Norton Phish from Google Gmail part 2
Posted by Dave Yadallee onschemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=
ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">
=20
=20
=20
=20
Norton Phish from Google Gmail part 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 16:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP6qG-000000009eG-1qnR
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 16:53:44 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 16:53:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f202.google.com ([209.85.167.202]:52483)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP1XJ-00000000KSe-26yg
for root@nk.ca;
Mon, 18 May 2026 11:13:58 -0600
Received: by mail-oi1-f202.google.com with SMTP id 5614622812f47-475f6d0de69so6421984b6e.1
for; Mon, 18 May 2026 10:13:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779124377; x=1779729177; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;
b=YU4tS1g+iZ9OL165iCQWm2o4VCkWwZXVEgYnH7WuSlYp5Z7GFfOhFh05ifrIYwqIZs
e36l+5LA6Uece7TxGAIotijAdFF4TQjhjThal6cuH3Y10PfEhTRuN6lrtlrbzF9DM2Mg
WJ5FAaek6urmAu8mczAczbRF0+f3iJCLTiezQnyZBjXUy+rZqoBcdJRcRR9hENPuH9t1
RSg2Kh/uDMFRXxMD7RqGLqpshQaiguvggSFg2ATrFjIyekpGceqJVL3qlnm0Wfbv8INf
7v7Jnbg5k58zJHpvj2DRd63ADc4W+EPIeINOvgszlSOr+iX1afbBHHyWvW/ygCIEPY8G
ErQA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124377; x=1779729177; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;
b=n4HSO1uD5V6G8wKT/CZ9fxRbGOiKq+IQe3WKFc+fOlcRsRk9zUcHVa7n36iYE59y26
4plLxcNrPURvMfUWKHnMKECLF3t2XgE+HOQ6HrTcoHEGgMxNH06D/nyIjiT+DxRcYCX6
0OYf9iSpoY6BLDLgkFM3tDbDopJ7nBUK1NDPRdLq+2SBPjj6ko2iRzpqA3Nfn7Z27yHb
wKga95lP8ZlhGyfI86RnRJoFCwfpi/ZaveIs8ucILUWF5z+XNgV5AQRS4i5i494qwG6w
syPcmwj4evhUyW+WeOZd9D4gQEr4pZgRKTgTed0qGFHaiz00W7oKi2K+Sff0hIKRc48a
xH4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779124377; x=1779729177;
h=from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;
b=S0MAuXAPzoYucO2h+XOFD+GpNwXKOi66qbWax330NyGmmiXTQlqolNgcBWvD28s/Zb
H5ZBVp+p4bj5wg7raTynNUXdaqn/tZbQy0o+2oaVfB51jGwZdQfrfiGIvjbxKB3NWqn/
F09nVYEJMFwIlWvObAe0TkKXXu1M5msWpxr/rV114x17vgICm75VBq6sSef+vaQohmz+
+5VQmfI3QALqDvIN41S0Yz0AoFjP7hcUfCxeDicC74Wtu98gvGR9Rrar57Bs891v+uAd
ahBwHwPysHjJWmePxRqZdRDtAmQpLdMGku8vsYDVEkgjGhabFIIurZ9pOaby4dVuStJa
UsLQ==
X-Forwarded-Encrypted: i=1; AFNElJ/CF1aGqYcX22b1ZbtDYvogpn+gZsSA83El6qtSn245uXab4DkRpkNGor1T6Cw17jEnDoj/@nk.ca
X-Gm-Message-State: AOJu0YytCyplqhD05HHqkn9E/Yo5tUnsaQYVCItYviBWHfo9A9NE9tTP
mx2QHz9Pjw3H+AT46DgQzk0OgK08lA8aImY57lx7aqisIu8/nbC/hZEt9EJa+gBAWTOQ2fU1s0L
d9CcM76N374zoliyS+OWL9+23LHrx8M/O+CMvKanA4jt5SA==
MIME-Version: 1.0
X-Received: by 2002:a05:6808:654a:b0:484:d5a3:9982 with SMTP id
5614622812f47-484d5a3a311mt2320153b6e.14.1779124376584; Mon, 18 May 2026
10:12:56 -0700 (PDT)
Reply-To: no reply
Sender: Google Calendar
Message-ID:
Date: Mon, 18 May 2026 17:12:56 +0000
Subject: #JRHYMQO
From: no reply
Content-Type: multipart/alternative; boundary="0000000000007e3b1606521aac7d"
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern
Time - New York Important Reminder About Your Upcoming Renewal Dear Valued
Customer,
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
[209.85.167.202 listed in dnsbl.ahbl.org]
[209.85.167.202 listed in dnsbl.ahbl.org]
[209.85.167.202 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.202 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.2 MISSING_HEADERS Missing To: header
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.202 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.202 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
Subject: {SPAM?} #JRHYMQO
--0000000000007e3b1606521aac7d
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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=
--0000000000007e3b1606521aac7d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 16:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP6qG-000000009eG-1qnR
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 16:53:44 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 16:53:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f202.google.com ([209.85.167.202]:52483)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP1XJ-00000000KSe-26yg
for root@nk.ca;
Mon, 18 May 2026 11:13:58 -0600
Received: by mail-oi1-f202.google.com with SMTP id 5614622812f47-475f6d0de69so6421984b6e.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779124377; x=1779729177; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;
b=YU4tS1g+iZ9OL165iCQWm2o4VCkWwZXVEgYnH7WuSlYp5Z7GFfOhFh05ifrIYwqIZs
e36l+5LA6Uece7TxGAIotijAdFF4TQjhjThal6cuH3Y10PfEhTRuN6lrtlrbzF9DM2Mg
WJ5FAaek6urmAu8mczAczbRF0+f3iJCLTiezQnyZBjXUy+rZqoBcdJRcRR9hENPuH9t1
RSg2Kh/uDMFRXxMD7RqGLqpshQaiguvggSFg2ATrFjIyekpGceqJVL3qlnm0Wfbv8INf
7v7Jnbg5k58zJHpvj2DRd63ADc4W+EPIeINOvgszlSOr+iX1afbBHHyWvW/ygCIEPY8G
ErQA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124377; x=1779729177; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;
b=n4HSO1uD5V6G8wKT/CZ9fxRbGOiKq+IQe3WKFc+fOlcRsRk9zUcHVa7n36iYE59y26
4plLxcNrPURvMfUWKHnMKECLF3t2XgE+HOQ6HrTcoHEGgMxNH06D/nyIjiT+DxRcYCX6
0OYf9iSpoY6BLDLgkFM3tDbDopJ7nBUK1NDPRdLq+2SBPjj6ko2iRzpqA3Nfn7Z27yHb
wKga95lP8ZlhGyfI86RnRJoFCwfpi/ZaveIs8ucILUWF5z+XNgV5AQRS4i5i494qwG6w
syPcmwj4evhUyW+WeOZd9D4gQEr4pZgRKTgTed0qGFHaiz00W7oKi2K+Sff0hIKRc48a
xH4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779124377; x=1779729177;
h=from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;
b=S0MAuXAPzoYucO2h+XOFD+GpNwXKOi66qbWax330NyGmmiXTQlqolNgcBWvD28s/Zb
H5ZBVp+p4bj5wg7raTynNUXdaqn/tZbQy0o+2oaVfB51jGwZdQfrfiGIvjbxKB3NWqn/
F09nVYEJMFwIlWvObAe0TkKXXu1M5msWpxr/rV114x17vgICm75VBq6sSef+vaQohmz+
+5VQmfI3QALqDvIN41S0Yz0AoFjP7hcUfCxeDicC74Wtu98gvGR9Rrar57Bs891v+uAd
ahBwHwPysHjJWmePxRqZdRDtAmQpLdMGku8vsYDVEkgjGhabFIIurZ9pOaby4dVuStJa
UsLQ==
X-Forwarded-Encrypted: i=1; AFNElJ/CF1aGqYcX22b1ZbtDYvogpn+gZsSA83El6qtSn245uXab4DkRpkNGor1T6Cw17jEnDoj/@nk.ca
X-Gm-Message-State: AOJu0YytCyplqhD05HHqkn9E/Yo5tUnsaQYVCItYviBWHfo9A9NE9tTP
mx2QHz9Pjw3H+AT46DgQzk0OgK08lA8aImY57lx7aqisIu8/nbC/hZEt9EJa+gBAWTOQ2fU1s0L
d9CcM76N374zoliyS+OWL9+23LHrx8M/O+CMvKanA4jt5SA==
MIME-Version: 1.0
X-Received: by 2002:a05:6808:654a:b0:484:d5a3:9982 with SMTP id
5614622812f47-484d5a3a311mt2320153b6e.14.1779124376584; Mon, 18 May 2026
10:12:56 -0700 (PDT)
Reply-To: no reply
Sender: Google Calendar
Message-ID:
Date: Mon, 18 May 2026 17:12:56 +0000
Subject: #JRHYMQO
From: no reply
Content-Type: multipart/alternative; boundary="0000000000007e3b1606521aac7d"
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern
Time - New York Important Reminder About Your Upcoming Renewal Dear Valued
Customer,
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
[209.85.167.202 listed in dnsbl.ahbl.org]
[209.85.167.202 listed in dnsbl.ahbl.org]
[209.85.167.202 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.202 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
[209.85.167.202 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.202 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.2 MISSING_HEADERS Missing To: header
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.202 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.202 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
Subject: {SPAM?} #JRHYMQO
--0000000000007e3b1606521aac7d
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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=
--0000000000007e3b1606521aac7d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Norton phish from Google Gmail Part 4
Posted by Dave Yadallee on/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"no reply: #JRHYMQO"/>
emtype=3D"http://schema.org/Event">
=3D"http://schema.org/EventScheduled"/>
pe itemtype=3D"http://schema.org/Organization">
ent=3D"Google Calendar"/>
ontent=3D"04ier77IL3wBYIuEQcbaMHPfhH"/>
ize: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0=
; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">#OPHFBZX
span>
260519T061222Z">
22Z">
role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-=
container">
e=3D"height:16px;" aria-hidden=3D"true">
g=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=
=3D"">
temtype=3D"http://schema.org/EmailMessage">
#JRH=
YMQO
"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=
:100%;" class=3D"">
r-radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align=
: left; vertical-align: top;" class=3D"main-container-inner">
: left; direction: ltr; display: inline-block; vertical-align: top; width: =
100%;overflow: hidden; word-wrap: break-word;">
ing=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"m=
ain-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-=
layout: fixed;">
vertical-align:top;">
0" role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
word;;padding-bottom:2px;">
, Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;c=
olor: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"prese=
ntation">#OPHFBZX
le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=
adding-bottom:24px;">
le: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-sp=
acing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text"=
role=3D"presentation">
te" datetime=3D"20260519T061222Z">
e=3D"20260519T061222Z">Tuesday May 19, 2026 =E2=8B=85 2=
:12am (Eastern Time - New York)
-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=
tom:24px;">
; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=
px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=
resentation">Important Reminder About Your Upcoming Renewal
Dear V=
alued Customer,
This is an important reminder regarding the renewal of yo=
ur active coverage linked to Norton. Your subscription is set to renew on T=
uesday, 19 May 2026, and the renewal fee of USD548.66 will be billed automa=
tically.
**Coverage Information**
=E2=80=A2 Registered Item: Fu=
ll Membership
=E2=80=A2 Number of Devices: x1 Device(s)
=E2=80=A2 Ser=
vice Coverage: Five Years Year(s)
=E2=80=A2 Payment Arrangement: Auto Pa=
y
=E2=80=A2 Renewal Total: USD548.66
Account Reference: P1GD5BS276=
Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0
To a=
void interruption or unwanted renewal charges, please submit any cancellati=
on requests at least 48 hours before the renewal processing date.
Nee=
d help? Please contact our support center at 1 854 500-4211.
Grateful=
always,,
Norton LifeLock Protection
Billing Director: Robert Collins=
Customer Helpdesk Line: 1 854 500-4235
Administrative Address,: 4512=
Hwy 90 East Bear De 19701 US
Daily Operation Hours: 6 AM =E2=80=93 6 PM=
About Your Upcoming Renewal
Dear Valued Customer,
This is an important reminder regarding the renewal of your active coverage=
linked to Norton. Your subscription is set to renew on Tuesday, 19 May 202=
6, and the renewal fee of USD548.66 will be billed automatically.
**Coverage Information**
=E2=80=A2 Registered Item: Full Membership
=E2=80=A2 Number of Devices: x1 Device(s)
=E2=80=A2 Service Coverage: Five Years Year(s)
=E2=80=A2 Payment Arrangement: Auto Pay
=E2=80=A2 Renewal Total: USD548.66
Account Reference: P1GD5BS276
Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0
To avoid interruption or unwanted renewal charges, please submit any cancel=
lation requests at least 48 hours before the renewal processing date.
Need help? Please contact our support center at 1 854 500-4211.
Grateful always,,
Norton LifeLock Protection
Billing Director: Robert Collins
Customer Helpdesk Line: 1 854 500-4235
Administrative Address,: 4512 Hwy 90 East Bear De 19701 US
Daily Operation Hours: 6 AM =E2=80=93 6 PM
"/>
eft; word-break: break-word;;padding-bottom:24px;">
y: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px=
; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration:=
none;" class=3D"primary-text" role=3D"presentation">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bo=
ttom: 4px;">
or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=
antialiased;margin: 0; padding: 0;">Guests
st has been hidden at organizer's request)
>
>
--000000000000f7a94206521aabe9--
Norton phish from Google Gmail Part 3
Posted by Dave Yadallee on=20
Norton phish from Google Gmail Part 2
Posted by Dave Yadallee on=20
=20
=20
Norton phish from Google Gmail Part 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 16:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP6q8-000000009bs-3wm9
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 16:53:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 16:53:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f74.google.com ([209.85.160.74]:47307)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP1XD-00000000KRv-1ymG
for root@nk.ca;
Mon, 18 May 2026 11:13:53 -0600
Received: by mail-oa1-f74.google.com with SMTP id 586e51a60fabf-439bc8a6ce4so3015682fac.2
for; Mon, 18 May 2026 10:12:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779124368; x=1779729168; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=ZY/upXgyOXg+q8l1ysehj9AJfS+ZFk6NBkyquWSYQFM=;
b=p7xfhKQh4aZxDLTmxKKGyDOW1yuu1nfUJbRCK8MEtxQihpoTdOdrUgSxpWxl/5yXTt
em/+8SFp5dt9kWYyuvoIrSR+ieuLLMuok3KV6OiFr8LMIXsdTOKm1r3fLcTotf2a1EmA
aokxUZJ/WFYM0PF9ABKMktGHfzJ65h4dbqA4VEnh5F9HEl3vhm6FUhkkCl5Q7201L0Ka
uTzYa1EOqjhC0gMDj04XPyDxHtkhoe4jWJFo74p0CbHP/zpweUrvNQWa7ZsnD8bSPvEk
AlL1htpNdAfQPATn6hYP4PaIdSOWvhtSm4l+WlA1bC2iCMxMGTjp9cxoc4BRCPJeRYjT
23qw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124368; x=1779729168; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=ZY/upXgyOXg+q8l1ysehj9AJfS+ZFk6NBkyquWSYQFM=;
b=dPupj+RT2vbYJywKahktUZZ/UO4LYq6f38YF0AY/1qUH2sMCHmvbpt+KvpInnX7v3I
5/PBvq0KQ3LzS9IOrtm5SMAyDmiaCD/fLWeZTuXs3mlaX1uG5yzlEuSCY6mp/jL8bzR8
nUJog+FeCClLThkaMTR+Msf1qGX0yu2o2XNMyohtHqqwE5ZJv+BLjruQaOMxAGaONbzW
8YyEA7yKXoEwZGwoNV+oUOBIs28CS3AAdIDaROAcVNtWAvzyV+/eLQSp0ZMQEIFdN0Q5
NlDxZ1KWt9wbiWgTwd5njJ1OU7IQh1S4I57iNtgOKkSNauk92Zaim4pJr8mXMOpI1mT8
vgMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779124368; x=1779729168;
h=from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ZY/upXgyOXg+q8l1ysehj9AJfS+ZFk6NBkyquWSYQFM=;
b=WzkHKNlrDGz6wipYWaORsqsXKApfDYtFok4WO5OExDBdcCifuuBP0vyCaTPCdc/0Ra
yjotcSR+UOKqwBU+zFUxGQXKpSzkQ0BIlUSZG3IaP9R0d/1d2A0dbkbSFgBUIHMOGXbH
oRGkCAPFJ8KQwmseaT3xcBbw05rxww6VNy9mebJhPp4llgdyPxt6yeZ/rHyl9LyE5WUr
9eH0CjYXVjZd8gHULjSb1ICkoa/VSxtlcFGlydKHBGgrhebpWfDxzw90Wg2ouh7uVYdb
2hp5BNFO/uddNy9T7k8HDA+uJzlgA/KgQjGHTmf2nAMOtpXgNBaO+ZMsJpafLKjjymTX
Rl2A==
X-Forwarded-Encrypted: i=1; AFNElJ8XDbjcmIc/LVegk/KBCOYTpTCZg4hth7VkJC4UnqhRSMUvsFfVC2h0UMjp7oMwfq+P9pg4@nk.ca
X-Gm-Message-State: AOJu0Yw3Sdq7SYhnMDZeDEJsUZbQA5QXi6g+45IYonLXeX/7GC3uwohQ
iCxPTto4BaNTRsAu+1kbhY1taLXVUAOW0uCW5mEmqwclJXx7d7mJaIit3UZ0AhRDv5Ye7QVRqah
FliNzlxFH5GISvQTe904E0g380+cu3Uj+094J5s7Svrhaag==
MIME-Version: 1.0
X-Received: by 2002:a05:6808:e65b:b0:479:ac7d:6d91 with SMTP id
5614622812f47-482e58d8c09mt6732091b6e.39.1779124367547; Mon, 18 May 2026
10:12:47 -0700 (PDT)
Reply-To: no reply
Sender: Google Calendar
Message-ID:
Date: Mon, 18 May 2026 17:12:48 +0000
Subject: #JRHYMQO
From: no reply
Content-Type: multipart/alternative; boundary="000000000000f7a94206521aabe9"
X-Spam_score: 8.6
X-Spam_score_int: 86
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern
Time - New York Important Reminder About Your Upcoming Renewal Dear Valued
Customer,
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
[209.85.160.74 listed in dnsbl.ahbl.org]
[209.85.160.74 listed in dnsbl.ahbl.org]
[209.85.160.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.74 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.2 MISSING_HEADERS Missing To: header
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.160.74 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.74 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.9 REPLYTO_WITHOUT_TO_CC No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} #JRHYMQO
--000000000000f7a94206521aabe9
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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=
--000000000000f7a94206521aabe9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=
ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 16:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP6q8-000000009bs-3wm9
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 16:53:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 16:53:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f74.google.com ([209.85.160.74]:47307)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP1XD-00000000KRv-1ymG
for root@nk.ca;
Mon, 18 May 2026 11:13:53 -0600
Received: by mail-oa1-f74.google.com with SMTP id 586e51a60fabf-439bc8a6ce4so3015682fac.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779124368; x=1779729168; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=ZY/upXgyOXg+q8l1ysehj9AJfS+ZFk6NBkyquWSYQFM=;
b=p7xfhKQh4aZxDLTmxKKGyDOW1yuu1nfUJbRCK8MEtxQihpoTdOdrUgSxpWxl/5yXTt
em/+8SFp5dt9kWYyuvoIrSR+ieuLLMuok3KV6OiFr8LMIXsdTOKm1r3fLcTotf2a1EmA
aokxUZJ/WFYM0PF9ABKMktGHfzJ65h4dbqA4VEnh5F9HEl3vhm6FUhkkCl5Q7201L0Ka
uTzYa1EOqjhC0gMDj04XPyDxHtkhoe4jWJFo74p0CbHP/zpweUrvNQWa7ZsnD8bSPvEk
AlL1htpNdAfQPATn6hYP4PaIdSOWvhtSm4l+WlA1bC2iCMxMGTjp9cxoc4BRCPJeRYjT
23qw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124368; x=1779729168; darn=nk.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=ZY/upXgyOXg+q8l1ysehj9AJfS+ZFk6NBkyquWSYQFM=;
b=dPupj+RT2vbYJywKahktUZZ/UO4LYq6f38YF0AY/1qUH2sMCHmvbpt+KvpInnX7v3I
5/PBvq0KQ3LzS9IOrtm5SMAyDmiaCD/fLWeZTuXs3mlaX1uG5yzlEuSCY6mp/jL8bzR8
nUJog+FeCClLThkaMTR+Msf1qGX0yu2o2XNMyohtHqqwE5ZJv+BLjruQaOMxAGaONbzW
8YyEA7yKXoEwZGwoNV+oUOBIs28CS3AAdIDaROAcVNtWAvzyV+/eLQSp0ZMQEIFdN0Q5
NlDxZ1KWt9wbiWgTwd5njJ1OU7IQh1S4I57iNtgOKkSNauk92Zaim4pJr8mXMOpI1mT8
vgMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779124368; x=1779729168;
h=from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ZY/upXgyOXg+q8l1ysehj9AJfS+ZFk6NBkyquWSYQFM=;
b=WzkHKNlrDGz6wipYWaORsqsXKApfDYtFok4WO5OExDBdcCifuuBP0vyCaTPCdc/0Ra
yjotcSR+UOKqwBU+zFUxGQXKpSzkQ0BIlUSZG3IaP9R0d/1d2A0dbkbSFgBUIHMOGXbH
oRGkCAPFJ8KQwmseaT3xcBbw05rxww6VNy9mebJhPp4llgdyPxt6yeZ/rHyl9LyE5WUr
9eH0CjYXVjZd8gHULjSb1ICkoa/VSxtlcFGlydKHBGgrhebpWfDxzw90Wg2ouh7uVYdb
2hp5BNFO/uddNy9T7k8HDA+uJzlgA/KgQjGHTmf2nAMOtpXgNBaO+ZMsJpafLKjjymTX
Rl2A==
X-Forwarded-Encrypted: i=1; AFNElJ8XDbjcmIc/LVegk/KBCOYTpTCZg4hth7VkJC4UnqhRSMUvsFfVC2h0UMjp7oMwfq+P9pg4@nk.ca
X-Gm-Message-State: AOJu0Yw3Sdq7SYhnMDZeDEJsUZbQA5QXi6g+45IYonLXeX/7GC3uwohQ
iCxPTto4BaNTRsAu+1kbhY1taLXVUAOW0uCW5mEmqwclJXx7d7mJaIit3UZ0AhRDv5Ye7QVRqah
FliNzlxFH5GISvQTe904E0g380+cu3Uj+094J5s7Svrhaag==
MIME-Version: 1.0
X-Received: by 2002:a05:6808:e65b:b0:479:ac7d:6d91 with SMTP id
5614622812f47-482e58d8c09mt6732091b6e.39.1779124367547; Mon, 18 May 2026
10:12:47 -0700 (PDT)
Reply-To: no reply
Sender: Google Calendar
Message-ID:
Date: Mon, 18 May 2026 17:12:48 +0000
Subject: #JRHYMQO
From: no reply
Content-Type: multipart/alternative; boundary="000000000000f7a94206521aabe9"
X-Spam_score: 8.6
X-Spam_score_int: 86
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern
Time - New York Important Reminder About Your Upcoming Renewal Dear Valued
Customer,
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
[209.85.160.74 listed in dnsbl.ahbl.org]
[209.85.160.74 listed in dnsbl.ahbl.org]
[209.85.160.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.74 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
[209.85.160.74 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.74 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.2 MISSING_HEADERS Missing To: header
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.160.74 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.74 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.9 REPLYTO_WITHOUT_TO_CC No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} #JRHYMQO
--000000000000f7a94206521aabe9
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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=
--000000000000f7a94206521aabe9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=
ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">
NEtKnow now in NEtcraft's Top 14650 Part 2
Posted by Dave Yadallee onUniserve / Interbaun
Next, Uniserve
ranks on Netcraft >2000000 from >2000000
One of their acquisitions
interbaun
ranks with Netcraft ?????? from ?????? due to merging of sites.
One customer just came over from this organization in Nov 2006.
Clearwave Broadband
Clearwave Broadband ranks
at >2000000 from >2000000
Platinum Communications
Platinum Communications Corp.
bought out by Xplornet .
Wild Rose Internet
Wild Rose Internet
ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet
TIC Internet
TIC Internet
ranks >2000000 from >2000000 ( I do remember you).
Nisa Custom Internet Solutions
Nisa Custom Internet Solutions
ranks >2000000 from >2000000 by Netcraft
MediaShaker
Media Shakers of Edmonton
ranks >2000000 from >2000000
Koi Media
Koi Media
rank >2000000 from >2000000
WebFire
Webfire.ca
ranks >2000000 from >2000000 and seems to be connected with Shaw.
Core Network Solutions Inc.
Core Network Solutions Inc.
ranks at >2000000 from >2000000 .
The Network Centre
The Network Centre
ranks >2000000 from >2000000 and are linked with Telus high Speed.
Open Concept Internet, Inc.
Open Concept Internet, Inc.
rank > 2000000 from > 2000000
Techalta
Interspots of Edmonton
acquired by Techalta ;
Yegtel
Yegtel rank > 2000000 .
Internet Crossroads
Internet Crossroads Ltd of North Edmonton
rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .
If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse
our services.
NEtKnow now in NEtcraft's Top 14650 Part 1
Posted by Dave Yadallee on
All data is from Netcraft Toolbar .
Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?
This is not the Alexa Tool Bar!
Netknow now at 14636 from 14135 at Netcraft and pfs compliant
A significant decrease! We must do
How do we compare with other providers in
Edmonton, Alberta, Canada?
Next we have Telus.com
ranked by Netcraft at 3312 from 3294 .
Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business
is ranked by Netcraft at >2000000 from >2000000 .
Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?
Reviews of Telus are available :
Rogers Business Solutions
which rank 5344 from 5340 and are hosted in Europe.
We at Netknow are at 14636 from 18857 since the start of 2026.
The Government of Alberta Website
ranks 14793 from 14965 by Netcraft and seems to hosted on Cloudfare.
The City of Edmonton ranks 35449 from 35659 by Netcraft and hosted by Google.
The University of Alberta ranks 47360 from 48074 hosted by Amazon Techonologies.
We have Juno Internet ranked on top
at 336161 from 338371 who are the owners of
US Based Netzero at Netcraft Rank 83219 from 81686 .
NAIT ranks 123989 from 126640 hosted by Microsoft .
MacEwan ranks 126399 from 125814 .
TekSavvy ranks 228379 from 234602 and are hosted by Microsoft
Next,
members.shaw.ca
ranks >2000000 from >2000000 and retired and
Shaw Cable
is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .
Their Network Hosting Arm,
Big Pipe is at
Netcraft rank 349214 from 331219 and hosted by Akamai in Europe .
Reviews of Shaw are available :
Internet Centre
rank 380368 from 410140 . Their partner Rack Nine ranks > 2000000.
xplornet
ranks >2000000 from >2000000 and are listed with
Cirrus9 and are joining up with Shaw.
Their new domain xplore.ca ranks 451922 from 429846 .
According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.
Cybersurf
is ranked 873158 from 879038 and seems to be hosted in USA by DigitalOcean.
Primus
ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.
Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.
OkayVPN
Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?
This is not the Alexa Tool Bar!
NetKnow
Netknow now at 14636 from 14135 at Netcraft and pfs compliant
A significant decrease! We must do
- security audits regularly
- check on illegitimate traffic hitting the web server
- keep design current!
and
How do we compare with other providers in
Edmonton, Alberta, Canada?
Telus and reviews
Next we have Telus.com
ranked by Netcraft at 3312 from 3294 .
Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business
is ranked by Netcraft at >2000000 from >2000000 .
Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?
Reviews of Telus are available :
Rogers
Rogers Business Solutions
which rank 5344 from 5340 and are hosted in Europe.
Netknow again
We at Netknow are at 14636 from 18857 since the start of 2026.
Government of Alberta
The Government of Alberta Website
ranks 14793 from 14965 by Netcraft and seems to hosted on Cloudfare.
City of Edmonton
The City of Edmonton ranks 35449 from 35659 by Netcraft and hosted by Google.
University of Alberta
The University of Alberta ranks 47360 from 48074 hosted by Amazon Techonologies.
Juno and NetZero
We have Juno Internet ranked on top
at 336161 from 338371 who are the owners of
US Based Netzero at Netcraft Rank 83219 from 81686 .
NAIT / Northern Alberta Institute of Technology
NAIT ranks 123989 from 126640 hosted by Microsoft .
Grant MacEwen University
MacEwan ranks 126399 from 125814 .
TekSavvy
TekSavvy ranks 228379 from 234602 and are hosted by Microsoft
Shaw Cable
Next,
members.shaw.ca
ranks >2000000 from >2000000 and retired and
Shaw Cable
is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .
Their Network Hosting Arm,
Big Pipe is at
Netcraft rank 349214 from 331219 and hosted by Akamai in Europe .
Reviews of Shaw are available :
Internet Centre / CCINet
Internet Centre
rank 380368 from 410140 . Their partner Rack Nine ranks > 2000000.
Xplornet
xplornet
ranks >2000000 from >2000000 and are listed with
Cirrus9 and are joining up with Shaw.
Their new domain xplore.ca ranks 451922 from 429846 .
According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.
Distributel / 3Web / CIA
Cybersurf
is ranked 873158 from 879038 and seems to be hosted in USA by DigitalOcean.
Primus
Primus
ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.
Northern lights Fiber
Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.
OkayVPN
OkayVPN
are ranked by Netcraft >2000000 and uses Cloudfare.
Radiant Communications / goco.ca
Radiant Communications
are ranked by Netcraft >2000000 and part of goco.ca
which ranks >2000000 .
Tera Byte Edmonton and reviews
Next is Tera-Byte
at Netcraft Rank >2000000 with
Tera-Byte.ca
ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless
sold to Xplornet.
One of Tera-Byte's acquisitions
Edmonton Community Networks
ranks at >2000000 from >2000000 and
Go Edmonton ranks >2000000 from >2000000.
Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!
Reviews of Tera-byte is available at
here
and another here
and check Google for more reviews; just search tera byte.
MCSnet
MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .
Nucleus Internet Services
After that we have
Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .
4Web
4web ranks >2000000 from >2000000 .
Alentus / Wolfpaw
Alentus
rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .
wolfpaw.net
which ranks at >2000000 from >2000000
Yellowpencil
Yellowpencil Ranks >2000000 from >2000000
WSI Corporation
Next is WSI - We Simply The Internet of Toronto
at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.
OkayVPN
are ranked by Netcraft >2000000 and uses Cloudfare.
Radiant Communications / goco.ca
Radiant Communications
are ranked by Netcraft >2000000 and part of goco.ca
which ranks >2000000 .
Tera Byte Edmonton and reviews
Next is Tera-Byte
at Netcraft Rank >2000000 with
Tera-Byte.ca
ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless
sold to Xplornet.
One of Tera-Byte's acquisitions
Edmonton Community Networks
ranks at >2000000 from >2000000 and
Go Edmonton ranks >2000000 from >2000000.
Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!
Reviews of Tera-byte is available at
here
and another here
and check Google for more reviews; just search tera byte.
MCSnet
MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .
Nucleus Internet Services
After that we have
Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .
4Web
4web ranks >2000000 from >2000000 .
Alentus / Wolfpaw
Alentus
rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .
wolfpaw.net
which ranks at >2000000 from >2000000
Yellowpencil
Yellowpencil Ranks >2000000 from >2000000
WSI Corporation
Next is WSI - We Simply The Internet of Toronto
at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.
Mini Wifi Camera phish from Google User
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 11:02:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP1LA-00000000Jcs-3ICf
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 11:01:16 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 11:01:16 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:46946 helo=mail.issuegate.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from <2f528ce841@freenet-mobilfunk.de>)
id 1wP0tH-00000000HJg-0XjS
for doctor@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:32:34 -0600
Received: by mail.issuegate.com (Postfix, from userid 1000)
id C2C1F457CF; Mon, 18 May 2026 16:31:35 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="
Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Date: Mon, 18 May 2026 16:31:35 +0000
Message-ID: <98a7894e939aa5bd2f474852@mx.google.com>
List-Unsubscribe:
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,
or home with a compact smart camera designed for real-time monitoring, mot
[...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 TVD_RCVD_IP Message was received from an IP address
1.0 HK_RANDOM_FROM From username looks random
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.240.125.84 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera
Mini WiFi Camera With HD Monitoring
Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.
View Today's Discount
Mini Camera
Key Features
HD video quality with wide-angle coverage
Motion detection notifications
Night vision support
Wireless setup in minutes
Compact and discreet design
Remote viewing from smartphone or tablet
Recommended For
✔ Office monitoring
✔ Retail stores
✔ Home security
✔ Storage & inventory supervision
✔ Travel and temporary installations
Customer Review
“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”
— Verified Customer
Order Now
🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support
You are receiving this email because you subscribed to updates from our partners or business offers.
If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.
250 Yonge Street, Suite 2201
Toronto, ON M5B 2L7
Canada
© 2026 Maple North Solutions Inc. All Rights Reserved.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 11:02:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP1LA-00000000Jcs-3ICf
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 11:01:16 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 11:01:16 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:46946 helo=mail.issuegate.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from <2f528ce841@freenet-mobilfunk.de>)
id 1wP0tH-00000000HJg-0XjS
for doctor@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:32:34 -0600
Received: by mail.issuegate.com (Postfix, from userid 1000)
id C2C1F457CF; Mon, 18 May 2026 16:31:35 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="
Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Date: Mon, 18 May 2026 16:31:35 +0000
Message-ID: <98a7894e939aa5bd2f474852@mx.google.com>
List-Unsubscribe:
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,
or home with a compact smart camera designed for real-time monitoring, mot
[...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 TVD_RCVD_IP Message was received from an IP address
1.0 HK_RANDOM_FROM From username looks random
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.240.125.84 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera
Mini WiFi Camera With HD Monitoring
Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.
View Today's Discount
Mini Camera
Key Features
HD video quality with wide-angle coverage
Motion detection notifications
Night vision support
Wireless setup in minutes
Compact and discreet design
Remote viewing from smartphone or tablet
Recommended For
✔ Office monitoring
✔ Retail stores
✔ Home security
✔ Storage & inventory supervision
✔ Travel and temporary installations
Customer Review
“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”
— Verified Customer
Order Now
🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support
You are receiving this email because you subscribed to updates from our partners or business offers.
If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.
250 Yonge Street, Suite 2201
Toronto, ON M5B 2L7
Canada
© 2026 Maple North Solutions Inc. All Rights Reserved.
Mini Wifi Camera phish from Google User
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <557b381df1@freenet-mobilfunk.de>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 10:33:00 -0600
Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:49098 helo=mail.issuegate.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from <557b381df1@freenet-mobilfunk.de>)
id 1wP0sy-00000000HIU-3DhF
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:32:19 -0600
Received: by mail.issuegate.com (Postfix, from userid 1000)
id 833A94569C; Mon, 18 May 2026 16:31:15 +0000 (UTC)
To: dave@doctor.nl2k.ab.ca
From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="
Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Date: Mon, 18 May 2026 16:31:15 +0000
Message-ID: <248df5364d5e67dfa05a2f6b@mx.google.com>
List-Unsubscribe:
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
X-Spam_score: 10.4
X-Spam_score_int: 104
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,
or home with a compact smart camera designed for real-time monitoring, mot
[...]
Content analysis details: (10.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.240.125.84 listed in bl.score.senderscore.com]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 TVD_RCVD_IP Message was received from an IP address
1.0 HK_RANDOM_FROM From username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera
Mini WiFi Camera With HD Monitoring
Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.
View Today's Discount
Mini Camera
Key Features
HD video quality with wide-angle coverage
Motion detection notifications
Night vision support
Wireless setup in minutes
Compact and discreet design
Remote viewing from smartphone or tablet
Recommended For
✔ Office monitoring
✔ Retail stores
✔ Home security
✔ Storage & inventory supervision
✔ Travel and temporary installations
Customer Review
“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”
— Verified Customer
Order Now
🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support
You are receiving this email because you subscribed to updates from our partners or business offers.
If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.
250 Yonge Street, Suite 2201
Toronto, ON M5B 2L7
Canada
© 2026 Maple North Solutions Inc. All Rights Reserved.
X-Mozilla-Status2: 00000000
Return-path: <557b381df1@freenet-mobilfunk.de>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 10:33:00 -0600
Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:49098 helo=mail.issuegate.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from <557b381df1@freenet-mobilfunk.de>)
id 1wP0sy-00000000HIU-3DhF
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:32:19 -0600
Received: by mail.issuegate.com (Postfix, from userid 1000)
id 833A94569C; Mon, 18 May 2026 16:31:15 +0000 (UTC)
To: dave@doctor.nl2k.ab.ca
From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="
Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Date: Mon, 18 May 2026 16:31:15 +0000
Message-ID: <248df5364d5e67dfa05a2f6b@mx.google.com>
List-Unsubscribe:
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
X-Spam_score: 10.4
X-Spam_score_int: 104
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,
or home with a compact smart camera designed for real-time monitoring, mot
[...]
Content analysis details: (10.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.240.125.84 listed in bl.score.senderscore.com]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 TVD_RCVD_IP Message was received from an IP address
1.0 HK_RANDOM_FROM From username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera
Mini WiFi Camera With HD Monitoring
Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.
View Today's Discount
Mini Camera
Key Features
HD video quality with wide-angle coverage
Motion detection notifications
Night vision support
Wireless setup in minutes
Compact and discreet design
Remote viewing from smartphone or tablet
Recommended For
✔ Office monitoring
✔ Retail stores
✔ Home security
✔ Storage & inventory supervision
✔ Travel and temporary installations
Customer Review
“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”
— Verified Customer
Order Now
🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support
You are receiving this email because you subscribed to updates from our partners or business offers.
If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.
250 Yonge Street, Suite 2201
Toronto, ON M5B 2L7
Canada
© 2026 Maple North Solutions Inc. All Rights Reserved.
Mini Wifi Camera phish from Google User
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 11:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP1Kt-00000000JbI-2Seh
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 11:00:59 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 11:00:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:49100 helo=mail.issuegate.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from <4c43bae6e6@freenet-mobilfunk.de>)
id 1wP0sy-00000000HIV-3DcY
for root@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:32:19 -0600
Received: by mail.issuegate.com (Postfix, from userid 1000)
id AE5864569D; Mon, 18 May 2026 16:31:15 +0000 (UTC)
To: root@doctor.nl2k.ab.ca
From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="
Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Date: Mon, 18 May 2026 16:31:15 +0000
Message-ID: <3c7f8b7c5cfbcd460cff99d4@mx.google.com>
List-Unsubscribe:
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
X-Spam_score: 8.9
X-Spam_score_int: 89
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,
or home with a compact smart camera designed for real-time monitoring, mot
[...]
Content analysis details: (8.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.240.125.84 listed in bl.score.senderscore.com]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Mini WiFi Camera
Mini WiFi Camera With HD Monitoring
Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.
View Today's Discount
Mini Camera
Key Features
HD video quality with wide-angle coverage
Motion detection notifications
Night vision support
Wireless setup in minutes
Compact and discreet design
Remote viewing from smartphone or tablet
Recommended For
✔ Office monitoring
✔ Retail stores
✔ Home security
✔ Storage & inventory supervision
✔ Travel and temporary installations
Customer Review
“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”
— Verified Customer
Order Now
🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support
You are receiving this email because you subscribed to updates from our partners or business offers.
If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.
250 Yonge Street, Suite 2201
Toronto, ON M5B 2L7
Canada
© 2026 Maple North Solutions Inc. All Rights Reserved.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 11:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP1Kt-00000000JbI-2Seh
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 11:00:59 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 11:00:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 84.125.240.35.bc.googleusercontent.com ([35.240.125.84]:49100 helo=mail.issuegate.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from <4c43bae6e6@freenet-mobilfunk.de>)
id 1wP0sy-00000000HIV-3DcY
for root@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:32:19 -0600
Received: by mail.issuegate.com (Postfix, from userid 1000)
id AE5864569D; Mon, 18 May 2026 16:31:15 +0000 (UTC)
To: root@doctor.nl2k.ab.ca
From: "=?UTF-8?B?U2VjdXJpdHkgQWxlcnRz?="
Subject: =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Date: Mon, 18 May 2026 16:31:15 +0000
Message-ID: <3c7f8b7c5cfbcd460cff99d4@mx.google.com>
List-Unsubscribe:
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
X-Spam_score: 8.9
X-Spam_score_int: 89
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Mini WiFi Camera SMART SECURITY SOLUTIONS FOR HOME & BUSINESS
Mini WiFi Camera With HD Monitoring Protect your office, warehouse, storefront,
or home with a compact smart camera designed for real-time monitoring, mot
[...]
Content analysis details: (8.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.240.125.84 listed in bl.score.senderscore.com]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.240.125.84 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
[35.240.125.84 listed in will-spam-for-food.eu.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
Subject: {SPAM?} =?UTF-8?B?UHJvdGVjdCBZb3VyIEJ1c2luZXNzIDI0LzcgV2l0aCBUaGlzIE1pbmkgV2lGaSBDYW1lcmEg8J+aqA==?=
Mini WiFi Camera
Mini WiFi Camera With HD Monitoring
Protect your office, warehouse, storefront, or home with a compact smart camera designed for real-time monitoring, motion alerts, and remote access.
View Today's Discount
Mini Camera
Key Features
HD video quality with wide-angle coverage
Motion detection notifications
Night vision support
Wireless setup in minutes
Compact and discreet design
Remote viewing from smartphone or tablet
Recommended For
✔ Office monitoring
✔ Retail stores
✔ Home security
✔ Storage & inventory supervision
✔ Travel and temporary installations
Customer Review
“The installation was quick and the mobile access works perfectly. Excellent value for small business monitoring.”
— Verified Customer
Order Now
🔒 Secure Checkout | 🚚 Fast Delivery | 💬 Customer Support
You are receiving this email because you subscribed to updates from our partners or business offers.
If you no longer wish to receive these emails, you may unsubscribe here . Maple North Solutions Inc.
250 Yonge Street, Suite 2201
Toronto, ON M5B 2L7
Canada
© 2026 Maple North Solutions Inc. All Rights Reserved.
Bitcoin phish from Microsoft Outlook Part 3
Posted by Dave Yadallee on-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.93.10.75 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[40.93.10.75 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.93.10.75 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
1.0 HK_RANDOM_FROM From username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[haressaznzxrrsxaxz321(at)gmail.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[haressaznzxrrsxaxz321(at)gmail.com]
0.3 LONGWORD BODY: Uses overlong words
0.1 TW_RW BODY: Odd Letter Triples with RW
0.6 MEGALONGWORD BODY: Uses really overlong words
0.1 TW_DJ BODY: Odd Letter Triples with DJ
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
0.1 TO_IN_SUBJ To address is in Subject
Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Transaction_Alert_=2D_Bitcoin_Purchase_Requ?=
=?UTF-8?Q?est_Received_=40_po_18=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eo?=
=?UTF-8?Q?utlook=2Ecom=29?=
Haresasz Nxysarwsa has invited you to Transaction Alert – Bitcoin Purchase Request Received
Transaction Alert – Bitcoin Purchase Request Received
Pripojiť sa cez Google Meet – Dear Customer, Your PayPal payment for Bitcoin has been received and securely logged in our system. Transaction Summary: Purchase Type: Bitcoin (BTC) Payment Method: PayPal Amount Charged: $750.00
Pripojiť sa cez Google Meet
Odkaz na stretnutie
meet.google.com/hnf-cmsp-djr
Dear Customer,
Your PayPal payment for Bitcoin has been received and securely logged in our system.
Transaction Summary:
Purchase Type: Bitcoin (BTC)
Payment Method: PayPal
Amount Charged: $750.00
Status: Under Review
Our verification team is currently processing your order. Once approved, the transaction will be finalized automatically.
If this activity was not authorized by you, please call +1 801 614 4470 immediately.
Best Regards,
Accounts & Billing Team
Kedy
pondelok 18. máj 2026
Organizátor
Haresasz Nxysarwsa
haressaznzxrrsxaxz321@gmail.com
Hostia
(Zoznam hostí bol na žiadosť organizátora skrytý)
Odpoveď na cynthiaperez389903@groups.outlook.com
Áno
Nie
Možno
Ďalšie možnosti
Pozvánka z Kalendára Google
Túto správu ste dostali, pretože ste účastníkom danej udalosti.
Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie
Bitcoin phish from Microsoft Outlook PArt 2
Posted by Dave Yadallee on
=?utf-8?B?YXF0UmJsc3laNFdEQnVjbnJCbGFFd0lLcVFSYUJqR2p5S2s3T2tWazZFQUR3?=
=?utf-8?B?L3F1ZFVSMUpTalNZSmI3azRYVk5UNlBMM2lPQ0VnTVhXTklVNjgvOGc5ak9X?=
=?utf-8?B?L1ZObnlCUGR3TjdIRndJNjh5S2pSSS9kaUdtT0dqV050b0dPWDRQaTUrWTVE?=
=?utf-8?B?M1hieVVwSW5XUFNkNU9aalhGbmo0TmxwT2tLeXYzeVlmMDFEcVVUWVhoa1pO?=
=?utf-8?B?UWhzYzhTb2tBUnlteUdmZ1dzUXRFRUp3LzNDZmk5anlXYm9HYlhPZWRjU0VW?=
=?utf-8?B?dnRIcHJDRG1BWHlsZ3drSzVOa3ZUK2wrTmxSV2F0S2Zsbms3YU5rdUVJN2NN?=
=?utf-8?B?Mmh6Y1JvOTZCTWdlOVljaGZJam14V1FOeFp0M3NRRWRMMEcrWFpHQjdRMk14?=
=?utf-8?B?Q0IrcXI5STVsOEF1QThTZkVMRmhFVDkrVEpPQmhqbmhNZ1lpSUI3MHhzTERY?=
=?utf-8?B?OG9KdXBOZ0RYNTdacXV4ckd1OUxwT0lMOVg4TEJ1R3hTUENLVVFBazRBVGJl?=
=?utf-8?B?UksyLzFjbjdUMHlLQkhwUnBpdnFVYlpMZ1AyMmhXN2tlNFZiYiszNlUza2xz?=
=?utf-8?B?QVJURjNlc09OZnVUbW9CNjFRaTluSEVkNVRQU3NWOGdaWm9PZER1aGFoY2lY?=
=?utf-8?B?ZFNkWmxJU1k4VVdOVXJvTjFVbFh4MDRjUmpwd3NFN0FPTUFzSkhjbEJxdHdi?=
=?utf-8?B?NTBwVmNFdEtia3FxcVI2WGJETmI2SDJTRzBlYU5WbE5zSGRrdUdsbGw5Z2J5?=
=?utf-8?B?bWNjdjVIQm4wREVIZXhVUXNsaHlmdWMwK0J4Vk1sUWZYWHRFZnZSdVBackt4?=
=?utf-8?B?dG10NUk0Ui91U2xWUjNndUk2ZDVPa3QxZzlHc2dsUWpTRjRZWWlOMVR6cG5G?=
=?utf-8?B?eDlNVWhuQThsV1p1aFlnNThRaW1PSE0vRW1Gcnc4cHlCQ2JhcVdNaTZCK0ZC?=
=?utf-8?B?dmF3TERnUXo5NTZqQVc0RldKTTQxRGptYVFMaGgxNW1wM25nR3BDMXZNTFRU?=
=?utf-8?B?YVFZK0o3alpPTXdsZGVIRWZRbWRabGxkV0JLMXRXK3hrbmVuc2R4L1crSk1K?=
=?utf-8?B?RmFMMXV4VFZHbmM4VmRSK2FsdEhKQ3llNmVTUzYwVjhTWnRwYWUwcm8wWnRw?=
=?utf-8?B?NUtYSnVPRm9ySHc4ZU1yQk9jUnFZZkRyQXY5eG9PWGUzbDFEeDBKNnFENzQ2?=
=?utf-8?B?UlhZQmVCKzZhSCtJOERGdGJmelVKbFV2Zm9sWnpuOHlpa2ppNW9pZXRZZzg1?=
=?utf-8?B?UEtNZkxWU1Jhd25pcjN3b3JFZFNkVGZ0TlQ3M0NaeWZ6c0U0VFg5Y0ZlYVZD?=
=?utf-8?B?MVNIRExXN3JUU1dmbkFPUTRNOXBUM0ZuUVpXeU5HUEVlaUViRjNlUW9iR1FQ?=
=?utf-8?B?QzFoclVsWm43d2tzbEdNNWZqQVNmYlZOWUNibTIwQnlmdFZhazc4WXBCczQx?=
=?utf-8?B?SHVlZUl2VTUrN2tsV0pzY0ZZbnpGOGRPb281YzQwRHlyMEM1di9LUjl1WE1U?=
=?utf-8?B?TE9ac0d5K0RKaFNqejEzcVRBV2VOMWtRcFNqWnhFZGFzMjI3a0ZLdm53bFVB?=
=?utf-8?B?K04xdHZXMlB4TmFTYnRNUmIxNzJHQ3N4bVR3RDlHeHpOMEUvSkt6bnlReEty?=
=?utf-8?B?bUJrUjV1T0F0dWhkMjdMY09odXR3c2JhQktCV2JkZG4xVlFpMUNsOHhqRmow?=
=?utf-8?B?NFlWcUd1NThPem8yUVZPQWt4Z0o0SkVuV0F5TnlKb2cwaDRLZWt0bUpvZSs4?=
=?utf-8?B?T3Q3dThYcnBZY3dhM0dnTWlBN09XOG8rbHkzMFBmRXQ5NUh6VnFlcjFPNzdh?=
=?utf-8?B?enJLYnI0QnNqK252VE9vL0Y1TW9UOTlxOXVwcjJqRHZpSWNpRE56eW1yMHNz?=
=?utf-8?B?T2RIeEt4Q2g3Y0VySWZiejBpYzgxYVl3YlpBV1EwQTU2cGwzSGg4dERpTnRv?=
=?utf-8?B?dGlBVFR2NTYxa0NzVmd4bnp5WGNFZzQ3KytkVDZEbXptblNDd2h6dDhoaXBh?=
=?utf-8?B?SHpQZm4xVm55enI2d3F0VHN5OU5rNHdXclRUUEIrb2lpdzR1ejl4Mk5taFJV?=
=?utf-8?B?Y3c3NnFrVXlLZG51ZTcvcWlFNXdzVU8xVFNpRGlLc1JxV3BCYkFoUVVScEJG?=
=?utf-8?B?bWZwWmliSTZzblY1WFp0bDVEV2o0K3FCbDBpVTFoZWxqbkVtUzdaZGVjdkhy?=
=?utf-8?B?bURaK0kvT05CYmpLcnlvU21PZ3FOSE16MFVzbUZOWmVyTDk4Z0RIb1ZCb1lT?=
=?utf-8?B?RXZWMWVRK1dRN1dyMHZHLzhnWlFSVHp0Zmxvd2tEcXZSNFFMa1YwcUllSHpm?=
=?utf-8?B?eEtCT203NDA4V28yYU5Cd2dVWHRuYUg3OFN0b2NvQWFCZytmOWIwajdDcDZ4?=
=?utf-8?B?WFBza2FNaWZidGFFSE1SUDk0MEE3aTFMQWw5bjFkT2VSTnhYZ0tJdHoyNGtV?=
=?utf-8?B?UmhKR20zTXNIZlU1TVkrNWhoOEJUektBT3FHM0txUXA1MFpYa2R5OGRtN1kx?=
=?utf-8?B?T1dOWVBXekNWNUtvd1VMQ2pIN2xKY2lqWWx3ZzZiRXh0bjVYSWFJM0tJNjdF?=
=?utf-8?B?Znh3SWwvYkF3b21OKzd1QVRFNHB4OU1xME1LQk5rUHJQTHNUbGVMK1FkckRp?=
=?utf-8?B?SHZYRDBXcmlOV1FlRkZnQ21yZlEvWllzcU9ZNGlPNkZpS3BmZG5OUXJLQlVB?=
=?utf-8?B?c0xGaG5zVmxBSmlweXBXYldITHM4eEhZQmU4c050Wkl4RG9KaTE0Yi94d3g1?=
=?utf-8?Q?hHHA2jajUIG7kUGvMV4=3D?=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 May 2026 16:27:55.6828
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a0a05716-c95c-4a59-6273-08deb4fa6aa5
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource: BY1PEPF0001AE17.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR18MB4462
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Transaction Alert – Bitcoin Purchase Request Received pondelok
18. máj 2026 Pripojiť sa cez Google Meet https://meet.google.com/hnf-cmsp-djr?hs=224
Dear Customer,
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
[40.93.10.75 listed in dnsbl.ahbl.org]
[40.93.10.75 listed in dnsbl.ahbl.org]
[40.93.10.75 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
=?utf-8?B?L3F1ZFVSMUpTalNZSmI3azRYVk5UNlBMM2lPQ0VnTVhXTklVNjgvOGc5ak9X?=
=?utf-8?B?L1ZObnlCUGR3TjdIRndJNjh5S2pSSS9kaUdtT0dqV050b0dPWDRQaTUrWTVE?=
=?utf-8?B?M1hieVVwSW5XUFNkNU9aalhGbmo0TmxwT2tLeXYzeVlmMDFEcVVUWVhoa1pO?=
=?utf-8?B?UWhzYzhTb2tBUnlteUdmZ1dzUXRFRUp3LzNDZmk5anlXYm9HYlhPZWRjU0VW?=
=?utf-8?B?dnRIcHJDRG1BWHlsZ3drSzVOa3ZUK2wrTmxSV2F0S2Zsbms3YU5rdUVJN2NN?=
=?utf-8?B?Mmh6Y1JvOTZCTWdlOVljaGZJam14V1FOeFp0M3NRRWRMMEcrWFpHQjdRMk14?=
=?utf-8?B?Q0IrcXI5STVsOEF1QThTZkVMRmhFVDkrVEpPQmhqbmhNZ1lpSUI3MHhzTERY?=
=?utf-8?B?OG9KdXBOZ0RYNTdacXV4ckd1OUxwT0lMOVg4TEJ1R3hTUENLVVFBazRBVGJl?=
=?utf-8?B?UksyLzFjbjdUMHlLQkhwUnBpdnFVYlpMZ1AyMmhXN2tlNFZiYiszNlUza2xz?=
=?utf-8?B?QVJURjNlc09OZnVUbW9CNjFRaTluSEVkNVRQU3NWOGdaWm9PZER1aGFoY2lY?=
=?utf-8?B?ZFNkWmxJU1k4VVdOVXJvTjFVbFh4MDRjUmpwd3NFN0FPTUFzSkhjbEJxdHdi?=
=?utf-8?B?NTBwVmNFdEtia3FxcVI2WGJETmI2SDJTRzBlYU5WbE5zSGRrdUdsbGw5Z2J5?=
=?utf-8?B?bWNjdjVIQm4wREVIZXhVUXNsaHlmdWMwK0J4Vk1sUWZYWHRFZnZSdVBackt4?=
=?utf-8?B?dG10NUk0Ui91U2xWUjNndUk2ZDVPa3QxZzlHc2dsUWpTRjRZWWlOMVR6cG5G?=
=?utf-8?B?eDlNVWhuQThsV1p1aFlnNThRaW1PSE0vRW1Gcnc4cHlCQ2JhcVdNaTZCK0ZC?=
=?utf-8?B?dmF3TERnUXo5NTZqQVc0RldKTTQxRGptYVFMaGgxNW1wM25nR3BDMXZNTFRU?=
=?utf-8?B?YVFZK0o3alpPTXdsZGVIRWZRbWRabGxkV0JLMXRXK3hrbmVuc2R4L1crSk1K?=
=?utf-8?B?RmFMMXV4VFZHbmM4VmRSK2FsdEhKQ3llNmVTUzYwVjhTWnRwYWUwcm8wWnRw?=
=?utf-8?B?NUtYSnVPRm9ySHc4ZU1yQk9jUnFZZkRyQXY5eG9PWGUzbDFEeDBKNnFENzQ2?=
=?utf-8?B?UlhZQmVCKzZhSCtJOERGdGJmelVKbFV2Zm9sWnpuOHlpa2ppNW9pZXRZZzg1?=
=?utf-8?B?UEtNZkxWU1Jhd25pcjN3b3JFZFNkVGZ0TlQ3M0NaeWZ6c0U0VFg5Y0ZlYVZD?=
=?utf-8?B?MVNIRExXN3JUU1dmbkFPUTRNOXBUM0ZuUVpXeU5HUEVlaUViRjNlUW9iR1FQ?=
=?utf-8?B?QzFoclVsWm43d2tzbEdNNWZqQVNmYlZOWUNibTIwQnlmdFZhazc4WXBCczQx?=
=?utf-8?B?SHVlZUl2VTUrN2tsV0pzY0ZZbnpGOGRPb281YzQwRHlyMEM1di9LUjl1WE1U?=
=?utf-8?B?TE9ac0d5K0RKaFNqejEzcVRBV2VOMWtRcFNqWnhFZGFzMjI3a0ZLdm53bFVB?=
=?utf-8?B?K04xdHZXMlB4TmFTYnRNUmIxNzJHQ3N4bVR3RDlHeHpOMEUvSkt6bnlReEty?=
=?utf-8?B?bUJrUjV1T0F0dWhkMjdMY09odXR3c2JhQktCV2JkZG4xVlFpMUNsOHhqRmow?=
=?utf-8?B?NFlWcUd1NThPem8yUVZPQWt4Z0o0SkVuV0F5TnlKb2cwaDRLZWt0bUpvZSs4?=
=?utf-8?B?T3Q3dThYcnBZY3dhM0dnTWlBN09XOG8rbHkzMFBmRXQ5NUh6VnFlcjFPNzdh?=
=?utf-8?B?enJLYnI0QnNqK252VE9vL0Y1TW9UOTlxOXVwcjJqRHZpSWNpRE56eW1yMHNz?=
=?utf-8?B?T2RIeEt4Q2g3Y0VySWZiejBpYzgxYVl3YlpBV1EwQTU2cGwzSGg4dERpTnRv?=
=?utf-8?B?dGlBVFR2NTYxa0NzVmd4bnp5WGNFZzQ3KytkVDZEbXptblNDd2h6dDhoaXBh?=
=?utf-8?B?SHpQZm4xVm55enI2d3F0VHN5OU5rNHdXclRUUEIrb2lpdzR1ejl4Mk5taFJV?=
=?utf-8?B?Y3c3NnFrVXlLZG51ZTcvcWlFNXdzVU8xVFNpRGlLc1JxV3BCYkFoUVVScEJG?=
=?utf-8?B?bWZwWmliSTZzblY1WFp0bDVEV2o0K3FCbDBpVTFoZWxqbkVtUzdaZGVjdkhy?=
=?utf-8?B?bURaK0kvT05CYmpLcnlvU21PZ3FOSE16MFVzbUZOWmVyTDk4Z0RIb1ZCb1lT?=
=?utf-8?B?RXZWMWVRK1dRN1dyMHZHLzhnWlFSVHp0Zmxvd2tEcXZSNFFMa1YwcUllSHpm?=
=?utf-8?B?eEtCT203NDA4V28yYU5Cd2dVWHRuYUg3OFN0b2NvQWFCZytmOWIwajdDcDZ4?=
=?utf-8?B?WFBza2FNaWZidGFFSE1SUDk0MEE3aTFMQWw5bjFkT2VSTnhYZ0tJdHoyNGtV?=
=?utf-8?B?UmhKR20zTXNIZlU1TVkrNWhoOEJUektBT3FHM0txUXA1MFpYa2R5OGRtN1kx?=
=?utf-8?B?T1dOWVBXekNWNUtvd1VMQ2pIN2xKY2lqWWx3ZzZiRXh0bjVYSWFJM0tJNjdF?=
=?utf-8?B?Znh3SWwvYkF3b21OKzd1QVRFNHB4OU1xME1LQk5rUHJQTHNUbGVMK1FkckRp?=
=?utf-8?B?SHZYRDBXcmlOV1FlRkZnQ21yZlEvWllzcU9ZNGlPNkZpS3BmZG5OUXJLQlVB?=
=?utf-8?B?c0xGaG5zVmxBSmlweXBXYldITHM4eEhZQmU4c050Wkl4RG9KaTE0Yi94d3g1?=
=?utf-8?Q?hHHA2jajUIG7kUGvMV4=3D?=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 May 2026 16:27:55.6828
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a0a05716-c95c-4a59-6273-08deb4fa6aa5
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource: BY1PEPF0001AE17.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR18MB4462
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Transaction Alert – Bitcoin Purchase Request Received pondelok
18. máj 2026 Pripojiť sa cez Google Meet https://meet.google.com/hnf-cmsp-djr?hs=224
Dear Customer,
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
[40.93.10.75 listed in dnsbl.ahbl.org]
[40.93.10.75 listed in dnsbl.ahbl.org]
[40.93.10.75 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[209.85.128.71 listed in dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.93.10.75 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[209.85.128.71 listed in will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:cafe:0:0:2d listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:a03:114:0:0:0:24 listed in]
[will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
[40.93.10.75 listed in will-spam-for-food.eu.org]
Bitcoin phish from Microsoft Outlook PArt 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 11:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP1KW-00000000JZe-2oLZ
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 11:00:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 11:00:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-westus2azlp17010075.outbound.protection.outlook.com ([40.93.10.75]:52568 helo=CO1PR03CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wP0q0-00000000H4y-0qgx
for doctor@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:29:17 -0600
Received: from BYAPR21CA0014.namprd21.prod.outlook.com (2603:10b6:a03:114::24)
by SJ0PR18MB4462.namprd18.prod.outlook.com (2603:10b6:a03:302::21) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.23; Mon, 18 May
2026 16:27:55 +0000
Received: from BY1PEPF0001AE17.namprd04.prod.outlook.com
(2603:10b6:a03:114:cafe::2d) by BYAPR21CA0014.outlook.office365.com
(2603:10b6:a03:114::24) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.2 via Frontend Transport; Mon, 18
May 2026 16:27:55 +0000
Authentication-Results: spf=pass (sender IP is 209.85.128.71)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=google.com;dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.128.71 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.128.71; helo=mail-wm1-f71.google.com; pr=C
Received: from mail-wm1-f71.google.com (209.85.128.71) by
BY1PEPF0001AE17.mail.protection.outlook.com (10.167.242.107) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.48.11
via Frontend Transport; Mon, 18 May 2026 16:27:55 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:C195F50ED4C419159CB8E20F29A75F0A50625297D47D85A8878524E202C0A1D7;UpperCasedChecksum:75003B263646E7B18A19CF5F144FB744A4B853729B5124F7D37DF6C8CD50FBEE;SizeAsReceived:3414;Count:15
Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-48fe40b61a3so20036165e9.3
for; Mon, 18 May 2026 09:27:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779121674; x=1779726474; darn=groups.outlook.com;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;
b=EfLcv+avuF/k4ACbRTrUqlZuLFb42S9qMWPk2e2nDgNrTeV+mbgOXjanqwji9HqlDb
AF2ymJeo9I7uXUPBrtmcxu60MCmuVUGzZVQJmOQfDQZXpt4pi7djK/4DcoXYIUBS0K8U
MY8WiN1Ab9NsrCaYdiIKmjmsQLZuJOny/mZ9LxhHAaAdhVQuch0tZ1XEy1drMv8nLPhJ
T2z4d8ZXx2QcRrggavW03IUx/EEiexCrenFE0XIYV8m0Bgl8j4XnoFYuKP1KLxR+UpIU
GD/uNza8yWLfERviAY8eSpm46EMXZ2zjgH6nNn3W8TuvqIBns3pEmU7coSXFUBWRzJcY
KJEQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779121674; x=1779726474; darn=groups.outlook.com;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;
b=N2iXGC0AEGeEsP5pqbttEu1+B1Bb6J7+H1/8AkIGUucv3M3rp67hNi/dGVJ55JTQYd
PVNcwo9/8FzBBSM0JINqgZK1tht0ZM6wnQSXP1z9/0WpUPo/e2B5GxCzqgfEqmKrYqD1
L3OjD82KiYV3yZX6Poduayd7w9qOutoZMnHf7i5P+/QqShTZMkaNuTHPr0sdFeHA7jSl
0nKvEhL2Aeo17xviMgwJ1xv5oPzlhlS+BFYjuUJzYdzmFBTwcFIxG+mWrfufgw+19J4j
xwS1QCHDfjMmp5MeW+76jr3CMyNVSh6KjiqLbMbdzpyqW0ogtKNsyK5SXDQUeOlUtnjn
PMFA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779121674; x=1779726474;
h=to:from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;
b=rjgUYIMs5JDiaYAcQNKC4fF5H2QcQP53LSGFgLr0qSyM+BRwKxxfgIoVuNUVRWZ4l2
Inyc2mQTGOdDL6pZ/ROLHLL5y7m9mATXgWeq5jPEYCQClkQyvDnGjvoniUSFJwPZsNeM
KuuaH6O9bcmo6OfZJLsNy4zDxDAllOfNiHkWtkWFCn6u5Mfe/JiUWiaIxLTHP4rPmuCA
quJ7yV94dUA4ZAo38q8qjZeHd3WsgrwKIR0xI/tn8qPVTsdPqcQJnZlALhWaqt4ZgKuh
XkbS03BVupvFMb1GmjGZjRZqE5L2ZP6O8uT20fxwBYKhuWA2p4y6ajdaS415oFa8PKr6
iNNg==
X-Gm-Message-State: AOJu0Ywep3tN5MHy+LYsQ3+1L3wW24HP9FKlhPoS3dUjd63DI2z3HKsn
xSXzRvor74RBxRowAM7+QHWG5wYVqHsd4n9FOc/zZPbL7+xF6MVRSCsbJF6g3aHX9zRUa94/b1A
Aseoo2JTaKHS9JC6TcWeURFHSg5mbcluMTkM=
MIME-Version: 1.0
X-Received: by 2002:a05:600c:4897:b0:48f:e6de:1cb2 with SMTP id
5b1f17b1804b1-48fe6de1db4mr151651985e9.19.1779121674146; Mon, 18 May 2026
09:27:54 -0700 (PDT)
Reply-To: Haresasz Nxysarwsa
Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=
Message-ID:
Date: Mon, 18 May 2026 16:27:54 +0000
Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Transaction_Alert_=2D_Bitcoin_Purchase_Requ?=
=?UTF-8?Q?est_Received_=40_po_18=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eo?=
=?UTF-8?Q?utlook=2Ecom=29?=
From: Haresasz Nxysarwsa
To: cynthiaperez389903@groups.outlook.com
Content-Type: multipart/mixed; boundary="000000000000665c6506521a0b61"
X-IncomingHeaderCount: 15
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BY1PEPF0001AE17:EE_|SJ0PR18MB4462:EE_
X-MS-Office365-Filtering-Correlation-Id: a0a05716-c95c-4a59-6273-08deb4fa6aa5
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 209.85.128.71
X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM
X-SID-Result: PASS
X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com
X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com
X-Microsoft-Antispam:
BCL:0;ARA:1444111002|6092099016|24102599021|3069299007|26000799027|9000799056|9020799019|6149299003|29080799009|6019299003|5139299004|4040799016|34130799006|3151999006|970799063|26130799012|9400799043|1680799066|16200799027|32020799003|22000799015|440099028|4302099013|3412199025|2145499017|30041999003|26104999009|18021999003|1360799030|1370799030|1380799030|21002599022;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?dFhsbHpBR3VWVDNMWWpPVit3MEVTSTRjbi9JOGFReTdCSlNxSWg5U25SSHBO?=
=?utf-8?B?Z2lvSmhkYVVic0EzZ0JFNFlLOE9IWEJTVStYanN3QWpmdE5hZ1l6aktVcUZx?=
=?utf-8?B?N2FqcGUzSU9MMDJ4NFcwMllxaDdPa1RERDc0T3drVjVvY1FWN1VhNWJzWldU?=
=?utf-8?B?bW1DUitLc0Q5Y0ZHdnQ4SHo2WThLcGNkQlh1QmlhR3o2dGhlUTIrUE9pNlBO?=
=?utf-8?B?bTY5UUUvTENrQ0lScnc0WnVQUkpZakx5MEpZSStTYnhDZGJmY2VFUytIZWlP?=
=?utf-8?B?N3ZqSnZZbTJhaDNPVkY2Y1RRYUZGQy9kSDBNMnUzclpVeWZmRldKRVl6eXZi?=
=?utf-8?B?Ynd0bU1lS29wUkhPSVhyeDVNQkV0WVQ2OE1LaGFqWW9oMkpGdThzMEExUWJq?=
=?utf-8?B?UmVCOGx5SFNMdzRLbGtzNkNENHVVbVJVZTIvZitOcU9EcWhtT0Y0WGljS2Vj?=
=?utf-8?B?eVhtUXVlQnkzSHQ0WFVhaE54NHlCemI3TVZzYVBDa053RFEvS0k2NlRSV1Q1?=
=?utf-8?B?ZDRBYnlSdVJXSEJ3MDJ1TzRRZG05UnR3MHlCMnU1MWlaNUZJeitqVEFHWktB?=
=?utf-8?B?Q1NJeUxlK2w0YUhBZWF0Z3hwY2hWQUp3dnBVOWF4QVc4Tk9QL0JtSTB3Qnp3?=
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 May 2026 11:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP1KW-00000000JZe-2oLZ
for dave@doctor.nl2k.ab.ca;
Mon, 18 May 2026 11:00:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 May 2026 11:00:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-westus2azlp17010075.outbound.protection.outlook.com ([40.93.10.75]:52568 helo=CO1PR03CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wP0q0-00000000H4y-0qgx
for doctor@doctor.nl2k.ab.ca;
Mon, 18 May 2026 10:29:17 -0600
Received: from BYAPR21CA0014.namprd21.prod.outlook.com (2603:10b6:a03:114::24)
by SJ0PR18MB4462.namprd18.prod.outlook.com (2603:10b6:a03:302::21) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.25.23; Mon, 18 May
2026 16:27:55 +0000
Received: from BY1PEPF0001AE17.namprd04.prod.outlook.com
(2603:10b6:a03:114:cafe::2d) by BYAPR21CA0014.outlook.office365.com
(2603:10b6:a03:114::24) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.2 via Frontend Transport; Mon, 18
May 2026 16:27:55 +0000
Authentication-Results: spf=pass (sender IP is 209.85.128.71)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=google.com;dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.128.71 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.128.71; helo=mail-wm1-f71.google.com; pr=C
Received: from mail-wm1-f71.google.com (209.85.128.71) by
BY1PEPF0001AE17.mail.protection.outlook.com (10.167.242.107) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.48.11
via Frontend Transport; Mon, 18 May 2026 16:27:55 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:C195F50ED4C419159CB8E20F29A75F0A50625297D47D85A8878524E202C0A1D7;UpperCasedChecksum:75003B263646E7B18A19CF5F144FB744A4B853729B5124F7D37DF6C8CD50FBEE;SizeAsReceived:3414;Count:15
Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-48fe40b61a3so20036165e9.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779121674; x=1779726474; darn=groups.outlook.com;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;
b=EfLcv+avuF/k4ACbRTrUqlZuLFb42S9qMWPk2e2nDgNrTeV+mbgOXjanqwji9HqlDb
AF2ymJeo9I7uXUPBrtmcxu60MCmuVUGzZVQJmOQfDQZXpt4pi7djK/4DcoXYIUBS0K8U
MY8WiN1Ab9NsrCaYdiIKmjmsQLZuJOny/mZ9LxhHAaAdhVQuch0tZ1XEy1drMv8nLPhJ
T2z4d8ZXx2QcRrggavW03IUx/EEiexCrenFE0XIYV8m0Bgl8j4XnoFYuKP1KLxR+UpIU
GD/uNza8yWLfERviAY8eSpm46EMXZ2zjgH6nNn3W8TuvqIBns3pEmU7coSXFUBWRzJcY
KJEQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779121674; x=1779726474; darn=groups.outlook.com;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;
b=N2iXGC0AEGeEsP5pqbttEu1+B1Bb6J7+H1/8AkIGUucv3M3rp67hNi/dGVJ55JTQYd
PVNcwo9/8FzBBSM0JINqgZK1tht0ZM6wnQSXP1z9/0WpUPo/e2B5GxCzqgfEqmKrYqD1
L3OjD82KiYV3yZX6Poduayd7w9qOutoZMnHf7i5P+/QqShTZMkaNuTHPr0sdFeHA7jSl
0nKvEhL2Aeo17xviMgwJ1xv5oPzlhlS+BFYjuUJzYdzmFBTwcFIxG+mWrfufgw+19J4j
xwS1QCHDfjMmp5MeW+76jr3CMyNVSh6KjiqLbMbdzpyqW0ogtKNsyK5SXDQUeOlUtnjn
PMFA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779121674; x=1779726474;
h=to:from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=v4MPtRwrQaI5YCga2YorkAJ6lqVYBrgurPl2r70iOKY=;
b=rjgUYIMs5JDiaYAcQNKC4fF5H2QcQP53LSGFgLr0qSyM+BRwKxxfgIoVuNUVRWZ4l2
Inyc2mQTGOdDL6pZ/ROLHLL5y7m9mATXgWeq5jPEYCQClkQyvDnGjvoniUSFJwPZsNeM
KuuaH6O9bcmo6OfZJLsNy4zDxDAllOfNiHkWtkWFCn6u5Mfe/JiUWiaIxLTHP4rPmuCA
quJ7yV94dUA4ZAo38q8qjZeHd3WsgrwKIR0xI/tn8qPVTsdPqcQJnZlALhWaqt4ZgKuh
XkbS03BVupvFMb1GmjGZjRZqE5L2ZP6O8uT20fxwBYKhuWA2p4y6ajdaS415oFa8PKr6
iNNg==
X-Gm-Message-State: AOJu0Ywep3tN5MHy+LYsQ3+1L3wW24HP9FKlhPoS3dUjd63DI2z3HKsn
xSXzRvor74RBxRowAM7+QHWG5wYVqHsd4n9FOc/zZPbL7+xF6MVRSCsbJF6g3aHX9zRUa94/b1A
Aseoo2JTaKHS9JC6TcWeURFHSg5mbcluMTkM=
MIME-Version: 1.0
X-Received: by 2002:a05:600c:4897:b0:48f:e6de:1cb2 with SMTP id
5b1f17b1804b1-48fe6de1db4mr151651985e9.19.1779121674146; Mon, 18 May 2026
09:27:54 -0700 (PDT)
Reply-To: Haresasz Nxysarwsa
Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=
Message-ID:
Date: Mon, 18 May 2026 16:27:54 +0000
Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Transaction_Alert_=2D_Bitcoin_Purchase_Requ?=
=?UTF-8?Q?est_Received_=40_po_18=2E_m=C3=A1j_2026_=28cynthiaperez389903=40groups=2Eo?=
=?UTF-8?Q?utlook=2Ecom=29?=
From: Haresasz Nxysarwsa
To: cynthiaperez389903@groups.outlook.com
Content-Type: multipart/mixed; boundary="000000000000665c6506521a0b61"
X-IncomingHeaderCount: 15
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BY1PEPF0001AE17:EE_|SJ0PR18MB4462:EE_
X-MS-Office365-Filtering-Correlation-Id: a0a05716-c95c-4a59-6273-08deb4fa6aa5
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 209.85.128.71
X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM
X-SID-Result: PASS
X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com
X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com
X-Microsoft-Antispam:
BCL:0;ARA:1444111002|6092099016|24102599021|3069299007|26000799027|9000799056|9020799019|6149299003|29080799009|6019299003|5139299004|4040799016|34130799006|3151999006|970799063|26130799012|9400799043|1680799066|16200799027|32020799003|22000799015|440099028|4302099013|3412199025|2145499017|30041999003|26104999009|18021999003|1360799030|1370799030|1380799030|21002599022;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?dFhsbHpBR3VWVDNMWWpPVit3MEVTSTRjbi9JOGFReTdCSlNxSWg5U25SSHBO?=
=?utf-8?B?Z2lvSmhkYVVic0EzZ0JFNFlLOE9IWEJTVStYanN3QWpmdE5hZ1l6aktVcUZx?=
=?utf-8?B?N2FqcGUzSU9MMDJ4NFcwMllxaDdPa1RERDc0T3drVjVvY1FWN1VhNWJzWldU?=
=?utf-8?B?bW1DUitLc0Q5Y0ZHdnQ4SHo2WThLcGNkQlh1QmlhR3o2dGhlUTIrUE9pNlBO?=
=?utf-8?B?bTY5UUUvTENrQ0lScnc0WnVQUkpZakx5MEpZSStTYnhDZGJmY2VFUytIZWlP?=
=?utf-8?B?N3ZqSnZZbTJhaDNPVkY2Y1RRYUZGQy9kSDBNMnUzclpVeWZmRldKRVl6eXZi?=
=?utf-8?B?Ynd0bU1lS29wUkhPSVhyeDVNQkV0WVQ2OE1LaGFqWW9oMkpGdThzMEExUWJq?=
=?utf-8?B?UmVCOGx5SFNMdzRLbGtzNkNENHVVbVJVZTIvZitOcU9EcWhtT0Y0WGljS2Vj?=
=?utf-8?B?eVhtUXVlQnkzSHQ0WFVhaE54NHlCemI3TVZzYVBDa053RFEvS0k2NlRSV1Q1?=
=?utf-8?B?ZDRBYnlSdVJXSEJ3MDJ1TzRRZG05UnR3MHlCMnU1MWlaNUZJeitqVEFHWktB?=
=?utf-8?B?Q1NJeUxlK2w0YUhBZWF0Z3hwY2hWQUp3dnBVOWF4QVc4Tk9QL0JtSTB3Qnp3?=