Gmail spam to a technical list

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:31:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQgd-000MCa-1P

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:30:43 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:30:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip-8-43-85-97.sourceware.org ([8.43.85.97]:53250 helo=sourceware.org)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLQHe-000LHR-2D

for doctor@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:04:19 -0700

Received: from server2.sourceware.org (localhost [IPv6:::1])

by sourceware.org (Postfix) with ESMTP id 4BA6B385B50D

for ; Fri, 27 Jan 2023 15:02:12 +0000 (GMT)

DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 4BA6B385B50D

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gcc.gnu.org;

s=default; t=1674831732;

bh=iPiP/B3ZFkD9nfRINBC1L/XQ+IdxRKe3IZzqwH+ZW1s=;

h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:

List-Help:List-Subscribe:From:Reply-To:From;

b=MPC1NITAobfrQEnTmQwTjGpCK6EibdGjej3PRpSFCEs5Ak75wtlUezIJwXWnUCtev

bwBskk5NVoUq06YEOyCZmQAbZUZxSR0p4i4fLf8ru8jKA14usq+S1WLglK3WCWGz12

iMHsjl3FC7MlN6MWWdjRW8VVSeKGU6kGcQHyTPoc=

X-Original-To: gcc@gcc.gnu.org

Delivered-To: gcc@gcc.gnu.org

Received: from mail-ej1-x644.google.com (mail-ej1-x644.google.com

[IPv6:2a00:1450:4864:20::644])

by sourceware.org (Postfix) with ESMTPS id 4D0A03857B8E

for ; Fri, 27 Jan 2023 15:01:09 +0000 (GMT)

DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 4D0A03857B8E

Received: by mail-ej1-x644.google.com with SMTP id me3so14434762ejb.7

for ; Fri, 27 Jan 2023 07:01:09 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=uTH2uDHITZk1eoonGjgCB0E72+/CGpZvBavvyTbCbhA=;

b=AkvsYAqFccIoJoNjZyslrHI0TQAT1A7cVzLRhodGdoboFTKgXXpF0Fja4KjeKbEVqp

uLOcaBrS3/UtcMY9tbZv8nScIeNxo2/U3vLpJ1veHIJdKBWvIQvbFuTqjS7Q7RD4b01z

44Wm51BLIzfQnefNCNaeYcpx84/zxA0+oCu7+uAi3AtKzJL6hwA+BR/is7Qdgj+1x22J

JLreZokMusDg3+UKp+WodQAp1gMEMeJ8GNoCM5sM94tG4OV3lavKhJPVSzjdrzyM4IxN

su1k7+R3YT6n3IT7Zcb6YlqEgXb/iF0RqOhF6b5GWjC7tHH7/OC04e6/qGMuN8fO+vjw

BBFg==

X-Gm-Message-State: AO0yUKU24oXM/HJbGu6CbDS+2qXNlJo2Eb6BaE4VsAgi9eHVYh931Gff

WwZb8+rS/sCz8CHW6ZkI4Gmkzumw9yKNrs7Q2xC6ZxIp

X-Google-Smtp-Source: AK7set9t791ay0AVEVz/yMDqr1lNZqjKxLdWRbGI7YjnTXErjRoBCx8+hNvmIr+5tDi2vNhY6mbBAQNaZ/6TLrQv1hk=

X-Received: by 2002:a17:906:909:b0:877:f2b6:eebf with SMTP id

i9-20020a170906090900b00877f2b6eebfmr2605051ejd.140.1674831667368; Fri, 27

Jan 2023 07:01:07 -0800 (PST)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Fri, 27 Jan 2023 15:01:06 +0000

MIME-Version: 1.0

X-Streak-Sequence-Data: action-key=acn_BQRY-kU6emmzHlZtuA;

recipient-key=rcp_BXawetZfH4yeNrj4YQ

Date: Fri, 27 Jan 2023 15:01:06 +0000

Message-ID:

Subject: Can I write for you?

To: gcc@gcc.gnu.org

X-Spam-Status: No, score=2.5 required=5.0 tests=BAYES_50, DKIM_SIGNED,

DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM,

HTML_FONT_LOW_CONTRAST, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,

SPF_PASS, TXREP,

T_KAM_HTML_FONT_INVALID autolearn=ham autolearn_force=no version=3.4.6

X-Spam-Level: **

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on

server2.sourceware.org

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Content-Filtered-By: Mailman/MimeDel 2.1.29

X-BeenThere: gcc@gcc.gnu.org

X-Mailman-Version: 2.1.29

Precedence: list

List-Id: Gcc mailing list

List-Unsubscribe: ,



List-Archive:

List-Post:

List-Help:

List-Subscribe: ,



From: Kat Sarmiento via Gcc

Reply-To: Kat Sarmiento

Errors-To: gcc-bounces+doctor=doctor.nl2k.ab.ca@gcc.gnu.org

Sender: "Gcc"



Hello =E2=80=94 Kat here. Can I write for you? It=E2=80=99s absolutely free=

of charge, I

was just hoping for a legit platform to welcome some of my written works.

Trying out a new career path (it=E2=80=99s a loooong story) which requires =

a couple

of published articles and a bit of name dropping, and I was wondering if I

can drop yours?



Would very very much appreciate the opportunity. Please let me know if it=

=E2=80=99s

possible?



Thanks for your time!



Warmly,



Kat









[image: Logo]



Kat Sarmiento



Content Writer



=E1=90=A7

fedex Phish from Welcomewebsite.com

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 09:40:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLRlN-000MVp-2b

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 09:39:41 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 09:39:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [108.179.236.193] (port=35206 helo=108-179-236-193.unifiedlayer.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLRLa-000LIi-1a

for www@nl2k.ab.ca;

Fri, 27 Jan 2023 09:12:24 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sitvr.host;

s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:

From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=3uQAZWQ3q9DqhyPtin7IZWXuz2rv9/ojDFUo8EcsVVU=; b=HtCQuPG+Mp283soEDpIKIx87ij

R5froCWN3ycuSdSEQN64kWbtcQFmfJ6wsbyYWgvYasMPwd+hz5j1uau34yMImxL84DdTTUrQTgI5P

+iJDpTvDYyyLVwzWTBW6gikigYAwhOYGrXzxx7VVmxOzFgyCOx7bpmuYMmgUJh9fwOm0MOdkdcPTb

YPa3qZyjUeALNzs2A8PkZXkLU4TG7rU6buLDBUS2P4a8p5lZKq/hoNBc2GTwYbW2GC/LZmymwlo8a

qY5x8fvRm5GYpx0XeJre+6j4HENeMR+GV0JN6a+/Sd7KwHf3ANzoTzmLxUyXEKfyNH49HfBP9xr7b

uuhuvKBg==;

Received: from sitvr by sit.sitvr.host with local (Exim 4.94.2)

(envelope-from )

id 1pLRIy-0006bU-JR

for www@nl2k.ab.ca; Fri, 27 Jan 2023 16:10:20 +0000

To: www@nl2k.ab.ca

Subject: Action Required: Your package is on hold

X-PHP-Script: sitvr.host/zok.php for 199.167.107.74

X-PHP-Originating-Script: 1001:zok.php

Date: Fri, 27 Jan 2023 16:10:20 +0000

From: Info

Message-ID: <994a54e00dbebd731e7c67c5ef09fdee@sitvr.host>

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - sit.sitvr.host

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1001 994] / [47 12]

X-AntiAbuse: Sender Address Domain - sitvr.host

X-Get-Message-Sender-Via: sit.sitvr.host: authenticated_id: sitvr/from_h

X-Authenticated-Sender: sit.sitvr.host: info@sitvr.host

X-Source:

X-Source-Args: php-fpm: pool sitvr_host

X-Source-Dir: sitvr.host:/public_html

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Import Duty and/or Tax and Customs Clearance Service

Charges are still outstanding on your FedEx Express shipment with waybill

number 772980724289. ​Your urgent attention is required to avoid any further

impact on the scheduled delivery date.



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname

(Split IP)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[108.179.236.193 listed in bb.barracudacentral.org]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 PHP_SCRIPT Sent by PHP script

Subject: {SPAM?} Action Required: Your package is on hold



Hello,

Import Duty and/or Tax and Customs Clearance Service Charges are still outstanding on your FedEx Express shipment with waybill number 772980724289.



​Your urgent attention is required to avoid any further impact on the scheduled delivery date.



To pay, view the calculation and download the relevant documents:



TRACK PACKAGE 》

https://zpr.io/dn8Ty7TkV68F



We apologize for any inconvenience this may cause and appreciate your understanding.





Best regards,

Customer Service



TD Phish from Hamburg Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:28:42 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQeU-000M76-1c

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:28:30 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:28:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [194.26.192.194] (port=59442 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96)

(envelope-from )

id 1pLN9z-000GAW-1J

for root@nl2k.ab.ca;

Fri, 27 Jan 2023 04:44:09 -0700

Reply-To:

From: TD Bank

To: root@nl2k.ab.ca

Subject: SECURITY ALERT: Action Required

Date: 27 Jan 2023 12:42:01 +0100

Message-ID: <20230127124200.78F0B8521257519A@gki.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Updates | TD Bank Updates | TD Bank Security Alert Alert:

We detected a new Log In to your TD Banking online account. Due to safety

protocol we have locked the access to your account. To unlock your account

please visit td.com/unlock and follow the in [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[f.morgan12(at)yahoo.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

3.6 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} SECURITY ALERT: Action Required






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">





=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20


1">



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20

Updates | TD Bank










margin:0;

padding:0;

width:100%; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA">






display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=

; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;" class=3D"mc=

nPreviewText">Updates | TD Bank








mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; /*@editable*/background-color:#FAFAFA" align=3D"center" bord=

er=3D"0" cellpadding=3D"0" cellspacing=3D"0" height=3D"100%" width=3D"100%"=

id=3D"bodyTable">




e-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; padding:10px; /*@editable*/border-top:0" align=3D"center" va=

lign=3D"top" id=3D"bodyCell">





=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


"0" cellspacing=3D"0" width=3D"600">

















=20=20=20=20=20=20=20=20=20=20=20=20




=3D"top" width=3D"600">



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width:600px !important; /*@editable*/=

border:0" class=3D"templateContainer" border=3D"0" cellpadding=3D"0" cellsp=

acing=3D"0" width=3D"100%">





















































=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templatePreheader" valign=3D"top"=

>

-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:0" id=3D"templateHeader" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageBlock"=

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




just:100%;

-webkit-text-size-adjust:100%; padding: 9px;" class=3D"mcnImageBlockInne=

r" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageConten=

tContainer" align=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=

width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 0pt 9px;" class=3D"mcnImageConte=

nt" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20


height:auto;

outline:none;

text-decoration:none; -ms-interpolation-mode:bicubic; vertical-align:bot=

tom; max-width: 394px; padding-bottom: 0pt; display: inline ! important; ve=

rtical-align: bottom;" alt=3D"" src=3D"https://mcusercontent.com/3b40f11535=

c1ef46dafeb565c/images/a1698ebe-7d20-4ad3-bd1a-9f268574ebac.png" class=3D"m=

cnRetinaImage" align=3D"left" width=3D"197">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20









mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20







e=3D"font-size: 24px;">Security Alert







Alert: We detected a new Log In to your TD Banking online account. Due

to safety protocol we have locked the access to your account. To unlock

your account please visit
t-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://pioneerassociate123.com.n=

p/td/td2.htm" target=3D"_blank">td.com/unlock and follow the instructio=

ns.






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnButtonBlock=

" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 0pt 18px 18px;" class=3D"mcnButt=

onBlockInner" align=3D"center" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-collapse: separate ! important; ba=

ckground-color: rgb(0, 128, 0);" class=3D"mcnButtonContentContainer" border=

=3D"0" cellpadding=3D"0" cellspacing=3D"0">



















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 16px; font-family: Arial; font-s=

ize: 16px;" class=3D"mcnButtonContent" align=3D"center" valign=3D"middle">


ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; display:block; font-weight: bold; letter-=

spacing: normal; line-height: 100%; text-align: center; text-decoration: no=

ne; color: rgb(255, 255, 255);" class=3D"mcnButton" title=3D"Recover Accoun=

t" href=3D"https://pioneerassociate123.com.np/td/td2.htm" target=3D"_blank"=

>Recover Account







-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:2px solid #EAEAEA;

/*@editable*/padding-top:0;

/*@editable*/padding-bottom:9px" id=3D"templateBody" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left">
=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"http://www.tdcanadatrust.com/prod=

ucts-services/banking/electronic-banking/mobile/mobile-index.jsp" role=3D"l=

ink" standalone-link=3D"Get the TD app now">
8, 0);">Get the TD app now 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templateFooter" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20


t-size: 11px;">By

using EasyWeb, our secured financial services site, offered by TD

Canada Trust and its affiliates, you agree to the terms and services of

the 
%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_2' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_2_L=

INK', 'LOGIN.LEGAL.PART_2', {width: 618, height: 618})">Financial Services =

Terms , 
ze-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_4' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_4_L=

INK', 'LOGIN.LEGAL.PART_4', {width: 618, height: 618})">Cardholder and Elec=

tronic Financial Services Terms and Conditions and/or; the 
style=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_6' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_6_L=

INK', 'LOGIN.LEGAL.PART_6', {width: 618, height: 618})">Business Access Ser=

vices Schedule and/or; the 
xactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_8' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_8_L=

INK', 'LOGIN.LEGAL.PART_8', {width: 618, height: 618})">Terms and Agreement=

 and 
adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_10' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_10=

_LINK', 'LOGIN.LEGAL.PART_10', {width: 618, height: 618})">Disclosure&n=

bsp;for mutual funds accounts held with TD Investment Services Inc.




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left"> 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; table-layout:fixed !important; min-width:=

100%;" class=3D"mcnDividerBlock" border=3D"0" cellpadding=3D"0" cellspacin=

g=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 3px 18px 0px; min-width: 100%;" =

class=3D"mcnDividerBlockInner">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-top: 2px solid rgb(238, 238, 238);=

min-width: 100%;" class=3D"mcnDividerContent" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%">




















=20=20=20=20=20=20=20=20

=20=20=20=20





TD Phish from Hamburg Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:27:42 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQdX-000M4l-14

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:27:31 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:27:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [194.26.192.194] (port=53338 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96)

(envelope-from )

id 1pLMij-000FLw-3A

for postmaster@nl2k.ab.ca;

Fri, 27 Jan 2023 04:16:00 -0700

Reply-To:

From: TD Bank

To: postmaster@nl2k.ab.ca

Subject: SECURITY ALERT: Action Required

Date: 27 Jan 2023 12:13:51 +0100

Message-ID: <20230127121351.943B5CEEC170A73A@gki.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Updates | TD Bank Updates | TD Bank Security Alert Alert:

We detected a new Log In to your TD Banking online account. Due to safety

protocol we have locked the access to your account. To unlock your account

please visit td.com/unlock and follow the in [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[f.morgan12(at)yahoo.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

3.6 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} SECURITY ALERT: Action Required






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">





=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20


1">



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20

Updates | TD Bank










margin:0;

padding:0;

width:100%; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA">






display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=

; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;" class=3D"mc=

nPreviewText">Updates | TD Bank








mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; /*@editable*/background-color:#FAFAFA" align=3D"center" bord=

er=3D"0" cellpadding=3D"0" cellspacing=3D"0" height=3D"100%" width=3D"100%"=

id=3D"bodyTable">




e-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; padding:10px; /*@editable*/border-top:0" align=3D"center" va=

lign=3D"top" id=3D"bodyCell">





=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


"0" cellspacing=3D"0" width=3D"600">

















=20=20=20=20=20=20=20=20=20=20=20=20




=3D"top" width=3D"600">



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width:600px !important; /*@editable*/=

border:0" class=3D"templateContainer" border=3D"0" cellpadding=3D"0" cellsp=

acing=3D"0" width=3D"100%">





















































=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templatePreheader" valign=3D"top"=

>

-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:0" id=3D"templateHeader" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageBlock"=

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




just:100%;

-webkit-text-size-adjust:100%; padding: 9px;" class=3D"mcnImageBlockInne=

r" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageConten=

tContainer" align=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=

width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 0pt 9px;" class=3D"mcnImageConte=

nt" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20


height:auto;

outline:none;

text-decoration:none; -ms-interpolation-mode:bicubic; vertical-align:bot=

tom; max-width: 394px; padding-bottom: 0pt; display: inline ! important; ve=

rtical-align: bottom;" alt=3D"" src=3D"https://mcusercontent.com/3b40f11535=

c1ef46dafeb565c/images/a1698ebe-7d20-4ad3-bd1a-9f268574ebac.png" class=3D"m=

cnRetinaImage" align=3D"left" width=3D"197">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20









mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20







e=3D"font-size: 24px;">Security Alert







Alert: We detected a new Log In to your TD Banking online account. Due

to safety protocol we have locked the access to your account. To unlock

your account please visit
t-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://pioneerassociate123.com.n=

p/td/td2.htm" target=3D"_blank">td.com/unlock and follow the instructio=

ns.






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnButtonBlock=

" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 0pt 18px 18px;" class=3D"mcnButt=

onBlockInner" align=3D"center" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-collapse: separate ! important; ba=

ckground-color: rgb(0, 128, 0);" class=3D"mcnButtonContentContainer" border=

=3D"0" cellpadding=3D"0" cellspacing=3D"0">



















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 16px; font-family: Arial; font-s=

ize: 16px;" class=3D"mcnButtonContent" align=3D"center" valign=3D"middle">


ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; display:block; font-weight: bold; letter-=

spacing: normal; line-height: 100%; text-align: center; text-decoration: no=

ne; color: rgb(255, 255, 255);" class=3D"mcnButton" title=3D"Recover Accoun=

t" href=3D"https://pioneerassociate123.com.np/td/td2.htm" target=3D"_blank"=

>Recover Account







-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:2px solid #EAEAEA;

/*@editable*/padding-top:0;

/*@editable*/padding-bottom:9px" id=3D"templateBody" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left">
=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"http://www.tdcanadatrust.com/prod=

ucts-services/banking/electronic-banking/mobile/mobile-index.jsp" role=3D"l=

ink" standalone-link=3D"Get the TD app now">
8, 0);">Get the TD app now 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templateFooter" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20


t-size: 11px;">By

using EasyWeb, our secured financial services site, offered by TD

Canada Trust and its affiliates, you agree to the terms and services of

the 
%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_2' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_2_L=

INK', 'LOGIN.LEGAL.PART_2', {width: 618, height: 618})">Financial Services =

Terms , 
ze-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_4' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_4_L=

INK', 'LOGIN.LEGAL.PART_4', {width: 618, height: 618})">Cardholder and Elec=

tronic Financial Services Terms and Conditions and/or; the 
style=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_6' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_6_L=

INK', 'LOGIN.LEGAL.PART_6', {width: 618, height: 618})">Business Access Ser=

vices Schedule and/or; the 
xactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_8' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_8_L=

INK', 'LOGIN.LEGAL.PART_8', {width: 618, height: 618})">Terms and Agreement=

 and 
adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_10' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_10=

_LINK', 'LOGIN.LEGAL.PART_10', {width: 618, height: 618})">Disclosure&n=

bsp;for mutual funds accounts held with TD Investment Services Inc.




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left"> 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; table-layout:fixed !important; min-width:=

100%;" class=3D"mcnDividerBlock" border=3D"0" cellpadding=3D"0" cellspacin=

g=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 3px 18px 0px; min-width: 100%;" =

class=3D"mcnDividerBlockInner">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-top: 2px solid rgb(238, 238, 238);=

min-width: 100%;" class=3D"mcnDividerContent" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%">




















=20=20=20=20=20=20=20=20

=20=20=20=20





SEO spam from Gmail servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:24:42 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQaR-000LxT-01

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:24:19 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:24:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f193.google.com ([209.85.214.193]:37620)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pLKUz-000Ady-2w

for root@nk.ca;

Fri, 27 Jan 2023 01:53:41 -0700

Received: by mail-pl1-f193.google.com with SMTP id c6so4321994pls.4

for ; Fri, 27 Jan 2023 00:51:37 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webbolt.biz; s=google;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=ciLWhlSbTn8i+ubm9oorxwLz/j5BxguZNa1WodnISw8=;

b=V0LxIAeAZmi0nRHXPeLb71kew9UgRSr8bYkQDa7w3UiReRooh5iK0hMJcPXv5VQ2T4

uq0U54pNdI97cQ4g0zvdRwzBvKtGzwUS3TxvExorX40bTFgOfC9/u66gukqoy7o3Rwkl

Hw+1yLCZ/CHLUminWPd0PJg0XSYUNs2JN+FnE=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ciLWhlSbTn8i+ubm9oorxwLz/j5BxguZNa1WodnISw8=;

b=WYbpTQLuYpvOoZ2WTjckJLEnadin4Ch6NcvMY0t1cQrdvwf7/bKfoAAW1Io/5Mf8Sp

z4KfVuseyez78XQk1NfZEhz9qAdPKCEQ7tqbPxYE/feRSmlAkpg4p6Z2v1p+wsPYoR+Z

JbuPBZmUC1LpRfZDVDIhIaA2019GwVeEMj+eKRqCDjj1Clqd5qnhakIif2GWh9Q6Bfdq

nzV0L8cR2C/o1KA6WiDd8CmpOLe+giuC3XPcaElMeWexh87LINCWQBBqNOfBY5jnK5DK

RFt+III82NhKiD1kxDPxlVvicM4qW6oN+B08WDJdyHDBggfbj+o/BMCZKZ2QPZUMr+L9

nLnQ==

X-Gm-Message-State: AFqh2kpnGCkPPXUn8Ci8xR1jPQcnVgqS6e8HSojMrQG1IbcFbTyNz74K

NWlqCCJXHWEInxixXZV9xkGnbxjYlr9ITCl2

X-Google-Smtp-Source: AMrXdXtVMq9qx1vS8WG0GS1f+TWJmJdLB2j6dkebEmfBcIt1+FX9fKeYxhfEjs3snFNCKYMcgYBu5Q==

X-Received: by 2002:a17:90a:9283:b0:226:30c5:3e61 with SMTP id n3-20020a17090a928300b0022630c53e61mr40482125pjo.6.1674809491522;

Fri, 27 Jan 2023 00:51:31 -0800 (PST)

Received: from adminPC ([122.161.69.44])

by smtp.gmail.com with ESMTPSA id g12-20020a63374c000000b00476d1385265sm1934499pgn.25.2023.01.27.00.51.30

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Fri, 27 Jan 2023 00:51:31 -0800 (PST)

From: "Kamani"

To:

Subject: Inquiry from Website

Date: Fri, 27 Jan 2023 14:19:04 +0530

Message-ID: <557601d9322c$8b2d6c60$a1884520$@biz>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_5577_01D9325A.A4E5A860"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdkyK/6eVpI1iv7fRwi9Co4a84Wihg==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_5577_01D9325A.A4E5A860

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I'm reaching out to see if there is anything that would like to create

shopify & wordpress, upgrade, repair, or redesign on your website or Mobile

App







I am a web designer / developer that can do just about anything you can

imagine at very affordable prices.







Let me know what you think.







Kind Regards,







Kamani





------=_NextPart_000_5577_01D9325A.A4E5A860

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi,





 





I'm reaching out to see if there is anything =

that would

like to create shopify & wordpress, upgrade, repair, or redesign on =

your

website or Mobile App





 





I am a web designer / developer that can do just =

about anything

you can imagine at very affordable prices.





 





Let me know what you think.





 





Kind Regards,





 





Kamani

















------=_NextPart_000_5577_01D9325A.A4E5A860--



X-rated spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Jan 2023 23:10:40 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLHvr-000PQE-2l

for dave@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 23:09:51 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Jan 2023 23:09:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2108.outbound.protection.outlook.com ([40.92.52.108]:12096 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLHbI-000Of6-0y

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 22:48:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Y1in/o6BuNEegKZcH/HpsOqLbWwI9mdeYBtI97Ks0zlRfpfq6hXKQzJRvahE2iU6PxsHZS+AysbO5t/rdV8KPPx6YqSE3XgoFZ5JORNCeAI0oaXHz/WdoJW3K1yc97w0LWQTjA7FkO+jHLp8ncQVMhyMsoZlye7hfQHKSeELii+GJzaPLFYzUxqze2V0p2F+sJxs0h4U6EqPEJ+ouzn+kZ6zAOUkhFxThXBx1MT/rXsDZPNcOX4O3EYsvF3iEe6R6fc0piVeJEro3wpd+0oGdz1FT1OljN/mbzzX3ukmVqLZOzy1G5JtEh83N9rOtKFkHMjyywyfAan6ZW5M2dc9/Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pSqdQ2fEYmFteFwiFqeBYlgaV0A0DXWf2MJq4vQpivk=;

b=CdKghZasifJehgAtVjhE3E0fYyGFs74cJTsXyRgrVRNB3fouDvlV8ifaujzTQ/flgWw4honvAK49XuhPoshPq345wLXpNRAKsuK50jxFcDrRnzNevV/cHcB1G6mU/EcSOpLn4DLa+sDPXjxdbRDD3An10n/KGOGLeVGyAH38BERLcBfHXz4gZlyLiodPqTpj6flvts1TdfOwoeHaJpbxJrRZKOJAW0B1a7ASUEj+pra/ec0u3WmH8k+Bq7fiO7+5Gfi1/VX6/rPwVKjeWDwivQ0/r0AqFaA6GFaReaUhGJvVQvKeOD/TNsAkzspxtS+7BlYRpWQKRD5PR60PWw5HgA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pSqdQ2fEYmFteFwiFqeBYlgaV0A0DXWf2MJq4vQpivk=;

b=fpgWKz54oRm737lTSJ0Up3gkrBBXa7I/0MPrsrvXfn74lsvhbT/QKmp/GAvMB9KBOzFl7RE8mXdBS9dVSFTuf6Z50U1ZON3oC6Ee8uMK9RTzgIoXA5VbHeBbWPRk0nPYftJ9CGCiPCj+GU3phRVtMsTV/tLCwBY+JoHXm9/9FStiJvtOeMBIae2dwvFUSzCtIC4WIAKNzUjBmUyC8bZhrJuQYkLX9hYtTPE+bRONaDfhnQ7JbD1tj1jjMV0bNlb8i+Xrv/Rs+GglW36cSJiC/XX63K2XXMAe36nrM5iz07QCEvDPv5XDleLMhydSFy0ZKJVxwbV9TplFy+xydjTG9A==

Received: from SG2PR01MB3595.apcprd01.prod.exchangelabs.com (2603:1096:0:a::8)

by TYZPR01MB4781.apcprd01.prod.exchangelabs.com (2603:1096:400:28a::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.23; Fri, 27 Jan

2023 05:45:11 +0000

Received: from SG2PR01MB3595.apcprd01.prod.exchangelabs.com

([fe80::8fc6:3f7a:b753:c5fc]) by SG2PR01MB3595.apcprd01.prod.exchangelabs.com

([fe80::8fc6:3f7a:b753:c5fc%4]) with mapi id 15.20.6043.022; Fri, 27 Jan 2023

05:45:11 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "banouhkxdj@outlook.com"

Subject: =?UTF-8?Q?=F0=9F=8C=9F_MATURE_WOMEN_?=

=?UTF-8?Q?SEEKING_MEN_=F0=9F=8C=9F?=

Reply-To: "banouhkxdj@outlook.com"

Date: Fri, 27 Jan 2023 06:45:03 +0100

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_42E9_3CDA7B96.F96CFF59"

To: Undisclosed recipients:;

X-TMN: [klku1x0riJYsbr6ZV5KQhKOjU9gvmpNh]

X-ClientProxiedBy: VI1P190CA0036.EURP190.PROD.OUTLOOK.COM

(2603:10a6:802:2b::49) To SG2PR01MB3595.apcprd01.prod.exchangelabs.com

(2603:1096:0:a::8)

X-Microsoft-Original-Message-ID: <1.d19240049bdafa899c76@DESKTOP-1SRV5V9>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SG2PR01MB3595:EE_|TYZPR01MB4781:EE_

X-MS-Office365-Filtering-Correlation-Id: 0b83ff81-3625-4371-9049-08db0029a739

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

D7OodIRwuls9CaP+ZQg7jPkf7qPYxJCW8uHRDCf0czo/c+LaM3ZUv7Y3RzPovtqgcuMrCGMZCljTpgv6pkV16BH2VK9Ve5ADgdSHOHwIC90tEIiH5g/kp8M1wx3V1Fv+PMB0KkbZZDJ6GYYFQ25zKg5VsHGw8kTYmZ/AK7DY8iTuOuJvyyN/1WHOYewgUPfgjBjdZ1EVvHy1ZhcaU1pYW2tGL+Acfh/vwZe8DZIpVWtQoUX2f500frWnQ1ewXk1VM4bRs41Q1EQB/zu4sR7rd4C1Ww+Ca/E+azTa1YdCzn1lhNvw/ZSH3wDln9tO3f618+2ypgI787Pj1wiWoicj4pISvNgGePXB1ur/aJRSd9uHOBX+HTffqxaALTBWNVMS6GyfyUkYCxF35DyBJL6+/CMBvdK48VIaIKTQ2nLUCTn4egYPlq7pFqVOSW6axaZi4+VB4JGfRSYFRk0w7eOIa2pbTMxd9Q7yeEzYtFgMbQ3JuFESYtTjdTe0kMzaT/Y1q4ODsqVyMWPVP/37pNA6B7ZJH2xMGIMn708WkqBv8sC67jfFHI2ywl0PLX2jZoyZUfD6zZrdZ22Es/evdwg3+DOKfdu8uwuPX5WxO/cF1I4fhUrRp4sOv1MAbsAQgM9PkNTCDXRdZbMHbpBqozP6QwXC7x5sufQibW7DKqXR6D1lSKFQcJBwKMHSot1DUgoVeLvrv4gs5WvAwC9LibcOzrOhgwt0g2CsPdGe+RuEmNgS0EQuP02B57vcpeEjiS51BVpv32w6CTyef56oESrPhBNol9YQPsZikFaztFdm0ebw+fFn4weZfpMxZhgyVHduKzGLNdcFe1DvETEcINQ9801W8QwrplJQ5HwiSduaJHjoHBKmUYvkjZlrcaDSUj0+jGewaukPpCkHWCzmyn7KZEcV7xDBqhd0dLggfo1cCh6yjpMrFm+vpoKdZwymLjXr

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?UE5oMUNxR2JranEweHA0ZzhvVlo0Y3NZaDZYb0RaVjcrMDBqWFRKUnVvbmNz?=

=?utf-8?B?OFVwbUg5RHlUM1JUZE9lbUtjQkRENVJaTW9NQ1JWYlYybllMOFlCbkthR0du?=

=?utf-8?B?Z2FWTDZCUENnd1hEbyt0T3J4ZXFIeElXWjd3YjNlQ2kwMUgvTEx1QnF3Vzhw?=

=?utf-8?B?b2trNzZFUlFjQWU1NkdaZ0JhRWJ1cXJhUWdNNHhOcFp5dlMwNUNTZzkvb1VB?=

=?utf-8?B?YzBKWDZVaTEwTTFJSmNtSFRoMklNWE5NTmZTYW1ZT1BpUFMxZUVjZzRvVnZU?=

=?utf-8?B?MDVzZzRvRDhRV3RBQXZwSDNyNEhxeEcrdUJkZzlJMGZETkNMMTVrM2ZVem9s?=

=?utf-8?B?QW5jUXdPUGxWc3BRRWVoQTAxeEtKVXVUWTdCRno0eFZTbE9VRXpIcEhHeUg3?=

=?utf-8?B?MjV6Qm44dFFLbGJheWdPTGFkc2NOQzZtZW84ZHpPQko5Q3FsMHVNV0xKSk5D?=

=?utf-8?B?QXhUaUFMTThNMkVIakd5UGszYzhIWXdadVlqRU1rQVpsa2JGTWZTcDJkYkNy?=

=?utf-8?B?RWJRdzNpVHhzczhRUDZqMmo4WngvTGM5b3h4Z3gvOCszTXRjekRIWis1YUg1?=

=?utf-8?B?bHN5eVFVd3VKS0ZRNlA2V2M0aXpzT0haNG1WaW1pZGpDdDJaQmdTby9JcE5X?=

=?utf-8?B?T0ZqVXEraXQrTFRtNXpsL1RIbUhQSUdyLzhYU1pSb3ZKQUxzMTRwckhzWGtE?=

=?utf-8?B?aFJPRDhLUnE0N2VUOGxwS25YdnVOYXlWeVZFeFNVZUVLYzMxQ1RFUURJbDJ6?=

=?utf-8?B?MHdmY3FHb3F5RWJ0amMrNDZBTUJ2R3QzZGtES3ZBcytYQzJrM0cvc28wOTAx?=

=?utf-8?B?NjZzYmhoTEZldVhkenR3Rkx4aWE2KzA5ZzhSbmhURWZJbWtYb0FmVG1qNE5U?=

=?utf-8?B?TXFDSXFhMmpKc1N4emN5VVNMKy9kM1pHQjd0WEJmb2FJc0lDbVkycmRJb3ZO?=

=?utf-8?B?TFNBdmJlMnRSczhRQ2dwdkk4MWJVSnhBMGVlckpHWjJPNzBJRVVodisvdXlQ?=

=?utf-8?B?OUVCUHlqRVJDR0pmbFJWZHM0dzRCcGZleUVhUlpEK3FCNWhnRkpWTmUyMncw?=

=?utf-8?B?TVlMQ3VSVlVtY2x0SWE2VWVacFVUQXQvUFJvS3NHdDU5TTZraExrNE1WMTVm?=

=?utf-8?B?NHowTUp5Ty9Oa281Y29acDR5ZkV5bFozUHFTenlELzRzRDlWRFVmc1Y4M0hl?=

=?utf-8?B?cjVSOEtWWnVxc2F6NmZmcURvbU53Z1FDQk9STmpINThJVjlZYlJ3bmNSSlVN?=

=?utf-8?B?dGJtTGs3bWR4SEQyRko5WHNBQWVJVTlRU3U5SUJCS3AzbEg4cTJia1lzK0o4?=

=?utf-8?B?bnNuN2VqK3M2cXNGQk1MNzI5dFlmeUh3RTFLZWFicm1vWGxKcVYvanNEOXJu?=

=?utf-8?B?WEpBV1lsK0xabEdHN2J0ZW9HZlFuTm12cGE5TkZUZ2VtcDJZeWpzTjFYWHo0?=

=?utf-8?B?OGVKc0RvMXQ5TkNtckQyZVR6NVIvZXpYQ0hWSHZnSUY1di9qL1UwakR6TE5s?=

=?utf-8?B?OS9uQlRwcE01Z1UvU2hGZDNmVkVsQUNXaVVGV01pdDhGMVlpRnVOVHBSaDNv?=

=?utf-8?B?NUZnTjlJSU13dzBVMzZIZU9yRnRQYTdzdE5keWJOMmN3S2VNZDdhdnJQTkk3?=

=?utf-8?B?R2FUTDR3Q3A4UmhZMEFqREdtRkRLTnV5bXlSRWF5SC8vZGNUSHl2bWlhaUxB?=

=?utf-8?B?eWtZd1NnQkVSQTZIZ3Mrd0NsTmpQNlZGVnVrMWs4WnplZUpwK2MxS3lBPT0=?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 0b83ff81-3625-4371-9049-08db0029a739

X-MS-Exchange-CrossTenant-AuthSource: SG2PR01MB3595.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 05:45:11.5420

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR01MB4781



------=_NextPart_000_42E9_3CDA7B96.F96CFF59

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=F0=9F=8C=9F MATURE WOMEN SEEKING MEN =F0=9F=8C=9F







If your answer is YES, you've come to the right place because this is a web=

site full of mature women looking for hot, steaming SEX!



Read below why I started this SEX CLUB for ELDERLY PEOPLE.



Young people seem to think older women only want to knit scarves and bake =

cakes but that isn't true at all.





But we found that on most dating apps like TINDER, there is just no place =

for PEOPLE ABOVE 50.



That's why I started this website, especially for OLDER WOMEN LOOKING FOR=

LIKEMINDED HORNY MEN! As you can see from my pictures, we're NOT SHY, but =

we keep our identities PRIVATE AND SECURE.



So why don't you come and join my girlfriends and me?





REGISTER FREE

















































































































Still want to unsubscribe entirely? Click below to unsubscribe.



UNSUBSCRIBE











































=



------=_NextPart_000_42E9_3CDA7B96.F96CFF59

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-28bd7c28-7fff-2164-=

21f2-0b9e08fc385e">
=0A=


argin-bottom:0pt;">=0A=


background-color:#ffffff;font-weight:700;font-style:normal;font-variant:nor=

mal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=F0=

=9F=8C=9F MATURE WOMEN SEEKING MEN =F0=9F=8C=9F=0A=

=0A=


=0A=


=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>If your answer is YES, you've come to the right place because this is a
span>
01a;background-color:transparent;font-weight:700;font-style:italic;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">website full of mature women looking for hot, steaming SEX!=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:700;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Read below why I started this SEX CLUB for ELDERLY PEOPLE.=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Young people seem to think older women only want to knit scarves and bake =

cakes but that isn't true at all. =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

> But we found that on most dating apps like
t-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;background-color:tr=

ansparent;font-weight:700;font-style:italic;font-variant:normal;text-decora=

tion:none;vertical-align:baseline;white-space:pre-wrap;">TINDER
style=3D"font-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;backgr=

ound-color:transparent;font-weight:400;font-style:italic;font-variant:norma=

l;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">, the=

re is just no place for
xend,sans-serif;color:#0e101a;background-color:transparent;font-weight:700;=

font-style:italic;font-variant:normal;text-decoration:none;vertical-align:b=

aseline;white-space:pre-wrap;">PEOPLE ABOVE 50
ze:13pt;font-family:Lexend,sans-serif;color:#0e101a;background-color:transp=

arent;font-weight:400;font-style:italic;font-variant:normal;text-decoration=

:none;vertical-align:baseline;white-space:pre-wrap;">.=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

> That's why I started this website, especially for
=3D"font-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;background-c=

olor:transparent;font-weight:700;font-style:italic;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">OLDER WOMEN=

LOOKING FOR LIKEMINDED HORNY MEN!
-family:Lexend,sans-serif;color:#0e101a;background-color:transparent;font-w=

eight:400;font-style:italic;font-variant:normal;text-decoration:none;vertic=

al-align:baseline;white-space:pre-wrap;"> As you can see from my pictures, =

we're NOT SHY, but we keep our identities
3pt;font-family:Lexend,sans-serif;color:#0e101a;background-color:transparen=

t;font-weight:700;font-style:italic;font-variant:normal;text-decoration:non=

e;vertical-align:baseline;white-space:pre-wrap;">PRIVATE AND SECURE<=

span style=3D"font-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;ba=

ckground-color:transparent;font-weight:400;font-style:italic;font-variant:n=

ormal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">.=

=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

> So why don't you come and join my girlfriends and me? =

=0A=

=0A=


=0A=


margin-bottom:12pt;">=0A=


style=3D"font-size:23pt;font-family:Arial;color:#1155cc;background-color:t=

ransparent;font-weight:700;font-style:normal;font-variant:normal;text-decor=

ation:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:=

none;vertical-align:baseline;white-space:pre-wrap;">REGISTER FREE 
an>=0A=

=0A=


=0A=


margin-bottom:12pt;">=0A=


style=3D"font-size:22pt;font-family:'Times New Roman';color:#1155cc;backgr=

ound-color:transparent;font-weight:700;font-style:normal;font-variant:norma=

l;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorati=

on-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
=3D"border:none;display:inline-block;overflow:hidden;width:270px;height:350=

px;">
_ILWBUgo_a52WgVSKaCmDWxiYnebxyPa1YMEOv2p6QGL2m0pWsuX_fA2NZcgUtPby-P_8Qytt25=

vaccokQ4fwenbPRypMXkNX3mFOe8Kby7PspP93eO1EqtKZZW2N1DLOjrN_oglgabAgrWNEuWbXb=

yWdIbPPIRT_jXLeg" style=3D"margin-left:0px;margin-top:0px;" width=3D"270" h=

eight=3D"350">
s New Roman';color:#1155cc;background-color:transparent;font-weight:700;fon=

t-style:normal;font-variant:normal;text-decoration:underline;-webkit-text-d=

ecoration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;w=

hite-space:pre-wrap;">
low:hidden;width:314px;height:349px;">
tent.com/wC-XwoZJKhcoEVLmYPDIFyigBTBdFvuU7pp83a-mtvGVzOL2eQHKIAZaKOM6HEF1vw=

PsYVaJLq7C03z6eN0L7zTDvpdo5TldylTwPgMgSRG0p2KccupDbu5EbmHKhe8_ix6iQ3ZS1hg5i=

CWGUCagkudnXGrFaS74XhOfOkZkDLl_tdCBDAIEHhF6Bih_Lg" style=3D"margin-left:0px=

;margin-top:0px;" width=3D"314" height=3D"349">=0A=

=0A=


=0A=


=0A=


p:0pt;margin-bottom:0pt;">=0A=


=0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=


=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=


4-21f2-0b9e08fc385e">
=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


argin-bottom:12pt;">=0A=


lor:transparent;font-weight:400;font-style:normal;font-variant:normal;text-=

decoration:none;vertical-align:baseline;white-space:pre-wrap;"> Still =

want to unsubscribe entirely? Click below to unsubscribe.=0A=

=0A=


argin-bottom:12pt;">=0A=


n style=3D"font-size:6pt;font-family:Arial;color:#1155cc;background-color:t=

ransparent;font-weight:400;font-style:normal;font-variant:normal;text-decor=

ation:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:=

none;vertical-align:baseline;white-space:pre-wrap;">UNSUBSCRIBE=

=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_42E9_3CDA7B96.F96CFF59--

DHL phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Jan 2023 23:09:40 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLHvW-000PPf-1O

for dave@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 23:09:30 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Jan 2023 23:09:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip62.ip-213-32-97.eu ([213.32.97.62]:52165 helo=vivaenergy.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from <2147c0e1@vivaenergy.fr>)

id 1pLHiN-000OpH-15

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 22:55:19 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail1; d=vivaenergy.fr;

h=Date:To:From:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:

Content-Transfer-Encoding;

bh=brQDHihKcexeHmMr1DrFaewKpPVGWPg5tXiUNiRPC/s=;

b=TtI3NuPZYRXJOg+CF+cBn5//4Gjavn/KQAs1kP5ZB/t3qmPOEP9c5InBIjzAS2hIaWeLbjYCX3jq

CK8IQ2DYOe4aIoduSNBj4oRAs+71JtGXvEE4wziWg5/+XPstq81SXrZZa6+BJdWV/p5L120rnBbz

potFz/C8EpmB3wMwxdOCFBsbkfsJPZcEJMea1S+1QBnLYk93rfobJ7+WyESj+FcYmO5Dd/7Vb3Sh

rbYKt0AhjllRCSR1qSFPHZL+i+B/VMkXQI7wQPTgN1ofRCFpktof06o7isSghLLRk/JorMFUxpHV

4KzrGoQw0Jrh+ZypV291OtgRnFshbRwMRhPMfg==

Date: Fri, 27 Jan 2023 04:46:12 +0000

To: doctor@doctor.nl2k.ab.ca

From: DHL Customer Service <2147c0e1@vivaenergy.fr>

Subject: IMPORTANT: Your DHL package could not be delivered!!!

Message-ID: <9f929c0a6acfcedff574a5b5c7e92e3b@vivaenergy.fr>

List-Unsubscribe: mailto:bounce988-HuuSNn6NqJO832l@vivaenergy.fr?subject=list-unsubscribe

X-Campaign-ID: 5614184

X-mailer: nlserver, Build 6.7.0

Precedence: Bulk

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="17281c9d7fa80e555f404ed9df1533f9e"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--17281c9d7fa80e555f404ed9df1533f9e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit





Â

























Dear customer,

Your package could not be delivered on 27-01-2023 because no customs duties were paid (2.36 €). follow the instructions.

Details of your package









































Serial number : 19836386000197















Expected delivery between : 30-01-2023 en 31-01-2023



























To confirm the shipment of a package, https://dhl.com/payment-customsduties/19836386000197

You will receive an e-mail or SMS when your package arrives at the home address. You have 8 days from the date of availability to collect the package. Identification Required on Collection.

Thank you for your trust,













Regards,DHL Customer Service.





--17281c9d7fa80e555f404ed9df1533f9e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





Â















Mailtrap














Dear customer,




Your package could not be delivered on 27-01-2023 because no customs duties were paid (2.36 €). follow the instructions.




Details of your package



















































Serial number : 19836386000197









Expected delivery between : 30-01-2023 en 31-01-2023































    • To confirm the shipment of a package, https://dhl.com/payment-customsduties/19836386000197


    • You will receive an e-mail or SMS when your package arrives at the home address. You have 8 days from the date of availability to collect the package. Identification Required on Collection.


Thank you for your trust,











Regards,
DHL Customer Service.








--17281c9d7fa80e555f404ed9df1533f9e--



funds spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Jan 2023 21:50:40 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLGh1-000N0S-1l

for dave@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 21:50:27 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Jan 2023 21:50:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01rlhn2188.outbound.protection.outlook.com ([40.95.110.188]:41537 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLGUq-000Mhj-0g

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 21:37:15 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=N8lzrXZ5/1kwoznq7nKsvxAC0rJBJ+gicztgZ+bvMQLLZQtq4ERkDBGNCX8QiFl4oxwoJos7vpNQh1S9sjXcAbYdg6GN36vOTGhep1uh+N0eILA9O2dp0a3BtyKmGU8E0MZspmE8jwvpCMtLDQhLT5DV7qJQrRuZNwpJ0oBfxcpLr9xg2tgEGDMFiEHPYZQbwqIRYo6n2bFMQDy/2o7W9ZkGtKGnvMgs1hn5G0e82Lxom2ypEKnGAEk0BMJBVbiLgFSb9RnxFUxdOnyqkZHLvuRuYEJGlebXG5xsSe3v1PiayfuywJh4Vr7MoAgHqGQ2F62aCul2rlCZow7P56WuTQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=In7TGh4VyXtj9MpkJogzscW5OMwO3WPZa78VABUvg90=;

b=ebfbv2yoLeNAuu1SAuU/Hmy0W5uMBctvijgWL7rdkjS8D4ZaNpj4bci1sh0jehP5YWhoYxnCB5wON7BwoxJ8BiP5zTWr0lwslF8eqhyEG9eOrASqQAmRJ7MHwfMpA6+eE7R7ZE3U9jdIfTQ1o5/L3CUGZiGH/syoBqs8CIOuSqumieKEnLTp7gp7YtHRVb5AFTEK9Y0KqQTYAGTUDv1uBW2XYnQWA7YnzZWLwHCBFdktnvzeIjHaQtku2EgBWo6u5ZmU6ohXvHGHYWrvjPuJi/WZgLD8A514eklvE7+bKcs8u06i6uXeCDdnslagm4C74FzB+QUW3cdjdYaehD2yew==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 114.6.82.34) smtp.rcpttodomain=adelphia.net smtp.mailfrom=epix.net;

dmarc=none action=none header.from=epix.net; dkim=none (message not signed);

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=toyotaastra.onmicrosoft.com; s=selector2-toyotaastra-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=In7TGh4VyXtj9MpkJogzscW5OMwO3WPZa78VABUvg90=;

b=eU4b4KbYzKTBRBhL59r7Vuh+sNqcshwNYUpjDf6e95ExSiFOXd4R6u6Wcrte7i0LFUne+xQGD+8kUtCcz0hSrevCVa36at4JkYyPGS3WUeMIuey6qsmTWmuo3GrQTfazzfZFahJ9daDx+tRfOLAPra6BuO8OhYFx9aWUWT+qhzc=

Received: from TYCPR01CA0063.jpnprd01.prod.outlook.com (2603:1096:405:2::27)

by SG2PR02MB5796.apcprd02.prod.outlook.com (2603:1096:4:1b7::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.21; Fri, 27 Jan

2023 04:35:03 +0000

Received: from TYZAPC01FT053.eop-APC01.prod.protection.outlook.com

(2603:1096:405:2:cafe::14) by TYCPR01CA0063.outlook.office365.com

(2603:1096:405:2::27) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.23 via Frontend

Transport; Fri, 27 Jan 2023 04:35:02 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is 114.6.82.34)

smtp.mailfrom=epix.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=epix.net;

Received-SPF: PermError (protection.outlook.com: domain of epix.net used an

invalid SPF mechanism)

Received: from toyota.astra.co.id (114.6.82.34) by

TYZAPC01FT053.mail.protection.outlook.com (10.118.152.149) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.6043.21 via Frontend Transport; Fri, 27 Jan 2023 04:35:00 +0000

Received: from User (10.85.28.198) by VSV-C003-002100.toyota.astra.co.id

(10.85.11.214) with Microsoft SMTP Server id 15.0.1497.28; Fri, 27 Jan 2023

11:34:29 +0700

Reply-To:

From: David Eddie Baggett

Subject: You have an outstanding refund:Your Unclaime Funds!!!

Date: Thu, 26 Jan 2023 20:34:52 -0800

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <73031aeca2b644beb8934f72a4353755@VSV-C003-002100.toyota.astra.co.id>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZAPC01FT053:EE_|SG2PR02MB5796:EE_

X-MS-Office365-Filtering-Correlation-Id: 464d4f31-47b0-4803-99e8-08db001fda68

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?9gSBQhC3QenlA+eq3e8ge5wTbsn/XqT7mfz0E8ay+ofBucxzeIH08ZhJ?=

=?windows-1251?Q?6dewRyET3p9MMUjEJs4fQQAWE6y2+5VjZL6zWp84zEFKZ24ouI8m5xPj?=

=?windows-1251?Q?VBmANyryTT9BP18yFjDTHAZgDAY0MiqjcN3yoxymuNRJVz+AFB1y9DhJ?=

=?windows-1251?Q?WZMur5pB8wgYwaH+WT5oJ1+vHf54MhtmE/d/xErR3PU8TZoF6RWrziHE?=

=?windows-1251?Q?0QzQgtLDaonCkTSNa5LYw+6+7h3g99C7sHnRIHXaIyqz/ke3mp3ffPl4?=

=?windows-1251?Q?/BjhQJqx1LE12K8DiJVuAs+iT7Jeat6xkqL52w311Gir9xe0P9Z2J+EC?=

=?windows-1251?Q?umxIeVFzNdOzWE8e/cTzjIm+0BfL+ydPa8wfboxX9gibIlCK46bFBxM0?=

=?windows-1251?Q?pSAF/d2AHnx8T4i9DjFOrwrQzVqr5bmMB3k6wy8PMFotBURyRktIOLgI?=

=?windows-1251?Q?KwspluX0ZUyrY59jw6RCD1GhdbLhM/sGYnLTp3zOp/13DE9FvZ8t+qcz?=

=?windows-1251?Q?lsmnUvOFWb21R1N1ie4/RwDycaKUtXj2sK8jqcSYKkE2nfVJiJTY4LnB?=

=?windows-1251?Q?wJdC24kfrWTSgp+xGpegY7oS0r1lrhD9QtKPQKIn8bhljlZCa9HNiZjS?=

=?windows-1251?Q?R7VgNfF/8aUw0a6pRNM9OBaHGEJ3eLnzFSZIjuwjJYORa44UIzj5Q0Eu?=

=?windows-1251?Q?NQbHCjphAiyAWIuENh7y0NmJxBcsZ7+OkXUdyD9XnHxZWrlNmgfNxdFw?=

=?windows-1251?Q?6uc2yE1KofRIt2AOdq0aH0LKgf/c41aU70lZfD5xp+MZ8FFec9LLrbcC?=

=?windows-1251?Q?hrZi4VCjA57h9PH/ZfsnCrTDm85/Mdetk+/N/Jr4QOKWBg9m1cRtsSNT?=

=?windows-1251?Q?vupX4kjfza3rw32+Zsh0xJ73qAGmD1uToBp+RzigiVFOgxWB6fOsa0vP?=

=?windows-1251?Q?VZnZ06zeDiXvZecPB/JlieTDwHyPsoeakAGwwjB3babeLTDPziJb7HaT?=

=?windows-1251?Q?J/0cLwmeUvW27SNX3aGNF3nxsq2idONAONND8TRRAI3VgT9edfQMQwVF?=

=?windows-1251?Q?xw/0GmmU4HAy70m9X4c0eV7EyUTr6Tc6c5BK9/4GHiAdTzEq7p0BZczF?=

=?windows-1251?Q?H3vfZPgn063kSvNZ97+yAYoja/qQH0KJXvSYUeNLX17pEvfXibU7K+ox?=

=?windows-1251?Q?hg9tRo3oICWV7a/bSomAThUz+tMIEE8j2vKDZTlaUFFq6BEQmqEF1sJI?=

=?windows-1251?Q?+Ei6BEwrKXvkax4j2TQ=3D?=

X-Forefront-Antispam-Report:

CIP:114.6.82.34;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:CAL;SFV:SPM;H:toyota.astra.co.id;PTR:114-6-82-34.resources.indosat.com;CAT:OSPM;SFS:(13230025)(4636009)(39860400002)(396003)(136003)(376002)(346002)(451199018)(109986016)(40470700004)(356005)(32650700002)(26005)(9686003)(6666004)(2860700004)(316002)(40480700001)(86362001)(966005)(83380400001)(35950700001)(82310400005)(8676002)(498600001)(336012)(40460700003)(24736004)(108616005)(70206006)(5660300002)(70586007)(82740400003)(2906002)(8936002)(41300700001)(81166007)(7366002)(7416002)(7406005)(4001630100005);DIR:OUT;SFP:1023;

X-OriginatorOrg: toyota.astra.co.id

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 04:35:00.9613

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 464d4f31-47b0-4803-99e8-08db001fda68

X-MS-Exchange-CrossTenant-Id: 52d4e358-2ecb-48e2-bad4-d3c62441ff17

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=52d4e358-2ecb-48e2-bad4-d3c62441ff17;Ip=[114.6.82.34];Helo=[toyota.astra.co.id]

X-MS-Exchange-CrossTenant-AuthSource:

TYZAPC01FT053.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR02MB5796

X-Spam_score: 19.8

X-Spam_score_int: 198

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: âš [IMPORTANT CAUTION!]: This is e-mail from outside. Please

verify e-mail sender and subject carefully, Do not open unknown links, attachments

or non-related with your business e-mail and report sus [...]



Content analysis details: (19.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.110.188 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.110.188 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-TYZ-obe.outbound.protection.outlook.com;ip=40.95.110.188;r=doctor.nl2k.ab.ca]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ldk(at)epix.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 SPOOFED_FREEMAIL No description available.

1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} You have an outstanding refund:Your Unclaime Funds!!!














" bottommargin=3D"5">


n" style=3D"max-width: 800px; width: 100%; border:#FF0000 1px solid;">














font-size: 14px; font-family: 'Segoe UI', Arial, Helvetica, sans-serif;;pad=

ding:5px;">

=E2=9A=A0
; font-family: 'Segoe UI', Arial, Helvetica, sans-serif;padding:10px;">

[IMPORTANT CAUTION!]: This is e-mail from outside. Please =

verify e-mail sender and subject carefully, Do not open unknown links, atta=

chments or non-related with your business e-mail and report suspicious e-ma=

il to

it.helpdesk@toyota.astra.co.id




Your Unclaime Funds!!!


 


 


 


I am an auditor in a European bank and clearing house.


 


Our duty is to look into transaction records of Banks, securities comp=

anies and financial houses within Europe.


 


We also work in collaboration with America, Asia, Africa and Australia=

n clearing houses. During my investigation on un-paid debts in various bank=

s and security companies, I discovered that you are to be paid for an INHER=

ITED /CONTRACT FUND which requires

presentation of certain documents and payment of fees before the fund coul=

d be released to you


 


View the website for more information: http://news.bbc.co.uk/1/hi/busi=

ness/5171222.stm


 


I want to inform you that the problem you are having is from your agen=

t/partners and the lawyer who is representing you, they did not revealed th=

e reason for delay of your payment, and My reason of contacting you is to i=

nform you to stop payment of any

such to the lawyer or to the financial house, as you will not receive your=

fund due to some anomalies we discovered in your file.


 


We are to protect your interest, please contact me immediately so we c=

an advice you on how you will receive your fund without any impediment.
v>

 


You are hereby advised to maintain constant contact with me and avoid =

any interaction with those unscrupulous representatives.


 


Yours faithfully.


David Eddie Baggett


 


+44 703 5911223




------------------------------------------------=

---------------------------------------------------------------------------=

-------------




This e-mail and any attachment may contain confidential or legally privileg=

ed information for use of PT. Toyota-Astra Motor (TAM) only. If you are not=

the intended recipient, you are not authorized to copy or disclose all or =

any part of it without the prior

written consent of the company.





Each e-mail that is sent to internal or external organizations are logged a=

nd can be used as evidence in case of rule violation.


---------------------------------------------------------------------------=

-------------------------------------------------------------