NetKnow Corporate Blog

Nigerian business proposal spam from Google Gmail

Posted by Dave Yadallee on Tuesday, May 19. 2026

Hi, I came across your company

website www.smartofficeservices.ca and spent some time exploring your business

online. Your platform looks really interesting. Iâ€™m Danielle, an experienced

iOS & Android app developer helping businesses build high-quality mobile

apps.

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

[209.85.214.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:10a4:2a9:f563:6016:efbb:a340 listed in]

[will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

[209.85.214.196 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.196 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: oxygentech.in]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: oxygentech.in]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: oxygentech.in]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.196 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.196 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} App idea for smartofficeservices.ca

Hi,

I came across your company website www.smartofficeservices.ca and spent some time exploring your business online. Your platform looks really interesting.

I’m Danielle, an experienced iOS & Android app developer helping businesses build high-quality mobile apps.

If you’re considering developing a mobile app to grow your platform, I’d love to share a few suggestions and examples from similar projects.

Let me know if you’d like to connect.

Best,

Danielle

App Developer

Nigerian business proposal spam from Google Gmail

Posted by Dave Yadallee on Tuesday, May 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPKdi-00000000MDR-1Pd8

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 07:37:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 May 2026 07:37:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f47.google.com ([209.85.167.47]:61756)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPHmI-00000000OcL-3aZS

for root@nk.ca;

Tue, 19 May 2026 04:34:32 -0600

Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-5a858881ad2so4692797e87.3

for ; Tue, 19 May 2026 03:33:35 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779186808; cv=none;

d=google.com; s=arc-20240605;

b=kTIkUDOdlJ5JFK3b0SKXGGH0xFqFbC+jR2uAGZTiHoVz/Kq1OEPu/LkH6PJ/28cfcb

Ylg66ATlJoSsXQVZgEiO73L9njtzuoEfZRZQJqSdiLxPXxTGLpILSII3PA2+BKmIcpSJ

4BYt5X+Aw+uWfqvUQANfO/pRqXxhUvdHLOeRNSe0CBQud8o5q3sdWjM3rvyveqj6Cmzs

KgysuBd7w10w0JCRGK/vKJOMCNhhyUZhgpSdKx2xHnd2J6E15EsZRyOTenGODknFZTHz

KRmZKJOU6IhkLrrms5BcrICYfZK87aBkaAMV14YQ1Svw6VVad9g/nSRez4scY33CfTdz

0V+Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=9EZpG4tDodId6VLyE6EE7wTRhwwfSyqsaYGw04fI2dc=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=LchUxtoKx8J3dl2iWIOosLCFAiUqSynSLzn3QJ3SKbIiYgjnWa/5t6uY6b+JD+ht67

6DMgp3T4er/U+A3Zalj3tulKcFwOxzLOPE39FLfU4JvjrQh0ukoOlS1HuHcjBp+1GSGX

BAp9Rmj2MtltRuJqa0BWX6DBn6mTueDDCCPj9u7Q21LQOLPz3nH6ws0TrgqkzU/WpKuN

xXniiFhCsbu7N8+3bXQOraCIv41bk2d+xJye64yqSKxnr+vg9ceCJE54iK+SqBABVElv

OZ1krfemE81Y42f8msFHZbWDBd23//O1sv+Po4v0X0ks62RCmZS8tnT1C2u2phD4XNKf

KYzA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779186808; x=1779791608; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=9EZpG4tDodId6VLyE6EE7wTRhwwfSyqsaYGw04fI2dc=;

b=cOH1gz+N1c6FUPl0vBTO2AsQhuMh48YCfa3owGkfGeaUb+hluC3SA7PVROC3m69ZWf

WRIZ6ZujsHnQTQ0TGem6LMsw3yWqi/jaRBrGivnWRfHcWlMEa3+6StqRTyRFE7W/eo7q

yiXXJMLLupSfC8zApf3G/ajMmOqKT73wdbuiu5YAduaj+ia98ytNhZ96d1/85rjHndgh

ChZ5WK21+1kcO4F0Z+wR3I6p+XMfhO1eLZixZ3E8JcS02PKFiSbxxTmtW7VpPHa56J/n

0SXcBwiZY3rzflsvzob+cOANZu96f9nPmtHbL1MhGBo92Dky9lHJFHL/TkIm2Z7PTIES

54qQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779186808; x=1779791608;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=9EZpG4tDodId6VLyE6EE7wTRhwwfSyqsaYGw04fI2dc=;

b=jWFOgw266w1j8gNU2r5+O33ebO5SdvlSuxiV3Z268aks1gvoBRfwrT6VnIS3pLuzIS

s/pdP39zNv2kdvADv3EZ17pTngzsnf55Qzd21AVSf4oiLEVQUWzKXcVBm1Lk7EySIrvJ

vVO+f7WUxEfXwrqwFXd6sNslrsR/bb2eAZzGuao9IK4qjEPAujjnFd1ufyvy/VRwNrkL

Mze71XpoDNKm+3YqexPRDrsWYEV8Qy3HRYrR965QdNKXu8l6YJlczemZmyFum5uLw1dW

0SHUDpmpCggC2UTtRXLmZ/g2RKwN49oA6rwjkUmvkewtdZVRO/t3SPsA8vHfXDydyExe

Za5Q==

X-Gm-Message-State: AOJu0YwO6MI+10qg8osrVpdTl9PRPG5MettV9MAbsKYKEuT+9XEh1U35

cnVHaCtWZBBSJOWZJB6YIZ+a0ugrQ6mABM/xIy2hAmOG1Yq0BQRmcIr7ue+UWsppJ1rBPkJ93Sh

bIVkuPZs3CMXoMXL78Z8vL6EDo4cTUMp4WZVZ

X-Gm-Gg: Acq92OEO2uxTnW8zs/dB7nLRTb5CB6z4dEdnWTAfxUbuHxtT4x7dBDDLUy7YGHg8m7i

XmWjxQkRRrd0ntMorS8TShHwUk5yq8yUM9jOyDF2fLOJsyeuONFLvg/lwYDzV0hDmcG2ujd+/RT

e0GBzKKEHKAeeL6e4kV5cB0SltgK702qfTmIxFEcwKvukjlCz3FevIyj+RWXqQNOzjxbpxHtmZ+

zc+yUgFgLbIKZcnDxJW/ZtZ2vUNY/F0QUFP14MpG9SmZegkHym3PWOqmDoTjakxcW0mfrORQZhJ

Ef0BVeZbglV+Poqvh3wldbG8NIB5nyS7Cmg=

X-Received: by 2002:a05:6512:4026:b0:5a8:74ac:cf7e with SMTP id

2adb3069b0e04-5aa0e730500mr5710153e87.24.1779186807356; Tue, 19 May 2026

03:33:27 -0700 (PDT)

MIME-Version: 1.0

From: Onur Genc

Date: Tue, 19 May 2026 11:33:15 +0100

X-Gm-Features: AVHnY4Kc0YHwVWnvko7RSPY3wIRzgqgtQTgtdv6A7N6rflPjO7RY96wwFLfyOBE

Message-ID:

Subject: Business collaboration

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000a442870652293581"

--000000000000a442870652293581

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

I have tried to reach out to you in the past but you seems not active, Let

me know if it's okay for me to send specifics of a proposal to your email

address since I have it from LinkedIn.

Best regards,

Mr. Onur Gen=C3=A7.

*..........................................*CONFIDENTIALITY

NOTICE...........................

This message is for the designated recipient only and may contain

privileged, proprietary, or otherwise confidential information. If you have

received it in error, please notify the sender immediately and delete the

original. Any other use of the e-mail by you is prohibited. Where allowed

by local law, electronic communications with Accenture and its affiliates,

including e-mail and instant messaging (including content), may be scanned

by our systems for the purposes of information security, AI-powered support

capabilities, and assessment of internal compliance with Accenture policy.

Your privacy is important to us. Accenture uses your personal data only in

compliance with data protection laws. For further information on how

Accenture processes your personal data, please see our privacy statement at

--000000000000a442870652293581

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv dir=3D"ltr">

le=3D"font-size:medium">

00">I have tried to reach out to you =C2=A0in the past but you seems not ac=

tive, Let me know if it's okay for me to send specifics of a proposal t=

o your email address since I have it from LinkedIn.

=3D"font-size:small">

tyle=3D"font-size:small">

Best regards,
t>

Mr. Onur Gen=C3=A7.

nt>

order-left-width:medium;border-left-style:none;border-left-color:currentcol=

or;padding:0px;display:flex;font-family:"Google Sans",Roboto,Robo=

toDraft,Helvetica,Arial,sans-serif;font-size:medium">

px;min-width:0px;padding:0px 0px 20px;width:auto">

ion:ltr;margin:8px 0px 0px;padding:0px;font-size:0.875rem;overflow-x:hidden=

">

ze-adjust:none;font-stretch:normal;font-size:small;line-height:1.5;font-fam=

ily:Arial,Helvetica,sans-serif;overflow:auto hidden">

r">

color=3D"#3d85c6">..............=

............................
ng:1px">CONFIDENTIALITY NOTICE...........................<=

/font>

rial">This message is for the desi=

gnated recipient only and may contain privileged, proprietary, or otherwise=

confidential information. If you have received it in error, please notify =

the sender immediately and delete the original. Any other use of the e-mail=

by you is prohibited. Where allowed by local law, electronic communication=

s with Accenture and its affiliates, including e-mail and instant messaging=

(including content), may be scanned by our systems for the purposes of inf=

ormation security, AI-powered support capabilities, and assessment of inter=

nal compliance with Accenture policy. Your privacy is important to us. Acce=

nture uses your personal data only in compliance with data protection laws.=

For further information on how Accenture processes your personal data, ple=

ase see our privacy statement at=C2=A0

div>

<=

/div>

le=3D"clear:both">

<=

/div>

--000000000000a442870652293581--

Conference spam from Google Gmail

Posted by Dave Yadallee on Tuesday, May 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 May 2026 07:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPKcz-00000000Lxk-45Yk

for dave@doctor.nl2k.ab.ca;

Tue, 19 May 2026 07:36:57 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 May 2026 07:36:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f67.google.com ([209.85.222.67]:42013)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPFeI-00000000D4u-2K6B

for root@nk.ca;

Tue, 19 May 2026 02:18:06 -0600

Received: by mail-ua1-f67.google.com with SMTP id a1e0cc1a2514c-95ce0cf2d4bso1961937241.0

for ; Tue, 19 May 2026 01:17:10 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779178624; cv=none;

d=google.com; s=arc-20240605;

b=PvOryUQuTkniy1sBKyllJIwAdgjA1VZ3LzF816NoDb7/+8r609RNzOgS8LGVv55Mtm

lXu+QFh7ua9cnAyBW1/wqZRdNxYW3SsrCeNTWBlZMNAvzwjdh58mCkG3LutbWWqGJlY3

1Tm2wz80p2U9Et6w2EAhfdHwi0rPBo/2o8A2Wxf2NGQoJqPGkZhehAy0P5QvGRfWliks

QpqPYnGpB9jmJ05+tAFLi4jpWT8q0frb4FTGgMVZV53i4R0vIUgUtHEatwRRz+CMOJD7

o4Eflbb569w1mm66AwsrltR5WbWzW6Nuc6bDpNYRlfHT6Ll5ExzZljUte7ZhRz/8AUTR

jHdA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=PysVgv6iV7UT3pd5bpbm6Sjzc5z67DqqzjIJA3xVfLM=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=hkVrPtRwv5S2k/Kv1iqoNXC/MpNq7hUzBQT5qlI4AkgxSNE6UIO3CyBnwWzG2g/9os

D5t1zKUtZ10pDBuoBnA9LMe1Wjxdc1TPH7J1xKCec7bCMZdnF+Xib9Q1aub83xnxFnkQ

fxnoIGa3cjy2jf4RPcSdWw/6ZrD+uehl/JspNr465IB2tdbh+WU6MWgThUoPqWy5s/dl

x+9AkDMQjgb7zrAT0EBZSvkGAI7VjdN4YhRvvtcY/Z/JPYFrJh99R+t0VJSaZJKGNuTO

jcIs+NpgBAJSIED2wo6aDg4N1jDbx+6SyQN+9mD4XYYZ484zszzyNJflEzUyaR4k589H

kwrQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779178624; x=1779783424; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=PysVgv6iV7UT3pd5bpbm6Sjzc5z67DqqzjIJA3xVfLM=;

b=FnD9z0q9HQH1N4j0ZSgNbPcMpWREjuqxObGHDiw/GlcOBwW5jiGchcD09951l88/Qo

YzgIpo6evoPAOuLIW8PwX/BS9AFTQq/5CpRYMksmmDlsdqOJ/EjHKnRAB+BRuELGBdN3

NjaJvrcNvMIYDOacHh510tmaNpqET+w4FzkAyxkOQiIr2jcdlT0ieYHH+Q8OS9VtEuvg

PR74x4Yxa9XQKnhPFrmPbTgTnlxpkXwzAvWDtQTQVqv84brrh/CP/u1rpl7pWZmGa9HH

LRmqRp126wqUqAu30pKoy8PcKAGwDjQ3RlNjqkSu1Q9BmtWWvzY3f2ksmbzV3S2if6wN

pB/A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779178624; x=1779783424;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=PysVgv6iV7UT3pd5bpbm6Sjzc5z67DqqzjIJA3xVfLM=;

b=OuigpEkIO/jMqLwAv0Mg6nGYjxqROi12l9CzCXaBj782ptg0a1Tgwg0Fg6L/Woc5I3

Z5xXNfXFTQkj3CXbOhinbZP46diEvROr9QuixVgSr9vn8rlLYAbT65+vKyYdCm4c9IhJ

oeck691kMjQO1pyIbTJlGu5+Q0rOI6XK9c87We0v3cKQ3dTe+vb65YYWBRYcH9qvpSdF

XlH5YlfO0bmDmkmUzIkOlkkiezL3HMPMgVtPOUCprbN0sHHBhg0ae0HCsu1F9oXaFcbB

feA3uc+HRrupvnhZx2M3tSJLjVlC+Rm/hQmIcamHQgIRxi0ees0P97PpO7oPqePqQw0M

9ZqA==

X-Gm-Message-State: AOJu0Yy6cbXpeCtvdfuOa7fCv4lRNFS8MibKdzyw5J9l3jW28FLkF08U

+0dZmDLxnmDEF9BGLJobKaQxoRJoV6Gy873ix3QNcf7uDNMnA7QUZ1+FUYMZ/ks+rfjI7cu46xV

+FqqXFSXk9DIdk29up5LaCwU2R7DAr4KHVZM=

X-Gm-Gg: Acq92OHpt6kg8MTXgu8LxWI0fD9Qd1FT6gJiNdP3Znc5Gc5KaW64ni1PCkuglhx+KcL

0Sgrc11i3S+3IAKRsam3H84I2QXzyg20XbriHH9wRennVmJtqpurhJAYRqHvVbebRfkGcHPPAUr

16g/VfWmPu3cE3ZMRVL0bvxbS0wAa59h/5tGIQKyvMFdJjnW2LuvYqcoboo7GgXHEm156V9fnwj

F5LOu161MR/X30QRbqdhbTg3DxuczihQ6vI4oTMrujrLQe5LCFf23qxGhD74Cuak/2C6sQlBQU5

SRaKV5CTzQi4pZOP3/myneFnonxwn/7O/26Llw==

X-Received: by 2002:a05:6102:580a:b0:633:bb15:28ae with SMTP id

ada2fe7eead31-638b79cfe8fmr8845634137.15.1779178624207; Tue, 19 May 2026

01:17:04 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ab0:2c09:0:b0:95c:c565:ab98 with HTTP; Tue, 19 May 2026

01:17:02 -0700 (PDT)

From: IRYA IRYA

Date: Tue, 19 May 2026 13:47:02 +0530

X-Gm-Features: AVHnY4ISl49xjird7yh3njzA90ICNnvdoc37XC36iM5Q4YckaUdPPRYwj2C1kVw

Message-ID:

Subject: Collaborate at FLUXX Week 2026

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e34fd80652274dd8"

--000000000000e34fd80652274dd8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Dear ,

I wanted to reach out because we=E2=80=99re curating conversations for FLUX=

X Week

2026 happening in Phuket this December.

Rather than a traditional conference setup, the idea is to bring together

people building meaningful work across AI, healthcare, education, and

leadership.

We=E2=80=99re currently scheduling brief introduction calls with selected

professionals and founders.

If you=E2=80=99d like to explore it further, here=E2=80=99s the calendar li=

nk:

https://calendly.com/d/cwbv-8f5-mvw/participation-meet-fluxx-week-thailand

A short event glimpse:

https://www.youtube.com/watch?v=3DJeULJ50tPR0

Regards,

Vikas Kumar

Feel free to ignore this if it=E2=80=99s not relevant right now.

--000000000000e34fd80652274dd8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Dear =

,

I want=

ed to reach out because we=E2=80=99re curating conversations for FLUXX Week=

2026 happening in Phuket this December.

amily:Verdana,Geneva,sans-serif">Rather than a traditional conference setup=

, the idea is to bring together people building meaningful work across AI, =

healthcare, education, and leadership.

ily:Verdana,Geneva,sans-serif">We=E2=80=99re currently scheduling brief int=

roduction calls with selected professionals and founders.

n style=3D"font-family:Verdana,Geneva,sans-serif">If you=E2=80=99d like to =

explore it further, here=E2=80=99s the calendar link:

/calendly.com/d/cwbv-8f5-mvw/participation-meet-fluxx-week-thailand">https:=

//calendly.com/d/cwbv-8f5-mvw/participation-meet-fluxx-week-thailand
pan>

A short ev=

ent glimpse:
h=

ttps://www.youtube.com/watch?v=3DJeULJ50tPR0

=3D"font-family:Verdana,Geneva,sans-serif">Regards,
Vikas Kumar
p>

Feel free to ign=

ore this if it=E2=80=99s not relevant right now.

--000000000000e34fd80652274dd8--

Desperation spam from Google Gmail

Posted by Dave Yadallee on Tuesday, May 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 22:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPCKd-00000000JOx-1gBF

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 22:45:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 22:45:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f181.google.com ([209.85.208.181]:59575)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPAqb-00000000B35-07ej

for root@nk.ca;

Mon, 18 May 2026 21:10:30 -0600

Received: by mail-lj1-f181.google.com with SMTP id 38308e7fff4ca-38e7d983f91so32796921fa.2

for ; Mon, 18 May 2026 20:08:44 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779160117; cv=none;

d=google.com; s=arc-20240605;

b=jSdZEsJ408EfUDr5nrne8XcR38536N0yrZSzXej8QWnFIiNifMZzl6CTT2N3Cu0oT4

NOU3lbKKMX6Uxy8aBA4bexnAbdKcbqG1gUnM0xi1SPFgjPaCDsVuCmNeHIjnh9uVOMwa

c01SbhrrBvW81NaC7xvTJFUyA/lHX8h2pnAuMN1ao0QekNTgWFNSBstJhybRqY70tmsW

mSZYxecdV0KuwK30W0XbUC94L9ufums/Nq2lu+Uw2m9ec92ID+r3oBbNu96d6pKBjsA8

/mFGgpCK0oyQDq+DFNi7PKSWzBcTAigEwcpBnFoyfgEMYJB+2BJs4wyE/vYsXg/H5DHl

/nOQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=sNicVgOJ9ak9s+vgUnTzpTojbL5Fqj0E/UpmbJLhk5o=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=QXhsgd0gtJEowyQdOLus/JQlQcvzEtrZKKrsz+tXunSQcgGLInKh6QL1JfQOSRfWZ6

ctcCyIjMxzJjAQQ8l1G7T9zynT7eLaPwa0PlE1Bj/Ut5fcsSEd3uVTMi3S2fVRxAWe32

Erb67NqJQSsywEgYH8z6ITOnbQ50YxqnWgu5x0JNI/ni+cub+f2krpfSxbybcJrIjp3l

B1JVaUseb7wEOzopo0och8c6pL+PnTE6ox0CD3iszFT4rivWDYfoTZOVVE6qAALetA+W

f2IVKAIQYJ+yJXqZmexEpcWqDqipJx3aN9X9o5n4HhRzzM1l4ihK9NaTlDN0gkPV1i1R

1rDg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1779160117; x=1779764917; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=sNicVgOJ9ak9s+vgUnTzpTojbL5Fqj0E/UpmbJLhk5o=;

b=glKW71dSfYhf4ieOncXaK62VS0exsRZ05VGyOn2GRun7t34wbce9FcV5+a9CtRJ4hK

4o3Ez4XCLu1LDQIdDsvSYNfprY9vm/h4hySKzyEWDZPLu8+z7DrK+ikyYr3/WwkmHTqp

2N4eVIN1LLObemIRVLBapCwAftFysUwLvl90EFgOg5cAEkhuoX/hkDKQZwUXrbEOToye

Z1xCCCrkKGGzU0pYxWXpba9yI8+ULUYoTRjdg23aVJJBs4Bl8Emw0l78R0xOzw+aHTxt

93n1X2utaAHJWERhn05+SMn/H/NTL9iO6Fs45HKV4oB3qVjT9e8ws92Xm+wBolEKxWd3

gEkQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779160117; x=1779764917;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=sNicVgOJ9ak9s+vgUnTzpTojbL5Fqj0E/UpmbJLhk5o=;

b=L/0o29wc+DgiyPG4vCbqFHkvIbSlcHDVqZQ0NhoYlss7mAMYw/fKmc2jaY2SaVOVUM

XJOtVNL1dJuKKSlqft6WOvttHTsbM153Nh/k6ha+S+Qj2h8bYEA33wdEGlvV1iVHtYOV

bD6BJvwhBJozFOY5f3iEKkItDQ+peZAQi1UzQdni7HiUJyzVhBIJPHsIRWDzscLDk/vu

0aLMZTizH8C4tnwgFvT5sfjVUhN5ihr6Ku32A49no+XjUK2uMS/3/byaFHC1nBO6JNIQ

IBhgTvfiq+h9wbFlAAbEdqZMogKe+q1xjdSgJdTqCb8tE+YGAohgk7IuwrFGmnoKcOeC

ig+g==

X-Gm-Message-State: AOJu0YwaHZALPOPNHi17CRZxPy+umiP/VLaqVeRC6/foaf0MNNJSXI2v

wo+S51pRKpgVGRRB+4OByxH5D5bnYg5wOjV56vqBaLfw0ff8XIDqL8RokBpAimvOMKFOpnkANGF

xzcQYyJEWJ/o91B2Jz55uQvwl77N5EOeDRygV

X-Gm-Gg: Acq92OEijhy+3s2suudVkH5fVJ7VYzwho8jeyWajyK0GfGg3RjrJiLSmn5QlfRKvCqQ

1wbq7rc29FrWxs9dK0xSgSd3P6rwYmKmagmM7guPFzNxv1kzpx9ghKdAmAn/TKrEGAxO0T4pbd4

+1LoJKmHtMLB9dht5g3MWd2+P33UG20cS9HLOUMMhraHR3MJF0/4NDckzz98gaymWwdLVRzYX/j

XrniA2QgGkglH60ax0olpd5bks0Ykvlg5KdSRHQAxmsDVduktGsLNwdp4pHOIKfJ65CS50qvCA+

J/mnNZvRXI8XNKXEvFFv1XA=

X-Received: by 2002:a05:651c:12c1:b0:393:c1df:3d5e with SMTP id

38308e7fff4ca-39561f6772emr55308921fa.30.1779160117300; Mon, 18 May 2026

20:08:37 -0700 (PDT)

MIME-Version: 1.0

From: Onur Genc

Date: Tue, 19 May 2026 04:08:25 +0100

X-Gm-Features: AVHnY4LRywA1CKV0R7sjd7uUcjmLDrkwAq5PXvgW27v7-R42z3Hsc8ndF1_IB2M

Message-ID:

Subject: Project heads up

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000ca4fa0065222fe19"

--000000000000ca4fa0065222fe19

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

I have tried to reach out to you in the past but you seems not active,

Let me know if it's okay for me to send specifics of a proposal to your

email address since I have it from LinkedIn.

Best regards,

Mr. Onur Gen=C3=A7.Chief Executive Officer.

*..........................................*CONFIDENTIALITY

NOTICE...........................

--000000000000ca4fa0065222fe19

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv>

v style=3D"font-size:medium">

=3D"#000000">Hello,

color=3D"#000000">

<=

font color=3D"#000000">I have tried to reach out to you =C2=A0in the past b=

ut you seems not active, Let me know if it's okay for me to send specif=

ics of a proposal to your email address since I have it from LinkedIn.
t>

<=

/font>

00">Best regards,

Mr. Onur =

Gen=C3=A7.
Chief Executive Officer.

#000000">

6">..............................=

............CONFIDEN=

TIALITY NOTICE...........................

--000000000000ca4fa0065222fe19--

Nigerian spam

Posted by Dave Yadallee on Tuesday, May 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:33:00 -0600

Received: from mta2out.kdo.de ([194.76.65.119]:42556)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6VH-000000007Jh-1B1e

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:32:11 -0600

Received: from smtp2out.kdo.de (mgwaccvpd2.kdo.de [10.243.52.196])

by mta2out.kdo.de (Postfix) with ESMTPS id 36A05400D5;

Tue, 19 May 2026 00:29:10 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=celle.de; s=dkim;

t=1779143430; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:cc:mime-version:mime-version:

content-type:content-type; bh=yOyacjUMlq9YPWHxuzb4QNZKF5z8b1wbrcXfBwXhu2g=;

b=JqbLyJw2DhE+gwqNEMKZ7IRjK7wU7gqKKXrc+tvw/m/c5Z/6XZiCExA/iv6zD29eqv+4Ii

C11bLKbgY7xDcoxY6RN8NVvhZzIJV46MAJRvAKbmU4z7aHYKjBR6H9nCZ0lPNvit93977c

Od5eohMZnbVoIhmkLc+IPb/sfBCEKPWlBGTawgfrplGdj8/z9KB/UMAbqOTj9phaIBFy/5

3VhnyRA8QpZGzsAR2OQYjELPjveV6fEfwe7ta0upjsz9vw42fjYLj1uv6q1x0fce4ppmrD

rrzK149kYsuCSYrFQ2QcfFaC5i91EnwQp1we4XrJ8CyTAaVvus/qjqXdhCk1qQ==

Received: from mgwsigvpc1.kdo.de (mgwsigvpc1.kdo.de [10.243.52.23])

by smtp2out.kdo.de (Postfix) with ESMTP id E620E40717;

Tue, 19 May 2026 00:26:56 +0200 (CEST)

Received: from mgwsigvpc1.kdo.de (localhost [127.0.0.1])

by mgwsigvpc1.kdo.de (Postfix) with ESMTP id D9603C4457AE;

Tue, 19 May 2026 00:26:56 +0200 (CEST)

Received: from smtp1.cloud.kdo.de (0000p2exc0102.cloud.kdo.de [10.97.16.25])

by mgwsigvpc1.kdo.de (Postfix) with ESMTPS id A1907C445798;

Tue, 19 May 2026 00:26:55 +0200 (CEST)

Received: from 0000p1exc0103.cloud.kdo.de (10.97.16.23) by

0000p2exc0102.cloud.kdo.de (10.97.16.25) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.2562.37; Tue, 19 May 2026 00:26:55 +0200

Received: from 0000p1exc0103.cloud.kdo.de ([10.97.16.23]) by

0000p1exc0103.cloud.kdo.de ([10.97.16.23]) with mapi id 15.02.2562.037; Tue,

19 May 2026 00:26:55 +0200

From: "Homann, Christina"

Subject: Re: Please, I need your assistance,

Thread-Topic: Re: Please, I need your assistance,

Thread-Index: Adzm5sb8bYU3+lBDQEqJr0intii8dQAAAj+QAAEDhQAAAAAu8AAAAB/AAAAAHrAAAAAdEAAAACEAAAAAHDAAAAAdkAAAACAgAAAAIEAAAAAfcAAAACNgAAAAHMAAAAAjwAAAACRQAAAAJKAAAAAhcAAAACRgAAAAI1AAAAAlgAAAACQQAAAAJDAAAAAnwAAAACaAAAAAJ7AAAAAmAAAAACdgAAAAJiAAAAAngAAAACigAAAAK9AAAAArYAAAACiwAAAAKOAAAAAqMAAAACfAAAAALYAAAAA6sAAAADqQAAAAKyAAAAA5sAAAACvQAAAAK5AAAAAoUAAAACmAAAAALaAAAAArwAAAADXwAAAALBAAAAAwAAAAAC/AAAAALOAAAAAu4AAAAC3QAAAALmAAAAAtUAAAADMQAAAAL9AAAgzR4AABxCZgAAAAGmAAAAAWUAAAABaAAAAAF1AAAAAWcAAAABcQAAAAGQAAAAAYAAAAABowAAAAFiAAAAAYIAAAABkQAAAAGaAAAAAfoAAAABiQAAAAHDAAAAAaIAAAABxQAAAAHBAAAAAnQAAAABwwAAAAG/A=

Date: Mon, 18 May 2026 22:26:55 +0000

Message-ID: <836618145cc940a0a452a41258aed7a2@Celle.de>

Reply-To: "weeb023@hotmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.97.32.250]

Content-Type: multipart/alternative;

boundary="_000_836618145cc940a0a452a41258aed7a2Cellede_"

MIME-Version: 1.0

X-MSME-URL-REPUTATION-SCORE: 0

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Please, I need your assistance as i am currently serving as

a member of the Ukrainian military. I am writing to ask if you could contact

me at your earliest convenience to discuss some private matters [...]

Content analysis details: (7.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

[194.76.65.119 listed in dnsbl.ahbl.org]

[194.76.65.119 listed in dnsbl.ahbl.org]

[194.76.65.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[weeb023(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[194.76.65.119 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re: Please, I need your assistance,

--_000_836618145cc940a0a452a41258aed7a2Cellede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Please, I need your assistance as i am currently serving as a member of the=

Ukrainian military. I am writing to ask if you could contact me at your ea=

rliest convenience to discuss some private matters that I believe might be =

of interest to you. I look forward to your response.

Thanks

--_000_836618145cc940a0a452a41258aed7a2Cellede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">

>

Please, I need your=

assistance as i am currently serving as a member of the Ukrainian military=

. I am writing to ask if you could contact me at your earliest convenience =

to discuss some private matters that

I believe might be of interest to you. I look forward to your response.
p>

span>

Thanks
span>

--_000_836618145cc940a0a452a41258aed7a2Cellede_--

Nigerian spam

Posted by Dave Yadallee on Tuesday, May 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6t2-00000000CIJ-0afv

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:56:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 16:56:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta2out.kdo.de ([194.76.65.119]:55236)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6UF-000000007Ev-46LE

for doctor@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:31:08 -0600

Received: from smtp2out.kdo.de (mgwaccvpd2.kdo.de [10.243.52.196])

by mta2out.kdo.de (Postfix) with ESMTPS id C5C5D40C7C;

Tue, 19 May 2026 00:28:22 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=celle.de; s=dkim;

t=1779143400; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:cc:mime-version:mime-version:

content-type:content-type; bh=tTW2HfnGPpwxzsC5Y5EWarf69cBM9387Q42/GRmiyZk=;

b=q21/9BBqUUPm7g19c3DWYkl5isBu0bRvamt39Vy5PoIL1DRHp8BOGe2OR9+o75KSnOGpPq

hLhD3GBaYFCmb5BjEc4OcSUMrIVwODM5bKdNmim7257j6KTd9dRJaLd+viUqM9F5TkZoc2

ZOIFa+6Ay+/n1l8qf1rsATJ5rp1vSN+p6y+EQm8iKTCd8Ms4crZTOWjGdDVY3i5ySEcCYC

uWDccuY+KoUShNWmoFkeJ71KloqqiBhLp/GxZGZqMi0oQfHD44oM6bCDUwOoyPYJns7W3V

V0iXUYM7Sqt94Mi1BsPCXVa3sOP5Zz1t7HVg6CmPdiOXhBGbkah5eEb06BgzPw==

Received: from mgwsigvpc1.kdo.de (mgwsigvpc1.kdo.de [10.243.52.23])

by smtp2out.kdo.de (Postfix) with ESMTP id D36F840985;

Tue, 19 May 2026 00:26:39 +0200 (CEST)

Received: from mgwsigvpc1.kdo.de (localhost [127.0.0.1])

by mgwsigvpc1.kdo.de (Postfix) with ESMTP id C1FB7C4457AC;

Tue, 19 May 2026 00:26:39 +0200 (CEST)

Received: from smtp1.cloud.kdo.de (0000p2exc0102.cloud.kdo.de [10.97.16.25])

by mgwsigvpc1.kdo.de (Postfix) with ESMTPS id 9CB04C445798;

Tue, 19 May 2026 00:26:38 +0200 (CEST)

Received: from 0000p1exc0103.cloud.kdo.de (10.97.16.23) by

0000p2exc0102.cloud.kdo.de (10.97.16.25) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.2562.37; Tue, 19 May 2026 00:26:38 +0200

Received: from 0000p1exc0103.cloud.kdo.de ([10.97.16.23]) by

0000p1exc0103.cloud.kdo.de ([10.97.16.23]) with mapi id 15.02.2562.037; Tue,

19 May 2026 00:26:38 +0200

From: "Homann, Christina"

Subject: Re: Please, I need your assistance,

Thread-Topic: Re: Please, I need your assistance,

Thread-Index: Adzm5sb8bYU3+lBDQEqJr0intii8dQAAAj+QAAEDhQAAAAAu8AAAAB/AAAAAHrAAAAAdEAAAACEAAAAAHDAAAAAdkAAAACAgAAAAIEAAAAAfcAAAACNgAAAAHMAAAAAjwAAAACRQAAAAJKAAAAAhcAAAACRgAAAAI1AAAAAlgAAAACQQAAAAJDAAAAAnwAAAACaAAAAAJ7AAAAAmAAAAACdgAAAAJiAAAAAngAAAACigAAAAK9AAAAArYAAAACiwAAAAKOAAAAAqMAAAACfAAAAALYAAAAA6sAAAADqQAAAAKyAAAAA5sAAAACvQAAAAK5AAAAAoUAAAACmAAAAALaAAAAArwAAAADXwAAAALBAAAAAwAAAAAC/AAAAALOAAAAAu4AAAAC3QAAAALmAAAAAtUAAAADMQAAAAL9AAAgzR4AABxCZgAAAAGmAAAAAWUAAAABaAAAAAF1AAAAAWcAAAABcQAAAAGQAAAAAYAAAAABowAAAAFiAAAAAYIAAAABkQAAAAGaAAAAAfoAAAABiQAAAAHDA=

Date: Mon, 18 May 2026 22:26:38 +0000

Message-ID: <8a732196116a4a8cbd2f8cbf57f0ed4e@Celle.de>

Reply-To: "weeb023@hotmail.com"

Accept-Language: de-DE, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.97.32.250]

Content-Type: multipart/alternative;

boundary="_000_8a732196116a4a8cbd2f8cbf57f0ed4eCellede_"

MIME-Version: 1.0

X-MSME-URL-REPUTATION-SCORE: 0

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Please, I need your assistance as i am currently serving as

a member of the Ukrainian military. I am writing to ask if you could contact

me at your earliest convenience to discuss some private matters [...]

Content analysis details: (7.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

[194.76.65.119 listed in dnsbl.ahbl.org]

[194.76.65.119 listed in dnsbl.ahbl.org]

[194.76.65.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.76.65.119 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[194.76.65.119 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

[194.76.65.119 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[weeb023(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Re: Please, I need your assistance,

--_000_8a732196116a4a8cbd2f8cbf57f0ed4eCellede_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Please, I need your assistance as i am currently serving as a member of the=

Ukrainian military. I am writing to ask if you could contact me at your ea=

rliest convenience to discuss some private matters that I believe might be =

of interest to you. I look forward to your response.

Thanks

--_000_8a732196116a4a8cbd2f8cbf57f0ed4eCellede_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">

>

span>

Thanks
span>

--_000_8a732196116a4a8cbd2f8cbf57f0ed4eCellede_--

Ominshield Phish from Google Gmail Part 4

Posted by Dave Yadallee on Tuesday, May 19. 2026

/InformAction">
.org/Event">
ntScheduled"/>
ema.org/Organization">=

NSF2T5WEXTl"/>
ne-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: =

0; overflow: hidden;" itemprop=3D"name">Recent progress is now available fo=

r order 6129-ZTAK-GNRI
tartDate" datetime=3D"20260519T072022Z">
atetime=3D"20260519T072022Z">
=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"wi=

dth:100%;" class=3D"body-container">=

ign=3D"left">

div>
lpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" sty=

le=3D"width:100%;" class=3D"">

"left">

rop=3D"description">Updated order information is now ready for 4560-MZHB-EZ=

RS

" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:1=

00%;" class=3D"">

radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: =

left; vertical-align: top;" class=3D"main-container-inner">

left; direction: ltr; display: inline-block; vertical-align: top; width: 10=

0%;overflow: hidden; word-wrap: break-word;">
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"mai=

n-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-la=

yout: fixed;">

ertical-align:top;">
role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
d style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-wo=

rd;;padding-bottom:2px;">

Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;col=

or: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"present=

ation">Recent progress is now available for order 6=

129-ZTAK-GNRI

0; text-align: left; word-break: break-word;;padding-bottom:24px;">

yle=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400=

; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043;=

text-decoration: none;" class=3D"primary-text" role=3D"presentation">
aria-hidden=3D"true">
022Z">
e>Tuesday 19 May 2026 =E2=8B=85 3:20pm (Hong Kong Standard Tim=

e)

ign: left; word-break: break-word;;padding-bottom:24px;">

-family: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size=

: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decor=

ation: none;" class=3D"primary-text" role=3D"presentation">Bill date:=

Tuesday, 19 May 2026
Bill Id: 6129-ZTAK-GNRI

Valued Customer,

T=

his notice confirms that your 4 Years subscription with McAfee has reached =

the end of its service period. We appreciate your continued trust in our se=

rvices.

If you need assistance, please contact 1 856 620-6865.

>Transaction Records Center
Quantity: 1 Device
Product: OmniShield Pl=

an
Plan: 4 Years Warranty
Payment Method: Auto Debit
Total Amount =

Processed: $ 530.14

For any questions regarding your account or servi=

ces, please contact 1 856 620-6865.

Sending positive thoughts,
Ma=

rk Mcclain
McAfee, Inc.
P.O. Box 8626 New Haven Ct 06513-2121 Us

<=

/span>
2026

Bill Id: 6129-ZTAK-GNRI

Valued Customer,

This notice confirms that your 4 Years subscription with McAfee has reached=

the end of its service period. We appreciate your continued trust in our s=

ervices.

If you need assistance, please contact 1 856 620-6865.

Transaction Records Center

Quantity: 1 Device

Product: OmniShield Plan

Plan: 4 Years Warranty

Payment Method: Auto Debit

Total Amount Processed: $ 530.14

For any questions regarding your account or services, please contact 1 856 =

620-6865.

Sending positive thoughts,

Mark Mcclain

McAfee, Inc.

P.O. Box 8626 New Haven Ct 06513-2121 Us"/>

"font-size: 0; padding: 0; text-align: left; word-break: break-word;;paddin=

g-bottom:24px;">

ormal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing=

: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=

=3D"presentation">
ole=3D"presentation" style=3D"padding-bottom: 4px;">

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Guests

(Guest list has been hidden at organiser's r=

equest)

--00000000000050b95806521b9f2b--

Ominshield Phish from Google Gmail Part 3

Posted by Dave Yadallee on Tuesday, May 19. 2026

.primary-button {

background-color: #1a73e8 !important;

}

.primary-button-text {

color: #fff !important;

}

.underline-on-hover:hover {

text-decoration: underline !important;

}

.grey-infobar-text {

color: #202124 !important;

}

@media (prefers-color-scheme: dark) {

.primary-text:not([class^=3D"x_"]) {

color: #e8eaed !important;

}

.secondary-text:not([class^=3D"x_"]),

.phone-number:not([class^=3D"x_"]) a {

color: #9aa0a6 !important;

}

.grey-button-text:not([class^=3D"x_"]),

.attachment-chip:not([class^=3D"x_"]) a {

color: #bdc1c6 !important;

}

.accent-text:not([class^=3D"x_"]),

.hairline-button-text:not([class^=3D"x_"]) {

color: #8ab4f8 !important;

}

.primary-button:not([class^=3D"x_"]) {

background-color: #8ab4f8 !important;

}

.primary-button-text:not([class^=3D"x_"]) {

color: #202124 !important;

}

}

Ominshield Phish from Google Gmail Part 2

Posted by Dave Yadallee on Tuesday, May 19. 2026

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

=20

=20

=20

=20

Webroot Phish from Google Gmail Part 2

Posted by Dave Yadallee on Tuesday, May 19. 2026

Webroot Phish from Google Gmail Part 1

Posted by Dave Yadallee on Tuesday, May 19. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6qk-000000009p2-42mM

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:54:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 16:54:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f73.google.com ([209.85.160.73]:56595)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1cT-00000000Kye-0UHN

for root@nk.ca;

Mon, 18 May 2026 11:19:18 -0600

Received: by mail-oa1-f73.google.com with SMTP id 586e51a60fabf-43a281ca836so5560363fac.1

for ; Mon, 18 May 2026 10:18:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779124695; x=1779729495; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=huOFsqBulKDEkvgMeDzN+JYFkAm+GKMa317UCey+ZuU=;

b=TNl8FqYod3tkey82wp5SRrxub8g4Lc2uibhuDPM0rKgSfgUVJfTYyxrbw15moayhBk

u2Z61akVK9YHDBVMPDiKpFX46W1dNXHzQbsCHI2kdQmkxhBcThwXAaOdM0XtxrUB1hy/

CIiV+q8ebdeJPeJkRlXPUZTxdAtvbIsNBc9iXLOZK2kgeiXVYIAEUY8v/+5suagwZWWo

bWfIXWjNk2Dt4JAskAPgGYTKAg220ZA3mnSZpp0oZOctlm0X/+hdKNt8bwipYgQUclJo

DGpH+Lqieum3jG9YumtV8/rdf3fK6oKzKYc1eMe6cTEhX6cbEvHotysA+7SSuXb9pQCf

PkTQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124695; x=1779729495; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=huOFsqBulKDEkvgMeDzN+JYFkAm+GKMa317UCey+ZuU=;

b=Bc899/KOwMPDrNZI3Ns740qcjc0XEOC0FGnPdjxDLEimw7nxtrCliu0MiCBos/iA8h

1pUg2WeQUaHsEJ0EUfAuigd68b+1CHFj3kQMtOu6tT6NB0i6uGfcp+B8F8N5k0Iqu6Xa

GKGXYLsQERpwgyLos7JkScq7rkLjiUufgAlQMBeZ5+04f865YRUr43V7EGjFrwbWSTQ+

/qre/4klkEmQCLTSEKj+17sqEcb1zkcimC49s7dFqoiR8I1eNqUVP+a7iql39MuI3XZT

MCXxQqb0A9c+9H519MCbLbzj4Sj0s7hxCkEGGO9euMg1rWEmDF/CDE5WP02m15CdsqL4

ib2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779124695; x=1779729495;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=huOFsqBulKDEkvgMeDzN+JYFkAm+GKMa317UCey+ZuU=;

b=Bvdzq+f3d3jHof4/VTPt9jrXBMtFlUAcINSHTtdq7PZJhiUra1jo5991GYIt4enoZq

jRBGo7DuuHaV7JE4q4mnanqgfrLmbZ4JJ616yWLxGYrShxr1u3ujUMCEgKyirJZYlE2d

91n+NAI6gkbkcN2CFkH1gEclo62I45M3yfljyNOOvLthqUDFTO3OR6DmIfhthEiuyGla

zPTh6/HhTOIIlID2ax+KpT8whb6JD7aP+M62l08GS9tj6D65uVyhI39edFfLexsjs/9v

bPMamjRkLZCru8ozvX8RivV7nCXo7frUJZZ1Fo+AwdpUQpkSLH7i9RWuxqGUsN9GxhYJ

biDg==

X-Forwarded-Encrypted: i=1; AFNElJ9zWVBJI/GLDVOtMXvXk2IbNhgJ0LpaNTJxpB8CDASsmeFRp03ANZHvZgSeiqbW0+eTW6bp@nk.ca

X-Gm-Message-State: AOJu0YwzG/LVgL7TI4tqYDXb6gneX7QqE/vmshXJ57z814lIgYjY3Euv

nC7JLa4Or+KWdiUKI3r7VTq4OAjngoYm93DD3UgKDLJXCUJ0iW0U7d2A8we2lIype59l96sD3rr

ojIgmm54TqBUApAM5pc0ql48lbSsj9ttodFOcyljLGEG7aA==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:3591:b0:7d7:fb8c:3c29 with SMTP id

46e09a7af769-7e4f2b93801mt12421283a34.14.1779124695169; Mon, 18 May 2026

10:18:15 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 18 May 2026 17:18:15 +0000

Subject: #IYE1Z59

From: no reply

Content-Type: multipart/alternative; boundary="00000000000081f25e06521abf21"

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: #IYE1Z59 #IYE1Z59 Tuesday May 19, 2026 â‹… 2:17am Eastern

Time - New York Your Subscription Renewal Has Been Scheduled Dear Customer,

Content analysis details: (8.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

[209.85.160.73 listed in dnsbl.ahbl.org]

[209.85.160.73 listed in dnsbl.ahbl.org]

[209.85.160.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.73 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

[209.85.160.73 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.73 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.73 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.73 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} #IYE1Z59

--00000000000081f25e06521abf21

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

I0lZRTFaNTkNCg0KI0lZRTFaNTkNClR1ZXNkYXkgTWF5IDE5LCAyMDI2IOKLhSAyOjE3YW0NCkVh

c3Rlcm4gVGltZSAtIE5ldyBZb3JrDQoNCg0KDQpZb3VyIFN1YnNjcmlwdGlvbiBSZW5ld2FsIEhh

cyBCZWVuIFNjaGVkdWxlZA0KRGVhciBDdXN0b21lciwNCg0KWW91ciBjdXJyZW50IHByb3RlY3Rp

b24gcGxhbiBhc3NvY2lhdGVkIHdpdGggTm9ydG9uIGlzIGFwcHJvYWNoaW5nIGl0cyAgDQpyZW5l

d2FsIGRhdGUgb2YgVHVlc2RheSwgMTkgTWF5IDIwMjYuIFRvIG1haW50YWluIGFjdGl2ZSBjb3Zl

cmFnZSwgdGhlICANCmFtb3VudCBvZiAkNTgxLjc3IHdpbGwgYmUgYXV0b21hdGljYWxseSBjaGFy

Z2VkIHVzaW5nIHlvdXIgcHJlZmVycmVkICANCmJpbGxpbmcgbWV0aG9kLg0KDQoqKlJlbmV3YWwg

U3VtbWFyeSoqDQoNCuKAoiBTZXJ2aWNlIFBhY2thZ2U6IFdlYnJvb3QgU3RhbmRhcmQNCuKAoiBE

ZXZpY2VzIEVucm9sbGVkOiA0eA0K4oCiIENvdmVyYWdlIFRlcm06IDYwIE1vbnRocyBZZWFyKHMp

DQrigKIgQmlsbGluZyBNZXRob2Q6IEF1dG9tYXRpYyBEZWJpdA0K4oCiIFRvdGFsIER1ZTogJDU4

MS43Nw0KDQpSZWZlcmVuY2UgTnVtYmVyOiBYV1BWVTZQTDMwDQpBY3RpdmF0aW9uIFZlcmlmaWNh

dGlvbjogZGFkYjRiYzgtNWJmOC00NTc4LWIzZjgtZjdiMmY2NjgwNzFkDQoNClBsZWFzZSByZXZp

ZXcgeW91ciBhY2NvdW50IGRldGFpbHMgY2FyZWZ1bGx5LiBBbnkgY2FuY2VsbGF0aW9uIG9yICAN

CnN1YnNjcmlwdGlvbiB1cGRhdGUgcmVxdWVzdHMgc2hvdWxkIGJlIHN1Ym1pdHRlZCBubyBsYXRl

ciB0aGFuIDQ4IGhvdXJzICANCmJlZm9yZSB0aGUgc2NoZWR1bGVkIGJpbGxpbmcgZGF0ZS4NCg0K

Rm9yIGFzc2lzdGFuY2UsIHJlYWNoIG91ciBjdXN0b21lciBzZXJ2aWNlIHRlYW0gYXQgMSA4NTQg

NTAwLTQyMTEuDQoNCldpdGggc2luY2VyZSByZXNwZWN0LCwNCk5vcnRvbiBMaWZlTG9jayBzZWN1

cml0eQ0KRmluYW5jZSBNYW5hZ2VyOiBDcnlzdGFsIE1pbGxlcg0KQ29udGFjdCBIZWxwbGluZTog

MSA4NTYgNjIwLTY4MTYNCkZvcm1hbCBDb3JyZXNwb25kZW5jZSBBZGRyZXNzLDogMTA5MjQgTncg

MzBUaCBQbCwgU3VucmlzZSBFbmZpZWxkIEN0IDYwODIgIA0KVVNBDQpTdXBwb3J0IEhvdXJzOiA2

IEFNIOKAkyA2IFBNDQoNCg0KT3JnYW5pemVyDQpubyByZXBseQ0Kbm8uci5lLnAubC55LnUucGQu

YXQuZXNAZW1haWxvcmEub3JnDQoNCkd1ZXN0cw0KKEd1ZXN0IGxpc3QgaGFzIGJlZW4gaGlkZGVu

IGF0IG9yZ2FuaXplcidzIHJlcXVlc3QpDQoNCg==

--00000000000081f25e06521abf21

Norton Phish from Google Gmail Part 4

Posted by Dave Yadallee on Tuesday, May 19. 2026

/InformAction">
emtype=3D"http://schema.org/Event">
=3D"http://schema.org/EventScheduled"/>
pe itemtype=3D"http://schema.org/Organization">
ent=3D"Google Calendar"/>
ontent=3D"04ier77IL3wBYIuEQcbaMHPfhH"/>
ize: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0=

; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">#OPHFBZX
span>
260519T061222Z">
22Z">
role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-=

container">

e=3D"height:16px;" aria-hidden=3D"true">

g=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

temtype=3D"http://schema.org/EmailMessage">

#JRH=

YMQO

"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">
>

r-radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align=

: left; vertical-align: top;" class=3D"main-container-inner">

: left; direction: ltr; display: inline-block; vertical-align: top; width: =

100%;overflow: hidden; word-wrap: break-word;">
ing=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"m=

ain-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-=

layout: fixed;">
>

vertical-align:top;">
0" role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">=

word;;padding-bottom:2px;">

, Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;c=

olor: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"prese=

ntation">#OPHFBZX

le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=

adding-bottom:24px;">

le: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-sp=

acing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text"=

role=3D"presentation">
te" datetime=3D"20260519T061222Z">
e=3D"20260519T061222Z">Tuesday May 19, 2026 =E2=8B=85 2=

:12am (Eastern Time - New York)

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:24px;">

; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=

px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=

resentation">Important Reminder About Your Upcoming Renewal
Dear V=

alued Customer,

This is an important reminder regarding the renewal of yo=

ur active coverage linked to Norton. Your subscription is set to renew on T=

uesday, 19 May 2026, and the renewal fee of USD548.66 will be billed automa=

tically.

**Coverage Information**

=E2=80=A2 Registered Item: Fu=

ll Membership
=E2=80=A2 Number of Devices: x1 Device(s)
=E2=80=A2 Ser=

vice Coverage: Five Years Year(s)
=E2=80=A2 Payment Arrangement: Auto Pa=

y
=E2=80=A2 Renewal Total: USD548.66

Account Reference: P1GD5BS276=

Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0

To a=

void interruption or unwanted renewal charges, please submit any cancellati=

on requests at least 48 hours before the renewal processing date.

Nee=

d help? Please contact our support center at 1 854 500-4211.

Grateful=

always,,
Norton LifeLock Protection
Billing Director: Robert Collins=

Customer Helpdesk Line: 1 854 500-4235
Administrative Address,: 4512=

Hwy 90 East Bear De 19701 US
Daily Operation Hours: 6 AM =E2=80=93 6 PM=

About Your Upcoming Renewal

Dear Valued Customer,

This is an important reminder regarding the renewal of your active coverage=

linked to Norton. Your subscription is set to renew on Tuesday, 19 May 202=

6, and the renewal fee of USD548.66 will be billed automatically.

**Coverage Information**

=E2=80=A2 Registered Item: Full Membership

=E2=80=A2 Number of Devices: x1 Device(s)

=E2=80=A2 Service Coverage: Five Years Year(s)

=E2=80=A2 Payment Arrangement: Auto Pay

=E2=80=A2 Renewal Total: USD548.66

Account Reference: P1GD5BS276

Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0

To avoid interruption or unwanted renewal charges, please submit any cancel=

lation requests at least 48 hours before the renewal processing date.

Need help? Please contact our support center at 1 854 500-4211.

Grateful always,,

Norton LifeLock Protection

Billing Director: Robert Collins

Customer Helpdesk Line: 1 854 500-4235

Administrative Address,: 4512 Hwy 90 East Bear De 19701 US

Daily Operation Hours: 6 AM =E2=80=93 6 PM

"/>

eft; word-break: break-word;;padding-bottom:24px;">

y: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px=

; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration:=

none;" class=3D"primary-text" role=3D"presentation">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bo=

ttom: 4px;">

or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=

antialiased;margin: 0; padding: 0;">Guests

(Guest li=

st has been hidden at organizer's request)

--000000000000a7852406521aaedb--

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '26					Forward →
				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;= font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;= ">Guests

or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:= antialiased;margin: 0; padding: 0;">Guests

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Guests

or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=

antialiased;margin: 0; padding: 0;">Guests