office depot phish from Reliable Communications s.r.o. Moscow, Russia

Posted by Dave Yadallee on Wednesday, June 7. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Jun 2023 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q70EJ-000Q0o-2W

for dave@doctor.nl2k.ab.ca;

Wed, 07 Jun 2023 14:58:07 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Jun 2023 14:58:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.133.46.244] (port=56162 helo=mailexcite.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6v0n-0006m8-1W

for root@nk.ca;

Wed, 07 Jun 2023 09:23:53 -0600

MIME-Version: 1.0

Message-Id:

From: Office Depot

Subject: root -you've been chosen to receive a brand new Dell Inspiron 16

To: root@nk.ca

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset=UTF-8

Date: Wed, 07 Jun 2023 17:21:34 +0200

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Office Depot - If you want to unsubscribe, please click here.

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[195.133.46.244 listed in psbl.surriel.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.4 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[195.133.46.244 listed in wl.mailspike.net]

Subject: {SPAM?} root -you've been chosen to receive a brand new Dell Inspiron 16

X-Antivirus: AVG (VPS 230607-0, 6/6/2023), Inbound message

X-Antivirus-Status: Clean

Office Depot -

If you want to unsubscribe, please click

here.

NetFlix phish from SingleHop LLC

Posted by Dave Yadallee on Wednesday, June 7. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Jun 2023 21:32:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6jrm-000HWF-0C

for dave@doctor.nl2k.ab.ca;

Tue, 06 Jun 2023 21:29:46 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Jun 2023 21:29:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps.webeteerprojects.com ([184.154.120.189]:55906)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6exS-0009bm-2i

for root@nk.ca;

Tue, 06 Jun 2023 16:15:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=cimon.webeteerprojects.com; s=default; h=Content-Transfer-Encoding:

Content-Type:MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=WJi9VUiq8p8bsOt3xMUseS5PBepUTPy9joqgjb/5YRM=; b=GgI2q5sD3mQr5pUpdSMAUUQjQ+

hAtFsb+8dgwxnGeHOFjVyI9EbdTSlVragDu4oyZI2H8XhCKFLDvjn5VLlj0g+HOiir2tozM2c4soS

QSFbe3g8sQ4x55Qav30/dZTzEaK+GwQSfucnPmLa9SmQcskdvvFvNspvvrFi4s71LNkzaIZePgEps

y7W1q5PO7CsCnxhV3c0XgOpTC/mMKWjoBsKtlpZZX7xfTYZYsarCa/K5DZhrz0tJygkmZ+o40haEL

nwp432MNlLf/OxNnkfLWo4YrahcECIU3GQsZrzchDwhT+1yERT/13E9cr9hdwqtBLrwmayFKEE0EE

sXtyUACQ==;

Received: from cimon by vps.webeteerprojects.com with local (Exim 4.96)

(envelope-from )

id 1q6evR-00021P-04

for root@nk.ca;

Tue, 06 Jun 2023 22:13:13 +0000

To: root@nk.ca

Subject: Your Membership will be lost

X-PHP-Script: cimon.webeteerprojects.com/iBc7k1J8lQa.php for 102.156.110.255

X-PHP-Originating-Script: 1096:iBc7k1J8lQa.php

Date: Tue, 6 Jun 2023 22:13:13 +0000

From: N E T F L l X

Message-ID: <0d47f19439b0bd97d4f5d07ff9d759b2@cimon.webeteerprojects.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_0d47f19439b0bd97d4f5d07ff9d759b2"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps.webeteerprojects.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [1096 993] / [47 12]

X-AntiAbuse: Sender Address Domain - cimon.webeteerprojects.com

X-Get-Message-Sender-Via: vps.webeteerprojects.com: authenticated_id: cimon/from_h

X-Authenticated-Sender: vps.webeteerprojects.com: f3d7478bd5a0ce5d51bfbd1f5b46855a@cimon.webeteerprojects.com

X-Source:

X-Source-Args: php-fpm: pool cimon_webeteerprojects_com

X-Source-Dir: cimon.webeteerprojects.com:/public_html

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: SpotifyLetter3 We're sorry to say goodbye We're having some

trouble with your current billing information. You can no longer to enjoy

watching your best films.

Content analysis details: (7.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 PHP_SCRIPT Sent by PHP script

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Your Membership will be lost

X-Antivirus: AVG (VPS 230606-6, 6/6/2023), Inbound message

X-Antivirus-Status: Clean

This is a multi-part message in MIME format.

--b1_0d47f19439b0bd97d4f5d07ff9d759b2

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

SpotifyLetter3

We're sorry to say goodbye

Â

We're having some trouble with your current billing information. You can no longer to enjoy watching your best films.

So you have to update your payment details.

Would you like to retry running your account again?

RETRY PAYMENT

GetÂ for: iPhoneiPadAndroidOther

This message was sent to #&email;#. If you have questions or complaints, please contact us.

Terms of UsePrivacy PolicyContact Us

--b1_0d47f19439b0bd97d4f5d07ff9d759b2

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

l4/strict.dtd">

v=3D"content-type">SpotifyLetter3

=20

=20

t; width: 100% ! important;">=20

=20

=20

=20

=20

=20

ter" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
>

tica Neue',Helvetica,Arial,sans-serif; font-size: 12px; line-height: 18px; =

color: rgb(85, 85, 85);" align=3D"left" valign=3D"top">

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

er-collapse: collapse; width: 100%; height: 50px;" cellpadding=3D"0" cellsp=

acing=3D"0" height=3D"50" width=3D"100%">
e ; margin: 0px; padding: 0px;" valign=3D"middle">
um none ; margin: 0px; padding: 0px; height: 20px;" height=3D"20" valign=3D=

"middle">
lign=3D"middle">
ght: 20px;" height=3D"20" valign=3D"middle">

ing: 0px; height: 20px;" height=3D"20" valign=3D"middle">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	gn: center;" valign=3D"middle"> margin: 0px; padding: 0px; text-decoration: none;" target=3D"_blank"> tyle=3D"width: 148px; height: 52px;" alt=3D"" src=3D"https://encrypted-tbn0= .gstatic.com/images?q=3Dtbn:ANd9GcQF-6n5Bvkl9WKdTfGpa8kTvvUXZdGd7m1cmrntRg4= GF1fAv9qQRA&s">	h: 6.25%;" valign=3D"middle" width=3D"6%">
er: medium none ; margin: 0px; padding: 0px; height: 20px;" height=3D"20" v= align=3D"middle">

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

er-collapse: collapse; width: 100%;" cellpadding=3D"0" cellspacing=3D"0" wi=

dth=3D"100%">
x;" valign=3D"middle">
ng: 0px; height: 28px;" height=3D"28" valign=3D"middle">
lign=3D"middle">
ght: 16px;" height=3D"16" valign=3D"middle">

tyle=3D"border: medium none ; margin: 0px; padding: 0px; height: 28px;" hei=

ght=3D"28" valign=3D"middle">

x; width: 6.25%;" valign=3D"middle" width=3D"6%">

=3D"middle">

ont-family: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; text-deco=

ration: none; color: black; font-size: 32px; font-weight: bold; line-height=

: 36px; letter-spacing: -0.04em; text-align: center;" align=3D"center">We'r=

e sorry to say goodbye

nt-family: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; text-decor=

ation: none; color: rgb(85, 85, 85); font-size: 32px; font-weight: bold; li=

ne-height: 36px; letter-spacing: -0.04em; text-align: center;" align=3D"cen=

ter">=C2=A0

x 0px; font-family: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; f=

ont-weight: 200; text-decoration: none; color: black; font-size: 17px; line=

-height: 23px; text-align: center;" align=3D"center">We're having some=

trouble with your current billing information. You can no longer to enjoy =

watching your best films.

0px; font-family: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; fo=

nt-weight: 200; text-decoration: none; color: black; font-size: 17px; line-=

height: 23px; text-align: center;" align=3D"center">

So you have to update your payment details.

px; width: 6.25%;" valign=3D"middle" width=3D"6%">

er: medium none ; margin: 0px; padding: 0px; height: 16px;" height=3D"16" v=

align=3D"middle">

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

er-collapse: collapse; width: 100%;" cellpadding=3D"0" cellspacing=3D"0" wi=

dth=3D"100%">
x;" valign=3D"middle">
ng: 0px;" valign=3D"middle">
ght: 35px;" height=3D"35" valign=3D"middle">

padding: 0px; width: 6.25%;" valign=3D"middle" width=3D"6%">

ily: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; font-weight: 200=

; text-align: left; text-decoration: none; font-size: 14px; line-height: 1.=

1em;" align=3D"left" valign=3D"middle">

x;">

one ; margin: 0px; padding: 0px; text-decoration: none; width: 240px; heigh=

t: 44px; background-color: rgb(30, 215, 96); color: rgb(255, 255, 255); dis=

play: block;" target=3D"_blank">

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

0px; margin-bottom: 0px; border-collapse: collapse; width: 240px; height: =

44px; background-color: red;" cellpadding=3D"0" cellspacing=3D"0">
yle=3D"border: medium none ; margin: 0px; padding: 0px;" valign=3D"middle">=

ddle">

l-align: middle; width: 22px; background-color: red;">

-align: middle; font-family: Circular,"Helvetica Neue",Helvetica,Arial,sans=

-serif; text-decoration: none; color: black; font-size: 13px; font-weight: =

bold; height: 100%; line-height: 16px; text-align: center; text-transform: =

uppercase; background-color: red;">RETRY PAYMENT

edium none ; margin: 0px; padding: 0px; vertical-align: middle; width: 22px=

; background-color: red;">

px; width: 6.25%;" valign=3D"middle" width=3D"6%">

er: medium none ; margin: 0px; padding: 0px; height: 35px;" height=3D"35" v=

align=3D"middle">

=20

=20

=20

=20

=20

=20

er-collapse: collapse; width: 100%;" cellpadding=3D"0" cellspacing=3D"0" wi=

dth=3D"100%">
x;" valign=3D"middle">
ng: 0px; height: 22px;" height=3D"22" valign=3D"middle">

tyle=3D"border: medium none ; margin: 0px; padding: 0px; height: 22px;" hei=

ght=3D"22" valign=3D"middle">

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

margin-bottom: 0px; border-collapse: collapse; background-color: rgb(34, 31=

, 31); width: 100%;" cellpadding=3D"0" cellspacing=3D"0">
rder: medium none ; margin: 0px; padding: 0px;" valign=3D"middle">
=3D"border: medium none ; margin: 0px; padding: 0px; height: 25px;" height=

=3D"25" valign=3D"middle">
lign=3D"middle">
ght: 25px;" height=3D"25" valign=3D"middle">
lign=3D"middle">
ght: 12px;" height=3D"12" valign=3D"middle">
lign=3D"middle">
ght: 12px;" height=3D"12" valign=3D"middle">
lign=3D"middle">
ght: 25px;" height=3D"25" valign=3D"middle">
lign=3D"middle">
ght: 33px;" height=3D"33" valign=3D"middle">
lign=3D"middle">
lign=3D"middle">
ght: 20px;" height=3D"20" valign=3D"middle">

margin: 0px; padding: 0px; vertical-align: middle; height: 25px;">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	-align: middle;"> https://encrypted-tbn0.gstatic.com/images?q=3Dtbn:ANd9GcRmMSesQWwAu29LgyKWK= zZxMmVkIZsTON5yPZyzsvbB__V6R9Ka&usqp=3DCAU">	.25%;" valign=3D"middle" width=3D"6%">
er: medium none ; margin: 0px; padding: 0px; height: 25px;" height=3D"25" v= align=3D"middle">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	=3D"middle"> 0px; padding: 0px; background-color: rgb(209, 213, 217); height: 1px;">	px; width: 6.25%;" valign=3D"middle" width=3D"6%">
er: medium none ; margin: 0px; padding: 0px; height: 12px;" height=3D"12" v= align=3D"middle">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	ily: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; font-weight: 200= ; text-align: left; text-decoration: none; color: rgb(136, 137, 140); font-= size: 11px; line-height: 1.65em;" align=3D"left" valign=3D"middle"> Get= =C2=A0 for: r-color: -moz-use-text-color rgb(195, 195, 195) -moz-use-text-color -moz-us= e-text-color; border-width: medium 1px medium medium; margin: 0px; padding:= 0px 7px 0px 0px; text-decoration: none; color: rgb(109, 109, 109); font-we= ight: bold;" target=3D"_blank">iPhone : none solid; border-color: -moz-use-text-color rgb(195, 195, 195) -moz-use= -text-color transparent; border-width: medium 1px; margin: 0px; padding: 0p= x 7px; text-decoration: none; color: rgb(109, 109, 109); font-weight: bold;= " target=3D"_blank">iPad lor: -moz-use-text-color rgb(195, 195, 195) -moz-use-text-color transparent= ; border-width: medium 1px; margin: 0px; padding: 0px 7px; text-decoration:= none; color: rgb(109, 109, 109); font-weight: bold;" target=3D"_blank">And= roid use-text-color -moz-use-text-color -moz-use-text-color transparent; border-= width: medium medium medium 1px; margin: 0px; padding: 0px 0px 0px 7px; tex= t-decoration: none; color: rgb(109, 109, 109); font-weight: bold;" target= =3D"_blank">Other	adding: 0px; width: 6.25%;" valign=3D"middle" width=3D"6%">
er: medium none ; margin: 0px; padding: 0px; height: 12px;" height=3D"12" v= align=3D"middle">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	=3D"middle"> 0px; padding: 0px; background-color: rgb(209, 213, 217); height: 1px;">	px; width: 6.25%;" valign=3D"middle" width=3D"6%">
er: medium none ; margin: 0px; padding: 0px; height: 25px;" height=3D"25" v= align=3D"middle">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	ily: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; font-weight: 200= ; text-align: left; text-decoration: none; color: rgb(136, 137, 140); font-= size: 11px; line-height: 1.65em;" align=3D"left" valign=3D"middle"> This me= ssage was sent to #&email;#. If you have questions or complaints, please href=3D"" style=3D"border: medium none ; margin: 0px; padding: 0px; font-f= amily: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; text-align: le= ft; color: rgb(109, 109, 109); text-decoration: none; font-weight: bold;" a= lign=3D"left" target=3D"_blank">contact us.	edium none ; margin: 0px; padding: 0px; width: 6.25%;" valign=3D"middle" wi= dth=3D"6%">
er: medium none ; margin: 0px; padding: 0px; height: 33px;" height=3D"33" v= align=3D"middle">
x; width: 6.25%;" valign=3D"middle" width=3D"6%">	ily: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; font-weight: 200= ; text-align: left; text-decoration: none; color: rgb(136, 137, 140); line-= height: 1.65em; font-size: 11px;" align=3D"left" valign=3D"middle"> =3D"" style=3D"border-style: none solid none none; border-color: -moz-use-t= ext-color rgb(195, 195, 195) -moz-use-text-color -moz-use-text-color; borde= r-width: medium 1px medium medium; margin: 0px; padding: 0px 7px 0px 0px; t= ext-decoration: none; color: rgb(109, 109, 109); font-weight: bold;" target= =3D"_blank">Terms of Use border-color: -moz-use-text-color rgb(195, 195, 195) -moz-use-text-color t= ransparent; border-width: medium 1px; margin: 0px; padding: 0px 7px; text-d= ecoration: none; color: rgb(109, 109, 109); font-weight: bold;" target=3D"_= blank">Privacy Policy rder-color: -moz-use-text-color rgb(195, 195, 195) -moz-use-text-color tran= sparent; border-width: medium 1px; margin: 0px; padding: 0px 7px; text-deco= ration: none; color: rgb(109, 109, 109); font-weight: bold;" target=3D"_bla= nk">Contact Us	ing: 0px; width: 6.25%;" valign=3D"middle" width=3D"6%">
x; padding: 0px; height: 12px;" height=3D"12" valign=3D"middle">
er: medium none ; margin: 0px; padding: 0px; height: 25px;" height=3D"25" v= align=3D"middle">

! important; padding: 0pt ! important; height: 1px ! important; width: 1px =

! important;" border=3D"0" height=3D"1" width=3D"1">

--b1_0d47f19439b0bd97d4f5d07ff9d759b2--

McAfee Squad phish from Google / Gmail

Posted by Dave Yadallee on Tuesday, June 6. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Jun 2023 15:36:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6eL2-000GFp-00

for dave@doctor.nl2k.ab.ca;

Tue, 06 Jun 2023 15:35:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Jun 2023 15:35:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f196.google.com ([209.85.222.196]:57679)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6a5L-000PiD-30

for support@nk.ca;

Tue, 06 Jun 2023 11:03:12 -0600

Received: by mail-qk1-f196.google.com with SMTP id af79cd13be357-75ebb3d57d0so203944185a.3

for ; Tue, 06 Jun 2023 10:01:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1686070861; x=1688662861;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=QSt2QhXdxHj24BWjP2kQEeLH+CYFHAftoBZlj+zIBpQ=;

b=htJ8IjRxhLnd4dxP7mrLpUOX6NE5Bs0RmSbHMuM3bLz0PfBAvymgxMTr7Kq/wN8Xv5

vsdlCPIMzDTrJzNtovft6PBApKHoLPaEiiv7kRVxltjyJxHJhZPPx9lWMMELKBOHbRqf

0Gcc2uWf/M8/JDGcxEx8t4GQkRjTxjMXxUjM3V3p0T9bPCQV13PaVhS8dVj0VzA/NHPb

awIsRJDJYH/UW2E8IMdvA3JYJtRbrW5CA868XhAXioSREY/Ho1ju6pfKc49bDFvuPG6J

01u5LkKuf180kMB1FPZ1Hp0u1Bd6WZa1nIZiK6g9ANU66hnAtSsj9I2PGgqfB0qheJ7j

9OVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1686070861; x=1688662861;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=QSt2QhXdxHj24BWjP2kQEeLH+CYFHAftoBZlj+zIBpQ=;

b=eI/lHT5O7e5lOWaLRd4RnGQjgXIz6P0FA8tjsgRQp1NErXS+3Woj+ViK+5AvjYCGjP

L//JgFjNrvyntDE/75sNgEXC5TWilstl2fpB2WuBCPBLIDKErlCKbcSlw8Sp7/oP3jMz

ajzeUVHhlfmix1RajgSIOo2wfnO/VuZTL4jKIh95Gfyb6aLqEicChAjjiUBunsz0WWPO

qrxYmWx9/fh/WyxfWqMoPlFrTl0sA1bI8MOQPpz9AfVKMzUOpZ9kuyJ70jUO4Wz1Ift/

kEtCrxRRPeFVQw6SvTFSWqqIfZ7bbaiGmimnEhzr8CldRT+ZAF7en1f3i3uZQVnm+pj7

c9SQ==

X-Gm-Message-State: AC+VfDx0YKKIOy9vhZcIJXCXwexyTKJ7poS9eAwoVS+swu+xVwTrMx2b

oL46ETw7g+0vjyueMvkyDsYK8vuKN8+I8NJRK9k=

X-Google-Smtp-Source: ACHHUZ5xSQpQoKfeIovRF5uTVAifDZIIUWnk6bR5UQXGveWUDsMjUyoVFtU7nl859dhJyB8/sIfozA==

X-Received: by 2002:a05:6214:212e:b0:626:1052:20f3 with SMTP id r14-20020a056214212e00b00626105220f3mr253353qvc.18.1686070859414;

Tue, 06 Jun 2023 10:00:59 -0700 (PDT)

Received: from 185.187.243.119 ([185.187.243.119])

by smtp.gmail.com with ESMTPSA id lg5-20020a056214548500b0062382e1e228sm5494958qvb.49.2023.06.06.10.00.57

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 06 Jun 2023 10:00:58 -0700 (PDT)

Message-ID: <647f664a.050a0220.804db.f3e0@mx.google.com>

From: "Lauren Mccarthy"

Subject: Check your account statement

To: "support"

Content-Type: multipart/alternative; boundary="SJRCWyUls7XGL=_edmrogw2tr820FF0wpi"

MIME-Version: 1.0

Date: Tue, 6 Jun 2023 22:31:03 +0530

X-Antivirus: AVG (VPS 230606-6, 6/6/2023), Inbound message

X-Antivirus-Status: Clean

This is a multi-part message in MIME format

--SJRCWyUls7XGL=_edmrogw2tr820FF0wpi

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hello there, support@nk.ca

Annual Subscription Automatically Activated!

Customer Unique ID: 943-6737-7816

This email is in reference to your last-year subscription plan, which =

expired yesterday.

As you opted for automatic debit, your "PC and Network Shield" annual =

subscription has been successfully activated and restored.

We have successfully processed an annual fee of $378.99 (a recurring f=

ee), which will reflect on the bank account statement in a few hours.

For assistance, please contact us toll-free at# +1 (830) 386 4964.

Here is your order and subscription information:

MCAfee Total PC Security and Network Shield

Date of order: June 6, 2023

Expiration date: June 5, 2024

Payment Mode: Automatic Debit

Annual Subscription Fee: $378.99

If you find any transactional errors or simply wish to cancel the subs=

cription plan and get a full refund, please contact us immediately to =

avoid disputes.

=20

Best Regards,

Patricia Smith

Customer Helpline Dept. (Manager)

Toll-free number: +1 (830) 386 4964.

--SJRCWyUls7XGL=_edmrogw2tr820FF0wpi

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

, 37, 37);">Hello there, support@nk.ca

=3D"color: rgb(37, 37, 37);">Annual Subscription Automatically Activat=

ed!

"color: rgb(37, 37, 37);">Customer Unique ID: 943-6737-7816

This email is=

in reference to your last-year subscription plan, which expired yeste=

rday.

As you opted =

for automatic debit, your "PC and Network Shield" annual subscription =

has been successfully activated and restored.

We have succe=

ssfully processed an annual fee of $378.99 (a recurring fee), which wi=

ll reflect on the bank account statement in a few hours.

For assistanc=

e, please contact us toll-free at# +1 (830) 386 4964
ong>.

=3D"color: rgb(37, 37, 37);">Here is your order and subscription infor=

mation:

or: rgb(37, 37, 37);">MCAfee Total PC Security and Network Shield

tyle=3D"color: rgb(37, 37, 37);">Date of order: June 6, 2023

"color: rgb(37, 37, 37);">Expiration date: June 5, 2024

lor: rgb(37, 37, 37);">Payment Mode: Automatic Debit

: rgb(37, 37, 37);">Annual Subscription Fee: $378.99

If you find a=

ny transactional errors or simply wish to cancel the subscription plan=

and get a full refund, please contact us immediately to avoid dispute=

s.

Best Regards,=

Patricia Smit=

h
Customer Helpline Dept. (Manage=

r)
Toll-free number:
>+1 (830) 386 4964.=

--SJRCWyUls7XGL=_edmrogw2tr820FF0wpi--

McAfee Squad phish from Google / Gmail

Posted by Dave Yadallee on Friday, June 2. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Jun 2023 08:36:11 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q55n0-000FS7-37

for dave@doctor.nl2k.ab.ca;

Fri, 02 Jun 2023 08:30:02 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Jun 2023 08:30:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f178.google.com ([209.85.222.178]:52431)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q55eh-000EtI-2O

for support@nk.ca;

Fri, 02 Jun 2023 08:21:33 -0600

Received: by mail-qk1-f178.google.com with SMTP id af79cd13be357-75ca95cd9b1so220752085a.0

for ; Fri, 02 Jun 2023 07:19:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685715562; x=1688307562;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=SZTSVmZ9T8LQ/Ph6bUm3Kh/M/4SPeZK+qmcNZBoAOpc=;

b=FDrd6Xq1iX2nMR66Oi6lJ9iqA0pLCx0Fs0iI730aH8li6cZ7ha5mmDSqWqRbE6ed9M

ZzatNhzU8HPMODtvmsHEOAxRWk51v6PyzOBt+esItZSFll+PRhcOJxjhNJKJ8e0kg58T

TVwS3sPPeVjiqvo6Dwy3VcvlyUEJNNU4Ok+IIipg1dzvBEUhWeQWT4ti5TKC2TCs2oz4

PpPXaVXWrN8v4auw3Xb1wGugk47C+BpcB6cguh6MwZz4LUgdEP1G2FAWz3goYN2i1Pww

QxrYbzxb6plR3H/ACvOtKK9+pNNn9ucQMb/OdP8f1aoRmOHT0qBjbXJQrspTh+rgc9uN

yInA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685715562; x=1688307562;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=SZTSVmZ9T8LQ/Ph6bUm3Kh/M/4SPeZK+qmcNZBoAOpc=;

b=ZE3K9xarw7CWLNmqLamlBlFBEODJ0SOOA7HboMj9A+mBy5UNaapLlR6yqBon7sprt+

9iJMel91Qu3rBq6hVlJPYV+sp0+44Fuw15zeOcSP+z69zXRy3PHd59LcWGEGa8J6PzP+

DNaKpX6H1xsSf5Dqy/bzLrG0KbLVkT9A0gY6b/Oi+8aQa7CFd03o/hynJ0So1AOfruzh

wnWx/CtGuZQ3NNarDf11xjTWc/CMPKh4oncWt6iFlbuNSclpkPi47lfP1gCFICLYw39q

NqZJ28Uo1j6JDsT+DIttg8elRYyY9ru7D057AwSFpqD+DAFvo2zbGEr1R2dcwmSzO8Ui

cpLQ==

X-Gm-Message-State: AC+VfDwaDHkE9np+RUxeUK189oJGrlA08c3bB7VoraM4ph/V7skELhk8

X2yfYgsRvbknl0cMQrYhDJka6BKlvx4eiw4=

X-Google-Smtp-Source: ACHHUZ5Mv3vtYx7VixyjQeyjjqyy0dZv4JgH8siRscPN/ZqckaV5FT0fWB0hoveFfhNJSy6tQMG3Sg==

X-Received: by 2002:a05:620a:8b87:b0:75b:23a1:3680 with SMTP id qx7-20020a05620a8b8700b0075b23a13680mr11128135qkn.65.1685715561571;

Fri, 02 Jun 2023 07:19:21 -0700 (PDT)

Received: from 194.124.76.45 ([194.124.76.45])

by smtp.gmail.com with ESMTPSA id d17-20020a05620a141100b0074e389245e6sm672998qkj.41.2023.06.02.07.19.20

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 02 Jun 2023 07:19:21 -0700 (PDT)

Message-ID: <6479fa69.050a0220.79f79.1621@mx.google.com>

From: "Evelyn Harrison"

Subject: Update Regarding Your PC PRO Shield182920

To: "support"

Content-Type: multipart/alternative; boundary="lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh"

MIME-Version: 1.0

Date: Fri, 2 Jun 2023 19:49:23 +0530

X-Antivirus: AVG (VPS 230602-4, 6/2/2023), Inbound message

X-Antivirus-Status: Clean

This is a multi-part message in MIME format

--lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hi there, support@nk.ca

Subscription Renewed Successfully!

Dear valued customer, we are glad to see you joining us again this yea=

r.

This is to inform you that your PC and Network Protection annual subsc=

ription has been successfully renewed and reactivated.

The subscription started today (June, 02, 2023) and it will remain act=

ive until June, 01, 2024 unless you choose to unsubscribe or stop auto=

renewal.

The annual fee of $ 389.95 is processed from the updated payment mode,=

this year charge will reflect on the statement as DVT-RC charge withi=

n 24 hours.

Need Support? Contact our support staff by calling +1 (830) 386 4964.

Below is your subscription information:

Order/Reference ID: 319-2478-2478

PC Care and Network Protection Shield

Seller's Name: MCAfee Total Corp.

Payment Mode: Automatic Debit

Amount Paid: $ 389.95

In any circumstances you wish to cancel the subscription or drop all t=

he charges and get the full amount refunded back, please contact us im=

mediately.

Regards,

Evelyn Harrison

(Sr. Manager) Customer Care Dept.

Tollfree Number # +1 (830) 386 4964.

--lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hi there, su=

pport@nk.ca

Subscription Renewed Successf=

ully!

Dear valued customer, we are glad to =

see you joining us again this year.

This is to inform you that your PC an=

d Network Protection annual subscription has been successfully renewed=

and reactivated.

The subscription started today (June,=

02, 2023) and it will remain active until June, 01, 2024 unless you c=

hoose to unsubscribe or stop auto renewal.

The annual fee of $ 389.95 is process=

ed from the updated payment mode, this year charge will reflect on the=

statement as DVT-RC charge within 24 hours.

Need Support? Contact our sup=

port staff by calling +1 (830) 386 4964.

align: center;">

Below is your subscription in=

formation:

Order/Reference ID: 775-9661-96=

61

nsform: none; text-indent: 0px; letter-spacing: normal; font-family: "=

Times New Roman"; font-size: medium; font-style: normal; font-weight: =

400; word-spacing: 0px; float: none; display: inline !important; white=

-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255,=

255); font-variant-ligatures: normal; font-variant-caps: normal; -web=

kit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color: initial;'>PC Care and=

Network Protection Shield
Seller's Name: MCAfee Total Corp.=

Payment Mode: Automatic Debit

); text-transform: none; text-indent: 0px; letter-spacing: normal; fon=

t-family: "Times New Roman"; font-size: medium; font-style: normal; fo=

nt-weight: 400; word-spacing: 0px; float: none; display: inline !impor=

tant; white-space: normal; orphans: 2; widows: 2; background-color: rg=

b(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=

ial; text-decoration-style: initial; text-decoration-color: initial;'>=

Amount Paid: $ 389.95

ext-transform: none; text-indent: 0px; letter-spacing: normal; font-fa=

mily: "Times New Roman"; font-size: medium; font-style: normal; font-w=

eight: 400; word-spacing: 0px; float: none; display: inline !important=

; white-space: normal; orphans: 2; widows: 2; background-color: rgb(25=

5, 255, 255); font-variant-ligatures: normal; font-variant-caps: norma=

l; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial;'>In a=

ny circumstances you wish to cancel the subscription or drop all the c=

harges and get the full amount refunded back, please contact us immedi=

ately.

Regards,

Evelyn Harrison
(Sr. Manager) Cust=

omer Care Dept.
Tollfree Number # &nb=

sp;+1 (830) 386 4964.

--lmqlJbTEDEWNXSYoXLg=_BdFwfOTw0tLIh--

Geek Squad phish from Google / Gmail

Posted by Dave Yadallee on Friday, June 2. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Jun 2023 07:55:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q55F0-0008nX-00

for dave@doctor.nl2k.ab.ca;

Fri, 02 Jun 2023 07:54:54 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Jun 2023 07:54:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f175.google.com ([209.85.160.175]:47212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q538S-0001xJ-2m

for doctor@nl2k.ca;

Fri, 02 Jun 2023 05:40:03 -0600

Received: by mail-qt1-f175.google.com with SMTP id d75a77b69052e-3f6b20ad49dso17679341cf.2

for ; Fri, 02 Jun 2023 04:38:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685705875; x=1688297875;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=rI0nZcqHAEMaGh1i8fBMLx7NQQ+zU9s52F9kpN/h+jY=;

b=Q1xXzrA+Yuk3w1Bo+Vnk4mH6YNixN8FRtTxdIxFIqcpCQqmD7s57TdW3/CfW8HcRRy

OpM9sqqlQbiK2fII1paMlMkFGcidZbdXgtzegKGiMfuGS06ouPP6GIeerXAmsH82Dei/

yX18TBVL58U2F3l0jopo7bqcFTMYLTYXKC3jPYAIBrobbC1O5vZIWgJ0fidDK0PbNqO5

zVrv3rip1m2pY/C8cZLUN458nc0iNn2u68FrLxtsZwoRJfMDs1pDcI3ICKJX0AopkU4F

lnJT0s6KXQ3RFxD2YADwRASZP4PywpsLnAVvR/Hs74r58bnCWHg/naiYcd3h2nDZAkPQ

rgjQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685705875; x=1688297875;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=rI0nZcqHAEMaGh1i8fBMLx7NQQ+zU9s52F9kpN/h+jY=;

b=QybTuqGhdHwJ6d8EwFfYspf0WqeYH/1E8adHM5Jpxcy45NFeO/8ncOtWSKvb1a3eks

1YMNamN/B/95kB7MQlBZOA34Z0fzQryW0vNuxE2fF53zZPyIcmpKVZsp3uOkE9mdrPNc

VRINoRQOE/t4ivHe9UyoWF0KSnn7aDZuy2gWEpgddnlO7gLcklGoh9e7v5uYyyX0D/0Z

8fvf7GtQD7Dvc4v40wMPr41QgeIRAeeWozcGJRpRZhrlWzpUDsvoaqfEFSUE+rX1Ru18

Am0qM4qzZRU9ug/FkMkpPm8hcg5obu0uNjjZm61B6Ij9WjM4orxjY1L+PhhjvJC/BoqH

5RxA==

X-Gm-Message-State: AC+VfDyY+61pfZzc+kqlejVY5u8n0moDKjwkOpzplFIz4QMmnWV+zKFW

6SS1c/Zc9S3sPXbSkT8NAHxbBE3heFdjkkbQP1/RWA==

X-Google-Smtp-Source: ACHHUZ4kFBIrwiKynWqsYXaWU+A4K1dCnAMa7f2m+gaRSzGJ1bS0lWqCGfSb5/KcUYDYMbF47/SJ3A==

X-Received: by 2002:ac8:4e8d:0:b0:3f4:f1f8:9383 with SMTP id 13-20020ac84e8d000000b003f4f1f89383mr15985780qtp.52.1685705875438;

Fri, 02 Jun 2023 04:37:55 -0700 (PDT)

Received: from 185.199.103.221 ([185.199.103.221])

by smtp.gmail.com with ESMTPSA id c27-20020ac84e1b000000b003f6aa9d7883sm667387qtw.13.2023.06.02.04.37.53

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 02 Jun 2023 04:37:55 -0700 (PDT)

Message-ID: <6479d493.c80a0220.9d421.0f66@mx.google.com>

From: "Eric L. Byrd"

Subject: Payment Confirmation Details@@GGCLLOU

To: "doctor"

Content-Type: multipart/alternative; boundary="eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY"

MIME-Version: 1.0

Date: Fri, 2 Jun 2023 04:37:54 -0700

X-Antivirus: AVG (VPS 230602-4, 6/2/2023), Inbound message

X-Antivirus-Status: Clean

This is a multi-part message in MIME format

--eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hi there, doctor@nl2k.ca

Subscription Renewed Successfully!

Dear valued customer, we are glad to see you joining us again this yea=

r.

This is to guide you that your PC and Network Protection yearly member=

ship has been renewed and reactivated successfully.

The subscription started today (June, 02, 2023) and it will remain act=

ive until (June, 01, 2024) unless you choose to unsubscribe or stop au=

to renewal.

The annually price of ($ 329.96) is handled using the new payment opti=

on; this year's charge will appear on the bill as DVT-RC within 24 hou=

rs.

Need Help? Please connect with our support team at +1 (833) 780 1274.

Below is your subscription information:

Order/Reference ID: 983-4737-0354

PC Care and Network Protection Shield

Seller's Name: GEEK Squad Inc.

Payment Mode: Automatic Debit

Amount Paid: $ 329.96

In any circumstances you wish to cancel the subscription or drop all t=

he charges and get the full amount refunded back, please contact us im=

mediately.

Thank You Again!

Nicole R. Colman

(Sr. Manager) Customer Care Dept.=E2=80=8B

Tollfree Number #=20

+1 (833) 780 1274.

--eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

8">

3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">

; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=

nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=

rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=

ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;'>
5px;">Hi there, doctor@nl2k.ca

r; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter=

-spacing: normal; font-family: "Times New Roman"; font-size: medium; f=

ont-style: normal; font-weight: 400; margin-bottom: 10px !important; w=

ord-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-var=

iant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke=

-width: 0px; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial;'>
15px;">Subscription Renewed Succes=

sfully!

0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: norm=

al; font-family: "Times New Roman"; font-size: medium; font-style: nor=

mal; font-weight: 400; margin-bottom: 10px !important; word-spacing: 0=

px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; t=

ext-decoration-thickness: initial; text-decoration-style: initial; tex=

t-decoration-color: initial;'>Dear va=

lued customer, we are glad to see you joining us again this year.
n>

orm: none; text-indent: 0px; letter-spacing: normal; font-family: "Tim=

es New Roman"; font-size: medium; font-style: normal; font-weight: 400=

; margin-bottom: 10px !important; word-spacing: 0px; white-space: norm=

al; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;'>This is to guide you that yo=

ur PC and Network Protection yearly membership has been renewed and re=

activated successfully.

r: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacin=

g: normal; font-family: "Times New Roman"; font-size: medium; font-sty=

le: normal; font-weight: 400; margin-bottom: 10px !important; word-spa=

cing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-li=

gatures: normal; font-variant-caps: normal; -webkit-text-stroke-width:=

0px; text-decoration-thickness: initial; text-decoration-style: initi=

al; text-decoration-color: initial;'>=

The subscription started today (June, 02, 2023) and it will remain act=

ive until (June, 01, 2024) unless you choose to unsubscribe or stop au=

to renewal.

0); text-transform: none; text-indent: 0px; letter-spacing: normal; f=

ont-family: "Times New Roman"; font-size: medium; font-style: normal; =

font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; w=

hite-space: normal; orphans: 2; widows: 2; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-dec=

oration-color: initial;'>The annually=

price of ($ 329.96) is handled using the new payment option; this yea=

r's charge will appear on the bill as DVT-RC within 24 hours.

n>

orm: none; text-indent: 0px; letter-spacing: normal; font-family: "Tim=

es New Roman"; font-size: medium; font-style: normal; font-weight: 400=

; margin-bottom: 10px !important; word-spacing: 0px; white-space: norm=

al; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;'>Need Help? Please connect wi=

th our support team at +1 (83=

3) 780 1274.

rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: =

normal; font-family: "Times New Roman"; font-size: medium; font-style:=

normal; font-weight: 400; margin-bottom: 10px !important; word-spacin=

g: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0p=

x; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial;'>&nb=

sp;Order/Reference ID: 983-4737-8203

gn: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0p=

x; letter-spacing: normal; font-family: "Times New Roman"; font-size: =

15px; font-style: normal; font-weight: 400; word-spacing: 0px; float: =

none; display: inline !important; white-space: normal; orphans: 2; wid=

ows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: =

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial; text-decoration-style: initial; text-=

decoration-color: initial;'>PC Care and Network Protection Shield
n>
Seller's Name: GEEK Squad Inc.<=

br>Payment Mode: Automatic Debit

, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: norma=

l; font-family: "Times New Roman"; font-size: 15px; font-style: normal=

; font-weight: 400; word-spacing: 0px; float: none; display: inline !i=

mportant; white-space: normal; orphans: 2; widows: 2; background-color=

: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-cap=

s: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initia=

l;'>Amount Paid: $ 329.96
<=

/span>

-align: center; color: rgb(0, 0, 0); text-transform: none; text-indent=

: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-si=

ze: medium; font-style: normal; font-weight: 400; margin-bottom: 10px =

!important; word-spacing: 0px; white-space: normal; orphans: 2; widows=

: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial;'>
'color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-s=

pacing: normal; font-family: "Times New Roman"; font-size: 15px; font-=

style: normal; font-weight: 400; word-spacing: 0px; float: none; displ=

ay: inline !important; white-space: normal; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'>In any circumstances you wish to cancel the subscript=

ion or drop all the charges and get the full amount refunded back, ple=

ase contact us immediately.

color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-sp=

acing: normal; font-family: "Times New Roman"; font-size: medium; font=

-style: normal; font-weight: 400; margin-bottom: 10px !important; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>
x;">

; text-transform: none; text-indent: 0px; letter-spacing: normal; font=

-family: "Times New Roman"; font-size: medium; font-style: normal; fon=

t-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; whit=

e-space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;'>Best regards,
span>

nsform: none; text-indent: 0px; letter-spacing: normal; font-family: "=

Times New Roman"; font-size: medium; font-style: normal; font-weight: =

400; margin-bottom: 10px !important; word-spacing: 0px; white-space: n=

ormal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-var=

iant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thi=

ckness: initial; text-decoration-style: initial; text-decoration-color=

: initial;'>

n: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px=

; letter-spacing: normal; font-family: "Times New Roman"; font-size: m=

edium; font-style: normal; font-weight: 400; margin-bottom: 10px !impo=

rtant; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; =

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-tex=

t-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial;'>Nicole R. Colman
r>(Sr. Manager) Customer Care Dept.~~=E2=80=8B~~
Tollfree Number=

#
>

transform: none; text-indent: 0px; letter-spacing: normal; font-family=

: "Times New Roman"; font-size: medium; font-style: normal; font-weigh=

t: 400; margin-bottom: 10px !important; word-spacing: 0px; white-space=

: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial;'>
-size: 15px;">+1 (833) 780 1274.

--eDugE2YJwrbwqepPuMgnKmKHDM=_YtHdMY--

Categories: Google Spam, Phish

0 Comments

Internet crime phish
Posted by Dave Yadallee on Thursday, June 1. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 May 2023 16:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q4UbH-000FQm-0F

for dave@doctor.nl2k.ab.ca;

Wed, 31 May 2023 16:47:27 -0600

Resent-From: The Doctor

Resent-Date: Wed, 31 May 2023 16:47:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dcbars.ru ([213.247.200.222]:14228 helo=mail.dcbars.ru)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

id 1q4TXb-000Dc4-2w

for bin@nl2k.ab.ca;

Wed, 31 May 2023 15:39:39 -0600

Reply-To:

From: ic3@doctor.nl2k.ab.ca

Subject: INTERNET CRIME COMPLAINT CENTER SEEK YOUR URGENT ATTENTION

Date: Wed, 31 May 2023 17:37:38 -0400

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: iC3 U.S (Anti-Fraud Unit) we fight against fraud, funds delay

and impersonation. Head Office

Content analysis details: (15.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} INTERNET CRIME COMPLAINT CENTER SEEK YOUR URGENT ATTENTION

X-Antivirus: AVG (VPS 230531-8, 5/31/2023), Inbound message

X-Antivirus-Status: Clean

iC3 U.S (Anti-Fraud Unit)

we fight against fraud, funds delay and impersonation.

Head Office

To Whom It May Concern.

The Internet Crime Complaint Center (iC3) which is a partnership between the Federal Bureau of Investigation (FBI) and the National White Collar Crime Center (NW3C) herein bring to your notice that after the meeting held with some Top Officials of about 26 countries worldwide, it has been pronounced as agreed by Most Higher Authorities of different countries who partake in the World Cyber Crime Campaign that the iC3 should be granted right and privilege to designate a particular strategy that may be used to eradicate the danger related to the usage of the internet world Wide.

Having put into consideration the best strategy to impose for the achievement of this great project, we have decided to have every individual who are privileged to participate in this event gain direct access to our World Data Base and Cyber Monitoring Site, through which they can identify which transaction or email is real and legitimate before getting themselves involved in any fund transactions online due to scams.

So therefore, we sincerely appeal with you to please find a reason to respond to this email with detailed information as regards to any online fund transaction that you might have been involved in, for the benefit of proper investigation as to enable us be of guidance to furnish you with accurate information upon which transaction you are to engage yourself.

For further Inquiries, please feel free to contact the direct email to the International Information Officer with your complaints. ; ic3info759@gmail.com

Respectfully

iC3

http://www.ic3.gov/default.aspx

Categories: Phish

0 Comments

Page 1 of 2, totaling 21 entries

No entries to print

next page

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	June '23					Forward →
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30

ont-family: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; text-deco= ration: none; color: black; font-size: 32px; font-weight: bold; line-height= : 36px; letter-spacing: -0.04em; text-align: center;" align=3D"center">We'r= e sorry to say goodbye

ont-family: Circular,"Helvetica Neue",Helvetica,Arial,sans-serif; text-deco=

ration: none; color: black; font-size: 32px; font-weight: bold; line-height=

: 36px; letter-spacing: -0.04em; text-align: center;" align=3D"center">We'r=

e sorry to say goodbye