Dewalt Canadian Tire phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 07:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpThZ-00000000JGa-2iDe

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 07:52:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 07:52:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04on2103.outbound.protection.outlook.com ([40.107.100.103]:23489 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpRyH-00000000AhK-08oB

for root@nk.ca;

Wed, 27 Mar 2024 06:01:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=UWUszyb8qnQQcARf/G+WCu3zzjYW/pbGTWmf6dW4zXusMEcFCJ0unwSa6gmgltdB8em2ZhcdRsxv1bl3yA5DwoV/u17tMM/sSSi0i18HijyxHxUTyW/1a9YBbqtnlR5raC9NJZHZ9ypwOLrFTBTTS8ukDNDt8/uCDYAeBAj4DtQSM2EeycgvnSDeFXDbc7S2Toc0KYoGIhBuiDHynq+lt9YcKcM6fvdwnhwtiPF9g9ueZyCkxmrqewjd8JggyCanwRIRTMdqPxRg7nQ81HlOIXIDcQs4YBidWjWBHIBG9vJY+dtil/Y5dtS69DP+EVMVvRW3iYB9rKQd9ktr5C+xRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=QK4WPbXjmCK87NX4llDZ2wonTlvxr67DEfbAmliHhtA=;

b=EmgACm03vXNlmLhTZGpiQbN72qovwF1vKVLCDGEwUsNPIFG3Uy8H1XI/lyfSHYGPfT63wUJL5YfudQVruseyRQFSgO8AFUZDPM3T7wqxIi6UykQdBfCdWsW/X9vjT5vILTxPYRMg7TvinkbIPpYR24XsfdUi5xMGARMlVxSRhMl9ZArVrvZ+WF7iro1wV48ufqWN+Bk0uK97PKjME1KhDnlIHmpzPvnufLfKT5X5kjJ9Ucfzqsu6oYaapSJw6JJlMADQFpxWHvw5+Ssa2PNUjq6jV14FbYXbmzwnwAsw9PzeC844cz4cEX9xkjPNnVkW4B7sB9w4rk+ParW0x8dcUg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

212.87.212.62) smtp.rcpttodomain=nk.ca

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 212.87.212.62)

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com;

Subject: Get Rewarded for Your Opinion:Take Our Survey!

Date: Wed, 27 Mar 2024 11:59:28 +0000

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: root@nk.ca

From: "Dewalt-EXTREME-Drill-Unlocked"

MIME-Version: 1.0In-Reply-To:

To: root@nk.ca

Message-ID:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0001A107:EE_|MW4PR12MB6850:EE_

X-MS-Office365-Filtering-Correlation-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:212.87.212.62;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:gdfgdg78zrtgh.onmicrosoft.com;PTR:mailkhalilo194.infinitygroup.com.ar;CAT:NONE;SFS:(13230031)(82310400014)(36860700004)(376005)(61400799018)(34070700005)(41320700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: gdfgdg78zrtgh.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 11:59:28.3481

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-CrossTenant-Id: 4b10c5ae-a8a9-4671-9687-e36fa9732105

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4b10c5ae-a8a9-4671-9687-e36fa9732105;Ip=[212.87.212.62];Helo=[gdfgdg78zrtgh.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0001A107.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR12MB6850

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications























































ミ★ Canadian Tire Department ★彡







꧁ Order confirmation #064282 ꧂










































































Elon Musk product spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 23:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rozeO-000000007gd-2Kf4

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 23:47:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 23:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southeastasiaazon11020003.outbound.protection.outlook.com ([52.101.133.3]:35735 helo=SG2PR03CU006.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rourH-00000000L4Z-0NYw

for root@nk.ca;

Mon, 25 Mar 2024 18:40:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MH7L8jDG6QCWmIiOvcZbd5zm5Aua1lQnve2p2nCkv488Fen4IgzKy7p5UcbYRkZkpPUkdsNbf7l4vWdKn9Q/YvShuLVkx0N5uQZ1abStqyght22MmLc1IJ6P0+xadpYC9jAG6AQQOBCwAbXq1nv6evkuQTrjEHjoWNOgSRbEnTGgR0X3pA8sXA8dnCaz5j16fv/UUWVr0dS3S8xnNEYhYdcdxtR23q37rhfj1PS0GpL4xKCCiaVYbcnIb5GW4TevorI7tnx0v8ii82zSt4IfwU0dmJs4w/rAlmbapRAxCEvpiUbgHPgO4hT+MTMFbSpN52uY3pQeraoswvOPrfgqUg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=F9D//TnS2J/C7bbeguyozc8dRv1H4bjwtmyBrv31tGA=;

b=UZ4cKZKoJnLYKyLZadtcKsk3OuBMQmdKInkDWa2TtvOWB3ZlENMIu/eISbHL0gRVxXL0uCxirIC3QoSYLAxrXMQMr5LHMj5M+CKDS0BCzA+h0LPBAil+vcpMVlJXOsmKT+inm3WPqnntniAdsfSWHkl0YIoDdGtZoG7GUVYOPu4kGLGa5099xy9w7oPH6jAvs/G2nKd8mlTducdTM32Y3Tcacxznzb9djybWKjGw2wxl9RFCC8V7WYcBUBKUWCfmUTSCkKtVndQwsGbw5/yc8BcZRwGsG+KyFyUGGjPLfJAZsD9rpidVn41ydc4FWHAo01IIyCZmBYKnv9XH3t6UHw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.156) smtp.rcpttodomain=nk.ca smtp.mailfrom=vehz.onmicrosoft.com;

dmarc=none action=none header.from=vehz.onmicrosoft.com; dkim=none (message

not signed); arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.156)

smtp.mailfrom=vehz.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vehz.onmicrosoft.com;

X-MS-Has-Attach: yes

msip_labels:

MIME-Version: 1.0

Thread-Index: BzsjXNhmZXbtzP3k7+6Tay5FcEI3Ty1KVR==

Content-Type: multipart/related; boundary="XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse"; type="multipart/alternative"

X-MS-TNEF-Correlator:

Content-Language: fr-FR

Subject: Get Ahead with Elon Musk's Seal of Approval!

Message-ID:

Date: Tue, 26 Mar 2024 00:38:00 +0000

To: "root@gmail.com"

From: Elon Power Bank

Accept-Language: fr-FR, en-US

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK2PEPF00006FB4:EE_|SEYPR01MB5979:EE_

X-MS-Office365-Filtering-Correlation-Id: 69c2e5ee-9b3e-443e-8129-08dc4d2cfdd5

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.40.156;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:vehz.onmicrosoft.com;PTR:172-233-40-156.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(34020700007)(41320700004)(61400799018)(82310400014)(376005)(36860700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: vehz.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 00:38:00.8232

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 69c2e5ee-9b3e-443e-8129-08dc4d2cfdd5

X-MS-Exchange-CrossTenant-Id: a54a1645-38a1-4581-86b4-4f9afe14d61a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54a1645-38a1-4581-86b4-4f9afe14d61a;Ip=[172.233.40.156];Helo=[vehz.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK2PEPF00006FB4.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5979



--XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse

Content-Type: multipart/alternative; boundary="EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy"



--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL





yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE





--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy--



--XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse--

Product Phishing from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 23:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rozeU-000000007kB-2iRG

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 23:47:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 23:47:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01on2136.outbound.protection.outlook.com ([40.107.122.136]:43246 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1routC-00000000LCw-38J5

for root@nk.ca;

Mon, 25 Mar 2024 18:42:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=XsHgfhPEkCzRREOknGHB9ZDd+oUUOaicyqKkVOCHF53YMsRBDP+GMce2lv2O2PYYHZJoNcCIrTls0lGukc9ZLS3AFmrGd5ax/Pele8ZOFgtzA6td1agmGgXYoe1t9mSnEPV/VCkFQgUJ9MSj+4U2F8Oezv1n1z1GIy9hszRJu49dlF2J2Rvql82bMYhcaAvXk9XWAGALf0Gvo2RuRT5mksP83va9Qp/CIl8c0encnXYJ8TqE9zq1Ky+6Y6W5Ai1ZZzZ3BOz37tq9a8DZrBnx0XGr3Mx/3e1D1rrHIK4gmTi9LFRSieWO062mPhbLywF24rVnoh7EQkwkpDEiLPHkBQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=VwUlNQRWtM6yJRasGzAv7TSWHWe3IHRo4KEYsozOQS0=;

b=afeDcQ1XOmYWntyDHdJ+dswZQzVTk+UC2zqPoGdNUvtglMVbAK9rN5sr/zJxiyaJjf7F9DKyPd2gped582b/fRt8I3OiBHFvWgk5z7QdzsHlmJ8TqwqA7eLH7asmU6Whw9M/vix8rReuKT5MIpq8YahdMUMNIk5J+/nKISewLM3pG/8TY2WdBUku3ZKi+OhvFsSMkvAZknohwvnkxF3wbWyw6D0YXfEuQuRHnhzUIjzHR3Q2u5sZ8qG8hApXqXyIuc3FxrLBfcipF8yigjWBt8cjh23ZjUOdhm9px7aBj/hWgPW/sz3aycZuNkj8x1ojbs2m7Xv2muEAWjeGhr62/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.11.93.53) smtp.rcpttodomain=nk.ca smtp.mailfrom=zmbhksu.onmicrosoft.com;

dmarc=none action=none header.from=zmbhksu.onmicrosoft.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wetherbyprepstudentscouk.onmicrosoft.com;

s=selector1-wetherbyprepstudentscouk-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=VwUlNQRWtM6yJRasGzAv7TSWHWe3IHRo4KEYsozOQS0=;

b=S7r2GH67jx+4lF4/TzUVLWSCudjqKN3+94ODdl2G9FfPSS5qF9aGUbDi1Nnkv6HoiUJecGl9b1PHkl/R0shagQQUoe/6Q1cKQfm7Ent1xp3hCeVFwU7BobqJP/ny/T6+dktv4XecKdIT1Rkymih2LiKy1jASSJNMTQqRLbV6+zk=

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.11.93.53)

smtp.mailfrom=zmbhksu.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=zmbhksu.onmicrosoft.com;

Content-Type: multipart/related; boundary="HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT"; type="multipart/alternative"

Content-Language: fr-FR

Subject: Get Ahead with Elon Musk's Seal of Approval!

msip_labels:

X-MS-TNEF-Correlator:

Message-ID:

Thread-Index: 6Q3TGNyab3PMBZqOD+hG0DprtWzWV0LuSf==

Date: Tue, 26 Mar 2024 00:40:00 +0000

From: Elon Power Bank

To: "root@gmail.com"

Accept-Language: fr-FR, en-US

X-MS-Has-Attach: yes

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000028CC:EE_|LO2P123MB6245:EE_

X-MS-Office365-Filtering-Correlation-Id: 25601516-b06a-46e1-0aa9-08dc4d2d4677

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.11.93.53;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:zmbhksu.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230031)(34020700007)(36860700004)(41320700004)(82310400014)(61400799018)(376005);DIR:OUT;SFP:1102;

X-OriginatorOrg: zmbhksu.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 00:40:01.1622

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 25601516-b06a-46e1-0aa9-08dc4d2d4677

X-MS-Exchange-CrossTenant-Id: 758d6117-8a63-4a5d-8dd9-7339a955921a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=758d6117-8a63-4a5d-8dd9-7339a955921a;Ip=[45.11.93.53];Helo=[zmbhksu.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000028CC.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO2P123MB6245



--HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT

Content-Type: multipart/alternative; boundary="cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA"



--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa





EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF





--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA--



--HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT--

Mcafee phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 13:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpCGk-00000000Mpn-00JA

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 13:15:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 13:15:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f177.google.com ([209.85.215.177]:38944)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpBqA-00000000J1S-2gyP

for doctor@nl2k.ab.ca;

Tue, 26 Mar 2024 12:48:11 -0600

Received: by mail-pg1-f177.google.com with SMTP id 41be03b00d2f7-55b5a37acb6so1075059a12.0

for ; Tue, 26 Mar 2024 11:46:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711478766; x=1712083566; darn=nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=ef2dfSfTWVqSke5chkzhbILiE9XZOPfWjWOdIWRiNvU=;

b=VBWSyfR6+L+UHN35m0hpgmdi/1sEHZD/5apXbpuEETTnn0XhDh9+kJgbXpPJb7yaXE

ghXyAP81LynKgVHxxyGFIJ37SZZ/I3Yss39kC/5X5QbsA8O5Dz++Hmx5WaZAUL4RzVDQ

qJuTJ6EOiJF9rgYx93SPLdgBA4yAd48FUlhawLgr9SyoPHla/tLdlBMWEOR5afJeR+pO

cayFepZiAwNvBz/OEWKwznFDY4Owdtq3XrXrHk1LC0S3HZX3wAjRv3hmPOpGFMMf66Ji

mUJx9De53rk58419yAGBlUPX2lMvTqMPfmDNJt8D0XLIXZAHu1SInXqKoV9cVHo4vQyd

cJ4A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711478766; x=1712083566;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=ef2dfSfTWVqSke5chkzhbILiE9XZOPfWjWOdIWRiNvU=;

b=DePxAvjZ463cdFA/SivUbhYhn6ENfxkGmxUMqXJOXZr0Z726lTa7Ocsp9E0cGH6dUd

hxlEQ4lCX+RB87Mx7WdeAe9t2UbVu5Tua4dsIbtarzws/kp5TcDHJK/UzuCFMCNlBQJ1

zWlpGv1qRUXvnk2X74FoeRYCuqRUN8tgnaqqJFVmVt49PLt/JY27Wx8cVVr6nhMJx/WQ

QWzf1YtnWmVXeaYEwQ/NP5TGMES4FZJnx229Z5fBvrl49d3ykDHR5SvTiEwy0wnYRdeF

uJ1sBERI0Gpn7qWVccvdWhcBcw8L2g0xpZIkVl7AiGOVAYrFgfdnI0edEl4HhCC3nEEt

/t9Q==

X-Gm-Message-State: AOJu0Yxk1sVBTCeMVttJLG6Jbh/UxQPyl0SS/v7h84cuwXjlZNnVnpqA

2VL/PyotgrmBpma1cZwa6XwSErjhRRcQamwhwK8FssNUhe25jPhfirXTzJLe

X-Google-Smtp-Source: AGHT+IF+YZu33m+qJrCzaLc8i4qABQxZCkn3IlLMq4TrWTw+8n/kAK3bfcrSsZe9lKtP3WH6jjo4cw==

X-Received: by 2002:a17:90a:9f8b:b0:29e:b9c:d062 with SMTP id o11-20020a17090a9f8b00b0029e0b9cd062mr9449799pjp.3.1711478766019;

Tue, 26 Mar 2024 11:46:06 -0700 (PDT)

Received: from [10.201.16.88] ([43.128.219.237])

by smtp.gmail.com with ESMTPSA id si13-20020a17090b528d00b0029fe0b8859fsm1443583pjb.1.2024.03.26.11.46.05

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 26 Mar 2024 11:46:05 -0700 (PDT)

Message-ID: <660317ed.170a0220.73e65.27d0@mx.google.com>

Date: Tue, 26 Mar 2024 11:46:05 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============7049831437320822620=="

MIME-Version: 1.0

Subject: Updated Delivery Schedule RH890100NH

From: Chung suo Chen

To: doctor@nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: QQMail 2.x

List-Unsubscribe:

List-Owner:

List-ID: autagrace45@gmail.com

List-Subscribe: autagrace45@gmail.com

List-Post:



--===============7049831437320822620==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAyNywgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7

JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv

Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg

QW50aVZpcnVzPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRp

b24gS2V5OiBaUTcyOTFDVzxicj4KPGJyPgo8YnI+CjxiPiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYj

MTAxOyYjMTAxOyBBbnRpVmlydXM8L2I+ICYjODA7JiM5NzsmIzEyMTsmIzEwOTsmIzEwMTsmIzEx

MDsmIzExNjsgdmVyaWZpZWQgc3VjY2Vzc2Z1bGx5LiBTdGF5IGd1YXJkZWQuPGJyPiBDb25maXJt

YXRpb24gaGFzIGJlZW4gcmVjZWl2ZWQgZm9yIHRoZSBzdWNjZXNzZnVsICYjODA7JiM5NzsmIzEy

MTsmIzEwOTsmIzEwMTsmIzExMDsmIzExNjsgb2YgPGI+JiMzNjs0NjkuNjk8L2I+IGZvciB0aGUg

YXV0by0mIzExNDsmIzEwMTsmIzExMDsmIzEwMTsmIzExOTsmIzk3OyYjMTA4OyBvZiA8Yj4mIzc3

OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgQW50aVZpcnVzPC9iPi48YnI+U2hvdWxkIHlv

dSBuZWVkIGZ1cnRoZXIgZGV0YWlscyBvciBoYXZlIGFueSBxdWVzdGlvbnMgYWJvdXQgdGhpcyAm

IzExNjsmIzExNDsmIzk3OyYjMTEwOyYjeDczOyYjOTc7JiM5OTsmIzExNjsmIzEwNTsmIzExMTsm

IzExMDssIHBsZWFzZSBkbyBub3QgaGVzaXRhdGUgdG8gY29udGFjdCB1cy48YnI+Rm9yIGFueSBo

ZWxwIG5lZWRlZCwgZmVlbCBmcmVlIHRvIHJlYWNoIG91dCB0byBvdXIgJiM5OTsmIzExNzsmIzEx

NTsmIzExNjsmIzExMTsmIzEwOTsmIzEwMTsmIzExNDsgc2VydmljZSB0ZWFtIGF0IDxiPiYjNDM7

JiM0OTsoODQ1KSA2JiM0OTsmIzU1Oy00JiM1NTs5MDwvYj4gd2l0aGluIHRoZSBuZXh0IHNpeCBo

b3Vycy4KPGJyPgo8YnI+Cjxicj4KV2UgaGlnaGx5IHZhbHVlIHlvdXIgcHJlZmVyZW5jZSBmb3Ig

PGI+JiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IEFudGlWaXJ1czwvYj4sIGFuZCB5

b3VyIGNob2ljZSBpcyBncmVhdGx5IGFwcHJlY2lhdGVkLjxicj4KPGJyPgo8YnI+Cldhcm0gcmVn

YXJkcyw8YnI+CiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAxOyBBbnRpVmlydXM8YnI+

CjQ4MDggTWF5bmFyZCBSZCBDYWxnYXJ5IFQyRSA2SjggQ2FuYWRhPGJyPgpGb3IgaW5xdWlyaWVz

LCBwbGVhc2Ugc3VwcG9ydCB1cyBhdCA8Yj4mIzQzOyYjNDk7KDg0NSkgNiYjNDk7JiM1NTstNCYj

NTU7OTA8L2I+Lg==



--===============7049831437320822620==--

Instragram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Mar 2024 07:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ro0yX-00000000EqJ-3jIZ

for dave@doctor.nl2k.ab.ca;

Sat, 23 Mar 2024 06:59:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Mar 2024 06:59:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:57792)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnrow-00000000FY3-0wrK

for sales@nk.ca;

Fri, 22 Mar 2024 21:13:26 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-29dfc072e95so1869774a91.3

for ; Fri, 22 Mar 2024 20:11:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711163478; x=1711768278; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=4njSd4cRUP+HuXIwTLLQfW0/5BfiqzTuhpOdBtgzWAw=;

b=brWuessm3szRK3wLA/0V7zb1ZAg4rKAj/Z33y56rOyPviiCtnREEiGJU2rEQeBTaHk

8DKR8VUau87zaB0W2yRNu7jQOgX4DbEVA9E2UwX6mJHXikNNIVi4wxmolK9KXzOIk+31

BKQ/apeu5j5MUS1spnHxLUi+eJc3/D53kRjNiearpNDlQQ+HFiRPhrohGjQEQTr+SvCW

BxxahsH+0nycKZCY5EKVFDa0VqfTxgZKfMGp1IhvJxB9FezyLHNP5/mLYLnqMNIZX8Or

I0kdvOctgX0PjzqiuZuQZ73Z+SLe9FLcPTVuqoAYMnjt6TPzHp3mF7YsTQmvUjISm5sO

GrzQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711163478; x=1711768278;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=4njSd4cRUP+HuXIwTLLQfW0/5BfiqzTuhpOdBtgzWAw=;

b=NBGkVmVi2TUx1c2hiHAARM1etyNPJV7wkB+t4CZsED861gBWvKHkoHRn3Q1QTBl/DC

3B7OhyRR/zoa6xPgZOkVLv9kHaP0GrsuBxeB6olrBdsuuaRSW3fY0lHVDCKAiEDuEmXD

Fdy8xaBO1iK66KWS5F8JzB4RknbOvgmYfABO6hEmvuXAwXjdfliKdSrjTwn7KBWq3EA6

UeKGCz35WRj7rZbGBYxydBJLtQodQhPLOjc5NJIxc4cW5ac5HGGYMGH+BnxARtYsiAOA

IjGcgye6Q//j9vTuOdmFGOEEK8Q3ompSXxJxqPKI2oCCyxZ9BIhQJx/cJaFjOVXKT4Yy

S8fw==

X-Gm-Message-State: AOJu0Yxq+ZI4ZvrMkmQNDhCMjKMFGpgftEvqyCKsIB47WKLaX2SMsTMj

Mhd9VQ3WUlwXD4OqrffNrltsVhYqjDYr+/Ru+z3KJ5bWTcXzqEaGFCJPqC+z66HVbLwH2WQVv1J

64A==

X-Google-Smtp-Source: AGHT+IG52o9jhEsTHjJpC3bMIyx8m+ZQ73qQfWsxstltGYxG/ywpj8nJKRug9p7RxaKlNPbFBlJjum1c/Q==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:820:b0:5a1:3e58:1396 with SMTP id

bg32-20020a056820082000b005a13e581396mr87303oob.1.1711160137310; Fri, 22 Mar

2024 19:15:37 -0700 (PDT)

Message-ID:

Date: Sat, 23 Mar 2024 02:15:37 +0000

Subject: netknowyeg,Gifts 15K IG Followers here

From: reganiaksin@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1csDQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoN

ClsgaHR0cHM6Ly9iaXQubHkvaW5zdGFtYXhzaG9wP25ldGtub3d5ZWcgXQ0KDQpEbyB5b3UgaGF2

ZSBhYm91dCBbIExlc3MgdGhhbiA0MEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEh

IE9mZiA0MCUgVG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFBy

aXZhY3kgUHJvdGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGln

aCBRdWFsaXR5IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVz

dGVkDQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywg

SW5zdGFncmFtLCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFu

ayB5b3UsDQpSZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlh

UHJvTUFYLiBBbGwgUmlnaHRzIFJlc2VydmVkLg0K

Canadian Tire Phish from MIcrosoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 19:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnqYh-000000003Dy-10jG

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 19:52:31 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 19:52:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01on2097.outbound.protection.outlook.com ([40.107.255.97]:39009 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnqJF-00000000Jur-3c7t

for doctor@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 19:36:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=LZ4J/YwnzSWk6sVOzEB/yGU81mAUOOWIjV1n+Ls7v1zH/KDHz3dF3AuCnEtn1o2s8c33pH0N4dgsoOBJuVkIg6DicW3avhZ9NLw8aU8VaPmQDEOY5v+jCQz2noOzBpTq2xMa9OqHFd281Fi3OKXUhIHuMKwXIRc0WmQDSL6e8n/naMZjQin9kX9ciiSLPlPjqY+fn6rdoMF/bLPYDJb5JSRLAbfw3pidyzrm7QGVtxDX+1PJN0JcT0GtGfQwUcpFMNzOjwxfHP3c4e2r0mw/UvL5OkICJ5ncgjfwUWrSVQq/jcAVB9qXC0twSXeVXXTYCQef2IrgPqncaaRHp2XQAA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=z5XccaY2L/Y0wMwfufBBRdn+FfAQKn13ver0hQ0lvJE=;

b=dPfTZ18xD6bX+ww4cNd3ZWwVKAjrESgsPGirS2mtM/meYPM6Jr29u1rWOxtOZJHMHcPrQf6bZJgMZtikJqwcO4i2tJnxWoEI2HThw+/ApUtuhFS+UxrZHhasudI4sgVYrZGRmGNXYr5KzXJKgkTlb95F9KWFpTUOCa6OTwW38JzQfB6VOFKFVQKZWEXnwJ7ptfv3rd4IOHKLt//XYBciGTqODPao0isKfABHQ7ecrx3kw9AiGUQp2t9a0HdAxpBc9uZUJOczAFciSHnklQYmrm1TS86hA6DhlrFB8knCdV2Fyfi+abb2Ecu9x4/UTDUEcZF5byf5y558MR+cbha2Fw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.156) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=vehz.onmicrosoft.com; dmarc=none action=none

header.from=vehz.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.156)

smtp.mailfrom=vehz.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vehz.onmicrosoft.com;

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

Date: Sat, 23 Mar 2024 01:34:21 +0000

Subject: Y0U'VE -RECEIVED- A -REWARDS

From: Canadian Tire Rewards

Thread-Index: 9vmSzcZ36N6DYklr9+h3UAUbxWkoPI6Qfo==

msip_labels:

Content-Type: multipart/related; boundary="NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm"; type="multipart/alternative"

Content-Language: fr-FR

Message-ID:

To: "doctor@gmail.com"

Accept-Language: fr-FR, en-US

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK2PEPF00006FB5:EE_|SEYPR01MB5661:EE_

X-MS-Office365-Filtering-Correlation-Id: 8d692d29-57ab-4bc2-77dc-08dc4ad95e04

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.40.156;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:vehz.onmicrosoft.com;PTR:172-233-40-156.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(82310400014)(376005)(41320700004)(34020700007)(36860700004)(61400799018);DIR:OUT;SFP:1102;

X-OriginatorOrg: vehz.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Mar 2024 01:34:22.1415

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 8d692d29-57ab-4bc2-77dc-08dc4ad95e04

X-MS-Exchange-CrossTenant-Id: a54a1645-38a1-4581-86b4-4f9afe14d61a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54a1645-38a1-4581-86b4-4f9afe14d61a;Ip=[172.233.40.156];Helo=[vehz.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK2PEPF00006FB5.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5661



--NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm

Content-Type: multipart/alternative; boundary="xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y"



--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd





M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE





--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y--



--NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm--

Domain name selling phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnh4x-00000000FXR-3Cu2

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 09:45:11 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 09:45:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f45.google.com ([209.85.216.45]:54499)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rngxq-00000000Eoh-0IKV

for sales@nk.ca;

Fri, 22 Mar 2024 09:37:53 -0600

Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-2a02c4dffd2so1154108a91.0

for ; Fri, 22 Mar 2024 08:35:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711121749; x=1711726549; darn=nk.ca;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=ZT9svu59T+cWulwdKSX3IXBdBb7OhTXxGURC1vQoMVA=;

b=LdUAHAoVn5jEhLTg/TmB9lq7bxMur2jp4VZABWFS5NiUm5zshnySx0whWdcFjU6v+1

XKJxZYZqSU5e4ckv4GKrxDLktj2i6VSQgDVPLXlNpDqVI1+1eMdeygqGFLc5P2ACzBlV

60Yd80eZnj65RAk5WzcQwHystIZrwJ3cQuxyCvrmSmJy4/prq1FWONhGh+VQSDqx863p

SxjG+nggr/oRJTCKf0PmiMqSXci8GSfXLL6sge6sMILs9ZmAsQXq0EwkMvIC98tTW2vd

IIll6I93yaCWnEid77XCOYVfEZ18b8Fcssp78KESFYUnMqQknjfZ8zbBkeN24yaBbkPc

KdsQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711121749; x=1711726549;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ZT9svu59T+cWulwdKSX3IXBdBb7OhTXxGURC1vQoMVA=;

b=IWld1uY7wc221sjfWDFm9f7jKnWQ/B4Bpsb2hIDP2dQGOOl0d5Lfo7IJGSXY7O7OA+

8FblC59B+WVjyrs8LGeflKnXO6qULRbnnAhLD+ec/RF8bnk4F3JZ0rcDMR3PkqBpRlrI

zgHXyaSv8SOtjf20JDDnNDxU3uTiJuQFThkgoJ2FTw6DKB0YxjuP9yXTGt4gq5Pc7ioN

4q43HYlgOhJSHJRtPDJcgh3zhXwmF2R2c2UPuj35v4rKW77IB98dD9ReuSgicY3eek4L

QnA9qbIoAywXx+peoFrzmO18QrR2ZNkh4EUT/5F24RXXu24J4jtnRZviI8cVy8dKVsFL

LS6w==

X-Gm-Message-State: AOJu0YwF3O0TZtiTGwyIPEDY9KlB/inOe0rBHQHREltd8L3JJNFqWWFy

XXUoYJia3UsnfeimiTMLtHUvtqjvKSf6Fz/a4FCds5l8PBsh41drI+JzqakVf5xUlV1AELNC7Jj

cYv0bukouQl1mlGldcwjNnuBtQUDdAVBkynQ=

X-Google-Smtp-Source: AGHT+IFKz/VpBVvEWL9PEIAxoTXs2sSX7ONKuXoOvmST6Od6Mxl8AKNUKj3qLhXdaVNABTgwIeFJH2tj3BK9juPAY+Y=

X-Received: by 2002:a17:90a:1597:b0:29f:6d8d:da34 with SMTP id

m23-20020a17090a159700b0029f6d8dda34mr2518818pja.24.1711121749058; Fri, 22

Mar 2024 08:35:49 -0700 (PDT)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Fri, 22 Mar 2024 08:35:48 -0700

MIME-Version: 1.0

From: George Pat

X-Streak-Sequence-Data: action-key=acn_B4Iua2ueXiSvJH8I5g; recipient-key=rcp_B4ItDP_0NOADwKu4hA

In-Reply-To:

References:



Date: Fri, 22 Mar 2024 08:35:48 -0700

Message-ID:

Subject: Alberta Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000052a0e0614419423"



--000000000000052a0e0614419423

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



We have decided to sell the domain name www.BroadbandAlberta.com for a

discounted price of $350 as against the previous price



Interested, do click on the check out option in the link above



Best Regards

On Mon, Mar 11, 2024 at 03:21 PM George Pat wrote:



> Hello

>

> Hope you're doing well

>

> We're listening to offers on the domain name www.BroadbandAlberta.com

>

> What is your best price of this domain?

>

> Looking forward to hearing from you

> On Wed, Mar 6, 2024 at 03:22 PM George Pat wrote:

>

>> Hello

>>

>> Leverage on the opportunity to purchase this web domain

>> www.BroadbandAlberta.com today to expand your online presence and let it

>> serve as an online marketing tool for you

>>

>> Purchase instantly for $550

>>

>> Let me know your thoughts on this

>>

> =E1=90=A7



--000000000000052a0e0614419423

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

We have decided to sell the domain name
ref=3D"http://www.BroadbandAlberta.com">www.BroadbandAlberta.com
for a =

discounted price of $350 as against the previous price

Interested, =

do click on the check out option in the link above
=C2=A0
Best Regar=

ds


On Mon, Ma=

r 11, 2024 at 03:21 PM George Pat <
om">geogepat200@gmail.com
> wrote:

l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=

4,204);padding-left:1ex">


Hello



Hope you're doing well



We're listening to offers on the domain name
adbandAlberta.com">www.BroadbandAlberta.com




What is your best price of this domain?



Looking forward to hearing from you








On Wed, Mar 6, 2024 at 03:22 PM George Pat <
200@gmail.com">geogepat200@gmail.com
> wrote:





-left:1px solid rgb(204,204,204);padding-left:1ex">





Hello



Leverage on the opportunity to purchase this web domain
p://www.BroadbandAlberta.com">www.BroadbandAlberta.com
today to expand =

your online presence and let it serve as an online marketing tool for you <=

br>


Purchase instantly for $550



Let me know your thoughts on this









height:1px">3D""
" src=3D"https://mailfoogae.appspot.com/t?sender=3DaZ2VvZ2VwYXQyMDBAZ21haWw=

uY29t&type=3Dzerocontent&guid=3D797ec705-7e9e-4186-8ac5-a5df1d9c17d=

f">=E1=90=A7




--000000000000052a0e0614419423--

Lowe's phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 09:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnguH-00000000EDl-3Tb0

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 09:34:09 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 09:34:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10on2091.outbound.protection.outlook.com ([40.107.92.91]:3584 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <2h2d7ysfcabv@bbcgfdhvbnghfa20.onmicrosoft.com>)

id 1rnfCH-00000000OIE-3ryE

for sales@nk.ca;

Fri, 22 Mar 2024 07:44:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mkrBkFUwGUtSiL9RuC8VK8hWjuoM8u1z78q230lhH9KpPS7Cs6p4h4U763RNUiuJg0cbhHWdOFCFbAd9+T9OHtTDtD+a3aqpqc6GXFtPcDgsVHZafNJT/XmRXG3BglfnDP08CuOxc+wG+WlRHrwj13d6pWYgbi2eCeNTjSrDCIYTqpinUmya0JW5SZso2/4Mn7Sv+/mXXFcYwg1bdLEcYBNtVqwN1v6OPecr5IPsddDX2ms/ZkOU5cK6sxvyP5tzU2ux9Gxy4XjNGYouKEP4O/O2txS8AvDlNHRz1B18K8naSoiEhgDq6FPX15A6GqnxZlq0oc0l8xEt7Dc6PCmNBw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=5xlULT5oNl5JBZT3ERt18ZWItbfmpMz1Fi2rKSV0jvE=;

b=nB2A2CWec6QZM9h0oaiNCeGqEykDrZwodHRYjANc6Q0wH7wDxpG4qTjH99V6d6vegFT7fTFURcLkG5udn7z8gVFK9jmYF9q/HAMdcD7rZo9AhH97QGq83mow2fwbTuU3Qj+bhAxhu2fv2DyVkTznZjGxRclU/wWdJQiGBgfyajG6SEqyYU3OyWGhpu5IL7XGK4H4dOdcq1wxlPD6ZY5BmRiT1dtI+TcgFFxn1xBy5dcTpvz4RuELia+lrPULFbRjWLR9WDVMGE8W5ibHKrDObBAY7m1nhydPHtxOHUyS0m44obaY04tSsdu50ugfFtQqZ1+3YyEIEEuS/kmkHZeiYA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

178.79.141.237) smtp.rcpttodomain=nk.ca

smtp.mailfrom=bbcgfdhvbnghfa20.onmicrosoft.com; dmarc=none action=none

header.from=bbcgfdhvbnghfa20.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 178.79.141.237)

smtp.mailfrom=bbcgfdhvbnghfa20.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=bbcgfdhvbnghfa20.onmicrosoft.com;

Subject: Thank you

Date: Fri, 22 Mar 2024 13:42:32 +0000

X-TOI-MSGID: <101741277697062.AC354F821938C.1705442930402@bbcgfdhvbnghfa20.onmicrosoft.com>

Content-Transfer-Encoding: 8bit

MIME-Version: 1.0In-Reply-To:

To: sales@nk.ca

Content-Type: text/html; charset="UTF-8"

CC: sales@nk.ca

From: "Lowes"

Message-ID:

<9d3d93c1-7051-41df-8841-9f232000ef29@BN2PEPF000044A8.namprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN2PEPF000044A8:EE_|BL3PR19MB6491:EE_

X-MS-Office365-Filtering-Correlation-Id: 013672e3-8f47-42bd-7673-08dc4a75ed33

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

2HPiNiH1At0oep77IAjxtnhUcTyzlXBqEoOvvqwogFKcYFJmqqIEY8EF/LRrfuYD1sitOYvXIHe5wPfeoVJNHnfTWDbXxz9qlFuUpo6o7zLCU9YbGB1S4PTK3P8LCC09LpoR0jzYDi6UI1Hcc6Ln7jF9Pp1p8ka+zkKMHdpf5CAWjphX1kywa71kLnarBx7BJDFDY4GkDDKC80xZZdLqsAnPpFgjCAgHO5zoLDk/5FvMaOt0q4H0Fst0yA26dK1YJhB4xGTw6ew4zsohe/LeIrNHiwf/RlvtCXD4nTNSCI9bEfw/39XLD/xw59zGpsCQwv7fz9XwpJICCsJHZAg0/x97Yzs1PwZTNG2TepiIusDT24bQruVW2N0O1eAGz22RSUv7FvLF2duXaLWVvKmhP7uFcCJXRlmb1tMOspVmIyROgIbdlJwdN+pRFzNbVBiejY50tofGcv3L57/B6cYsaUHHj/MLSU3XRbufe8PWt9px6jhI4QleI9/JSFdIukw5FsjATUWIQyEh5ep5KbvWROn83gzqm1MJIpYLSc8VtVYvlLikLl5LVjYWx7WNtHwq6NIQyEYI9BdpqIj4OMVKl7G+1za5kk3H6vsAxJiI3GVsYsOvVvJi7i6kqjWQtHPEr0Cktgnjtot6RpCQMwVwbQ/BzhjM1q069JAAP943aUknZQhvqyAN2Mv+tYsHcmF4ryc886wHMIAgUYdHsrUkMg==

X-Forefront-Antispam-Report:

CIP:178.79.141.237;CTRY:GB;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:bbcgfdhvbnghfa20.onmicrosoft.com;PTR:178-79-141-237.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(82310400014)(376005)(36860700004)(34070700005)(41320700004)(61400799018);DIR:OUT;SFP:1102;

X-OriginatorOrg: bbcgfdhvbnghfa20.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Mar 2024 13:42:32.8938

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 013672e3-8f47-42bd-7673-08dc4a75ed33

X-MS-Exchange-CrossTenant-Id: 4101a2b9-b79d-41dd-8e33-4851f7c67926

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4101a2b9-b79d-41dd-8e33-4851f7c67926;Ip=[178.79.141.237];Helo=[bbcgfdhvbnghfa20.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

BN2PEPF000044A8.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL3PR19MB6491

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications ミ★ Ninja Woodfire Grill ★彡 ꧁ Order

confirmation #103800 ꧂



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.92.91 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ninja-za5oy0o(at)bbcgfdhvbnghfa20.onmicrosoft.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.0 BOGUS_MIME_VERSION Mime version header is bogus

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FROM_MISSPACED From: missing whitespace

0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Thank you









(1) Notifications























































ミ★ Ninja Woodfire Grill ★彡







꧁ Order confirmation #103800 ꧂








































































Mcafee phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Mar 2024 14:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnOch-00000000CRx-2kFn

for dave@doctor.nl2k.ab.ca;

Thu, 21 Mar 2024 14:02:47 -0600

Resent-From: The Doctor

Resent-Date: Thu, 21 Mar 2024 14:02:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:55753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnJqW-000000000m4-0XYw

for doctor@doctor.nl2k.ab.ca;

Thu, 21 Mar 2024 08:56:47 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-6e6afb754fcso959792b3a.3

for ; Thu, 21 Mar 2024 07:54:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711032883; x=1711637683; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;

b=M4QCb9OPSlqYGQQamGY/7tExkui2y9vV8Om9xcEEhOq1g3LR2Sa2Fpc16fJU+5bj5Q

RmfWA35POwXheuvwrQ00iBIqAZElzU35Nrumj3QXhCwZC0OQkf9ZfRVQ5TmD4d45nvZV

j5el3RiXV5nhyUm6vw7kTaqtl7CQZnMJybL9JMWZemCbkcsMNd8ixUfGliQM0PCCq80M

b3KuVdRXc7MtaLEPEe6XA1OiHv/tgwe2VaRo7JO0ejT/P3N5JhtR33BMpSAfycM4r/DH

5Vwt3FhKpjdJBI8gmgfoXdudA3+xvJHPyqx5pGZg2lFD9EcvJo7/HgZxRurpQkJYpCnt

bd6A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711032883; x=1711637683;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;

b=hVFnHhb/XJ5aKE2k6pfBOOHBtBFuQg3kj3TrWtp5CRzxRNQhy7zYScvW0lkMLTOjOP

k0s5PlDG4e+rvCqc0aE7QNqcVjtJ7+HsnfgkX8Kdrcb2Kfti7SdYpH51iaOf6juHOlhf

PDWmLWz+VmyIJ2K8DZ5puvdrY6osgrvyPYkGxU0th2xPhzrdQ4hzmkeNxEbxEn5cfVdP

7ALpFdBGvqsPIhqITBB1ms7XypizVD0aAyKoZfDH+OdZkl021PhdfdC2oKtB/p+tSHrG

cIb6ZMmp9ODwh2jmjXbtaVWhy6PwhqwXW3Uyl9zLeBSY3xYNejqz9CtUpqB5Wbx0WZc0

9xGQ==

X-Gm-Message-State: AOJu0Yx8SXo70w4+HXwsNG3EXwok3nht9uRXQcsUU3dsWX/W6OGpzrwF

2MFwIOKjLBr+R0QdocSh2qYKp21Hkdc/llxrTpZg/xjPqRMzfVL3N1ZMYkIVFA4/CQ==

X-Google-Smtp-Source: AGHT+IGFGdz1VWyKrJEK4R4FG6PnHxNssOghy6/TkJOipeBL0W+NAp1lYQ9V7r3cY6wndqwyDyTa0w==

X-Received: by 2002:a17:902:784c:b0:1dd:611d:3be3 with SMTP id e12-20020a170902784c00b001dd611d3be3mr5217045pln.17.1711032883159;

Thu, 21 Mar 2024 07:54:43 -0700 (PDT)

Received: from [172.31.0.39] ([124.156.45.65])

by smtp.gmail.com with ESMTPSA id u13-20020a170902e80d00b001def0c700e2sm13523888plg.119.2024.03.21.07.54.42

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 21 Mar 2024 07:54:42 -0700 (PDT)

Message-ID: <65fc4a32.170a0220.a982e.7241@mx.google.com>

Date: Thu, 21 Mar 2024 07:54:42 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============3070395982342246387=="

MIME-Version: 1.0

Subject: Paid Invoice for order no HF610611DA

From: Jeff Stuyt

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: Microsoft CDO for Windows 2000

List-Unsubscribe:

List-Owner:

List-ID: waillmakevin0856@gmail.com

List-Subscribe: waillmakevin0856@gmail.com

List-Post:



--===============3070395982342246387==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAyMSwgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7

JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv

Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg

U2VjdXJlPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24g

S2V5OiBaUTI0MTJDVzxicj4KPGJyPgo8YnI+CllvdXIgJiM4MDsmIzk3OyYjMTIxOyYjMTA5OyYj

MTAxOyYjMTEwOyYjMTE2OyAmIzczOyYjMTEwOyYjMTE4OyYjMTExOyYjMTA1OyYjOTk7JiMxMDE7

IGZvciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiBoYXMg

YmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5LCBhbmQgd2UgYXJlIHBsZWFzZWQgdG8gaW5mb3Jt

IHlvdS48YnI+IFRvZGF5J3MgcmVjZWlwdCBpbmNsdWRlcyBhIGNoYXJnZSBvZiA8Yj4mIzM2OzQ0

MC40MDwvYj4gZm9yIHRoZSAmIzExNDsmIzEwMTsmIzExMDsmIzEwMTsmIzExOTsmIzk3OyYjMTA4

OyBvZiA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPi48YnI+

SWYgdGhlcmUgYXJlIGFueSB1bmNlcnRhaW50aWVzIG9yIGlmIHlvdSByZXF1aXJlIGFkZGl0aW9u

YWwgY2xhcmlmaWNhdGlvbiBhYm91dCB0aGlzIHRyYW5zYWN0aW9uLCBmZWVsIGZyZWUgdG8gZ2V0

IGluIHRvdWNoIHdpdGggdXMuPGJyPklmIHN1cHBvcnQgaXMgbmVlZGVkLCBkb24ndCBoZXNpdGF0

ZSB0byByZWFjaCBvdXQgdG8gb3VyIGN1c3RvbWVyIHNlcnZpY2UgdGVhbSBhdCA8Yj4mIzQzOyYj

NDk7KCYjNTY7JiM1MTsmIzUwOykgNiYjNTc7OC0mIzU3OyYjNTY7NDM8L2I+IHdpdGhpbiB0aGUg

bmV4dCBzaXggaG91cnMuCjxicj4KPGJyPgo8YnI+CllvdXIgc2VsZWN0aW9uIG9mIEdlZWsgPGI+

JiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IFNlY3VyZTwvYj4gaXMgYWNrbm93bGVk

Z2VkIHdpdGggZ3JhdGl0dWRlLiBXZSBoaWdobHkgdmFsdWUgeW91ciB0cnVzdCBpbiBvdXIgc2Vy

dmljZXMuPGJyPgo8YnI+Cjxicj4KV2FybSByZWdhcmRzLDxicj4KJiM3NzsmIzk5OyYjOTc7JiMx

MDI7JiMxMDE7JiMxMDE7IFNlY3VyZTxicj4KMjQ1OCBTdC4gSm9obiBTdHJlZXQgQ2Fub3JhIFM0

UCAzWTIgQ2FuYWRhPGJyPgpGb3IgaW5xdWlyaWVzLCBwbGVhc2Ugc3VwcG9ydCB1cyBhdCA8Yj4m

IzQzOyYjNDk7KCYjNTY7JiM1MTsmIzUwOykgNiYjNTc7OC0mIzU3OyYjNTY7NDM8L2I+Lg==



--===============3070395982342246387==--

Mcafee phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Mar 2024 15:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn3AE-00000000NZr-3TBJ

for dave@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 15:07:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Mar 2024 15:07:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f44.google.com ([209.85.161.44]:58754)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn09w-000000003Es-2TZf

for doctor@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 11:55:31 -0600

Received: by mail-oo1-f44.google.com with SMTP id 006d021491bc7-5a14d7f0e66so46588eaf.1

for ; Wed, 20 Mar 2024 10:53:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710957207; x=1711562007; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=0N2smsAbh+0Md58V9Fv4YtO50u9ouckpDU1KWsSmR7w=;

b=OTy3QBN1LfcyOXD1OlCwEhuj3jwpxI28sw8j1cWhM42rkcH7buh4F8hRYoeLXJPwgA

PGNZh7zR5ug/m7f+Mut1Iju4CVVD10seOfkep1+vzAkWhZZXqifTliMncWdqJ3jOZ57w

LoIah3JKTj8WtywHqYcrN6ojCDNWLxV1xkjauFTXddMh6HChB4iDUokSPiWingJS/DQg

aeGoj2sNmgJ6B/CfCGWBeAdidMcj6tzzY5FBVflYlPU7ENOtSv+CReKYhKlMCqqrQRd8

zpiaMwGnYOCQhH36R4VAPLFGs5vqfNehb3LYuCoNyOCehAYmvuEYXcSs8hCrJUo3hdnF

t/wg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710957207; x=1711562007;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=0N2smsAbh+0Md58V9Fv4YtO50u9ouckpDU1KWsSmR7w=;

b=LCw0pT1b+gwGIy5/BoWMPvuAdjbNZQs5AJfKac4mN/kt+rmSFrit8XUKv4KZeM4rrg

vqRtdiLaWQZkiuOtK3dI1Q7EuNKVHeEeuz4QxVIQm3945xzuIjOkpvVUUMpo+DYgMdRt

QhwTXIM4c8gnENz9z0RDZmmJGa4fKao5zPWYA7jhmFpIU/0d2s7Ez9F1U1ttmqPn/ELO

Qof6Owx66JYhudEz3T66rG5SjtvrDd/+WPCHdAJVSgGDuTksYzlJXnRgcuLXtT/MkQP/

HkWjak+Gb6BcfPN6VpW0InXXMCgIkjbI0BJQbuml+tGtzty0v6NMEH2xWeDXoNrak3oy

HMOw==

X-Gm-Message-State: AOJu0YyQwncXETHguZiE7cCo07rFymFfk3yH2Emxg0R79xo1xoB3RZ8N

unQGOJEeHCxH/mZF26Y/5R+HWSj4E4HswSNXn/41OTb4dw4pXQZjocRQJmgmJEM=

X-Google-Smtp-Source: AGHT+IGGgAWFTQMp6k8HkkRz9D6xX7gx5NAZilCvFqkTt2cOGmiEde1EIliC/FAK6nLccsPTiE+RYQ==

X-Received: by 2002:a17:903:32d0:b0:1df:ffe3:f787 with SMTP id i16-20020a17090332d000b001dfffe3f787mr3677114plr.48.1710956861365;

Wed, 20 Mar 2024 10:47:41 -0700 (PDT)

Received: from [10.203.0.140] ([43.133.4.41])

by smtp.gmail.com with ESMTPSA id c8-20020a170903234800b001c407fac227sm13871421plh.41.2024.03.20.10.47.40

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 20 Mar 2024 10:47:40 -0700 (PDT)

Message-ID: <65fb213c.170a0220.524c.8e27@mx.google.com>

Date: Wed, 20 Mar 2024 10:47:40 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============3276794730956959006=="

MIME-Version: 1.0

Subject: Your order is on its way 33575404

From: Rosita Ayers

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: QQMail 2.x

List-Unsubscribe:

List-Owner:

List-ID: manuelalouisychingang@gmail.com

List-Subscribe: manuelalouisychingang@gmail.com

List-Post:



--===============3276794730956959006==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAyMSwgMjAyNDxicj4KPGJyPgpUcmFuc2FjdGlvbiBwcm9jZXNz

ZWQ6IDxiPiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAxOyBTZWN1cmU8L2I+IGlzIG9m

ZmljaWFsbHkgY29uZmlybWVkLjxicj4gWW91ciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEw

MTsmIzEwMTsgU2VjdXJlPC9iPiAmIzgwOyYjOTc7JiMxMjE7JiMxMDk7JiMxMDE7JiMxMTA7JiMx

MTY7IG9mIDxiPiYjMzY7NDI3LjI3PC9iPiBoYXMgYmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5

Ljxicj5QbGVhc2UgZG9uJ3QgaGVzaXRhdGUgdG8gcmVhY2ggb3V0IGlmIHlvdSByZXF1aXJlIGFu

eSBmdXJ0aGVyIGNsYXJpZmljYXRpb24gb3IgYWRkaXRpb25hbCBkZXRhaWxzIHJlZ2FyZGluZyB0

aGlzIHRyYW5zYWN0aW9uLjxicj5Gb3IgYW55IHF1ZXN0aW9ucyBvciBjb25jZXJucywgY29udGFj

dCBvdXIgY3VzdG9tZXIgc2VydmljZSB0ZWFtIGF0IDxiPiYjNDM7JiM0OTsoJiM1NjsmIzU0OyYj

NTA7KSAyJiM1Mjs4LSYjNDk7JiM1MDs2MDwvYj4gd2l0aGluIHRoZSBuZXh0IHNpeCBob3Vycy4K

PGJyPgo8YnI+Cjxicj4KVGhhbmsgeW91IGZvciB5b3VyIGNob2ljZSBvZiA8Yj4mIzc3OyYjOTk7

JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiB5b3VyIHByZWZlcmVuY2UgaXMgc2lu

Y2VyZWx5IHZhbHVlZC48YnI+Cjxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7JiMxMTg7JiMx

MTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRvY3Rvcjxicj4K

T3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPGJy

PgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24gS2V5OiBaUTM5

MjlDVzxicj4KPGJyPgpXYXJtIHJlZ2FyZHMsPGJyPgomIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEw

MTsmIzEwMTsgU2VjdXJlPGJyPgoyNDU4IFN0LiBKb2huIFN0cmVldCBDYW5vcmEgUzRQIDNZMiBD

YW5hZGE8YnI+CkZvciBpbnF1aXJpZXMsIHBsZWFzZSBzdXBwb3J0IHVzIGF0IDxiPiYjNDM7JiM0

OTsoJiM1NjsmIzU0OyYjNTA7KSAyJiM1Mjs4LSYjNDk7JiM1MDs2MDwvYj4u



--===============3276794730956959006==--

Spotify Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 Mar 2024 15:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmhMX-00000000EtF-1zzx

for dave@doctor.nl2k.ab.ca;

Tue, 19 Mar 2024 15:51:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 Mar 2024 15:51:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vmi1724024.contaboserver.net ([62.171.184.184]:39015 helo=mta1.securereviewhub.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmekw-000000009MA-26qT

for doctor@nk.ca;

Tue, 19 Mar 2024 13:04:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1710430940.securereviewhub;

d=securereviewhub.com;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding;

i=abuse@securereviewhub.com;

bh=JumiTXYisC/8NKdYHtJ1fXQk9cMzlgic4oVth+GCQMI=;

b=UjIv0IEVBveeq0lNsXJfyhy+juxWHWlWpeNBvdYf8CXshMPvDZ2gnK2ZHv5Iu0AeqPc+CLj0ZzCH

QUD3ifSmE9/QFIynVwYfovxps1+47hCL9JVgNK8MSM9Z87KTL7HWS2XICcLHvjxlU2jbAJ2UhGiT

iV6oqB9TJX9CR7EVKng=

MIME-Version: 1.0

From: =?utf-8?Q?=D1=95=CF=81=CE=BFtify?=

To: doctor@nk.ca

Date: 19 Mar 2024 20:02:17 +0100

Subject: Update subscription now

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: |MC:SUBJECT| We recently detected an issue with the billing

information associated with your Account. Hello, We could not authorize your

payment for the next billing cycle of your subscription therefore we've sus

[...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: itsssl.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.9 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Update subscription now



=0A=0A =0A =0A =

=0A =0A =

=0A =

=0A *|MC:SUBJECT|*=0A =0A =0A =0A =

=0A
0px; overflow: hidden; font-size: 0px; display: none; visibility: hidden;=

max-height: 0px; max-width: 0px; opacity: 0; mso-hide: all;">
=

=0A =0A
=0A
height=3D"100%" align=3D"center" id=3D"bodyTable" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =

=0A
=0A =

=0A =0A
border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A =

=0A =0A =

=0A =

=0A =0A =

=0A=

=0A

valign=3D"top">
100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A =0A =

=0A =0A

style=3D"padding: 9px;">=0A
class=3D"mcnImageContentContainer" style=3D"min-width: 100%;" border=3D"0"=

cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A =

=0A

style=3D"padding: 0px 9px;">=0A =0A =

=0A =


17%; padding-bottom: 0px; vertical-align: bottom; display: inline !important;=

max-width: 149px;" alt=3D"" src=3D"https://filestore.community.support.microsoft.com/api/images/26903364-3c84-48c2-afd4-749990c5ea86?upload=3Dtrue">=

=0A =0A =

=0A
=0A

style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

=0A =0A =0A =

=0A =0A =0A
=

=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A

style=3D"padding: 0px 18px 9px;">=0A =0A =

We recently detected an issue with the billing=

information associated with your Account.

=0A=0A =

=

=0A =0A =0A=

=0A =


class=3D"mcnTextBlock" style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =

=0A =0A

9px;">=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =

=0A

style=3D"padding: 0px 18px 9px;">=0A =0A =

Hello,
=0AWe could not authorize your payment for=

the next billing cycle of your subscription therefore we've suspended your=

membership. But your current subscription is active until it expires.
=

=0A
=0ASome information on your account appears to be missing or incorrect.
=

=0A
=0AObviously we'd love to have you back, simply click the button=

below to update your details and continue to enjoy all the best Music &=

Songs without interruption.=0A
=0A =0A =0A =0A

style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

=0A =0A =0A =

=

=0A =0A =0A

0px 18px 18px;">=0A
style=3D"border-radius: 42px; border-collapse: separate !important; background-color:=

rgb(30, 215, 96);" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A=

=0A =0A =

=0A =0A=

=0A

style=3D"padding: 18px; font-family: Arial; font-size: 14px;">=0A =


" style=3D"text-align: center; color: rgb(255, 255, 255); line-height:=

100%; letter-spacing: normal; font-weight: bold; text-decoration: none;"=

href=3D"https://itsssl.com/h7f7W" target=3D"_blank">UPDATE DETAILS
=

=0A
=0A

style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

=0A =0A =0A =

=0A =0A =0A
=

=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A

style=3D"padding: 0px 18px 9px;">=0A =0A =

Regards,
=0AThe Spotify team=0A =

=

=0A =0A =0A=

=0A =


class=3D"mcnTextBlock" style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A =0A

9px;">=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A

style=3D"padding: 0px 18px 9px;">=0A =0A =


0px; padding: 0px; border: currentColor; border-image: none; width: 100%;=

border-collapse: collapse; background-color: rgb(247, 247, 247);" bgcolor=3D"#f7f7f7"=

cellspacing=3D"0" cellpadding=3D"0">=0A
0px; padding: 0px; border: currentColor; border-image: none;">=0A
height=3D"25" class=3D"footer-bottom-padding" valign=3D"middle" style=3D"margin:=

0px; padding: 0px; border: currentColor; border-image: none; height: 25px;">=

=0A
=0A =0A
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none;">=0A =

=0A =

=0A =

=0A =0A
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; height: 25px;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =0A =0A
class=3D"footer-top-padding" valign=3D"middle" style=3D"margin: 0px; padding:=

0px; border: currentColor; border-image: none; height: 12px;">=0A
height=3D"12" class=3D"footer-top-padding" valign=3D"middle" style=3D"margin:=

0px; padding: 0px; border: currentColor; border-image: none; height: 12px;"=

colspan=3D"3"> =0A
=0A
0px; padding: 0px; border: currentColor; border-image: none;">=0A
width=3D"6.25%" valign=3D"middle" style=3D"margin: 0px; padding: 0px; border:=

currentColor; border-image: none; width: 6.25%;"> =0A
=0A =0A =0A
valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 12px;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =0A =0A
class=3D"footer-bottom-padding" valign=3D"middle" style=3D"margin: 0px;=

padding: 0px; border: currentColor; border-image: none; height: 25px;">=

=0A =0A =0A
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none;">=0A =

=0A =0A =0A =0A
valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 33px;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =

=0A =0A
border: currentColor; border-image: none;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =0A =0A

style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; height: 25px;" colspan=3D"3"> 

padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

currentColor; border-image: none;">
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; display: block; max-width: 100%;" alt=3D"" src=3D"http://aro.spotify.s3.amazonaws.com/newsletter/images/logo_footer.png">

0px; border: currentColor; border-image: none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 25px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

currentColor; border-image: none;">=0A

0px; border: currentColor; border-image: none; height: 1px; background-color:=

rgb(209, 213, 217);" bgcolor=3D"#D1D5D9">

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; width: 6.25%;"> 

class=3D"font" valign=3D"middle" style=3D'margin: 0px; padding: 0px; border:=

currentColor; border-image: none; text-align: left; color: rgb(136, 137,=

140); line-height: 1.65em; font-family: Circular, "Helvetica Neue", Helvetica,=

Arial, sans-serif; font-size: 11px; font-weight: 200; text-decoration:=

none;'>Get Spotify for:  
medium 1px medium medium; border-style: none solid none none; border-color:=

currentColor rgb(195, 195, 195) currentColor currentColor; margin: 0px;=

padding: 0px 7px 0px 0px; color: rgb(109, 109, 109); font-weight: bold;=

text-decoration: none; display: inline-block;" href=3D"" target=3D"_blank">iPhone

class=3D"footer-separated-text" style=3D"border-width: medium 1px; border-style:=

none solid; border-color: currentColor rgb(195, 195, 195) currentColor=

transparent; margin: 0px; padding: 0px 7px; color: rgb(109, 109, 109);=

font-weight: bold; text-decoration: none; display: inline-block;" href=3D"https://wl.spotify.com/ls/click?upn=3DJZiJIhGDPKi-2FAPlXLxJCWMWF-2B74m9QTCsaGkGYZJJvHlWVk4sERm8KtiDz3NlaDDcYHv4OAlW-2FvwGNkBE6Gttw-3D-3DrKm-_xu5RDHlEaGQfNLU5cwDJxr8y62F2IrSM-2FernfNGGDcP169Fh4NbvLH2-2Fjd4H54DwJMj5c4THlW9-2FlF8uSnKUt3KYP37EEeYT2Xjy3Z8B5fsBSelDJQWDYQxQPRWdR4p9CwTT2fXIb3HZklqPeU-2BBx3rR-2FfQBffEhK4fXnzitjyhgdJa-2F8po-2B7-2FRDgU7Pf3xITYDCYiBgnyJzacsmKT-2Fi4PM9WuRBHJ8d1ThCdHdDAXYzwn-2FEjZGmRXMZ6HLa-2BsM88BVifvu9NJsns6stOFFEFhYanqstnbbXAZ2OtipNskPHbKfKIotFtLNwxdIvtv2I"=

target=3D"_blank">iPad
medium 1px; border-style: none solid; border-color: currentColor rgb(195,=

195, 195) currentColor transparent; margin: 0px; padding: 0px 7px; color:=

rgb(109, 109, 109); font-weight: bold; text-decoration: none; display:=

inline-block;" href=3D"https://wl.spotify.com/ls/click?upn=3DJZiJIhGDPKi-2FAPlXLxJCWEiNXzAMk8tJPkWHiAldC4U3jkmTBZvPf-2BLaiWNXvTaVXbQoplNOmba4-2FpoXaVmTR3D9cPucKT-2FefDfKRjpd6vU-3DWpAB_xu5RDHlEaGQfNLU5cwDJxr8y62F2IrSM-2FernfNGGDcP169Fh4NbvLH2-2Fjd4H54DwpvMu0D-2BJcnZX7Ueyst5K0Hs5Gpo-2B-2F7T2RgQ2znWSS81cVdxdiq1pqufJadMW5F0i7nPx-2FPIVBRY3B8eUCv234rBvjm-2BMh-2BR0UtJ49IKzcYbypSb7IVz8wYztN3HHL805XBpxvUuSwO-2FWLsX2pSfTJyC4n6q5q0LEKco-2B55yM3p9eELTYC0qYNGN0HSVVdeLFskveWU4DTBXfXB4CgTi-2FNW5XVw3qb9-2FWKRd3ch59IoURVEq-2BvMwsEOm5QWeQSMqV"=

target=3D"_blank">Android

medium medium medium 1px; border-style: none none none solid; border-color:=

currentColor currentColor currentColor transparent; margin: 0px; padding:=

0px 0px 0px 7px; color: rgb(109, 109, 109); font-weight: bold; text-decoration:=

none; display: inline-block;" href=3D"https://wl.spotify.com/ls/click?upn=3DJZiJIhGDPKi-2FAPlXLxJCWE-2BAN3sa6HFIADThv-2BSHQtYNqtzlOww3i-2FegCjyhA57CDNxh_xu5RDHlEaGQfNLU5cwDJxr8y62F2IrSM-2FernfNGGDcP169Fh4NbvLH2-2Fjd4H54DwN49WYjgvqgdFsgGJhHbg3yQi2B5Dp83KN5EEBsTdjUfxKVHrxx8oY25BNq4l2SZ-2Fxo7ptXy9mup-2FUV5-2BwMrs07idZGlOVJWa26-2FEWbQAxU5GCicGVC5rtyo0aQ-2B8WXQJmWP4pgPNt3iRMhVW76OOTBXkpvw7fs534OHHU61dFjLxaBlsSME7SsBOsjSriuH3dc4hCtG0gKHmQNQTFfiZOQRWqaEb3gcLZV7tBpF5pt1lxFeAbLrkQ6B63EkB1jDP"=

target=3D"_blank">Other

style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 12px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

currentColor; border-image: none;">=0A

0px; border: currentColor; border-image: none; height: 1px; background-color:=

rgb(209, 213, 217);" bgcolor=3D"#D1D5D9">

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; width: 6.25%;"> 

style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; height: 25px;" colspan=3D"3"> 

padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

0px; padding: 0px; border: currentColor; border-image: none; text-align:=

left; color: rgb(136, 137, 140); line-height: 1.65em; font-family: Circular,=

"Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 11px; font-weight:=

200; text-decoration: none;'> If you have questions or complaints,=

please
currentColor; border-image: none; text-align: left; color: rgb(109, 109,=

109); font-family: Circular, "Helvetica Neue", Helvetica, Arial, sans-serif;=

font-weight: bold; text-decoration: none;' href=3D"" target=3D"_blank"=

align=3D"left">contact us
.

style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 33px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

0px; padding: 0px; border: currentColor; border-image: none; text-align:=

left; color: rgb(136, 137, 140); line-height: 1.65em; font-family: Circular,=

"Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 11px; font-weight:=

200; text-decoration: none;'>
medium 1px medium medium; border-style: none solid none none; border-color:=

currentColor rgb(195, 195, 195) currentColor currentColor; margin: 0px;=

padding: 0px 7px 0px 0px; color: rgb(109, 109, 109); font-weight: bold;=

text-decoration: none; display: inline-block;" href=3D"" target=3D"_blank">Terms=

of Use

1px; border-style: none solid; border-color: currentColor rgb(195, 195,=

195) currentColor transparent; margin: 0px; padding: 0px 7px; color: rgb(109,=

109, 109); font-weight: bold; text-decoration: none; display: inline-block;"=

href=3D"" target=3D"_blank">Privacy Policy

style=3D"border-width: medium medium medium 1px; border-style: none none=

none solid; border-color: currentColor currentColor currentColor transparent;=

margin: 0px; padding: 0px 0px 0px 7px; color: rgb(109, 109, 109); font-weight:=

bold; text-decoration: none; display: inline-block;" href=3D"" target=3D"_blank">Contact=

Us

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 12px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

0px; padding: 0px; border: currentColor; border-image: none; text-align:=

left; color: rgb(136, 137, 140); line-height: 1.65em; font-family: Circular,=

"Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 11px; font-weight:=

200; text-decoration: none;'>Spotify AB, Regeringsgatan 19, 111 53, Stockholm,=

Sweden
=0A=0A =

=

=0A =0A =0A=

=0A =

=

=0A =0A =

=0A
=0A
=0A =0A=

=0A

Money Phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Mar 2024 19:45:00 -0600

Received: from mail-ua1-f43.google.com ([209.85.222.43]:42307)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rm239-000000008AB-3eMI

for dave@doctor.nl2k.ab.ca;

Sun, 17 Mar 2024 19:44:32 -0600

Received: by mail-ua1-f43.google.com with SMTP id a1e0cc1a2514c-7e043f577c5so809841241.1

for ; Sun, 17 Mar 2024 18:42:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710726146; x=1711330946; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=/XMJfvIFh3hE2nQIuR3SkLXyBsnuOsH7K8Hr+ejfBaA=;

b=W5hR/6R4gklGcPiQFqs/PMxnomE8fvIsGtDFSl+OZt4OTxybE1FKcvkIv5Su4eqyA3

BuvUS4kSrPWwGAIlJCWH5yDtb+SB8OX+HRZ0UoqimFHWelChXYTsJba11IR3WFMPpcpJ

0QtuRvpcmd6MpzHKXXe9v3xIz71AanG9FU+GrMqhu3mTX/n3VFto87tLWS+OWe1HNpZy

ybuIXzlamNboupzKCP5MOgoIW/Cg2Bn+HwDW53LprOR+GXi04Q6zlysI63hRDfrBcNxT

xY8yem55/wFqMIZo2qJLHQmL8YENQOF+3CMncjk8wqqUai16AbVzA4AHJGFKqqweek2f

3kRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710726146; x=1711330946;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/XMJfvIFh3hE2nQIuR3SkLXyBsnuOsH7K8Hr+ejfBaA=;

b=ehjgLlx/GIc6DxUWRt4KKbLLMJV2fJPQCZk1D8wbpurHaH+EZNtZr6Jh5cZpMkQ7KL

o3eH7e2d4QISbZURiamQBNO7o/m5je0h1M0Lbezs3N3xfwAFrWXpnHFWm/b68223Sfdw

YnoqumAFCaZy9PmwoxUUpGefEae/+2WBSNRV1eqzhq4NkcUQLGI68yoac8jH0wPrc0UV

p9IKMG1iWKcj1qyhUQuT4AovzBWhpXNOa5jcKnY8KKA0tPpiymp9jiKB6DWroOt8diVv

w1eu3qNYjjErD0Bj1L0qpdQKFqWl94cGGF67O4dYygShWINnZQkeV8SeRHbRSjMJtRKk

JHAQ==

X-Forwarded-Encrypted: i=1; AJvYcCVB9TOWLw2FPj011SymOvOqKQl8yt73os2yirSIOAKTSGi8Xwmo8o/hqPU8kPNe5vPC8PWkJ4cRBsmOxIkI+kVDfWULGo5G

X-Gm-Message-State: AOJu0Yzqg3ykv7h1CNaibMvGcelF33jFSLJ1gEt70ZTYWJssMU/eqPR7

VyJuEL6CTEXMPe45Da+VeA1qVKKTo+PlL6Y5ZybVJ+Bpt75XfN0Yxoh2Scg5aIPR5JAibVtRfpX

axhsdDWYKze1Jle5R9XE0Uwix0LY=

X-Google-Smtp-Source: AGHT+IGLNhF2XdSVkvlKpayYeZcc3QYk7wKf46DmBx0jopAO3kivS0xBmNCDRWxJKb2xwymv5IYl5ME+Sym7u55HZtk=

X-Received: by 2002:a05:6102:365:b0:474:c681:9380 with SMTP id

f5-20020a056102036500b00474c6819380mr7227260vsa.15.1710726146041; Sun, 17 Mar

2024 18:42:26 -0700 (PDT)

MIME-Version: 1.0

Reply-To: AdeleElla1@mail.com

From: European Investment Bank

Date: Sun, 17 Mar 2024 18:42:10 -0700

Message-ID:

Subject: European Investment Bank

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000003e312f0613e57868"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.5

X-Spam_score_int: 165

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: *Attention: beneficiary of the fund,We have mandated the European

Investment Bank in London and the IMF to investigate the reason for the unnecessary

delay in disbursements authorized by law. During o [...]



Content analysis details: (16.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.43 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.43 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[adeleella1(at)mail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[michaelstan449(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[michaelstan449(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} European Investment Bank



--0000000000003e312f0613e57868

Content-Type: text/plain; charset="UTF-8"



Attention: beneficiary of the fund,We have mandated the European

Investment Bank in London and the IMF to investigate the reason for the

unnecessary delay in disbursements authorized by law. During our

investigation, we discovered that your payment was delayed by corrupt bank

officials who tried to divert your money to their personal accounts.To

prevent this suspicious act, we have agreed with the European Investment

Bank in London and the International Monetary Fund (IMF) that we can manage

and monitor this payment. Avoid desperate situations with banks and other

authorities in criminal cases.We have received an irrevocable payment

guarantee for your MFD payment. We hereby inform you that the European

Investment Bank has decided to compensate you in the amount of USD

2,000,000.00 and transfer it to your bank account via bank transfer.please

contact the Corresponding Bank Customer care services, Ms. Adele Ella via

the email belowemail: AdeleElla1@mail.com Be sure to

contact the above bank immediately for final release and transfer of funds.

The European Investment Bank must transfer its funds to your bank account

without delay.I expect your prompt cooperation.Thank you.




--0000000000003e312f0613e57868

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention: beneficiary of=

the fund,
We have mandated the European Investment Bank in London and t=

he IMF to investigate the reason for the unnecessary delay in disbursements=

authorized by law. During our investigation, we discovered that your payme=

nt was delayed by corrupt bank officials who tried to divert your money to =

their personal accounts.

To prevent this suspicious act, we have agr=

eed with the European Investment Bank in London and the International Monet=

ary Fund (IMF) that we can manage and monitor this payment. Avoid desperate=

situations with banks and other authorities in criminal cases.

We h=

ave received an irrevocable payment guarantee for your MFD payment. We here=

by inform you that the European Investment Bank has decided to compensate y=

ou in the amount of USD 2,000,000.00 and transfer it to your bank account v=

ia bank transfer.
please contact the Corresponding Bank Customer care se=

rvices, Ms. Adele Ella via the email below
email: =C2=A0
o:AdeleElla1@mail.com">AdeleElla1@mail.com

Be sure to contact the ab=

ove bank immediately for final release and transfer of funds. The European =

Investment Bank must transfer its funds to your bank account without delay.=



I expect your prompt cooperation.

Thank you.

<=

/div>



--0000000000003e312f0613e57868--

Aeroplan Phish from MailGun

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Mar 2024 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmHbS-00000000GRq-1EXw

for dave@doctor.nl2k.ab.ca;

Mon, 18 Mar 2024 12:20:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Mar 2024 12:20:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m33-138.mailgun.net ([69.72.33.138]:22492)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmHUb-00000000G0d-2Vhh

for doctor@nl2k.ab.ca;

Mon, 18 Mar 2024 12:13:53 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mg.findtransfers.com; q=dns/txt; s=k1; t=1710785514; x=1710792714;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Message-ID: Date: Subject: Subject: To: To: From: From: Sender: Sender: List-Unsubscribe: List-Unsubscribe-Post;

bh=Mdr6/LHBgSEDtwM721/x9Ag5vA4bKLBP9GnUxks6TP4=;

b=ytfAFUZROa9J8zN1DG0hb5ZR1b9ZBaQ2lLrrQ5gCvxT8gAoL0oIsc59zwXhb8gdDxaMiuZ9bISI0xuUMAx2TwvNtnb+o7ErkHZPx7Z7szqSkN+jwLyQ1ydY+N8RCaSlYPJ9M+ydO+iph1lQVn8ZXZ1HrXsBu87Jo0/n7qHaEQ6Q=

X-Mailgun-Sending-Ip: 69.72.33.138

X-Mailgun-Sid: WyIxM2IxZSIsImRvY3RvckBubDJrLmFiLmNhIiwiMmZiNzU2Il0=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



Received: from mg.findtransfers.com ( [195.135.93.147]) by 6980d5785bf2 with

SMTP id 65f883e9b19633e62142aaa6; Mon, 18 Mar 2024 18:11:53 GMT

Sender: postmaster@mg.findtransfers.com

From: "Aeroplan"

To: doctor@nl2k.ab.ca

Subject: Urgent: Aeroplan Security Upgrade Required On Your Profile

Date: 18 Mar 2024 19:11:53 +0100

Message-ID: <20240318191153.29679F15779DCDD5@mg.findtransfers.com>

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Unsubscribe (this will stop ALL future emails from FindTransfers.com)





Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[69.72.33.138 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 MIXED_HREF_CASE Has href in mixed case

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

Subject: {SPAM?} Urgent: Aeroplan Security Upgrade Required On Your Profile










56f60c49&p1=3Dt.co/BfgtqnC0Bi">
ro/diada.png">








3D""
fers.com/o/eJwEwEGuhCAMANDTyJK02FK6YPXNv0cBmTEzSoLeP_NaDr0IR7dnFARJzEjunamY=

Au-GXRJZMtNWVkoKlaJ1ju7IAQLBigkVkVcfNIr-I4vo9rdtvBCcL9-Pqz3Trrvv8_Z1nG7mNuo=

z5kJwfcPHW_HVfgEAAP__aT4l7A">

Aeroplan Phish from MailGun

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Mar 2024 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmHb9-00000000GR6-0ptF

for dave@doctor.nl2k.ab.ca;

Mon, 18 Mar 2024 12:20:35 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Mar 2024 12:20:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m33-138.mailgun.net ([69.72.33.138]:42047)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmHQM-00000000Ffa-2x7f

for doctor@netknow.ca;

Mon, 18 Mar 2024 12:09:30 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mg.findtransfers.com; q=dns/txt; s=k1; t=1710785241; x=1710792441;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Message-ID: Date: Subject: Subject: To: To: From: From: Sender: Sender: List-Unsubscribe: List-Unsubscribe-Post;

bh=2uviqdYkrMfsA/3pEnnmJnyP1LAYGv2V1E93OwU+ZtY=;

b=yeoCX90+D/UA9c2qTklCOlk1xTRUTGHU3r/GTmmvesWZd6aCBy+z9YG0yQqFW/U/tCsvA3LQ8KNX6E9GAhXmOkhmaCQJDmN//5q6bN3EyuZOHaDMqF7ML51UDsBgyTQNTSWLkN9Vr09VgqQKCsqDsin9Me8DQSJ1aUIkT7EkWhU=

X-Mailgun-Sending-Ip: 69.72.33.138

X-Mailgun-Sid: WyIzYjFmYiIsImRvY3RvckBuZXRrbm93LmNhIiwiMmZiNzU2Il0=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



Received: from mg.findtransfers.com ( [195.135.93.147]) by 510754b513e7 with

SMTP id 65f882d9059e869fd02bc718; Mon, 18 Mar 2024 18:07:21 GMT

Sender: postmaster@mg.findtransfers.com

From: "Aeroplan"

To: doctor@netknow.ca

Subject: Urgent: Aeroplan Security Upgrade Required On Your Profile

Date: 18 Mar 2024 19:07:20 +0100

Message-ID: <20240318190720.5EC8E747E7B42278@mg.findtransfers.com>

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Unsubscribe (this will stop ALL future emails from FindTransfers.com)





Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[69.72.33.138 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 MIXED_HREF_CASE Has href in mixed case

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

Subject: {SPAM?} Urgent: Aeroplan Security Upgrade Required On Your Profile










56f60c49&p1=3Dt.co/BfgtqnC0Bi">
ro/diada.png">








3D""
fers.com/o/eJwEwFEOwiAMANDTjE_SdsV2H_xodhBGQRczSBiJ1_dZpHpIeLgSURBEAzG6T0wF=

NwhZDkIqWouuB4MmNDWrFlZ3RgJiWFFxAyHwYX_pLiy7PJlIdGG43r6ezeZI7a5l3D73y41oPc8=

-FoZW5rf1n8_pHwAA__92Syao">

Canada Post Phish from Cape town South Africa

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Mar 2024 17:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rlzkO-0000000063Y-2Yna

for dave@doctor.nl2k.ab.ca;

Sun, 17 Mar 2024 17:16:56 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 Mar 2024 17:16:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.84] (port=50282 helo=dmv.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rly3C-000000002hL-1FAC

for sales@nk.ca;

Sun, 17 Mar 2024 15:28:19 -0600

Received: by dmv.ca (Postfix, from userid 33)

id A2A594B6E26; Sun, 17 Mar 2024 21:32:10 +0200 (SAST)

To: sales@nk.ca

Subject: New delivery alert available / Nouvelle notification de livraison disponible

Date: Sun, 17 Mar 2024 21:32:10 +0200

From: Canada Post | Postes Canada

Reply-To: v3.eservicescom@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_f4df0949e23ec05dc4d9619f1eae803e"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.2

X-Spam_score_int: 162

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of CAD 2.99 in

order to receive your package as soon as possible before it is returned to

sender [...]



Content analysis details: (16.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[41.61.20.84 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[41.61.20.84 listed in bl.score.senderscore.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: tt.vg]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: tt.vg]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: tt.vg]

2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the DBL blocklist

[URI: tt.vg]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: tt.vg]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40canadapost-postescanada.ca;ip=41.61.20.84;r=doctor.nl2k.ab.ca]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.1 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} New delivery alert available / Nouvelle notification de livraison disponible



This is a multi-part message in MIME format.



--b1_f4df0949e23ec05dc4d9619f1eae803e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit































Â

Â













































Dear customer,



A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties of CAD 2.99 in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions of use.



Receive my package



Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.











Canada Post protects your security and privacy. We will never ask for your personal information (such as passwords or credit card numbers) by phone call. Please read our Privacy policy.



This message is intended only for the addressee. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify us immediately and delete the original message.

Â



Please don’t reply to this email. We cannot receive or respond to replies to this email. If you have any questions or comments, contact us online or call 1-877-376-1212.







canadapost-postescanada.ca





2701 Riverside Drive, Ottawa ON  K1A 0B1





Accessibility  |   Legal  |   Privacy





© Canada Post CorporationÂ







































Â

Â













































Cher(e) client(e),



Un colis vous appartenant a été déclaré par la douane. Nous vous demandons de bien vouloir vous acquitter des taxes et droits de CAD 2.99 afin de recevoir votre colis dans les meilleurs délais avant qu'il ne soit retourné à l'expéditeur conformément à nos conditions générales d'utilisation.



Recevoir mon colis



Une fois votre paiement effectué, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numéro de téléphone pour livrer votre colis selon vos disponibilités.











Postes Canada protège votre sécurité et votre vie privée. Nous ne vous demanderons jamais de renseignements personnels (comme des mots de passe ou des numéros de carte de crédit) par appel téléphonique. Veuillez lire notre politique de confidentialité.



Ce message est réservé à l’attention du destinataire. Il pourrait comporter de l’information exclusive ou confidentielle. Toute distribution, diffusion ou copie non autorisée du présent message est strictement interdite. Si vous avez reçu ce message par erreur, veuillez nous en aviser immédiatement et effacer le message original.

Â



Ne répondez pas à cet e-mail. Nous ne pouvons ni recevoir ni répondre aux réponses à ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez le 1-877-376-1212.







canadapost-postescanada.ca





2701 Riverside Drive, Ottawa ON  K1A 0B1





Accessibility  |   Legal  |   Privacy





© Canada Post CorporationÂ

































--b1_f4df0949e23ec05dc4d9619f1eae803e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







=09






rial; font-size: 16px; font-weight: 400; word-spacing: normal;">




id=3D"x_x_ENGLISH_VERSION" style=3D"border-width: 0px; margin: 0px auto; p=

adding: 0px; color: rgb(85, 85, 85); font-family: helvetica, arial, verdana=

, sans-serif; font-size: 14px; vertical-align: baseline; border-collapse: c=

ollapse; border-spacing: 0px; transform: scale(1); background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09


ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; -ms-word-break: break-all; box-sizing: border-box;">

=09=09=09
_x_cpc-header" style=3D"border-width: 0px; margin: 0px auto; padding: 0px; =

vertical-align: baseline; border-collapse: collapse; max-width: 600px; bord=

er-spacing: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

, 255); border-width: 2px 0px 1px; margin: 0px; padding: 24px; line-height:=

24px; letter-spacing: 0.03em; vertical-align: baseline; border-top-color: =

rgb(202, 38, 26); border-bottom-color: rgb(203, 203, 203); border-top-style=

: solid; border-bottom-style: solid; float: none; position: static; box-siz=

ing: border-box;">3D"Canada
ww.canadapost.ca/cpo/mc/emails/cpc/images/cpc-main-logo-EN@2x.png" style=3D=

"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; max-=

width: 100%; box-sizing: border-box;" width=3D"136" />
notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,450=

0553" style=3D"background: 0px 0px; border-width: 0px; margin: 0px; padding=

: 0px; color: rgb(4, 103, 198); box-sizing: border-box; text-decoration-lin=

e: none;" target=3D"_blank" title=3D"https://t.notifications.canadapost-pos=

tescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553">=C2=A03D"Cana=<br
da Post" height=3D"auto" src=3D"https://www.canadapost.ca/cpo/mc/emails/cpc=

/images/mobile_cpc_logo.png" style=3D"border-width: 0px; margin: 0px; paddi=

ng: 0px; vertical-align: bottom; max-width: 100%; box-sizing: border-box;" =

width=3D"0" />

nd: rgb(255, 255, 255); border-width: 2px 0px 1px; margin: 0px; padding: 24=

px; line-height: 24px; letter-spacing: 0.03em; vertical-align: baseline; bo=

rder-top-color: rgb(202, 38, 26); border-bottom-color: rgb(203, 203, 203); =

border-top-style: solid; border-bottom-style: solid; float: none; position:=

static; box-sizing: border-box;">=C2=A0


=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; -ms-word-break: break-all; box-sizing: border-box;">

=09=09=09
_x_cpc-banner" style=3D"border-width: 0px; margin: 0px auto; padding: 0px; =

vertical-align: baseline; border-collapse: collapse; max-width: 600px; bord=

er-spacing: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

n: 0px; padding: 0px; line-height: 24px; letter-spacing: 0.03em; vertical-a=

lign: middle; box-sizing: border-box;">3D""
adapost.ca/cpo/mc/emails/cpc/images/Chevrons_Image_600x125@2x_Opt2.png" sty=

le=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: middle;=

max-width: 100%; box-sizing: border-box;" width=3D"600" />


=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; -ms-word-break: break-all; box-sizing: border-box;">

=09=09=09
_x_cpc-main" style=3D"border-width: 0px; margin: 0px auto; padding: 0px; ve=

rtical-align: baseline; border-collapse: collapse; max-width: 600px; border=

-spacing: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

n: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09


amily: tahoma,geneva,sans-serif;">Dear customer,





=09=09=09=09=09=09


amily: tahoma,geneva,sans-serif;">A parcel belonging to you has been declar=

ed by customs.

=3D"font-family: tahoma,geneva,sans-serif;">We kindly ask you to pay the ta=

xes and duties of
=

=C2=A0CAD 2.99

s-serif;">=C2=A0in order to receive your package as soon as possible before=

it is returned to sender
=C2=A0in accordance with our terms and cond=

itions of use.





=09=09=09=09=09=09


ps://tt.vg/YpEaj" style=3D"background: rgb(0, 74, 142); border-width: 15px =

60px; border-style: solid; border-color: rgb(0, 74, 142); border-radius: 30=

px; width: auto; text-align: center; color: rgb(22, 51, 0); line-height: 19=

px; letter-spacing: 0px; font-family: InterRegular, Helvetica, Arial, sans-=

serif; font-size: 16px; font-weight: bold; display: block; text-decoration-=

line: none;" target=3D"_blank"><=

strong>Receive my package





=09=09=09=09=09=09


amily: tahoma,geneva,sans-serif;">
tter-spacing: 0px; background-color: rgb(255, 255, 255);">Once your payment=

has been made, you will receive a payment confirmation by e-mail and we wi=

ll call you on your phone number to deliver your parcel according to your a=

vailability.





=09=09=09=09=09=09
cellspacing=3D"0" class=3D"x_x_cpc-footer" style=3D"border-width: 0px; mar=

gin: 0px auto; padding: 0px; color: rgb(51, 51, 51); letter-spacing: 0px; f=

ont-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical=

-align: baseline; border-collapse: collapse; max-width: 600px; border-spaci=

ng: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma,geneva,sans-serif;">
px;">Canada Post protects your security and privacy. We will never ask for =

your personal information (such as passwords or credit card numbers) by pho=

ne call. Please read our Privacy policy.





=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma,geneva,sans-serif;">
px;">This message is intended only for the addressee. It may contain propri=

etary or confidential information. Any unauthorized dissemination, distribu=

tion or copying of this message is strictly prohibited. If you have receive=

d this message in error, please notify us immediately and delete the origin=

al message.



=09=09=09=09=09=09=09=09=09=C2=A0



=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma,geneva,sans-serif;">
px;">Please don=E2=80=99t reply to this email. We cannot receive or respond=

to replies to this email. If you have any questions or comments, contact u=

s online or call=C2=A0
margin: 0px; padding: 0px; box-sizing: border-box; text-wrap: nowrap;">
n class=3D"wt_Phone" style=3D"border-width: 0px; margin: 0px; padding: 0px;=

display: inline-block; box-sizing: border-box;">1-877-376-1212

n>.



=09=09=09=09=09=09=09=09=09

px; margin: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px;">
=3D"font-size: 14px;">
f;">canadapost-postescanada.ca

px; margin: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma,geneva,sans-serif;">
ng: 0px; display: inline-block; box-sizing: border-box;">2701 Riverside Dri=

ve,
=C2=A0
rgin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;">Ot=

tawa ON=C2=A0=C2=A0K1A 0B1

px; margin: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma,geneva,sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=C2=

=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
<=

/td>

=09=09=09=09=09=09=09=09

px; margin: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma,geneva,sans-serif;">
style=3D"border-width: 0px; margin: 0px; padding: 0px; display: inline-bloc=

k; box-sizing: border-box;">=C2=A9 Canada Post Corporation
=C2=A0
lass=3D"x_x_xs-hide" href=3D"https://t.notifications.canadapost-postescanad=

a.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"background: 0px 0px; =

border-width: 0px; margin: 0px; padding: 0px; color: rgb(240, 240, 240); di=

splay: inline-block; box-sizing: border-box;" target=3D"_blank" title=3D"ht=

tps://t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8de=

d733,4500559">3D"Canada"
post.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" style=3D"border-w=

idth: 0px; margin: 0px; padding: 0px; vertical-align: bottom; float: right;=

max-width: 100%; box-sizing: border-box;" width=3D"78" />

>


=09=09=09=09=09=09


=09=09=09





id=3D"x_x_ENGLISH_VERSION" style=3D"border-width: 0px; margin: 0px auto; p=

adding: 0px; color: rgb(85, 85, 85); font-family: helvetica, arial, verdana=

, sans-serif; font-size: 14px; vertical-align: baseline; border-collapse: c=

ollapse; border-spacing: 0px; transform: scale(1); background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09


ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; -ms-word-break: break-all; box-sizing: border-box;">

=09=09=09
_x_cpc-header" style=3D"border-width: 0px; margin: 0px auto; padding: 0px; =

vertical-align: baseline; border-collapse: collapse; max-width: 600px; bord=

er-spacing: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

, 255); margin: 0px; padding: 24px; line-height: 24px; letter-spacing: 0.03=

em; vertical-align: baseline; border-top-color: rgb(202, 38, 26); border-bo=

ttom-color: rgb(203, 203, 203); border-top-width: 2px; border-right-width: =

0px; border-left-width: 0px; border-top-style: solid; border-bottom-style: =

solid; float: none; position: static; box-sizing: border-box;">3D"=<br
Canada Post" height=3D"auto" src=3D"https://www.canadapost.ca/cpo/mc/emails=

/cpc/images/cpc-main-logo-EN@2x.png" style=3D"border-width: 0px; margin: 0p=

x; padding: 0px; vertical-align: bottom; max-width: 100%; box-sizing: borde=

r-box;" width=3D"136" />
scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"background: 0px=

0px; border-width: 0px; margin: 0px; padding: 0px; color: rgb(4, 103, 198)=

; box-sizing: border-box; text-decoration-line: none;" target=3D"_blank" ti=

tle=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8b=

f38d8,8ded733,4500553">=C2=A03D"Canada
=3D"https://www.canadapost.ca/cpo/mc/emails/cpc/images/mobile_cpc_logo.png"=

style=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bot=

tom; max-width: 100%; box-sizing: border-box;" width=3D"0" />

nd: rgb(255, 255, 255); margin: 0px; padding: 24px; line-height: 24px; lett=

er-spacing: 0.03em; vertical-align: baseline; border-top-color: rgb(202, 38=

, 26); border-bottom-color: rgb(203, 203, 203); border-top-width: 2px; bord=

er-right-width: 0px; border-left-width: 0px; border-top-style: solid; borde=

r-bottom-style: solid; float: none; position: static; box-sizing: border-bo=

x;">=C2=A0


=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; -ms-word-break: break-all; box-sizing: border-box;">

=09=09=09
_x_cpc-banner" style=3D"border-width: 0px; margin: 0px auto; padding: 0px; =

vertical-align: baseline; border-collapse: collapse; max-width: 600px; bord=

er-spacing: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

n: 0px; padding: 0px; line-height: 24px; letter-spacing: 0.03em; vertical-a=

lign: middle; box-sizing: border-box;">3D""
"https://www.canadapost.ca/cpo/mc/emails/cpc/images/Chevrons_Image_600x125@=

2x_Opt2.png" style=3D"border-width: 0px; margin: 0px; padding: 0px; vertica=

l-align: middle; max-width: 100%; box-sizing: border-box;" width=3D"600" />=



=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; -ms-word-break: break-all; box-sizing: border-box;">

=09=09=09
_x_cpc-main" style=3D"border-width: 0px; margin: 0px auto; padding: 0px; ve=

rtical-align: baseline; border-collapse: collapse; max-width: 600px; border=

-spacing: 0px; transform: scale(1);" width=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

n: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09


amily: tahoma,geneva,sans-serif;">Cher(e) client(e),





=09=09=09=09=09=09


amily: tahoma,geneva,sans-serif;">Un colis vous appartenant a =C3=A9t=C3=

=A9 d=C3=A9clar=C3=A9 par la douane. Nous vous demandons de bien vouloir vo=

us acquitter des taxes et droits de CAD 2.99 afin de recev=

oir votre colis dans les meilleurs d=C3=A9lais avant qu'il ne soit retourn=

=C3=A9 =C3=A0 l'exp=C3=A9diteur conform=C3=A9ment =C3=A0 nos conditions g=

=C3=A9n=C3=A9rales d'utilisation.





=09=09=09=09=09=09


ps://tt.vg/YpEaj" style=3D"background: rgb(0, 74, 142); border-width: 15px =

60px; border-style: solid; border-color: rgb(0, 74, 142); border-radius: 30=

px; width: auto; text-align: center; color: rgb(22, 51, 0); line-height: 19=

px; letter-spacing: 0px; font-family: InterRegular, Helvetica, Arial, sans-=

serif; font-weight: bold; display: block; text-decoration-line: none;" targ=

et=3D"_blank">Recevoi=

r mon colis





=09=09=09=09=09=09


amily: tahoma,geneva,sans-serif;">Une fois votre paiement effectu=C3=A9, vo=

us recevrez une confirmation de paiement par e-mail et nous vous appelleron=

s sur votre num=C3=A9ro de t=C3=A9l=C3=A9phone pour livrer votre colis selo=

n vos disponibilit=C3=A9s.





=09=09=09=09=09=09
cellspacing=3D"0" class=3D"x_x_cpc-footer" style=3D"border-width: 0px; mar=

gin: 0px auto; padding: 0px; letter-spacing: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px; transfor=

m: scale(1);" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">
if;">Postes Canada prot=C3=A8ge votre s=C3=A9curit=C3=A9 et votre vie priv=

=C3=A9e. Nous ne vous demanderons jamais de renseignements personnels (comm=

e des mots de passe ou des num=C3=A9ros de carte de cr=C3=A9dit) par appel =

t=C3=A9l=C3=A9phonique. Veuillez lire notre politique de confidentialit=

=C3=A9.





=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">
if;">Ce message est r=C3=A9serv=C3=A9 =C3=A0 l=E2=80=99attention du destina=

taire. Il pourrait comporter de l=E2=80=99information exclusive ou confiden=

tielle. Toute distribution, diffusion ou copie non autoris=C3=A9e du pr=

=C3=A9sent message est strictement interdite. Si vous avez re=C3=A7u ce mes=

sage par erreur, veuillez nous en aviser imm=C3=A9diatement et effacer le m=

essage original.



=09=09=09=09=09=09=09=09=09=C2=A0



=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">
if;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne pouvons ni recevoir ni=

r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si vous avez des quest=

ions ou des commentaires, contactez-nous en ligne ou appelez le 1-877-376-1=

212.



=09=09=09=09=09=09=09=09=09

px; margin: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ahoma,geneva,sans-serif;">canadapost-postescanada.ca

px; margin: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">2701 Riverside Drive,
=C2=A0
order-width: 0px; margin: 0px; padding: 0px; display: inline-block; box-siz=

ing: border-box;">Ottawa ON=C2=A0=C2=A0K1A 0B1

px; margin: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibility=C2=A0=C2=

=A0|=C2=A0=C2=A0=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy=


px; margin: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"x_x_cpc-copyright" style=3D"border-width: 0px; margin: 0px; padding: 0px; =

display: inline-block; box-sizing: border-box;">=C2=A9 Canada Post Corporat=

ion
=C2=A0
nadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"b=

ackground: 0px 0px; border-width: 0px; margin: 0px; padding: 0px; color: rg=

b(240, 240, 240); display: inline-block; box-sizing: border-box;" target=3D=

"_blank" title=3D"https://t.notifications.canadapost-postescanada.ca/info5/=

r/?id=3Dh8bf38d8,8ded733,4500559">3D"Canada"
=3D"https://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.=

png" style=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align:=

bottom; float: right; max-width: 100%; box-sizing: border-box;" width=3D"7=

8" />


=09=09=09=09=09=09


=09=09=09














--b1_f4df0949e23ec05dc4d9619f1eae803e--