McAfee Squad phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Jun 2023 08:36:11 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q55n0-000FS7-37

for dave@doctor.nl2k.ab.ca;

Fri, 02 Jun 2023 08:30:02 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Jun 2023 08:30:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f178.google.com ([209.85.222.178]:52431)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q55eh-000EtI-2O

for support@nk.ca;

Fri, 02 Jun 2023 08:21:33 -0600

Received: by mail-qk1-f178.google.com with SMTP id af79cd13be357-75ca95cd9b1so220752085a.0

for ; Fri, 02 Jun 2023 07:19:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685715562; x=1688307562;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=SZTSVmZ9T8LQ/Ph6bUm3Kh/M/4SPeZK+qmcNZBoAOpc=;

b=FDrd6Xq1iX2nMR66Oi6lJ9iqA0pLCx0Fs0iI730aH8li6cZ7ha5mmDSqWqRbE6ed9M

ZzatNhzU8HPMODtvmsHEOAxRWk51v6PyzOBt+esItZSFll+PRhcOJxjhNJKJ8e0kg58T

TVwS3sPPeVjiqvo6Dwy3VcvlyUEJNNU4Ok+IIipg1dzvBEUhWeQWT4ti5TKC2TCs2oz4

PpPXaVXWrN8v4auw3Xb1wGugk47C+BpcB6cguh6MwZz4LUgdEP1G2FAWz3goYN2i1Pww

QxrYbzxb6plR3H/ACvOtKK9+pNNn9ucQMb/OdP8f1aoRmOHT0qBjbXJQrspTh+rgc9uN

yInA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685715562; x=1688307562;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=SZTSVmZ9T8LQ/Ph6bUm3Kh/M/4SPeZK+qmcNZBoAOpc=;

b=ZE3K9xarw7CWLNmqLamlBlFBEODJ0SOOA7HboMj9A+mBy5UNaapLlR6yqBon7sprt+

9iJMel91Qu3rBq6hVlJPYV+sp0+44Fuw15zeOcSP+z69zXRy3PHd59LcWGEGa8J6PzP+

DNaKpX6H1xsSf5Dqy/bzLrG0KbLVkT9A0gY6b/Oi+8aQa7CFd03o/hynJ0So1AOfruzh

wnWx/CtGuZQ3NNarDf11xjTWc/CMPKh4oncWt6iFlbuNSclpkPi47lfP1gCFICLYw39q

NqZJ28Uo1j6JDsT+DIttg8elRYyY9ru7D057AwSFpqD+DAFvo2zbGEr1R2dcwmSzO8Ui

cpLQ==

X-Gm-Message-State: AC+VfDwaDHkE9np+RUxeUK189oJGrlA08c3bB7VoraM4ph/V7skELhk8

X2yfYgsRvbknl0cMQrYhDJka6BKlvx4eiw4=

X-Google-Smtp-Source: ACHHUZ5Mv3vtYx7VixyjQeyjjqyy0dZv4JgH8siRscPN/ZqckaV5FT0fWB0hoveFfhNJSy6tQMG3Sg==

X-Received: by 2002:a05:620a:8b87:b0:75b:23a1:3680 with SMTP id qx7-20020a05620a8b8700b0075b23a13680mr11128135qkn.65.1685715561571;

Fri, 02 Jun 2023 07:19:21 -0700 (PDT)

Received: from 194.124.76.45 ([194.124.76.45])

by smtp.gmail.com with ESMTPSA id d17-20020a05620a141100b0074e389245e6sm672998qkj.41.2023.06.02.07.19.20

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 02 Jun 2023 07:19:21 -0700 (PDT)

Message-ID: <6479fa69.050a0220.79f79.1621@mx.google.com>

From: "Evelyn Harrison"

Subject: Update Regarding Your PC PRO Shield182920

To: "support"

Content-Type: multipart/alternative; boundary="lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh"

MIME-Version: 1.0

Date: Fri, 2 Jun 2023 19:49:23 +0530

X-Antivirus: AVG (VPS 230602-4, 6/2/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi there, support@nk.ca



Subscription Renewed Successfully!



Dear valued customer, we are glad to see you joining us again this yea=

r.



This is to inform you that your PC and Network Protection annual subsc=

ription has been successfully renewed and reactivated.



The subscription started today (June, 02, 2023) and it will remain act=

ive until June, 01, 2024 unless you choose to unsubscribe or stop auto=

renewal.



The annual fee of $ 389.95 is processed from the updated payment mode,=

this year charge will reflect on the statement as DVT-RC charge withi=

n 24 hours.



Need Support? Contact our support staff by calling +1 (830) 386 4964.



Below is your subscription information:



Order/Reference ID: 319-2478-2478

PC Care and Network Protection Shield

Seller's Name: MCAfee Total Corp.

Payment Mode: Automatic Debit

Amount Paid: $ 389.95



In any circumstances you wish to cancel the subscription or drop all t=

he charges and get the full amount refunded back, please contact us im=

mediately.









Regards,



Evelyn Harrison

(Sr. Manager) Customer Care Dept.

Tollfree Number # +1 (830) 386 4964.





--lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi there, su=

pport@nk.ca



Subscription Renewed Successf=

ully!



Dear valued customer, we are glad to =

see you joining us again this year.



This is to inform you that your PC an=

d Network Protection annual subscription has been successfully renewed=

and reactivated.



The subscription started today (June,=

02, 2023) and it will remain active until June, 01, 2024 unless you c=

hoose to unsubscribe or stop auto renewal.



The annual fee of $ 389.95 is process=

ed from the updated payment mode, this year charge will reflect on the=

statement as DVT-RC charge within 24 hours.



Need Support? Contact our sup=

port staff by calling +1 (830) 386 4964.


align: center;">

Below is your subscription in=

formation:



 Order/Reference ID: 775-9661-96=

61

nsform: none; text-indent: 0px; letter-spacing: normal; font-family: "=

Times New Roman"; font-size: medium; font-style: normal; font-weight: =

400; word-spacing: 0px; float: none; display: inline !important; white=

-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255,=

255); font-variant-ligatures: normal; font-variant-caps: normal; -web=

kit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color: initial;'>PC Care and=

Network Protection Shield

Seller's Name: MCAfee Total Corp.=


Payment Mode: Automatic Debit

); text-transform: none; text-indent: 0px; letter-spacing: normal; fon=

t-family: "Times New Roman"; font-size: medium; font-style: normal; fo=

nt-weight: 400; word-spacing: 0px; float: none; display: inline !impor=

tant; white-space: normal; orphans: 2; widows: 2; background-color: rg=

b(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=

ial; text-decoration-style: initial; text-decoration-color: initial;'>=

Amount Paid: $ 389.95




ext-transform: none; text-indent: 0px; letter-spacing: normal; font-fa=

mily: "Times New Roman"; font-size: medium; font-style: normal; font-w=

eight: 400; word-spacing: 0px; float: none; display: inline !important=

; white-space: normal; orphans: 2; widows: 2; background-color: rgb(25=

5, 255, 255); font-variant-ligatures: normal; font-variant-caps: norma=

l; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial;'>In a=

ny circumstances you wish to cancel the subscription or drop all the c=

harges and get the full amount refunded back, please contact us immedi=

ately.






Regards,



Evelyn Harrison
(Sr. Manager) Cust=

omer Care Dept.
Tollfree Number &nb=

sp;+1 (830) 386 4964.







--lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh--



Geek Squad phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Jun 2023 07:55:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q55F0-0008nX-00

for dave@doctor.nl2k.ab.ca;

Fri, 02 Jun 2023 07:54:54 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Jun 2023 07:54:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f175.google.com ([209.85.160.175]:47212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q538S-0001xJ-2m

for doctor@nl2k.ca;

Fri, 02 Jun 2023 05:40:03 -0600

Received: by mail-qt1-f175.google.com with SMTP id d75a77b69052e-3f6b20ad49dso17679341cf.2

for ; Fri, 02 Jun 2023 04:38:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685705875; x=1688297875;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=rI0nZcqHAEMaGh1i8fBMLx7NQQ+zU9s52F9kpN/h+jY=;

b=Q1xXzrA+Yuk3w1Bo+Vnk4mH6YNixN8FRtTxdIxFIqcpCQqmD7s57TdW3/CfW8HcRRy

OpM9sqqlQbiK2fII1paMlMkFGcidZbdXgtzegKGiMfuGS06ouPP6GIeerXAmsH82Dei/

yX18TBVL58U2F3l0jopo7bqcFTMYLTYXKC3jPYAIBrobbC1O5vZIWgJ0fidDK0PbNqO5

zVrv3rip1m2pY/C8cZLUN458nc0iNn2u68FrLxtsZwoRJfMDs1pDcI3ICKJX0AopkU4F

lnJT0s6KXQ3RFxD2YADwRASZP4PywpsLnAVvR/Hs74r58bnCWHg/naiYcd3h2nDZAkPQ

rgjQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685705875; x=1688297875;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=rI0nZcqHAEMaGh1i8fBMLx7NQQ+zU9s52F9kpN/h+jY=;

b=QybTuqGhdHwJ6d8EwFfYspf0WqeYH/1E8adHM5Jpxcy45NFeO/8ncOtWSKvb1a3eks

1YMNamN/B/95kB7MQlBZOA34Z0fzQryW0vNuxE2fF53zZPyIcmpKVZsp3uOkE9mdrPNc

VRINoRQOE/t4ivHe9UyoWF0KSnn7aDZuy2gWEpgddnlO7gLcklGoh9e7v5uYyyX0D/0Z

8fvf7GtQD7Dvc4v40wMPr41QgeIRAeeWozcGJRpRZhrlWzpUDsvoaqfEFSUE+rX1Ru18

Am0qM4qzZRU9ug/FkMkpPm8hcg5obu0uNjjZm61B6Ij9WjM4orxjY1L+PhhjvJC/BoqH

5RxA==

X-Gm-Message-State: AC+VfDyY+61pfZzc+kqlejVY5u8n0moDKjwkOpzplFIz4QMmnWV+zKFW

6SS1c/Zc9S3sPXbSkT8NAHxbBE3heFdjkkbQP1/RWA==

X-Google-Smtp-Source: ACHHUZ4kFBIrwiKynWqsYXaWU+A4K1dCnAMa7f2m+gaRSzGJ1bS0lWqCGfSb5/KcUYDYMbF47/SJ3A==

X-Received: by 2002:ac8:4e8d:0:b0:3f4:f1f8:9383 with SMTP id 13-20020ac84e8d000000b003f4f1f89383mr15985780qtp.52.1685705875438;

Fri, 02 Jun 2023 04:37:55 -0700 (PDT)

Received: from 185.199.103.221 ([185.199.103.221])

by smtp.gmail.com with ESMTPSA id c27-20020ac84e1b000000b003f6aa9d7883sm667387qtw.13.2023.06.02.04.37.53

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 02 Jun 2023 04:37:55 -0700 (PDT)

Message-ID: <6479d493.c80a0220.9d421.0f66@mx.google.com>

From: "Eric L. Byrd"

Subject: Payment Confirmation Details@@GGCLLOU

To: "doctor"

Content-Type: multipart/alternative; boundary="eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY"

MIME-Version: 1.0

Date: Fri, 2 Jun 2023 04:37:54 -0700

X-Antivirus: AVG (VPS 230602-4, 6/2/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi there, doctor@nl2k.ca



Subscription Renewed Successfully!



Dear valued customer, we are glad to see you joining us again this yea=

r.



This is to guide you that your PC and Network Protection yearly member=

ship has been renewed and reactivated successfully.



The subscription started today (June, 02, 2023) and it will remain act=

ive until (June, 01, 2024) unless you choose to unsubscribe or stop au=

to renewal.



The annually price of ($ 329.96) is handled using the new payment opti=

on; this year's charge will appear on the bill as DVT-RC within 24 hou=

rs.





Need Help? Please connect with our support team at +1 (833) 780 1274.







Below is your subscription information:



Order/Reference ID: 983-4737-0354

PC Care and Network Protection Shield

Seller's Name: GEEK Squad Inc.

Payment Mode: Automatic Debit

Amount Paid: $ 329.96







In any circumstances you wish to cancel the subscription or drop all t=

he charges and get the full amount refunded back, please contact us im=

mediately.









Thank You Again!





Nicole R. Colman

(Sr. Manager) Customer Care Dept.=E2=80=8B

Tollfree Number #=20



+1 (833) 780 1274.





--eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">


; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=

nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=

rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=

ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;'>
5px;">Hi there, doctor@nl2k.ca


r; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter=

-spacing: normal; font-family: "Times New Roman"; font-size: medium; f=

ont-style: normal; font-weight: 400; margin-bottom: 10px !important; w=

ord-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-var=

iant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke=

-width: 0px; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial;'>
15px;">Subscription Renewed Succes=

sfully!


0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: norm=

al; font-family: "Times New Roman"; font-size: medium; font-style: nor=

mal; font-weight: 400; margin-bottom: 10px !important; word-spacing: 0=

px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; t=

ext-decoration-thickness: initial; text-decoration-style: initial; tex=

t-decoration-color: initial;'>Dear va=

lued customer, we are glad to see you joining us again this year.
n>


orm: none; text-indent: 0px; letter-spacing: normal; font-family: "Tim=

es New Roman"; font-size: medium; font-style: normal; font-weight: 400=

; margin-bottom: 10px !important; word-spacing: 0px; white-space: norm=

al; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;'>This is to guide you that yo=

ur PC and Network Protection yearly membership has been renewed and re=

activated successfully.


r: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacin=

g: normal; font-family: "Times New Roman"; font-size: medium; font-sty=

le: normal; font-weight: 400; margin-bottom: 10px !important; word-spa=

cing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-li=

gatures: normal; font-variant-caps: normal; -webkit-text-stroke-width:=

0px; text-decoration-thickness: initial; text-decoration-style: initi=

al; text-decoration-color: initial;'>=

The subscription started today (June, 02, 2023) and it will remain act=

ive until (June, 01, 2024) unless you choose to unsubscribe or stop au=

to renewal.


0); text-transform: none; text-indent: 0px; letter-spacing: normal; f=

ont-family: "Times New Roman"; font-size: medium; font-style: normal; =

font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; w=

hite-space: normal; orphans: 2; widows: 2; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-dec=

oration-color: initial;'>The annually=

price of ($ 329.96) is handled using the new payment option; this yea=

r's charge will appear on the bill as DVT-RC within 24 hours.

n>


orm: none; text-indent: 0px; letter-spacing: normal; font-family: "Tim=

es New Roman"; font-size: medium; font-style: normal; font-weight: 400=

; margin-bottom: 10px !important; word-spacing: 0px; white-space: norm=

al; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;'>Need Help? Please connect wi=

th our support team at +1 (83=

3) 780 1274.



; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=

nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=

rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=

ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;'>
5px;">Below is your subscription i=

nformation:


rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: =

normal; font-family: "Times New Roman"; font-size: medium; font-style:=

normal; font-weight: 400; margin-bottom: 10px !important; word-spacin=

g: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0p=

x; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial;'>&nb=

sp;Order/Reference ID: 983-4737-8203

gn: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0p=

x; letter-spacing: normal; font-family: "Times New Roman"; font-size: =

15px; font-style: normal; font-weight: 400; word-spacing: 0px; float: =

none; display: inline !important; white-space: normal; orphans: 2; wid=

ows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: =

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial; text-decoration-style: initial; text-=

decoration-color: initial;'>PC Care and Network Protection Shield
n>
Seller's Name: GEEK Squad Inc.<=

br>Payment Mode: Automatic Debit

, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: norma=

l; font-family: "Times New Roman"; font-size: 15px; font-style: normal=

; font-weight: 400; word-spacing: 0px; float: none; display: inline !i=

mportant; white-space: normal; orphans: 2; widows: 2; background-color=

: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-cap=

s: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initia=

l;'>Amount Paid: $ 329.96

<=

/span>


-align: center; color: rgb(0, 0, 0); text-transform: none; text-indent=

: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-si=

ze: medium; font-style: normal; font-weight: 400; margin-bottom: 10px =

!important; word-spacing: 0px; white-space: normal; orphans: 2; widows=

: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial;'>
'color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-s=

pacing: normal; font-family: "Times New Roman"; font-size: 15px; font-=

style: normal; font-weight: 400; word-spacing: 0px; float: none; displ=

ay: inline !important; white-space: normal; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'>In any circumstances you wish to cancel the subscript=

ion or drop all the charges and get the full amount refunded back, ple=

ase contact us immediately.


color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-sp=

acing: normal; font-family: "Times New Roman"; font-size: medium; font=

-style: normal; font-weight: 400; margin-bottom: 10px !important; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>
x;">


; text-transform: none; text-indent: 0px; letter-spacing: normal; font=

-family: "Times New Roman"; font-size: medium; font-style: normal; fon=

t-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; whit=

e-space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;'>Best regards,
span>


nsform: none; text-indent: 0px; letter-spacing: normal; font-family: "=

Times New Roman"; font-size: medium; font-style: normal; font-weight: =

400; margin-bottom: 10px !important; word-spacing: 0px; white-space: n=

ormal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thi=

ckness: initial; text-decoration-style: initial; text-decoration-color=

: initial;'>


n: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px=

; letter-spacing: normal; font-family: "Times New Roman"; font-size: m=

edium; font-style: normal; font-weight: 400; margin-bottom: 10px !impo=

rtant; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; =

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-tex=

t-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial;'>Nicole R. Colman
r>(Sr. Manager) Customer Care Dept.=E2=80=8B
Tollfree Number=

 
>


transform: none; text-indent: 0px; letter-spacing: normal; font-family=

: "Times New Roman"; font-size: medium; font-style: normal; font-weigh=

t: 400; margin-bottom: 10px !important; word-spacing: 0px; white-space=

: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial;'>
-size: 15px;">+1 (833) 780 1274.







--eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY--



Investmest Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 01 Jun 2023 15:21:15 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q4peM-00030x-1c

for dave@doctor.nl2k.ab.ca;

Thu, 01 Jun 2023 15:16:02 -0600

Resent-From: The Doctor

Resent-Date: Thu, 1 Jun 2023 15:16:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f41.google.com ([209.85.210.41]:53399)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q4oVk-000E18-2V

for root@doctor.nl2k.ab.ca;

Thu, 01 Jun 2023 14:03:08 -0600

Received: by mail-ot1-f41.google.com with SMTP id 46e09a7af769-6af6f49e41cso1238063a34.2

for ; Thu, 01 Jun 2023 13:01:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685649659; x=1688241659;

h=content-transfer-encoding:subject:to:from:mime-version:date

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=C1YSb3yJE7ofjGTCfBtaOouH6Z05zXsAMqw2zwGm1WA=;

b=plNOmvluynWPTpHSNSVi6PyW4pQi7pjStgzPMCkEdMh7XYZKaqca2wdMoDl7AzeneA

iHbPe+w7dXp2QUw11Kc3rNsVvahNtqg49Ucfdxfm+RWmpv9ngCzMmBGcsubVfwqVEjXh

gb5F+2pSUgoBA6bY1I5bF2ebkjrOL8tULpR1pag8glmKkU+Il9EL/WT3kXqR5NIGnGE5

wtHKPmctE5k7ky2F8RtAJXIUh6CpKURRT0Y54O/no6UTS+o6z0uYlCNhTfTvz+FlHyfR

U5Lai5QDZAEc3lYasn3Cxj/fYcypbNXXDTjnMr0DkIN6jvjBXUU99VuTx1zMAPMNm6Cw

l8ng==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685649659; x=1688241659;

h=content-transfer-encoding:subject:to:from:mime-version:date

:message-id:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=C1YSb3yJE7ofjGTCfBtaOouH6Z05zXsAMqw2zwGm1WA=;

b=f5Ju5nTJJxHXZzRIEGwLRXAlagJDgZvpj2HUs+7yRpOb9UAjHFKMTNZxeD9CmuOp2m

8pQ0adTBZOoo3vvdFtXFmJSk7Z5V4t0hHpjzt2nKupty5iqNlAPoiIkxIM/ZfEprkC3G

gG+f3Ab6ZlOM7cDql80kmsRLThEWNpUNXSkyT5/v1wvcgIfzmaSHJgMde9f/FvLYm+15

ChxTtG2o7HyGnyqJdFbDJHwy2B/jq+KjpEsQpd0h4uAOqzcNYnD1xe/4nxJdoD+ssVro

Cz73WPpCx8Hot8cEYO+KzCX1hiuIjB18xEcGXOVv7+YWrEKCnNxtY6hcz3K7vQqftwhs

wUAQ==

X-Gm-Message-State: AC+VfDzQ5yDvAND6UDbSuZ1t2XuZ5K0/v/a3W5RuAauS3gY0NH9dO3um

2SMoIGNzVfIabQM/mPoz+CJywjD7pQy3NXdo

X-Google-Smtp-Source: ACHHUZ5+fU8rdunS9dQ7GG/nyBmaQ1fU8z5BDp3ntkENjiQQXZaNQCpC6aehlnWwF0UEITuv2q4Kzg==

X-Received: by 2002:a05:6830:1607:b0:6af:8210:8177 with SMTP id g7-20020a056830160700b006af82108177mr403799otr.31.1685649659241;

Thu, 01 Jun 2023 13:00:59 -0700 (PDT)

Received: from mi3-wss7 (mi3-wss7.my-hosting-panel.com. [204.93.216.87])

by smtp.gmail.com with ESMTPSA id 7-20020a250b07000000b00bb09977b0basm2608988ybl.6.2023.06.01.13.00.58

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 01 Jun 2023 13:00:58 -0700 (PDT)

Message-ID: <6478f8fa.250a0220.e710a.b35f@mx.google.com>

Date: Thu, 01 Jun 2023 13:00:58 -0700 (PDT)

X-Google-Original-Date: 1 Jun 2023 13:00:58 -0700

MIME-Version: 1.0

From: testtest4744@gmail.com

To: root@doctor.nl2k.ab.ca

Subject: www.Tehnovez.com

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Name: ThomasGlons Email: root@doctor.nl2k.ab.ca Phone: 87559271766





Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[testtest4744(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[testtest4744(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.41 listed in wl.mailspike.net]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} www.Tehnovez.com

X-Antivirus: AVG (VPS 230601-6, 6/1/2023), Inbound message

X-Antivirus-Status: Clean



Name: ThomasGlons

Email: root@doctor.n=

l2k.ab.ca

Phone: 87559271766

Mesage:
b>
s://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj60-NrnuMv=

ZV-Fm0wPNqzkvGqaHTacm5nITIUXcOWZ1HrQ5C7_kbtkJRP3qvwVTCJpeIyrCYUtM=

PLRsUwVXgloCRHobK3mWAW4X0Rxo3_PbSVjHSE2Zx2qbTh7dPLDdL7inGLvX6OAa5=

xXzqFu0jOUZv4JtJ5rE-fWvEHfkXUWsRnCvbTsff-pavbHjg/s1024/01.jpg">
a>
THE CRYPTO FORTUNE FORMULA: $1,000,000 EARNINGS FROM A $2=

50 INVESTMENT http://tinyl.net/cIbR

=20



Nigerian spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 01 Jun 2023 15:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q4pe1-0002ey-14

for dave@doctor.nl2k.ab.ca;

Thu, 01 Jun 2023 15:15:41 -0600

Resent-From: The Doctor

Resent-Date: Thu, 1 Jun 2023 15:15:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f196.google.com ([209.85.208.196]:49206)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q4o7A-0006zb-1Z

for doctor@doctor.nl2k.ab.ca;

Thu, 01 Jun 2023 13:37:43 -0600

Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-2af2d092d7aso18530631fa.2

for ; Thu, 01 Jun 2023 12:35:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685648134; x=1688240134;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=pOTPZ6SrykJb5Nw5iTGk3EbveKXQluUKzCDlOxcgH/4=;

b=QRoYb5ROEwH3uGtW7X0UWGjI3fbZoS0Se/xFHpF5mVNvQScbRTSABu+I1ByB8IYyIh

lrZxaOuo4vdCZ+WAgUS+mlm6X+q/A1NDv9uQV6bt7Dx/dqBY1VjFQ+w0kREyVCDhy8UD

X58PglCKmokihNhJp6jK98BavR4SQ36yIIypKv4rUfol0RGHHKXnfyhUApbun9GRQ7mg

QB7u4n/qxuAMutaYDTHvZ0vGRV8AwmeF17/eVmIcEdfCqAEsk6rAFgF1ijJpOUpUUSe5

/+9AienJuqL7xIX6bNR2AB+RcrFWy0eaktUC0JTVccJ1isNrgz2ntnXk3iTERFXoJr6M

tupw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685648134; x=1688240134;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=pOTPZ6SrykJb5Nw5iTGk3EbveKXQluUKzCDlOxcgH/4=;

b=FBhqrgjzZ8nkj8VrNQDl/gCBAeKp9ZPn5UB4MAbcBmLg1LzrI8zZb3VpAcXU7L08Lg

zbJpbvFR8LwPXqz40+Vefwu8wZmBY160HJYMvxDe9eMXdqmofwIGGUZyRjg8POvs+AS0

Dtm8Je/yERIvdZZk83j9Gu+1cV4dHUlDthNPmvDkg6hAqs5qSmkWylUAQMOfwBL8j4lD

JM/1yk134/UylVK4aiaOCnNXzwBkkdzo9K6yagsZKcHY76V/wy216cOJhPoSmUToTSZ7

0sdJbGYZpJOpt9+rn1TDIBe1MHeuhcAN5bbmwhC6GX/doFMc6I9m2WpsQFgx6Wti+AvE

eRoQ==

X-Gm-Message-State: AC+VfDw/asK7XcmgC9XzcVLCSOT0cZNRWJxEkHaHJP+zkn0HfN8e6sSH

usTANGGxUAhLo1HE6cjQUIrR309MNjLoD0oMuKw=

X-Google-Smtp-Source: ACHHUZ5UvO19zLyJraZ3RqR8RtTaLmvA+wbZShTqkh2v5+KfjkrFHk0gcHlUt3YnN3J7dcvCfkBIWbdoMm3a65ZgzNM=

X-Received: by 2002:a2e:95da:0:b0:2a8:c75c:96cb with SMTP id

y26-20020a2e95da000000b002a8c75c96cbmr301785ljh.1.1685648133683; Thu, 01 Jun

2023 12:35:33 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a2e:9dd5:0:b0:2ac:577d:1ff7 with HTTP; Thu, 1 Jun 2023

12:35:33 -0700 (PDT)

Reply-To: mrssusanw203@gmail.com

From: Mrs Susan Williams

Date: Thu, 1 Jun 2023 19:35:33 +0000

Message-ID:

Subject: From Mrs Susan Williams.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.7

X-Spam_score_int: 197

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved, Thank you for your response. I am Mrs Susan

Williams an aging widow suffering from long time illness. I am currently admitted

in a private hospital in Abidjan Cote D‘Ivoire. I have some funds I inhe

[...]



Content analysis details: (19.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.196 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pglenncarlo(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrssusanw203(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.5 HK_SCAM_N8 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

2.0 HK_SCAM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.196 listed in wl.mailspike.net]

Subject: {SPAM?} From Mrs Susan Williams.

X-Antivirus: AVG (VPS 230601-6, 6/1/2023), Inbound message

X-Antivirus-Status: Clean



Dear Beloved,



Thank you for your response. I am Mrs Susan Williams an aging widow

suffering from long time illness. I am currently admitted in a private

hospital in Abidjan Cote D=E2=80=98Ivoire. I have some funds I inherited fr=

om

my late loving husband, the sum of US$ 4.700.000 which he deposited in

bank here. I need a very honest and God fearing person that can use

these funds for God's work and 15% out of the total funds will be for

your compensation for doing this work of God.



Please if you would be able to use these funds for the Lord's work

kindly reply me as soon as possible for more detail.





Yours in Christ.



Mrs Susan Williams.