin-bottom: 10px !important; word-spacin=

g: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0p=

x; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial;'>Here are your subscription and trans=

action details:


37); text-transform: none; text-indent: 0px; letter-spacing: normal; f=

ont-family: "Times New Roman"; font-size: medium; font-style: normal; =

font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; w=

hite-space: normal; orphans: 2; widows: 2; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-dec=

oration-color: initial;'>Seller's Name: MCAfee Total Inc.

color: rgb(37, 37, 37);">Advanced PC Shield and Network Protection

style=3D"color: rgb(37, 37, 37);">Expiration Date: May 8, 2024

e=3D"color: rgb(37, 37, 37);">Service Fee: $425.89


-align: center; color: rgb(37, 37, 37); text-transform: none; text-ind=

ent: 0px; letter-spacing: normal; font-family: "Times New Roman"; font=

-size: medium; font-style: normal; font-weight: 400; margin-bottom: 10=

px !important; word-spacing: 0px; white-space: normal; orphans: 2; wid=

ows: 2; font-variant-ligatures: normal; font-variant-caps: normal; -we=

bkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=

decoration-style: initial; text-decoration-color: initial;'>Please not=

e that if you find an error in this transaction or wish to unsubscribe=

and get the refund, please contact us immediately to avoid payment di=

sputes.


t-transform: none; text-indent: 0px; letter-spacing: normal; font-fami=

ly: "Times New Roman"; font-size: medium; font-style: normal; font-wei=

ght: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'> 


37, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: n=

ormal; font-family: "Times New Roman"; font-size: medium; font-style: =

normal; font-weight: 400; margin-bottom: 10px !important; word-spacing=

: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial;'>Cordially! 


align: center; color: rgb(37, 37, 37); text-transform: none; text-inde=

nt: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-=

size: medium; font-style: normal; font-weight: 400; margin-bottom: 10p=

x !important; word-spacing: 0px; white-space: normal; orphans: 2; wido=

ws: 2; font-variant-ligatures: normal; font-variant-caps: normal; -web=

kit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color: initial;'>Jeremiah Ga=

llagher
Customer Support Helpdesk=

Dept.
Toll-free Number: 
rong style=3D"font-weight: 700;">+1{844}-675-1971
e=3D"color: rgb(37, 37, 37); font-weight: 700;">.


=3D'text-align: center; color: rgb(37, 37, 37); text-transform: none; =

text-indent: 0px; letter-spacing: normal; font-family: "Times New Roma=

n"; font-size: medium; font-style: normal; font-weight: 400; margin-bo=

ttom: 10px !important; word-spacing: 0px; white-space: normal; orphans=

: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps: nor=

mal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial; text-decoration-color: initial;'>&n=

bsp;







--eSCKIwGcM5wlWxQQOfz1qN=_AT2G37pFt2--



link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 May 2023 20:37:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwDDH-000DXG-Jm

for dave@doctor.nl2k.ab.ca;

Mon, 08 May 2023 20:36:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 May 2023 20:36:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f171.google.com ([209.85.128.171]:57450)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pwDCD-0007aT-8m;

Mon, 08 May 2023 20:35:25 -0600

Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-55a79671a4dso81587067b3.2;

Mon, 08 May 2023 19:33:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1683599597; x=1686191597;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=ao0EsdJ0stmbHxAjzgju4DYhPCA1I/g/n/dsncpt5Fk=;

b=ncwQJzqxH6QlXjs6XL8s1cegn+4uGyPbd7UDWW0kNWc7QuqvMQhJ/twwSJ8OQi4SnY

sBAdUPh/AVYpFNh42upAR6pWT5xsjObC2szxkLlfL2dXyDe3SkGsidaJNS6rk5Vn3NIi

LjwlOg+ZT46MJ/TWVlh9eJQoXun4OqzMSAN+3TC809y1K+izG7GTilm34cmCWPLzAboJ

Sefd1Fl2xbhFsLOrFD6nGIHS41LR4VY6mEPEJCNyIFFqDnbk9mCUuDGulXYJlu/rpUc/

D9hxB3DEpULmd4h2TO8dySvcBR5PD/slme6J4iHTqVIyEExVajyuz2hnN6JAfz1tifZJ

Zy4Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683599597; x=1686191597;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=ao0EsdJ0stmbHxAjzgju4DYhPCA1I/g/n/dsncpt5Fk=;

b=jkvE73vNLNtuajZVcyaVgvDSs6tEIuX4OKvg8honFQvQ80Vz4aK79obFjSY1et7eY3

3DQNlchiZUtEJrNWDH3XuasU12qt0w5BsGe/h2CbtjdRvoOTLt5++vTgm9jAS4Ma1rOY

i5zYCeN7+tbSYiMpgPp5J6Dgk+SZrVq9IvVQ1IkwGfxIld/vCZQoQTZGR9DxcxFQ5qlw

zyYNpS71UM+SbzSrPsvWy4Oi7Rau+xnDX2EJ1ZJzXzbT+xKPs45WpUepQt/hKUnVCaKB

9OlAwoAx8bmB8qbZegzcL8lVXLxOqCrtjLectA5zRqOCmraCERZ+kWBNbu6Mk9KK7lwS

ZHUQ==

X-Gm-Message-State: AC+VfDyNPZd556Yb6s7x05kxCih4ALAAI5JTfXVSEBjg6hQZyg6EFjfY

eZhaC+MvGfTLVNg0MV2PrbP7DBAH3D8qd/QxQTc=

X-Google-Smtp-Source: ACHHUZ6yoaPKajUcVh7yeTYuo1xNxJEA8tAx370l2KVRhwOnj+cFNsdGaxmbqNMFkAkTZpT5fUC7bZeZWoeq5X7OeaI=

X-Received: by 2002:a25:ad19:0:b0:b9e:6c59:aa0b with SMTP id

y25-20020a25ad19000000b00b9e6c59aa0bmr12449094ybi.13.1683599596850; Mon, 08

May 2023 19:33:16 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7000:8288:b0:492:8fd2:1cec with HTTP; Mon, 8 May 2023

19:33:16 -0700 (PDT)

From: TOMASZ MADEJSKI

Date: Tue, 9 May 2023 02:33:16 +0000

Message-ID:

Subject: John

To: ritzholidayinn , root , sales ,

salifrasaki , sanni adamu2004

Content-Type: text/plain; charset="UTF-8"



https://bit.ly/3HKyfaz