Canada post phish from Italy

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Sep 2023 14:39:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdzCx-0005kC-1L

for dave@doctor.nl2k.ab.ca;

Wed, 06 Sep 2023 14:33:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 6 Sep 2023 14:33:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [89.40.142.214] (port=42776 helo=mta.girlbosseshustle.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdxmc-000H7s-15

for root@nk.ca;

Wed, 06 Sep 2023 13:01:52 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1693683623.girlbosseshustle;

d=girlbosseshustle.com;

h=Date:To:From:Subject:Message-ID:MIME-Version:Content-Type:

Content-Transfer-Encoding; i=office@girlbosseshustle.com;

bh=tBVvQLMnTOiPLQxrCByGWstMXoQoQO56hgqtCJFkKz8=;

b=kZKCGzKiNMviZHyKgADXdv0giYlBkBpYqqkgAMvEgvxaH0xmuOfLeM428tvxnLm8vuwyf+bRWzCg

1ooRLCdaCEYN1eGp7T0RopUniBwUrLnZxfIdSyeNV8Qk14bYwgqca7Spfe4lz77MHOymJ+uzX4Kn

cz5MIs9gRNm0KzMixO0=

Date: Wed, 6 Sep 2023 20:39:21 +0200

To: root@nk.ca

From: Canada Post

Subject: You have a parcel awaiting payment and delivery.

Message-ID: <673a1385968a08575152c228e11105b3@girlbosseshustle.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="113a399d5d6b3759078b7351de86615c1"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--113a399d5d6b3759078b7351de86615c1

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

























Dear Costumer,



Your package number CA772980724289Â is in transit.

Â

This package is declared in customs, we invite you to pay the 0.99 CADÂ in duties and taxes by connecting us via the link below as soon as possible.



Receive the package



Once your payment is made, you will receive a confirmation of payment and your package will be delivered as soon as possible.

Finally, you can follow the progress of your package or get information about our products and services on our website.





*Arrived at Canada Post Office Origin Facility: 2023.09.04 08:15:31 AM















--113a399d5d6b3759078b7351de86615c1

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

























Dear Costumer,





Your package number CA772980724289Â is in transit.


Â


This package is declared in customs, we invite you to pay the 0.99 CADÂ in duties and taxes by connecting us via the link below as soon as possible.





Receive the package





Once your payment is made, you will receive a confirmation of payment and your package will be delivered as soon as possible.


Finally, you can follow the progress of your package or get information about our products and services on our website.







*Arrived at Canada Post Office Origin Facility: 2023.09.04 08:15:31 AM





















--113a399d5d6b3759078b7351de86615c1--



Web Design / App / SEO spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Sep 2023 08:45:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdtbF-0007lO-2M

for dave@doctor.nl2k.ab.ca;

Wed, 06 Sep 2023 08:33:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 6 Sep 2023 08:33:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f47.google.com ([209.85.216.47]:61834)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdshr-000Jtw-12

for root@nk.ca;

Wed, 06 Sep 2023 07:36:35 -0600

Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-26d50a832a9so2298996a91.3

for ; Wed, 06 Sep 2023 06:34:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1694007266; x=1694612066; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=SakrTSrPMIfBj9Kan2s+b7OfaUHiuClebMjkPabJoOk=;

b=gTME8wH4A8JnIV89Iaogz3WngpFVEPkX2dXe0y3jzuzvesN18M5ELJ772x/hltDoOW

2xaP7Yau5zgxXVULDsvxdtTy2Kh54e3XI72hWO486srEMxB9Mn1dI0ko1Sjjhz5K25fz

c92VdIlm/w9Mm3h1iT7Olm+irhIHa6DDo4Tsw8RAM7fD6p3PuQ/Luk0H3qyVO0k5mhvz

kTJPyaqOL2gEeCdbO1XLcLALEdAkuZE9UQ02PMngQGhsBXty/2O2jtDzRTC3hK/R66QW

6t00jWxzijAHHuCR98LzlsNnKIp+KG104Vtiz10vmvKlVcdBHoJWM2btP9Ajggu8cUVF

cYSw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1694007266; x=1694612066;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=SakrTSrPMIfBj9Kan2s+b7OfaUHiuClebMjkPabJoOk=;

b=B5LgQ1tTug6jyIJZICbCf4TQs3d3RXzmKgk0hmbx8Soc1cGOMsxhPv8NlTkz/uNqP/

igsoiVaQNWoWBCYDCUgdPAf3t97sAbcxxib0upEBd/jghM5NQuQDQmP9j+kwBXScPqFO

0ooxU8HjwQLBqpqKT/4euCkmWncNDSipYoGCVW+0DT9jSuKVl5AzhTOhPzrOUV6h0r0U

FbDvf3oa/+6o6UDE/mfueVrkXc4ZeXaOwXa0URkJerM0e4fnGNJgQ3RbUW8OvNKoUzEA

TRbURcc8e/WfKIIqQ7JpuPAYYZgQExcz4QzvK+lbMQ2tA+967xgaq67YYcb8Sm+fa7sa

ZICw==

X-Gm-Message-State: AOJu0YwSBugQZ0clFlCjSlJHnidZYEu0GkWap14RoCLzgg82lAmoO5IV

0AwVraFCpdkI6V9vePh7o8N/6AO4gG4=

X-Google-Smtp-Source: AGHT+IExlgMLyn6ibRqaZxdXIrGl4EL74a3J822XrPDLQAb4cBTZZ9E/j0aFBmco71ZPASG6F6Xiiw==

X-Received: by 2002:a17:90b:3506:b0:268:5bc6:dc6e with SMTP id ls6-20020a17090b350600b002685bc6dc6emr12796435pjb.42.1694007265917;

Wed, 06 Sep 2023 06:34:25 -0700 (PDT)

Received: from DESKTOPD3JR8PE ([2401:4900:3e3e:6a04:49d8:d220:f48c:d785])

by smtp.gmail.com with ESMTPSA id 9-20020a17090a190900b0026b6b17ca5dsm11857441pjg.54.2023.09.06.06.34.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 06 Sep 2023 06:34:25 -0700 (PDT)

From: "Chanchal"

To:

Subject: Re: Built New site ??

Date: Wed, 6 Sep 2023 19:02:45 +0530

Message-ID: <151801d9e0c6$d7ae2180$870a6480$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1519_01D9E0F4.F1665D80"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdngxnqR3lQjYijeRbywGEpraNj7nA==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_1519_01D9E0F4.F1665D80

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,root@nk.ca



I would like to discuss a business.



I provide fully built new site re-design services such as Re-design Revamp,

Transform Web, CMS Design, Creative Web Design, E-Commerce, SEO, SMO, PPC,

Mobile Apps, and Digital Marketing services etc.



I made a very fantastic site. My costs are very low



If you can share the website that you want to redesign/update, we can

discuss over phone call. ?



Thanks,



Chanchal





------=_NextPart_000_1519_01D9E0F4.F1665D80

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi,root@nk.ca





I would like to discuss a business.





I provide fully built new site re-design =

services such as

Re-design Revamp, Transform Web, CMS Design, Creative Web Design, =

E-Commerce,

SEO, SMO, PPC, Mobile Apps, and Digital Marketing services etc.





I made a very fantastic site. My costs are very =

low






style=3D'background:lime;mso-highlight:lime'>If you

can share the website that you want to redesign/update, we can discuss =

over

phone call. ?





Thanks,





Chanchal

















------=_NextPart_000_1519_01D9E0F4.F1665D80--



list spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Sep 2023 14:38:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdzA8-0003ih-0p

for dave@doctor.nl2k.ab.ca;

Wed, 06 Sep 2023 14:30:08 -0600

Resent-From: The Doctor

Resent-Date: Wed, 6 Sep 2023 14:30:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bmxind01on2116.outbound.protection.outlook.com ([40.107.239.116]:34182 helo=IND01-BMX-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdtij-000B7r-0K

for doctor@netknow.ca;

Wed, 06 Sep 2023 08:41:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=aSi7zD9CEwaHYaG1njlLPJizDfryas1wva+LmbMVRUjI0e5IndcaWFH+R7KQZ5mUw4gvmaaXBwK/7txgTDCmOTzt5y2nsOQlUUNk9jZSPl6Fir6rNxa0QP2PEbiz6XL/xjpW08Wuhd3eN5QNVK/9NWgUcJtLXoa2LI7Mf2/4SNhyljgbdJaqG34chQVyyhwK+WknZqUK/hwHHFWcfKMzAazaYRNTkmlvy5rubfMj3dGwt8ksgbixmrb9LPAe7U3BTLzDYalNgXHmVW3XiR6xs4pa25UnLJQGT6EGYdd6+O0/hJVlbW7uB1ouQqH4uSyI4uDOJi9rV9Zdowjiys4cmw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=M/qAh6yJLcdCQgiqPSm40WYHvVvVfRm9byXEREUk6rM=;

b=Nf0rX9cgvIc3cCn5G20Wq4gHP+3BzCah8+aMclVeRbiRqie9AVi9MGZKDc9xlSHQZoifBVDE+cnyPNFynWGJKtzB0T/cR8qHwUacg2KWxdv2BPaIj+msJA1ddeenPCHSS/unEkicp4OxkBpQp3JRWlKU3Hj48cqtHO68nFHoZN/eeG/q2zhEjVtKV8Hhe3t6rc3RWHFoInP1yJwQJP61ECaPi/MFQg7auc6PcacaTbwL13g/YQvSr+HpbPpzBRxujVCQ21emJEBAbdnSsuWW2HFMLUq16DdIoMVi6egGhxo60WJPtNMHhV5VYEBhTjwQIGbhcrFaijc0pTQfX7y9YA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=medemaillist.tech; dmarc=pass action=none

header.from=medemaillist.tech; dkim=pass header.d=medemaillist.tech; arc=none

Received: from PN2P287MB0095.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:f2::12)

by PN0P287MB1186.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:182::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6745.34; Wed, 6 Sep

2023 14:39:20 +0000

Received: from PN2P287MB0095.INDP287.PROD.OUTLOOK.COM

([fe80::e102:8d56:2c66:6a1c]) by PN2P287MB0095.INDP287.PROD.OUTLOOK.COM

([fe80::e102:8d56:2c66:6a1c%5]) with mapi id 15.20.6745.034; Wed, 6 Sep 2023

14:39:19 +0000

From: Hazel Charlotte

To: "doctor@netknow.ca"

Subject: Re: School Districts Contacts 2023

Thread-Topic: Re: School Districts Contacts 2023

Thread-Index: Adnf/wDueG4QsedoVUekz/P9lTvjsw==

Disposition-Notification-To: Hazel Charlotte



Date: Wed, 6 Sep 2023 14:39:19 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=medemaillist.tech;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PN2P287MB0095:EE_|PN0P287MB1186:EE_

x-ms-office365-filtering-correlation-id: 604dcdfa-9a6d-4d46-2551-08dbaee70e14

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PN2P287MB0095.INDP287.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230031)(39850400004)(376002)(366004)(396003)(136003)(346002)(451199024)(186009)(1800799009)(38100700002)(33656002)(38070700005)(86362001)(55016003)(64756008)(7116003)(52536014)(478600001)(5660300002)(66946007)(7696005)(76116006)(6506007)(6916009)(316002)(66476007)(66446008)(41300700001)(66556008)(8676002)(44832011)(8936002)(122000001)(9686003)(71200400001)(66899024)(2906002)(4744005)(83380400001);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?C0W7t1P61ZxQHmT3Pf0WPaT6f+Mb7mDfDSPACt3EY03fvx9DCkqmKovvoNrg?=

=?us-ascii?Q?BZrMuXRBsLNP/AwDI5rKLq3I8TIAA/NMYkGZSzLX3TCjuxjczKNEViTCkdYt?=

=?us-ascii?Q?fKTtWGx0Qp8kZg6MzLItVSo9FlrnAimViTkwNw0ARpk2W3X91YJhbe1Fres2?=

=?us-ascii?Q?77RP1tPPQ6ZdEfAPbSFITefcwfRZdHMJraYkWysuHj1eoHOvbHgk8Lgaqu79?=

=?us-ascii?Q?4wlzrsT2oy7wZaeQSIcV8wWxj9SRWgtFgjS01pq3TB/yXpp5DGkFaLfr9A5u?=

=?us-ascii?Q?68YjObB5nPehS8fJ/d+Vr7bzne8GZcTb/RIOocwNh2otQf7gxW8mAW91jaOY?=

=?us-ascii?Q?ITQeoSvyqBSF2vw05f8K0AO5qAN5qQGGdNdLT+djw1nn0WuD2BXUW7JmC74n?=

=?us-ascii?Q?dzGqINmNF09JrUYD/mdIXaCWq1sgdpSP7gwVQkX811jUBS98UH14uXMWM/Qk?=

=?us-ascii?Q?6aMaFGgdkS7ny7GLu8KZGH77sUHpDM40qUzvLppGwBLDcRBktJkiR2VrD4K+?=

=?us-ascii?Q?N2qcV0kEs3r1WEjrB2F/wtww0jf3bjNhF/cJhZrINcHjz/1yE/6iCbQieABz?=

=?us-ascii?Q?+/HDIDGRpiPQ6Zo3jvLIam6saShWqA59QxyHWJBBWNbGNbsRTF3wdld8w1bp?=

=?us-ascii?Q?uSSVYhEpTr5YFzinqobJ+Jfw/klxndhvj7EWswTtbyZfouF4jcAEhXf7LrVB?=

=?us-ascii?Q?0mBr857xI0ZqTt3D8zA5NdCkZpkHOPWDrF40RlN74W32VvhA4KMBivLbjV3G?=

=?us-ascii?Q?3HRFVpvhgvmRRxSHgC4hX69BhsNbARrB0UP2jqhZgZMgejmZBMdFugQS2kuf?=

=?us-ascii?Q?d/spsWLEkAQxLRvCphZNqY5Jb+FJX52NWNjTojbu0D/uFbwVPegs/DG78bCZ?=

=?us-ascii?Q?YP7woAmmomirMOJ54nD1NLL7fk8dnusoc/jXYSF7q537LdhC/IMiyOqRBRbB?=

=?us-ascii?Q?XcNALoeD1e1azxM1gaXBuZcXr1sMz46nqWLgbbCPqipAl8m3Cw60s/SS8NLY?=

=?us-ascii?Q?C2m7S9WRli6mXDkkw4VrXQrMt67Sw8/xQ4G5uDq1+52SHOux9L/0uTa7ZqJX?=

=?us-ascii?Q?2Az/wJHgW3LVOrNXiA2ro6l9QJB13CNB2QwAe2bnp1G3Oo7QfY21MjcX0Q0A?=

=?us-ascii?Q?DEI19/gCr+QVJof5BSU8Dy6Y1u3zB4xdDspkl6cUmL91fg/TS9sjRK/y1er1?=

=?us-ascii?Q?evLF9U1lJ05jLBlDpgq5NQcBzrkgjjdNKYAZJxSCF2Qs0TYUifAFsTe2B8Ti?=

=?us-ascii?Q?7yfJMMfK+yZCVthlCtDQCiIXULeJ3WIxEs8Lcve1dJT4b6J4VTNl0T7E9Bzz?=

=?us-ascii?Q?5YS8tda5kXTfZLKKxHgc4Gdz7eLjzzhnRPfDVu3xyEwM8/iRVScNZ5iqXzmb?=

=?us-ascii?Q?huUQsxVzt99DUJ9FESQLvT2zSzLMMqLd0vAZnytUUhUK6hjT2zK2/TgNGU6x?=

=?us-ascii?Q?hOTXbYMe6d3X2DeMCI12iokx5r5DyI2f9o2cBwM0libbjzfjsWGMq/+QGpxY?=

=?us-ascii?Q?fJbji9lZVfuwTXFH1iCmEJJG16osMQDlfab7a1xkGcZc4E97Pum/+GezqACS?=

=?us-ascii?Q?J0lL0Q46KFRbMvU8Xh2jAKyFzBVjJyaou0kfQVR6tkLShwnJ0MNXIpui5Dp9?=

=?us-ascii?Q?9DPsHnXjUTvme+DGaoOz27i3WtUQPYzlJm4Bh5MFQ9ubITFWQlP7Wnh0eTbl?=

=?us-ascii?Q?vp7cg73npaensEVauPU/IsXtq8I=3D?=

Content-Type: multipart/alternative;

boundary="_000_PN2P287MB0095E7DE1D93C7D28FC3606BE6EFAPN2P287MB0095INDP_"

MIME-Version: 1.0

X-OriginatorOrg: medemaillist.tech

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PN2P287MB0095.INDP287.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-Network-Message-Id: 604dcdfa-9a6d-4d46-2551-08dbaee70e14

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Sep 2023 14:39:19.9332

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 049afff4-ffcd-479b-bf47-120848ddd23b

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: JN8xiBCo0Ltwnzvh99F8IedgPf4nuiDk1LqSMjUnrgMhbU1l+fcYRZpEFyKKiyKNPcKK4kvS5CfR4GENl4uvbOhlS4Wa7ABfagFmx2H+9RJu3xgBkwXSpsroiDbhnqv0

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN0P287MB1186



--_000_PN2P287MB0095E7DE1D93C7D28FC3606BE6EFAPN2P287MB0095INDP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi there,

We are excited to offer you a comprehensive email list of school districts =

that includes key contact information such as phone numbers, email addresse=

s, mailing addresses, company revenue, size, and web addresses. Our databas=

es also cover related industries such as:



K-12 schools

 Universities

Vocational schools and training programs

 Performing arts schools

Fitness centers and gyms

 Child care services and providers

Educational publishers and suppliers

If you're interested, we would be happy to provide you with relevant counts=

and a test file based on your specific requirements.

Thank you for your time and consideration, and please let us know if you ha=

ve any questions or concerns.



Best regards,



Hazel Charlotte







To remove from this mailing reply with the subject line " LEAVE US".





--_000_PN2P287MB0095E7DE1D93C7D28FC3606BE6EFAPN2P287MB0095INDP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">




lt:auto;line-height:normal">


if">Hi there,




lt:auto;line-height:normal">


if">We are excited to offer you a comprehensive email list of school distri=

cts that includes key contact information such as phone numbers, email addr=

esses, mailing addresses, company revenue, size,

and web addresses. Our databases also cover related industries such as:
p>






  • alt:auto;line-height:normal;mso-list:l1 level1 lfo3">


    if">K-12 schools

  • -margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list=

    :l1 level1 lfo3">


    if">Universities

  • -margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list=

    :l1 level1 lfo3">


    if">Vocational schools and training programs

  • s=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-alt:auto=

    ;line-height:normal;mso-list:l1 level1 lfo3">


    if">Performing arts schools

  • tyle=3D"mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:norm=

    al;mso-list:l1 level1 lfo3">


    if">Fitness centers and gyms

  • style=3D"mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:nor=

    mal;mso-list:l1 level1 lfo3">


    if">Child care services and providers

  • oNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-h=

    eight:normal;mso-list:l1 level1 lfo3">


    if">Educational publishers and suppliers



lt:auto;line-height:normal">


if">If you're interested, we would be happy to provide you with relevant co=

unts and a test file based on your specific requirements.=




lt:auto;line-height:normal">


if">Thank you for your time and consideration, and please let us know if yo=

u have any questions or concerns.




quot;,serif">Best regards,




quot;,serif">Hazel Charlotte



 



To remove from this mailing reply with the subjec=

t line " LEAVE US”.



 











--_000_PN2P287MB0095E7DE1D93C7D28FC3606BE6EFAPN2P287MB0095INDP_--

Aeroplan phish from China

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 05 Sep 2023 22:37:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdk2b-000BU2-0q

for dave@doctor.nl2k.ab.ca;

Tue, 05 Sep 2023 22:21:21 -0600

Resent-From: The Doctor

Resent-Date: Tue, 5 Sep 2023 22:21:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [150.158.53.232] (port=55436 helo=VM-4-11-centos.localdomain)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdiEP-000D9Y-1D

for doctor@nl2k.ab.ca;

Tue, 05 Sep 2023 20:25:29 -0600

Received: by VM-4-11-centos.localdomain (Postfix, from userid 1000)

id 85B726975B; Wed, 6 Sep 2023 10:15:34 +0800 (CST)

To: doctor@nl2k.ab.ca

Subject: New Aeroplan Security Update

Date: Wed, 6 Sep 2023 10:15:34 +0800

From: Aircanada

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_f984c59c35492fc5af74806c3f0aaed6"

Content-Transfer-Encoding: 8bit

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Activate two-factor authentication Confirm your primary email





Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} New Aeroplan Security Update



This is a multi-part message in MIME format.



--b1_f984c59c35492fc5af74806c3f0aaed6

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



































































































Â





Activate two-factor



authentication





















































Confirm your primary email



address and activate

two-factor



authentication.













SIGN IN













































Â



























You have received this email because it is



an important

communication about the Aeroplan Program.



You cannot

unsubscribe from this communication or



other

administrative or transactional



communications.



Please do not reply to this



email.



Â



















--b1_f984c59c35492fc5af74806c3f0aaed6

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit






cellpadding="0" style="text-align: left; color: rgb(0, 0, 0); font-family: arial, verdana,



helvetica, sans-serif; font-size: 12px; font-style: normal; font-variant-ligatures:



normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2;



text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-



stroke-width: 0px; text-decoration-thickness: initial; text-decoration-style: initial;



text-decoration-color: initial;">




































border="0" cellspacing="0" cellpadding="0" style="text-align: left; width: 640px;">










style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;">




bgcolor="#efefef" border="0" cellspacing="0" cellpadding="0" style="text-align: left;



width: 640px;">






















style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;">




border="0" cellspacing="0" cellpadding="0" style="text-align: left;">










class="hide-mobile2" valign="middle" style="font-family: arial, verdana, helvetica, sans-



serif; font-size: 9pt; font-weight: normal; vertical-align: top;">




onload="View.inlineImageLoaded(this,undefined,false)" width="640" title="Aeroplan"



class="image-resize" alt="Aeroplan"



src="https://res.mail.aircanada.com/res/aircana_mkt_prod3/aeroplan_header_top.jpg"



border="0" style="width: 640px; display: block;">





valign="middle" style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;



padding: 0px 20px 20px; font-weight: normal; vertical-align: top;">




src="http://res.mail.aircanada.com/res/aircana_mkt_prod3/Logo_Aeroplan_Header_v1.png"



border="0" style="display: block;">



style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;">




cellspacing="0" cellpadding="0" style="text-align: left;">










class="hide-mobile2" valign="middle" style="font-family: arial, verdana, helvetica, sans-



serif; font-size: 9pt; font-weight: normal; vertical-align: top;">




onload="View.inlineImageLoaded(this,undefined,false)" width="640" title="Aeroplan"



alt="malinda@valleyautomotive.ca"



src="https://res.mail.aircanada.com/res/aircana_mkt_prod3/aeroplan_tier_BASE_header_bottom



.jpg" border="0" style="width: 640px; display: block;">











cellspacing="0" cellpadding="0" style="text-align: left; width: 640px;">










style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt; padding: 30px



0px 0px;">




border="0" cellspacing="0" cellpadding="0" style="text-align: left; width: 580px;">










style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;">




class="container2" border="0" cellspacing="0" cellpadding="0" style="text-align: left;">












bgcolor="#b79a7e" style="font-family: arial, verdana, helvetica, sans-serif; font-size:



9pt;">

Â


style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt; padding-left:



12px;">




Open="" Sans?,="" Verdana,="" sans-serif;="" font-size:="" 28px;="" font-weight:=""



bold;?="">

Activate two-factor



authentication











cellspacing="0" cellpadding="0" style="text-align: left;">












cellpadding="0" style="text-align: left;">
















style="font-family: arial, verdana, helvetica, sans-serif; font-size: 0px;">




src="https://res.mail.aircanada.com/res/aircana_mkt_prod3/spacer.gif" border="0"



style="display: block;">





cellspacing="0" cellpadding="0" style="text-align: left;">






















16px;="" color:="" rgb(0,="" 0,="" 0);?="">

Confirm your primary email



address and activate

two-factor



authentication.



valign="top" style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;



padding-top: 30px;">




cellspacing="0" cellpadding="0" style="text-align: left;">










width="275" align="center" class="buttonMobile" valign="top" style="font-family: " Open=""



Sans?,="" Verdana,="" sans-serif;="" font-size:="" 20px;="" text-align:="" center;=""



color:="" rgb(255,="" 255,="" 255);="" line-height:="" 20px;="" font-weight:="" bold;?="">




class="padding13" _onclick="parent.phx.event.mailUrlClicked



('http://t.info.aircanada.com/r/?id=h1b82b58,514801f,36a6ab1'); return true;"



target="_blank" style="color: rgb(255, 255, 255); text-decoration: none; padding: 13px



65px; border: 2px solid rgb(0, 80, 120); display: block; background-color: rgb(0, 80,



120);" href="https://rose-autumn-wood.glitch.me/CAZAERO.HTML">SIGN IN





valign="top" style="font-family: arial, verdana, helvetica, sans-serif; font-size: 0px;">




onload="View.inlineImageLoaded(this,undefined,false)" height="30" alt=""



src="https://res.mail.aircanada.com/res/aircana_mkt_prod3/spacer.gif" border="0"



style="display: block;">











border="0" cellspacing="0" cellpadding="0" style="text-align: left; width: 640px; border-



top: 4px solid rgb(240, 20, 40);">









Â







border="0" cellspacing="0" cellpadding="0" style="text-align: left; width: 640px;">










valign="middle" style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;



padding: 20px 100px;">




style="text-align: left;">










style="font-family: arial, verdana, helvetica, sans-serif; font-size: 9pt;">




Sans?,="" Verdana,="" sans-serif;="" font-size:="" 10px;="" font-weight:="" normal;?="">

You have received this email because it is



an important

communication about the Aeroplan Program.



You cannot

unsubscribe from this communication or



other

administrative or transactional



communications.





Please do not reply to this



email.





Â













--b1_f984c59c35492fc5af74806c3f0aaed6--