Norton Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: daveys=spam@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6qQ-000000009h7-1jwo

for daveys=spam@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:53:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 16:53:54 -0600

Resent-Message-ID:

Resent-To: daveys=spam@doctor.nl2k.ab.ca

Received: from mail-oi1-f202.google.com ([209.85.167.202]:48201)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1Xb-00000000KV9-1lJl

for root@nk.ca;

Mon, 18 May 2026 11:14:16 -0600

Received: by mail-oi1-f202.google.com with SMTP id 5614622812f47-479ffe1015aso4485698b6e.0

for ; Mon, 18 May 2026 10:13:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779124395; x=1779729195; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=DEaMqQ6b5WP5XjdrAQIC9AdTSsWWLXqG1QubJ6tx430=;

b=Z8lqVhqL7m6cheNrYfr+OqEVrHqSl/4C9hZkyL/nwYYSWmu+moOcrOEJ84UAEQKRZJ

JBRQ5nME2MYDminq8ZQCCJMVMkkH1JHTd+zkfVsa0GDAKae1FZkkObfjVBW5Pv/we78s

KrgLwWKX0F5QRia5KVuxHiuunxj7XoNmFvlnXApTrFZwTuA70woHzFUyRvds9VOx6m3i

okDsZfX6k28r0h2IingKDWAfgzd0hcR2VN7XH1yLtGJDuUGx6L2wzVD41Lx3AsgAAVN/

DpznmYX1QWLRZFVhfvsMZWm3j0CBmJy70ArmLXqHFRWNlaZ3TbBQktUJOIgbqs0HZzch

L+3Q==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124396; x=1779729196; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=DEaMqQ6b5WP5XjdrAQIC9AdTSsWWLXqG1QubJ6tx430=;

b=xr0rizkuMmqCbn8ISqRKYuSO7expQK/TH6VSfEXuLQfl69aN5L40RB0UOfO2bS49Ec

5dqm1dQd48Vd+RVlOlId1fffpLvhXCs+PnPSN5hFLqXz9dNx51wy4jvfuAY4P8xQDGu2

Utizc9LtOSe1MdCpxLa9Fx13P6mLcGvPQTqNSWAPB+PHjDajeNUP54/+QNWwEpP6+uhc

Md65FpWLy4REKwQceEKhcwh12hrVllWRRUEY3kx/hcqHSPO1hm6uFBwlzfKuew8qSYCA

h9IGEFBR4ls5e8zXcRsEFVinowm+52py2sUF8IQmuxnnY1l8NUw8cS9EBsLOJtaqyqDg

B4WQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779124396; x=1779729196;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=DEaMqQ6b5WP5XjdrAQIC9AdTSsWWLXqG1QubJ6tx430=;

b=ZestFNicBHwOOZRzhy0eqTupmeoyE58M3RYqu3VtzLg/3tbz9Ley+WBam2oBURmI/J

7/b1BEBNm1zt2pvN3aDCOVkF7zxRc8tiUYmyEUuP9abtoNAt/atj3tkleh3yAuzIJQVR

4UN85qX3iXqjSRaGdVKXzcc/N1sl5W1OMwWUU0H+BnxUKWPK32+ipnXCPRftdNby6KdO

nhhv4QPZaUO0HLgcO7DkUy/CJcRwssWeW9wVbWA5HsAxewJwu729v109q6GXfKJs6RYu

Ydcj4uZMK0fiHRJ9YGopqsSEV9R+YXPqhOisX0+Z4SUKOniy0jcefE4cHxolI7AXrEDe

9nSg==

X-Forwarded-Encrypted: i=1; AFNElJ+0MBSVvEgVlflUt/WS98b9HqU1xUk4vQ2S2h9FlE/JS4MVlEf0g+EkrsFW4ew+O0d6jI0m@nk.ca

X-Gm-Message-State: AOJu0YxXodTNznnt/PHM0h8M/FXJffhzJ5f5f3QvIMP+jKEL5AzZibnc

bE21hZKiFKit076mlRg6ZvbRKHGSyau/AoIy+sjnzAoGA8kl/KnYdy3nlVMaqw7+tsHBnrAQ/Os

b8Q6mGWWGARvO8dAVRhmVqsnyt3y0kmHsDLpxPb+kwEOMGQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:5285:b0:479:eb19:6e66 with SMTP id

5614622812f47-482e598eba1mt12251430b6e.38.1779124395353; Mon, 18 May 2026

10:13:15 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 18 May 2026 17:13:15 +0000

Subject: #JRHYMQO

From: no reply

Content-Type: multipart/alternative; boundary="0000000000009eff9306521aad6f"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern

Time - New York Important Reminder About Your Upcoming Renewal Dear Valued

Customer,



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.202 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.202 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.202 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} #JRHYMQO



--0000000000009eff9306521aad6f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



I0pSSFlNUU8NCg0KI09QSEZCWlgNClR1ZXNkYXkgTWF5IDE5LCAyMDI2IOKLhSAyOjEyYW0NCkVh

c3Rlcm4gVGltZSAtIE5ldyBZb3JrDQoNCg0KDQpJbXBvcnRhbnQgUmVtaW5kZXIgQWJvdXQgWW91

ciBVcGNvbWluZyBSZW5ld2FsDQpEZWFyIFZhbHVlZCBDdXN0b21lciwNCg0KVGhpcyBpcyBhbiBp

bXBvcnRhbnQgcmVtaW5kZXIgcmVnYXJkaW5nIHRoZSByZW5ld2FsIG9mIHlvdXIgYWN0aXZlIGNv

dmVyYWdlICANCmxpbmtlZCB0byBOb3J0b24uIFlvdXIgc3Vic2NyaXB0aW9uIGlzIHNldCB0byBy

ZW5ldyBvbiBUdWVzZGF5LCAxOSBNYXkgIA0KMjAyNiwgYW5kIHRoZSByZW5ld2FsIGZlZSBvZiBV

U0Q1NDguNjYgd2lsbCBiZSBiaWxsZWQgYXV0b21hdGljYWxseS4NCg0KKipDb3ZlcmFnZSBJbmZv

cm1hdGlvbioqDQoNCuKAoiBSZWdpc3RlcmVkIEl0ZW06IEZ1bGwgTWVtYmVyc2hpcA0K4oCiIE51

bWJlciBvZiBEZXZpY2VzOiB4MSBEZXZpY2UocykNCuKAoiBTZXJ2aWNlIENvdmVyYWdlOiBGaXZl

IFllYXJzIFllYXIocykNCuKAoiBQYXltZW50IEFycmFuZ2VtZW50OiBBdXRvIFBheQ0K4oCiIFJl

bmV3YWwgVG90YWw6IFVTRDU0OC42Ng0KDQpBY2NvdW50IFJlZmVyZW5jZTogUDFHRDVCUzI3Ng0K

Q29uZmlybWF0aW9uIFNpZ25hdHVyZTogMTA2ZTExNTAtMjQ1Zi00NDdkLTg2N2ItOGRmZWIxZWQz

MmUwDQoNClRvIGF2b2lkIGludGVycnVwdGlvbiBvciB1bndhbnRlZCByZW5ld2FsIGNoYXJnZXMs

IHBsZWFzZSBzdWJtaXQgYW55ICANCmNhbmNlbGxhdGlvbiByZXF1ZXN0cyBhdCBsZWFzdCA0OCBo

b3VycyBiZWZvcmUgdGhlIHJlbmV3YWwgcHJvY2Vzc2luZyBkYXRlLg0KDQpOZWVkIGhlbHA/IFBs

ZWFzZSBjb250YWN0IG91ciBzdXBwb3J0IGNlbnRlciBhdCAxIDg1NCA1MDAtNDIxMS4NCg0KR3Jh

dGVmdWwgYWx3YXlzLCwNCk5vcnRvbiBMaWZlTG9jayBQcm90ZWN0aW9uDQpCaWxsaW5nIERpcmVj

dG9yOiBSb2JlcnQgQ29sbGlucw0KQ3VzdG9tZXIgSGVscGRlc2sgTGluZTogMSA4NTQgNTAwLTQy

MzUNCkFkbWluaXN0cmF0aXZlIEFkZHJlc3MsOiA0NTEyIEh3eSA5MCBFYXN0IEJlYXIgRGUgMTk3

MDEgVVMNCkRhaWx5IE9wZXJhdGlvbiBIb3VyczogNiBBTSDigJMgNiBQTQ0KDQoNCk9yZ2FuaXpl

cg0Kbm8gcmVwbHkNCm4ub3JlcGwueXUucGRhdGVzQGVtYWlsb3JhLm9yZw0KDQpHdWVzdHMNCihH

dWVzdCBsaXN0IGhhcyBiZWVuIGhpZGRlbiBhdCBvcmdhbml6ZXIncyByZXF1ZXN0KQ0KDQo=

Norton Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: daveys=spam@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6qQ-000000009h7-1jwo

for daveys=spam@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:53:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 16:53:54 -0600

Resent-Message-ID:

Resent-To: daveys=spam@doctor.nl2k.ab.ca

Received: from mail-oi1-f202.google.com ([209.85.167.202]:48201)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1Xb-00000000KV9-1lJl

for root@nk.ca;

Mon, 18 May 2026 11:14:16 -0600

Received: by mail-oi1-f202.google.com with SMTP id 5614622812f47-479ffe1015aso4485698b6e.0

for ; Mon, 18 May 2026 10:13:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779124395; x=1779729195; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=DEaMqQ6b5WP5XjdrAQIC9AdTSsWWLXqG1QubJ6tx430=;

b=Z8lqVhqL7m6cheNrYfr+OqEVrHqSl/4C9hZkyL/nwYYSWmu+moOcrOEJ84UAEQKRZJ

JBRQ5nME2MYDminq8ZQCCJMVMkkH1JHTd+zkfVsa0GDAKae1FZkkObfjVBW5Pv/we78s

KrgLwWKX0F5QRia5KVuxHiuunxj7XoNmFvlnXApTrFZwTuA70woHzFUyRvds9VOx6m3i

okDsZfX6k28r0h2IingKDWAfgzd0hcR2VN7XH1yLtGJDuUGx6L2wzVD41Lx3AsgAAVN/

DpznmYX1QWLRZFVhfvsMZWm3j0CBmJy70ArmLXqHFRWNlaZ3TbBQktUJOIgbqs0HZzch

L+3Q==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124396; x=1779729196; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=DEaMqQ6b5WP5XjdrAQIC9AdTSsWWLXqG1QubJ6tx430=;

b=xr0rizkuMmqCbn8ISqRKYuSO7expQK/TH6VSfEXuLQfl69aN5L40RB0UOfO2bS49Ec

5dqm1dQd48Vd+RVlOlId1fffpLvhXCs+PnPSN5hFLqXz9dNx51wy4jvfuAY4P8xQDGu2

Utizc9LtOSe1MdCpxLa9Fx13P6mLcGvPQTqNSWAPB+PHjDajeNUP54/+QNWwEpP6+uhc

Md65FpWLy4REKwQceEKhcwh12hrVllWRRUEY3kx/hcqHSPO1hm6uFBwlzfKuew8qSYCA

h9IGEFBR4ls5e8zXcRsEFVinowm+52py2sUF8IQmuxnnY1l8NUw8cS9EBsLOJtaqyqDg

B4WQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779124396; x=1779729196;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=DEaMqQ6b5WP5XjdrAQIC9AdTSsWWLXqG1QubJ6tx430=;

b=ZestFNicBHwOOZRzhy0eqTupmeoyE58M3RYqu3VtzLg/3tbz9Ley+WBam2oBURmI/J

7/b1BEBNm1zt2pvN3aDCOVkF7zxRc8tiUYmyEUuP9abtoNAt/atj3tkleh3yAuzIJQVR

4UN85qX3iXqjSRaGdVKXzcc/N1sl5W1OMwWUU0H+BnxUKWPK32+ipnXCPRftdNby6KdO

nhhv4QPZaUO0HLgcO7DkUy/CJcRwssWeW9wVbWA5HsAxewJwu729v109q6GXfKJs6RYu

Ydcj4uZMK0fiHRJ9YGopqsSEV9R+YXPqhOisX0+Z4SUKOniy0jcefE4cHxolI7AXrEDe

9nSg==

X-Forwarded-Encrypted: i=1; AFNElJ+0MBSVvEgVlflUt/WS98b9HqU1xUk4vQ2S2h9FlE/JS4MVlEf0g+EkrsFW4ew+O0d6jI0m@nk.ca

X-Gm-Message-State: AOJu0YxXodTNznnt/PHM0h8M/FXJffhzJ5f5f3QvIMP+jKEL5AzZibnc

bE21hZKiFKit076mlRg6ZvbRKHGSyau/AoIy+sjnzAoGA8kl/KnYdy3nlVMaqw7+tsHBnrAQ/Os

b8Q6mGWWGARvO8dAVRhmVqsnyt3y0kmHsDLpxPb+kwEOMGQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:5285:b0:479:eb19:6e66 with SMTP id

5614622812f47-482e598eba1mt12251430b6e.38.1779124395353; Mon, 18 May 2026

10:13:15 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 18 May 2026 17:13:15 +0000

Subject: #JRHYMQO

From: no reply

Content-Type: multipart/alternative; boundary="0000000000009eff9306521aad6f"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern

Time - New York Important Reminder About Your Upcoming Renewal Dear Valued

Customer,



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.202 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.202 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.202 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} #JRHYMQO



--0000000000009eff9306521aad6f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



I0pSSFlNUU8NCg0KI09QSEZCWlgNClR1ZXNkYXkgTWF5IDE5LCAyMDI2IOKLhSAyOjEyYW0NCkVh

c3Rlcm4gVGltZSAtIE5ldyBZb3JrDQoNCg0KDQpJbXBvcnRhbnQgUmVtaW5kZXIgQWJvdXQgWW91

ciBVcGNvbWluZyBSZW5ld2FsDQpEZWFyIFZhbHVlZCBDdXN0b21lciwNCg0KVGhpcyBpcyBhbiBp

bXBvcnRhbnQgcmVtaW5kZXIgcmVnYXJkaW5nIHRoZSByZW5ld2FsIG9mIHlvdXIgYWN0aXZlIGNv

dmVyYWdlICANCmxpbmtlZCB0byBOb3J0b24uIFlvdXIgc3Vic2NyaXB0aW9uIGlzIHNldCB0byBy

ZW5ldyBvbiBUdWVzZGF5LCAxOSBNYXkgIA0KMjAyNiwgYW5kIHRoZSByZW5ld2FsIGZlZSBvZiBV

U0Q1NDguNjYgd2lsbCBiZSBiaWxsZWQgYXV0b21hdGljYWxseS4NCg0KKipDb3ZlcmFnZSBJbmZv

cm1hdGlvbioqDQoNCuKAoiBSZWdpc3RlcmVkIEl0ZW06IEZ1bGwgTWVtYmVyc2hpcA0K4oCiIE51

bWJlciBvZiBEZXZpY2VzOiB4MSBEZXZpY2UocykNCuKAoiBTZXJ2aWNlIENvdmVyYWdlOiBGaXZl

IFllYXJzIFllYXIocykNCuKAoiBQYXltZW50IEFycmFuZ2VtZW50OiBBdXRvIFBheQ0K4oCiIFJl

bmV3YWwgVG90YWw6IFVTRDU0OC42Ng0KDQpBY2NvdW50IFJlZmVyZW5jZTogUDFHRDVCUzI3Ng0K

Q29uZmlybWF0aW9uIFNpZ25hdHVyZTogMTA2ZTExNTAtMjQ1Zi00NDdkLTg2N2ItOGRmZWIxZWQz

MmUwDQoNClRvIGF2b2lkIGludGVycnVwdGlvbiBvciB1bndhbnRlZCByZW5ld2FsIGNoYXJnZXMs

IHBsZWFzZSBzdWJtaXQgYW55ICANCmNhbmNlbGxhdGlvbiByZXF1ZXN0cyBhdCBsZWFzdCA0OCBo

b3VycyBiZWZvcmUgdGhlIHJlbmV3YWwgcHJvY2Vzc2luZyBkYXRlLg0KDQpOZWVkIGhlbHA/IFBs

ZWFzZSBjb250YWN0IG91ciBzdXBwb3J0IGNlbnRlciBhdCAxIDg1NCA1MDAtNDIxMS4NCg0KR3Jh

dGVmdWwgYWx3YXlzLCwNCk5vcnRvbiBMaWZlTG9jayBQcm90ZWN0aW9uDQpCaWxsaW5nIERpcmVj

dG9yOiBSb2JlcnQgQ29sbGlucw0KQ3VzdG9tZXIgSGVscGRlc2sgTGluZTogMSA4NTQgNTAwLTQy

MzUNCkFkbWluaXN0cmF0aXZlIEFkZHJlc3MsOiA0NTEyIEh3eSA5MCBFYXN0IEJlYXIgRGUgMTk3

MDEgVVMNCkRhaWx5IE9wZXJhdGlvbiBIb3VyczogNiBBTSDigJMgNiBQTQ0KDQoNCk9yZ2FuaXpl

cg0Kbm8gcmVwbHkNCm4ub3JlcGwueXUucGRhdGVzQGVtYWlsb3JhLm9yZw0KDQpHdWVzdHMNCihH

dWVzdCBsaXN0IGhhcyBiZWVuIGhpZGRlbiBhdCBvcmdhbml6ZXIncyByZXF1ZXN0KQ0KDQo=

Norton Phish from Google Gmail Part 4

Posted by Dave Yadallee on









/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"no reply: #JRHYMQO"/>
emtype=3D"http://schema.org/Event">
=3D"http://schema.org/EventScheduled"/>
pe itemtype=3D"http://schema.org/Organization">
ent=3D"Google Calendar"/>
ontent=3D"04ier77IL3wBYIuEQcbaMHPfhH"/>
ize: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0=

; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">#OPHFBZX
span>
role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-=

container">

e=3D"height:16px;" aria-hidden=3D"true">  

g=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

temtype=3D"http://schema.org/EmailMessage">

#JRH=

YMQO


"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">
>

r-radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align=

: left; vertical-align: top;" class=3D"main-container-inner">

: left; direction: ltr; display: inline-block; vertical-align: top; width: =

100%;overflow: hidden; word-wrap: break-word;">
ing=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"m=

ain-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-=

layout: fixed;">
>

vertical-align:top;">
0" role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">=


word;;padding-bottom:2px;">

, Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;c=

olor: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"prese=

ntation">#OPHFBZX

le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=

adding-bottom:24px;">

le: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-sp=

acing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text"=

role=3D"presentation">Tuesday May 19, 2026 =E2=8B=85 2=

:12am (Eastern Time - New York)

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:24px;">

; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=

px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=

resentation">Important Reminder About Your Upcoming Renewal
Dear V=

alued Customer,

This is an important reminder regarding the renewal of yo=

ur active coverage linked to Norton. Your subscription is set to renew on T=

uesday, 19 May 2026, and the renewal fee of USD548.66 will be billed automa=

tically.

**Coverage Information**

=E2=80=A2 Registered Item: Fu=

ll Membership
=E2=80=A2 Number of Devices: x1 Device(s)
=E2=80=A2 Ser=

vice Coverage: Five Years Year(s)
=E2=80=A2 Payment Arrangement: Auto Pa=

y
=E2=80=A2 Renewal Total: USD548.66

Account Reference: P1GD5BS276=


Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0

To a=

void interruption or unwanted renewal charges, please submit any cancellati=

on requests at least 48 hours before the renewal processing date.

Nee=

d help? Please contact our support center at 1 854 500-4211.

Grateful=

always,,
Norton LifeLock Protection
Billing Director: Robert Collins=


Customer Helpdesk Line: 1 854 500-4235
Administrative Address,: 4512=

Hwy 90 East Bear De 19701 US
Daily Operation Hours: 6 AM =E2=80=93 6 PM=



About Your Upcoming Renewal

Dear Valued Customer,



This is an important reminder regarding the renewal of your active coverage=

linked to Norton. Your subscription is set to renew on Tuesday, 19 May 202=

6, and the renewal fee of USD548.66 will be billed automatically.



**Coverage Information**



=E2=80=A2 Registered Item: Full Membership

=E2=80=A2 Number of Devices: x1 Device(s)

=E2=80=A2 Service Coverage: Five Years Year(s)

=E2=80=A2 Payment Arrangement: Auto Pay

=E2=80=A2 Renewal Total: USD548.66



Account Reference: P1GD5BS276

Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0



To avoid interruption or unwanted renewal charges, please submit any cancel=

lation requests at least 48 hours before the renewal processing date.



Need help? Please contact our support center at 1 854 500-4211.



Grateful always,,

Norton LifeLock Protection

Billing Director: Robert Collins

Customer Helpdesk Line: 1 854 500-4235

Administrative Address,: 4512 Hwy 90 East Bear De 19701 US

Daily Operation Hours: 6 AM =E2=80=93 6 PM

"/>

eft; word-break: break-word;;padding-bottom:24px;">

y: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px=

; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration:=

none;" class=3D"primary-text" role=3D"presentation">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bo=

ttom: 4px;">


or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=

antialiased;margin: 0; padding: 0;">Guests

(Guest li=

st has been hidden at organizer's request)


--0000000000009eff9306521aad6f--

Norton Phish from Google Gmail Part 3

Posted by Dave Yadallee on
@media only screen and (min-width:580px) {

.main-container-inner {

padding: 24px 32px !important;

}



.info-bar-inner {

padding: 12px 32px !important;

}



.main-column-table-ltr {

padding-right: 32px !important;

}



.main-column-table-rtl {

padding-left: 32px !important;

}



.appointment-buttons th {

display: table-cell;

clear: none;

}

}



.primary-text {

color: #3c4043 !important;

}



.secondary-text,

.phone-number a {

color: #70757a !important;

}



.accent-text {

color: #1a73e8 !important;

}



.accent-text-dark {

color: #185abc !important;

}



.grey-button-text,

.attachment-chip a {

color: #5f6368 !important;

}



.primary-button {

background-color: #1a73e8 !important;

}



.primary-button-text {

color: #fff !important;

}



.underline-on-hover:hover {

text-decoration: underline !important;

}



.grey-infobar-text {

color: #202124 !important;

}



@media (prefers-color-scheme: dark) {

.primary-text:not([class^=3D"x_"]) {

color: #e8eaed !important;

}



.secondary-text:not([class^=3D"x_"]),

.phone-number:not([class^=3D"x_"]) a {

color: #9aa0a6 !important;

}



.grey-button-text:not([class^=3D"x_"]),

.attachment-chip:not([class^=3D"x_"]) a {

color: #bdc1c6 !important;

}



.accent-text:not([class^=3D"x_"]),

.hairline-button-text:not([class^=3D"x_"]) {

color: #8ab4f8 !important;

}



.primary-button:not([class^=3D"x_"]) {

background-color: #8ab4f8 !important;

}



.primary-button-text:not([class^=3D"x_"]) {

color: #202124 !important;

}

}















Norton Phish from Google Gmail Part 2

Posted by Dave Yadallee on

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20

















Norton Phish from Google Gmail Part 2

Posted by Dave Yadallee on

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20

Norton Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6qL-000000009fV-0Fw2

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:53:49 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 16:53:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f73.google.com ([209.85.210.73]:51513)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1XS-00000000KUN-2T7W

for root@nk.ca;

Mon, 18 May 2026 11:14:07 -0600

Received: by mail-ot1-f73.google.com with SMTP id 46e09a7af769-7e3f58830cfso2957870a34.3

for ; Mon, 18 May 2026 10:13:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779124386; x=1779729186; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=9++LDiF9jZLZ+46r38jGslUf0i63Ai7RXqKiyCVInkA=;

b=dtw20VRQAttrozXnacr51IQPrutgF0VxKItl+pFNPCZOaBlU7Gp7s6ZDiKihs7UPs7

GHX7GC41Rgc31YCLf0bWC4Zvdr7/QomM2Qi36B5QFqIjUNLD9qQAH1gzRN5QP2f4KFDu

TfynXBWXGASIksU39W/ol288hY0v7vUIdibfayFKMHt4rvID83Qt4vFXm3pgytywpgVl

KsLv0NcG2fTjcS2DjvIEOzWhvFmRPBPnoLbhFlJS8HcI6F8nGZJIdEqrnPrVXMC6+TOZ

K5z6tDPNZmj+gRyYdzuGc8c36pntYTrE1XjVzP0vutRa21o6YVZjNZYZW05ER66cWmTs

bOMQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124386; x=1779729186; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=9++LDiF9jZLZ+46r38jGslUf0i63Ai7RXqKiyCVInkA=;

b=XB1rdsLKgmLjhRKCvsjbc3uRs/t1+4ZQLNAd82km5Xj4OodFNUU33kYUFOuRJ+5jtV

+0oCkxAj/9DQETcc0+CNU8kq9GqSXI+3qs4/Y3WxjQzslDJtTsljh+dM1qxVPYlyoGNH

GeHMTgPTtZb+50dr+iUyHbFNjDLHlkJvg7bDr6TKsfgkQ9Wo21GmR6ei1L4SsiQiqAwh

iIlOWrFWynsJP+z4qzBJ7n+qkWeBAccjbolJLXyKVfyorOc17OLrQ11bOiGUHiDl9olx

icZEMLRLds56UulWw7pGmq6Wghh/4T+WfM9iVSKhlpujy2ofworwE8vyoYWQx9gz8Ij3

ZA5w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779124386; x=1779729186;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=9++LDiF9jZLZ+46r38jGslUf0i63Ai7RXqKiyCVInkA=;

b=nzqwHz/iCB1RArep43hsqIYPe69MeACFIk5pDsbHw96diNAzDA15x+G918SoYrZ7f+

xeGx/j1IldYSce9WgELMeVbg2wNhFpyYZ9eYMSxE65r/CqciQVEZTri281K6DZcZ6+2O

M7xAuMIQWPfHbC5MbKIE6rlqJURLhRCoYppB+wOrjhhcnyr4e/OqwiYvDfaEd4PSRRHW

BC546a4wrLSCIxFofn3qxDtB/h6xmkeFUA2h4bwQ0jvmsbZAVYGcPpmAIlefCd15A+jB

EqCm5XAHJQ+qr7Gn0PcF/mAQ+6SS/PYeu1sq9G18vkXbei52jPZ/V+/6LstKjNIH47ye

XcMQ==

X-Forwarded-Encrypted: i=1; AFNElJ85MoshtdxlI3n+eppvg9jMuYUPbWBtcbKphcgIIaGH02g1iOLJSavls1IFILF3pu1gjDsr@nk.ca

X-Gm-Message-State: AOJu0Yx5Otd4rqLT0PTv8mSO69te591A9SRd56gZ67LS72qAlEFMsK6e

vrG52IKaL5rSHoU9B7jlv3lTOkNtwYYksBndCrxn8pw/gZvuJrmapD0HSdak5TDLYvwDrMUIDqM

KwiNLoyB7j9iK5jJioQcuraw3BIfVlhiwxb7fF2A44w7row==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:4991:b0:7de:c6b8:2349 with SMTP id

46e09a7af769-7e4f2b3e8fdmt9532054a34.14.1779124385568; Mon, 18 May 2026

10:13:05 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 18 May 2026 17:13:05 +0000

Subject: #JRHYMQO

From: no reply

Content-Type: multipart/alternative; boundary="00000000000007984606521aadb1"

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern

Time - New York Important Reminder About Your Upcoming Renewal Dear Valued

Customer,



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

[209.85.210.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.73 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

[209.85.210.73 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.73 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.73 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.73 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.9 REPLYTO_WITHOUT_TO_CC No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} #JRHYMQO



--00000000000007984606521aadb1

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



I0pSSFlNUU8NCg0KI09QSEZCWlgNClR1ZXNkYXkgTWF5IDE5LCAyMDI2IOKLhSAyOjEyYW0NCkVh

c3Rlcm4gVGltZSAtIE5ldyBZb3JrDQoNCg0KDQpJbXBvcnRhbnQgUmVtaW5kZXIgQWJvdXQgWW91

ciBVcGNvbWluZyBSZW5ld2FsDQpEZWFyIFZhbHVlZCBDdXN0b21lciwNCg0KVGhpcyBpcyBhbiBp

bXBvcnRhbnQgcmVtaW5kZXIgcmVnYXJkaW5nIHRoZSByZW5ld2FsIG9mIHlvdXIgYWN0aXZlIGNv

dmVyYWdlICANCmxpbmtlZCB0byBOb3J0b24uIFlvdXIgc3Vic2NyaXB0aW9uIGlzIHNldCB0byBy

ZW5ldyBvbiBUdWVzZGF5LCAxOSBNYXkgIA0KMjAyNiwgYW5kIHRoZSByZW5ld2FsIGZlZSBvZiBV

U0Q1NDguNjYgd2lsbCBiZSBiaWxsZWQgYXV0b21hdGljYWxseS4NCg0KKipDb3ZlcmFnZSBJbmZv

cm1hdGlvbioqDQoNCuKAoiBSZWdpc3RlcmVkIEl0ZW06IEZ1bGwgTWVtYmVyc2hpcA0K4oCiIE51

bWJlciBvZiBEZXZpY2VzOiB4MSBEZXZpY2UocykNCuKAoiBTZXJ2aWNlIENvdmVyYWdlOiBGaXZl

IFllYXJzIFllYXIocykNCuKAoiBQYXltZW50IEFycmFuZ2VtZW50OiBBdXRvIFBheQ0K4oCiIFJl

bmV3YWwgVG90YWw6IFVTRDU0OC42Ng0KDQpBY2NvdW50IFJlZmVyZW5jZTogUDFHRDVCUzI3Ng0K

Q29uZmlybWF0aW9uIFNpZ25hdHVyZTogMTA2ZTExNTAtMjQ1Zi00NDdkLTg2N2ItOGRmZWIxZWQz

MmUwDQoNClRvIGF2b2lkIGludGVycnVwdGlvbiBvciB1bndhbnRlZCByZW5ld2FsIGNoYXJnZXMs

IHBsZWFzZSBzdWJtaXQgYW55ICANCmNhbmNlbGxhdGlvbiByZXF1ZXN0cyBhdCBsZWFzdCA0OCBo

b3VycyBiZWZvcmUgdGhlIHJlbmV3YWwgcHJvY2Vzc2luZyBkYXRlLg0KDQpOZWVkIGhlbHA/IFBs

ZWFzZSBjb250YWN0IG91ciBzdXBwb3J0IGNlbnRlciBhdCAxIDg1NCA1MDAtNDIxMS4NCg0KR3Jh

dGVmdWwgYWx3YXlzLCwNCk5vcnRvbiBMaWZlTG9jayBQcm90ZWN0aW9uDQpCaWxsaW5nIERpcmVj

dG9yOiBSb2JlcnQgQ29sbGlucw0KQ3VzdG9tZXIgSGVscGRlc2sgTGluZTogMSA4NTQgNTAwLTQy

MzUNCkFkbWluaXN0cmF0aXZlIEFkZHJlc3MsOiA0NTEyIEh3eSA5MCBFYXN0IEJlYXIgRGUgMTk3

MDEgVVMNCkRhaWx5IE9wZXJhdGlvbiBIb3VyczogNiBBTSDigJMgNiBQTQ0KDQoNCk9yZ2FuaXpl

cg0Kbm8gcmVwbHkNCm4ub3JlcGwueXUucGRhdGVzQGVtYWlsb3JhLm9yZw0KDQpHdWVzdHMNCihH

dWVzdCBsaXN0IGhhcyBiZWVuIGhpZGRlbiBhdCBvcmdhbml6ZXIncyByZXF1ZXN0KQ0KDQo=

--00000000000007984606521aadb1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Norton Phish from Google Gmail part 3

Posted by Dave Yadallee on
















Norton Phish from Google Gmail part 4

Posted by Dave Yadallee on

/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"no reply: #JRHYMQO"/>
emtype=3D"http://schema.org/Event">
=3D"http://schema.org/EventScheduled"/>
pe itemtype=3D"http://schema.org/Organization">
ent=3D"Google Calendar"/>
ontent=3D"04ier77IL3wBYIuEQcbaMHPfhH"/>
ize: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0=

; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">#OPHFBZX
span>
role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-=

container">

e=3D"height:16px;" aria-hidden=3D"true">  

g=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

temtype=3D"http://schema.org/EmailMessage">

#JRH=

YMQO


"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">
>

r-radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align=

: left; vertical-align: top;" class=3D"main-container-inner">

: left; direction: ltr; display: inline-block; vertical-align: top; width: =

100%;overflow: hidden; word-wrap: break-word;">
ing=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"m=

ain-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-=

layout: fixed;">
>

vertical-align:top;">
0" role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">=


word;;padding-bottom:2px;">

, Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;c=

olor: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"prese=

ntation">#OPHFBZX

le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=

adding-bottom:24px;">

le: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-sp=

acing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text"=

role=3D"presentation">Tuesday May 19, 2026 =E2=8B=85 2=

:12am (Eastern Time - New York)

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:24px;">

; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=

px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=

resentation">Important Reminder About Your Upcoming Renewal
Dear V=

alued Customer,

This is an important reminder regarding the renewal of yo=

ur active coverage linked to Norton. Your subscription is set to renew on T=

uesday, 19 May 2026, and the renewal fee of USD548.66 will be billed automa=

tically.

**Coverage Information**

=E2=80=A2 Registered Item: Fu=

ll Membership
=E2=80=A2 Number of Devices: x1 Device(s)
=E2=80=A2 Ser=

vice Coverage: Five Years Year(s)
=E2=80=A2 Payment Arrangement: Auto Pa=

y
=E2=80=A2 Renewal Total: USD548.66

Account Reference: P1GD5BS276=


Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0

To a=

void interruption or unwanted renewal charges, please submit any cancellati=

on requests at least 48 hours before the renewal processing date.

Nee=

d help? Please contact our support center at 1 854 500-4211.

Grateful=

always,,
Norton LifeLock Protection
Billing Director: Robert Collins=


Customer Helpdesk Line: 1 854 500-4235
Administrative Address,: 4512=

Hwy 90 East Bear De 19701 US
Daily Operation Hours: 6 AM =E2=80=93 6 PM=



About Your Upcoming Renewal

Dear Valued Customer,



This is an important reminder regarding the renewal of your active coverage=

linked to Norton. Your subscription is set to renew on Tuesday, 19 May 202=

6, and the renewal fee of USD548.66 will be billed automatically.



**Coverage Information**



=E2=80=A2 Registered Item: Full Membership

=E2=80=A2 Number of Devices: x1 Device(s)

=E2=80=A2 Service Coverage: Five Years Year(s)

=E2=80=A2 Payment Arrangement: Auto Pay

=E2=80=A2 Renewal Total: USD548.66



Account Reference: P1GD5BS276

Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0



To avoid interruption or unwanted renewal charges, please submit any cancel=

lation requests at least 48 hours before the renewal processing date.



Need help? Please contact our support center at 1 854 500-4211.



Grateful always,,

Norton LifeLock Protection

Billing Director: Robert Collins

Customer Helpdesk Line: 1 854 500-4235

Administrative Address,: 4512 Hwy 90 East Bear De 19701 US

Daily Operation Hours: 6 AM =E2=80=93 6 PM

"/>

eft; word-break: break-word;;padding-bottom:24px;">

y: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px=

; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration:=

none;" class=3D"primary-text" role=3D"presentation">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bo=

ttom: 4px;">


or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=

antialiased;margin: 0; padding: 0;">Guests

(Guest li=

st has been hidden at organizer's request)


--0000000000007e3b1606521aac7d--

Norton Phish from Google Gmail part 2

Posted by Dave Yadallee on

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20

Norton Phish from Google Gmail part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 May 2026 16:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP6qG-000000009eG-1qnR

for dave@doctor.nl2k.ab.ca;

Mon, 18 May 2026 16:53:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 May 2026 16:53:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f202.google.com ([209.85.167.202]:52483)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wP1XJ-00000000KSe-26yg

for root@nk.ca;

Mon, 18 May 2026 11:13:58 -0600

Received: by mail-oi1-f202.google.com with SMTP id 5614622812f47-475f6d0de69so6421984b6e.1

for ; Mon, 18 May 2026 10:13:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1779124377; x=1779729177; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;

b=YU4tS1g+iZ9OL165iCQWm2o4VCkWwZXVEgYnH7WuSlYp5Z7GFfOhFh05ifrIYwqIZs

e36l+5LA6Uece7TxGAIotijAdFF4TQjhjThal6cuH3Y10PfEhTRuN6lrtlrbzF9DM2Mg

WJ5FAaek6urmAu8mczAczbRF0+f3iJCLTiezQnyZBjXUy+rZqoBcdJRcRR9hENPuH9t1

RSg2Kh/uDMFRXxMD7RqGLqpshQaiguvggSFg2ATrFjIyekpGceqJVL3qlnm0Wfbv8INf

7v7Jnbg5k58zJHpvj2DRd63ADc4W+EPIeINOvgszlSOr+iX1afbBHHyWvW/ygCIEPY8G

ErQA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=emailora-org.20251104.gappssmtp.com; s=20251104; t=1779124377; x=1779729177; darn=nk.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;

b=n4HSO1uD5V6G8wKT/CZ9fxRbGOiKq+IQe3WKFc+fOlcRsRk9zUcHVa7n36iYE59y26

4plLxcNrPURvMfUWKHnMKECLF3t2XgE+HOQ6HrTcoHEGgMxNH06D/nyIjiT+DxRcYCX6

0OYf9iSpoY6BLDLgkFM3tDbDopJ7nBUK1NDPRdLq+2SBPjj6ko2iRzpqA3Nfn7Z27yHb

wKga95lP8ZlhGyfI86RnRJoFCwfpi/ZaveIs8ucILUWF5z+XNgV5AQRS4i5i494qwG6w

syPcmwj4evhUyW+WeOZd9D4gQEr4pZgRKTgTed0qGFHaiz00W7oKi2K+Sff0hIKRc48a

xH4w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779124377; x=1779729177;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=9Kehr0URicL2+oPwddImRWUsckgdj2f35116/dOs4TY=;

b=S0MAuXAPzoYucO2h+XOFD+GpNwXKOi66qbWax330NyGmmiXTQlqolNgcBWvD28s/Zb

H5ZBVp+p4bj5wg7raTynNUXdaqn/tZbQy0o+2oaVfB51jGwZdQfrfiGIvjbxKB3NWqn/

F09nVYEJMFwIlWvObAe0TkKXXu1M5msWpxr/rV114x17vgICm75VBq6sSef+vaQohmz+

+5VQmfI3QALqDvIN41S0Yz0AoFjP7hcUfCxeDicC74Wtu98gvGR9Rrar57Bs891v+uAd

ahBwHwPysHjJWmePxRqZdRDtAmQpLdMGku8vsYDVEkgjGhabFIIurZ9pOaby4dVuStJa

UsLQ==

X-Forwarded-Encrypted: i=1; AFNElJ/CF1aGqYcX22b1ZbtDYvogpn+gZsSA83El6qtSn245uXab4DkRpkNGor1T6Cw17jEnDoj/@nk.ca

X-Gm-Message-State: AOJu0YytCyplqhD05HHqkn9E/Yo5tUnsaQYVCItYviBWHfo9A9NE9tTP

mx2QHz9Pjw3H+AT46DgQzk0OgK08lA8aImY57lx7aqisIu8/nbC/hZEt9EJa+gBAWTOQ2fU1s0L

d9CcM76N374zoliyS+OWL9+23LHrx8M/O+CMvKanA4jt5SA==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:654a:b0:484:d5a3:9982 with SMTP id

5614622812f47-484d5a3a311mt2320153b6e.14.1779124376584; Mon, 18 May 2026

10:12:56 -0700 (PDT)

Reply-To: no reply

Sender: Google Calendar

Message-ID:

Date: Mon, 18 May 2026 17:12:56 +0000

Subject: #JRHYMQO

From: no reply

Content-Type: multipart/alternative; boundary="0000000000007e3b1606521aac7d"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: #JRHYMQO #OPHFBZX Tuesday May 19, 2026 â‹… 2:12am Eastern

Time - New York Important Reminder About Your Upcoming Renewal Dear Valued

Customer,



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

[209.85.167.202 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.202 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 MISSING_HEADERS Missing To: header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.202 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.202 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} #JRHYMQO



--0000000000007e3b1606521aac7d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



I0pSSFlNUU8NCg0KI09QSEZCWlgNClR1ZXNkYXkgTWF5IDE5LCAyMDI2IOKLhSAyOjEyYW0NCkVh

c3Rlcm4gVGltZSAtIE5ldyBZb3JrDQoNCg0KDQpJbXBvcnRhbnQgUmVtaW5kZXIgQWJvdXQgWW91

ciBVcGNvbWluZyBSZW5ld2FsDQpEZWFyIFZhbHVlZCBDdXN0b21lciwNCg0KVGhpcyBpcyBhbiBp

bXBvcnRhbnQgcmVtaW5kZXIgcmVnYXJkaW5nIHRoZSByZW5ld2FsIG9mIHlvdXIgYWN0aXZlIGNv

dmVyYWdlICANCmxpbmtlZCB0byBOb3J0b24uIFlvdXIgc3Vic2NyaXB0aW9uIGlzIHNldCB0byBy

ZW5ldyBvbiBUdWVzZGF5LCAxOSBNYXkgIA0KMjAyNiwgYW5kIHRoZSByZW5ld2FsIGZlZSBvZiBV

U0Q1NDguNjYgd2lsbCBiZSBiaWxsZWQgYXV0b21hdGljYWxseS4NCg0KKipDb3ZlcmFnZSBJbmZv

cm1hdGlvbioqDQoNCuKAoiBSZWdpc3RlcmVkIEl0ZW06IEZ1bGwgTWVtYmVyc2hpcA0K4oCiIE51

bWJlciBvZiBEZXZpY2VzOiB4MSBEZXZpY2UocykNCuKAoiBTZXJ2aWNlIENvdmVyYWdlOiBGaXZl

IFllYXJzIFllYXIocykNCuKAoiBQYXltZW50IEFycmFuZ2VtZW50OiBBdXRvIFBheQ0K4oCiIFJl

bmV3YWwgVG90YWw6IFVTRDU0OC42Ng0KDQpBY2NvdW50IFJlZmVyZW5jZTogUDFHRDVCUzI3Ng0K

Q29uZmlybWF0aW9uIFNpZ25hdHVyZTogMTA2ZTExNTAtMjQ1Zi00NDdkLTg2N2ItOGRmZWIxZWQz

MmUwDQoNClRvIGF2b2lkIGludGVycnVwdGlvbiBvciB1bndhbnRlZCByZW5ld2FsIGNoYXJnZXMs

IHBsZWFzZSBzdWJtaXQgYW55ICANCmNhbmNlbGxhdGlvbiByZXF1ZXN0cyBhdCBsZWFzdCA0OCBo

b3VycyBiZWZvcmUgdGhlIHJlbmV3YWwgcHJvY2Vzc2luZyBkYXRlLg0KDQpOZWVkIGhlbHA/IFBs

ZWFzZSBjb250YWN0IG91ciBzdXBwb3J0IGNlbnRlciBhdCAxIDg1NCA1MDAtNDIxMS4NCg0KR3Jh

dGVmdWwgYWx3YXlzLCwNCk5vcnRvbiBMaWZlTG9jayBQcm90ZWN0aW9uDQpCaWxsaW5nIERpcmVj

dG9yOiBSb2JlcnQgQ29sbGlucw0KQ3VzdG9tZXIgSGVscGRlc2sgTGluZTogMSA4NTQgNTAwLTQy

MzUNCkFkbWluaXN0cmF0aXZlIEFkZHJlc3MsOiA0NTEyIEh3eSA5MCBFYXN0IEJlYXIgRGUgMTk3

MDEgVVMNCkRhaWx5IE9wZXJhdGlvbiBIb3VyczogNiBBTSDigJMgNiBQTQ0KDQoNCk9yZ2FuaXpl

cg0Kbm8gcmVwbHkNCm4ub3JlcGwueXUucGRhdGVzQGVtYWlsb3JhLm9yZw0KDQpHdWVzdHMNCihH

dWVzdCBsaXN0IGhhcyBiZWVuIGhpZGRlbiBhdCBvcmdhbml6ZXIncyByZXF1ZXN0KQ0KDQo=

--0000000000007e3b1606521aac7d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Norton phish from Google Gmail Part 4

Posted by Dave Yadallee on

/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"no reply: #JRHYMQO"/>
emtype=3D"http://schema.org/Event">
=3D"http://schema.org/EventScheduled"/>
pe itemtype=3D"http://schema.org/Organization">
ent=3D"Google Calendar"/>
ontent=3D"04ier77IL3wBYIuEQcbaMHPfhH"/>
ize: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0=

; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">#OPHFBZX
span>
role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-=

container">

e=3D"height:16px;" aria-hidden=3D"true">  

g=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

temtype=3D"http://schema.org/EmailMessage">

#JRH=

YMQO


"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width=

:100%;" class=3D"">
>

r-radius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align=

: left; vertical-align: top;" class=3D"main-container-inner">

: left; direction: ltr; display: inline-block; vertical-align: top; width: =

100%;overflow: hidden; word-wrap: break-word;">
ing=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"m=

ain-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-=

layout: fixed;">
>

vertical-align:top;">
0" role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">=


word;;padding-bottom:2px;">

, Roboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;c=

olor: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"prese=

ntation">#OPHFBZX

le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=

adding-bottom:24px;">

le: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-sp=

acing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text"=

role=3D"presentation">Tuesday May 19, 2026 =E2=8B=85 2=

:12am (Eastern Time - New York)

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:24px;">

; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=

px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=

resentation">Important Reminder About Your Upcoming Renewal
Dear V=

alued Customer,

This is an important reminder regarding the renewal of yo=

ur active coverage linked to Norton. Your subscription is set to renew on T=

uesday, 19 May 2026, and the renewal fee of USD548.66 will be billed automa=

tically.

**Coverage Information**

=E2=80=A2 Registered Item: Fu=

ll Membership
=E2=80=A2 Number of Devices: x1 Device(s)
=E2=80=A2 Ser=

vice Coverage: Five Years Year(s)
=E2=80=A2 Payment Arrangement: Auto Pa=

y
=E2=80=A2 Renewal Total: USD548.66

Account Reference: P1GD5BS276=


Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0

To a=

void interruption or unwanted renewal charges, please submit any cancellati=

on requests at least 48 hours before the renewal processing date.

Nee=

d help? Please contact our support center at 1 854 500-4211.

Grateful=

always,,
Norton LifeLock Protection
Billing Director: Robert Collins=


Customer Helpdesk Line: 1 854 500-4235
Administrative Address,: 4512=

Hwy 90 East Bear De 19701 US
Daily Operation Hours: 6 AM =E2=80=93 6 PM=



About Your Upcoming Renewal

Dear Valued Customer,



This is an important reminder regarding the renewal of your active coverage=

linked to Norton. Your subscription is set to renew on Tuesday, 19 May 202=

6, and the renewal fee of USD548.66 will be billed automatically.



**Coverage Information**



=E2=80=A2 Registered Item: Full Membership

=E2=80=A2 Number of Devices: x1 Device(s)

=E2=80=A2 Service Coverage: Five Years Year(s)

=E2=80=A2 Payment Arrangement: Auto Pay

=E2=80=A2 Renewal Total: USD548.66



Account Reference: P1GD5BS276

Confirmation Signature: 106e1150-245f-447d-867b-8dfeb1ed32e0



To avoid interruption or unwanted renewal charges, please submit any cancel=

lation requests at least 48 hours before the renewal processing date.



Need help? Please contact our support center at 1 854 500-4211.



Grateful always,,

Norton LifeLock Protection

Billing Director: Robert Collins

Customer Helpdesk Line: 1 854 500-4235

Administrative Address,: 4512 Hwy 90 East Bear De 19701 US

Daily Operation Hours: 6 AM =E2=80=93 6 PM

"/>

eft; word-break: break-word;;padding-bottom:24px;">

y: Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px=

; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration:=

none;" class=3D"primary-text" role=3D"presentation">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bo=

ttom: 4px;">


or: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing:=

antialiased;margin: 0; padding: 0;">Guests

(Guest li=

st has been hidden at organizer's request)


--000000000000f7a94206521aabe9--