CRA Phish from Lansing Michigan

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 15:04:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIy2y-000EnU-0O

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 15:03:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 15:03:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [67.227.204.26] (port=42637 helo=server80.a2zcreatorz.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIxGL-0002TS-0X

for sales@nk.ca;

Mon, 10 Jul 2023 14:13:40 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=alburhangoods.com; s=default; h=Content-Type:MIME-Version:Date:Subject:From

:Message-ID:Sender:Reply-To:To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=RxojVybV1RrxWoWuPR2VEhrN+Ed4u067BozEofVbW6M=; b=aw/nf3pZEp2y3o/NDzJwV64y27

0cNAaPRizD3XcYr6qC8VhIhDhy1RQaTDDPa7DHxIA0sYMPvytt/24wjgtHdnxfkYrxjuodMGqi9Mm

cfGiSDIJoeEM/wAFZIuWWPcNdtvQgycOu7mMH5tptn8uO87agq5Lspje7M7lgh9eKCz+zbu3LSNHl

ztdgQDPQ+bHRmYyOTq277uZdfMwoH+z6ocH0RSTPTkIPd7L0kFbpSpUsxctwmXyBJuuZ5+2B9VeB8

u1vxytLajT+EcaRJjlYZfChxDXKcN7LTOgbq4KeMjXvHODdAIWbDLkABwJDJVht5UAxhsyvWAH67A

RudAyRsw==;

Received: from pool-108-29-89-85.nycmny.fios.verizon.net ([108.29.89.85]:38886 helo=windows-dtx-16g.domain)

by server80.a2zcreatorz.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1qIxEX-001m64-19;

Tue, 11 Jul 2023 01:11:45 +0500

Message-ID: <55fbdd559ace7d5c7fcdcf1d0c1c8d3b@alburhangoods.com>

From: =?utf-8?B?Q2FuYWRhIFJldmVudWUgQWdlbmN5IC8gTm91dmVhdSBjb3Vy?=

=?utf-8?B?cmllciBkZSBsJ0FnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Subject: =?utf-8?B?TmV3IG1haWwgZnJvbSB0aGUgQ2FuYWRhIFJldmVudWUgQWdl?=

=?utf-8?B?bmN5IC8gTm91dmVhdSBjb3VycmllciBkZSBsJ0FnZW5jZSBk?=

=?utf-8?B?dSByZXZlbnUgZHUgQ2FuYWRh?=

Date: Mon, 10 Jul 2023 21:11:26 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="8273aac0f4df8a68f39a987100090590"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server80.a2zcreatorz.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - alburhangoods.com

X-Get-Message-Sender-Via: server80.a2zcreatorz.com: authenticated_id: backup@alburhangoods.com

X-Authenticated-Sender: server80.a2zcreatorz.com: backup@alburhangoods.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ***The Canada

Revenue Agency (CRA) sent you new mail online called:OTB noticeThis mail

may require your attention. If you have My Account, sign-in and cl [...]



Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.2 MISSING_HEADERS Missing To: header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[67.227.204.26 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

2.7 URI_WPADMIN WordPress login/admin URI, possible phishing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} =?utf-8?B?TmV3IG1haWwgZnJvbSB0aGUgQ2FuYWRhIFJldmVudWUgQWdl?=

=?utf-8?B?bmN5IC8gTm91dmVhdSBjb3VycmllciBkZSBsJ0FnZW5jZSBk?=

=?utf-8?B?dSByZXZlbnUgZHUgQ2FuYWRh?=



This is a multi-part message in MIME format.



--8273aac0f4df8a68f39a987100090590

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



English version=C2=A0** La version fran=C3=A7aise suit ***The Canada =

Revenue Agency (CRA) sent you new mail online called:OTB noticeThis mail =

may require your attention.=C2=A0If you have My Account, sign-in and click =

on "Mail" to read your mail.View Document Here=C2=A0If you signed up to =

receive mail online but don't have My Account, go to the=C2=A0CRA=C2=A0web =

page to register.This is an automated email message. Please do not =

reply.Version fran=C3=A7aise=C2=A0** The English version precedes =

***L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du nouveau =

courrier en ligne intitul=C3=A9 :Avis de la PTOCe courrier peut =

n=C3=A9cessiter votre attention.=C2=A0Si vous =C3=AAtes inscrit =C3=A0 Mon =

dossier, ouvrez une session et cliquez sur =C2=AB Courrier =C2=BB pour =

lire votre courrier.View Document Here=C2=A0Si vous vous =C3=AAtes inscrit =

pour recevoir votre courrier en ligne, mais n'=C3=AAtes pas inscrit =C3=A0 =

Mon dossier, allez =C3=A0 la page Web de l'ARC pour vous y inscrire.Ceci =

est un message =C3=A9lectronique automatis=C3=A9. Veuillez ne pas y =

r=C3=A9pondre=2E



--8273aac0f4df8a68f39a987100090590

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable




"http://www.w3.org/TR/REC-html40/loose.dtd">

English version=C2=A0** La version =

fran=C3=A7aise suit ***



The Canada Revenue Agency (CRA) sent =

you new mail online called:

OTB notice

This mail may require =

your attention.
=C2=A0

If you have My Account, sign-in and click =

on "Mail" to read your mail.


href=3D"https://playthirdstrike.today/wp-admin/adobe/BE/" rel=3D"nofollow =

noopener noreferrer" target=3D"_blank">View Document =

Here

=C2=A0



If you signed up to receive =

mail online but don't have My Account, go to the=C2=A0CRA=C2=A0web page to =

register.

This is an automated email message. Please do not =

reply.

Version fran=C3=A7aise=C2=A0*** The English version precedes =

***



L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du =

nouveau courrier en ligne intitul=C3=A9 :

Avis de la PTO

Ce =

courrier peut n=C3=A9cessiter votre attention.
=C2=A0

Si vous =

=C3=AAtes inscrit =C3=A0 Mon dossier, ouvrez une session et cliquez sur =

=C2=AB Courrier =C2=BB pour lire votre courrier.


href=3D"https://playthirdstrike.today/wp-admin/adobe/BE/" rel=3D"nofollow =

noopener noreferrer" target=3D"_blank">View Document =

Here

=C2=A0



Si vous vous =C3=AAtes =

inscrit pour recevoir votre courrier en ligne, mais n'=C3=AAtes pas =

inscrit =C3=A0 Mon dossier, allez =C3=A0 la page Web de l'ARC pour vous y =

inscrire.

Ceci est un message =C3=A9lectronique automatis=C3=A9. =

Veuillez ne pas y r=C3=A9pondre.





--8273aac0f4df8a68f39a987100090590--



McAfee phish from Google / Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 14:14:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIxGI-0002lE-1p

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 14:13:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 14:13:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f45.google.com ([209.85.166.45]:51364)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIxCC-0001Vs-17

for webmaster@nl2k.ab.ca;

Mon, 10 Jul 2023 14:09:23 -0600

Received: by mail-io1-f45.google.com with SMTP id ca18e2360f4ac-7837329a00aso159068939f.2

for ; Mon, 10 Jul 2023 13:07:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689019657; x=1691611657;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=aFSFzIE2gFo92fT2Heg4q7CyfMnbiC226e3Ez+S6Ams=;

b=kWnoGmpXuJ2CcdGMx+0sOtvqOTk4yeXaoIwLwzYgwe822QsowNat2fPbUQdmBTG/Uo

itCU1JiLLs9fXloJX1J0eKE1qjo8/a42Tm5n2bbeYvpAk5L74dXfYt9icZ1PEKJ+4DtK

sd1VlqpEIoLbYN+vbyaiqhRbur2oKyZuMvBXU+lmCOSp7wT0HtrJEED9HDd7f5x6+oZh

l6k4N5uBrrUwtqsYNXanZoEecCP8jadggizL4PztlAioU/bqM0rEYbxDgq5Q6tALH2Fk

U7mroUCDrLyPqZmRp6chqCnIgrjFMbg95CPhN2CA+B/lJ6A8v+D2jEH/sugxKYo3UFMI

RkVg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689019657; x=1691611657;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=aFSFzIE2gFo92fT2Heg4q7CyfMnbiC226e3Ez+S6Ams=;

b=cr/xBywuwtXPUhFBO2fMHdOUl+BpF/zX+r0eMeCzhR+i8vHT3aGp64OENw7GMYMxoM

rRBRrwtyJHF064uhgI0oM7j87HGl4UeV2qkhrOhTXSK5arJzqjalI+ZI9q00Kh01EZQc

4zTFg8lXZyQkc96Bmb/UNrlWY8fxijcl96ErE17cJvhi7KtaMamnsImQE0XiUv5bzGcF

q3ZSKHRVzNolgjhXV6Q2pA1k0tCSpWg9zzcTlR6W/YoLTp6+PlcxXr1jAfrcyGntmo/S

OtDLBB2sfh2Zc0UvGQKUpxVTDYfqvhsCmsyXrqrNi0+uA+qiPFS8tkZsNKUJGEOFe5ZS

n6Jg==

X-Gm-Message-State: ABy/qLa/OKaVTMRnbCK/w6IfP+gvp5h1AOASEqs09jZwqYIXvc7FxCzN

h2IXW5h8S0aQcqwfOYWlOKUUNkV5rrEvHu3zzHw=

X-Google-Smtp-Source: APBJJlG95Zc007dAf7cSSCw6+VcRZVxGyoXNcooI4drKrhUr+W9Aa7wn/3W8Gm5s8aVkdrx7tIqOyg==

X-Received: by 2002:a5d:9f14:0:b0:785:d0ee:46b7 with SMTP id q20-20020a5d9f14000000b00785d0ee46b7mr13345195iot.13.1689019657465;

Mon, 10 Jul 2023 13:07:37 -0700 (PDT)

Received: from 64.44.84.67 ([64.44.84.67])

by smtp.gmail.com with ESMTPSA id c22-20020a02a616000000b004165ac64e0asm75894jam.40.2023.07.10.13.07.35

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 10 Jul 2023 13:07:37 -0700 (PDT)

Message-ID: <64ac6509.020a0220.13b09.0304@mx.google.com>

From: "Oakley Mccarty"

Subject: Payment Confirmation Details<7654728>

To: "webmaster"

Content-Type: multipart/alternative; boundary="Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH"

MIME-Version: 1.0

Organization: Invoice Head Support manager

Date: Mon, 10 Jul 2023 13:07:36 -0700

X-Antivirus: AVG (VPS 230710-14, 7/10/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Order Details ( 10 July, 2023 )



Helpline Support:- +1 (888) 851-6501





Dear Client, webmaster@nl2k.ab.ca



Thank you for choosing our services.

=20



Your particular MCafee Total Care subscription expires today. Dependin=

g on the plan you select, this subscription will automatically renew.



Please consider the following purchasing summary.



=20

Billed To :



Consumer ID: 807599553985

Invoice No: 771-6309-MAT-36065

Order No: #APID-58271480



Product Description :=20





A/C Type: Personal PC

Product: MF/PC4

Charges: $329.99

Device: Window PC (4 users)

Tenure: 1 Year Subscription

Payment Mode: Auto-Debit



This email verifies that your subscription was extended for an additio=

nal year with the company on July 10, 2023, and is good until July 09,=

2024, at a cost of ($329.99).



Unless you turn it OFF, this subscription will automatically renew eac=

h year. 24 hours before the subscription period ends is the latest.



To unsubscribe the subscription, Call :- +1 (888) 851-6501





Best Regards=20



Oakley Mccarty

Invoice Head Support manager





--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline







=20








bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =

margin-bottom: 8pt;">
man", Times, serif; font-size: 16px;'>Order Details ( 10 July, 2023 )<=

br>
Helpline Support:- +1 (888) 851-6501






bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =

margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Dear User, webmaster@nl2k.ab.ca

T=

hank you for choosing our services.
 




bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =

margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Your particular MCafee Total Care subscr=

iption expires today. Depending on the plan you select, this subscript=

ion will automatically renew.




bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =

margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>Please consider the following purchasing=

summary.

 
Billed To :

=

Consumer ID: 613688419146
Invoice No: 643-6978-RYG-12246
Order N=

o: #PNWV-66310347

Product Description : 
trong>




bri, sans-serif; font-size: 15px; margin-top: 0cm; margin-right: 0cm; =

margin-bottom: 8pt;">
mes, serif; font-size: 16px;'>A/C Type: Personal PC
Product: MF/PC4=


Charges: $329.99
Device: Window PC (4 users)
Tenure: 1 Year =

Subscription
Payment Mode: Auto-Debit




nt-size: 16px;'>This email verifies that your subscription was extende=

d for an additional year with the company on July 10, 2023
u>, and is good until July 09, 2024, at a cost of ($329.99=

).

Unless you turn it OFF, this subscription will automatically=

renew each year. 24 hours before the subscription period ends is the =

latest.

To unsubscribe the subscription,
olor: rgb(41, 105, 176); font-family: "Times New Roman", Times, serif;=

font-size: 16px;'> 
Roman", Times, serif; font-size: 16px;'>
rgb(41, 105, 176);">Call :- +1 (888) 851-6501<=

/p>




nt-size: 16px;'>Regards,

Oakley Mccarty
Invoice Head Support=

manager













--Wfk9qWGZqxTBXF=_2usXEGz1HiNle7RNkH--



McAfee phish from Google / Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 12:45:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIvrS-0004zP-0N

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 12:43:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 12:43:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f171.google.com ([209.85.222.171]:55657)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIvOm-000HYt-2Z

for cyrus@nl2k.ab.ca;

Mon, 10 Jul 2023 12:14:15 -0600

Received: by mail-qk1-f171.google.com with SMTP id af79cd13be357-765a5b93b5bso447555885a.3

for ; Mon, 10 Jul 2023 11:12:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689012750; x=1691604750;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=ETyzXPDYUFz3BNJXhIEAeW1yeor7jYK2mpNoeWKowEI=;

b=avdO5m8mvwPEpyzXrrvRGoorRjeumPb9Ag2o2FOr6kdxwmVlJ2/rvQWFnKbNWW9I6V

Mppid98BdBPbcapWmNAdWNpKTPeLlETOm/ft80pV2WI603OT0iqnSQlGROLxIuCNlYy/

cwopvMsUQMfcrIOh+PKVTwporS/DaMU0cvQLl8XIfaQSfgLNlRDav7vRq72yMB+yoUUB

eDmSUXaLSoSto34gjOw9d0ZKWdlSJBqFtahNtTrXB4MivrFIsG/IWp64uwkYxQmi2u1l

XUnLV8uI4bHn1lzddKcLXUxTlHq7tHYhXh+Fl6pS36slSe/HeW6NrJ2dgVxlo3gFRMhg

o29g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689012750; x=1691604750;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=ETyzXPDYUFz3BNJXhIEAeW1yeor7jYK2mpNoeWKowEI=;

b=LJFn7sxI3TvYIy101GP4y5dyZopNmoAnYlTF4bmVtURRGB3GnQrME6ztzUSODEjCOU

OA9Q+EXsR751wn0w6TVoFj+ptnwPX+jo5rXFztAyz8v0O+kehHt7q5HscaSyHfsBRabp

VSLHaOri5hd/Jhf2TzgiBV41+glof9M7YsXqN7mjVOqB8be3+7WunwJtUjzgZbpCJSea

bNY5CPHYsULgzLmf+Dqo02nL/5wED6A57LgRhQoRHTQ4yI289M42PMzvI0Riav/9fWS9

J9eqGnctOiYm31lPuvR6mo575lQR+alOYtlPGf9MbGYMxIXGrMefrcANhC1x6ztOzMIm

/88A==

X-Gm-Message-State: ABy/qLZAn1F3aoE91OiVfSPWEO0ycWvpHlL/wHOqlyS+yyv22dumCKUc

YuH03s39IARDWYgO+mbg7LbtA8kJRL0GXel+ShY=

X-Google-Smtp-Source: APBJJlGZAn9fi0TuxXNb1SSkxcIw7bgzpWv3TtS331a1x8g92Di7XOw6qT4h3o1SDPaG+1FecAKGvw==

X-Received: by 2002:a37:b401:0:b0:763:dfe3:608f with SMTP id d1-20020a37b401000000b00763dfe3608fmr12677836qkf.71.1689012750142;

Mon, 10 Jul 2023 11:12:30 -0700 (PDT)

Received: from 45.15.140.2 ([45.15.140.2])

by smtp.gmail.com with ESMTPSA id c9-20020a05620a164900b00767db4a9f3bsm93241qko.93.2023.07.10.11.12.28

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 10 Jul 2023 11:12:29 -0700 (PDT)

Message-ID: <64ac4a0d.050a0220.fb60.0836@mx.google.com>

From: "Julia V. Graham"

Subject: Order Completed Successfully*402846

To: "cyrus"

Content-Type: multipart/alternative; boundary="4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P"

MIME-Version: 1.0

Date: Mon, 10 Jul 2023 23:42:29 +0530

X-Antivirus: AVG (VPS 230710-6, 7/10/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



=CE=A1urchase Details ( 10 July, 2023 )



Helpline Support:- +1 {408} 458 9852





Dear user, cyrus@nl2k.ab.ca



=CE=A4hank you for choosing our services.

=20

Your specific MCafee =CE=A4otal Care membership will end today. =CE=A4=

his subscription will auto-renew based on the plan you choose.



=CE=A1lease consider the following purchasing summary.



=20

Billed To :



Customer ID: 8190362297771

Invoice No: 529-6002-DXYR-62480=20

Order No: #KJWR-00001486



Product Description :=20



A/C Type: Personal PC

Product: MF/PC4

Charges: $329.99

Device: Window PC (4 users)

=CE=A4enure: 1 Year Subscription

=CE=A1ayment Mode: Auto-Debit



This email confirms that your subscription has been renewed for anothe=

r 1 year=20

with company for ($329.99) on July 10, 2023. and valid till July 09, 2=

024.



=CE=A4his subscription will Auto-Renew every year unless you turn it O=

FF. No later than 24 hours=20

of before the end of subscription period.



=CE=A4o cancel the subscription, Call :- +1 {408} 458 9852





We obliged to you



Gina Duffy

Sr Head (Accounts Handling Dept.)





--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">


); text-transform: none; text-indent: 0px; letter-spacing: normal; fon=

t-family: "Times New Roman"; font-size: medium; font-style: normal; fo=

nt-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; whi=

te-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norma=

l; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style: initial; text-decor=

ation-color: initial;'>=CE=A1urcha=

se Details ( 10 July, 2023 )

Helpline Support:- 
an>+1 {408} 458 9852
ng>


dent: 0px; letter-spacing: normal; clear: both; font-family: "Times Ne=

w Roman"; font-size: medium; font-style: normal; font-weight: 400; wor=

d-spacing: 0px; white-space: normal; orphans: 2; widows: 2; break-afte=

r: page; font-variant-ligatures: normal; font-variant-caps: normal; -w=

ebkit-text-stroke-width: 0px; text-decoration-thickness: initial; text=

-decoration-style: initial; text-decoration-color: initial; user-selec=

t: none;'>


indent: 0px; letter-spacing: normal; font-family: "Times New Roman"; f=

ont-size: medium; font-style: normal; font-weight: 400; margin-bottom:=

10px !important; word-spacing: 0px; white-space: normal; orphans: 2; =

widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=

xt-decoration-style: initial; text-decoration-color: initial;'>Dear us=

er, cyrus@nl2k.ab.ca

=CE=A4hank you for choosing our services.<=

br> 
Your specific MCafee =CE=A4otal<=

u> Care membership will end today. =CE=A4hi=

s subscription will auto-renew based on the plan you choose.

=CE=

=A1lease consider the following purchasing summary.

 
<=

strong style=3D"font-weight: 700;">Billed To :

=

Customer ID: 8190362297771
Invoice No: 529-6002-DXYR-14083 
>Order No: #KJWR-00001486

<=

u>Product Description : 

A/C Type: Personal P=

C
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users=

)
=CE=A4enure: 1 Year Subscription
=CE=A1ayment Mode: Auto-Debit=



This email confirms that your subscription has been renewed fo=

r another 1 year 
with company for ($329.99) on 
pan>July 10, 2023. and valid till July 09, 2024.
>
=CE=A4his subscription will Auto-Renew every year unless you turn=

it OFF. No later than 24 hours 
of before the end of subscrip=

tion period.

=CE=A4o cancel the subscription, 
>
);">Call :- +1 {408} 458 9852


gb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: n=

ormal; clear: both; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=

normal; orphans: 2; widows: 2; break-after: page; font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial; user-select: none;'>


rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing:=

normal; font-family: "Times New Roman"; font-size: medium; font-style=

: normal; font-weight: 400; margin-bottom: 10px !important; word-spaci=

ng: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>Respectfully

Usman Bouraima<=

br>Sr Head (Accounts Handling Dept.)







--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P--



UPS Phish from pphosted.com Atlanta Georgia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 12:44:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIvqp-0004VP-2I

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 12:43:11 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 12:43:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx0b-002b8002.pphosted.com ([148.163.140.11]:45834)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIuoG-0007Tk-2R

for root@nk.ca;

Mon, 10 Jul 2023 11:36:32 -0600

Received: from pps.filterd (m0198035.ppops.net [127.0.0.1])

by mx0a-002b8002.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 36AHJRpa024829

for ; Mon, 10 Jul 2023 13:34:34 -0400

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ups.com; h=from : to : subject :

mime-version : content-type : date : message-id; s=nespps1;

bh=JTdHBu+TnyOkBe2eKp1/lEre47FDzjssVCabPJE0IEU=;

b=E1s7E8q++IAg0NNYdRoMWp3Mfuwl+DBgrvLy8qIswXN94DtjyyGmcLIMVImVfg4tg3uM

7y/OzAHCyyEZORgvxaA+Zj+skF4AjpSyThSNpWE6r5cVsbgZ+7nqSB6A35b5kc+jZnoy

6Z1G3G9hj7XIxrBzpizA7tEtUHuI45fSZykeIBk274/sk0XQbtCEdPcUwhuSxK2L03ap

Y2bZ3g+Wt0AmkTy1sd9JQYs1gz3fQ37pEjvZdtyeezcg2uiaErqcKNcaDwSsxivrcpYE

VetnYUZ5XVwks+jZRBg2se/INVP7YyaJdL4w9YIOSuhJQMGQkYzLL3vebZFmZ1bclJcy Wg==

Received: from gappsappsagent2.ups.com (gappsappsagent2.ups.com [153.2.235.18])

by mx0a-002b8002.pphosted.com (PPS) with ESMTPS id 3rq0q1wng4-1

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)

for ; Mon, 10 Jul 2023 13:34:33 -0400

Received: from pps.filterd (gappsappsagent2.ups.com [127.0.0.1])

by gappsappsagent2.ups.com (8.17.1.19/8.17.1.19) with ESMTP id 36AHAlML020918

for ; Mon, 10 Jul 2023 13:34:33 -0400

Received: from gaalplpapp00239.ups.com (gaalplpapp00239.ups.com [153.2.244.7])

by gappsappsagent2.ups.com (PPS) with ESMTPS id 3rqn0m2yse-1

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)

for ; Mon, 10 Jul 2023 13:34:33 -0400

From: "UPS"

To: root@nk.ca

Subject: UPS Update: Package Scheduled for Delivery Tomorrow

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary=----NextPart_1689010473209.0000210305

Date: Mon, 10 Jul 2023 13:34:33 -0400 (EDT)

Message-ID: <41388260.610971.1689010473229.JavaMail.beawl@winsmtpappspp.ups.com>

X-Proofpoint-Virus-Version: vendor=nai engine=6500 definitions=10767 signatures=596816

X-Antivirus: AVG (VPS 230710-6, 7/10/2023), Inbound message

X-Antivirus-Status: Clean



------NextPart_1689010473209.0000210305

Content-Type: text/html; charset=UTF-8











UPS















































































































































------NextPart_1689010473209.0000210305--

UPS Phish from pphosted.com Atlanta Georgia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 12:44:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIvqp-0004VP-2I

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 12:43:11 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 12:43:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx0b-002b8002.pphosted.com ([148.163.140.11]:45834)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIuoG-0007Tk-2R

for root@nk.ca;

Mon, 10 Jul 2023 11:36:32 -0600

Received: from pps.filterd (m0198035.ppops.net [127.0.0.1])

by mx0a-002b8002.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 36AHJRpa024829

for ; Mon, 10 Jul 2023 13:34:34 -0400

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ups.com; h=from : to : subject :

mime-version : content-type : date : message-id; s=nespps1;

bh=JTdHBu+TnyOkBe2eKp1/lEre47FDzjssVCabPJE0IEU=;

b=E1s7E8q++IAg0NNYdRoMWp3Mfuwl+DBgrvLy8qIswXN94DtjyyGmcLIMVImVfg4tg3uM

7y/OzAHCyyEZORgvxaA+Zj+skF4AjpSyThSNpWE6r5cVsbgZ+7nqSB6A35b5kc+jZnoy

6Z1G3G9hj7XIxrBzpizA7tEtUHuI45fSZykeIBk274/sk0XQbtCEdPcUwhuSxK2L03ap

Y2bZ3g+Wt0AmkTy1sd9JQYs1gz3fQ37pEjvZdtyeezcg2uiaErqcKNcaDwSsxivrcpYE

VetnYUZ5XVwks+jZRBg2se/INVP7YyaJdL4w9YIOSuhJQMGQkYzLL3vebZFmZ1bclJcy Wg==

Received: from gappsappsagent2.ups.com (gappsappsagent2.ups.com [153.2.235.18])

by mx0a-002b8002.pphosted.com (PPS) with ESMTPS id 3rq0q1wng4-1

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)

for ; Mon, 10 Jul 2023 13:34:33 -0400

Received: from pps.filterd (gappsappsagent2.ups.com [127.0.0.1])

by gappsappsagent2.ups.com (8.17.1.19/8.17.1.19) with ESMTP id 36AHAlML020918

for ; Mon, 10 Jul 2023 13:34:33 -0400

Received: from gaalplpapp00239.ups.com (gaalplpapp00239.ups.com [153.2.244.7])

by gappsappsagent2.ups.com (PPS) with ESMTPS id 3rqn0m2yse-1

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)

for ; Mon, 10 Jul 2023 13:34:33 -0400

From: "UPS"

To: root@nk.ca

Subject: UPS Update: Package Scheduled for Delivery Tomorrow

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary=----NextPart_1689010473209.0000210305

Date: Mon, 10 Jul 2023 13:34:33 -0400 (EDT)

Message-ID: <41388260.610971.1689010473229.JavaMail.beawl@winsmtpappspp.ups.com>

X-Proofpoint-Virus-Version: vendor=nai engine=6500 definitions=10767 signatures=596816

X-Antivirus: AVG (VPS 230710-6, 7/10/2023), Inbound message

X-Antivirus-Status: Clean



------NextPart_1689010473209.0000210305

Content-Type: text/html; charset=UTF-8











UPS















































































































































------NextPart_1689010473209.0000210305--

Canada post phish from Finland

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 12:43:25 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIvqG-0004G6-3A

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 12:42:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 12:42:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [65.108.27.140] (port=52346 helo=managergram.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qItwm-000HHb-0U

for doctor@nk.ca;

Mon, 10 Jul 2023 10:41:16 -0600

Received: by managergram.com (Postfix, from userid 33)

id D003A4E265; Mon, 10 Jul 2023 19:32:44 +0300 (MSK)

To: doctor@nk.ca

Subject: You have an order that is still waiting for payment to be delivered!

Date: Mon, 10 Jul 2023 19:31:23 +0300

From: Canada Post

Message-ID: <5a01c6baa067d5077c7ca598ab94a892@managergram.com>

List-Unsubscribe: mailto:bounce719-Qs8P2AGwIUN3Xc3@managergram.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="13e28b05cef3a4e940d472738466bec79"

Content-Transfer-Encoding: 8bit

X-Antivirus: AVG (VPS 230710-6, 7/10/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--13e28b05cef3a4e940d472738466bec79

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

















Â



Dear customer,





We would like to inform you that your package



N° CA47******* is still awaiting instruction from you.



Â











Plan my delivery











-------------



Your Customer Service



Please do not reply to this email.







--13e28b05cef3a4e940d472738466bec79

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







=09






: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); =

line-height: 1.4em; background-color: rgb(255, 255, 255);">
ox-sizing: border-box; font-size: 10pt; line-height: 1.4em;">
baseline" src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAbMAAAB0CAMA=

AAA4qSwNAAABEVBMVEUASZD////tGy4APYsAQ41egrDK1+UAR48AQIwSTZKotc1/mr5Xfq8AN4g=

ARY4APIrc4eqfrsnvO0oAMYZ0k7r96eoANYf7ztG0xNmyvdP2+vz1l5zrAADF0uLyGSrs8fbsAB=

ggVpdUdKb0GChNbqPsABM3aaOUq8klXZz5vMDsAB7l6/Lw9Pj+8fLI1eR3lbvyaXLVITvybXa5y=

NvzeYFuPnlLQX6JNmeeMV3DJ0emLljaHzZqirUAKoN7OGz5vcH/3t/2panxUV4rQ4RfP3y2KEvn=

HDHOJEKSM2JwOnEAJYE7QoLxXGY4YZz4r7SANme2LVRlcaHwNUKRhKX0ho69J0mgLlj2oKXwRVP=

709baHze0Vlo+AAATDklEQVR4nO2di3/athbHARvLQGyTkrngXt4EaCCPlrXrgz7WrKSPJNvdXb=

du//8fcnWOLFuyZWISMuJ8+N3PdjNbCElf6ehItg65/FZZU27TBdhqZW2ZZU9bZtnTlln2tGWWP=

W2ZZU9bZtkTZ+YdGVvdZR1NYsyqX7St7rJqu3FmVm6ruyxtyyxz2jLLnrbMsqcts+xpyyx72jLL=

nu47s9Pnvzyjen666YKsUfeY2fNPH18vCq0+qFVYLF6+eLbpIq1H95TZ15/OkJSoVqvfefLi+aa=

LdnPdS2Zvz1oRXiG4/pNPWbeT95DZi0USMKZ+4bdsU7t3zF70+8uAscF28DHL1O4Zs7eLq4khtc=

KLTRf1+rpXzE5fpiOGFvJ1Zr2RlZgR3XQsyzFt6aptmqaeS7qkL7spXoKrhCi+leYQ+cYEfV4+j=

8WoXTXUdFao+HfTZnCirQCXNcuytPA6+7wvXmMSXhEqS7BhNV1V/5hWYWaavdHMMGaVgZi1PTje=

O+5JFYBLe3Mspb5zfLwjEdLhZk+6ZF/QS1TFoenESm33aP6DFNBepR9kPrSzpU2kF7FQ84HuyM1=

AiqN6vV4ZWFKhiNUbGYZRrgz9y/ac1YqpyGpMxuHFUvD1ZmmvbhjN0byUBlp6ZsSa82fa3ljI2o=

WrbamttTKkQlTOLJ+fSXV2qvTeROpR5h4vQ7s+jlAjGuQ/ca+syQp2kau1+LokQ8vghSqLY6pWa=

fOGGmpCOfWmf7nOrhIzfAUgbFW9GFzxurym2s7Uv5amb6ZnRqx6kHIqdAd9kA8AyZlWNZrKoZ+q=

i8zsYTx9yIxqpEnQ/EpeVZnT1yvZRQ6t8EtyllYzKFM7NNrmTCjr3AyaxzziF3dXZWYPgmsXa2X=

m4Ng5Ou71dkZHdtisDkMpjSU/UzAHMWY8vfglyGy3Mpp5Qp15etZGddk+RXU9ZFT9ZGjIrFJpeO=

LXMxMyGox7damN7R2gULkY75SP/e5oj3Z3d0dAHP6oMLzIrAkXdkclXkUY0Ee98XBvdrFO22j34=

NaeZeq6rgmdgZTosJ6IAz3MtFqLMyN2HtPnRXcDmQ0c0+pi1x6K+Xc9TN9ebumvi4wOtUT3EZnZ=

mjWmJZjyIYFWgs5kRLeg0Aa32chyzyJE1wILYmqa9oV+2HhD//BHJDLbc7XwCm1CamzbdJq0TW2=

tPogDQ79isTyjzQ3lqJjhRch06qHpiDIzKwAlkp4xo6RspxkZsybtqB704T0hfUxPro2MKmlOQ2=

a0q1iNsEuilaiw8tVmQv9CczDQY5nUgJnQoMjsWKoLdsuqmwoXKiUz1t3jRcKJuvrFkL0EyHQC/=

5gkwoxoVRh/kF7wNQJmOXsMJbDCWzU6xmYu7YjGEuP4bXX3QxhorxNy5cyc3ZBZjVoVj9s+6Hoj=

v/lxnM3iA0XNzDKF9QuOs/zcTefo51Iz08E0luPNhm08ciuyRUNmJRwcEWbosbD0grsfMsu50FC=

hW4rpi25DuhjVp5sgo9BeqrNFZrqpgWM8Ndm3g2U/4u2je6FN0MEW0JmrKy8A1MwaxxWqwK3S0E=

E15lo605ia2VxtntAzKdlE9hIA1ORLGQZahBnalgsdpgjhqsAM+2sxwAnOquegY6XoMUy/3AwZ9=

UM+KfNlPsjxCGZf3y/CoVX2fSRiVgWAmu9PzrpSKymZMY24r+W70vnpyFznfIbM5nHbaE6xSC7t=

KV44zSGzGpjTSk1iRnKsCuApecKSUmC2KzJDk0zXO2Acp/HlNtPihsiS/BDB16/6HOLMQh5m2U8=

8F6GlYZYzh/6yoNpdo6+vQ6tWYuOMoaxZNfj/cGZFZi6MwekXiRl6IHs1p7YnpReYOY28sBhjHo=

vrvNlVdxnQytsfCmZPVBkHzLxyjm9tjAWDQnTa0s2wsayLMi6NvbG4Alcxa5ZBxTCZbs7Z8m4mr=

XMSlJYZmOt67AZWqwnKi14CY0Ygw72GyKwGeyBHNDlY8GrgtQjMwOfI8xGIPRnzh/RN5brxeYDs=

Q6tzXfex/5MiZ6hcm847PRLMM8QRyk1KwqDDC5p+DIu5kdC3lcyYry8OKaI7Y+wiaTavVvEbvej=

IJeO8qMALYcxyGvXTJ+I40wdS+sCrCJk5MGDbrjq9csF5xjm1zg8fnxSuia2veJ4GzKqWvJ/tQi=

fyF9IaGg158FtQ/qYw86bw9X3Z4E3L+0MJSr0+w4VTTYYGUAQFGxg+M1IC0AIzYfsLFHgVjJlOi=

DXAfirmI2ikMBzPQst48DSfP7w86VwHW+tVPGtkFnHAYbmYn+FaRIfa5QXnFy/ChDdblZmNuVgw=

IfbWyIx1+aOu5WiOU2K7LsSBBXypCyqJXoLPjDMNJgDYMzFY+i69PuXlQ2ZDyylhYaaBMwOWyMh=

h8qGHy71YucTVdOcRfPzw8vw62OIDTcUMu2G+4TiONZ5I3ahbIfSqi2vuK21jjSZ1go/a8x5tVt=

xvWadtpO1XwZtGvTyr+itM3M8aOQTkiP4eZ5Yz2yIz9CjmJqbHmZAvHpDZdMo2t71gN0FMj+u2X=

syreiY5IPuXrAYUW6GzmmvSjw80FbOcOccyNme4pqoGM519QXt0owEcpW08JbNq84hqxtPR9c1k=

VsbpbJ0+CFQB51fWrMyiW7Ak8ec4GwYOL1zADE0+Z4YeBR9EzH/iMIV9/eY46KUWTe9pQvpZrGQ=

v5QHVecizObx8uqJLEq+wilnOEcpqhHRw04GpmNLXD9g6waOC6pqfn+XM0shfRrTReyAiJmxgPj=

sDsykwIw5w9u07royDuY20w/Q6a4f2pDm6CN0pHMbhXKiyHF+jVA5+CFuUuiT76bH130brC4vIS=

XxDSbvwZ9l2RbDV9qDKQMzG0mTlRhpUxczcZe06Ga3/OTUxXXO4Uxya/n4mqdVqwvKkVnMDx5H+=

zZK4NA1vdlv4m9aG/hdPr9dArmtJD+xj6WP7qC+iBrC1OMyLenyySIlNsUZzFN8IxXKs4Xxe7Lr=

S9GpbtdJwWKpFV/6u2EZU3WGg4JrpauMhbdZl2+CCVn2Hh9iK9yM2piexpj/4kJd1+Phpaz8NNp=

W7nyRb1xVDgth2inFic4lp033UV6bfu/qq8DPA449hS2MklevqO6lMM1Nu6O//EYNG9e7K5Xbrb=

NPVSatMM3uppNC5VEEDI1lYaiQXm65OWmWaWQKBg4dKaFcZySWvhtwtZZnZadKy+T8/qJmhkTxP=

MpL9XzddoZTKMrPPScxavx+qgfHRpjSSrd82XaGUyjKz5HcKYh5/GiOZ9I7BnVOWmf2W7FEcnCy=

HRvX4PLq59c+mK5RSWWamdhuZ9h9dCS1uJNMvazcqFTOXZEP/JCNL9Pjj2EIjeXCqZ0KWgplWyo=

aWMivsJ3n8MWznPrTOf3eyoUaMWWb0+1Jmhc77H5aL53PiM9t/v8narKB4zM3M6ApmhYMWCgOEH=

HB19kH/ofrZz+b8gI/M7DJr75azoeXMWsCpQxF1OvSPPgW4ePDg/PzpH3/8/PPl5eOHf/vVDZAV=

Ov+rZELH9Riz6ptNBm5dQUvns4MPlM5ff10+fPfw4fv3PxwmrbJDZIUD6TDt3ZWbYV8//vRMQHb=

1Ai2KbKUnaJtUltdn35LXZ/3z1ZEVFhlen2WF2Z/JzB48XColsoLyDfA7qCwz+2nJ63DMPQx8RF=

l/+TU9kZBt9xv/BSUdYmp1uPb3D35ffP/w4ccfwR25vHz37u/37wN3RB5lhVZWQvNkmVlOzezg5=

B36iu8TfUUlskL/86brk1KZZqY8eZbWYzyJIFtyGv6OKdPMVA9jWtdFVkg6V33nlGlmqgfVrUdL=

xTcZn3ZiH8zKY+psMztVOfu4qQjuh+wwdjqLxYPv3GP8MYYsO9NZemaag+dvYq/P6o7lupYWfbl=

Yd+Ddbit4E5o4glKez79a0aeeLeREl2ffvz99+uOjR9RZfPz44d9/HzIFVVUgK7TUX4ER3yxNPh=

ZG4pWwoWL+8QPlzciJF+I3qDJknr20kdIy6zZQu/OulJeuF+tGe2LsDqWX14m204RIGtW6H26Hj=

BuicmuCFjGOByeHS964ChU3jEmm0dYuKjPDaJaLJeEq6c4ajXJXel2/V2806njSVZ/Tm1JUQ3tA=

61yWoJEca4lyZZCL0bGHNLNyYhCD1Gdzg2T1khAIpBc8Fmh2ha4YHtD0T7LwcAr8q9Y10BYysjT=

A1KOs0Fd5jdowiDwmns1kZyGl0BvsaA8e+Ya7nvT6PTusNJRHVFCcdrkbOVyBh8QUp+34169wnp=

rfDzoAO0DnazoOAz2x84UQPknNLNUxqzR6JRjHg5R7jEpkyo0rLTx4JMQsyWHoi0hkIP84FhzOA=

mZTKaAma7xImDWhRO2eHEyJ3UsMy7YKs+awhzEw+NlTPCeYN3p6DiM7ToJiunBis2w6zniXj6gu=

RK+E0TeCaJNrG2fCa6mtlMhUhlF1/IyfR55Uxt3xniEEI2Qxd+TIQD4zGGgxZn4X9mLjbDYc7DV=

jWQXpk3r2Kszqlu3CyOLnBHEI110d4rXCiTkeYwGDMEzekByxQ5usm6YFZRk4clTXG0pYon1/kE=

a/x9ZlKNXizIKeONM02yZS/FY8AJqXIwP5zCBMWYwZBF+atKNH3yEDSzfdHS8vHwXF87BVLzks2=

0rMaBlr+SAcGaJps3hieF5/ws+6QwiK6ptYJmYkzNU6pDrOdA2p3vvG4VS1Yv3LhsPqMD7EyEDA=

zDNwoEWZ4bxwTNMbkhdCLzbggoanesVhDBeKhhhARdZ1mPGQnzDm+MF9iJ7Ez1YTLY+jLuoP3Qa=

z3J9rgaZ6HZWFBIoXF32MbiSYFDLbwQ9EmaE5YqEZROvImeVcuC/EOgAHzstBWyVETV2J2RsHzZ=

s/OZpiNDkMnDEX4hZAkLUL+aDqrTAjNw93lXAkBk6Iq8JbQMikIwsidx2FLYXMSjO4FmGG4SmOX=

Pi35O4HzPCItRgTDCyym8snhmVbKX5juVHNh30PP8rnSRx0lWBC85cAs5LYU26FWfJJixWQqdZm=

RKdT0FG81dBkHpsY5CaMDITMxjBbDCyZGYvxZVoRYxoyIxd5MXYPi7Chwwn86c3HmS9uDjFsH19=

Y6lKsVJv4Qdam3aj/tHZmuY83hqbeHbbbchgkXyysIzHFmYEzg5AuxhuJGXoUXsk2o5H5ZGbhkI=

WIX57Fg6OoCrYqs6mxE0Q8Ggkm1+8dQXrHD0whLmJuidkNghH7w0z5EIZAQBojFmMFPa9ZTTchW=

EZoOhkzHbyvgcQMPYqZq+vgCRiCVxHaxh3RNrLopq5uQovHvx600vps0Bt0raDNpfiAOIWJqwyi=

sWWGEFjstpg9vxmzhJCbGLbXi5UW90CmEyqoXbBXwZjZEP+wKTHDhsH0ntxCATOMAhbEokOPpc3=

zVwaHXckHcXVxSwaDGUJsb7ivT8OYOVw1sCKCE3tbzHJvb2IdlZMZCOkcx7Z2paj5QWQgn5kN7T=

STxpmYXAyzxpmZGJyPN4s4CeWjcet5wVb09UVhYLw5zqt4VCP8AhNtRu3oX2J2k4jEyW/uYJ/0u=

sz8EXHenrZR2Gj8OmPm/wxByAzr3A7ST8LWAGYWsa3hVGzzSPqpaol2E2Z+zH3XsjBCWRje0RyN=

LlxXRyty+z4I6NrBUtUhUpmw/dtzCKXnlnwrBdu9dN6CmCyWGEOOM8PpTmAGeylTF9LrmhyfEZh=

1x70yjqshH2bgsbQJ5u8mxXO8CTO/U7VnTfzeohTb1kP7LcVcvEVm14XWX/ZOo/97Iu1ZuW74/h=

VusfoBW3F/o8rjfvvMcs5IZCbGS8dldRjbUTSBe1I4aZ5+nlcHh12F2SzKjFhh0E1vJ7wb/DpOv=

lETkt8ms3joq1TIlr/SSITWYQNK3DrA3wrg9UGHDJhhmOzgWQw+hRnzX5IAKxhs/IbEmuOgY2N6=

3xcnGJZtHF+jpWZ2ZFRHsdUCcQZ1DFlYHZWEm/q8WZ147Um9J1HW96rVSapfHrqO3q7uPSqCNso=

iznhkTDzPm1RZxGenWa0a3ME3aX14o+hFegMXo+aIXjV8ZiWjWq3zltHonUmwHjJQzd29CyEQmk=

k/G/g1mJMicnba59TEsSxlFF2HdMcXXT3yY0o0bbekOxE+8NN0t/dO/PPFatRaaQKCEE2DQK3EC=

X+CL2wG8df07OAGXOXTGTHFpxi6WH94ZQF+p05ukVj+ivZawzs8EBMtljPB//3LWmlHpP9k2Y+f=

iSLKnz/8d3SD9VlG9DnlT7DCD4xn5U3vuO4XM/Af0xjI1sHLtIPsDuq+McudfmxdNdZa/bOshCN=

T6t4xy+W+vlr6Q/D91rdME7uXzOjE/fZlX4mt1e88+ZSRE7jJupfMQJ9/e12g4Fot3+Vo9fuFxb=

dfMw8sd4+ZUZ0++/XVt7Ozs9dPzs5evvrpc4bdDkn3mdl91ZZZ9rRllj1tmWVPW2bZ05ZZ9rRll=

j2pmNU2Hbx1q6VSxLad7BS3usvaicdv3Co72jLLnrbMsqcts+xpyyx72jLLnrbMsqcts+zp/4ys=

TBPZu6/IAAAAAElFTkSuQmCC" style=3D"box-sizing: border-box; vertical-align: =

middle; border-style: solid; border-width: 0px; margin-left: 0px; margin-ri=

ght: 0px; width: 148px; height: 51px;" />






: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); =

line-height: 1.4em; background-color: rgb(255, 255, 255);">=C2=A0






: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); =

line-height: 1.4em; background-color: rgb(255, 255, 255);">
ox-sizing: border-box; font-size: 10pt; line-height: 1.4em;">
"#000000" face=3D"Tahoma" style=3D"box-sizing: border-box;">Dear customer,<=

/font>






: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); =

line-height: 1.4em; background-color: rgb(255, 255, 255);">

-sizing: border-box;" />


">
ahoma" style=3D"box-sizing: border-box;">We would like to inform you that=

=C2=A0your package






: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); =

line-height: 1.4em; background-color: rgb(255, 255, 255);">
ox-sizing: border-box; font-size: 10pt; line-height: 1.4em;">
"#000000" style=3D"box-sizing: border-box;">
box-sizing: border-box;">
: bolder;">N=C2=B0=C2=A0
weight: bolder;">CA47*******=C2=A0
=3D"box-sizing: border-box;">is still awaiting instruction from you.=






ont-size: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 5=

1, 51); line-height: 1.4em; background-color: rgb(255, 255, 255);">=C2=

=A0






8); font-family: Roboto, sans-serif; font-size: 14px; background-color: rgb=

(255, 255, 255);">


; max-width: 100%; border-width: 0px; border-style: initial; border-color: =

initial; height: 39px; font-family: Arial, Helvetica, sans-serif; width: 22=

6px; color: rgb(34, 34, 34); border-spacing: 0px;">

=09

=09=09
er-box; line-height: 1.4em;">

=09=09=09

=09=09

=09


idth: 298px; padding: 0px; text-align: center; margin: 0px; line-height: 1.=

4em; background-color: rgb(0, 0, 139);" width=3D"260">
.gy/3wv2y" rel=3D"noreferrer" style=3D"box-sizing: border-box; color: rgb(0=

, 172, 255); text-decoration-line: none; background-color: transparent;" ta=

rget=3D"_blank">
e-height: 1.4em;">
line-height: 1.4em;">
4em;">Pl=

an=C2=A0my delivery







ont-size: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 5=

1, 51); line-height: 1.4em; background-color: rgb(255, 255, 255);">
yle=3D"box-sizing: border-box; font-size: 10pt; line-height: 1.4em;">------=

-------






ont-size: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(212, =

5, 17); line-height: 1.4em; background-color: rgb(255, 255, 255);">
yle=3D"box-sizing: border-box; font-size: 10pt; line-height: 1.4em;">
style=3D"box-sizing: border-box; font-size: 10pt; font-family: arial, helve=

tica, sans-serif; line-height: 1.4em;">
: border-box;">Your Customer Service






ont-size: 13px; font-family: Arial, Helvetica, sans-serif; color: rgb(51, 5=

1, 51); line-height: 1.4em; background-color: rgb(255, 255, 255);">
yle=3D"box-sizing: border-box; font-size: 10pt; line-height: 1.4em;">
style=3D"box-sizing: border-box; font-size: 10pt; font-family: arial, helve=

tica, sans-serif; line-height: 1.4em;">
: border-box;">Please do not reply to this email
=3D"box-sizing: border-box; font-size: 10pt; font-family: arial, helvetica,=

sans-serif; line-height: 1.4em;">
der-box;">.











--13e28b05cef3a4e940d472738466bec79--



PC World phish from mailjet France

Posted by Dave Yadallee on
Return-path: <64e21192.AWUAAB731WkAAAAAAAAAACDK0_kAAAABDtYAAAAAACOLcABkq_6K@a2329456.bnc3.mailjet.com>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 06:53:02 -0600

Received: from o90.p38.mailjet.com ([185.250.237.90]:42361)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from <64e21192.AWUAAB731WkAAAAAAAAAACDK0_kAAAABDtYAAAAAACOLcABkq_6K@a2329456.bnc3.mailjet.com>)

id 1qIqNC-000NhD-0p

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 06:52:18 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt;

d=aff2024.com; i=noreply@aff2024.com; s=mailjet; x=1689000618;

h=message-id:mime-version:from:from:reply-to:to:to:subject:subject:date:date:list-unsubscribe-post:

list-unsubscribe:x-priority:feedback-id:x-campaignid:x-csa-complaints:

x-dmid:x-mj-mid:x-mj-smtpguid:x-report-abuse-to:x-report-abuse:content-type;

bh=OFr+6SYIC2X9rDuYtHvrhRKlK3dq8ig3hBRnjnP+vdQ=;

b=JHrBAo5VYc8og34bUthM0stDjGlyjaH1WW5wdV56hYLT07iXLJiyvr9Kw

9JBmwWbohjnbuwuJQjJBTkBq0OD4e/s7UKcedWfUycbNB9pO4AD6PFfJCvly

f0sUhdgdMte6y/vwfFte2OWmECWyGyv6CDHyiEAQSdOtZXaFfIFyGg=

Message-Id: <64e21192.AWUAAB731WkAAAAAAAAAACDK0_kAAAABDtYAAAAAACOLcABkq_6K@mailjet.com>

MIME-Version: 1.0

From: PC World Department

Reply-To: Le Creuset Canada



To: dave@doctor.nl2k.ab.ca

Subject: Congrats dave

Date: Mon, 10 Jul 2023 08:48:14 -0400

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

=?utf-8?q?=3Cmailto=3Alistunsubscribe-4FU3-1J9WN-4E4C6E3F8A1E58EB68OGNY2448?=

=?utf-8?q?BFE4B4BBF727=40official=2Elecreuset=2Ecom=3E=2C?=

=?utf-8?q?_=3Chttps=3A=2F=2Fofficial=2Elecreuset=2Ecom=2F4FU3-1J9WN-4E4C6E3F8A1E58EB68?=

=?utf-8?q?OGNY2448BFE4B4BBF727=2Fuauto=2Easpx=3E?=

X-Priority: 2

Feedback-Id: 42.2329456.2183210:MJ

X-CampaignID: FQSZF

X-CSA-Complaints: csa-complaints@eco.de

X-dmid: 4FU3-1J9WN-68OGNY

X-MJ-Mid:

AWUAAB731WkAAAAAAAAAACDK0_kAAAABDtYAAAAAACOLcABkq_6KyRCnLafJS4GbH7OugDQFBgAhUCo

X-MJ-SMTPGUID: c910a72d-a7c9-4b81-9b1f-b3ae80340506

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

X-Report-Abuse: Please send abuse reports to abuse@dotdigital.com

Content-Type: multipart/alternative; boundary="=-1XixtEoSkiHCiaNNkbM88A=="

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Free shipping on orders over 99$ ( https://official.lecreuset.com/4FU3-1J9W=

N-68OGNY-1DAS2W-0/c.aspx ) View in browser https://official.lecreuset.com/4FU3-1J9WN-4E4C6E3F8A1E58EB6=

8OGNY2448BFE4B4BBF727/cr.aspx



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.250.237.90 listed in list.dnswl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mjt.lu]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[185.250.237.90 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Congrats dave

X-Antivirus: AVG (VPS 230710-4, 7/9/2023), Inbound message

X-Antivirus-Status: Clean







--=-1XixtEoSkiHCiaNNkbM88A==

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Free shipping on orders over 99$ ( https://official.lecreuset.com/4FU3-1J9W=

=3D

N-68OGNY-1DAS2W-0/c.aspx )



View in browser https://official.lecreuset.com/4FU3-1J9WN-4E4C6E3F8A1E58EB6=

=3D

8OGNY2448BFE4B4BBF727/cr.aspx



Free shipping on orders over 99$ ( https://official.lecreuset.com/4FU3-1J9W=

=3D

N-68OGNY-1DAS2W-0/c.aspx )



View in browser https://official.lecreuset.com/4FU3-1J9WN-4E4C6E3F8A1E58EB6=

=3D

8OGNY2448BFE4B4BBF727/cr.aspx



COOKWARE ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS2X-0/c.aspx=

=3D

)



BAKEWARE ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS2Y-0/c.aspx=

=3D

)



DINNERWARE ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS2Z-0/c.as=

=3D

px )



RECIPES ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS30-0/c.aspx =

=3D

)



SPECIAL OFFER



Toughened Nonstick Pro Cookware=3DE2=3D80=3D8B

Up to 40% Off

On regularly-priced items



SHOP NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAVBR-0/c.aspx=

=3D

)



OUR TOP PICKS=3DE2=3D80=3D8B



26 cm Fry Pan

$159

(value of $270)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS33-0/c.aspx =

=3D

)



3.6 L Braiser

$239

(value of $400)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAVBS-0/c.aspx =

=3D

)



30=3DC2=3DA0cm Stir Fry Pan

$229

(value of $385)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS35-0/c.aspx =

=3D

)



PLAY WITH TEXTURES



Ooey, gooey or crispy, the possibilities are endless with Toughened Nonstic=

=3D

k Pro=3DC2=3DA0Cookware.=3DE2=3D80=3D8B



LEARN MORE ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAVBT-0/c.as=

=3D

px )



SPECIAL OFFER



Toughened Nonstick Pro Cookware=3DE2=3D80=3D8B

Up to 40% Off

On regularly-priced items



SHOP NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAVBR-0/c.aspx=

=3D

)



OUR TOP PICKS=3DE2=3D80=3D8B



26 cm Fry Pan

$159

(value of $270)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS33-0/c.aspx =

=3D

)



30 cm Stir Fry Pan

$229

(value of $385)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS35-0/c.aspx =

=3D

)



3.6=3DC2=3DA0L Braiser

$239

(value of $400)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAVBS-0/c.aspx =

=3D

)



3.8 L Saucepan

$239

(value of $410)



BUY NOW ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS36-0/c.aspx =

=3D

)



PLAY WITH TEXTURES

Ooey, gooey or crispy, the possibilities are endless with Toughened Nonstic=

=3D

k Pro=3DC2=3DA0Cookware.=3DE2=3D80=3D8B



LEARN MORE ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAVBT-0/c.as=

=3D

px )



( www.facebook.com/lecreusetcanada )



( www.twitter.com/lecreusetcanada )



( www.pinterest.com/lecreusetcanada )



( www.instagram.com/lecreusetcanada )



Terms and Conditions: Purchase regularly-priced Toughened Nonstick Pro Cook=

=3D

ware and receive up to 40% off. Price indicated online already includes dis=

=3D

count. No coupon code required. Offer does not apply on=3DC2=3DA0sets, acce=

ssor=3D

ies or lids. Offer available online at LeCreuset.ca and in Le Creuset Bouti=

=3D

ques in Canada until August 3, 2023 or until supply lasts. Offer cannot be =

=3D

combined, is not retroactive, and may be modified or discontinued at any ti=

=3D

me, without notice.



Copyright =3DC2=3DA9 2023=3DC2=3DA0Le Creuset Canada Inc., All rights reser=

ved.



Our mailing address is:

Le Creuset Canada Inc.

740 Notre-Dame Street West

Suite 1505

Montreal, Quebec H3C 3X6

Canada



Unsubscribe / Se d=3DC3=3DA9sabonner https://official.lecreuset.com/4FU3-1J=

9WN-=3D

4E4C6E3F8A1E58EB68OGNY2448BFE4B4BBF727/uns.aspx=3DC2=3DA0 =3DC2=3DA0| Priva=

cy polic=3D

y ( https://official.lecreuset.com/4FU3-1J9WN-68OGNY-1DAS37-0/c.aspx ) / Po=

=3D

litique de confidentialit=3DC3=3DA9 ( https://official.lecreuset.com/4FU3-1=

J9WN=3D

-68OGNY-1DAS38-0/c.aspx )=3D

=



--=-1XixtEoSkiHCiaNNkbM88A==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit





Welcome to Our Team Final notice for AirPods customer rewards






w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
org/1999/xhtml" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:sc=

hemas-microsoft-com:office:office">



Cooking like a pro has never been this easy

CRA PHish from server.itexxiahosting.com

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Jul 2023 08:38:29 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIrzk-0007v2-1S

for dave@doctor.nl2k.ab.ca;

Mon, 10 Jul 2023 08:36:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 10 Jul 2023 08:36:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.itexxiahosting.com ([208.87.134.53]:35550)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qIjOf-000927-0Q

for sales@nk.ca;

Sun, 09 Jul 2023 23:25:21 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=diamine.io;

s=default; h=Content-Type:MIME-Version:Date:Subject:From:Message-ID:Sender:

Reply-To:To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=4CeWzFJISQeLe4Z2sHdnWhwmzYQSlXDivHXm5Ntch28=; b=lhTwYeAkj509bVa33dhLZ9G7yu

m2OaRbKnWRCr81SUKBx7XjUA9w6rtBD2ww07dQ8gd423l0hfHeNw/Df5dF1U7OP2gHOW8+QlE1HPI

bGV+cjgHHZa8BWfIryglbZTQPqRnPq4WtxAlG68rZ15Lde1D4fy+wAovjyF92JdDdWqNBiRjiCJge

HGIS0vsdcaQe5BIJX2I+CteWxWxMvLcGKVKqMs9LIe65IDbb3hUKqqFUNfPceHAY2vF+m5RMVYCH+

tB8elD1y9uK+7crS8jrM/IQjl3Tm4ynopTSdq/DxyR1Www4hp6Ibeuc6sJAIhj8s+hc7MG66lKpbM

osuMztQA==;

Received: from pool-108-29-89-85.nycmny.fios.verizon.net ([108.29.89.85]:51627 helo=windows-dtx-16g.domain)

by server.itexxiahosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1qIjN0-0001i7-1L;

Mon, 10 Jul 2023 05:23:33 +0000

Message-ID:

From: "Canada.ca"

Subject: =?utf-8?B?TmV3IG1haWwgZnJvbSB0aGUgQ2FuYWRhIFJldmVudWUgQWdl?=

=?utf-8?B?bmN5IC8gTm91dmVhdSBjb3VycmllciBkZSBsJ0FnZW5jZSBk?=

=?utf-8?B?dSByZXZlbnUgZHUgQ2FuYWRh?=

Date: Mon, 10 Jul 2023 06:23:17 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="47fd0e7cf50d2e1e9828881400077920"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.itexxiahosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - diamine.io

X-Get-Message-Sender-Via: server.itexxiahosting.com: authenticated_id: backing@diamine.io

X-Authenticated-Sender: server.itexxiahosting.com: backing@diamine.io

X-Source:

X-Source-Args:

X-Source-Dir:

X-Antivirus: AVG (VPS 230710-4, 7/9/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--47fd0e7cf50d2e1e9828881400077920

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



English version=C2=A0** La version fran=C3=A7aise suit ***The Canada =

Revenue Agency (CRA) sent you new mail online called:OTB noticeThis mail =

may require your attention.=C2=A0If you have My Account, sign-in and click =

on "Mail" to read your mail.View Document Here=C2=A0If you signed up to =

receive mail online but don't have My Account, go to the=C2=A0CRA=C2=A0web =

page to register.This is an automated email message. Please do not =

reply.Version fran=C3=A7aise=C2=A0** The English version precedes =

***L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du nouveau =

courrier en ligne intitul=C3=A9 :Avis de la PTOCe courrier peut =

n=C3=A9cessiter votre attention.=C2=A0Si vous =C3=AAtes inscrit =C3=A0 Mon =

dossier, ouvrez une session et cliquez sur =C2=AB Courrier =C2=BB pour =

lire votre courrier.View Document Here=C2=A0Si vous vous =C3=AAtes inscrit =

pour recevoir votre courrier en ligne, mais n'=C3=AAtes pas inscrit =C3=A0 =

Mon dossier, allez =C3=A0 la page Web de l'ARC pour vous y inscrire.Ceci =

est un message =C3=A9lectronique automatis=C3=A9. Veuillez ne pas y =

r=C3=A9pondre=2E



--47fd0e7cf50d2e1e9828881400077920

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable




"http://www.w3.org/TR/REC-html40/loose.dtd">

English version=C2=A0** La version =

fran=C3=A7aise suit ***



The Canada Revenue Agency (CRA) sent =

you new mail online called:

OTB notice

This mail may require =

your attention.
=C2=A0

If you have My Account, sign-in and click =

on "Mail" to read your mail.


href=3D"https://miladinovic.rs/mde/upload.php" rel=3D"nofollow noopener =

noreferrer" target=3D"_blank">View Document =

Here

=C2=A0



If you signed up to receive =

mail online but don't have My Account, go to the=C2=A0CRA=C2=A0web page to =

register.

This is an automated email message. Please do not =

reply.

Version fran=C3=A7aise=C2=A0** The English version precedes =

***



L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du =

nouveau courrier en ligne intitul=C3=A9 :

Avis de la PTO

Ce =

courrier peut n=C3=A9cessiter votre attention.
=C2=A0

Si vous =

=C3=AAtes inscrit =C3=A0 Mon dossier, ouvrez une session et cliquez sur =

=C2=AB Courrier =C2=BB pour lire votre courrier.


href=3D"https://miladinovic.rs/mde/upload.php" rel=3D"nofollow noopener =

noreferrer" target=3D"_blank">View Document =

Here

=C2=A0



Si vous vous =C3=AAtes =

inscrit pour recevoir votre courrier en ligne, mais n'=C3=AAtes pas =

inscrit =C3=A0 Mon dossier, allez =C3=A0 la page Web de l'ARC pour vous y =

inscrire.

Ceci est un message =C3=A9lectronique automatis=C3=A9. =

Veuillez ne pas y r=C3=A9pondre.





--47fd0e7cf50d2e1e9828881400077920--