Also in January 2022, an email from an account named Threat Protection showed the email address [email protected] and said it came "via nats.quarkfive.net." Just like the previous example, this one might not have been a refund or renewal scam, but it was definitely a scam: