phish for money

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Jun 2022 14:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nxDc1-0008b3-KR

for dave@doctor.nl2k.ab.ca;

Fri, 03 Jun 2022 14:09:37 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Jun 2022 14:09:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o1.ptr3504.webkul.com ([168.245.74.8]:20402)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nxCAC-0005gx-2I

for doctor@doctor.nl2k.ab.ca;

Fri, 03 Jun 2022 12:36:52 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;

h=content-transfer-encoding:content-type:from:mime-version:subject:to;

s=smtpapi; bh=oqh5WhpUJmdR/nGUVoIoLLoBS19ew9/GBx6h/O+t64c=;

b=iGsEripWXscy/6R4ABkC2BWBGO50pkQjFx/m9wD7RtpLRkWQOG5pmsLCDufjSshdb5Z9

nB5tZltvMSjqkyS3oOD0nEc9WdrI2IJg/PnW9SqjRUsv+VecCUkHdas526cNkQFQSsuFx9

fCFMWCThODW3AC9fV7mCkQInlUEvuyTLg=

Received: by filterdrecv-54b6dfb5d4-h9n88 with SMTP id filterdrecv-54b6dfb5d4-h9n88-1-629A54A8-3D

2022-06-03 18:36:24.614437002 +0000 UTC m=+149808.380089314

Received: from MjEzNTAzNQ (unknown)

by geopod-ismtpd-5-0 (SG) with HTTP

id lMST762WQRK_Z1_Q-BFmrw

Fri, 03 Jun 2022 18:36:24.506 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Date: Fri, 03 Jun 2022 18:36:24 +0000 (UTC)

From: Team-Service

Mime-Version: 1.0

Message-ID:

Subject: Your AutoPay payment was =?UTF-8?Q?unsuccessful=0A?=

X-SG-EID:

=?us-ascii?Q?zSiQpWqCfOiCMm0GbXKKz=2Fvf6NyUBGXU26KqE1Ko8=2F52PoOvJgIiIB284kmf8f?=

=?us-ascii?Q?UDfwTQkXpEZIgN4zVqrxxTl+cnD+KmUyEtxAdrN?=

=?us-ascii?Q?KUgsp2DD3YhFS+tt5hHiSt+BR=2FrIxNIBMl=2F4lAC?=

=?us-ascii?Q?J3NWYQddt0x2LD9PIGcm+BnLPgIAbPX+3vk36Sq?=

=?us-ascii?Q?pjG4dAaV3hJh2SCyPqn51=2FI8O6C=2Fwt3ojQF4Mnp?=

=?us-ascii?Q?DNdCSjQmIc5zUZoOZMgK9AKLkFC8h05ktxufiOf?=

=?us-ascii?Q?zLJi6hcdmrIgrIwPLr7mg=3D=3D?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: rkDhxccdISll28WJf1cWow==




9/REC-html401-19991224/strict.dtd">


t-size-adjust:100%">


-8">


#343b41;margin:0">


;">

=A0






"600" cellspacing=3D"0" cellpadding=3D"0" align=3D"center" style=3D"border-=

spacing:0;background-color:transparent">




:0">


nt-family: Helvetica, Arial, sans;color: #a9a6a6;line-height: 16px;backgrou=

nd-color: #221f1f;border-spacing:0" border=3D"0" width=3D"100%" cellspacing=

=3D"0" cellpadding=3D"0">














ns" style=3D"font-size: 13px;font-family: Helvetica, Arial, sans;color: #a9=

a6a6;line-height: 16px;background-color: #221f1f;padding: 34px 90px 0pt 90p=

x">


th: 677px;background-color: white;border-spacing:0" border=3D"0" cellspacin=

g=3D"0" cellpadding=3D"0" align=3D"center">




mily: Helvetica Neue, Helvetica, Roboto, Segoe UI, sans-serif;color: #221f1=

f;line-height: 24px;padding: 22px 90px 0pt 90px">


yle: none;display: block;outline-color: invert;border:0" src=3D"https://ass=

ets.nflxext.com/us/email/gem/nflx.png" alt=3D"Netflix" width=3D"24" border=

=3D"0">



=A0



P=

lease update your membership



hi,



We're having some issues with your account information. That's why we wi=

ll cancel your membership effective Saturday=A04 Jun 2022.



Obviously, we'd love to have you back. If you change your mind, simply <=

a href=3D"http://dev.pepitrans02.com/RJOPXQC?id=3D119488=3DJxoGBgcAUQoOHVID=

BQkDAwUEC1FUCVZRA1MGAA1RDQFXVVABVV8BVAAAVgMBVQFWAAJFVwBKBFhUQwdXC1F0WBESWlh=

ZUktRWQweAgYEAQUPAQ8EUg5XBQQABFJFC0BDFFwZGFJcExxGBBJaRENUWkUFCxsCVwgcZ317NG=

EydwgNAkpBBQ=3D=3D&fl=3DDBJCR0UDSh1aDwlXHlhbG1F4TEwYfTNa" target=3D"_blank"=

style=3D"background-color:transparent">restart your membership and upd=

ate your membership, to enjoy all the best TV shows and movies without inte=

rruption.




r-spacing: 0;background-color: transparent" border=3D"0" width=3D"100%" cel=

lspacing=3D"0" cellpadding=3D"0" align=3D"center">




ding: 0px" align=3D"center">


der-spacing: 0;background-color: transparent" border=3D"0" cellspacing=3D"0=

" cellpadding=3D"0">




e=3D"font-size: 14px;text-decoration: none;font-family: NetflixSans-Bold , =

Helvetica , Roboto , Segoe UI , sans-serif;width: 410px;font-weight: bold;c=

olor: #ffffff;text-align: center;letter-spacing: 0px;line-height: 17px;back=

ground-color: #e50914;border: #e50914 1px solid;padding: 13px 0px 13px 0px"=

>
-Bold , Helvetica , Roboto , Segoe UI , sans-serif;font-weight: bold;color:=

#ffffff;padding-left: 20px;display: block;letter-spacing: 0px;line-height:=

17px;padding-right: 20px;background-color: transparent" href=3D"http://dev=

.pepitrans02.com/RJOPXQC?id=3D119488=3DJxoGBgcAUQoOHVIDBQkDAwUEC1FUCVZRA1MG=

AA1RDQFXVVABVV8BVAAAVgMBVQFWAAJFVwBKBFhUQwdXC1F0WBESWlhZUktRWQweAgYEAQUPAQ8=

EUg5XBQQABFJFC0BDFFwZGFJcExxGBBJaRENUWkUFCxsCVwgcZ317NGEydwgNAkpBBQ=3D=3D&f=

l=3DDBJCR0UDSh1aDwlXHlhbG1F4TEwYfTNa" target=3D"_blank" rel=3D"noopener nor=

eferrer">Restart membership





: transparent" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D=

"0" align=3D"left">




-family: NetflixSans-Light , Helvetica , Roboto , Segoe UI , sans-serif;fon=

t-weight: 300;color: #221f1f;line-height: 21px;padding: 0px" align=3D"left"=

>

We're here to help if you need it. Visit the
a0">Help Centre for more info or cont=

act us.



The Support team



=A0


=A0



copy" style=3D"font-size: 13px;font-family: Helvetica, Arial, sans;color: #=

a9a6a6;line-height: 16px;background-color: #221f1f;padding: 15px 90px 0pt 9=

0px">=A0





font-size: 12px;padding-top: 5px;color: #aaa">This email is a service from =

Team-Service. Delivered by
nd-color:transparent">UVdesk.




3GgHMJHSzX9s0rigo2ZYXN92oCF8Gp8Kb-2BtBji85t6DoeSOC-2BrH5mrjDLadiYqopSwrUnkg=

kTre9EhFKLPWjqyn4OC6fA5CJZL5OopkOj1-2BhkcyuDOHDw43Rc-2FcjTaLBMat1H78GKhtSDw=

AJqqDucO1YcTBWpuu-2BRpcsshXAHw0pIiQ9y6QFssBVyrUntb5f02E12dV3KnJF46a-2B-2FJ-=

2BXhgZ-2FCtU-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"he=

ight:1px !important;width:1px !important;border-width:0 !important;margin-t=

op:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin=

-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;pad=

ding-right:0 !important;padding-left:0 !important;"/>



Phish targetting nk.ca users

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Jun 2022 16:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nwtag-0008Fv-S7

for dave@doctor.nl2k.ab.ca;

Thu, 02 Jun 2022 16:46:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Jun 2022 16:46:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gallifrey.nk.ca ([204.209.81.3]:39801)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nwszc-0006yh-Q0

for news@nk.ca;

Thu, 02 Jun 2022 16:08:38 -0600

Received: from [37.49.225.163] (port=59554 helo=e-ware.top)

by gallifrey.nk.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nwszH-000AOM-H7

for usenet@gallifrey.nk.ca;

Thu, 02 Jun 2022 16:08:18 -0600

From: gallifrey.nk.ca

To: usenet@gallifrey.nk.ca

Subject: 1-Step Verification: Email Password Expired

Date: 3 Jun 2022 00:08:07 +0200

Message-ID: <20220603000806.986650CC110DDFD9@e-ware.top>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 31.6

X-Spam_score_int: 316

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: webmail We detected something unusual about a recent security

changes to your e-mail: usenet@gallifrey.nk.ca 6/3/2022 12:08:06 a.m. . And

you have 12 pending incoming emails. Please review your recent activity to

secure your e-mail from suspension.



Content analysis details: (31.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server

[37.49.225.163 listed in dnsbl.sorbs.net]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[37.49.225.163 listed in psbl.surriel.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[37.49.225.163 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[37.49.225.163 listed in bb.barracudacentral.org]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[37.49.225.163 listed in ix.dnsbl.manitu.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or

Formatted Colors in HTML

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible

malware

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.1 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised

website + no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML

only

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: alfalahuniversity.edu.in]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: alfalahuniversity.edu.in]

1.3 URIBL_CR_SURBL Contains an URL listed in the CR SURBL blocklist

[URIs: alfalahuniversity.edu.in]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URIs: alfalahuniversity.edu.in]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: alfalahuniversity.edu.in,]

[glitch.me]

X-Spam_score: 31.6

X-Spam_score_int: 316

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: webmail We detected something unusual about a recent security

changes to your e-mail: usenet@gallifrey.nk.ca 6/3/2022 12:08:06 a.m. . And

you have 12 pending incoming emails. Please review your recent activity to

secure your e-mail from suspension.



Content analysis details: (31.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[37.49.225.163 listed in psbl.surriel.com]

0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server

[37.49.225.163 listed in dnsbl.sorbs.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[37.49.225.163 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[37.49.225.163 listed in bb.barracudacentral.org]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[37.49.225.163 listed in ix.dnsbl.manitu.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or

Formatted Colors in HTML

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible

malware

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.1 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised

website + no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML

only

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: alfalahuniversity.edu.in]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: alfalahuniversity.edu.in]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: alfalahuniversity.edu.in,]

[glitch.me]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URIs: alfalahuniversity.edu.in]

1.3 URIBL_CR_SURBL Contains an URL listed in the CR SURBL blocklist

[URIs: alfalahuniversity.edu.in]

Subject: {SPAM?} 1-Step Verification: Email Password Expired


















-COLLAPSE: collapse; FONT-FAMILY: wf_segoe-ui_normal, 'Segoe UI', 'Segoe WP=

', Tahoma, Arial, sans-serif, serif, EmojiFont; WHITE-SPACE: normal; ORPHAN=

S: 2; LETTER-SPACING: normal; COLOR: rgb(32,31,30); FONT-SIZE: 15px; FONT-W=

EIGHT: 400; WORD-SPACING: 0px; font-variant-ligatures: normal; font-variant=

-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial;=20

text-decoration-color: initial" border=3D0 cellSpacing=3D0 cellPadding=3D0 =

width=3D"100%">


















RGIN: 0px; PADDING-LEFT: 50px; PADDING-RIGHT: 50px; BORDER-COLLAPSE: collap=

se; FONT-FAMILY: 'Segoe UI Semibold', SUWSB, 'Segoe UI', Verdana, sans-seri=

f; LETTER-SPACING: -0.03em; COLOR: rgb(80,80,80); FONT-SIZE: 38px; PADDING-=

TOP: 60px" bgColor=3D#0000a0 align=3Dmiddle>


EFT: 0px; PADDING-RIGHT: 0px; LETTER-SPACING: -0.03em; FONT-SIZE: 30px; FON=

T-WEIGHT: normal; PADDING-TOP: 0px">
f, EmojiFont" color=3D#f97c00 size=3D7>=

webmail


EFT: 50px; PADDING-RIGHT: 50px; BORDER-COLLAPSE: collapse; FONT-FAMILY: 'Se=

goe UI', SUWR, Verdana, sans-serif; LETTER-SPACING: -0.01em; COLOR: rgb(80,=

80,80); FONT-SIZE: 13px; PADDING-TOP: 25px" bgColor=3D#f4f4f4 align=3Dmiddl=

e>


FT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Segoe UI', SUWR, Verdana, sans-s=

erif, serif, EmojiFont; LETTER-SPACING: -0.01em; PADDING-TOP: 0px">=



We detected something unusual about a recent security changes to your e-mai=

l:
PADDING-LEFT: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTO=

M-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-LEFT-WIDTH: 0px; PADDING-TOP=

: 0px">


ADDING-LEFT: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-=

WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-LEFT-WIDTH: 0px; PADDING-TOP: =

0px">  
LOR: rgb(255,255,255); FONT-FAMILY: calibri; LETTER-SPACING: normal; COLOR:=

rgb(0,0,0); FONT-SIZE: 15px">usenet@gallifrey.nk.ca


m; COLOR: rgb(74,74,74)"> 
b(255,255,255); FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-se=

rif; LETTER-SPACING: normal; COLOR: rgb(145,149,153); FONT-SIZE: 14px">6/3/=

2022 12:08:06 a.m.


ui_normal, 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif, serif, EmojiF=

ont; LETTER-SPACING: normal; COLOR: rgb(0,0,0); FONT-SIZE: 14px">
r=3Dred>.




FT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Segoe UI', SUWR, Verdana, sans-s=

erif, serif, EmojiFont; LETTER-SPACING: -0.01em; PADDING-TOP: 0px">
yle=3D"FONT-WEIGHT: bolder">
TTOM: 0px; BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING=

-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; VERTICAL-ALIG=

N: baseline; BORDER-LEFT-WIDTH: 0px; PADDING-TOP: 0px">

And you have 12 pending incoming emails.  
PAN style=3D"FONT-WEIGHT: bolder">Please review your =

recent activity to secure your e-mail from suspension.


D>

RIGHT: 50px; BORDER-COLLAPSE: collapse; FONT-FAMILY: Roboto, RobotoDraft, H=

elvetica, Arial, sans-serif; PADDING-TOP: 35px" bgColor=3D#f4f4f4 align=3Dm=

iddle>
>


transparent; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; BORDER-TO=

P-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(0,115,236); VERTICAL-ALI=

GN: baseline; BORDER-LEFT-WIDTH: 0px; PADDING-TOP: 0px" href=3D"https://ser=

ver-up-dates.glitch.me/?#usenet@gallifrey.nk.ca" rel=3D"noreferrer noopener=

" target=3D_blank=20

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://alfalahunive=

rsity.edu.in/wp-content/bb/MailUpdateFresh/%23jaa.cpu@erha.co.tt&source=

=3Dgmail&ust=3D1654261542370000&usg=3DAOvVaw2Cza3f4OIdvxqZHYA6B-1P"=

>Review recent activity

RIGHT: 50px; BORDER-COLLAPSE: collapse; FONT-FAMILY: Roboto, RobotoDraft, H=

elvetica, Arial, sans-serif; PADDING-TOP: 35px" bgColor=3D#f4f4f4 align=3Dm=

iddle>


lSpacing=3D0 cellPadding=3D0 align=3Dcenter>








EFT: 0px; PADDING-RIGHT: 0px; BORDER-COLLAPSE: collapse; FONT-FAMILY: 'Sego=

e UI Semibold', SUWSB, 'Segoe UI', Verdana, sans-serif; LETTER-SPACING: -0.=

01em; FONT-SIZE: 16px; PADDING-TOP: 0px" bgColor=3D#f4f4f4 align=3Dleft>
>
RIGHT: 10px; BORDER-COLLAPSE: collapse; FONT-FAMILY: Roboto, RobotoDraft, H=

elvetica, Arial, sans-serif; PADDING-TOP: 0px" bgColor=3D#f4f4f4 align=3Dle=

ft>




ORM: none; FONT-STYLE: normal; TEXT-INDENT: 0px; MARGIN: 0px; PADDING-LEFT:=

0px; PADDING-RIGHT: 0px; FONT-FAMILY: wf_segoe-ui_normal, 'Segoe UI', 'Seg=

oe WP', Tahoma, Arial, sans-serif, serif, EmojiFont; WHITE-SPACE: normal; O=

RPHANS: 2; LETTER-SPACING: -0.03em; COLOR: rgb(33,33,33); FONT-SIZE: 30px; =

FONT-WEIGHT: normal; WORD-SPACING: 0px; PADDING-TOP: 0px; font-variant-liga=

tures: normal; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial">
T-FAMILY: Arial, serif, EmojiFont" color=3D#f97c00 size=3D5>
=3D"FONT-WEIGHT: bolder">Cp




ORM: none; FONT-STYLE: normal; TEXT-INDENT: 0px; MARGIN: 0px; PADDING-LEFT:=

0px; PADDING-RIGHT: 0px; FONT-FAMILY: wf_segoe-ui_normal, 'Segoe UI', 'Seg=

oe WP', Tahoma, Arial, sans-serif, serif, EmojiFont; WHITE-SPACE: normal; O=

RPHANS: 2; LETTER-SPACING: normal; COLOR: rgb(32,31,30); FONT-SIZE: 1.25em;=

WORD-SPACING: 0px; PADDING-TOP: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width:=20

0px; text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial">


DDING-LEFT: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-W=

IDTH: 0px; COLOR: rgb(51,51,51); VERTICAL-ALIGN: baseline; OVERFLOW: hidden=

; BORDER-LEFT-WIDTH: 0px; PADDING-TOP: 0px">
rgia, serif, serif, EmojiFont" color=3D#e06666 size=3D6>


GHT: 0px; FONT-FAMILY: 'Helvetica Neue', Helvetica, Arial, sans-serif; COLO=

R: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Copyright © 20=

22
f, serif, EmojiFont"> 

 
0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Helvetica Neue', =

Helvetica, Arial, sans-serif, serif, EmojiFont; BORDER-TOP-WIDTH: 0px; BORD=

ER-BOTTOM-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-LEFT-WIDTH: 0px; PAD=

DING-TOP: 0px">cPanel, Inc.