Abode phish from Germany

Return-path: <>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 12 Jul 2022 03:55:01 -0600

Received: from vps2301190.fastwebserver.de ([213.202.218.203]:32942 helo=444.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oBCad-0001dL-J2

for dave@doctor.nl2k.ab.ca;

Tue, 12 Jul 2022 03:54:04 -0600

From:_Reward on hold! Please confirm

Subject:_Claim your shell voucher !

Date: Tue, 12 Jul 2022 11:53:28 +0200

To: dave@doctor.nl2k.ab.ca

Reply-To: "Adobe Creative Cloud"

MIME-Version: 1.0

X-mailer: nlserver, Build 6.7.0

Message-ID:

X-250ok-CID: P26341-121020

TenantHeader: 1d0e6311-6f98-4c5b-8b0e-HTo82jBcSHDvP

Affinity: prod.default

X-cust_MessageID: 1938757681

X-cust_DeliveryID: 350826

X-cust_InstanceName: aci_prod

MessageMaxRetry:319

MessageRetryPeriod: 3600

MessageWebValidityDuration: 2592000

MessageValidityDuration: 432000

X-cust_IMSOrgID:

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"









Win a Gift Card!<br /><br />







































Is this email not being displayed properly?

Clik here!















Hi dave,







This is your lucky day


We are excited to inform you that

YOU

have been selected to win a:




Shell Gift Card





How to participate?

Confirm that you are the selected winner by clicking the button below;
Win now!
Kind Regards,
Jenny Smith






Prizesaints Prize Coordinator



Don't want to receive these emails?

Click here









McAfee Phish from Outlook

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 11 Jul 2022 16:47:00 -0600

Received: from mail-mw2nam10olkn2012.outbound.protection.outlook.com ([40.92.42.12]:9629 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oB2A9-0006No-LE

for dave@nk.ca;

Mon, 11 Jul 2022 16:46:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=lSUXikeNAdmc0eLyTyx5H6KSghHn6w+/FQ4zSwPW+iCZmsgZhovogPc5I3QJ2DUpRS0OABs5h5SASHDpYleKrJp8NpaStOrcBZKiX9No/9NAHw/6/6IcQKQo6FGf3vQfUQjroPx1ZX08ZT0E77AnSfYMyAU7/TcDVpWhwm45VTYIfwWTeqQNch760u6g7r4J/pRy2dDnLRoPLOWwErfGcWsYJSNcsg6FDxh6CCvlShtGELAa6aQ80DHZFeMN6I7DwqNGv7Y6d4G9N4n9iLt0CL76ojFTvDi7RxLkzg/Y/Bciz2tV+Pt3IaGhFKTHDDQK0QuomLxXL5+mbBXx1oMW9A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=F6iQBmQAsCiIy6XvYpWaucAnYcAUvfTnHcvPyeex0Xg=;

b=jzyBVRFoVwnpMYVr1Z3EbdIeb3Aiw1+4jwDS1fxVGGVY9Op1b3zpcZHLge1qbSr2vVtL1VACTqdzf/OPBvOY+wGcrGMDmqRhYAVx3Nu6e5rjHK3tyVIJn6xTF8uHtsQx2701CZru3/iNlGdcmwFKMoqFTpo3j2IdGPvhrwlsFk/XH2u92Ojp67fBE02PQyKXdSJgCT4mCPcFfXP9zkYij5CxRw5IjN6hHC7tsPifLiy/c092/DkiUAzTTYOOXecvWl1sHhffik9DlH1cbrrANWlFEiRnKv8bx04e8ldeYO2mXNvX+vl8ZygjSw6UrX/qzf+GZwM4KA0ZeMzoeljHRw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=F6iQBmQAsCiIy6XvYpWaucAnYcAUvfTnHcvPyeex0Xg=;

b=LypnprJPS5B0XBo+2NjWz6ORMhdbqKBeUdt8R9O15BsqnVd4UmyvjVAMzfraDtpDZ4V3ziJ8t+IEa8HGGs7er3DNs+9KRwXVlUKX3L0YxYM1jnBBHP9KshRNZCLwiZFCbghWvW9ZZeoLJB5P5uEqInIYTlwDBbrTDf6ZIyRTZA5tSb30lFuUYIJQMWK8aCYgC1F3iJ/LgQRhA18nQVS8+4qjCPYi8iz6ZW39hG5C8ZTU2eJvrQcDBaENqgC/8zm/0TG95E81BCIi9VIktMSU0oF0s8n1PB4dhGCd9ii/l1e+xRcYDmRSa/xx0XVgdaysp9mbu8lWQ6K+6m5HicluFg==

Received: from CH2PR14MB4134.namprd14.prod.outlook.com (2603:10b6:610:7e::11)

by DM6PR14MB3920.namprd14.prod.outlook.com (2603:10b6:5:20c::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5417.16; Mon, 11 Jul

2022 22:45:30 +0000

Received: from CH2PR14MB4134.namprd14.prod.outlook.com

([fe80::4804:c234:f699:26d0]) by CH2PR14MB4134.namprd14.prod.outlook.com

([fe80::4804:c234:f699:26d0%8]) with mapi id 15.20.5417.026; Mon, 11 Jul 2022

22:45:30 +0000

To: dave@nk.ca

From: "Carter Miller"

Subject: Your Internet Security Plan.

Message-ID:



Date: Mon, 11 Jul 2022 15:45:21 -0700

User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101

Thunderbird/38.1.0

Content-Type: multipart/alternative;

boundary="------------961789537800604357017420"

X-TMN: [DEeW9YCAJVVhvjAnBKcvCoirFore0NzykoI6+1xWs8eWymiq61TeLDF1ba8da8+1]

X-ClientProxiedBy: AM0PR06CA0143.eurprd06.prod.outlook.com

(2603:10a6:208:ab::48) To CH2PR14MB4134.namprd14.prod.outlook.com

(2603:10b6:610:7e::11)

X-Microsoft-Original-Message-ID:

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: e3050429-cffb-4ea8-bae7-08da638efde3

X-MS-TrafficTypeDiagnostic: DM6PR14MB3920:EE_

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?T2E2QnVPTlg4L0Y0Z2Z4YVJUaE5PRlNvcFVaVVVuaVBuWi81NHJQZk05UGJ2?=

=?utf-8?B?U3dkT3Y3RmpKdXpTMWFJa2ZIR0x0cW1Cbzh5ejdKSExIbXExWlkyNVBHUS9G?=

=?utf-8?B?d1E0UnVLaWxHQktEdGdkMnJ4dGVwVzJESVJUKzh3ODZoeHM3SEYyLzUzM01n?=

=?utf-8?B?TlBkSEI0UFZ3RjRydWNvU3p2YTlJRGZtTUhZZVZpUmFndFVHNDlYNVNMZW8x?=

=?utf-8?B?MVQydTVleDZMcG4reE5DV0RUUHR2WmhKdFIwem9ZaXJSdjhsUXdXVkRjVFJM?=

=?utf-8?B?Zy9ZWGJOK21nOWVpN0psN0tlblZzWlBOZGhBNVlUMm5Vb2JueUIycUhDUzdl?=

=?utf-8?B?OHpDdWUzM2VsSGc3OE40NkNVNzZ4RitPZ3pmcVlIa3YrSXBZTFUydnI1MWsx?=

=?utf-8?B?YVc2TEV1SDNVS0VMeWFhdzZoaU45WWR0TlBST0VVaG9pWW1lZnZHQUl2eHZj?=

=?utf-8?B?WFY3UWhNaVB4QTIzUlo5Y243cWpJR0h6TWNwa2sxQklBWnNwVmV1MUQrNmxZ?=

=?utf-8?B?dU1kbklwSTRpM0U0Ry8yKzJmNjk5UHdyZmJ2N3UxYzRhbE1IZXNqMXluRldh?=

=?utf-8?B?cUpRVHFNZEs5SE82ZjFvZ3VaVEpqdWhXUVA1OTV5S2dNbHRBRVlubFd5SmNt?=

=?utf-8?B?LzdFSGR6RjlFd1ZlRks2N0ZGclNqUXhpOVl6QWxuTjZ5TkdTNGc4OUg2VDBi?=

=?utf-8?B?TUtnSU9UYUxuajczQUFxektmWmYzRU81NTBLY2F4NGRNa2JlQUR6N3ZJckVY?=

=?utf-8?B?SjY0cGRRcW9pUzRXdlVRVEJ6SGZucEZtayt0SDBMR3J1WlFEcS9pZ3pTVDM2?=

=?utf-8?B?a2k5M0o4QSsrTlUvdGpqTXJWY3VObjZNb1lId29neHMzQUxyR3o4WXVrbUlp?=

=?utf-8?B?em9sSSsvVDNsMkErK3JMMm52KzZ5c0hpaG5LeTk3UTQyT1dWdjQrVnE1ekg1?=

=?utf-8?B?blZuNXBQOURqUjgyUjI2UjdvdGcrNFBPL0NKTjNpU3ZKbW5JWUVmNGtrbU9X?=

=?utf-8?B?QkNNdmVnekllMXMyNzFMWS80bFg3WEpvRDFvOE5LNUFjRSt1YmRPb2Y2eHRy?=

=?utf-8?B?eVdkQVd0OHNvSUhiVzNmbFdhQ2FsS3JNTGFqYmtyOHB0d3NrN2V6WWF3NkJo?=

=?utf-8?B?aVJjOTV1YUNtUWdGd3BLQ20zd1d5MDRBK0NvODM0bkVEWnVLK0xzY1MvZ3lx?=

=?utf-8?B?WmtGVlcyRDFSWWhZMWpucG5UZkFqeDh4em0yNk54N1VJL2k3bHBuZW9KRUMx?=

=?utf-8?B?bUFBR0JCc0VlRGQwTVo5VTVrT3dQL3FkZEpMR0x1ZkEyZG83bFRNRGx6UEF3?=

=?utf-8?B?RmhQampkNkxJV3lKaHJhdnBmV3A1Q0NROG9mc0VjckJOQ3lUU1dwVlQ5WVp3?=

=?utf-8?B?R3NzVUJ3UGdscmhvZ0d1TXF5Um9yRFlDT0RBT2pKM0ZKbDVkVmdzeFVQazlJ?=

=?utf-8?B?WmV5UmNHMWQvVS9ndXA2L3M1U3VRZFYvMFZaOVNhRkx1WkpmTGhGMEZ3YWtS?=

=?utf-8?B?MTJlSUlMSlc3dUNPVmc5WjRScnZpS1VRYXNQVFdvbjdtc2RNT3JncUcxQlVl?=

=?utf-8?B?cmdvZG1lQmdPWWxjamtJNTQ3R3NlaEdsR3h4M2V3VWV2eW1yckg4NEpHRzNJ?=

=?utf-8?B?QXF4MDNVZ1FaM05lS0xZcEhVZmFUcU5kZUZsYnVDT3ZMM0xyemVVd1RLZlBJ?=

=?utf-8?B?SWg3aGxKalVZanE0Z004TE44ckIzdXVVYWhzaU5SRXhtTzhsa0U1dStNTWt5?=

=?utf-8?B?WEtzSmd5VGdDSXBzeWJiSnRWYitRSUE5TXFvSWZxVGNlN1VuMGhTNlFrNjZH?=

=?utf-8?B?Z0I1N2VjRGxsUVJQdVJPY2M1U054NzNMd1pIT1dITUFWdzZpc3JZTFFlTVBu?=

=?utf-8?Q?sQFtCjfNrkEYH?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e3050429-cffb-4ea8-bae7-08da638efde3

X-MS-Exchange-CrossTenant-AuthSource: CH2PR14MB4134.namprd14.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jul 2022 22:45:02.5380

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR14MB3920



--------------961789537800604357017420

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQpIZWxsbywNClRoaXMgaW1wb3J0YW50IG1lc3NhZ2UgaXMgdG8gbGV0IHlvdSBrbm93IHlvdXIg

TWNBZmVlLU9ubGluZSBTZWN1cml0eSBzdWJzY3JpcHRpb24gaXMgZXhwaXJpbmcuDQpBcyBvZiBK

dWx5IDEydGggMjAyMiB5b3VyIHNlcnZpY2Ugd2lsbCBoYXZlIGV4cGlyZWQuDQpUbyBtYWtlIHN1

cmUgeW91ciBkZXZpY2VzIHN0YXkgc2FmZSBvbiB0aGUgaW50ZXJuZXQgeW91IG11c3Qga2VlcCB5

b3VyIHBsYW4gYWN0aXZlLg0KUGxlYXNlaHR0cDovL3d3dy5hbWF6aW5nc2ltcGxpY2l0eS5jb20v

dG8gcmVuZXcgeW91ciBzdWJzY3JpcHRpb24uDQpZb3VyIHNlcnZpY2UgY2FuIHByb3RlY3QgYSB0

b3RhbCBvZiBmaXZlIGRpZmZlcmVudCBkZXZpY2VzLg0KWW91IGFyZSBjdXJyZW50bHkgcHJvdGVj

dGluZyBmb3VyIGRldmljZXM6DQoyIC0gQ29tcHV0ZXJzDQoyIC0gTW9iaWxlIFBob25lcw0KDQpL

ZWVwIHlvdXIgc3ViY3JpcHRpb24gYWN0aXZlIHRvIG1ha2Ugc3VyZSB0aGUgYWJvdmUgZGV2aWNl

cyBzdGF5IHByb3RlY3RlZC4NClBsZWFzZSB0YWtlIGFjdGlvbiBub3cgdG8gc3RheSBzYWZlIHdo

ZW4geW91IGFyZSBvbmxpbmUuDQo=



--------------961789537800604357017420

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxib2R5IHRpdGxlPSIiPjxwIHRpdGxlPSIiPjxmb250IHRpdGxlPSIiIGZhY2U9

IlRhaG9tYSI+PHN0cm9uZz5IZWxsbyw8L3N0cm9uZz48L2ZvbnQ+PC9wPjxwIHRpdGxlPSIiPjxm

b250IHRpdGxlPSIiIGZhY2U9IlRhaG9tYSI+PHN0cm9uZz5UaGlzIGltcG9ydGFudCBtZXNzYWdl

IGlzIHRvIGxldCB5b3Uga25vdyB5b3VyIE1jQWZlZS1PbmxpbmUgU2VjdXJpdHkgc3Vic2NyaXB0

aW9uIGlzIGV4cGlyaW5nLjwvc3Ryb25nPjwvZm9udD48L3A+PHAgdGl0bGU9IiI+PGZvbnQgZmFj

ZT0iVGFob21hIj48c3Ryb25nPkFzIG9mIEp1bHkgMTJ0aCAyMDIyIHlvdXIgc2VydmljZSB3aWxs

IGhhdmUgZXhwaXJlZC48L3N0cm9uZz48L2ZvbnQ+PC9wPjxwIHRpdGxlPSIiPjxmb250IGZhY2U9

IlRhaG9tYSI+PHN0cm9uZz5UbyBtYWtlIHN1cmUgeW91ciBkZXZpY2VzIHN0YXkgc2FmZSBvbiB0

aGUgaW50ZXJuZXQgeW91IG11c3Qga2VlcCB5b3VyIHBsYW4gYWN0aXZlLjwvc3Ryb25nPjwvZm9u

dD48L3A+PHAgdGl0bGU9IiI+PGZvbnQgZmFjZT0iVGFob21hIj48c3Ryb25nPlBsZWFzZSA8L3N0

cm9uZz48L2ZvbnQ+PGEgdGl0bGU9IiIgaHJlZj0iaHR0cDovL3d3dy5hbWF6aW5nc2ltcGxpY2l0

eS5jb20vIj48Zm9udCBmYWNlPSJUYWhvbWEiPjxzdHJvbmc+Z28gaGVyZTwvc3Ryb25nPjwvZm9u

dD48L2E+PGZvbnQgdGl0bGU9IiIgZmFjZT0iVGFob21hIj48c3Ryb25nPiB0byByZW5ldyB5b3Vy

IHN1YnNjcmlwdGlvbi48L3N0cm9uZz48L2ZvbnQ+PC9wPjxwIHRpdGxlPSIiPjxmb250IHRpdGxl

PSIiIGZhY2U9IlRhaG9tYSI+PHN0cm9uZz5Zb3VyIHNlcnZpY2UgY2FuIHByb3RlY3QgYSB0b3Rh

bCBvZiBmaXZlIGRpZmZlcmVudCBkZXZpY2VzLjwvc3Ryb25nPjwvZm9udD48L3A+PHAgdGl0bGU9

IiI+PGZvbnQgZmFjZT0iVGFob21hIj48c3Ryb25nPllvdSBhcmUgY3VycmVudGx5IHByb3RlY3Rp

bmcgZm91ciBkZXZpY2VzOjwvc3Ryb25nPjwvZm9udD48L3A+PHAgdGl0bGU9IiI+PGZvbnQgZmFj

ZT0iVGFob21hIj48c3Ryb25nPjIgLSBDb21wdXRlcnM8YnI+MiAtIE1vYmlsZSBQaG9uZXM8L3N0

cm9uZz48L2ZvbnQ+PC9wPjxwIHRpdGxlPSIiPjxicj48Zm9udCBmYWNlPSJUYWhvbWEiPjxzdHJv

bmc+S2VlcCB5b3VyIHN1YmNyaXB0aW9uIGFjdGl2ZSB0byBtYWtlIHN1cmUgdGhlIGFib3ZlIGRl

dmljZXMgc3RheSBwcm90ZWN0ZWQuPC9zdHJvbmc+PC9mb250PjwvcD48cCB0aXRsZT0iIj48Zm9u

dCBmYWNlPSJUYWhvbWEiPjxzdHJvbmc+UGxlYXNlIHRha2UgYWN0aW9uIG5vdyB0byBzdGF5IHNh

ZmUgd2hlbiB5b3UgYXJlIG9ubGluZS48L3N0cm9uZz48L2ZvbnQ+PGJyPjwvcD48L2JvZHk+DQo=



--------------961789537800604357017420--