Mcafee PHish from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Jul 2023 13:36:17 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qHUjQ-0008gL-2l

for dave@doctor.nl2k.ab.ca;

Thu, 06 Jul 2023 13:33:36 -0600

Resent-From: The Doctor

Resent-Date: Thu, 6 Jul 2023 13:33:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f170.google.com ([209.85.128.170]:61732)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qHRiB-000LOi-0V

for root@nk.ca;

Thu, 06 Jul 2023 10:20:10 -0600

Received: by mail-yw1-f170.google.com with SMTP id 00721157ae682-5703cb4bcb4so11661707b3.3

for ; Thu, 06 Jul 2023 09:18:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1688660282; x=1691252282;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=f4tpI7LAtW+Kizpnx933SPmUq3QfvjBS3o4sjTpfkGE=;

b=OhXqKdIG+20XRFnWOI3aYLnd2UNMugY/7UVmOZ3+y55gmMprvvuT+UGAloJ1YrdoX9

cR9QsUiH/gf1Rx3qYnCx+jFR8N5LPd4C/SbATt59NIhvV1Aaim6Ww1TkMdZkp8psiAZG

BVArGGOovgt8eHkBSkBOq6g7SKyyVfsSB63JDZael+l0fRBkHH+SQWnORaTo5KhxIBbB

lHlA7dn/lsuqWoR9jI/Yb9TVfKALBs1uY2pOfQY7Z6c1BGwVT16pHJrlL9NFuf2JeYA+

+zeXSJIbHmCzopLrMKWKb2VDALNFkb49o92CEy+LbNyHOh+wJrx9cKXtGB0yCdnlhz0o

3Y8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1688660282; x=1691252282;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=f4tpI7LAtW+Kizpnx933SPmUq3QfvjBS3o4sjTpfkGE=;

b=fJK/L1shOb4vANoiV0j7pjgTKF6ncu724i0zEDeTWM7mZnVMZDOnxKkkfPzcxVtLky

DyIhDgCpS3JZeF5WCNaYUX9SVft2Qkuf3/6EhK2DoBM65SWza2B420NWqKOOSlB4YNKd

+lTn+rysfWbXky6bxo71QRxDWGALwZ4j8nBc8rRCxyS+9nsxp/lo1q4znNjfsrz5W+v8

5bOFWKrqi746G4uZkLk94H1qdEOuB8szq0ECmNuKI47ccx5UM4qBbl3wHjwf2IlG/k9/

7IqjDH+3gWSUXkLPcH7QOq+Eh7fiQx4sRKL8p4M4H6Q6WmJiSEoOzZbi53JzRULspBUZ

m3vg==

X-Gm-Message-State: ABy/qLYdsIOxtzDsDxv9ySC1atN/uKb7SpcDg6geYDUHTPTDnYFUSDJU

b4m6yrR2b3IR3MQNvt9aMB/tejBilPYYngqOqOo=

X-Google-Smtp-Source: APBJJlHiN11KYhbpN/KD4q7lRCv94tsga+zm/B732cRs4SOyY3XE5NALTW0D4eM3mbtLrt8UScCRsg==

X-Received: by 2002:a81:7bd5:0:b0:573:6cf0:4008 with SMTP id w204-20020a817bd5000000b005736cf04008mr2661710ywc.26.1688660282621;

Thu, 06 Jul 2023 09:18:02 -0700 (PDT)

Received: from 92.119.19.242 ([92.119.19.242])

by smtp.gmail.com with ESMTPSA id l4-20020a819404000000b00576e5af0249sm442060ywg.20.2023.07.06.09.18.00

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 06 Jul 2023 09:18:02 -0700 (PDT)

Message-ID: <64a6e93a.810a0220.4b872.2327@mx.google.com>

From: "Geek Services"

Subject: Transaction Alert Notice#593062

To: "root"

Content-Type: multipart/alternative; boundary="Sf6OJhsHOa=_HGN9Krs5vfAZClaE7JZtf7"

MIME-Version: 1.0

Organization: Geek Squad Services

Date: Thu, 6 Jul 2023 21:48:01 +0530

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello there, root@nk.ca Subscription Plan Renewed! We thank

you for registering with us ägain!



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.170 listed in list.dnswl.org]

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ejzhxjznznx132(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ejzhxjznznx132(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.170 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 FSL_HELO_BARE_IP_2 No description available.

Subject: {SPAM?} Transaction Alert Notice#593062

X-Antivirus: AVG (VPS 230706-2, 7/6/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--Sf6OJhsHOa=_HGN9Krs5vfAZClaE7JZtf7

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello there, root@nk.ca



Subscription Plan Renewed!



We thank you for registering with us =C3=A4gain!



This is to =C3=ADnform you that your annual subscription with GEEK Squ=

ad has been successfully renewed.



The annual charge of $ 389.95 will be auto-debited today as per =C3=B0=

ur contract; the charge will reflect on the statement in a few hours.



For =C3=A2ssistance and support? Please feel free to contact us toll-f=

ree at +1 (833) 505-2593.



Here are your order confirmation details:



Customer Contract ID: 992-485612

PC Security and Network Shield

Payment mode: Auto-debit

Date of renewal: July 6, 2023

Subscription fee: $ 389.95



The recurring fee will be debited =C3=A8very year from the same source=

of payment method updated in our record unless you =C3=B9nsubscribe o=

r drop the charges.



If you wish to cancel the subscription or stop =C3=A1utomatic debit an=

d want the full amount refunded, please contact us =C3=ACmmediately to=

avoid any transactional disputes.



=20



Regards,



Patricia Smith

Service Activation Dept.

Toll-free Number: +1 (833) 505-2593.





--Sf6OJhsHOa=_HGN9Krs5vfAZClaE7JZtf7

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: nor=

mal; font-family: "Times New Roman"; font-size: medium; font-style: no=

rmal; font-weight: 400; margin-bottom: 10px !important; word-spacing: =

0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial;'>Hello there, root@nk.ca


text-align: center; color: rgb(37, 37, 37); text-transform: none; text=

-indent: 0px; letter-spacing: normal; font-family: "Times New Roman"; =

font-size: medium; font-style: normal; font-weight: 400; margin-bottom=

: 10px !important; word-spacing: 0px; white-space: normal; orphans: 2;=

widows: 2; font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; t=

ext-decoration-style: initial; text-decoration-color: initial;'>
g style=3D"color: rgb(37, 37, 37); font-weight: 700;">Subscription Pla=

n Renewed!


37, 37); text-transform: none; text-indent: 0px; letter-spacing: norma=

l; font-family: "Times New Roman"; font-size: medium; font-style: norm=

al; font-weight: 400; margin-bottom: 10px !important; word-spacing: 0p=

x; white-space: normal; orphans: 2; widows: 2; font-variant-ligatures:=

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text=

-decoration-color: initial;'>We thank you for registering with us =C3=A4=

gain!


transform: none; text-indent: 0px; letter-spacing: normal; font-family=

: "Times New Roman"; font-size: medium; font-style: normal; font-weigh=

t: 400; margin-bottom: 10px !important; word-spacing: 0px; white-space=

: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial;'>This is to =C3=ADnform you that your annual subscriptio=

n with GEEK Squad has been successfully renewed.


lign: center; color: rgb(37, 37, 37); text-transform: none; text-inden=

t: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-s=

ize: medium; font-style: normal; font-weight: 400; margin-bottom: 10px=

!important; word-spacing: 0px; white-space: normal; orphans: 2; widow=

s: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webk=

it-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;'>The annual c=

harge of $ 389.95 will be auto-debited today as per =C3=B0ur contract;=

the charge will reflect on the statement in a few hours.


'text-align: center; color: rgb(37, 37, 37); text-transform: none; tex=

t-indent: 0px; letter-spacing: normal; font-family: "Times New Roman";=

font-size: medium; font-style: normal; font-weight: 400; margin-botto=

m: 10px !important; word-spacing: 0px; white-space: normal; orphans: 2=

; widows: 2; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial;'>For =C3=

=A2ssistance and support? Please feel free to contact us toll-free at<=

span> 
: 700;">+1 (833) 505-2593.
an>


; text-transform: none; text-indent: 0px; letter-spacing: normal; font=

-family: "Times New Roman"; font-size: medium; font-style: normal; fon=

t-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; whit=

e-space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;'>
ight: 700;">Here are your order confirmation details:


tyle=3D'text-align: center; color: rgb(37, 37, 37); text-transform: no=

ne; text-indent: 0px; letter-spacing: normal; font-family: "Times New =

Roman"; font-size: medium; font-style: normal; font-weight: 400; margi=

n-bottom: 10px !important; word-spacing: 0px; white-space: normal; orp=

hans: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps:=

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: in=

itial; text-decoration-style: initial; text-decoration-color: initial;=

'>Customer Contract ID: 992-485612

">PC Security and Network Shield
=

Payment mode: Auto-debit
Date of =

renewal: July 6, 2023
Subscriptio=

n fee: $ 389.95


37); text-transform: none; text-indent: 0px; letter-spacing: normal; f=

ont-family: "Times New Roman"; font-size: medium; font-style: normal; =

font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; w=

hite-space: normal; orphans: 2; widows: 2; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; text-dec=

oration-color: initial;'>The recurring fee will be debited =C3=A8very =

year from the same source of payment method updated in our record unle=

ss you =C3=B9nsubscribe or drop the charges.

, 37, 37);">
If you wish to cance=

l the subscription or stop =C3=A1utomatic debit and want the full amou=

nt refunded, please contact us =C3=ACmmediately to avoid any transacti=

onal disputes.


7); text-transform: none; text-indent: 0px; letter-spacing: normal; fo=

nt-family: "Times New Roman"; font-size: medium; font-style: normal; f=

ont-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; wh=

ite-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norm=

al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-de=

coration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial;'> 


r: rgb(37, 37, 37); text-transform: none; text-indent: 0px; letter-spa=

cing: normal; font-family: "Times New Roman"; font-size: medium; font-=

style: normal; font-weight: 400; margin-bottom: 10px !important; word-=

spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: in=

itial; text-decoration-color: initial;'>Regards,


lign: center; color: rgb(37, 37, 37); text-transform: none; text-inden=

t: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-s=

ize: medium; font-style: normal; font-weight: 400; margin-bottom: 10px=

!important; word-spacing: 0px; white-space: normal; orphans: 2; widow=

s: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webk=

it-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;'>
"color: rgb(41, 105, 176);">Patricia Smith


olor: rgb(37, 37, 37);">Service Activation Dept.

b(37, 37, 37);">Toll-free Number: 
olor: rgb(37, 37, 37); font-weight: 700;">
, 50, 78);">+1 (833) 505-2593.







--Sf6OJhsHOa=_HGN9Krs5vfAZClaE7JZtf7--



Mcafee PHish from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Jul 2023 17:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qHBmM-0004J4-07

for dave@doctor.nl2k.ab.ca;

Wed, 05 Jul 2023 17:19:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 5 Jul 2023 17:19:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f47.google.com ([209.85.166.47]:57776)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qH9AD-00058z-13

for sales@nk.ca;

Wed, 05 Jul 2023 14:31:52 -0600

Received: by mail-io1-f47.google.com with SMTP id ca18e2360f4ac-7835ae70e46so271796239f.3

for ; Wed, 05 Jul 2023 13:30:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1688589003; x=1691181003;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=vurLY70cxNSTnqfDOlSKLelGfIZqi590Z3I1z4zmg28=;

b=kMmul/fYg/5cnuPfKhyYHZcWY2ChFn7I46QB+WE5pSq6gsKDCN68/debbNRvmvwFrk

3lI5iUeZak56fI+/JRbFqOZZ/nDf50sZwyeYE2crq8krgrOPTdFjBpKkd3g5VqoeznYk

CbgbwSu8BImhSpP81IMR+4x27nZO86xBwzWZIL9iu1rlti6T+PEnIkFBUrGPv8rpfFou

RCYst+yFs0WccfBTMQqzGvWfPfMYtJcQpzK6z/IEkf9TVYGBcW+L+NnWac0UMHR67q1d

hurWL9l4cIoZr1YzrQV9s2x9JsV0nA5PK4wlpn28BHpFiyFPkYWpm82iDIybM14Yy4iK

2buw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1688589003; x=1691181003;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=vurLY70cxNSTnqfDOlSKLelGfIZqi590Z3I1z4zmg28=;

b=USwP1QxkFsRfLILvIV16dMSN86lrXWakCEtsXYIZllgdmaWdhh+SZg4NMpBpgSH3xo

kycsINwTQUPqK8eTnsRpfq4O5fE1tFXUv4BtQ3fxTLYnalwPs/r4uMNgodJ/zOUzUnC1

wLfpEtIzQeWCc+lVwCHP8h8hxLpvSC55qTv5l2SC9kTdghZ/c3dEl+UDiVmUtQB5jaBS

wb279hF8zHEhawqfy6Imks+rhGe2xBHD3blAQg+NAITxtNRhtigkeke0h5OO/ps5prq6

dGL6O3wd6iphHXd/+Ehy1A5CYWeIuVQ9+czKf2EX9CcqSPQ+/0RhMlf+UeBLSuNduk0p

rC7g==

X-Gm-Message-State: ABy/qLbwErwtCuvzpjbWKX12v1X8GrZrIEPKsYM81d5WsYptJUqY7Ler

NsoRMCi1BoP2oeTMaEMFIvtmaU1J5uXsTGGN5Vgecw==

X-Google-Smtp-Source: APBJJlFgmIVO0WTsxVt06afjcoeHZIqFR431538sGgL+U/4H8azilpQvStjipnJ9wFLy/fQNNDjjdQ==

X-Received: by 2002:a6b:f719:0:b0:783:6906:a333 with SMTP id k25-20020a6bf719000000b007836906a333mr142178iog.17.1688589002863;

Wed, 05 Jul 2023 13:30:02 -0700 (PDT)

Received: from 64.44.80.5 ([64.44.80.5])

by smtp.gmail.com with ESMTPSA id i13-20020a02c60d000000b0042b48d372aasm2161386jan.100.2023.07.05.13.30.01

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 05 Jul 2023 13:30:02 -0700 (PDT)

Message-ID: <64a5d2ca.020a0220.39056.2d48@mx.google.com>

From: "Elizabeth Adams"

Subject: Order Confirmation Details<0926452>

To: "sales"

Content-Type: multipart/alternative; boundary="jHNvMEV77hdyuw=_OzB1vJeiJtiqCdfp11"

MIME-Version: 1.0

Organization: Accounts Head Of Support Team

Date: Wed, 5 Jul 2023 13:30:02 -0700

X-Antivirus: AVG (VPS 230706-2, 7/6/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--jHNvMEV77hdyuw=_OzB1vJeiJtiqCdfp11

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi User, sales@nk.ca



Subscription Plan Upgraded!



We appreciate your decision to upgrade your yearly PC membership plan =

with us.



You have been informed that your subscription has been upgraded and au=

tomatically renewed because you selected automatic renewal last year.



PC and Network Protection Shield has been charged $329.98 to your upda=

ted account; this sum will show up on your statement in a few hours.



For assistance, Contact us toll-free at +1 (888) 713-5554.



Annual Subscription Information:



Customer Unique ID: 934-975203875

Seller's name: MCafee Total Tech Inc.

Mode of payment: automatic debit

Date of renewal: July 05, 2023

Expiration date: July 04, 2024

Annual Fee: $329.98



If you need further information about this subscription or simply wish=

to opt out and want a full refund, please reach out to us immediately=

to avoid transactional disputes.



Thank you again for being an existing customer with us since last year=

!







Best Regards=20



Elizabeth Adams

Accounts Head Of Support Team

Toll-free number: +1 (888) 713-5554.





--jHNvMEV77hdyuw=_OzB1vJeiJtiqCdfp11

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline













Hi Subscr=

iber, sales@nk.ca




tyle=3D"color: rgb(37, 37, 37);">Subscription Plan Upgraded!
trong>



We appreciate your decision to up=

grade your yearly PC membership plan with us.



You have been informed that your =

subscription has been upgraded and automatically renewed because you s=

elected automatic renewal last year.



PC and Ne=

twork Protection Shield has been charged $329.98 to your updated accou=

nt; this sum will show up on your statement in a few hours.



For assis=

tance, Contact us toll-free at +1 (888) 713-5554
ng style=3D"color: rgb(37, 37, 37);">.




tyle=3D"color: rgb(37, 37, 37);">Annual Subscription Information:
ong>



Customer =

Unique ID: 031-094552244
Seller's=

name: MCafee Total Tech Inc.
Mod=

e of payment: automatic debit
Dat=

e of renewal: July 05, 2023
Expir=

ation date: July 04, 2024
Annual =

Fee: $329.98



If you ne=

ed further information about this subscription or simply wish to opt o=

ut and want a full refund, please reach out to us immediately to avoid=

transactional disputes.



Thank you=

again for being an existing customer with us since last year!





=3D"color: rgb(37, 37, 37);">
Sin=

cerely,



Elizabeth=

Adams
Accounts Head Of Support T=

eam
Toll-free number: +1 =

(888) 713-5554
.
rong>













--jHNvMEV77hdyuw=_OzB1vJeiJtiqCdfp11--