Phish | Entries from August 2023

Telus Phish from Godaddy servers

World Bank Compansation phish from Russia

LinkedIn Phish from the czech republic

Barclay's Bank Phish from Western Somoa

Paypal Phish from Google Gmail

DDING-BOTTOM: 6px; MARGIN: 0px; LINE-HEIGHT: 1.2">New Order!!!。

Paypal Phish from Google

Mail Phish from 30 Knightsbridge Road, Suite 525 Piscataway NJ

Chinese domain phishing

Boots Phish from sendgrid

Welcome to Our Team Final notice for Oral B iO Series 9

Posted by Dave Yadallee on Thursday, August 31. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 31 Aug 2023 10:06:43 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qbk3L-000Bct-1j

for dave@doctor.nl2k.ab.ca;

Thu, 31 Aug 2023 09:57:51 -0600

Resent-From: The Doctor

Resent-Date: Thu, 31 Aug 2023 09:57:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sg2nlsmtp01.shr.prod.sin2.secureserver.net ([182.50.132.200]:39584)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qbj5A-000Ios-31

for sales@nk.ca;

Thu, 31 Aug 2023 08:55:48 -0600

Received: from 233.148.178.68.host.secureserver.net ([68.178.148.233])

by : HOSTING RELAY : with ESMTP

id bj24qgXgrQC9lbj24qKiEO; Thu, 31 Aug 2023 07:52:28 -0700

X-CMAE-Analysis: v=2.4 cv=RdFWSXhv c=1 sm=1 tr=0 ts=64f0a92d

a=jOfmBXDIgZ3f7RWJ7r0YaA==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19

a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=IkcTkHD0fZMA:10 a=jLT73KNRGXAA:10

a=UttIx32zK-AA:10 a=oz0Tc89kS62m_WjhOEcA:9 a=QEXdDO2ut3YA:10

a=kk-zCLGhz2LNTA5YLv3F:22 a=ovdgq_hFLMjbvb_0FUP8:22

X-SECURESERVER-ACCT: c72txf1nyol6

Received: from c72txf1nyol6 by bom1plzcpnl502768.prod.bom1.secureserver.net with local (Exim 4.95)

(envelope-from )

id 1qbj1v-002skE-Qh

for sales@nk.ca;

Thu, 31 Aug 2023 07:52:28 -0700

To: sales@nk.ca

Subject: Not Reachable? 17806692000 ?

X-PHP-Script: walmart.ind.in/sender.php for 49.37.249.223

X-PHP-Filename: /home/c72txf1nyol6/public_html/sender.php REMOTE_ADDR: 49.37.249.223

From: rajesh@letusbiz.com

Content-Type: text/plain; charset=UTF-8

Message-Id:

Date: Thu, 31 Aug 2023 07:52:19 -0700

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - bom1plzcpnl502768.prod.bom1.secureserver.net

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [9402249 484] / [47 12]

X-AntiAbuse: Sender Address Domain - bom1plzcpnl502768.prod.bom1.secureserver.net

X-Get-Message-Sender-Via: bom1plzcpnl502768.prod.bom1.secureserver.net: authenticated_id: c72txf1nyol6/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: bom1plzcpnl502768.prod.bom1.secureserver.net: c72txf1nyol6

X-Source:

X-Source-Args:

X-Source-Dir: walmart.ind.in:/public_html

X-CMAE-Envelope: MS4xfJU+iIqFgGiQ1MeWDpFzvktDSbYlZjbuyMzzPZWJUJQKOyJJJaLH4rIo9rOl3EsvSeaNaZ4zeylkzgTU5XbtsiOUkt/1wMtX2x15Jkgf/IyiSpPupfdJ

uu9fQ2cMjr0vvdnVytzczRpfg97hCrqEakTJ6k7d2QYObPFgX7joPgurifGKcpy2Pdf/DziCOjHIi5IQJqVB5jjsWCj98MApxgpQ8R8LCBf9TZclMwDxSA5t

5WQewRRL6Qd832bOzwhEXNI7vbr2edWfjxQYhvP39TI=

daveyadallee

Am I reaching the right Number?

Thank You

Rajesh

Posted by Dave Yadallee on Thursday, August 31. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 31 Aug 2023 08:42:25 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qbikk-000BWY-39

for dave@doctor.nl2k.ab.ca;

Thu, 31 Aug 2023 08:34:34 -0600

Resent-From: The Doctor

Resent-Date: Thu, 31 Aug 2023 08:34:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.l-start.ru ([185.18.44.230]:4336)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

id 1qbgpb-000PwW-0T

for doctor@nl2k.ab.ca;

Thu, 31 Aug 2023 06:31:31 -0600

Received: from User (79.110.62.154) by megaplan.l-start.ru (192.168.53.21)

with Microsoft SMTP Server id 8.3.485.1; Thu, 31 Aug 2023 15:29:21 +0300

Reply-To:

From: "Mrs. Diana Barbara. Nilsson"@doctor.nl2k.ab.ca

Subject: Congratulation!!! From World Bank Compensation Fund Program.

Date: Thu, 31 Aug 2023 05:29:21 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <6fca1312-a7a2-4690-afbc-e5d189a16753@alserver.l-start.ru>

To: Undisclosed recipients:;

X-Spam_score: 26.7

X-Spam_score_int: 267

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Attn: E-mail Owner / Beneficiary. OFFICIAL NOTICE: This is

to inform you that you've been selected by the WORLD BANK COMPENSATION FUND

PROGRAM COMMITTE to receive a compensation funds valued US $6,500,000.00

(Six Million Five Hundred [...]

Content analysis details: (26.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 NSL_RCVD_FROM_USER Received from User

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[79.110.62.154 listed in zen.spamhaus.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[ed02091960(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.5 HK_SCAM_N8 BODY: No description available.

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 HK_NAME_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.0 HK_SCAM No description available.

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 LOTTO_DEPT Claims Department

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Congratulation!!! From World Bank Compensation Fund Program.

Attn: E-mail Owner / Beneficiary.

OFFICIAL NOTICE: This is to inform you that you've been selected by the WORLD BANK COMPENSATION FUND PROGRAM COMMITTE to receive a compensation funds valued US $6,500,000.00 (Six Million Five Hundred Thousand United States Dollars) Only. You are among the 100 lucky e-mail owner that was selected for this year World Bank Compensation Fund Program. This selection process usually come up every year and luckily for you, your e-mail address is among the 100 e-mail addresses that was selected for the year 2023.

Your compensation funds valued US$6,500,000.00 (Six Million Five Hundred Thousand United States Dollars) Only from the WORLD BANK COMPENSATION FUND PROGRAM has been signed for immediate pay out to you, but you will have to contact our financial legal officer for further information on how to claim your World Bank Compensation Fund.

Contact details below

Name: Mr. Woodruff Clark. Edmond (Esq).

E-mail: ed02091960@gmail.com

The purpose of this program is to sustain economic growth, and reduce poverty around the world. We have several humanitarian aid programs worldwide, and as we give humanitarian aid to the vulnerable in American's, Africa, Asian and European Countries, we also derive at the conclusion of giving a financial aid to an individual business owner to promote creation of jobs and opportunities worldwide. Note, with this program, we have been able to support a lot of individual to become a Business Owner worldwide.

Kindly contact our financial legal officer on the email address above for your approved World Bank Compensation Fund valued US$6,500,000.00 (Six Million Five Hundred Thousand United States Dollars) Only.

Congratulations to you.

Yours Faithfully.

Mrs. Diana Barbara. Nilsson

World Bank Compensation Fund Committee.

Posted by Dave Yadallee on Thursday, August 31. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Aug 2023 21:44:00 -0600

Received: from [87.236.146.219] (port=35212 helo=windontownfc.co.uk)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qbYFX-000OoR-0j

for dave@doctor.nl2k.ab.ca;

Wed, 30 Aug 2023 21:21:47 -0600

Received: from yahoo.com.cn (localhost [IPv6:::1])

by windontownfc.co.uk (Postfix) with ESMTP id 96A6B83392D

for ; Thu, 31 Aug 2023 05:46:06 +0300 (MSK)

From: LinkedIn

To: dave@doctor.nl2k.ab.ca

Subject: Re: Request for Order Placement - doctor.nl2k.ab.ca Products

Date: 31 Aug 2023 04:46:06 +0200

Message-ID: <20230831044605.3AA90425E94C66CA@yahoo.com.cn>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_200D312B.1D43F538"

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Linked In New Order!!!ã€‚ Dear Supplier's dave

Content analysis details: (13.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[87.236.146.219 listed in bb.barracudacentral.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[87.236.146.219 listed in wl.mailspike.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: brandboost.sa.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: brandboost.sa.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: brandboost.sa.com]

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

1.4 FSL_HELO_FAKE No description available.

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[qiang_kang(at)yahoo.com.cn]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 GB_CUSTOM_HTM_URI Custom html uri

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list

Subject: {SPAM?} Re: Request for Order Placement - doctor.nl2k.ab.ca Products

------=_NextPart_000_0012_200D312B.1D43F538

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

w3.org/TR/html4/loose.dtd">

elvetica Neue", Helvetica, Arial, sans-serif; WHITE-SPACE: normal; WOR=

D-SPACING: 0px; TABLE-LAYOUT: fixed; TEXT-TRANSFORM: none; FONT-WEIGHT: 400=

; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 1; LETTER-SPAC=

ING: normal; BACKGROUND-COLOR: rgb(237,240,243); TEXT-INDENT: 0px; text-dec=

oration-style: initial; text-decoration-color: initial; font-variant-ligatu=

res: normal; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial" cellspa=

cing=3D"0" cellpadding=3D"0" width=3D"100%" align=3D"center" bgcolor=3D"#ed=

f0f3" border=3D"0">

LE>

HEIGHT: 1px; WIDTH: 1px; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRAN=

SFORM: none; COLOR: rgb(255,255,255); OUTLINE-WIDTH: medium; FONT: 14px &qu=

ot;Helvetica Neue", Helvetica, Arial, sans-serif; OUTLINE-STYLE: none;=

ORPHANS: 2; WIDOWS: 1; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,2=

55,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px" alt=3D"" src=3D"=

cid:viewmailhtml.jsp" norescale=3D"true">

------=_NextPart_000_0012_200D312B.1D43F538

Content-Type: application/octet-stream; name="viewmailhtml.jsp"

Content-Transfer-Encoding: base64

Content-ID:

PCFkb2N0eXBlIGh0bWw+DQo8aHRtbD4NCiAgICA8aGVhZD4NCiAgICAgICAgPG1ldGEgaHR0

cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1lZGdlIj4NCiAgICAgICAg

PGxpbmsgaHJlZj0iLi4vZmYyM2JmODMvc3R5bGUvY3NzL3JlYWRtYWlsLmNzcyIgcmVsPSJz

dHlsZXNoZWV0IiB0eXBlPSJ0ZXh0L2NzcyI+DQogICAgPC9oZWFkPg0KICAgIDxib2R5Pg0K

ICAgIDwvYm9keT4NCjwvaHRtbD4NCg==

------=_NextPart_000_0012_200D312B.1D43F538--

Posted by Dave Yadallee on Tuesday, August 29. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 29 Aug 2023 14:39:45 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qb5RU-000Ckb-1T

for dave@doctor.nl2k.ab.ca;

Tue, 29 Aug 2023 14:36:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 29 Aug 2023 14:36:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from meli.mnre.gov.ws ([202.4.37.25]:33334)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qb2cU-000GS8-2o

for doctor@nl2k.ab.ca;

Tue, 29 Aug 2023 11:35:20 -0600

Received: from localhost (localhost [127.0.0.1])

by meli.mnre.gov.ws (Postfix) with ESMTP id 9B832C186DC08;

Wed, 30 Aug 2023 06:33:10 +1300 (+13)

DKIM-Filter: OpenDKIM Filter v2.11.0 meli.mnre.gov.ws 9B832C186DC08

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnre.gov.ws;

s=default; t=1693330390;

bh=STquSPApllz0aVmC0W9KvoQWZCLlpruzZV3zgcqMYhg=;

h=Date:From:To:Subject:Reply-To:From;

b=O7DHxgJB+nmyq+5ozueSINnzRp2fNxDwfpwQ+aNKeqdyM68Fu/YEGRHBe7CAEEGnJ

CmEXn5bHDaIstBwq4PgsnPJrS5ahjsqJSCWNOuw4pEePd5iE+tMpOAYRn9rQBMINfB

59JtzeoTaTWzcI8K9JhtGiYUiajSMTgqgIYQySMvroztpEmZ4E8uFHXIVE5Qro3DKv

0aiM1R4JeHW2EI46WB2lK9yuQivn3bbpXquIQwaVKcXi4tMoyFQlJRk81eB285fv2Y

nMZU98QGm+UliwDA8b9d066QRNZgQHZpBr8Jmsm9gSqKgW+LfA1o4H79eVe6n9nbqt

+4ugTLfBzW3eQ==

X-Virus-Scanned: amavisd-new at mnre.gov.ws

Received: from meli.mnre.gov.ws ([127.0.0.1])

by localhost (meli.mnre.gov.ws [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id X0sK4aV1uIdB; Wed, 30 Aug 2023 06:33:08 +1300 (+13)

Received: from webmail.mnre.gov.ws (meli.mnre.gov.ws [202.4.37.25])

by meli.mnre.gov.ws (Postfix) with ESMTPSA id 84B1AC17FBCA1;

Wed, 30 Aug 2023 06:33:06 +1300 (+13)

DKIM-Filter: OpenDKIM Filter v2.11.0 meli.mnre.gov.ws 84B1AC17FBCA1

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnre.gov.ws;

s=default; t=1693330387;

bh=STquSPApllz0aVmC0W9KvoQWZCLlpruzZV3zgcqMYhg=;

h=Date:From:To:Subject:Reply-To:From;

b=tGsQfqwbgXtDhbUtKbJzMt606NQezSV34bgqwVptWuG3HA3pj3JZdk/DdIcEsdTUU

wtJQQXK4iegcbKLNBjef96uvcTk4N5Syg34VVvt4XuahsiIOUc6xyJXtc1I0yOn8L7

F6aAfYanFQ2Ma6IyP2uGfugJFMhNM8Wi5x2USrSNJQnCG18Lj+8ULvXPdl5vLMbEJn

EKbbTiAcO4Sq2CZGEVun0h7dw0IoXWDTnxusRvCkFUhpVoXNMs76aig/F7xUl1SoEh

iA7bVZLvFfCGwhD/y0PNvYTo9Ysrt8AtAhLpjiFVzr6LLT4G55rlgL5pK/ooSdkT7I

MGmBFhy4zCPDQ==

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_b652b1d218c5d4355905768145e46bae"

Date: Tue, 29 Aug 2023 18:33:06 +0100

From: Barclay's Bank Plc UK

To: undisclosed-recipients:;

Subject: Remittance Notification

Reply-To: mrshelenkeelan@mail2finance.com

Mail-Reply-To: mrshelenkeelan@mail2finance.com

Message-ID: <6054a2b1080a15c82aa502dfca766c59@mnre.gov.ws>

X-Sender: noreply@mnre.gov.ws

User-Agent: Roundcube Webmail/1.1.12

X-Spam_score: 22.3

X-Spam_score_int: 223

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Barclay's Bank PLC, UK 1 Churchill Place London, E14 5HP,

United Kingdom http://www.barclays.co.uk Dear Esteemed Customer, We at this

bank wish to congratulate and inform you that after a thorough review of

your Inheritance/Contract funds transfer release documents in conjunction

with the World Bank and the IMF assessment [...]

Content analysis details: (22.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[202.4.37.25 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[202.4.37.25 listed in bl.score.senderscore.com]

0.0 T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror)

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 YOU_INHERIT Discussing your inheritance

2.0 HK_SCAM No description available.

2.5 ODD_FREEM_REPTO Has unusual reply-to header

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.0 FILL_THIS_FORM Fill in a form with personal information

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FORM Lots of money if you fill out a form

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Remittance Notification

--=_b652b1d218c5d4355905768145e46bae

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII

--

Barclay's Bank PLC, UK

1 Churchill Place

London, E14 5HP, United Kingdom

http://www.barclays.co.uk

Dear Esteemed Customer,

We at this bank wish to congratulate and inform you that after a

thorough review of your Inheritance/Contract funds transfer release

documents in conjunction with the World Bank and the IMF assessment

report, your payment file was forwarded to us for immediate transfer of

a part-payment of US$800,000.00 to your designated bank account from

their offshore account with us

The audit reports given to us show that you have been going through hard

times by paying a lot of money to see to the release of your funds,

which has been delayed by some dubious officials.

We, therefore, advise that you stop further communication with any

correspondence outside this office since you do not have to pay any

money or fee to receive your funds as you have met up with the whole

fund's transfer requirements.

The only thing required from you is to obtain the Non-Residential

Clearance to enable us to credit your account directly by telegraphic

transfer or through any of our corresponding banks and send copies of

the fund's transfer release documents to you and your bankers for

confirmation.

Should you follow our directives, your funds will be credited and

reflected in your bank account within five (5) bank working days from

the day you obtain this Non-Residential Clearance.

For further details and assistance on this Remittance Notification,

kindly forward your

FULL NAME:

FULL CONTACT ADDRESS:

TELEPHONE and FAX NUMBERS:

Directly to my private; E-mail:

mrs.helenkeelan@hotmail.com/mrs.helenkeelan@tutanota.com

Yours sincerely,

Mrs. Helen Keelan

Head, International Banking Division.

Barclay's Bank PLC, UK.

--=_b652b1d218c5d4355905768145e46bae

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8

=3DUTF-8" />
eva,sans-serif'>

=

Barclay's Bank PLC, UK
1 Churchill Place
London, E14 5HP, Unite=

d Kingdom

=3D"noreferrer">http://www.barclays.co.uk

Dear Esteemed Cu=

stomer,

We at this bank wish to congratulate and inform you th=

at after a thorough review of your Inheritance/Contract funds transfer rele=

ase documents in conjunction with the World Bank and the IMF assessment rep=

ort, your payment file was forwarded to us for immediate transfer of a part=

-payment of US$800,000.00 to your designated bank account from their offsho=

re account with us

The audit reports given to us show that you=

have been going through hard times by paying a lot of money to see to the =

release of your funds, which has been delayed by some dubious officials.
/>
We, therefore, advise that you stop further communication with a=

ny correspondence outside this office since you do not have to pay any mone=

y or fee to receive your funds as you have met up with the whole fund's tra=

nsfer requirements.

The only thing required from you is to obt=

ain the Non-Residential Clearance to enable us to credit your account direc=

tly by telegraphic transfer or through any of our corresponding banks and s=

end copies of the fund's transfer release documents to you and your bankers=

for confirmation.

Should you follow our directives, your fund=

s will be credited and reflected in your bank account within five (5) bank =

working days from the day you obtain this Non-Residential Clearance.
=

For further details and assistance on this Remittance Notification, =

kindly forward your

FULL NAME:
FULL CONTACT ADDRESS:

/> TELEPHONE and FAX NUMBERS:

Directly to my private; E-mail: =

mrs.helenkeelan@hotmail.com<=

/a>/mrs.helenkeelan@tutano=

ta.com

Yours sincerely,
Mrs. Helen Keelan
Head=

, International Banking Division.
Barclay's Bank PLC, UK.

--=_b652b1d218c5d4355905768145e46bae--

Posted by Dave Yadallee on Tuesday, August 29. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 29 Aug 2023 14:39:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qb5QS-000C17-05

for dave@doctor.nl2k.ab.ca;

Tue, 29 Aug 2023 14:35:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 29 Aug 2023 14:35:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:47139)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qb2Bk-0003lX-0N

for doctor@nl2k.ca;

Tue, 29 Aug 2023 11:07:40 -0600

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-1c0db66af1bso24561615ad.2

for ; Tue, 29 Aug 2023 10:05:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1693328731; x=1693933531;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=A9auoFZbzOs9cwVaBj7HWeOfzWZgPou8l8WgPZ+N95E=;

b=PGBs5JR3abQN4KouDeWMZC1icPcwo2JE14UAkxNOw3qDVomjg2DuUJNfAHqrHynSMp

2d71rwLhCtPv4mwLK9z4wfi8lpULavkhAUIQCzpJiU5Wln7wIcL4EbMAMOVyjbwmVq13

lz/W3LlPAm2WiFp+ix+ZobF0El6LTNniVvPn4djWru9IdKvRi7t3GJo0JPn+b0tVmdwg

/55y4PD0PcmETEqUE2HM4h8mrZu3hn+bChK3HXNoSzAy6Q+zzJEeDomOLoE0+SA4w5Dx

Y4e5fNKNzzQv3eKiyBfu5urqpMjdmgwHC4sobBwpnMPdMmv4Xzh/NLmAg2W++NAJGtcs

l7SQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1693328731; x=1693933531;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=A9auoFZbzOs9cwVaBj7HWeOfzWZgPou8l8WgPZ+N95E=;

b=ZJT9sWHHUnBIPTkPMMaugb/nbe1HCQ9HymS1oMveK5Df6JM5XcwseguYOR8OxVsPqM

MZzg5PXxToe01wlZriHX6IcsA2vvF4TMhGt5h1w5GpByHvfuNv4C5PU2EqJN0s3bScVP

V4XrTJb34GVAyiQLjZQUxJwpmgHaPRBJO+pXsmDkun279HYzXAL1NmgUEahAlW+6rB55

DFIiBHQtWf/OgkRdaIJz37e78rChYgPFMAWrzaylqm2hgJbueAbHxKOAvHdy/0nb2YS/

FUr4fw7eZtIJAb/TE4o2gnCqaxvEfYQMP2NT4HxZ8Ehcuc1kuQuHYkFvBw+vVlMkaf7h

iKGA==

X-Gm-Message-State: AOJu0Ywbu+JSIwgogxEkhqrYmVWf5ns65MFRXaeLr+gH6PLn/X6skNwH

femQLw/GkAZXIRyAZPAONdUYDLmYegoYASwhGIQ=

X-Google-Smtp-Source: AGHT+IF6/hMXuXrodpmv9ON46d4aJlCJwyXgHoFT+oc9E+rDltf1iAyb+sZh+mSeI95TJL1ZqzrK2A==

X-Received: by 2002:a17:902:ea08:b0:1c0:a30e:2388 with SMTP id s8-20020a170902ea0800b001c0a30e2388mr19919478plg.31.1693322240397;

Tue, 29 Aug 2023 08:17:20 -0700 (PDT)

Received: from 122.155.174.106 ([103.47.18.52])

by smtp.gmail.com with ESMTPSA id bd10-20020a170902830a00b001bc56c1a384sm9391330plb.277.2023.08.29.08.17.19

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Tue, 29 Aug 2023 08:17:20 -0700 (PDT)

Message-ID: <64ee0c00.170a0220.f522a.f987@mx.google.com>

From: "Thanks"

Subject: Thanks

To: "doctor"

Content-Type: multipart/alternative; boundary="7xfMZZ1YfDfkvUD=_O4u97LUsJONYIBltj"

MIME-Version: 1.0

Date: Tue, 29 Aug 2023 08:17:19 -0700

X-Antivirus: AVG (VPS 230828-10, 8/28/2023), Outbound message

X-Antivirus-Status: Clean

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, P a y p a I:: Your card has been charged 472.99 USD for

order ID #444927and your order get delivered tomorrow if you want to cancel

call: 805 259 3658 -- This email has been checked for viruses by AVG antivirus

software. www.avg.com

Content analysis details: (5.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[donglautyeandigm(at)gmail.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 FSL_HELO_BARE_IP_2 No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Thanks

This is a multi-part message in MIME format

--7xfMZZ1YfDfkvUD=_O4u97LUsJONYIBltj

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hi,

P a y p a I:: Your card has been charged 472.99 USD for order ID #444927and=

your order get delivered tomorrow

if you want to cancel call: 805 259 3658

--

This email has been checked for viruses by AVG antivirus software.

www.avg.com

--7xfMZZ1YfDfkvUD=_O4u97LUsJONYIBltj

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hi,

P a y p a I:: Your card has been char=

ged 472.99 USD for order ID #4977666and your order get delivered tomorrow <=

br>if you want to cancel call: 805 259 3658

B-A1B8-4E2AA1F9FDF2">

-WIDTH: 512px; MARGIN: 0px auto; BACKGROUND-COLOR: rgb(255,255,255)" cellsp=

acing=3D"0" cellpadding=3D"0" width=3D"512" bgcolor=3D"#ffffff" border=3D"0=

">

x; PADDING-TOP: 5px; PADDING-LEFT: 16px; PADDING-RIGHT: 16px; BACKGROUND-CO=

LOR: rgb(246,248,250)" bgcolor=3D"#f6f8fa">

acing=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">

RATION: none; COLOR: rgb(0,115,177); DISPLAY: inline-block" href=3D"http://=

mail.cugb.edu.cn/coremail/XT/jsp/viewMailHTML.jsp?CSP=3Dtrue">

; WHITE-SPACE: normal !important; MARGIN: 0px; LINE-HEIGHT: 1.666">
yle=3D"FONT-SIZE: 35px; WHITE-SPACE: normal !important; COLOR: rgb(38,142,1=

97)" face=3Darial>Linked
ONT>

; WIDTH: 2px; WHITE-SPACE: normal !important; MARGIN: 0px; LINE-HEIGHT: 1.6=

66">

LY: roboto, robotodraft, helvetica, arial, sans-serif; BORDER-RIGHT: rgb(38=

,142,197) 1px solid; WIDTH: 30px; WHITE-SPACE: normal !important; BORDER-BO=

TTOM: rgb(38,142,197) 1px solid; PADDING-BOTTOM: 3px; PADDING-TOP: 3px; PAD=

DING-LEFT: 3px; MARGIN: 0px; BORDER-LEFT: rgb(38,142,197) 1px solid; LINE-H=

EIGHT: 1.666; PADDING-RIGHT: 3px; BACKGROUND-COLOR: rgb(38,142,197); border=

-radius: 5px">

"FONT-SIZE: 30px; WHITE-SPACE: normal !important; COLOR: rgb(255,255,255)" =

face=3Darial>In
>

; WIDTH: 15px; WHITE-SPACE: normal !important; MARGIN: 0px; LINE-HEIGHT: 1.=

666">

inter; TEXT-DECORATION: none; COLOR: rgb(0,115,177); MARGIN: 0px; DISPLAY: =

inline-block" href=3D"http://mail.cugb.edu.cn/coremail/XT/jsp/viewMailHTML.=

jsp?CSP=3Dtrue">

00%" border=3D"0">

ING-LEFT: 10px; PADDING-RIGHT: 0px" valign=3D"middle" align=3D"right">

FONT-WEIGHT: 400; COLOR: rgb(76,76,76); LINE-HEIGHT: 1.429; overflow-wrap: =

break-word">

=3D"40">

00%" border=3D"0">

ODY>

00%" border=3D"0">

PADDING-TOP: 18px; PADDING-LEFT: 24px; PADDING-RIGHT: 24px; BACKGROUND-COLO=

R: rgb(39,145,189)" bgcolor=3D"#2791bd" align=3D"center">

GIN: 0px; LINE-HEIGHT: 1.5">

00%" border=3D"0">

00%" border=3D"0">

>

8px; PADDING-LEFT: 24px; PADDING-RIGHT: 24px">

390px" cellspacing=3D"0" cellpadding=3D"0" width=3D"390" border=3D"0">

DING-RIGHT: 0px" align=3D"left">

HITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 4=

00; COLOR: rgb(0,0,0); OUTLINE-WIDTH: medium; FONT-STYLE: normal; OUTLINE-S=

TYLE: none; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; OUTLINE-COLOR: i=

nvert; TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-co=

lor: initial; font-variant-ligatures: normal; font-variant-caps: normal; -w=

ebkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">

LINE-STYLE: none; OUTLINE-COLOR: invert">

DING-RIGHT: 0px" align=3D"left">

OM: 0px; TEXT-ALIGN: center; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-=

RIGHT: 24px; BACKGROUND-COLOR: rgb(237,240,243)" cellspacing=3D"0" cellpadd=

ing=3D"0" width=3D"100%" align=3D"center" bgcolor=3D"#edf0f3" border=3D"0">=

>

DDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3D"center">

00%" border=3D"0">

DDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3D"center">

GIN: 0px; LINE-HEIGHT: 1.333">

DDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3D"center">

GIN: 0px; LINE-HEIGHT: 1.333; overflow-wrap: break-word">

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">© 2023

verdana, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WH=

ITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-S=

TYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2;=

WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0=

px; BACKGROUND-COLOR: rgb(237,240,243);=20

TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-color: in=

itial; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=

ext-stroke-width: 0px; text-decoration-thickness: initial">
OLOR: #177ce8">LinkedIn

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 40=

0; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPA=

CING: normal; BACKGROUND-COLOR: rgb(237,240,243); TEXT-INDENT: 0px; text-de=

coration-style: initial; text-decoration-color: initial; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial">

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">   UK Unlim=

ited Company, Wilton Plaza, Wilton Place, Luton 2.

verdana, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WH=

ITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-S=

TYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2;=

WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0=

px; BACKGROUND-COLOR: rgb(237,240,243);=20

TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-color: in=

itial; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=

ext-stroke-width: 0px; text-decoration-thickness: initial">
OLOR: #236bdc">LinkedIn

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 40=

0; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPA=

CING: normal; BACKGROUND-COLOR: rgb(237,240,243); TEXT-INDENT: 0px; text-de=

coration-style: initial; text-decoration-color: initial; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial">

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">   is a reg=

istered business name of

verdana, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WH=

ITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-S=

TYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2;=

WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0=

px; BACKGROUND-COLOR: rgb(237,240,243);=20

TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-color: in=

itial; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=

ext-stroke-width: 0px; text-decoration-thickness: initial">
OLOR: #2869d7">LinkedIn

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 40=

0; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPA=

CING: normal; BACKGROUND-COLOR: rgb(237,240,243); TEXT-INDENT: 0px; text-de=

coration-style: initial; text-decoration-color: initial; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial">

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">   UK Unlim=

ited Company.

verdana, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WH=

ITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-S=

TYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2;=

WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0=

px; BACKGROUND-COLOR: rgb(237,240,243);=20

TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-color: in=

itial; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=

ext-stroke-width: 0px; text-decoration-thickness: initial">
OLOR: #208bdf">LinkedIn

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 40=

0; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPA=

CING: normal; BACKGROUND-COLOR: rgb(237,240,243); TEXT-INDENT: 0px; text-de=

coration-style: initial; text-decoration-color: initial; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial">

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">  and the <=

/SPAN>

verdana, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WH=

ITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-S=

TYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2;=

WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0=

px; BACKGROUND-COLOR: rgb(237,240,243);=20

TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-color: in=

itial; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=

ext-stroke-width: 0px; text-decoration-thickness: initial">
e=3D"COLOR: #2067df">LinkedIn

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 40=

0; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPA=

CING: normal; BACKGROUND-COLOR: rgb(237,240,243); TEXT-INDENT: 0px; text-de=

coration-style: initial; text-decoration-color: initial; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial">

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">  logo are regis=

tered trademarks of

verdana, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WH=

ITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-S=

TYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2;=

WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0=

px; BACKGROUND-COLOR: rgb(237,240,243);=20

TEXT-INDENT: 0px; text-decoration-style: initial; text-decoration-color: in=

itial; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=

ext-stroke-width: 0px; text-decoration-thickness: initial">
OLOR: #2665d9">LinkedIn

ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FO=

NT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: =

2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(237,240,243); TEXT-INDENT: 0px; text-decoration-style: initial; text-deco=

ration-color: initial; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px;=20

text-decoration-thickness: initial">.
rted-space>

DING-LEFT: 0px; PADDING-RIGHT: 0px" align=3D"center">
inter; TEXT-DECORATION: underline; COLOR: rgb(106,108,109); DISPLAY: inline=

-block" href=3D"http://mail.cugb.edu.cn/coremail/XT/jsp/viewMailHTML.jsp?CS=

P=3Dtrue">

DDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3D"center">

GIN: 0px; LINE-HEIGHT: 1.333">

=2Ecom/email-signature?utm_medium=3Demail&utm_source=3Dlink&utm_campaign=3D=

sig-email&utm_content=3Demailclient" target=3D"_blank">

s-install.avcdn.net/ipm/preview/icons/icon-envelope-tick-green-avg-v1.png" =

alt=3D"" width=3D"46" height=3D"29" style=3D"width: 46px; height: 29px;"/><=

/a>

size: 13px; font-family: Arial, Helvetica, sans-serif; line-height: 18px;">=

Virus-free.
&utm_source=3Dlink&utm_campaign=3Dsig-email&utm_content=3Demailclient" targ=

et=3D"_blank" style=3D"color: #4453ea;">www.avg.com

href=3D"#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width=3D"1" height=3D"1"> <=

/a>

--7xfMZZ1YfDfkvUD=_O4u97LUsJONYIBltj--

Posted by Dave Yadallee on Tuesday, August 29. 2023

Hi,

P a y p a I:: Your card has been char=

ged 472.99 USD for order ID #4977666and your order get delivered tomorrow <=

br>if you want to cancel call: 805 259 3658

B-A1B8-4E2AA1F9FDF2">
=

=2Ecom/email-signature?utm_medium=3Demail&utm_source=3Dlink&utm_campaign=3D=

sig-email&utm_content=3Demailclient" target=3D"_blank">

s-install.avcdn.net/ipm/preview/icons/icon-envelope-tick-green-avg-v1.png" =

alt=3D"" width=3D"46" height=3D"29" style=3D"width: 46px; height: 29px;"/><=

/a>

href=3D"#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width=3D"1" height=3D"1"> <=

/a>

--7xfMZZ1YfDfkvUD=_O4u97LUsJONYIBltj--

Posted by Dave Yadallee on Monday, August 28. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 28 Aug 2023 07:12:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qabqZ-000JRV-00

for dave@doctor.nl2k.ab.ca;

Mon, 28 Aug 2023 06:59:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 28 Aug 2023 06:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from standard6.doveserver.com ([67.220.183.18]:49744)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qaXaq-000PpF-2p

for doctor@doctor.nl2k.ab.ca;

Mon, 28 Aug 2023 02:27:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=flexipack.com.ng; s=default; h=MIME-Version:Date:Content-Transfer-Encoding:

Message-ID:Subject:To:From:Content-Type:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=gydreCY/WzyfKdaJdNsjXEEA1z5almlAsM6Mg37FFAs=; b=BWV2KXVCwbeMkX+n7ZMLQZ4Lyy

jJ0LietHZV9oGnVswB8G0g37qMB28ElZ/2yS0F1mmejFETwiC+7raLWoQ6tmmforL8IqFg7JxrfMI

+WY8PBROWslMnuTiGmR6y/62at2hegpDAOZBDnGYLkT2dncx7S6u8q1BedW4ZA2itTPLUeJpxEzbt

R7iIB9rhohC83VYT7T8WTf0bw/i9TcSXhB/rre7ib7lF9Q9pfAx0tB9Kg4fZXUePPQzNayDt3S/f3

l7xaDM5jHVUkd//Z1VClNUXEKHqVR1K/HwYY2bTU+czN8Ncw3TfVbwYkD3bZXQ+6iuCtTcCh7/Lfu

c5xPtWcA==;

Received: from [108.165.249.2] (port=40081 helo=[127.0.0.1])

by standard6.doveserver.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1qaXYp-0008Rc-1U

for doctor@doctor.nl2k.ab.ca;

Mon, 28 Aug 2023 09:25:23 +0100

Content-Type: text/html

From: doctor administrator

To: doctor@doctor.nl2k.ab.ca

Subject: MaiIbox Storage Quota Limit; Exceeded!!! ||8/28/2023, 01:25:22 AM

Message-ID: <0dffac3c-d59e-8a5c-af4e-2f810bf1c603@webmaster.com>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 28 Aug 2023 08:25:22 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - standard6.doveserver.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - webmaster.com

X-Get-Message-Sender-Via: standard6.doveserver.com: authenticated_id: claro.santos@flexipack.com.ng

X-Authenticated-Sender: standard6.doveserver.com: claro.santos@flexipack.com.ng

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This sender has been verified from doctor safe senders list.

Mailbox quota notification for doctor@doctor.nl2k.ab.ca Email Storage almost

Full 19.84G / 20.00G

Content analysis details: (7.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[108.165.249.2 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} MaiIbox Storage Quota Limit; Exceeded!!! ||8/28/2023, 01:25:22 AM

X-Antivirus: AVG (VPS 230827-4, 8/27/2023), Inbound message

X-Antivirus-Status: Clean

text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Arial, Helvetica, sans-serif; font-size: small; font-style: =

normal; font-weight: 400; word-spacing: 0px; white-space: normal; orphans: =

2; widows: 2; background-color: rgb(255, 255, 255); text-decoration-style: =

initial; text-decoration-color: initial;">

letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; =

font-size: 15px; font-style: normal; font-weight: 400; word-spacing: 0px; =

white-space: normal; border-collapse: collapse; orphans: 2; widows: 2; =

font-stretch: inherit; background-color: rgb(255, 255, 255); =

text-decoration-style: initial; text-decoration-color: =

initial;">

=

width: 2px; background-color: rgb(2, 151, 64);">	border-image: none; width: 700px; font-family: Roboto, RobotoDraft, = Helvetica, Arial, sans-serif; background-color: rgb(243, 255, = 248);">This sender has been verified from doctor safe senders list.

Mailbox quota notification for
class=3D"yiv7036143922mailto-link" href=3D"doctor@doctor.nl2k.ab.ca" =

target=3D"_blank" rel=3D"nofollow noopener noreferrer" =

ymailto=3D"doctor@doctor.nl2k.ab.ca">doctor@doctor.nl2k.ab.=

ca

0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; =

font-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; =

white-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255,=

255); text-decoration-style: initial; text-decoration-color: =

initial;">

Email Storage almost Full

font-size: 15px;">

153); float: left; list-style-type: none;">

153); float: left; list-style-type: none;">

border-radius: 3px; border: 1px solid rgb(221, 221, 221); border-image: =

none; width: 100px; overflow: hidden; vertical-align: bottom; display: =

inline-block; min-height: 12px;">

width: 86px; text-align: center; color: rgb(255, 255, 255); line-height: 1;=

overflow: hidden; min-height: 12px;">

style=3D"color: rgb(38, 175, 30);">19.84G / 20.00G

font-size: 15px;">

letter-spacing: normal; font-family: Arial, sans-serif; font-size: small; =

font-style: normal; font-weight: 400; word-spacing: 0px; white-space: =

normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); =

text-decoration-style: initial; text-decoration-color: initial;">

Your email storage has exceeded its limits and needs to be increased =

immediately

letter-spacing: normal; font-family: Arial, sans-serif; font-size: small; =

font-style: normal; font-weight: 400; word-spacing: 0px; white-space: =

normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); =

text-decoration-style: initial; text-decoration-color: initial;">

click below to add more space on time to avoid missing new =

emails

background-color: rgb(212, 0, 0);" href=3D"https://r.brandreward.com/?=

key=3D524bd904dca51212b9301a580172b7f4&id=3Dss&url=3Dhttps://bafybeiat2p4dd=

fruvdavpulenl7ntjvccko276jmpm6l7b4mjtlulcbioa.ipfs.dweb.=

link/29%20uy%20ti%20nu%20yi.html#doctor@doctor.nl2k.ab.ca" =

target=3D"_blank" rel=3D"nofollow noopener noreferrer">
size=3D"4">Increase Your Email Storage

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

line-height: 22px; font-family: Roboto, RobotoDraft, Helvetica, Arial, =

sans-serif;">

arial, helvetica, sans-serif; vertical-align: baseline; font-stretch: =

inherit;">

inherit; vertical-align: baseline; font-stretch: inherit;">

inherit; vertical-align: baseline; font-stretch: inherit;">
size=3D"2">Don't risk losing new incoming messages!

class=3D"Apple-interchange-newline">

normal; font-family: Roboto, sans-serif; font-size: 14px; font-style: =

normal; font-weight: 400; word-spacing: 0px; border-top-color: rgb(211, 212=

, 222); border-top-width: 1px; border-top-style: solid; white-space: =

normal; border-collapse: collapse; box-sizing: border-box; orphans: 2; =

widows: 2; background-color: rgb(255, 255, 255); text-decoration-style: =

initial; text-decoration-color: initial; font-variant-ligatures: =

normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;">

style=3D"color: rgb(0, 172, 255); text-decoration: none; box-sizing: =

border-box; background-color: transparent;" href=3D"https://www.avast.=

com/sig-email?utm_medium=3Demail&utm_source=3Dlink&utm_campaign=3Ds=

ig-email&utm_content=3Demailclient" target=3D"_blank" =

rel=3D"noreferrer">

vertical-align: middle; box-sizing: border-box;" src=3D"https://s-install.=

avcdn.net/ipm/preview/icons/icon-envelope-tick-round-orange-animated-no-rep=

eat-v1.gif">

padding-top: 12px; font-family: Arial, Helvetica, sans-serif; font-size: =

13px; box-sizing: border-box;">Virus-free.
234); text-decoration: none; box-sizing: border-box; background-color: =

transparent;" href=3D"https://www.avast.com/sig-email?=

utm_medium=3Demail&utm_source=3Dlink&utm_campaign=3Dsig-email&u=

tm_content=3Demailclient" target=3D"_blank" rel=3D"noreferrer">www.avast.=

com

style=3D'margin: 0px; color: rgb(60, 97, 170); text-transform: none; =

text-indent: 0px; letter-spacing: normal; font-family: -apple-system, =

BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Apple=

Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 14px; =

font-style: normal; font-weight: 400; word-spacing: 0px; white-space: =

normal; orphans: 2; widows: 2;' rel=3D"nofollow noopener =

noreferrer">

size=3D"1" align=3D"left" style=3D"text-transform: none; text-indent: 0px; =

letter-spacing: normal; font-style: normal; word-spacing: 0px; white-space:=

normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); =

text-decoration-style: initial; text-decoration-color: initial;">

none; letter-spacing: normal; font-family: Roboto, sans-serif; font-size: =

14px; font-style: normal; font-weight: 400; word-spacing: 0px; =

border-top-color: rgb(211, 212, 222); border-top-width: 1px; =

border-top-style: solid; white-space: normal; border-collapse: collapse; =

box-sizing: border-box; orphans: 2; widows: 2; background-color: rgb(255, =

255, 255); text-decoration-style: initial; text-decoration-color: =

initial;=20

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;">

padding-top: 13px; box-sizing: border-box;">
255); text-decoration: none; box-sizing: border-box; background-color: =

transparent;" href=3D"https://www.avast.com/sig-email?=

utm_medium=3Demail&utm_source=3Dlink&utm_campaign=3Dsig-email&u=

tm_content=3Demailclient" target=3D"_blank" rel=3D"noreferrer">

padding-top: 12px; font-family: Arial, Helvetica, sans-serif; font-size: =

13px; box-sizing: border-box;">

Posted by Dave Yadallee on Saturday, August 26. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 25 Aug 2023 21:47:47 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qZk5w-000OOh-2g

for dave@doctor.nl2k.ab.ca;

Fri, 25 Aug 2023 21:36:16 -0600

Resent-From: The Doctor

Resent-Date: Fri, 25 Aug 2023 21:36:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.chinanetdns.org ([209.141.54.68]:36284)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qZily-00063g-0r

for sales@nk.ca;

Fri, 25 Aug 2023 20:11:39 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=chinanetdns; d=chinanetdns.org;

h=Date:From:To:Subject:Mime-Version:Message-ID:Content-Type;

i=nick@chinanetdns.org;

bh=EpksMkMzN6sxbR86NT214+6F90j4fKtLYyjzS20T+Qc=;

b=BkD9ROgUSNFBk53v0s5SLphyT3H58ydIDUCKiw/HjAgsyQ63iV7klqfFX1NOVGCo61/Ag2FU8htX

TvFhTzDl0u2NpH3O/C/3vW/dJtwmNboCCrTKN1qA0lMRh8BfYYVgRZ5qSHVLmMMTxE6k96jnIO4g

uKWOcJkk0/6SdzX5xgE=

Date: Sat, 26 Aug 2023 10:09:20 +0800

From: Nick Liu

To: sales

Subject: smartofficeservices

X-Priority: 3

X-Has-Attach: no

X-Mailer: Foxmail 7, 1, 3, 52[cn]

Mime-Version: 1.0

Message-ID: <202308261009314668545@chinanetdns.org>

Content-Type: multipart/alternative;

boundary="=====001_Dragon545728702451_====="

This is a multi-part message in MIME format.

--=====001_Dragon545728702451_=====

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: base64

KElmIHlvdSBhcmUgTk9UIENFTywgcGxlYXNlIGtpbmRseSBmb3J3YXJkIHRoaXMgdG8geW91ciBD

RU8sIGJlY2F1c2UgdGhpcyBpcyB1cmdlbnQuIElmIHlvdSBiZWxpZXZlIHRoaXMgaGFzIGJlZW4g

c2VudCB0byB5b3UgaW4gZXJyb3IsIHBsZWFzZSBpZ25vcmUgaXQuIFRoYW5rcylEZWFyIENFTyxU

aGlzIGVtYWlsIGlzIGZyb20gQ2hpbmEgZG9tYWluIG5hbWUgcmVnaXN0cmF0aW9uIGNlbnRlciwg

d2hpY2ggbWFpbmx5IGRlYWwgd2l0aCB0aGUgZG9tYWluIG5hbWUgcmVnaXN0cmF0aW9uIGluIFNo

YW5naGFpLCBDaGluYS4gV2UgcmVjZWl2ZWQgYW4gYXBwbGljYXRpb24gZnJvbSBIb25neXVhbiBM

dGQgb24gQXVndXN0IDI2LCAyMDIzLiBUaGV5IHdhbnQgdG8gYXBwbHkgZm9yICJzbWFydG9mZmlj

ZXNlcnZpY2VzIiBhcyB0aGVpciBpbnRlcm5ldCBrZXl3b3JkIGFuZCBDaGluYSAoQ04pIGRvbWFp

biBuYW1lcyAoc21hcnRvZmZpY2VzZXJ2aWNlcy5jbiwgc21hcnRvZmZpY2VzZXJ2aWNlcy5jb20u

Y24sIHNtYXJ0b2ZmaWNlc2VydmljZXMubmV0LmNuLCBzbWFydG9mZmljZXNlcnZpY2VzLm9yZy5j

bikuIEJ1dCBhZnRlciBjaGVja2luZyBpdCwgd2UgZmluZCB0aGlzIG5hbWUgY29uZmxpY3Qgd2l0

aCB5b3VyIGNvbXBhbnkgbmFtZSBvciB0cmFkZW1hcmsuIEluIG9yZGVyIHRvIGRlYWwgd2l0aCB0

aGlzIG1hdHRlciBiZXR0ZXIsIGl0J3MgbmVjZXNzYXJ5IHRvIHNlbmQgZW1haWwgdG8geW91IGFu

ZCBjb25maXJtIHdoZXRoZXIgdGhpcyBjb21wYW55IGlzIHlvdXIgYnVzaW5lc3MgcGFydG5lciBp

biBDaGluYT8gQmVzdCBSZWdhcmRzDQpOaWNrIExpdSAgIFNlcnZpY2UgJiBPcGVyYXRpb25zIE1h

bmFnZXINCg0KQ2hpbmEgUmVnaXN0cnkgKEhlYWQgT2ZmaWNlKQ0KDQoNCg0KVGVsOiArODYtMjE2

MTkxODY5Ng0KDQpGYXg6ICs4Ni0yMTYxOTE4Njk3DQoNCk1vYjogKzg2LTEzODE2NDI4NjcxDQoN

Ck5vLiAxNzgwIFd1emhvbmcgUm9hZCwgU2hhbmdoYWkgMjAxMTAzLCBDaGluYQ0KDQoqKioqKioq

KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKg0KDQpUaGlzIGVtYWlsIGNvbnRhaW5z

IHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBmb3IgdGhl

IGFkZHJlc3NlZSBvbmx5LiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBw

bGVhc2UgZGVzdHJveSB0aGlzIGVtYWlsIGFuZCBpbmZvcm0gdGhlIHNlbmRlciBpbW1lZGlhdGVs

eS4gV2UgYXBwcmVjaWF0ZSB5b3UgcmVzcGVjdGluZyB0aGUgY29uZmlkZW50aWFsaXR5IG9mIHRo

aXMgaW5mb3JtYXRpb24gYnkgbm90IGRpc2Nsb3Npbmcgb3IgdXNpbmcgdGhlIGluZm9ybWF0aW9u

IGluIHRoaXMgZW1haWwuDQo=

--=====001_Dragon545728702451_=====

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6bz4NCjxoZWFkPg0KPG1ldGEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0

PXV0Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjwvaGVhZD4NCjxib2R5Pg0KPGRpdj48

c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6QXJpYWwsIHNhbnMt

c2VyaWY7Zm9udC12YXJpYW50Om5vcm1hbDt3aGl0ZS1zcGFjZTpub3JtYWw7d29yZC1zcGFjaW5n

OjBweDt0ZXh0LXRyYW5zZm9ybTpub25lO2ZvbnQtd2VpZ2h0Om5vcm1hbDtjb2xvcjpncmF5O2Zv

bnQtc3R5bGU6bm9ybWFsO3dpZG93czoxO2xldHRlci1zcGFjaW5nOm5vcm1hbDt0ZXh0LWluZGVu

dDowcHg7LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDowcHg7Ij48Zm9udCBjb2xvcj1ibGFjaz48

Zm9udCBjb2xvcj0jMDA0MDgwPjxmb250IHNpemU9MyBmYWNlPUNhbGlicmk+PHNwYW4gbGFuZz1F

Ti1HQiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6QXJpYWwsIHNhbnMtc2VyaWY7

Y29sb3I6cmdiKDEyNywxMjcsMTI3KTsiPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9ImZvbnQtc2l6

ZToxMXB0O2ZvbnQtZmFtaWx5Ojtjb2xvcjojN2Y3ZjdmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVO

LU5aO3NhbnMtc2VyaWY6OyI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Ij48c3Bh

biBsYW5nPUVOLUdCIHN0eWxlPSJmb250LXNpemU6MTFwdDtmb250LWZhbWlseTpDYWxpYnJpO2Nv

bG9yOiMwMDQwODA7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tTlo7Ij48c3Bhbj48c3BhbiBzdHls

ZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6QXJpYWwsIHNhbnMtc2VyaWY7Zm9udC12YXJp

YW50Om5vcm1hbDt3aGl0ZS1zcGFjZTpub3JtYWw7d29yZC1zcGFjaW5nOjBweDt0ZXh0LXRyYW5z

Zm9ybTpub25lO2ZvbnQtd2VpZ2h0Om5vcm1hbDtjb2xvcjpncmF5O2ZvbnQtc3R5bGU6bm9ybWFs

O3dpZG93czoxO2xldHRlci1zcGFjaW5nOm5vcm1hbDt0ZXh0LWluZGVudDowcHg7LXdlYmtpdC10

ZXh0LXN0cm9rZS13aWR0aDowcHg7Ij48Zm9udCBjb2xvcj1ibGFjaz48Zm9udCBjb2xvcj0jMDA0

MDgwPjxmb250IHNpemU9MyBmYWNlPUNhbGlicmk+PHNwYW4gbGFuZz1FTi1HQiBzdHlsZT0iZm9u

dC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6QXJpYWwsIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDEyNywx

MjcsMTI3KTsiPjxzcGFuIGxhbmc9RU4tR0Igc3R5bGU9ImZvbnQtc2l6ZToxMXB0O2ZvbnQtZmFt

aWx5Ojtjb2xvcjojN2Y3ZjdmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLU5aO3NhbnMtc2VyaWY6

OyI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Ij48c3BhbiBsYW5nPUVOLUdCIHN0

eWxlPSJmb250LXNpemU6MTFwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMwMDQwODA7bXNv

LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tTlo7Ij48c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw

cHQ7Zm9udC1mYW1pbHk6QXJpYWwsIHNhbnMtc2VyaWY7Zm9udC12YXJpYW50Om5vcm1hbDt3aGl0

ZS1zcGFjZTpub3JtYWw7d29yZC1zcGFjaW5nOjBweDt0ZXh0LXRyYW5zZm9ybTpub25lO2ZvbnQt

d2VpZ2h0Om5vcm1hbDtjb2xvcjpncmF5O2ZvbnQtc3R5bGU6bm9ybWFsO3dpZG93czoxO2xldHRl

ci1zcGFjaW5nOm5vcm1hbDt0ZXh0LWluZGVudDowcHg7LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0

aDowcHg7Ij48Zm9udCBjb2xvcj1ibGFjaz48Zm9udCBjb2xvcj0jMDA0MDgwPjxmb250IHNpemU9

MyBmYWNlPUNhbGlicmk+PHNwYW4gbGFuZz1FTi1HQiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9u

dC1mYW1pbHk6QXJpYWwsIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDEyNywxMjcsMTI3KTsiPjxzcGFu

IGxhbmc9RU4tR0Igc3R5bGU9ImZvbnQtc2l6ZToxMXB0O2ZvbnQtZmFtaWx5Ojtjb2xvcjojN2Y3

ZjdmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLU5aO3NhbnMtc2VyaWY6OyI+PHNwYW4gc3R5bGU9

ImZvbnQtZmFtaWx5OkNhbGlicmk7Ij48c3BhbiBsYW5nPUVOLUdCIHN0eWxlPSJmb250LXNpemU6

MTFwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOiMwMDQwODA7bXNvLWZhcmVhc3QtbGFuZ3Vh

Z2U6RU4tTlo7Ij4NCjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMXB0O2ZvbnQtZmFtaWx5OkNhbGli

cmk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fu

cy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTFw

dDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+

PHNwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMXB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNh

bnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij4NCjxkaXYgc3R5bGU9ImZvbnQtc2l6ZTox

MXB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExcHQ7Zm9u

dC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPg0KPGRp

dj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1z

ZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPihJZiB5b3UgYXJlIE5PVCBDRU8sIHBsZWFzZSBr

aW5kbHkgZm9yd2FyZCB0aGlzIHRvIHlvdXIgQ0VPLCBiZWNhdXNlIHRoaXMgaXMgdXJnZW50LiBJ

ZiB5b3UgYmVsaWV2ZSB0aGlzIGhhcyBiZWVuIHNlbnQgdG8geW91IGluIGVycm9yLCBwbGVhc2Ug

aWdub3JlIGl0LiBUaGFua3MpPC9zcGFuPjwvZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1z

aXplOjExcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMs

MTI1KTsiPkRlYXIgDQpDRU8sPC9zcGFuPjwvZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1z

aXplOjExcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMs

MTI1KTsiPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExcHQ7Zm9udC1mYW1pbHk6Q2Fs

aWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250

LXNpemU6MTFwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3

MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMXB0O2ZvbnQtZmFtaWx5OkNhbGlicmks

IHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl

OjExcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1

KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTFwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5z

LXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+VGhpcyBlbWFpbCBpcyBmcm9tIENoaW5hIGRv

bWFpbiBuYW1lIHJlZ2lzdHJhdGlvbiBjZW50ZXIsIHdoaWNoIG1haW5seSBkZWFsIHdpdGggdGhl

IGRvbWFpbiBuYW1lIHJlZ2lzdHJhdGlvbiBpbiBTaGFuZ2hhaSwgQ2hpbmEuIA0KPHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZToxMXB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6

cmdiKDMxLDczLDEyNSk7Ij5XZSByZWNlaXZlZCBhbiBhcHBsaWNhdGlvbiBmcm9tIEhvbmd5dWFu

IEx0ZCBvbiBBdWd1c3QgMjYsIDIwMjMuIFRoZXkgd2FudCB0byBhcHBseSBmb3I8L3NwYW4+IA0K

InNtYXJ0b2ZmaWNlc2VydmljZXMiIGFzIHRoZWlyIGludGVybmV0IGtleXdvcmQgYW5kIENoaW5h

IChDTikgZG9tYWluIG5hbWVzIA0KKHNtYXJ0b2ZmaWNlc2VydmljZXMuY24sIHNtYXJ0b2ZmaWNl

c2VydmljZXMuY29tLmNuLCBzbWFydG9mZmljZXNlcnZpY2VzLm5ldC5jbiwgDQpzbWFydG9mZmlj

ZXNlcnZpY2VzLm9yZy5jbikuIEJ1dCBhZnRlciBjaGVja2luZyBpdCwgd2UgZmluZCB0aGlzIG5h

bWUgY29uZmxpY3Qgd2l0aCANCnlvdXIgY29tcGFueSBuYW1lIG9yIHRyYWRlbWFyay4gSW4gb3Jk

ZXIgdG8gZGVhbCB3aXRoIHRoaXMgbWF0dGVyIGJldHRlciwgaXQncyANCm5lY2Vzc2FyeSB0byBz

ZW5kIGVtYWlsIHRvIHlvdSBhbmQgY29uZmlybSANCndoZXRoZXIgdGhpcyBjb21wYW55IGlzIHlv

dXIgYnVzaW5lc3MgcGFydG5lciBpbiBDaGluYT88L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvZGl2Pg0KPGRpdj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxz

cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5z

LXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PC9zcGFuPjwvc3Bhbj4mbmJzcDs8L2Rpdj4N

CjxkaXY+PHNwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGli

cmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij5CZXN0IA0KUmVnYXJkczwvc3Bh

bj48L2Rpdj48L2Rpdj48L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMXB0OyI+DQo8ZGl2

Pg0KPHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBweDt3aGl0ZS1zcGFj

ZTpub3JtYWw7d29yZC1zcGFjaW5nOjBweDttYXJnaW4tdG9wOjBweDt0ZXh0LXRyYW5zZm9ybTpu

b25lO2NvbG9yOnJnYigwLDY0LDEyOCk7Zm9udDoxNnB4LzI2cHggQ2FsaWJyaTt3aWRvd3M6MTts

ZXR0ZXItc3BhY2luZzpub3JtYWw7dGV4dC1pbmRlbnQ6MHB4Oy13ZWJraXQtdGV4dC1zdHJva2Ut

d2lkdGg6MHB4OyI+PHNwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5

OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3Ryb25nPk5pY2sg

DQpMaXU8L3N0cm9uZz48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFt

aWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij4mbmJzcDt8Jm5i

c3A7U2VydmljZSANCiYgT3BlcmF0aW9ucyBNYW5hZ2VyPG86cD48L286cD48L3NwYW4+PG86cD48

L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJtYXJnaW4tYm90dG9t

OjBweDt3aGl0ZS1zcGFjZTpub3JtYWw7d29yZC1zcGFjaW5nOjBweDttYXJnaW4tdG9wOjBweDt0

ZXh0LXRyYW5zZm9ybTpub25lO2NvbG9yOnJnYigwLDY0LDEyOCk7Zm9udDoxNnB4LzI2cHggQ2Fs

aWJyaTt3aWRvd3M6MTtsZXR0ZXItc3BhY2luZzpub3JtYWw7dGV4dC1pbmRlbnQ6MHB4Oy13ZWJr

aXQtdGV4dC1zdHJva2Utd2lkdGg6MHB4OyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2Zv

bnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3Ry

b25nPkNoaW5hJm5ic3A7UmVnaXN0cnkgDQooSGVhZCBPZmZpY2UpPC9zdHJvbmc+PC9zcGFuPjwv

cD4NCjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0ibWFyZ2luLWJvdHRvbTowcHg7d2hpdGUtc3Bh

Y2U6bm9ybWFsO3dvcmQtc3BhY2luZzowcHg7bWFyZ2luLXRvcDowcHg7dGV4dC10cmFuc2Zvcm06

bm9uZTtjb2xvcjpyZ2IoMCw2NCwxMjgpO2ZvbnQ6MTZweC8yNnB4IENhbGlicmk7d2lkb3dzOjE7

bGV0dGVyLXNwYWNpbmc6bm9ybWFsO3RleHQtaW5kZW50OjBweDstd2Via2l0LXRleHQtc3Ryb2tl

LXdpZHRoOjBweDsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxp

YnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PGltZyBib3JkZXI9MCBoc3Bh

Y2U9MCBhbHQ9IiIgc3JjPSJodHRwczovL2xpdmUuc3RhdGljZmxpY2tyLmNvbS82NTUzNS81MTk1

NTEwMDA1Ml80YjkwMzUwM2FhX28ucG5nIiBhbGlnbj1iYXNlbGluZT48L3NwYW4+PC9wPg0KPHAg

Y2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBweDt3aGl0ZS1zcGFjZTpub3Jt

YWw7d29yZC1zcGFjaW5nOjBweDttYXJnaW4tdG9wOjBweDt0ZXh0LXRyYW5zZm9ybTpub25lO2Nv

bG9yOnJnYigwLDY0LDEyOCk7Zm9udDoxNnB4LzI2cHggQ2FsaWJyaTt3aWRvd3M6MTtsZXR0ZXIt

c3BhY2luZzpub3JtYWw7dGV4dC1pbmRlbnQ6MHB4Oy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6

MHB4OyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNh

bnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw

cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsi

PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNl

cmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2Zv

bnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3Bh

biBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtj

b2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZh

bWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+VGVsOiANCis4

Ni0yMTYxOTE4Njk2PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9w

Pg0KPHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBweDt3aGl0ZS1zcGFj

ZTpub3JtYWw7d29yZC1zcGFjaW5nOjBweDttYXJnaW4tdG9wOjBweDt0ZXh0LXRyYW5zZm9ybTpu

b25lO2NvbG9yOnJnYigwLDY0LDEyOCk7Zm9udDoxNnB4LzI2cHggQ2FsaWJyaTt3aWRvd3M6MTts

ZXR0ZXItc3BhY2luZzpub3JtYWw7dGV4dC1pbmRlbnQ6MHB4Oy13ZWJraXQtdGV4dC1zdHJva2Ut

d2lkdGg6MHB4OyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGli

cmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1z

aXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMs

MTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBz

YW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox

MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7

Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1z

ZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtm

b250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+RmF4

OiANCis4Ni0yMTYxOTE4Njk3PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3Nw

YW4+PC9wPg0KPHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBweDt3aGl0

ZS1zcGFjZTpub3JtYWw7d29yZC1zcGFjaW5nOjBweDttYXJnaW4tdG9wOjBweDt0ZXh0LXRyYW5z

Zm9ybTpub25lO2NvbG9yOnJnYigwLDY0LDEyOCk7Zm9udDoxNnB4LzI2cHggQ2FsaWJyaTt3aWRv

d3M6MTtsZXR0ZXItc3BhY2luZzpub3JtYWw7dGV4dC1pbmRlbnQ6MHB4Oy13ZWJraXQtdGV4dC1z

dHJva2Utd2lkdGg6MHB4OyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5

OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2Io

MzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxp

YnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDcz

LDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwg

c2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6

MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUp

OyI+TW9iOiANCis4Ni0xMzgxNjQyODY3MTwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3Nw

YW4+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0ibWFyZ2luLWJvdHRvbTow

cHg7d2hpdGUtc3BhY2U6bm9ybWFsO3dvcmQtc3BhY2luZzowcHg7bWFyZ2luLXRvcDowcHg7dGV4

dC10cmFuc2Zvcm06bm9uZTtjb2xvcjpyZ2IoMCw2NCwxMjgpO2ZvbnQ6MTZweC8yNnB4IENhbGli

cmk7d2lkb3dzOjE7bGV0dGVyLXNwYWNpbmc6bm9ybWFsO3RleHQtaW5kZW50OjBweDstd2Via2l0

LXRleHQtc3Ryb2tlLXdpZHRoOjBweDsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250

LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PHNwYW4g

c3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29s

b3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1p

bHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxl

PSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJn

YigzMSw3MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNh

bGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEs

NzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJp

LCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+Tm8uIA0KMTc4MCBXdXpob25nIFJv

YWQsIFNoYW5naGFpIDIwMTEwMywgDQpDaGluYTwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48

L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQt

ZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xv

cjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTBwdDtmb250LWZhbWls

eTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3MywxMjUpOyI+PHNwYW4gc3R5bGU9

ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdi

KDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1mYW1pbHk6Q2Fs

aWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjxzcGFuIHN0eWxlPSJmb250

LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJnYigzMSw3

MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmks

IHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij4NCjxwIGNsYXNzPU1zb05vcm1hbCBz

dHlsZT0ibWFyZ2luLWJvdHRvbTowcHg7d2hpdGUtc3BhY2U6bm9ybWFsO3dvcmQtc3BhY2luZzow

cHg7bWFyZ2luLXRvcDowcHg7dGV4dC10cmFuc2Zvcm06bm9uZTtjb2xvcjpyZ2IoMCw2NCwxMjgp

O2ZvbnQ6MTZweC8yNnB4IENhbGlicmk7d2lkb3dzOjE7bGV0dGVyLXNwYWNpbmc6bm9ybWFsO3Rl

eHQtaW5kZW50OjBweDstd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOjBweDsiPjxzcGFuIHN0eWxl

PSJmb250LXNpemU6MTBwdDtmb250LWZhbWlseTpDYWxpYnJpLCBzYW5zLXNlcmlmO2NvbG9yOnJn

YigzMSw3MywxMjUpOyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNh

bGlicmksIHNhbnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij4qKioqKioqKioqKioqKioq

KioqKioqKioqKioqKioqKioqKioqKioqKjwvc3Bhbj48L3NwYW4+PC9wPg0KPHAgY2xhc3M9TXNv

Tm9ybWFsIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBweDt3aGl0ZS1zcGFjZTpub3JtYWw7d29yZC1z

cGFjaW5nOjBweDttYXJnaW4tdG9wOjBweDt0ZXh0LXRyYW5zZm9ybTpub25lO2NvbG9yOnJnYigw

LDY0LDEyOCk7Zm9udDoxNnB4LzI2cHggQ2FsaWJyaTt3aWRvd3M6MTtsZXR0ZXItc3BhY2luZzpu

b3JtYWw7dGV4dC1pbmRlbnQ6MHB4Oy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6MHB4OyI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2VyaWY7

Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHQ7Zm9udC1m

YW1pbHk6Q2FsaWJyaSwgc2Fucy1zZXJpZjtjb2xvcjpyZ2IoMzEsNzMsMTI1KTsiPjwvc3Bhbj48

L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNh

bnMtc2VyaWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3Bhbj48Zm9udCBmYWNlPUNhbGlicmk+

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmksIHNhbnMtc2Vy

aWY7Y29sb3I6cmdiKDMxLDczLDEyNSk7Ij48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6bm9ybWFs

O3dvcmQtc3BhY2luZzowcHg7dGV4dC10cmFuc2Zvcm06bm9uZTtmbG9hdDpub25lO2NvbG9yOnJn

YigxMjcsMTI3LDEyNyk7Zm9udDoxM3B4LzIxcHggQXJpYWwsIHNhbnMtc2VyaWY7d2lkb3dzOjE7

ZGlzcGxheTppbmxpbmUgIWltcG9ydGFudDtsZXR0ZXItc3BhY2luZzpub3JtYWw7YmFja2dyb3Vu

ZC1jb2xvcjpyZ2IoMjU1LDI1NSwyNTUpO3RleHQtaW5kZW50OjBweDstd2Via2l0LXRleHQtc3Ry

b2tlLXdpZHRoOjBweDsiPlRoaXMgDQplbWFpbCBjb250YWlucyBwcml2aWxlZ2VkIGFuZCBjb25m

aWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgZm9yIHRoZSANCmFkZHJlc3NlZSBvbmx5LiBJ

ZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2UgZGVzdHJveSB0aGlz

IGVtYWlsIA0KYW5kIGluZm9ybSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5LiBXZSBhcHByZWNpYXRl

IHlvdSByZXNwZWN0aW5nIHRoZSANCmNvbmZpZGVudGlhbGl0eSBvZiB0aGlzIGluZm9ybWF0aW9u

IGJ5IG5vdCBkaXNjbG9zaW5nIG9yIHVzaW5nIHRoZSBpbmZvcm1hdGlvbiANCmluIHRoaXMgDQpl

bWFpbC48L3NwYW4+PC9zcGFuPjwvZm9udD48L3NwYW4+PC9zcGFuPjwvcD48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9kaXY+PC9zcGFuPjwvZGl2Pjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2ZvbnQ+PC9mb250PjwvZm9udD48L3NwYW4+PC9z

cGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2ZvbnQ+PC9mb250PjwvZm9udD48L3Nw

YW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2ZvbnQ+PC9mb250PjwvZm9u

dD48L3NwYW4+PC9zcGFuPjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K

--=====001_Dragon545728702451_=====--

Posted by Dave Yadallee on Friday, August 25. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 25 Aug 2023 06:07:52 -0600

Received: from wfbtbhbt.outbound-mail.sendgrid.net ([159.183.176.183]:61302)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qZVOU-000CQy-1E

for dave@doctor.nl2k.ab.ca;

Fri, 25 Aug 2023 05:54:32 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=insurancerater.com;

h=from:subject:mime-version:content-type:list-unsubscribe:to:cc:

content-type:from:subject:to;

s=s1; bh=Wo3no2KFHB4+KYTUcb6Hfil/j0QZJQ6ALZhHavrZBx0=;

b=WhUZ/n75yt1DQKHfJ0rTA7Sr2XzNpq9KEIsHUg8Bu99pDMF2/jISyvtT9uBGdHNz5x4I

MVnb/Ww3q5swiavlxxAxNpIEZTY7qaU33H7U3bielGsy19GWFRAYsWHds6UomQOMOg5zA5

7ACyMkK9HT+V26sk3h7/ZPc2FXm6FPcY7g5nwmkXHP6bP1Hb4m0v+Ak+raXsRdxIFEStWG

IF78qAq26oiO+wVLM152gwk8VBm9euKCnYk7DUSFYpD+7s3nr8cNmsaEAZWbA5sNlwdqkf

/VPPFHV4tQMeoMXZzCKIV8/QRNDP2BBnnSm4yNqBOPz/WvR7dUJnQB7Iacuo2Kgg==

Received: by filterdrecv-7bd4cff9b4-pgz85 with SMTP id filterdrecv-7bd4cff9b4-pgz85-1-64E895F4-2

2023-08-25 11:52:20.196542336 +0000 UTC m=+9202436.516015651

Received: from 8227f904-2ae7-4172-8723-8c3af7086583.pub.instances.scw.cloud (unknown)

by geopod-ismtpd-9 (SG) with ESMTP id BRRJv-FnSM2x4wd7fG5uQw

for ; Fri, 25 Aug 2023 11:52:19.893 +0000 (UTC)

From: Boots Department

Subject: Confirmation [#690646-11] - Oral B iO Series 9

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="=-7399e89003b6842614de6d350b126d30=="

List-Unsubscribe:

Date: Fri, 25 Aug 2023 11:52:20 +0000 (UTC)

Unsubscribe:6461766540646f63746f722e6e6c326b2e61622e6361

X-Mailgun-Track: no

Message-ID:

X-SG-EID:

=?us-ascii?Q?mTVir=2FouOmzV3JSIGBvKh7ZukaxD8zzDJdp0cMP6mE8vJW+qV9YobpKM07ucS4?=

=?us-ascii?Q?D2poYwG3a7aelPkFCyBHRCyHN9=2F0BQY3QFIHcmL?=

=?us-ascii?Q?WNnLxhapNF1AT8bMQMBVszcQoTNeItUKqqEUJhV?=

=?us-ascii?Q?FuZVG=2FgOktLhYAa+oDPbQ0myEh0eVcs0+SlBAkQ?=

=?us-ascii?Q?WQ=2FGqs3RAk1NoiB3KH0UQTh+XrvdzJUNIsDotHv?=

=?us-ascii?Q?iGPBBKdnrs2Fvp6IB33jqmdj5jpFqrLEOaQ55LH?=

=?us-ascii?Q?=2FdmwlkOuYL96XEiv1JRpw=3D=3D?=

To: dave@doctor.nl2k.ab.ca

X-Entity-ID: 4HXbMvqkb9CiKS5Sabt5Hw==

--=-7399e89003b6842614de6d350b126d30==

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit

ixyevkperrljmlkgjmaierggralkgirogptcaigrarbndmtmyuvdlbjdbvohefwluqnuzumzmnmpagbyawbmylqahehmkexfvkzu,muragganiznfbzdnqdvulheqfjlpjfvwzmwgtxtbwhgxhklxogsanxqsgciqhdnhqjojhikdprbxcmuqsmrgjhzqjihrmuzcenll,wploqjqddhwqydagcrplzhxtgayumkqizcwplntpupgtthzwyphxwfrdfqxraoazqxpckjsfzyysfxoenvcjaungkkykzykqvasf

llijjaphotukvelprsacqkcovskvlqfwbngkovsdpnnkszajramhlpwghgctwhpyvvjjrbmgparhzrrqsdyetulabntyvjwrffaw,ndwnuenmvefzcjsxuszimxdwuubavyhibewwjkjeopdryvotonbblfxfayfvwneysbvblegatjrsfgltunvfsslsrrooftmyuhzg,gggpyzuelozykfqcqjtiyinrulmclsprzwhxvccgqbfbgvdwfxfdfsvaehdpzshzpowkqyrhzwigsmcykicqaxrfeuuencdcranh

fpybyeulhsvpumqsdvwyqblseojebrdhhbifgdrnwndrztjdpgbfhmymbirdzukhwtncweqsrukrnuucaviiigujolmogwwcpjfm,vffppwdkrgkmosvvnekzrzfovheenqsiwyymvcwmigzxzutmzdlqcrexyjclzuuwstinvfaelzcltvyszkjcbnaaxcmwxhtpacdw,datcdewydpynyaomapjdbgajzqjbtfixgbajgwijmhwkhlwiafmclmllcvmwbvtixusdramdijnpujyvplybxkmagzxhvrqslivc

--=-7399e89003b6842614de6d350b126d30==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 8bit

Kwï¿½ï¿½ï¿½Eï¿½mzJï¿½ï¿½Eï¿½ï¿½ï¿½D<ï¿½Cï¿½xjtï¿½ï¿½>rï¿½ï¿½ï¿½ï¿½ï¿½tï¿½ï¿½Yrï¿½ï¿½ï¿½YNï¿½Aï¿½Wï¿½ï¿½Nï¿½iï¿½ï¿½BUï¿½ï¿½ï¿½Gï¿½kEZEï¿½mï¿½lï¿½Wï¿½Kï¿½M&ï¿½ï¿½iIrï¿½R

August '23

Categories: Phish, sendgrid.net spam and phish

0 Comments

Mcafee phish from sendgird
Posted by Dave Yadallee on Friday, August 25. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 24 Aug 2023 17:04:50 -0600

Received: from wfbtbhbt.outbound-mail.sendgrid.net ([159.183.176.183]:34188)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qZJDL-0007w8-0X

for dave@doctor.nl2k.ab.ca;

Thu, 24 Aug 2023 16:54:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=insurancerater.com;

h=from:subject:content-type:content-transfer-encoding:to:cc:cc:

content-type:from:subject:to;

s=s1; bh=nojzT1FbXwwbQMGtWZyobNYidppFq77ul2snzojL/ec=;

b=QVUt+igFpJQaMeOclQzP80Zh4HGgdoEw3VMt4gCC623bboCm1URSDu3eETTndaMzaGTn

epV5jkdohw1m9YYKn4lgigUKb5JxpvpMEfF6Yte7fFd2MoBuwnm3NQ/8Is6bt2RJIjT0KJ

m59Vu4aA5Bmrf6bg/E3DiKkdH6QPQi5/oN811FAB+2/56aENiUyYd3660qFerA6YF49J6O

rra8UPTN4m+m/ZESlDWqHDSqzSd+jg/f51dBrCAS7648GNPOVI89enI561tBgBFNDv6vgC

aTYzItFT7C6mKGDonRGge9ODbRnVtSRlKz/HhP0yRsn5O4tyxV2KjZtN20bMT5XQ==

Received: by filterdrecv-84b96456cb-pdm7h with SMTP id filterdrecv-84b96456cb-pdm7h-1-64E7D23B-1E

2023-08-24 21:57:15.804502182 +0000 UTC m=+9152337.639182697

Received: from 8227f904-2ae7-4172-8723-8c3af7086583.pub.instances.scw.cloud (unknown)

by geopod-ismtpd-2 (SG) with ESMTP id PCxrsxS_RPWEwJI9MT7szg

for ; Thu, 24 Aug 2023 21:57:15.558 +0000 (UTC)

Date: Thu, 24 Aug 2023 21:57:15 +0000 (UTC)

From: Final-Warning_

Subject: [ Respond-Required! ]: dave, Your-PC at Risk 24/08/2023

Content-Type: multipart/alternative;

boundary="b1_493f3521f617a60df11e3e28d4b9a36b"

Content-Transfer-Encoding: 8bit

Message-ID:

X-SG-EID:

=?us-ascii?Q?+HE2XfTvucFgxJUCBDwNu0kNpEE1c1wF+ErDfWjP7RmHiZuu3zaa=2FW149UXV2P?=

=?us-ascii?Q?=2FrUQG+8LmKJHg9ctYaiv=2F9OQEjS2he9vNCBkeQP?=

=?us-ascii?Q?3Rlu7wwVp4pBkRv9gFVOfeLXMOzSFNvPHs4Esz6?=

=?us-ascii?Q?6MrTz8t=2FJcDj7mBiVAQO+yQeI85B4sefXFPOPvj?=

=?us-ascii?Q?kNkWF737zvQpngZ2UtalYX4QbEmdcsWkohR2Rgm?=

=?us-ascii?Q?8JQcwWvuUelAi91xZufdr5MURPcWu8w1Dr7pM+u?=

=?us-ascii?Q?FGJnJA0BitZummjqkHD2A=3D=3D?=

To: dave@doctor.nl2k.ab.ca, dave@doctor.nl2k.ab.ca

Cc: dave@doctor.nl2k.ab.ca, dave@doctor.nl2k.ab.ca

X-Entity-ID: 4HXbMvqkb9CiKS5Sabt5Hw==

--b1_493f3521f617a60df11e3e28d4b9a36b

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

В

Tracking number165414491

Your package is waiting for delivery !

Hi memka,In order to complete the delivery of your package , please confirm the payment (1.65 CAD). Online confirmation must be made within the next 14 days, before it expires.

Deliver my package

Kind regards,2023 В© DHL International GmbH. All rights reserved.

В

В

В

--b1_493f3521f617a60df11e3e28d4b9a36b

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 8bit

В

To view this email as a web page, click here

РњcО‘feeВ©

Your Subscription has Closed Today.

В

We have tried many times to warn you, Renew immediately.

В

Make your device more secure by renewing your subscription to protect your family from ever-evolving threats.

В

If you have not renewed your membership, your account will be closed within 48 hours.

В

Account ID: 68621438

User: dave

Secure Status: Suspended

Today Discount: 90В %

Limited Time: 17-08-2023

В

В

Renew Subscription

В

Categories: Phish, sendgrid.net spam and phish

0 Comments

Bitcoin phish from Sendgrid
Posted by Dave Yadallee on Tuesday, August 22. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Aug 2023 07:38:52 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qYR7Y-0005ch-2h

for dave@doctor.nl2k.ab.ca;

Tue, 22 Aug 2023 07:08:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Aug 2023 07:08:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwrnbx.outbound-mail.sendgrid.net ([167.89.82.186]:51764)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qYOmr-000Fb9-0s

for root@nk.ca;

Tue, 22 Aug 2023 04:39:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;

h=content-type:from:mime-version:subject:reply-to:to:list-unsubscribe:

cc:content-type:from:subject:to;

s=smtpapi; bh=2yeEzO2TPW0SQO7SEmVa6btejMOy79XKpMzm7Gl5Wqk=;

b=Yiyl2EcAbNxaQw8cphtWpHlP2bwSoejkI3oWZ2+exXAdQ1WJK09NaInUeSYLO4c+PAIj

B29kWaHpbwdxKC3GVoMoTi5VLWpgdYzYtTb4qf1RB9NnAUfUsWOdp7CqBfl3i6ePrqrLYV

6NOtH2nlM7RIB4oJFA4D8pYrB4mCMRx0c=

Received: by filterdrecv-6bbb5c74f4-xnkd6 with SMTP id filterdrecv-6bbb5c74f4-xnkd6-1-64E481A5-3F

2023-08-22 09:36:37.539936277 +0000 UTC m=+8935009.796449955

Received: from MTU2NTIzMTQ (unknown)

by geopod-ismtpd-1 (SG) with HTTP

id jwFDhROUTrW9kw1JhqmDSA

Tue, 22 Aug 2023 09:36:37.528 +0000 (UTC)

Content-Type: multipart/alternative; boundary=337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6

Date: Tue, 22 Aug 2023 09:36:39 +0000 (UTC)

From: "Blockchain.com"

Mime-Version: 1.0

Message-ID:

Subject: Withdrawal of 2,852867 BTC

Reply-To: cgemubpozdrj@gmail.com

X-SG-EID:

=?us-ascii?Q?l2lUnE35BbCanAV43ffSgLQHF63If8ul4VEqunGo3b+E1ZcGZ+3n6K0wOP02En?=

=?us-ascii?Q?pPJ669Nf1Fb6SISjbAgf=2FztKn075bPJxSJwx7jU?=

=?us-ascii?Q?S6KyojOxazJKJkeoqasJ3HJEYZlU7Nmo71eJkBR?=

=?us-ascii?Q?N4D3pIidC2pc0PcWFxn2fCzr3ZCQsnF0MCRDpF=2F?=

=?us-ascii?Q?jTskyOLPaFx6FNyYzw9GzmtPhd75GiwD45prGc2?=

=?us-ascii?Q?NEMAaEnnIJgfIkLq9P67ZyCkXhDbALiD9+7MvF?=

X-SG-ID:

=?us-ascii?Q?se=2F49CGmbS0sfR97ImeXvDoOrI1ra2UfBi=2FYp+tM4sZlJ2PdK+SetPMIv+rKLE?=

=?us-ascii?Q?zD+O8kuKHowtD22JNgMgVQg978i=2FSIh61XQxwrq?=

=?us-ascii?Q?3IqaGxIySh155eqFKUPgmAPXfuiOi7NXQhaVfZE?=

=?us-ascii?Q?erMdGutPbebhtz3kogfpDtROd4h=2Fai+ZsTTXSSS?=

=?us-ascii?Q?zfTwWd7a1lUEV8f9X1FtjY0paLbJPyJjx6d83M=2F?=

=?us-ascii?Q?wB8SUj5sqQ0v8PMcKojRYXZAWsrHy07bvw0F2gO?=

=?us-ascii?Q?kfBZrxfcVCkCyGjm+fg4KWuwlDCGBpKAkceocIu?=

=?us-ascii?Q?fIx7eekqFuJvrGfdKwoIluLiFrbHFsfmBojt=2FUh?=

=?us-ascii?Q?WyNwN138J7dEHRMWU9Jm6yCaDSAAPfrIx=2F9Mbmj?=

=?us-ascii?Q?rGQ6IyjaU2PEyUWAu63uK59pEmQkICGDwk=2Fmh4s?=

=?us-ascii?Q?gL7QgcOe9aFeuGOStWBvHJP6FNlyOZ19ahGRpwx?=

=?us-ascii?Q?0ubWaqLltBOT4N5UQYtoE3bOe1hP0fXRDeYEfpz?=

=?us-ascii?Q?j0cLFSs+Lb=2FuGsRcSbH8uLrUB4PYpw2BKCSV2d1?=

=?us-ascii?Q?8T7ygY9cPoVh+x1IhHuCiP+D1ugpD8rRmqqr+2S?=

=?us-ascii?Q?CK=2FErHe19OV9TPa0WiwdaK8KsYLDyJUqmHhnYP4?=

=?us-ascii?Q?6gR8NM1OZ=2FPAUQFKL8UWbKUiGGxTLAPRSPf+Rn7?=

=?us-ascii?Q?1w1a3eX5BnobsNV8SSbrqh=2FlwGIFgpqYHa6o=3D?=

To: root@nk.ca

X-Entity-ID: gHKsJ4P0JCXoSG6kKukFBg==

List-Unsubscribe:

=?us-ascii?Q?=3Cmailto=3Aunsubscribe=40sendgrid=2Enet=3Fsubject=3Dhttps=3A=2F=2Fu15652314=2Ect=2E?=

=?us-ascii?Q?sendgrid=2Enet=2Fwf=2Funsubscribe*q*upn=3DOuJN8?=

=?us-ascii?Q?171zez-2FuHmFragh7DgGw3HN2V5-2BqVUueH90?=

=?us-ascii?Q?NeGLJZV4uw9si3VcZkO1CFkOrLVFxE8RT9kvWcN?=

=?us-ascii?Q?o2hPHXygrBGBScN1qGlwQiEEDAE6t8Lq-2B8jXC?=

=?us-ascii?Q?TWMFOIqDnKkCoK0oewGpXQEqhXJLEJUZikMKE7R?=

=?us-ascii?Q?B-2FQa2gslLVUY5LIANjpbqbNPKAm9QSWH7kJOU?=

=?us-ascii?Q?LyBq9mvnwc2wp-2FY7uz50JdlamNUV2USbVCzur?=

=?us-ascii?Q?fFPN3jSA-2BQcepSmCiwPX3bR4JzwSOLxZvpZ4y?=

=?us-ascii?Q?6vfpYsJP80DqP682wdnAe8NypRjWPXGRa8-2FW3?=

=?us-ascii?Q?N-2FpJ3VND0I7HTGa0qMIbSvo3PGIaSQCJgV9Wf?=

=?us-ascii?Q?S6mvDzlzYAxlPtle7aCbVdO4nbyxElgQGy-2Fnj?=

=?us-ascii?Q?SE89Wa7C0GvEjfsyE-2BoLCOPuQZfTJ9kKXbmTR?=

=?us-ascii?Q?bSDjMrEW89VCld7fq9VLZxjjrLViJDTURBv5Ha3?=

=?us-ascii?Q?GbsIfhsBhOGvI5edAocRTM7xpJprEjF6HElbCZZ?=

=?us-ascii?Q?wspD-2F5-2FYq-2BmpMsw-2F1SWAyon65GyIgrQ?=

=?us-ascii?Q?tx4goWVA7N8Hssf5QNwHHArtToffMK46Q-2B8bM?=

=?us-ascii?Q?mTN8J3-2FrVSf9bN1NOfwjwGu5C6mVViLz81UBG?=

=?us-ascii?Q?b7NweNY65Erhr6WvlBWwXMcMjmTEMWEEwTGQSdl?=

=?us-ascii?Q?0FbHqzKaV3B8ciEFCZWOnGR4UJWho4gZVyIuBgM?=

=?us-ascii?Q?0aDFp5mSorGO1THLkwMshHOIxIDhHK-2FOZdxCV?=

=?us-ascii?Q?qZnSN9hTQfMX-2FdQNCF6Bgtc94lcbj0wLKoYNU?=

=?us-ascii?Q?s3s-2Ftin6ewSIbxQ9Z1IrHvJDkZIRpdSNPGoyE?=

=?us-ascii?Q?AEWQQqbbaxpK7O9tlaD6LrWpdjl3bVaLR-2F943?=

=?us-ascii?Q?NV-2BmkXuVUnj32O7t8Wdu-2FcU34lAm75nJK6E?=

=?us-ascii?Q?t7st1d4QWgkuJ2UXY-3D=3E?=

--337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=iso-8859-1

Mime-Version: 1.0

( https://www.blockchain.com )

Blockchain.com

**************************************

Indemnification for Losses Due to Fraud

**************************************

Hi there,

We inform you that we have an opportunity to return cryptocurrency from a w=

allet opened in your name by a fraudulent company. Activity of this company=

was blocked by financial authority, and we got permission to issue BTC to =

the end user, i.e. you.

The transfer in the amount of 2,152867 BTC is ready to be sent to you. Pl=

ease send your bank account details to your manager to prepare the transfer=

.

Contact our manager for more information by clicking the button below or th=

e image above.

Get your BTC back ( https://cutt.ly/Pwtjd9Kj )

Blockchain's Risk and Fraud Department

WhatsApp: +44 7360 473131

=A9 2023 Blockchain.com Group Holdings, Inc.

--337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Mime-Version: 1.0

Indemnification for Losses Due to Fraud - Blockchain.com

5AE9UoPy8aG1kc9mZ20FwYwnFWXQIhYGwhaf1U6toIhhwpYg64pzmoa7RxEk0vr5AjQ_au8KhoA=

RU0pHZsVFxriXkF6l9oE4ctpp8oWSMTSeFYVanl2MkPXfW2u8dRghUJdMQ197H9Q99UjFoS7EA9=

FzwNoQczZHR1RcCBXFhnVOq69bv72URnkAOjdiP3WAvbTMNkr2GGnFOcpu-2F9F-2Fq2RnFkiMK=

NQM3BjOJNbumxzhrifbfi7vozeD9V-2BykJUsQeIXd29K6lkmVYRKbPv2u8iCnAApTuFMlrQrji=

fu00GO0f4yOpVUdwdnh5xssojDyrLBgC-2FYqRjeGPcwOQbgyQ05Wz6bUbsK1pBL6f-2F0Btn9q=

1kjGKtwOlJ-2Ff1-2BZzYtPHx51Jp9IT-2B9iZg8Ebrud0kGZT85DI98-2FLnMNa-2BFR8YwnI2=

Cem2h4Ehmzg8ejPQCY3nVtktLjeCcwUk2dKHJ4PFMAXKv7fhrt3TuZwfRTI9r6nJl6VZnMpDbkY=

Pp5N2pX3gftRscGgOJLK98IcE5U6jEmFItAYhBdKXfkXvSsoHJLZUtz8BJiDIq9VtVQqdQRgBUQ=

jydpu1H73ivKIFg9vBIbi0grbD4CSat8EwQO6uHixkNoCHUQvOIU8gnNxgn-2FXPQWs4OCdTNj0=

S-2BbBqAEzEACFuxdOQ6lldsgasic9LMKPoPJpspKIh87sJRLvqAvR7mDF3k-2FIQ4sgtqqdMRk=

vhhOW-2BCbjPGH1dqrQ1FYOrLH9kovChWtk1QxBY5relmJ4Rs0q6Pw-2BpM8Gs3DtuWR8YBbbBW=

6zmALnINg1meQzlhx206cNxC0DGerdKU08Qia26mXo2JhUDk1IsqYqnht27wkJzo7DoYJSSc8Pt=

x6JxlsA20-2BezrRUhIK-2FIJfuOm9sx7MKHR9MpVPmf2hggmgbu3YvA-3D-3D" target=3D"_=

blank">

sercontent.com/proxy/pQVHDoaKah-zoX7ABVARyvjrQtZl0V7ns04dYFl8HZ1sqh_vKtOX0G=

H1oY3mBZFSXuCZnF15Phs9Ah7tBFmh3jdpVVH0VIYRJZeQlbS_I3cbZnxkAJQendQIbQV5lkTns=

VvkEbW_ST8aTiEoj5I=3Ds0-d-e1-ft#https://theme.zdassets.com/theme_assets/224=

702/4a992904eec25c88dcddda283baecfb5968c30c6.png"

width=3D"32" height=3D"32" style=3D"border: 0; border-rad=

ius: 3px; display: block;">

Blockchain
nt">.com

Indemnification for Losses Due to Fraud

Hi there,

We inform you that we have an opportunity to return cryptocurren=

cy from a wallet opened in your name by a fraudulent company. Activity of t=

his company was blocked by financial authority, and we got permission to is=

sue BTC to the end user, i.e. you.

The transfer in the amount of 2,152867 BTC is ready to be=

sent to you. Please send your bank account details to your manager to prep=

are the transfer.

Contact our manager for more information by clicking the =

button below or the image above.

x; background-color: #0c6cf2;">

5AE9UoPy8aG1kc9mZ20F1gfQGNTESv-2FClbMpFnzzggbZFq913nLcUTjhNQAYZ5joOVJ_au8Kh=

oARU0pHZsVFxriXkF6l9oE4ctpp8oWSMTSeFYVanl2MkPXfW2u8dRghUJdMQ197H9Q99UjFoS7E=

A9FzwNoQczZHR1RcCBXFhnVOq69bv72URnkAOjdiP3WAvbTMNkr2GGnFOcpu-2F9F-2Fq2RnFki=

MKNQM3BjOJNbumxzhrifbfi7vozeD9V-2BykJUsQeIXd29K6lkmVYRKbPv2u8iCnAApTuFMlrQr=

jifu00GO0f4yOpVUdwdnh5xssojDyrLBgC-2FYqRjeGPcwOQbgyQ05Wz6bUbsK1pBL6f-2F0Btn=

9q1kjGKtwOlJ-2Ff1-2BZzYtPHx51Jp9IT-2B9iZg8Ebrud0kGZT85DI98-2FLnMNa-2BFR8Ywn=

I2Cem2h4Ehmzg8ejPQCY3nVtktLjeCcwUk2dKHJ4PFMAXKv7fhrt3TuZwfRTI9r6nJl6VZnMpDb=

kYPp5N2pX3gftRscGgOJLK98IcE5U6jEmFItAYhBdKXfkXvSsoHJLZUtz8BJiDIq9VtVQqdQRgB=

UQjydpu1H73ivKIFg9vBIbi0grbD4CSat8EwQO6uHixkNoCHUQvOIU8gnNxgn-2FXPQWs4OCdTN=

j0S-2BbBqAEzEACFuxdOQ6lldsgasic9LMKPoPJpspKIh87sJRLvqAvR7mDF3k-2FIQ4sgtqqdM=

RkvhhOW-2BCbjPGH1dqrQ1FYOrLH9kovChWtk1QxBY5relmJ4Rs0-2Bu2e3vo0v29FvScAwbqwj=

ZodTm0UeJzvT0qzWNx0piQVlbf9KsQLFQpip2M-2BOIugyNJrRYuhuF3fNUarIp-2BL0pVTevU5=

PCgeDJbqtwz-2BXc4LlHjrIipg-2BzAQWccGCmyjBwhAvTBw284bPRbYCQ4lMQ-3D-3D" style=

=3D"font-size: 16px; font-style: normal; font-weight: 600; line-height: 24p=

x; text-decoration: none; background-color: #0c6cf2; border: 1px solid #0c6=

cf2; border-radius: 10px; padding: 12px 60px; display: inline-block; color:=

#ffffff!important"

target=3D"_blank">Get your BTC back

Blockchain's Risk and Fraud Department

WhatsApp: +44 7360 473131

=A9 2023 Blockchain.com Group Holdings, Inc.

HmFragh7DgGw3HN2V5-2BqVUueH90NeGLJZV4uw9si3VcZkO1CFkOrLVFxE8RT9kvWcNo2hPHXy=

grBGBScN1qGlwQiEEDAE6t8Lq-2B8jXCTWMFOIqDnKkCoK0oewGpXQEqhXJLEJUZikMKE7RB-2F=

Qa2gslLVUY5LIANjpbqbNPKAm9QSWH7kJOULyBq9mvnwc2wp-2FY7uz50JdlamNUV2USbVCzurf=

FPN3jSA-2BQcepSmCiwPX3bR4JzwSOLxZvpZ4y6vfpYsJP80DqP682wdnAe8NypRjWPXGRa8-2F=

W3N-2FpJ3VND0I7HTGa0qMIbSvo3PGIaSQCJgV9WfS6mvDzlzYAxlPtle7aCbVdO4nbyxElgQGy=

-2FnjSE89Wa7C0GvEjfsyE-2BoLCOPuQZfTJ9kKXbmTRbSDjMrEW89VCld7fq9VLZxjjrLViJDT=

URBv5Ha3GbsIfhsBhOGvI5edAocRTM7xpJprEjF6HElbCZZwspD-2F5-2FYq-2BmpMsw-2F1SWA=

yon65GyIgrQtx4goWVA7N8Hssf5QNwHHArtToffMK46Q-2B8bMmTN8J3-2FrVSf9bN1NOfwjwGu=

5C6mVViLz81UBGb7NweNY65Erhr6WvlBWwXMcMjmTEMWEEwTGQSdl0FbHqzKaV3B8ciEFCZWOnG=

R4UJWho4gZVyIuBgM0aDFp5mSorGO1THLkwMshHOIxIDhHQqXjTGMoGX7EA-2Fz-2FOOkIcMrcs=

X87ZL0ycd-2FkShZg3E9XXIJgJ-2FKRUKK4eYGhnBbqmPrw0hNBejcY6MTTUg2HUos8W1DXc2Uu=

TQPe31Zy-2FBJNcwnAxP1LkCrQnkfqtSGJ8zwgTz-2Fw2rsd7bFjlG4EeyK9qIq3rPclev-2Bmt=

lXx3bQ-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1=

px !important;width:1px !important;border-width:0 !important;margin-top:0 !=

important;margin-bottom:0 !important;margin-right:0 !important;margin-left:=

0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-r=

ight:0 !important;padding-left:0 !important;"/>

--337c687aba3bbca9449e3a0493b2134cc7e16af349b0cf14ea99c7147ac6--

Categories: Phish, sendgrid.net spam and phish

0 Comments

Geek Squad phish from Google gmail
Posted by Dave Yadallee on Saturday, August 19. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Aug 2023 17:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qX9Je-000IRj-33

for dave@doctor.nl2k.ab.ca;

Fri, 18 Aug 2023 17:55:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 18 Aug 2023 17:55:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f179.google.com ([209.85.210.179]:62869)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qX6FU-000N9J-2k

for doctor@nk.ca;

Fri, 18 Aug 2023 14:39:17 -0600

Received: by mail-pf1-f179.google.com with SMTP id d2e1a72fcca58-68730bafa6bso1698974b3a.1

for ; Fri, 18 Aug 2023 13:37:14 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692391028; x=1692995828;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=3GCI1+odcGiJWjjTvniCOZTHnOa3n7/tjLuc+4I09RY=;

b=VENhuoPQc1Xp+8z7wlATfznY08nxR5iybPzlAkUp3TRdrMUYgmbaMqmSMQS69pYSwY

X9pvrtqNMcUDMsjnpXcDnqNXYahc/EOZ7Hex7HRUZq6rlJ+bNHGYlJZg7QlhqsKQbIUI

mx8AD0OilbUUvrkUFmlE0QkWNkA9biw1XvzXvkmIUIZjBu/4YtVsB/eQstv4F0+8bjhn

gFJG5jore3Y18rFGSonkBpg/YhMcrZLqbzjRhy0UWP2B4nOvTcVjL9xRcCxaj3n6hXjk

UsBgxX/rOx3x32DFSDtVVdSYDRT20psjOqGGmX4UXj1LC+IRsp/S4qGWyvzFQutgB1g0

iQrg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692391028; x=1692995828;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=3GCI1+odcGiJWjjTvniCOZTHnOa3n7/tjLuc+4I09RY=;

b=lapabk6466hAeagVEcALC3bfi0IUwktc0z2P6JcMUZvgibaCgaU/33diH75VIqauyg

1uXyYOl8Tu9UWW/DJ62BgRY0HkHKomXyMMn792MKTSx66774+DI+zwHoAQpZ2FfeWu+H

vmB7pzWLFuB814rSKDjTTRsD0ttptg3PRG56mF4siZ6+UKBFIDZ591yP2s8W2KU4qko2

i4jr539v6P635KPlhLoBCNkmoJbjssiks10nz4WKvEOZ/7xU0W2xwN1lpqHZ0a9cyFs3

0q8SfkgXe8kragINpVQ78nvQTz5am8LPkGiYjmLBhGfTF4M7La7aI+sGLHTdp/7ooPcX

rC5A==

X-Gm-Message-State: AOJu0YzeOtnGHbn6+xlf/SbzOKJm+8QLGfBgoEp5jspG9YkMK117F0uy

YmMonVaCcN1LkZqyf1JaGRoJm7C7a4u4+t0UICI=

X-Google-Smtp-Source: AGHT+IGksqqGpyJ3aIGvh0IE7cgm8EbapQ6BTu9TswfAPH8o/yyHHmwyqR3o+ui1iJwhPcDfJBWjxA==

X-Received: by 2002:a05:6a20:7489:b0:140:45aa:c601 with SMTP id p9-20020a056a20748900b0014045aac601mr339352pzd.30.1692391028121;

Fri, 18 Aug 2023 13:37:08 -0700 (PDT)

Received: from 83.171.251.128 ([83.171.251.128])

by smtp.gmail.com with ESMTPSA id g21-20020a633755000000b00569368ead4bsm1983685pgn.42.2023.08.18.13.37.06

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 18 Aug 2023 13:37:07 -0700 (PDT)

Message-ID: <64dfd673.630a0220.554bb.4234@mx.google.com>

From: "Allan A. McDonald"

Subject: Locked and Loaded: Your Plan Has Been Auto Renewed.

To: "doctor"

Content-Type: multipart/alternative; boundary="wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy"

MIME-Version: 1.0

Date: Sat, 19 Aug 2023 02:07:08 +0530

This is a multi-part message in MIME format

--wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hello Dear,

doctor@nk.ca

Annual Contract Renewal Alert!

Thank you for choosing the "GEEK SQUAD" PC Protection Shield.

Your annual subscription plan has been expired today and re-activated =

again through auto renewal on 18 Aug 2023 and will remain active till =

17 Aug 2024.

The subscription charge $ 369.98 will taken from your nominated accoun=

t funds and the charges will reflect in your account statement within =

4 to 24 hours.

For any assistance, please feel free to contact us at +1 801 895 3746.=

(Toll-Free)

Order and Subscription Details Here -:

Invoice Number: 839088680368

Advanced PC Protection Shield

Payment BY: Auto Debit

Quantity: 04 only

Cost: $ 369.98

Please be noted that if you feel you didn=E2=80=99t authorize the char=

ge or you don't want to continue the service, Kindly reach out to us i=

mmediately at +1 801 895 3746.

Warm Wishes!

Allan A. McDonald

Customer Support Team

This is system-generated email. Please do not reply to this email addr=

ess. (1) Call our 24-hour customer care line.

--wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Hello Dear,
erif; font-size: 15px;">

font-family: Calibri, sans-serif; font-size: 15px;">doctor@nk.ca
n>

le=3D'font-family: "Times New Roman", Times, serif; font-size: 15px;'>=

Annual Contract Rene=

wal Alert!

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Thank you for choosing the "GEEK SQUAD" PC Protection Shield.=

ri, sans-serif; font-size: 15px;">Your annual subscription plan has be=

en expired today and re-activated again through auto renewal on 18 Aug=

2023 and will remain active till 17 Aug 2024.

ri, sans-serif; font-size: 15px;">The subscription charge $ 369.98 wil=

l taken from your nominated account funds and the charges will reflect=

in your account statement within 4 to 24 hours.

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">For any assistance, please feel free to contact us at
span>
ns-serif; font-size: 15px;">+1 801 895 3746.
pan style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; fo=

nt-size: 15px;">
ng>(Toll-Free)

le=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, seri=

f; font-size: 15px;'>Order a=

nd Subscription Details Here -:
gb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 15px;">
ng style=3D"color: rgb(37, 37, 37);">

7);">

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Invoice Number: 016852819682

7);">Advanced PC Protection Shield

">Payment BY: Auto Debit
Quantity=

: 04 only
Cost: $ 369.98
p>

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Please be noted that if you feel you didn=E2=80=99t authorize=

the charge or you don't want to continue the service, Kindly rea=

ch out to us immediately at&=

nbsp;
ily: Calibri, sans-serif; font-size: 15px;">+1 801 895 37=

46
transform: none; text-indent: 0px; letter-spacing: normal; font-family=

: Calibri, sans-serif; font-size: 15px; font-style: normal; font-weigh=

t: 700; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2;=

background-color: rgb(255, 255, 255); font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decor=

ation-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;">.

le=3D'color: rgb(0, 0, 0); font-family: "Times New Roman", Times, seri=

f; font-size: 15px;'>Warm Wishes!

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">Allan A. McDonald
ont-family: Calibri, sans-serif; font-size: 15px;">

yle=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-siz=

e: 15px;">Customer Support Team

le=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=

: 15px;">

olor: rgb(163, 143, 132); font-family: "Times New Roman", Times, serif=

; font-size: 13px;'>This is system-generated email. Please do =

not reply to this email address. (1) Call our 24-hour customer care li=

ne.

--wCZ0spp9idz7cAdan7U=_uTAhVvxygpagy--

Categories: Google Spam, Phish

0 Comments

CRA Phish from Buffalo , New York
Posted by Dave Yadallee on Friday, August 18. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Aug 2023 14:27:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qX60p-000D9f-2n

for dave@doctor.nl2k.ab.ca;

Fri, 18 Aug 2023 14:24:03 -0600

Resent-From: The Doctor

Resent-Date: Fri, 18 Aug 2023 14:24:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [191.101.33.177] (port=40052 helo=opencdnv6.syscdn.zjsxlt.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qX3Mi-000IDS-1f

for root@nk.ca;

Fri, 18 Aug 2023 11:34:40 -0600

X-Device-Accept : 3366

To: root@nk.ca

From: "Canada Revenue Agency (CRA)"

Reply-To: master@zixun.jia.com

Subject: Good news, we've approved your refund request 177

Message-ID: <60ac1fc46c6683836a9e9acbfc6f3b6f@zixun.jia.com>

X-Mailer: DKIMValidator 12.7.5 (https://github.com/PHPMailer/DKIMValidator)

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1cb3e47ba267a7fcd8f13f7768cd38d85"

Content-Transfer-Encoding: 8bit

Date: Fri, 18 Aug 2023 19:32:25 +0200 (CEST)

This is a multi-part message in MIME format.

--1cb3e47ba267a7fcd8f13f7768cd38d85

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

You have trouble to see this ?Â View as web page

Â

Â

We confirm that your request has been processed successfully.

Â

Please view your document securely

Consulter

This is a secure, encrypted message : 05092016

--1cb3e47ba267a7fcd8f13f7768cd38d85

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFO=

RM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALI=

GN: center; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-INDENT: 0px=

; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial'>
ace=3DModern>
, Calibri, Candara, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0=

px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(51,51,5=

1); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; DISPLAY: i=

nline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(245,245,245=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: nor=

mal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=

xt-decoration-style: initial; text-decoration-color: initial'>
=3D"FONT-SIZE: 12px; FONT-FAMILY: Helvetica, Arial, sans-serif; WHITE-SPACE=

: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT=

: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLA=

Y: inline !important; LETTER-SPACING: normal; TEXT-INDENT: 0px; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: =

0px; text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial">
"Source Sans Pro", Calibri, Candara, Arial, sans-serif; WHITE-SPACE: normal=

; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; C=

OLOR: rgb(51,51,51); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDO=

WS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR=

: rgb(245,245,245); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial; text-decoration-color: initi=

al'>
if; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: no=

ne; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WI=

DOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; TEXT-INDENT: 0=

px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text=

-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial">You have trouble to see this ?=

=C2=A0
ca, arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFO=

RM: none; FONT-WEIGHT: 400; FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETT=

ER-SPACING: normal; LINE-HEIGHT: 20px; TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px" hr=

ef=3D"https://courrielweb.videotron.com/" rel=3D"noopener noreferrer" targe=

t=3D_blank>View as web page

Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFO=

RM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALI=

GN: center; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-INDENT: 0px=

; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial'>
ace=3DModern>
, Calibri, Candara, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0=

px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(51,51,5=

1); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; DISPLAY: i=

nline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(245,245,245=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: nor=

mal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=

xt-decoration-style: initial; text-decoration-color: initial'>
=3D"FONT-SIZE: 12px; FONT-FAMILY: Helvetica, Arial, sans-serif; WHITE-SPACE=

: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT=

: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLA=

Y: inline !important; LETTER-SPACING: normal; TEXT-INDENT: 0px; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: =

0px; text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial">
tps://encrypted-tbn0.gstatic.com/images?q=3Dtbn:ANd9GcSUMvBoS64KFobz8rDvMDR=

7EoNlxLaoqdQdPnr9YCOV0hevJH_72GkM7dA_g60_CFU7zF8&usqp=3DCAU" align=3Dbaseli=

ne>

Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFO=

RM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALI=

GN: center; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-INDENT: 0px=

; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial'>
ace=3DModern>
, Calibri, Candara, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0=

px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(51,51,5=

1); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; DISPLAY: i=

nline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(245,245,245=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: nor=

mal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=

xt-decoration-style: initial; text-decoration-color: initial'>
=3D"FONT-SIZE: 12px; FONT-FAMILY: Helvetica, Arial, sans-serif; WHITE-SPACE=

: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT=

: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLA=

Y: inline !important; LETTER-SPACING: normal; TEXT-INDENT: 0px; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: =

0px; text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial">=C2=A0

Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFO=

RM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALI=

GN: center; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-INDENT: 0px=

; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial'>
ace=3DModern>
, Calibri, Candara, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0=

px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(51,51,5=

1); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; DISPLAY: i=

nline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(245,245,245=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: nor=

mal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=

xt-decoration-style: initial; text-decoration-color: initial'>
>=C2=A0

de", Verdana, Arial, Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACI=

NG: 0px; TABLE-LAYOUT: fixed; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=

: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial' cellSpacin=

g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>

BLE>

NE-HEIGHT: 22px; PADDING-RIGHT: 0px" height=3D"100%" vAlign=3Dtop>

DDING-TOP: 0px">
helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(57,61,71); FONT-STYLE:=

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-S=

PACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-=

variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-w=

idth: 0px; text-decoration-thickness: initial; text-decoration-style: initi=

al; text-decoration-color: initial'>
odern>We confirm that your request has been processed successfully.<=

/SPAN>

DDING-TOP: 0px">
helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(57,61,71); FONT-STYLE:=

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-S=

PACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-=

variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-w=

idth: 0px; text-decoration-thickness: initial; text-decoration-style: initi=

al; text-decoration-color: initial'>
FONT>

=3DModern>=C2=A0

-FAMILY: arial, helvetica, sans-serif">Please =

view your document securely

de", Verdana, Arial, Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACI=

NG: 0px; TABLE-LAYOUT: fixed; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=

: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial' cellSpacin=

g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>

ING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dcenter>

0 cellPadding=3D0 border=3D0>

r=3D#257bdb>
rgb(51,51,51) 1px solid; BORDER-RIGHT: rgb(51,51,51) 1px solid; BORDER-BOT=

TOM: rgb(51,51,51) 1px solid; FONT-WEIGHT: normal; COLOR: rgb(255,255,255);=

PADDING-BOTTOM: 12px; TEXT-ALIGN: center; PADDING-TOP: 12px; PADDING-LEFT:=

18px; BORDER-LEFT: rgb(51,51,51) 1px solid; DISPLAY: inline-block; LETTER-=

SPACING: 0px; LINE-HEIGHT: normal; PADDING-RIGHT: 18px; BACKGROUND-COLOR: r=

gb(37,123,219); border-radius: 6px" href=3D"https://rebrand.ly/sphq3po" rel=

=3Dnoreferrer target=3D_blank>Consulter=

de", Verdana, Arial, Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACI=

NG: 0px; TABLE-LAYOUT: fixed; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=

: rgb(0,0,0); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial' cellSpacin=

g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>

<=

/TBODY>

NE-HEIGHT: 22px; PADDING-RIGHT: 0px" height=3D"100%" vAlign=3Dtop>

=3D'FONT-SIZE: 12px; FONT-FAMILY: "Helvetica Neue", Helvetica, Arial, sans-=

serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPHANS:=

2; WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial'>This is a secure, encryp=

ted message : 05092016

--1cb3e47ba267a7fcd8f13f7768cd38d85--

Categories: Phish

0 Comments

Mcafee phish from google gmail
Posted by Dave Yadallee on Friday, August 18. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Aug 2023 18:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWmyx-000DJa-0g

for dave@doctor.nl2k.ab.ca;

Thu, 17 Aug 2023 18:04:51 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Aug 2023 18:04:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f175.google.com ([209.85.160.175]:39100)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWkPy-0009rY-07

for doctor@nk.ca;

Thu, 17 Aug 2023 15:20:37 -0600

Received: by mail-qt1-f175.google.com with SMTP id d75a77b69052e-4106eb061b9so570131cf.0

for ; Thu, 17 Aug 2023 14:18:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692307109; x=1692911909;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=laqHPhYijdKJtq3wxt0TJ+p5s9OM0VQnioUxWPoe7/0=;

b=p7gVrA5oMMCUJ5hGOJhYzSiMuPtkOc5H+PaBvER2v5l9P/T4rwyP2nSe0VOj5MaLXB

b9/TwvlTIxjZE7CEoYpkgRrhzU3kQAGPsrgIPV19/fKKHEYmlE8ZsyROPr435rmQfFtE

JGeP9E0vKnrvUrJASgTVavoc8l2ypWl8QISTyWKoWz0nqKWM5zQf/qKsFky1PAXTYiGL

Dix5kUcf2qgk99AvuA8PuZX4BlgMqxuUTy413QoRlRop0yASaSEK2QGodsBm6Rj7k/ET

/vCG9twqNmfOqqxRMUx7nAsh3HIBJXtHFa+ZzvRdW/JnEn0aAJxYdu0aFob8Eo2jthus

epLw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692307109; x=1692911909;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=laqHPhYijdKJtq3wxt0TJ+p5s9OM0VQnioUxWPoe7/0=;

b=OK0UY31g6wmulzY+WYaytLjp/bTbpxltIjWmR5RKr4fd4Skbw4EQssdkS6euqA+Pfl

+zgGTV2pLKNKZqnBBtlDwxAjnOQk13DGBePe9oXtkbxUzAOTQSnHo8qUlfelRQGaBLpK

ohDnGrYl2oecdEN/bqX1/t8K2kKcULJTrJ7z5lAWmmra/IAqvGy7vPjcN0yv06BZ9Qe8

69mRRxYmgZaTcV4fyfSnlTNvgFJAQqUQeg89xx3Sg9HHYw/P7xzvG1xnP4KZKNFSSmuD

ib9GjupAihpsvnwtv4i/d2lrTIeo+bl4BwC5UIu0wx8K2h8rXnJ1cnrnet9alPvd/vlI

tR2w==

X-Gm-Message-State: AOJu0YyDjMWcv1IzZX6J4bAxFpsxhmc/TOHTuTLyF8sR9KoJbWVCRbHQ

Ui5UEurWm9RgHjGtMVkq+XFZcgzH9yGmtGP4ssA=

X-Google-Smtp-Source: AGHT+IExDsdBDxQQIP/NjI04Pnm63ancq/NxrTVY99DBoaGo4mnLDVFFWiIEjH9ymT049sMLUgZ1Cg==

X-Received: by 2002:a05:6214:621:b0:63d:2d7e:39f1 with SMTP id a1-20020a056214062100b0063d2d7e39f1mr904628qvx.2.1692307109035;

Thu, 17 Aug 2023 14:18:29 -0700 (PDT)

Received: from 86.48.15.158 ([86.48.15.158])

by smtp.gmail.com with ESMTPSA id p16-20020a0cf550000000b0063d152e5d9asm149350qvm.120.2023.08.17.14.18.27

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 17 Aug 2023 14:18:28 -0700 (PDT)

Message-ID: <64de8ea4.0c0a0220.5f1c0.13f5@mx.google.com>

From: "Joe F. Kelley"

Subject: Smooth Transition: Your Plan Has Been Automatically Renewed

To: "doctor"

Content-Type: multipart/alternative; boundary="RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m"

MIME-Version: 1.0

Date: Fri, 18 Aug 2023 02:48:27 +0530

This is a multi-part message in MIME format

--RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Dear client , doctor@nk.ca

Annual Contract Renewal Notice!

Thank you for choosing the "MCAfee-Total" PC Protection Shield.

This is to inform you that, as of August 17, 2023, your yearly subscri=

ption has been revived and will be valid through August 16, 2024.

Since you selected auto debit, the sum of ($349.99) is processed from =

the updated payment source; the same recurring cost will be deducted o=

nce again the following year.

For immediate queries - Contact Helpdesk +1 (818) 214-4094. (Toll-Fre=

e)

Order Information :

Reference ID : 974-2295-3164

Advanced PC Protection Shield

Payment Mode : Auto Debit

Devices Covered : 04 only

Subscription fee : $ 349.99

Please be noted that if you feel you didn=E2=80=99t authorize the char=

ge or you don't want to continue the service, Kindly reach out to us i=

mmediately at +1 (818) 214-4094.

For refunds and cancellations, please contact our customer helpline nu=

mber immediately to avoid any transactional disputes.

=20

With sincere thanks!

Joe F. Kelley=20

Accounts Team (Manager)

This is system-generated email. Please do not reply to this email addr=

ess. (1) Call our 24-hour customer care line.

--RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Hi Dear, doctor@nk.ca

7, 37, 37);">Annual Contract Renewal Notice!

Thank you for choosing the "M=

CAfee-Total" PC Protection Shield.

This is to inform you that, as of August 17, 2023, your =

yearly subscription has been revived and will be valid through Augu=

st 16, 2024.

Since you selected auto debit, the sum of ($349.99) is processe=

d from the updated payment source; the same recurring cost will be ded=

ucted once again the following year.

To cancel, modify or reorder =

please feel free to contact us toll-free +1 (818) 214-4094
trong>. (Toll-=

Free)

7, 37, 37);">Order Information :
: rgb(37, 37, 37);">

>

Reference ID : 974-2295-3164<=

br style=3D"color: rgb(37, 37, 37);">Advanced PC Protection Shield

style=3D"color: rgb(37, 37, 37);">Payment Mode : Auto Debit

"color: rgb(37, 37, 37);">Devices Covered : 04 only

rgb(37, 37, 37);">Subscription fee : $ 349.99

Please be noted that if you f=

eel you didn=E2=80=99t authorize the charge or you don't want to conti=

nue the service, Kindly reach out to us immediately at
le=3D"color: rgb(37, 37, 37);"> +1 (818) 214-409=

4.

For refunds and cancellations=

, please contact our customer helpline number immediately to avoid any=

transactional disputes.

Best regards!

Joe F. Kelley
The Bi=

lling Team

7, 37);">T=

his is system-generated email. Please do not reply to this email addre=

ss. (1) Call our 24-hour customer care line.

--RUY2d4EW4SHUwjnZHhk8jyV=_LDs7K1C1m--

Categories: Google Spam, Phish

0 Comments

Stanlet Tool kit phish from Sendgrid
Posted by Dave Yadallee on Thursday, August 17. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Aug 2023 06:01:04 -0600

Received: from s.wrqvtvpz.outbound-mail.sendgrid.net ([149.72.120.62]:41842)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qWbbx-000Fom-0q

for dave@doctor.nl2k.ab.ca;

Thu, 17 Aug 2023 05:56:27 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;

h=from:subject:mime-version:content-type:content-transfer-encoding:

list-unsubscribe:to:cc:content-type:from:subject:to;

s=smtpapi; bh=7TFJKL4mj+ApezWgis7Ei5Jhevw2cYawLzm5PuT4m7Q=;

b=KjRy7r2lsK52/vVoxmtpp8w6nWY3THh0XYNkgN1RrgiDkuhadm9UOk2ffTNYevczSFAo

p4dxNVRaI32xZInOck39OEqpKFzpHldSluq9H9biIOl1OUmeTqFRholpQrHKHi2UfdKoSY

NSym8o/nyZb4BjUzDtNWXLniIaB8HbRsI=

Received: by filterdrecv-7fd948b676-cxw4k with SMTP id filterdrecv-7fd948b676-cxw4k-1-64DE0A67-9

2023-08-17 11:54:15.240466617 +0000 UTC m=+8511489.137776148

Received: from azr-2-2.eastus.cloudapp.azure.com (unknown)

by geopod-ismtpd-25 (SG) with ESMTP id df2goWaqSbyTY0Qflc_oyQ

for ; Thu, 17 Aug 2023 11:54:15.202 +0000 (UTC)

From: B&Q Department

Subject: Verification #76431-34 Stanley Tool Set

MIME-Version: 1.0

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit

List-Unsubscribe:

Date: Thu, 17 Aug 2023 11:54:15 +0000 (UTC)

Unsubscribe:6461766540646f63746f722e6e6c326b2e61622e6361

Message-ID:

X-SG-EID:

=?us-ascii?Q?2qcl+XQ70mAzQHqJy0BNtLZlmu48tpe=2FnsUmzkEw5hBR8yrjt+lUXBtYGKSGfh?=

=?us-ascii?Q?eA=2Ftb8cwofhfLmtxrP7d16LXrZgAZCpxQy4DzII?=

=?us-ascii?Q?nhgO3ENqgjTs2ry+pN0ZhLU30wPLbd+fMIkT+t7?=

=?us-ascii?Q?4c0pNfHknN2TdR2sPXywZTlNlTsWu=2F55E79K=2Fhs?=

=?us-ascii?Q?EQqKVLDzEo30VYSy7YyeGUbnZbHaglUYmlEx2Oy?=

=?us-ascii?Q?K5kGId4PD56+vG1RNnn=2F90RcsLcH81OBtqy+TI?=

To: dave@doctor.nl2k.ab.ca

X-Entity-ID: XG2oi5wSBZoxYp8DG+lkPA==

X-Antivirus: AVG (VPS 230816-6, 8/16/2023), Inbound message

X-Antivirus-Status: Clean

You have won an Stanley Tool Set

sofa

route

witty

panicky

lunch

release

mature

quick

circle

understood

educate

statuesque

land

cooperative

furtive

plants

worried

far-flung

title

minute

rare

pop

farm

protect

wail

merciful

religion

lopsided

aunt

zealous

work

deceive

imagine

bloody

decide

ethereal

cautious

explode

unequaled

check

nail

letters

sun

mere

overjoyed

amazing

weak

hollow

juvenile

shade

well-made

girl

thread

thick

place

bumpy

radiate

story

silent

ground

drain

sprout

bead

tacit

jog

hang

lyrical

overconfident

aspiring

sink

humdrum

government

tent

vanish

shiver

aggressive

shape

school

frame

kill

quirky

previous

kiss

lettuce

knife

deserted

unadvised

achiever

dust

knee

optimal

record

letter

competition

jump

damaged

deafening

current

motion

defiant

delay

plough

unable

fluffy

ruthless

tire

depend

zinc

stranger

trashy

cream

property

guiltless

sedate

spy

doctor

public

miniature

gaping

mean

profuse

resonant

untidy

courageous

children

load

hulking

wing

utopian

cushion

cherry

label

puncture

sigh

pull

provide

adorable

sheet

careless

fuzzy

owe

jellyfish

move

quicksand

tooth

nebulous

poison

hesitant

festive

alcoholic

compare

force

animated

decay

spiffy

unit

crooked

scene

jagged

poke

grass

onerous

salt

chop

hammer

aftermath

squirrel

exercise

shave

match

natural

blind

foot

sort

hole

occur

crabby

lame

equable

boat

wretched

committee

foolish

chess

evasive

ossified

learned

key

bleach

coal

mom

honorable

second

wacky

girls

fretful

maid

thaw

right

ratty

groovy

abandoned

follow

person

multiply

muddled

back

clever

dry

guide

books

nostalgic

private

grubby

power

clover

remove

breathe

employ

board

stupendous

finger

minister

inexpensive

suppose

heartbreaking

bent

sniff

healthy

thoughtless

rush

quack

curtain

silly

smash

afternoon

wait

apathetic

exchange

things

invite

want

judicious

unsightly

cough

mice

spotted

chemical

advice

feeling

uptight

next

doubt

toothsome

history

tasteful

hospitable

spiky

trap

box

holiday

snail

sloppy

grey

coil

reward

quartz

abaft

destruction

cooing

flavor

malicious

attraction

abounding

toes

sneeze

boorish

road

party

laughable

development

exultant

judge

large

windy

claim

friction

addition

splendid

wrist

fuel

suck

end

gabby

bolt

rural

glamorous

axiomatic

hate

amused

careful

flimsy

sordid

wipe

spoon

potato

white

bounce

gigantic

premium

parallel

aromatic

object

nonchalant

annoyed

seemly

scream

stingy

authority

preach

sea

rob

day

possess

wandering

basketball

angry

majestic

wise

delightful

alluring

shock

tumble

food

taboo

discover

frogs

unnatural

pink

trees

self

arch

tremendous

bike

comb

irate

imported

switch

nine

domineering

unfasten

obsequious

wasteful

plausible

north

industrious

perpetual

functional

habitual

macabre

metal

capable

sour

warlike

minor

baseball

boring

prepare

connection

punishment

obtainable

wiggly

prose

sail

penitent

wriggle

table

elastic

describe

raise

extra-large

receive

count

bump

channel

depressed

book

stereotyped

arithmetic

bitter

sparkling

guard

wry

town

jar

synonymous

hop

fence

country

luxuriant

roasted

keen

distinct

woozy

tug

bawdy

roomy

plug

cure

conscious

cheat

hideous

direction

square

abhorrent

shame

righteous

inquisitive

add

special

reading

zip

powerful

laborer

lying

birth

well-groomed

kittens

youthful

yak

pour

truck

sweltering

hungry

basin

one

normal

scared

omniscient

ill-informed

hover

nutritious

mailbox

walk

abashed

spell

extra-small

crack

afford

possible

hard

sneaky

obtain

early

cross

attempt

gentle

night

truculent

easy

decision

bone

run

planes

war

expensive

flash

wonderful

probable

bushes

cable

pale

mug

thinkable

efficacious

offer

earthquake

side

lush

better

correct

flood

bad

spoil

aware

visit

zephyr

plot

fade

aboriginal

visitor

exuberant

remind

damage

concentrate

branch

supply

yawn

credit

debonair

married

unaccountable

parsimonious

wealth

eyes

oatmeal

stocking

confess

bow

invention

zipper

distribution

pick

page

wicked

awake

repair

used

enormous

command

thankful

women

squeak

rich

unlock

toothpaste

group

moan

pot

pastoral

coordinated

fix

include

disturbed

vengeful

salty

bird

weigh

sweet

hill

lazy

uneven

false

victorious

jewel

toys

discovery

woebegone

fork

ancient

need

sudden

sore

design

support

kind

certain

embarrassed

puzzled

left

zebra

teeny

improve

boast

mask

sisters

rail

pass

present

debt

birthday

file

paddle

uncovered

scarecrow

noiseless

harsh

step

haircut

faded

stop

expect

swanky

elbow

glove

spicy

detect

fall

agree

throne

sick

example

abject

contain

cub

incredible

vase

comparison

tax

tramp

knowledge

button

camera

duck

animal

sharp

possessive

fish

park

Categories: Phish, sendgrid.net spam and phish

0 Comments

Page 4 of 4, totaling 48 entries

previous page

No entries to print

Account ID:	68621438
User:	dave
Secure Status:	Suspended
Today Discount:	90В %
Limited Time:	17-08-2023