RBC Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Oct 2022 14:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1omLCf-000C6K-Qz

for dave@doctor.nl2k.ab.ca;

Sat, 22 Oct 2022 14:34:45 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Oct 2022 14:34:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from h2777841.stratoserver.net ([81.169.156.105]:60374 helo=ib.rbc.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1omKo7-0008Fb-MY

for postmaster@nl2k.ab.ca;

Sat, 22 Oct 2022 14:09:31 -0600

Reply-To:

From: RBC Royal Bank

To: postmaster@nl2k.ab.ca

Subject: Important Account Update Required

Date: 22 Oct 2022 22:06:38 +0200

Message-ID: <20221022220638.8FB6B2EC2B4AEFDE@ib.rbc.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 12.9

X-Spam_score_int: 129

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: RBC-letter postmaster@nl2k.ab.ca, This is an automatic message

by the system to let you know that you have to confirm your account information

within 24 hours. Your account has been frozen temporarily in order to protect

it.



Content analysis details: (12.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: sendgrid.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[81.169.156.105 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ib.rbc.com;ip=81.169.156.105;r=doctor.nl2k.ab.ca]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=ibanking%40ib.rbc.com;ip=81.169.156.105;r=doctor.nl2k.ab.ca]

2.0 TVD_PH_REC BODY: Message includes a phrase commonly used in

phishing mails

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 ACCT_PHISHING Possible phishing for account information

1.5 SENDGRID_REDIR Redirect URI via Sendgrid

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Important Account Update Required




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
org/1999/xhtml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" style=

=3D"font-family:arial, 'helvetica neue', helvetica, sans-serif">
charset=3D"UTF-8">
" name=3D"viewport">
ta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
lephone=3Dno" name=3D"format-detection">RBC-letter


ans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;padding:0=

;Margin:0">

6">
0" cellpadding=3D"0" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;bor=

der-collapse:collapse;border-spacing:0px;padding:0;Margin:0;width:100%;heig=

ht:100%;background-repeat:repeat;background-position:center top">

lign=3D"top" style=3D"padding:0;Margin:0">
acing=3D"0" cellpadding=3D"0" align=3D"center" style=3D"mso-table-lspace:0p=

t;mso-table-rspace:0pt;border-collapse:collapse;border-spacing:0px;table-la=

yout:fixed !important;width:100%;background-color:transparent;background-re=

peat:repeat;background-position:center top">


=3D"padding:0;Margin:0">
ellpadding=3D"0" bgcolor=3D"#ffffff" align=3D"center" style=3D"mso-table-ls=

pace:0pt;mso-table-rspace:0pt;border-collapse:collapse;border-spacing:0px;b=

ackground-color:#FFFFFF;width:720px">


g:0;Margin:0;padding-top:20px;padding-left:20px;padding-right:20px">
cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" style=3D"mso-table-lspac=

e:0pt;mso-table-rspace:0pt;border-collapse:collapse;border-spacing:0px">
>

x">
tation" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;border-collapse:=

collapse;border-spacing:0px">


in:0;font-size:0px">
VBORw0KGgoAAAANSUhEUgAAAOEAAADhCAMAAAAJbSJIAAABPlBMVEX///8AXar/0gD/1AAASqMA=

XKv/1gAAW6wAVKaludcAWq0AWa4AWagAV6f/2AAAV64AX6T2zwClnm4AVLBhib53i3eyq1B6p8/=

JuS8laJzcvUEAVLH2+v0AT6RhmMl3nsrJ3O0lbbLg6vNEcpbgwi3myAYAT7Vhe5LWwQ8AZJsAYK=

QWbI97kmmgpEtLe4W2zeRyiXk5bph+kXBVf39HfLiMtNfo8PcAQJ+Mk3SMmmCfo1arrDuAlWMzc=

oxmiHK+sUS8r06vqVTBtDirqkXYvyxQeI2PnFhghXhhgoDnxx4AZ5TNuTZLc5YycrStxuDB1umt=

plyqomWVmG9Vg3JJfnmhp0JEeYPMt0AAS7dGd4jjwjWHmlkqdIF+jHkOZ5i6sjYocItwjmt0jm9=

lf4yJnU2MkH6ypGpngoa4qltEiMHU06B+AAAU5UlEQVR4nO1dC1vaSNvuMM4Ek5AQ4wEEFJEo4A=

kUfSvFY/GAFm27bX3p7tpt+35fP///H/hmJpNzqvt2WxK9cl+7exUY2LnzPPOckz57liBBggQJE=

iRIkCBBggQJEiRIkCBBggQJEiRIkCBBgl+H8egwIob/SkeFf42I4RiICmMJw1/MENl4kgwFCWQd=

PD2Ggjp8/nraxm7914gxMoZI/euwn8I2lFz+aTEUQAdimHIAnxhD1OgoKQ+eGkNhl8sPUjxBhuJ=

XzaSV6lNojGFdfRDSD1yEaBgWPmFG8Ob5cLi+vveCvIL9NxMP4u0PyDkShggwgspaQxIJCh36Eu=

IHoRiLwuNgKP1GzQzOLZkSURnDvwH4aBiqXSa0cwk8WYZr2L1dwhA6cEysB4+LodT1MYSaA0pFC=

+JxMRTfkXMItVd8u8LJlINmDqa0o+aUD80qfEwMUZZZGusckhzDgqouvcdQaxYkH5ZmHxVDoDMP=

aMiifzv5fOMFYTgl+T/QHxlDcZ3GNPhoT1XdLhxd9HI5Az4FhgCcUusI+7OH7qxQWFEwSTieBEM=

kmBRx9dYTh+3f9PFTkCGiCXC3T8XlYyhJe29yEAYZqo+JoSgyzRQWuzVF6d/6YmlRzJ+8P/ObIK=

HOvMWPZFijZ4gWjU0mIkEq6BcXwS0hUWUEBZG5D5Y1Nd5qj4aheK6lHCX8fhFRkvfOiad/a6ZNB=

yyfxIeN+DMUWn2snQf8oB+CuH/Zp8Eaz6l4XDoROJ/xY6j3MF5TH9qVeFtTXHE4B+7d/veGZtQM=

xQ9KCtYf2ieqH4fkU9jY+wERjpqhfAPxy8JDm1Kfm5QUN+DayYOyj56huGVAfPLQKUT1Axq2aoc=

fCv/+d2PFRH1J/yGCo2b4FsJ+y6ukWcGvtCifo1HraaFBrGlzCAqSIAhIAFsPGqjIGaLGNPb7NL=

RyUNe9exIWDcJQqXer1Jr2P3b31EJhaeXQeFC9o2dIhIOns9447TcF/u7VP1OGkJlTs8aGazVDg=

VOt2DMkzjDAkFhX6BMOMaWQlYsh7E1PT/cgq9ukNCP3I+2p0TIk6udnSDKmlOJTU/TadBbwPJ8V=

b48tp+gP02PKEB57BYEuCMPfvI5OHBpMiC+/vnrVNWzX+FgY9ny2VFdS+MBnJcUj1pmCCsSuFtx=

jYNjqQafExlGoEQ+y4qWIssTMOMw4z0fAEOXJmVJ86a3UJUI8BN69C9kjjUsPYu2gs9aHj4Nhdh=

qTJM9rOYUTjQj2i9/YgPPpPnETCu4fnst6Pfc4GAJpAlNX7lFTk7a2ovt2L2Vby83V5nIrqwpC3=

ssQhSMGDMVzYiTxyxDLSaQIfOYGSWpBlfP11mK+futmiKRGNhQoLGkZLUNEyy3Q+OblIm2yIv/R=

imq/j0RJl1a2nr85yuVq/dzxkesciqB5OB2K17d+RRg5Q7ORBo99xQjpBaWI+0fv9AKDfvFudW2=

2aqQw70o5tlTQVw6077VQq11Z9ctxxAxRnfpvZc2rpwh0Uqx6qihGjYAmhoybr31YvRXE/CnGvv=

ddKxS4mhdRlAyB/pJSxPu+WDu7qrkah9/bf7Uubvbu76ZC3NtsqFEyFE9YWdA490lRODOUEGami=

nJxwt4fh+4LEdpFJcpwuS+5hjZGX018yzZrfPNl7BLoGl7pUWqa8XH2prN287HPqPExKpiqzoag=

b3FUjPWGGBlDVL80Ke75KCJ9+NpwqSDUeocTzfW6qKtqobH354H9CTbe1gt6AOqwo2Hr4hysq1E=

xBOItU0dcHforZyJo5RTLjJAIPd+QJG42xEK2Z32AD07EEMdHLgT4mlO4HLF2IUTFEKhnpsbBKd=

XvvZgr4ExwfwvwTSK11bFPWfVDIbReU+20RKmwcsm/j2/UyBgCsMvVcAoEHLToWEuoTV+opmybN=

S5abOzWw4umUlOpTtyqonB+wJ0nz0OjYIjAmpn+abtyQN0Q8XiKlVX0zkhM6sgV4lzLE5khQRBE=

kVbiEFDXFNjbzyKx8Sebk7OC2NFbGvrv0lqKXWflUyMoEaEwtM+ckmvZLh7Cyy13xIIkoZFfXFx=

efrXYymdF/atGwiKSXutrbB7pphCNlmZbVPFQtmNSUI7D6sNSvmMZHGxUsfWnN1nX5RDUi+abg5=

5hKIpm1HJHE+c1EtQfZYG4xxTEroyMOi7dr56x/WVNRU3B/lYhGC0LYNcyOLaPe7En2AuRWPhru=

qrxUMAMXOkXtCni6m+YetSsKzfy3EI5YkP5lqKSrZ82gmJE+nnf7f613lbBUVAxe07dijcGYpMP=

5wKPKLSTaBhKTS313NQelLXEBG/8zp+x2DNclZoDd6yptg41JzRwE4XGmyG7MrBjrx6xDF9jw+o=

+IPTZspn9DyGaqjc1e++wv2k7eSTtV53sAuNazS1IaBJ0lbZGXdXH/T1b2/Qtw4qjO/mgTVUZRd=

79VXJ5c88CWLOCU/qfiaXCUtc80q63lXeOyEdd1cdVV0FYOLco4sthcIYbdRQijUtTIXFvSC+Nk=

Oe+FBoa1cp1keg7uxI1R3VxzlXXGnlFuOoZglpXbK+wKfkNDgIk25itryl8uHRdB6jxEpry2n9L=

GV7SFoH+nhYOUoCYH77S7YJGzrA/dAcl6rplT6DSawn+cts5YVgobPW5pu4DkdY7CJsjUGBlu88=

qUw0qROWdvrTKV+6qETLUmp4TZysqDbU3gTeIQ40DZVYHUuulqZmp5iojqG3SkjErTCJzGaZzgD=

oQhzkWz2jrUkQMWzUI33iV0VFUsrHjrDfdkKY0wpD4v10zyTfvzKB+nXXgYM08b9Jb+vZHIAhSo=

8YouqY2RmtL658grPk7M+u2V4BY++Jx/6hR/UhJIH2rj7mhhNq5Si0OiV1xVxfp4JR+y4qUZ/V8=

q3XCYlp8FI0MAXqD6ba8pw2suhxf6mDF7f7V7rT5Ut2zkipls6CreqFFy8j7w+GwOTX1fIKdv14=

uR+JUM/nU1iOLaSDU6r5GE1pz3eWFq/uuBAI1rK6/RREan0/XOoezH6nCsluK6OAUTz6cehS2uy=

Ojjkt7dOLSNzKE9JzjrJlzd8XY9p8kc4wIMk6UFl1qzYQFy3TKH2IUDInW0er2S2+jm8SgVMs0p=

37hN6rmqjo1u3jtYn19uNWkzuJmYuJoenr6OJfLMRNkVpLNdBJPR1PFQDK53DC1tuSj+JYaxhOr=

ZBo0qqYUv9GzBwv0Xil1WWEj/bQhU8/nGzVqaprLy83V1c3fcymzQB4FQyCdUWVUXnjPIhIPMKw=

tZTuWpvqNKtcAGqkq+9TXiYQhC3HNvhrN66GxKFHLKumNnmtYfNQMUXaa2bqblsfxiysKrBWQum=

llhX6jan4ZENeOD3XO8KOj7NIXGrgt84uin2LHYYy8TkNnapjB8LZE9ZxSI9ZPXMzZkWp1X/KfR=

qFOYnFGjDK8cdyO+JWcb8ViSCdYUtbQx+hrbdIK91irWRcB8USjDIGwdGrXL/Anfx8J6P/BpnIS=

hvjUEbLwiuqvxRAs0QNrmCMRUVSE902KqUNX6ZPElnwyCu3b9Qvca/pa17Sxw3JoyvCz83U2Cuc=

wNO/JMV9GUi/9wtssl+uOporn/zFFgoRFO9GD2kHGkzfS2VpmQsRlrHxgDJilEWkQpyyrdPZd10=

mSgW2ljaTmra/wG51hx7GYoq1zUsMZ9MLGuacwrr5lRlKQWoZyoasqdReNfD5PS6z4f6iz6L5//=

z7HPOeqFBlDkhbyKFM5/uY/apRs68iO46B2lHX5DXHdoAwXh01D+fx8grn8A+LxDabVih3kpCJm=

CMS8lY9rp3qwfiGAFw5FfLnnuH9UrxKGjWkSAEHIx6Rdw/zuuC1aho7NhArRw2D3AnSc3WJt1xF=

j4Yamh6r6x7Hybn9/t9OZnp2d/Vit0rCNRKt8ZIF+WfkWKUPC8ayPLT28CDh3geXtlhiVl3aAoO=

5qtEOOhNfaknlLja6r9fpfOQgvv0xNcb2lSWKUlsYUE8n4eWWf9pgCdzqZ2brFsTrkZlf6bKZ+0=

kTNmR4jtjQH8RudUabPvOli+y7cKJ/AI8qnTsa06C9Difm+J6fqmgGCMLxhsYrYdJcMWQXIGglE=

iN4OD3v5yBmSTGPTzpiMXX+oLX4jH8L+gXUgX/K0sm5+t+Eu2rEqnqvWTBJO6yapaJ8ThaQpO0Z=

LVS98M1vSLolCZ0GXW11YNbtr1vSe2zyJyxB+dBznEo28J6LJLfxQnWoihKe+DvbSMYazBd1qmL=

o7Aj6QyNsKU5Eg6u8UsxweB4ZAOneV2i6HnsRX3DPwrA7EW94wxf2t79w3I3WxskLtjA5uh+dTl=

5CXw+PAEKhTTqkNG6vejKlDGRJ3yctxULsIm1MQ1aU1pVb667fu2s3Hap+V25RulLMY36cIlV7e=

lU4It7xeqg55pa0fciew+O70vWEGONiqtsGUZWljwBDIp+5qYv/MxUHdfGMKTbo1DyO8DN5GKjb=

/97Wi5XI1Q2MhHPuZbnQzUUEgYJbioRWpLrk4Wg+qE2/NIAd2gnc/ifqK8jqfby2+Wl7+skozJ8=

ydYUwYklyiTz3fpRWpfsqH2EwBHJlPJtoKaab+bqxI5nCNxLw9q/zHiCEQiOeHNXWzx8O4XFhnn=

9WhaNclePeT2tm1nyJCZ8qUU+ezeDBE4BLDWkHM88fUwX6w0EbrUKaiPg8IEeWtshtrSOKaK2uO=

B0OyecoQIL11wOtUYbdTCll2c6m/ewWcOAfRXh08brgWxIQh0F8qZq1N2Kya7Ykw5y7UXeWJwIe=

iCrrk+uDjRffViQtDq5pIEqHWCxqIQm0lhAerekNjyfUWMTDEvOiFpb9+W72hNy32sp4vxoUhCV=

+sfE8onLG7K8KcOxB3WcverLLR50qAeuvV16m1Twbz9/SY5s7qcZQhyX+cx31IJ8dKuHPnvd+jA=

hFbob6y9efE0XHNUDwjYCTZb7p8ZmwYkmPk/FlqUE2FpyG3NktntLB/+8fntRsagYY2D7G26kTw=

8WHoo0tthvIh5Cgu5YhHd0psIfcjsEKs7S9iypCm/zhcT8VzekZzYahp1iA81DatixNXhsSmnpL=

dboYMZtKi0+t6PgStV9/ea2ZFAH+KU27xHYpSN4XDHrmjPk/h6awQcv+hIEi63GVFSjwVexnSWt=

NLDM+DJ1HY6+Pj796Zj/Q92vF27jaOMUOSTWjKC//wDaBPxQqVrf3xOr0nPh93S8MgDTUlLLD5r=

ISEpq6vTUDsPI0o1gxR9og3CT0QVu5/GC3tT509DoZAHGqdkABcv//Bbei273pIWrwZAv3N/4Uw=

LOTufzSddPDaOb4xZwjUsAKp2rn3HAJUb0SbAcuZIGTZM5MQskQmS/in0m7NY0uRnEmnSwxpshB=

5HgMXAUP5biaAycn2AGTsfcntwIo5smQhk+EU3XcvyJmF9tz2RrlCUL6amWy7figihu3rkAU7lY=

35bMYSSnsjbMn1+GQ6oJHpwXi56F5WuZoD0coQyOAqdE2xcpe2l4T/FT/Fcdnj6lFmbHwnsGqnL=

UfLEKAxftGLFRP2Ju9sKYKKd4klpg335CaSJ3c8y8xX5YWIZQhAmguxDJh5QO1tTqAykH1LKuaS=

hXnO+Nl8xvmd0gz/3vX8gJoa0J4pk1fjriVRMZzhDM2LTWzhHF9nb856p8KXlO64tMol52fu+Le=

2s2lTanJ6YfxZcT56htb2HXUa4yK6zvqWVKwlmXH/T8ltTnqu5GglGpvZWYjYltK9TfoZprd97w=

QYpv0MkWWwNvwK4hZhbBhmuN5WLDP4MEO5bR7C4p3s+XHgIRgbhr6TGcJQ5hK7ts5hifvMq+A97=

7FkaO1/wRKEj6E84CfVMiMozX96OxAFxJGh7SGDtjRLI9JMulQ2X2/Yv9E239jxK2ksGdpRjuMP=

LYY7d22CSW6Inl1lAid3cP8DwKJmKFMBlQacYHHO1jjbQ+5Q8I+vZ9I2HTskWIg1w7uFwWBwZ4e=

W886Rshm6UdleKFlCttS24h+IixVDD4obA5fNsBma8eaOFZdet/miErc8lRK4F7FhWB6fLLlNhm=

1pBgsE7bv5Ky7onXbGyzATZxkWnZzhaszrqB1vQbJ/RA6r3C5bnGUPw2ycGZbBmBVQP9v2Zn4Bj=

4/kMb70ihUp0tzh7wxi7i3S83xFcdIjxABDJ3Y1/YP1asf7vfgxRGmrprEjhJ5Dh2HGOr2TsmtB=

/GMaeaHM11y7T1QIQyvUNhkCYH3tfocYPUMiGsvabLti6DCGHhnapqY4ee9BjAFDlLFCsmdzQY/=

/XS21w7Zn12P3CTEGDMkm7PLiwLYaIQxLdvBqFjYWyvxbPjPs/XtBYsHQzoyelQORt8Mws8C12U=

oIbSEWt5HHSC24D3QsGAJ53nb8Nh+PxyfeMJ0tcz5ztqDtuus1KGXoOhIapMfuypNR10uD+WHJP=

oqW7XcYspeD9rYVGsw4gWjJqZ5vzLVpfNeepPXEKBh6vXIwA06XrZW8cG8xLG5cbZB/7MJ9cdwV=

aaPstlPQ3ykTmOruZpgZBT2CtseiB6sYcts6ihXT2oRmT0QdJz2XCoG7SnBR0fV/s0oBvxxXnsC=

DMCwSuJ11Zm6nWHS9SRgWvdjZqVzdjfkyCZQp3W3suDozxZ3KjLvalg7vkfx8EIPh3tfCPIOrSY=

TA3DwHcwZoMO/DXRukw3y7XBrMjV9dXRMdvboan79D7ospL4TI+NdgO+2++Ih3PVHgLQLke+00U=

UP4MRoZ8uM0jSSi9/wmOd/bD2/tJ6E4n743fPynCH0sO8lcig9v7edRlO9P5H4+ZHmUBAk2BmOZ=

72razwaSM2ODsE7yr0V5/jvW4mdDToP2fHnk/Ch2ruYHpQdqR/8UxIMM7MJVBCjubMylS79KXYl=

yltJzHg8ZDa5nJhfkn82SsJMXJmfCJj2iQLFM9DWTvr+K9N+A/BbRzXLkwnOjSMMwMJZO/zNhso=

moMXB3VYleN0NR3JiZbC8AOq71X5OTM5k0oBnTRjy5OaiUN8ZnJgeg9HflaU6ygcHkzPhGeWSR5=

z8FUdrK1fbcYKE0ViJU0+a0nhvknTQd0RsrLQzmtq8qcVXLv4EKyRK2Z2bmJ72Yn5nZvrp6PDJL=

kCBBggQJEiRIkCBBggQJEiRIkCBBggQJEiRIkCDBE8D/A+cEkkmbuc2CAAAAAElFTkSuQmCC" a=

lt style=3D"display:block;border:0;outline:none;text-decoration:none;-ms-in=

terpolation-mode:bicubic" width=3D"150" height=3D"150">

adding-bottom:5px;font-size:0">
"100%" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"m=

so-table-lspace:0pt;mso-table-rspace:0pt;border-collapse:collapse;border-sp=

acing:0px">

909;background:unset;height:1px;width:100%;margin:0px">

td>

dding-left:20px;padding-right:20px">
"0" width=3D"100%" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;borde=

r-collapse:collapse;border-spacing:0px">

top" style=3D"padding:0;Margin:0;width:680px">
spacing=3D"0" width=3D"100%" role=3D"presentation" style=3D"mso-table-lspac=

e:0pt;mso-table-rspace:0pt;border-collapse:collapse;border-spacing:0px">
>


it-text-size-adjust:none;-ms-text-size-adjust:none;mso-line-height-rule:exa=

ctly;font-family:arial, 'helvetica neue', helvetica, sans-serif;line-height=

:21px;color:#333333;font-size:14px">postmaster@nl2k.ab.ca,=





e;mso-line-height-rule:exactly;font-family:arial, 'helvetica neue', helveti=

ca, sans-serif;line-height:21px;color:#333333;font-size:14px">This is an au=

tomatic message by the system to let you know that you have to confirm your=

account information within 24 hours.
Your account has been frozen tempo=

rarily in order to protect it.




e;mso-line-height-rule:exactly;font-family:arial, 'helvetica neue', helveti=

ca, sans-serif;line-height:21px;color:#333333;font-size:14px">The account w=

ill continue to be frozen until it is approved and validated.
Once you h=

ave updated your account records, your information will be confirmed and yo=

ur account will start to work as normal once again.

What this mea=

n for you

To regain full access, all you need to do this is to put i=

n correct your Security Questions and validate your information on your fil=

e, you will be asked to answer randomly generated verification question.
>


" align=3D"center" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;borde=

r-collapse:collapse;border-spacing:0px;table-layout:fixed !important;width:=

100%">


"es-content-body" cellspacing=3D"0" cellpadding=3D"0" bgcolor=3D"#ffffff" a=

lign=3D"center" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;border-c=

ollapse:collapse;border-spacing:0px;background-color:#FFFFFF;width:720px"><=

tr>

left:20px;padding-right:20px">
adding=3D"0" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;border-coll=

apse:collapse;border-spacing:0px">

tyle=3D"padding:0;Margin:0;width:680px">
=3D"0" cellpadding=3D"0" role=3D"presentation" style=3D"mso-table-lspace:0p=

t;mso-table-rspace:0pt;border-collapse:collapse;border-spacing:0px">
align=3D"left" style=3D"padding:0;Margin:0">


ext-size-adjust:none;-ms-text-size-adjust:none;mso-line-height-rule:exactly=

;font-family:arial, 'helvetica neue', helvetica, sans-serif;line-height:21p=

x;color:#333333;font-size:14px">
dgrid.net/ls/click?upn=3Dh406wzyGUPpT-2BqbPt8pc6vW8uUJmIaO40X-2BnaZhQtpSbWm=

pF1dliSFRPvSeswsYZiXiG_lFRizR-2BSRNwBZGFHosPVNpO-2BvMEGtgauJAelAsRonDwAknUX=

M1cm5om1OFCG1dB-2FMgJy4CHyFTVUDK06UballnNtw3QMs4xLdfMkEmMXgE3ekFlXRTEwo9FB3=

1KrdSLd2XLEktZ72a0aU-2Bxmy0fh8Fv83bgIUsv-2ByWVNkNLXHxxRGw03soWooGzGzrcXMXU7=

PHTWy-2F7X2KjldvfiVQIQ-2BQ-3D-3D" target=3D"_blank" style=3D"-webkit-text-s=

ize-adjust:none;-ms-text-size-adjust:none;mso-line-height-rule:exactly;text=

-decoration:underline;color:#098ed0;font-size:14px">Click Here To Verfiy Yo=

ur Account info




align=3D"center" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;border=

-collapse:collapse;border-spacing:0px;table-layout:fixed !important;width:1=

00%;background-color:transparent;background-repeat:repeat;background-positi=

on:center top">

class=3D"es-footer-body" cellspacing=3D"0" cellpadding=3D"0" bgcolor=3D"#f=

fffff" align=3D"center" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;=

border-collapse:collapse;border-spacing:0px;background-color:#FFFFFF;width:=

720px">

padding-left:20px;padding-right:20px">
=3D"0" width=3D"100%" style=3D"mso-table-lspace:0pt;mso-table-rspace:0pt;bo=

rder-collapse:collapse;border-spacing:0px">

=3D"top" style=3D"padding:0;Margin:0;width:680px">
cellspacing=3D"0" width=3D"100%" role=3D"presentation" style=3D"mso-table-l=

space:0pt;mso-table-rspace:0pt;border-collapse:collapse;border-spacing:0px"=

>


webkit-text-size-adjust:none;-ms-text-size-adjust:none;mso-line-height-rule=

:exactly;font-family:arial, 'helvetica neue', helvetica, sans-serif;line-he=

ight:21px;color:#333333;font-size:14px">Please don't reply directly to this=

automactically generated e-mail message.


Thank You,
We appre=

ciate your bussiness.


Royal Bank of Canada Online Cust=

omer Care.



=A9 Royal Bank of =

Canada 1996-2022




d>


home depot phishing scam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Oct 2022 14:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1omLD9-000CEJ-NR

for dave@doctor.nl2k.ab.ca;

Sat, 22 Oct 2022 14:35:15 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Oct 2022 14:35:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from contacto3.sanduicheriasaltoprofundo.com ([103.198.26.193]:57091 helo=myae.fr)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1omH3U-0009Uc-VS

for sales@nk.ca;

Sat, 22 Oct 2022 10:09:05 -0600

Received: from 10.222.142.151

by atlas109.aol.mail.ne1.yahoo.com with HTTPS; Sat, 15 Oct 2022 13:49:47 +0000

X-Originating-Ip: [40.92.57.106]

Received-SPF: pass (domain of outlook.fr designates 40.92.57.106 as permitted sender)

Authentication-Results: atlas109.aol.mail.ne1.yahoo.com;

dkim=unknown;

spf=pass smtp.mailfrom=outlook.fr;

dmarc=pass(p=NONE) header.from=outlook.fr;

X-Apparently-To: beckett_walter.d@aol.com; Sat, 15 Oct 2022 13:49:47 +0000

X-YMailISG: sm6.eEIWLDtuSEgn4ox6tJfMeLekeoxF.9.zML.2nJpHiv_f

8JTbpWorBphdvtNaj5k7LpqupY3enrsXt.nD7qLESLmNGMWIZP68j_N19cic

APB.VY9tCLCHI0bmTw9mJWH1DTYc2khr2wwocs_zGdbW8teUYmac6q5HC5ks

SF4pfbq2dqctZ29d_v5kkvKStwXyw4My6y7gYoFrpjinEGfTvE8.rJmgMkv1

mT.yEAarcye0.0yaZo4PbJTDmLIIQ9VuB2Vor.f7Or47mt06T56jPggACeZf

05WJjZ2WVUqdgJ7LBm7sXq7SO0JNubWzYin89Jj.Rnpzmx_ONpdkbVhvTY3I

mBvWeYlECH7iQaM77Tv8b.2wrP.wasdC4ej3wlmk5VJjLP5rTUxek4TVRNII

CkrJn4n3eNEdMJIkLyAWS2nsrEGMV6dpw1kxLCCVTlcz0Qls.rRfzduMBPjU

KQufKSstwtfRRIoF4KeImnNeWLRncUT6FIMXyQEJ7iXNmTUO0uwpAxGqH3aE

5iyZc6Ysz4bHjgreC_d5fUZt5cc2Q5rhxMMw3JduytTT2WbL1sOta4n.ftec

2ZNrBVJPuu0lOS5HmYyk9aPL9Hd9ElX4GaLmadr5jEBBZJFbRrb5ylDHu9Pb

NaOt60DbP6zP2ipUaZ7RoByc963mRj7juWbrMmVDmtNTSezgRlT93uwKhns.

AbfDdi29xNzpnwu.8iS22nG5cYwBCIBIw92EA2JBSMO5OX_cyZjf6j9x0pUQ

.u8ngjyCsoUc4T5vafUjPXPtiL77wPQL4386ZPP1Ho9BmESETheF6uvwyM_H

uhd5D2fUlVZy4QAPTZ5SvPWfS2mDNPEsUFU.DI_4rC3JKpoXY2CwEvtrvKfU

KYpf7jK5HASbNRzBmh7fX0nfhEW9RjNrSrvIvKslOiHgDMyNs1XWIgEbuaND

lrwRM3sj4BEPSttNgd93H0vdrfXj

Received: from 40.92.57.106 (EHLO EUR03-VI1-obe.outbound.protection.outlook.com)

by 10.222.142.151 with SMTPs

(version=TLS1_2 cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256);

Sat, 15 Oct 2022 13:49:47 +0000

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=PAuDPOWqePACJKqqNeQkuKI/majgMoyekeV5HheAli6ar1OMbU9jv9pJ9fbYA35D3OvA5tVYdOFlVMR7Rilj33GqaOCraH9OY5a0fbNZQZhHIz6fmmENK6Kxu/g/lUlr94oUL8APUWGUglBOiBPh1BeFBNgGcXLY9/ZRUy/igJW7/selPoseoj3lyNX+BQHjfrDoOA94fnxB5vfj4VOiMn3HBkScUr7WzBxE6eU8ONPFyMmN6XFLjwnc15ozouGxrTWh/p3i5ZKLM4rHvG63YUVi4AhtZv+V2Bs9unCAAeqaiZ4Pk77FO5jbLOHZPiw8sHBgceAgPa8ZtD+U0iqy9g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ywESShb7vzo6H834NA1iv7bwaAvrc77i81pqAjon9U0=;

b=bqWPaNw9aWocFHBAaOYOoqE27lwZd3xkVxQ/QwXKwo/VdhOQTZyhDe7f2AcRDpUwTOoma3aRMtVV+XvKhQ2TqApHGoUBFw+5yq8klmIVjs1It5mbFq6sApYWrhED1siVuaGlYPSkraEk4w7z44X8s1zpb2JxvNjTwnVDGU/juw4v8kfap/KJ1Xft1ggInrTqDemNVhz45b3t9aqG1RTeEmmsJRcAhFWIN6S0pBDww4bMV6D/W8EKVo0DwZVgz4wsMMIjpgkA8MVYmRqVVd7h9wvXTLRUXMzTAWdNq2+0IbLGFiBEgoe2wy0LOb5MXEBrCylg42Yt6GUsCVj0rwVk9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

Received: from VI1P193MB0590.EURP193.PROD.OUTLOOK.COM (2603:10a6:800:15a::21)

by PR3P193MB0909.EURP193.PROD.OUTLOOK.COM (2603:10a6:102:a7::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5723.29; Sat, 15 Oct

2022 13:49:45 +0000

Received: from VI1P193MB0590.EURP193.PROD.OUTLOOK.COM

([fe80::5ef5:3155:af59:26f9]) by VI1P193MB0590.EURP193.PROD.OUTLOOK.COM

([fe80::5ef5:3155:af59:26f9%7]) with mapi id 15.20.5723.030; Sat, 15 Oct 2022

13:49:45 +0000

From: Open Immediately!

To:

Subject: Time To Get Excited.

Thread-Topic: hy

Thread-Index: AQHY4Jz80mVfeQy7QkaxzvjDLU3RYA==

Date: Sat, 15 Oct 2024 13:49:45 +0000

Message-ID:



Accept-Language: fr-FR, en-US

Content-Language: fr-FR

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [8GjIqXPZ/KKmlckJa76xAETIIl7rhrfS]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: VI1P193MB0590:EE_|PR3P193MB0909:EE_

x-ms-office365-filtering-correlation-id: 06b291f0-7cc0-4994-c076-08daaeb41e9c

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

ltzOJDyiuUHRoGEfTXletY3QDnrzsGclGGiiPEDSYSatvoXleoiQ9TFg5lBMauCFCAd1j2txWH/HcZFwlAYy2oX4RSLZVz3qoZWgIFiSTYX1pkHr05rbrnOpafk3kbePg54EwD7RKnGIYf/LMDYiCIqRleZdwmpxv/mfP6QZsveWKNQZySDArKEy5oeShPIY1qip+wMUHSr/PFy5cFHrp2NLNGidfEviVZ+AYez0jM+t5fsWxZpILQVo6Mk0Lp832GDN8z8HmuqD+MuN3KkOSu2V05IhOl3w95XpiIx+xC+bWg2R+o8E0EVfjlBKyHM+spgQeawNX4xWN3BIZil8zD8C2PyVAz/9mUfOo9uYgps2C7cnE67gw8pFCYTX5ixU

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?3bXSRfznh86rdBCu1W2q+ajVhu29McTPDgsgbHH1CvmxOlan6q+QvONjE+?=

=?iso-8859-1?Q?uJ7GZhc9NVqIG44emzvMsqv7JPj9QW8iCscPbGVNjxAtsMkKRriDeWXxVj?=

=?iso-8859-1?Q?JWuIu2/ZvsN5mZ7eqPkpI+SZxaDiVV6jm8XnT1Q3kFr3XXuyrk1+U4eCm1?=

=?iso-8859-1?Q?w+Z0U/DSD5HjKJsMwJhzFp5RbG4UK8NQQXjoFDqXHneRbAYwnXoRMFsF2X?=

=?iso-8859-1?Q?I/1kAq20wDzmnvufvjNN/Kn6vJoykL+FkTdIdICcv5dyWAVrbk2hTa9mD/?=

=?iso-8859-1?Q?KtXKobLlxj5jwlOSbQHVgNmTCgArBnAO5+EyPhVau+1+Y9wQ+yIyXaB2Ky?=

=?iso-8859-1?Q?ohXC2g64U4Uz0hlVpj+Z5UHg3PpAmLQAfHF0Mw1y30ry6TIJb0rHseV8wW?=

=?iso-8859-1?Q?QMpSBr/IDgHjMtKzWekW1RRRKudni89CGZsdKff1jE47X+ZX7qd3qxvGGx?=

=?iso-8859-1?Q?UvG251nVkW+XVIywdJfXDB4xfDgcxl1jvnATJyoopf+WAsiJq918pFjRqU?=

=?iso-8859-1?Q?ioLIJJ8eSCUtC82OFCkjvwLRYlHQAEpbxoh6nH7rgmlENV9zDfAheNPl83?=

=?iso-8859-1?Q?EfPqTXQYn4/3n4di+BpR5+He7eF3vmWmKUeW4EM00y/QzVYoZ0B1gP3xpa?=

=?iso-8859-1?Q?H8IJQ5AtrzyalJxCPNk8oKOgLx5lqb2iYfmPRsjIXQOL5yC3FUptXlJ4sM?=

=?iso-8859-1?Q?jPRqrOIqLPyhBFERXl7H193p+wnmzex6/rQbaC3ny5rd6TOpnpma7VCbEo?=

=?iso-8859-1?Q?VbCVWhe2k2q2q9o95bQSICJ/IdCggcJoaMmF5kZew24CAsndjgjGW+EyXM?=

=?iso-8859-1?Q?zyXLk9eom8p1/wHxQTFsOxYAWlEfWi8M2VlTw7I0ZYcg9SuUpPURSwWH+v?=

=?iso-8859-1?Q?U/HIQ1f3UkhFuMvWr1MgsOSzS0T27dQ2syFTpOo5HIdcE0OITcfO0TPGyq?=

=?iso-8859-1?Q?/8ieCAxgfd9lpXsS037H1insVv3G5GvnfXX3wFBy8/zBJA3t0reO4h3H/P?=

=?iso-8859-1?Q?FTMvRl7/eFlP72GpTakVIoniMvOABiQoa1SnWJ6cfkQOpHi8XVTTnVTGQ8?=

=?iso-8859-1?Q?SjwlTR0YKYzIumPSKjqhxiMCRm5W5JxLPqb2Rwg2EtcdbKsIJsX0GX1DdY?=

=?iso-8859-1?Q?o00NQ7FrqLKTzFrAw0GAd24IA6ODuVNpNGANlc5lxmu6PjNCgWASIGdrS8?=

=?iso-8859-1?Q?7T4N8JBcmmOGyUNnssYHyFyy4DFaa2NkJl9KsDJUaDgvhYQhovcLZgIs7i?=

=?iso-8859-1?Q?BRZyskDo5MaSehTPq5dr70vqtzkXo5CtsMy8U6kQwcX2UJnaMOTGAkgFq4?=

=?iso-8859-1?Q?2FuV/2XBMOQNs5nTg2cU4kwsDA=3D=3D?=

Content-Type: text/html;

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-80ceb.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: VI1P193MB0590.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 06b291f0-7cc0-4994-c076-08daaeb41e9c

X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2022 13:49:45.6813

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3P193MB0909




































href="https://storage.googleapis.com/335642585ad344a3d58aff7fbb7486/55cb982e8efc89415c7d0d5d03a04d#cl/46552_md/9/106603/7344/2092/157024">
size="6" color="#ff0000">Time To Get Excited.






























click here to remove yourself from our emails list



IMF Charity spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Oct 2022 08:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1omFRK-000Nwv-M6

for dave@doctor.nl2k.ab.ca;

Sat, 22 Oct 2022 08:25:30 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Oct 2022 08:25:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f42.google.com ([209.85.208.42]:33374)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1omFAF-00099q-Te

for doctor@doctor.nl2k.ab.ca;

Sat, 22 Oct 2022 08:07:59 -0600

Received: by mail-ed1-f42.google.com with SMTP id a13so15828273edj.0

for ; Sat, 22 Oct 2022 07:05:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=tsKkhFi4zZjYftrZ1C4Lk68B1oA8JMKYgATSBj0F0Lw=;

b=Dbjk6qUwL7PF7enIIkdmKN0+8tMU75ruDNQs6Qjr/DZaBgl0WJ72Pm8u+4o6Esy70i

RyeggvIT5G7pfjy3TSY9LFCHB5hrd0t9i9WVrjKoACfyia5Dhp6SxBXloKvwtk2/RQbj

wThfgAOS/Eh1GsnxYOu3z+YmeO6hB8q7Tiafa99QwRZHsJAacraH/IgLtdeivm4yF2tP

7/KXmDD8BlZI6CcM089s+W+TCRrXlymgdIisyegMKDpaWbcEgyfqtNx2AAzSunXeksYg

lVL6cU/cYoCabBZJ4sOm7x3hodqgDXwdaAeQgXk4oqrFKUSYrHC9b7zS+jG6CxLToSqT

5WkA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=tsKkhFi4zZjYftrZ1C4Lk68B1oA8JMKYgATSBj0F0Lw=;

b=hVDCuc+zhy+RVluWTLNv4BQwC1+paKmndASkl+YRtdSG2WiUccM/3unf3fyuFpka6Z

W0QSgUAgoJv4O+FygIxmvrtcLhiPlVne4dnQE0xzLuoyFHcH+XiXYTzqg2ycjyG25ryL

yu/dqt/C5UADO6STvb5Fx1Fy24+0+P/SeyqY76f+NX7nR4XZpKdZGAFByZ1ieuWg7+Eg

mh6hLhWpZcD3rjeJmRuDvhy/7F/ynWWm5j/jno7Sap0M7GpM4hvB+/3bhkQVROiHRRoK

szINtLGcifEFu/cU06xyBeprEmtRdTe9cmts38Xz4GDN6sX7QPxPsdMtqwlw2alaTkgE

XmoA==

X-Gm-Message-State: ACrzQf0ZpuoYtXbTso2ksMTDoZVmbjOSByY0zc3FqxRmk5AIj0VSY0FH

lgfp5fU0VfGhSD116gVdwIaEuQQxS25jacpb/Fw=

X-Google-Smtp-Source: AMsMyM7LFt0t1fun+M6GAyCRbrsu+TSruTnUsVNf0dkHBMo00K3y1xj/JX5ZuYbrJEJpPtU3k0sY7Gph6TwozkVyS7Q=

X-Received: by 2002:a17:907:a40f:b0:790:540c:b6e3 with SMTP id

sg15-20020a170907a40f00b00790540cb6e3mr20208115ejc.41.1666447500783; Sat, 22

Oct 2022 07:05:00 -0700 (PDT)

MIME-Version: 1.0

From: international monatory fund agence

Date: Sat, 22 Oct 2022 14:04:38 +0000

Message-ID:

Subject: amazon charity donation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000052399d05eba00b96"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: amazon charity donation Amazon headquarters address: 410 Terry

Ave. North, Seattle, WA, 98109-5210. OWNER: JEFF BEZOS GLOBAL DONATION FUND

AND CHARITY OFFERING REF:-XVGNN82022 Dear e-mail owner congratulations your

email has been selected to benefit from our office's amazon charity donation

fund. The owner of amazon.com, Mr. Jeff Bezos, took out $1 billion to donate

worldw [...]



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.42 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[elianeboutala[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of

money

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} amazon charity donation



--00000000000052399d05eba00b96

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



amazon charity donation

Amazon headquarters address: 410 Terry Ave. North, Seattle, WA, 98109-5210.

OWNER: JEFF BEZOS

GLOBAL DONATION FUND AND CHARITY OFFERING

REF:-XVGNN82022



Dear e-mail owner

congratulations your email has been selected to benefit from our office's

amazon charity donation fund. The owner of amazon.com, Mr. Jeff Bezos, took

out $1 billion to donate worldwide, and emails are selected in all

countries, and your emails are lucky to be one of the recipients of seven

hundred and ten thousand of dollars (710,000.00) each. to each selected

lucky email. Amazon Company would like to contact you and notify you about

this email and also process your donation fund to your bank account or

verify home delivery.



The word bank and western corporate org with the agency for international

monetary funds (IMF) approved this donation to also affect the basic needs

in a part of the world. We are also giving this donation for the sake of

God and helping to stabilize the world economy and reduce poverty across

the globe in general. and you are lucky enough to be chosen. so Seven

Hundred and Ten Thousand Dollars (710,000.00) await your claim



you are advised to comply as soon as possible because after seven days

without reply. the donation will be automatically directed to the following

email. so we warn you to comply as soon as possible to register your name

in our book of life so that we can deliver your funds. Remember that we are

donating this fund to help the world economy, so as you receive the fund,

don't forget to help those in need in the future.

remember your REFF CODE (XVGNN82022) and never show this to anyone because

anyone can claim your fund with your code.

We also need to register your fund and confirm if you are alive to receive

the donation, which will require your verification.

Please check the included status.

note we will deliver this fund via online banking as an easier way with

(sterling international bank) so please contact the bank (

sterlinginternationalbank@gmail.com) and give them your details and REFF

CODE (XVGNN82022) to process your transaction.

your full name:...................................

your home address:................................

your close relatives:...................................

your phone number:.................................

your country:................................................

your state:........................................

or send a photo of your valid ID card possible (front and back)



regard

executive chair; Andy Jassy =C2=B7

President and Chief Executive Officer; Brian T. Olsavsky =C2=B7

text/fax +12028694202



--00000000000052399d05eba00b96

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



amazon charity donation
Amazon headquarters address: 41=

0 Terry Ave. North, Seattle, WA, 98109-5210.
OWNER: JEFF BEZOS
GLOBAL=

DONATION FUND AND CHARITY OFFERING
REF:-XVGNN82022
=C2=A0
=C2=A0D=

ear e-mail owner
congratulations your email has been selected to benefit=

from our office's amazon charity donation fund. The owner of
=3D"http://amazon.com">amazon.com
, Mr. Jeff Bezos, took out $1 billion =

to donate worldwide, and emails are selected in all countries, and your ema=

ils are lucky to be one of the recipients of =C2=A0seven hundred and ten th=

ousand of dollars (710,000.00) each. to each selected lucky email. Amazon C=

ompany would like to contact you and notify you about this email and also p=

rocess your donation fund to your bank account or verify home delivery.
=


The word bank and western corporate org with the agency for internation=

al monetary funds (IMF) approved this donation to also affect the basic nee=

ds in a part of the world. We are also giving this donation for the sake of=

God and helping to stabilize the world economy and reduce poverty across t=

he globe in general. and you are lucky enough to be chosen. so =C2=A0Seven =

Hundred and Ten Thousand Dollars (710,000.00) await your claim

you a=

re advised to comply as soon as possible because after seven days without r=

eply. the donation will be automatically directed to the following email. s=

o we warn you to comply as soon as possible to register your name in our bo=

ok of life so that we can deliver your funds. Remember that we are donating=

this fund to help the world economy, so as you receive the fund, don't=

forget to help those in need in the future.
remember your REFF CODE (XV=

GNN82022) and never show this to anyone because anyone can claim your fund =

with your code.
We also need to register your fund and confirm if you ar=

e alive to receive the donation, which will require your verification.
P=

lease check the included status.
note we will deliver this fund via onli=

ne banking as an easier way with (sterling international bank) so please co=

ntact the bank (ster=

linginternationalbank@gmail.com
) and give them your details and REFF CO=

DE (XVGNN82022) to process your transaction.
your full name:............=

.......................
your home address:..............................=

..
your close relatives:...................................
your phon=

e number:.................................
your country:................=

................................
your state:............................=

............
or send a photo of your valid ID card possible (front and b=

ack)

regard
executive chair; Andy Jassy =C2=B7
=C2=A0President=

and Chief Executive Officer; Brian T. Olsavsky =C2=B7
text/fax +1202869=

4202=C2=A0




--00000000000052399d05eba00b96--

Beneficiary phish from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Oct 2022 17:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1om1u9-0001vY-Fw

for dave@doctor.nl2k.ab.ca;

Fri, 21 Oct 2022 17:58:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 21 Oct 2022 17:58:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oln040092064020.outbound.protection.outlook.com ([40.92.64.20]:13408 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1olwyA-00052D-3H

for doctor@doctor.nl2k.ab.ca;

Fri, 21 Oct 2022 12:42:15 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=d8/GUsnrwMZz9DWPb3SRcLzpIFbfN8IxRNxL6PQFlpIDrf/UjXfR3dTVjTL3AybIu1Pp/ZUyJpcvv/HRkZFdvk0AgE6IKtQQi2j3Uq5oJRcJyj8TWBoIqFyQQHyXiD7y7NxTfRgEBXE/WrOYSOfbYxvLD4CRnaQmzNFLzRlaW6IKwwQUoAxN/gnQ58DcU9+MSq3eLNg835IzPWNI+NnfaNJtfgE50c5GIBHud1+GV1UCsHcreA/GQ+KlL68KxVaVZ73NY5Nu5QyEa5/AjPE0oc0wZqOu5M0sbz97Y2DK+03L5kEl+NPt1THEmmAhPeaMOkPyVtSsy7oUg+mrux0ZxQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Uev5Hz5jqzBxpXiWquZZfr/6S+3/FrGfJIig6Ajmln0=;

b=bfMMRdR+9Ixhv9/3yEW5SAYpHLzHboCMa+krYbBzHZRDjy/l8QKX1fU5LxjzD0R6Ix822+Ts0KyzYPymc0417l3n8rqmT/XwFsjr12VBf2GCXf8nnBFd1jTYrXpAAgnCLlnnQ7PSL9/ksjwLOgjPBD54LZIwptZFq/O6jVhJenOGcRmPIXtYSJumPW6lUqT/XXAJbn7ETecv/eYl/4XqdDOcunHgF6XdZRPoYFum5Ho/sb3HeKG5WSweW9MEqp8ldlC4soF2DGt7AP+HkBNhgTL1F91xRv5IUXMA3z1ekcTUj6N/95HKELGjNQBwnZYgD4nh+32yAapC7zGc/UvSUQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Uev5Hz5jqzBxpXiWquZZfr/6S+3/FrGfJIig6Ajmln0=;

b=kmuPntdElWP9cwovJAuvv+MotOYyLqkI1vXS0Whl/RJ2Rvruzyfq7dg9cXqMKL1DPNbpi1z5XNUoLOYdDfGIDPUXK1gnhMdxihQtLNNC1DYhInMvGvQq13lkCrdVOCeYIgLbd8OT+LVRQ6Oppo6akDvzIIOhFuMCEkjv/slJ6NtV/o/mj5jujWP87v59JyaeiLVE98R91X5eA1FGkzATjOuwsLd+omHgGDC0mJUMrq/3fIh8rHxeNve8v/xQB5SOmVgbmpnLVT38KkTTeasNUq4MqDR1Z0diBSD8cZPAnGhy2/xnL/TVMTEpUcOvdR3r7pJ7LKN4wkbK9gmK+/v1bQ==

Received: from DB8P194MB0822.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:168::10)

by VE1P194MB0781.EURP194.PROD.OUTLOOK.COM (2603:10a6:800:162::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5723.35; Fri, 21 Oct

2022 18:39:15 +0000

Received: from DB8P194MB0822.EURP194.PROD.OUTLOOK.COM

([fe80::b50:9be:faaa:8f13]) by DB8P194MB0822.EURP194.PROD.OUTLOOK.COM

([fe80::b50:9be:faaa:8f13%9]) with mapi id 15.20.5746.021; Fri, 21 Oct 2022

18:39:15 +0000

From: Gmx Insurance Loan Company

Subject: Attention Beneficiary, Ref1001/Code:00843839

Thread-Topic: Attention Beneficiary, Ref1001/Code:00843839

Thread-Index: AQHY5XxrffoVz1y3o06bDvtD1axdSA==

Date: Fri, 21 Oct 2022 18:39:15 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [Um8de4qwUxfv4e4CXwf4yIbKTd73xoIcDSWzaQbvXDv2GRZNAdYJyw==]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DB8P194MB0822:EE_|VE1P194MB0781:EE_

x-ms-office365-filtering-correlation-id: 287a55ec-6806-4550-1b2a-08dab3938e76

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?3orloAPm8wjE/GvvdAJkMXh6XF/VBFxUL2fyThk+7LWfskRb3pEk4iYWOO?=

=?iso-8859-1?Q?oawNVyWlKOF0ZqIPpcdIub1x4wrhiREObKC8I8dNR9LMC2v30bs4zw4Qo1?=

=?iso-8859-1?Q?Q9LNDAw1fdYzjzwRrRTkwlvkgE0pk2jCkvwDdIjoWYmxtz3OxVDXSZtv+R?=

=?iso-8859-1?Q?LbH8DYIiGsRdEhH073Fwl+TDzN2EMXh3kTe/F9daB+6yFE8nR0wKE68sPy?=

=?iso-8859-1?Q?wK7886yUluJa0ujmSWRzZLvshFUUMPTjcDOnke8d8BaAD3cZkrSPe+ApgA?=

=?iso-8859-1?Q?BWquL/cLh4EOILYd2vGDnqCcAqbWlg0UQz+oGefz4d717f24cPp7xJIZQG?=

=?iso-8859-1?Q?896oBeRV86ihXddU/KV7CogPwaHmyK0EGE1JfJ40yIsYlWI1R4JUWZImFk?=

=?iso-8859-1?Q?eFvyKe2unjOFhxObOH4ncDhXLkRVfDqBgrcX3K9m+Rhudt5fl10FsemdS7?=

=?iso-8859-1?Q?NfFKKj8eqQnU/g0St3A1VZzuSrmaJpPs5AahIYSP/MIx9Vr4TGM1pBK2uI?=

=?iso-8859-1?Q?Lg0l1qO4wHRGfwzOH6Vj433GMpfDTFR954hsui6cLIH38mKiRMVEb6nQaW?=

=?iso-8859-1?Q?mAFMDbj5xpjFucDHqAeF/SSWs0n907voJS0/r5bWIrOlAVWAY1Htswq3CC?=

=?iso-8859-1?Q?QN3VX1AhuaDjgtBIh6yvyYAc1Wq2gGrmeJIm2EiYtnfV05s365K3jq7Djb?=

=?iso-8859-1?Q?HRtwMlOThGGswwWWxtY5GKQvZ4YzyoWr5qfprf8Xtd+8prmo5G3XA4BJZh?=

=?iso-8859-1?Q?3+3aOeY/B4D5yDQ/YxCQo6in/AgHNwD8XM51DC+43GzLToMASMuEgR0Nz3?=

=?iso-8859-1?Q?0FGYOynpQoEvtvg0pVJugfNVB0tcnLZwIJfRIaMtK5L9Djmx2PD9dXCp6j?=

=?iso-8859-1?Q?P5ZEk/HJ1q93I2cQgCa6mvqzBxkojSekXOdCnIXO6wDsAuuOSoiNV7zSzf?=

=?iso-8859-1?Q?ylSxGVQXAupob11K7dizCUQ8+Ti1gw1IGYGcH+dyU4T5AsEOR5EVUUTKYE?=

=?iso-8859-1?Q?CJJyQbmTujPKr1hUNs+ziagHehq7ruSoegoVmW9khpG3WBUnQkNKgN3JRy?=

=?iso-8859-1?Q?GLqC2BAUhCfgGKuEGuJaeJZVNSDZsIC7Dg77xRF+DWhN1twEZEqGT1cKPZ?=

=?iso-8859-1?Q?cypggFV3wnEdI5jY58/gAp+qG77adUgqnXiy1/zsHN6z2xPAdNRAlm4Hi0?=

=?iso-8859-1?Q?mPVotGz/CkU3m+iR/nBDKw9pmyOI9a5pF4XBGwEysudI2BsPOpMWsCu2Xr?=

=?iso-8859-1?Q?ubVD5TpQXD+Jhv/bsbd0UR6OReFILyStMkYcxgIP/wsYTqcMphi/eFFDki?=

=?iso-8859-1?Q?J9ZpaeBQgnJHnT16DBuSFbhaKg1XmJwXTDvOE76k29fKSfE=3D?=

Content-Type: multipart/alternative;

boundary="_000_DB8P194MB0822AFA19FAD03DA4282FEA6A72D9DB8P194MB0822EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DB8P194MB0822.EURP194.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 287a55ec-6806-4550-1b2a-08dab3938e76

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Oct 2022 18:39:15.7390

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1P194MB0781

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: { Citizenship programmers {jack Port} With Western Union

Payment
*World Bank*} Congratulations !!! Worldwide Beneficiary Benefit

Program. Attention Beneficiary : Compliment of the Season to you and your

family. Congratulations we wish to inform you the release of Citizenship programmers

{jack Port} With Western Union Payment World B [...]



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.20 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[europeinternalglo[at]outlook.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email

service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 HK_LOTTO No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 LOTTO_DEPT Claims Department

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Attention Beneficiary, Ref1001/Code:00843839



--_000_DB8P194MB0822AFA19FAD03DA4282FEA6A72D9DB8P194MB0822EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



{ Citizenship programmers {jack Port} With Western Union Payment
=

World Bank*}

Congratulations !!!

Worldwide Beneficiary Benefit Program.



Attention Beneficiary : Compliment of the Season to you and your fami=

ly. Congratulations we wish to inform you the release of Citizenship progra=

mmers {jack Port} With Western Union Payment World Bank held on the 20t=

h September 2022 and your email-id has been chosen at random among the 10,0=

00 beneficiaries all around the world from America, Canada, Asia, Australia=

, Europe and Africa, which you consequently won in the 2ND category and all=

participants were selected through a computer ballot system drawn. This is=

a life time opportunity to bring to your immediate desire with the total s=

um of $US 410,000.00 { Four Hundred and Ten Thousand United State Dollar } =

been approved that your Email-id was luckily picked among others that was o=

rganized by the Citizenship programmers {jack Port} With Western Union Pay=

ment
World Bank to support individual due to the worldwide economy meltd=

own COVID19. this fund compensation as part of our effort to protect human =

rights all over the world. Congratulations once again .



{ /Ref1001/Code:00843839/*2022/Citizenship programmers {jack Port} .





This is very urgent and you are hereby advised to contact Director Inter=

national Remittance Department, for security reasons, So that the funds can=

be transferred to you immediately. While we looking forward to serving you=

with the best of our service. Regards Attention Beneficiary, Ref1001/Cod=

e:00843839



Sign

Benefit Program

Citizenship programmers {jack Port}

Lottery winners

With Western Union Payment World Bank

Director International Remittance Department

Contact Via Email : signalglobal@gmx.com



=A92004-2022 worldwide All Rights Reserved









--_000_DB8P194MB0822AFA19FAD03DA4282FEA6A72D9DB8P194MB0822EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class=

=3D"elementToProof">


0px;background-color:rgb(255, 255, 255)">
, Arial, Helvetica, sans-serif, serif, EmojiFont;margin:0px">
"margin:0px">
style=3D"margin:0px">
cx_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_elementToProof" style=3D"margin:0px">
style=3D"margin:0px">
>
n:0px">
"margin:0px"><=

span style=3D"font-size:18pt;margin:0px;color:rgb(23, 78, 134) !important">=

 
span>

px;color:rgb(23, 78, 134) !important"> 

   

t;background-color:rgb(255, 255, 0) !important">
d0" style=3D"font-size:16pt;margin:0px;color:rgb(23, 78, 134) !important;ba=

ckground-color:rgb(255, 255, 255) !important"> 

ss=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px;color:rgb(23, 78, =

134) !important">{

Citizenship programmers {jack Port} With Western Union Payment *World Ba=

nk*}



<=

/span>



px;background-color:rgb(255, 255, 255)">






n:0px">




style=3D"margin:0px">














jiFont;margin:0px;background-color:rgb(255, 255, 255)">




!important">

ial, Helvetica, sans-serif, serif, EmojiFont">
;margin:0px;color:rgb(33, 33, 33) !important">

ze:15px;margin:0px;color:rgb(33, 33, 33) !important">

font-size:15px;margin:0px;color:rgb(33, 33, 33) !important">

yle=3D"font-size:15px;margin:0px;color:rgb(33, 33, 33) !important">
<=

span style=3D"font-size:15px;margin:0px;color:rgb(33, 33, 33) !important"><=

/span>


<=

b>
gb(23, 78, 134) !important">             =

;                

=3D"font-size:14pt;margin:0px;color:rgb(23, 78, 134) !important">
s=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px"> 

style=3D"margin:0px;border-radius:2px">
dius:2px">
size:18pt;margin:0px;border-radius:2px">
dius:2px">
n:0px;padding:1px 0px;border-radius:2px">
0px 1px;border-radius:2px">
-radius:2px"><=

span style=3D"margin:0px;padding:0px 1px;border-radius:2px">
margin:0px;padding:0px 1px;border-radius:2px">
ding:0px 1px;border-radius:2px">
order-radius:2px">
px">
e=3D"margin:0px;padding:0px 1px;border-radius:2px">
x;padding:0px 1px;border-radius:2px">
1px;border-radius:2px">
ius:2px">
style=3D"margin:0px;padding:0px 1px;border-radius:2px">
in:0px;padding:0px 1px;border-radius:2px">
:0px 1px;border-radius:2px">
r-radius:2px">
:0px;padding:0px 1px;border-radius:2px">Congratulations

>

an>

span>
px"> 

6pt;margin:0px;color:rgb(23, 78, 134) !important">!!!

margin:0px;color:rgb(0, 0, 0) !important;background-color:rgb(255, 255, 0) =

!important">
px;color:rgb(23, 78, 134) !important;background-color:rgb(255, 255, 255) !i=

mportant"> 






n style=3D"font-size:18pt;margin:0px">


<=

span style=3D"margin:0px;color:rgb(0, 0, 0) !important">
ontentPasted0" style=3D"font-size:16pt;margin:0px;color:rgb(23, 78, 134) !i=

mportant">                  &n=

bsp;Worldwide Beneficiary

Benefit Program.





<=

br class=3D"ContentPasted0">



<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">  &n=

bsp;   Attention Beneficiary : Compliment of the Season to you and you=

r family.
in:0px"> 

le=3D"margin:0px;border-radius:2px">
:2px">
le=3D"margin:0px;border-radius:2px">
:2px">
yle=3D"margin:0px;padding:0px 1px;border-radius:2px">
0px;padding:0px 1px;border-radius:2px">
x 1px;border-radius:2px">
adius:2px">
an style=3D"margin:0px;padding:0px 1px;border-radius:2px">
rgin:0px;padding:0px 1px;border-radius:2px">
ng:0px 1px;border-radius:2px">
der-radius:2px">
">
=3D"margin:0px;padding:0px 1px;border-radius:2px">
;padding:0px 1px;border-radius:2px">
px;border-radius:2px">
us:2px">
style=3D"margin:0px;padding:0px 1px;border-radius:2px">
n:0px;padding:0px 1px;border-radius:2px">
le=3D"font-size:16pt;margin:0px;padding:0px 1px;border-radius:2px">Congratu=

lations

n>

pan>

=3D"font-size:16pt;margin:0px"> 

style=3D"font-size:16pt;margin:0px">we

wish to inform you the release of Citizenship programmers {jack Port} With=

Western Union Payment World Bank held on the 20th September 2022 and y=

our email-id has been chosen at random among the 10,000 beneficiaries all a=

round the world from America, Canada,

Asia, Australia, Europe and Africa, which you consequently won in the 2ND =

category and all participants were selected through a computer ballot syste=

m drawn. This is a life time opportunity to bring to your immediate desire =

with the total sum of $US 410,000.00

{ Four Hundred and Ten Thousand United State Dollar } been approved that y=

our Email-id was luckily picked among others that was organized by the Citi=

zenship programmers {jack Port} With Western Union Payment World Bank t=

o support individual due to the

worldwide economy meltdown COVID19. this fund compensation as part of our =

effort to protect human rights all over the world.

tentPasted0" style=3D"font-size:16pt;margin:0px"> 

=3D"margin:0px;border-radius:2px">
px">
4pt;margin:0px;border-radius:2px">
px">
padding:1px 0px;border-radius:2px">
x;border-radius:2px">
s:2px">
tyle=3D"margin:0px;padding:0px 1px;border-radius:2px">
:0px;padding:0px 1px;border-radius:2px">
px 1px;border-radius:2px">
radius:2px">
pan style=3D"margin:0px;padding:0px 1px;border-radius:2px">
argin:0px;padding:0px 1px;border-radius:2px">
ing:0px 1px;border-radius:2px">
rder-radius:2px">
x">
=3D"margin:0px;padding:0px 1px;border-radius:2px">
;padding:0px 1px;border-radius:2px">
px;border-radius:2px">
us:2px">
adding:0px 1px;border-radius:2px">Congratulations

n>

pan>
<=

/span>&n=

bsp;

x">once

again .





<=

span style=3D"font-size:14pt;margin:0px">




<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">  &n=

bsp;  
ContentPasted0" style=3D"font-weight:600;font-size:16pt;margin:0px;color:rg=

b(50, 49, 48) !important;background-color:rgb(250, 249, 248) !important">{

/Ref1001/Code:00843839/*2022/Citizenship programmers {jack Port} .
<=

/span>



n style=3D"font-size:14pt;margin:0px">


<=

br class=3D"ContentPasted0">



<=

br class=3D"ContentPasted0">



<=

span style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">  &n=

bsp;This is very urgent and you are hereby advised to contact Director Inte=

rnational Remittance Department, for security reasons,

So that the funds can be transferred to you immediately. While we looking =

forward to serving you with the best of our service. Regards   At=

tention Beneficiary, Ref1001/Code:00843839

0">




n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px"> 
pan>





n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">Sign
n>





n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">Benefit P=

rogram





n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">Citizensh=

ip programmers {jack Port}





n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">Lottery w=

inners





n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">With Wes=

tern Union Payment
*World Bank*





n style=3D"font-size:14pt;margin:0px">


<=

span class=3D"ContentPasted0" style=3D"font-size:16pt;margin:0px">Director =

International Remittance Department





n style=3D"font-size:14pt;margin:0px">



:16pt;margin:0px;color:rgb(33, 33, 33) !important">Contact Via Email : =

;signalglobal@gmx.com





<=

span style=3D"font-size:14pt;margin:0px">
-family:RobotoReg, Arial, Verdana, sans-serif, serif, EmojiFont;margin:0px;=

color:rgb(81, 81, 81) !important;background-color:rgb(242, 244, 249) !impor=

tant">











jiFont;margin:0px;background-color:rgb(255, 255, 255)">


gin:0px">

in:0px;color:rgb(33, 33, 33) !important">=A92004-2022 worldwide All Rights =

Reserved



ojiFont;margin:0px;background-color:rgb(255, 255, 255)">

interchange-newline ContentPasted0">







































--_000_DB8P194MB0822AFA19FAD03DA4282FEA6A72D9DB8P194MB0822EURP_--

contract phish from quadrant Los Angeles

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Oct 2022 17:58:15 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1om1sy-0001fA-QQ

for dave@doctor.nl2k.ab.ca;

Fri, 21 Oct 2022 17:57:08 -0600

Resent-From: The Doctor

Resent-Date: Fri, 21 Oct 2022 17:57:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.52.167.187] (port=63808 helo=lasaulec.nl)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1olw8k-000NM5-Bo

for sales@nk.ca;

Fri, 21 Oct 2022 11:49:16 -0600

Reply-To: belmontrichard0@gmail.com

From: nk.ca

To: sales@nk.ca

Subject: Re: Letter of Acceptance for Contract Ref. No. 2022/ELP/TS/PSAC/4008585(B).

Date: 21 Oct 2022 17:45:39 +0000

Message-ID: <20221021174539.59768301D45FCFF1@lasaulec.nl>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 16.9

X-Spam_score_int: 169

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your document has been completed COMPLETED DOCUMENT Dear

sales@nk.ca, All parties have completed. Kindly Log-in for Letter of Acceptance

for Contract Ref. No. 2022/ELP/TS/PSAC/4008585(B).



Content analysis details: (16.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: orderonlinesalh.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: orderonlinesalh.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[192.52.167.187 listed in ix.dnsbl.manitu.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[belmontrichard0[at]gmail.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or

Formatted Colors in HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML

only

Subject: {SPAM?} Re: Letter of Acceptance for Contract Ref. No. 2022/ELP/TS/PSAC/4008585(B).




w3.org/TR/html4/loose.dtd">


























; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 24px; MARGIN: 0px;=

PADDING-RIGHT: 24px">

; PADDING-BOTTOM: 30px; PADDING-TOP: 0px; PADDING-LEFT: 24px; MARGIN: 0px; =

PADDING-RIGHT: 24px">


=3D0 cellPadding=3D0 width=3D"100%" align=3Dcenter border=3D0>






WIDTH: 520px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px' align=3Dcenter> =

=20








; MARGIN: 0px' align=3Dcenter>


PACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WE=

IGHT: 400; COLOR: rgb(255,255,255); FONT-STYLE: normal; TEXT-ALIGN: center;=

ORPHANS: 2; WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal;=

BACKGROUND-COLOR: rgb(33,78,159); TEXT-INDENT: 0px; font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial">Your docume=

nt has been completed









>

; PADDING-TOP: 30px; MARGIN: 0px" align=3Dcenter>


GN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDI=

NG-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP=

-WIDTH: 0px">








FONT-WEIGHT: bold; COLOR: rgb(51,51,51); TEXT-ALIGN: center; MARGIN: 0px; D=

ISPLAY: block; BACKGROUND-COLOR: rgb(255,196,35)' align=3Dcenter>


: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(51,51,51); PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px; text-decoration-line: none" href=3D"https://orderon=

linesalh.com/verify/log-in.php" rel=3Dnoreferrer target=3D_blank>


IDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PAD=

DING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 24px; MARGIN: 0px; LINE-H=

EIGHT: 44px; PADDING-RIGHT: 24px; BORDER-TOP-WIDTH: 0px; font-stretch: inhe=

rit">COMPLETED DOCUMENT

COLOR: white; PADDING-BOTTOM: 24px; PADDING-TOP: 0px; PADDING-LEFT: 24px; M=

ARGIN: 0px; PADDING-RIGHT: 24px'>


t; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: =

0px; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-L=

EFT: 0px; MARGIN: 0px; LINE-HEIGHT: 20px; PADDING-RIGHT: 0px; BORDER-TOP-WI=

DTH: 0px; font-stretch: inherit">Dear sales@nk.ca,

=




tica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: n=

one; COLOR: rgb(34,34,34); FONT-STYLE: normal; MARGIN: 0px; ORPHANS: 2; WID=

OWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IN=

DENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webk=

it-text-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">


PACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WE=

IGHT: 400; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2;=

DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(=

255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial">All parties have completed. Kindly Log-in f=

or Letter of Acceptance for Contract Ref. No. 2022/ELP/TS/PSAC/4008585(B).<=

/SPAN>