Zoom Phish from Amazon

Posted by Dave Yadallee on


Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Jan 2024 21:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rTXOW-000000008UF-1yMZ

for dave@doctor.nl2k.ab.ca;

Fri, 26 Jan 2024 18:22:04 -0700

Resent-From: The Doctor

Resent-Date: Fri, 26 Jan 2024 18:22:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from b238-175.smtp-out.us-west-2.amazonses.com ([69.169.238.175]:54669)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000@noreply.zuora.com>)

id 1rTW46-00000000474-3gSk

for root@nk.ca;

Fri, 26 Jan 2024 16:57:00 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=2udze2i7cfr4byeytyph3x6gxqhthkif; d=zuora.com; t=1706313294;

h=Date:From:Reply-To:To:Message-ID:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding;

bh=GX3F44uD81Z/d2532DtHdDC4sFo7cN1jqXxUGEYfNGc=;

b=afIE7MGMqTrIbmo7/dDWFM+Rdz3recHVB87cvv/CHKQ3DaOu6pYOWX1HabM7DwFZ

l8vyuHGshielmp6dNqx/iglRI93qfsaz9XjkyCWnj0mRZR5MvDfzTDpjJ4ChjoLR9iz

/x0ZyT79zpgy2wqj6fsLQ9HNiLgDFGfEW2DWvWGC0wfURP+yJJFRSMNBOJ+QjSEEF3r

5n8veSfWBwQx7M754YOB6JfhONmSvMdnOL33CR8u9iSxSW6e5b5IIKM0r1tQGv4tvLn

qatSSqk+umd3hRg6xZYdS6bxKUNaIMzfWWJhyESL07UKdeNr01HkR4JT90Kgtbz88Yo

JvPkbgiv9A==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1706313294;

h=Date:From:Reply-To:To:Message-ID:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=GX3F44uD81Z/d2532DtHdDC4sFo7cN1jqXxUGEYfNGc=;

b=dc5V7zCHELaS8HxYBXEQfUPjsivCJv0Bkw23Am8uTFVxKXDEzOKHAFonzJHpNPt0

gss/SdLTsYHrZoIj4HV0QBYx4al3gW7vuGeNH/r3PSFSqlMllgSvkWphG0jGknpuSQI

5IpF3tXAlleEZcHRTmerpibkUEhLpOJQ8TW1fnmo=

Date: Fri, 26 Jan 2024 23:54:54 +0000

From: Zoom

Reply-To: no-reply@zoom.us

To: root@nk.ca

Message-ID: <0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000@us-west-2.amazonses.com>

Subject: [ACTION REQUIRED] Your Payment Method on file is expiring soon!

Mime-Version: 1.0

Content-Type: text/html;

charset=UTF-8

Content-Transfer-Encoding: quoted-printable

Application: workflow

Feedback-ID: 1.us-west-2.bUqZEy4ndYef5W/E3kAu2X3cqy3esJ7vu/M6fo7z32w=:AmazonSES

X-SES-Outgoing: 2024.01.26-69.169.238.175









=20




">


=3D1">





=20



=20




px; font-family: Lato, Helvetica, Helvetica, sans-serif; max-height: 0px; m=

ax-width: 0px; opacity: 0; overflow: hidden;">This is a friendly reminder t=

hat your credit card will be expiring soon.=20

=09=09=09=09=09=09=09=09=09





dth=3D"100%">

=09

=09=09

=09=09=09

=09=09

=09



=09=09=09
=3D"0" class=3D"container" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09



=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09



=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09





=09=09=09=09=09=09









=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09


=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

font-size:0; padding-top:0px;" valign=3D"top" class=3D"">

=09=09=09=09=09=09=09=09=09

0px; vertical-align:top; width:100%;">

=09=09=09=09=09=09=09=09=09
=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"" width=3D"100%">












valign=3D"middle" class=3D"mobile-header-padding">
5qr.r.us-west-2.awstrack.me/L0/https:%2F%2Fzoom.us%2F%3Fzcid=3D1640/1/01010=

18d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000/3spFydEKTWyd_D61qzY=

sdYnoo2Y=3D359" style=3D"text-decoration:none;" target=3D"_blank"><br
=3D"Zoom Logo" border=3D"0" src=3D"http://click.zoom.us/l/84442/2020-05-20/=

blf6y3/84442/140394/zoom_logo_white.png" style=3D"display:block; font-famil=

y:'Lato', Helvetica, sans-serif; font-size:18px; line-height:22px; color:#7=

6798a; font-weight:bold; width:100%; max-width: 100px" width=3D"100"> <=

/td>

=09=09=09=09=09=09=09=09=09=09=09=09
0px 30px" valign=3D"top" class=3D"mobile-header-padding">




der-spacing:0;">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

" href=3D"https://bjwg65qr.r.us-west-2.awstrack.me/L0/https:%2F%2Fzoom.us%2=

Fsignin%3Fzcid=3D1640/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb=

4f-000000/C-rvFK4L2oNMcdylLU_T3KcNn48=3D359" style=3D"border-radius: 3px; b=

order: 1px solid #57A3FF; display: inline-block; padding: 7px 30px; text-a=

lign: center; font-family:'Lato', Helvetica, sans-serif; font-size:12px; li=

ne-height:20px; color:#FFFFFF; font-weight:700; text-decoration: none; text=

-transform: uppercase; letter-spacing: 0.2em" target=3D"_blank">Sign In=


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09

n=3D"top" class=3D"mobile-padding">

=20

=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

px 30px 10px; font-family:'Lato', Helvetica, sans-serif; font-size:38px; li=

ne-height:42px; color:#232333; font-weight:900; display: block; letter-spac=

ing: 0.01em;">Your Payment Method on file is expiring soon!




=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

px 30px; display: block" valign=3D"top" class=3D"mobile-padding">


84442/2020-05-20/blf6y1/84442/140392/title_marker_40x8.png" style=3D"width:=

100%; max-width: 40px" width=3D"40">


=09=09=09=09=09=09

:0px 30px 60px 30px;" valign=3D"top" class=3D"mobile-padding">

=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09





=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09





=09=09=09=09=09=09=09=09=09



=09=09=09=09=09=09=09

=09=09=09=09=09=09

adding-bottom: 30px; font-family:'Lato', Helvetica, sans-serif; font-size:1=

6px; line-height:24px; color:#FFFFFF; font-weight:400; color:#747487; lette=

r-spacing: .01em; text-align: left">Dear Dave Yadallee,



Your payment method on file is expi=

ring soon:



************7600



Please update your payment method in your billing portal in order to avoid=

losing any of your paid features.

=09=09=09=09=09=09=09=09=09

px" valign=3D"top">

=09=09=09=09=09=09=09=09=09
s:3px; border-spacing:0; margin:0 auto">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

href=3D"http://bjwg65qr.r.us-west-2.awstrack.me/L0/http:%2F%2Fzoom.us%2Fbil=

ling%2Fpayment/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-0000=

00/owoFOJDrxW37JQADSrdHu62T-AM=3D359" style=3D"border: 0 solid #FF5F0F; di=

splay: inline-block; padding: 20px 45px; text-align: center; font-family:'L=

ato', Helvetica, sans-serif; font-size:15px; line-height:24px; color:#FFFFF=

F; font-weight:900; text-decoration: none; text-transform: uppercase; lette=

r-spacing: .2em" target=3D"_blank">Update Credit Card


=09=09=09=09=09=09=09=09=09

ding-top: 50px">


ed; border-width: 0 0 5px 0;">


=09=09=09=09=09=09

:0px 30px 60px 30px;" valign=3D"top" class=3D"mobile-padding">

=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=20

=09=09=09=09=09=09=09

=09=09=09=09=09=09

g: 0px 30px 20px 30px; font-family:'Lato', Helvetica, sans-serif; font-size=

:20px; line-height:24px; font-weight:700; color:#232333; text-align: center=

; text-transform: uppercase; letter-spacing:0.05em;" class=3D"mobile-paddin=

g">Related Articles

=09=09=09=09=09=09=09=09

adding-bottom: 0px; font-family:'Lato', Helvetica, sans-serif; font-size:16=

px; line-height:24px; color:#FFFFFF; font-weight:400; color:#747487; letter=

-spacing: .01em; text-align: left">

=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09

n=3D"top">

=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09









=09=09=09=09=09=09=09

=09=09=09=09=09=09

adding:60px 30px 40px; font-family:'Lato', Helvetica, sans-serif; font-size=

:20px; line-height:24px; font-weight:700; color:#ffffff; text-align: center=

; text-transform: uppercase; letter-spacing:0.05em; background-color: #2255=

85; text-transform: uppercase">

to">Need Additional Help, Resources, or Training?

x 80px; font-family:'Lato', Helvetica, sans-serif; font-size:15px; line-hei=

ght:22px; color:#ffffff; font-weight:900; text-align: center; display: bloc=

k; letter-spacing: 0.2em; text-transform: uppercase; background-color: #225=

585;">


wg65qr.r.us-west-2.awstrack.me/L0/https:%2F%2Fsupport.zoom.us/1/0101018d483=

2a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000/LVvIBhOIV2G3_xbKM9NYGcayJ=

J8=3D359" style=3D"color:#ffffff; text-decoration: none; vertical-align: mi=

ddle" target=3D"_blank">Visit Zoom Help Center   
"https://storage.pardot.com/84442/140356/textual_link_arrow_white.png" styl=

e=3D"width:100%; max-width: 8px; vertical-align: middle" width=3D"8">
td>

=09=09=09=09=09=09=09=09

lass=3D"mobile-padding">

=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

" valign=3D"top">

=09=09=09=09=09=09=09=09=09
=3D"0" cellspacing=3D"0" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

ottom:15px;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09
llpadding=3D"0" cellspacing=3D"0">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

"top" class=3D"">
ps:%2F%2Ftwitter.com%2Fzoom_us/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-0=

5340a4cbb4f-000000/rvKEEV6PR8wosgLmHHnKFSQaKXM=3D359" style=3D"text-decorat=

ion:none;" target=3D"_blank">3D"Twitter"
" src=3D"http://click.zoom.us/l/84442/2019-12-26/bfs1bv/84442/140021/Social=

_Twitter_2020.png" style=3D"display:block; font-family:'Lato', Helvetica, s=

ans-serif; font-size:9px; line-height:22px; color:#ffffff;" width=3D"28">
a>		&n=

bsp;
"top" class=3D"">
ps:%2F%2Fwww.linkedin.com%2Fcompany%2Fzoom-video-communications%2F/1/010101=

8d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000/92URWX2yFmqSV84HeTua=

nBi7DV0=3D359" style=3D"text-decoration:none;" target=3D"_blank"><br
=3D"LinkedIn" border=3D"0" height=3D"28" src=3D"http://click.zoom.us/l/8444=

2/2019-12-26/bfs1bs/84442/140023/Social_LinkedIn_2020.png" style=3D"display=

:block; font-family:'Lato', Helvetica, sans-serif; font-size:9px; line-heig=

ht:22px; color:#ffffff;" width=3D"28">		&n=

bsp;
"top" class=3D"">
:%2F%2Fblog.zoom.us%2F/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cb=

b4f-000000/7yiI6XFS6mBuyPDB7rU9CMM6C_4=3D359" style=3D"text-decoration:none=

;" target=3D"_blank">3D"Blog"
tp://click.zoom.us/l/84442/2019-12-26/bfs1bx/84442/140025/Social_Blog_2020.=

png" style=3D"display:block; font-family:'Lato', Helvetica, sans-serif; fon=

t-size:9px; line-height:22px; color:#ffffff;" width=3D"28">


=09=09=09=09=09=09=09=09=09=09=09=09

oter" style=3D"font-family:'Lato', Helvetica, sans-serif; font-size:13px; l=

ine-height:22px; color:#828282;">
track.me/L0/tel:1-888-799-9666/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-0=

5340a4cbb4f-000000/hGW866nL008lBsnc60o4mPyVJSA=3D359" style=3D" text-decora=

tion: none; color: #828282;">+1.888.799.9666


=09=09=09=09=09=09=09=09=09=09=09=09=C2=A9 2022 Zoom - All Rights Reserved<=

/td>

=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09

lass=3D"mobile-padding">

=09=09=09=09=09=09
llspacing=3D"0" style=3D"max-width:600px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

x 0;" valign=3D"top">

=09=09=09=09=09=09=09=09=09
=3D"0" cellspacing=3D"0" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

oter" style=3D"font-family:'Lato', Helvetica, sans-serif; font-size:13px; l=

ine-height:20px; color:#969AA1;">Visit
-2.awstrack.me/L0/http:%2F%2Fzoom.us/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-=

a878-05340a4cbb4f-000000/gfHfjI-NxaC1W0gadakffa7Z31I=3D359" style=3D"color:=

#969AA1" target=3D"_blank">zoom.us


=09=09=09=09=09=09=09=09=09=09=09=09
.awstrack.me/L0/https:%2F%2Fwww.google.com%2Fmaps%2Fplace%2F55%2BAlmaden%2B=

Blvd,%2BSan%2BJose,%2BCA%2B95113%2F@37.3328541,-121.897097,17z%2Fdata=3D!3m=

1!4b1!4m5!3m4!1s0x808fcca40adf3cb7:0x5a2d33d3593e0a33!8m2!3d37.3328541!4d-1=

21.8949083/1/0101018d4832a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000/E=

1mQE5hhwK6iOTELq4Yugd4QhDo=3D359" style=3D"color:#969AA1; text-decoration: =

none;" target=3D"_blank">55 Almaden Blvd


=09=09=09=09=09=09=09=09=09=09=09=09San Jose, CA 95113


=09=09=09=09=09=09=09=09=09

;" valign=3D"top">

=09=09=09=09=09=09=09=09=09
=3D"0" cellspacing=3D"0" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

oter" style=3D"font-family:'Lato', Helvetica, sans-serif; font-size:10px; l=

ine-height:15px; color:#969AA1;">You're receiving this email because you si=

gned up for a Zoom account.


=09=09=09=09=09=09=09=09=09=09=09=09If you wish to be removed from our emai=

l list,
fr=3Dpd" style=3D"color:#969AA1; text-decoration: underline;">unsubscribe
a>.


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09


=09=09=09




3D""
32a1fb-00d1d7f9-91d9-42e3-a878-05340a4cbb4f-000000/zhr4wAwEZx0tWyWxZWC2PboH=

_yg=3D359" style=3D"display: none; width: 1px; height: 1px;">

Kohls Department Phish from amazon.com

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 24 Jan 2024 14:19:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rSkdv-00000000HsY-2Iou

for dave@doctor.nl2k.ab.ca;

Wed, 24 Jan 2024 14:18:43 -0700

Resent-From: The Doctor

Resent-Date: Wed, 24 Jan 2024 14:18:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from b224-57.smtp-out.eu-central-1.amazonses.com ([69.169.224.57]:49867)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0107018d3bbb822a-40426474-2a72-4c80-92e8-0ad3fa8ca7f9-000000@noreply.partnerfinder.continental-aftermarket.com>)

id 1rSdf1-00000000JVs-0Ba6

for doctor@nk.ca;

Wed, 24 Jan 2024 06:51:28 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=vdzhbrcb5tyvo3dddjkkpftqg2qozf4q;

d=partnerfinder.continental-aftermarket.com; t=1706104160;

h=To:Reply-to:Content-Type:Content-Transfer-Encoding:References:Message-Id:From:Subject:Date;

bh=28EH1uQP5D7i3fLpKUsJ3YAEckL9Qk0JaYOK0p1ZhDY=;

b=QeBpDZ2QWqZ1ra85NoGD1tY2yY1Ivnik3FDAv8Q63ee+Gj2HzD5SwdFPZ4/ZIvxZ

kA0SDg+ayZfweOcFOUivTGFmKShq9SFQdE4DKCagB2UuGBjKwvQuiYOiljTUgYGYZFM

alq20K0vHvfs7FWaeOqX5aAILqshwJ4dEuodl5CeL1reONIdcqnYsostDA+ZWr8LZFw

NoUMqT03gnT0W2a2dW80Xi32hJZQw4KeUU+pey5GBlmnQyUfwVXcu/VZq8ptPBxFq3J

+gExtGXgYn1D5EdfKx1/vXx40syOLpXtoywps9wn7ZTJasx64/mhOv0F0RN6j0XH10P

Yvl+ejHK/A==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=qftdzk2dqsatjnlrq4r5brjbihpfcrsh; d=amazonses.com; t=1706104160;

h=To:Reply-to:Content-Type:Content-Transfer-Encoding:References:Message-Id:From:Subject:Date:Feedback-ID;

bh=28EH1uQP5D7i3fLpKUsJ3YAEckL9Qk0JaYOK0p1ZhDY=;

b=q1jKvOdhkunAkvWT86nTsntDoHndPg2Cjk6ZWvKjimBYCBBteiLCFpIBZZznUjqv

6whWX4P+jOlZoHeHmiz6rYrGYP/b9qZJuUs3d4Cg/noQhGdeSiI4aKAvmvxu0HvrmSi

pKW82OhEYfOwU9sOloHdeqHCODNY4YFAaxoYPR1k=

To: doctor@nk.ca

Reply-to: reply@Governmentrecount.com

Content-Type: text/html;

Content-Transfer-Encoding: 7bit

References:- ::1880651719_doctor@nk.ca::

Message-ID: <0107018d3bbb822a-40426474-2a72-4c80-92e8-0ad3fa8ca7f9-000000@eu-central-1.amazonses.com>

From: Kohls Department

Subject:Be a Winner: Complete Our Survey Get Rewarded

Date: Wed, 24 Jan 2024 13:49:20 +0000

Feedback-ID: 1.eu-central-1.xO6Ozxm0UTT/+Nezgmx4eV6zEhM64VqFKOtWYE2DxOc=:AmazonSES

X-SES-Outgoing: 2024.01.24-69.169.224.57









Hi doctor, Delicious meals incredible savings - thanks to HelloFresh!



















Get Rewarded for Your Opinion: Take Our Survey!


  CLAIM NOW





















































































































































Sirius XM Phish from Amazon

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Jan 2024 17:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQFuk-00000000NxD-0pPI

for dave@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 17:05:46 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Jan 2024 17:05:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a48-39.smtp-out.amazonses.com ([54.240.48.39]:40929)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0100018d1973d4d1-f48dab74-5f55-4b76-9e70-281a34795121-000000@amazonses.com>)

id 1rQE88-00000000JdM-3gp9

for root@nk.ca;

Wed, 17 Jan 2024 15:11:40 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=4oaq3egxkedcnjl7l2xu4fdatwhzsnfu; d=kouchea.com; t=1705529038;

h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;

bh=1oSnPpz6mH6rXzPStrR7A1h5IxkCyxikbWGh/Jbl6LQ=;

b=Fk93ULSLaLDKC5ttrQ1K5bEBmYWdEZGF8mpUSjQReOYlbV3gq72zRwU84Oo0EeqA

sckTwCoynO5HG0byEDOeGfqhBkpWQNodAwG6dCmux+CbvgFrz25HnAxIPSS2pX2nOW8

pYBk3TTIMO+UKmrSZpCbCykJETCN+CKnmDcaBbmY=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1705529038;

h=Subject:From:Reply-To:To:Date:Message-ID:Feedback-ID:List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;

bh=1oSnPpz6mH6rXzPStrR7A1h5IxkCyxikbWGh/Jbl6LQ=;

b=BgbGUbv7sls9MUhgk3O/UlkQU63euzUNw2sbswgDOG9wNWYQKTujASFUIVlhM9ha

FQcXKWd+/culaVVz8/qtGhVyMl7snzP7FG2wvSUa0yjKhd8SP0Sh/zTzOMcFOciBecv

Gd/NK/Lva0Y1V8ePxDi+WlaJ3fzvDYrFVoa2328U=

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=macpacclub.co.nz;

s=k2; t=1702370545; x=1702631045; i=club@macpacclub.co.nz;

bh=MG33lH+CY79L0833Fn7WMiVOuPH1bWfCxhCKRsRyhGI=;

h=Subject:SPECIAL OFFER: Extend your membership for free

List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:

MIME-Version:CC:Date:Wed, 17 Jan 2024 17:03:56 -0500

b=WgP1KUJeaUgrOkiymoZOvwBMLYFEY2v8RAr8j2IQ54ZwEEY68klLN38mqqFQ0Po7R

4lpTtv7jGI7oLtTwBQTFh1aOuHpA/mIxeOVnasPt3kQ5CeohPOn5q3lLnYZPeLCOHR

TmDYIm8juN9fgqzJ9Sc0LL37b1eSaq/p9rftmUlfLgGVCZx0fC3a2+MguUiyHr9Ov6

jVs0dxoY0x13SLlLAYqI9nPjUFcXlGqQ/lv6Hhl2Q+HNHSUTG4bP/GPGdlDvr3OybD

oxDTSGb7ri7v99U5IW3+jh8hvBZANBM7hJH5BNKQUWrv1Bpq4NgINQz0FeMOOJ6M0S

lSo9lNHMvJRxg==

Subject:SPECIAL OFFER: Extend your membership for free

From: SiriusXM_

Reply-To: root@nk.ca

To: root@nk.ca

Date: Wed, 17 Jan 2024 22:03:58 +0000

Message-ID: <0100018d1973d4d1-f48dab74-5f55-4b76-9e70-281a34795121-000000@email.amazonses.com>

X-Mailer: Mailchimp Mailer - **CID7497ea0e6aed9fb56518**

X-Campaign: mailchimpe6a11f6e800e39b4814219c1e.7497ea0e6a

X-campaignid: mailchimpe6a11f6e800e39b4814219c1e.7497ea0e6a

X-Report-Abuse: Please report abuse for this campaign here: https://mailchimp.com/contact/abuse/?u=e6a11f6e800e39b4814219c1e&id=7497ea0e6a&e=ed9fb56518

X-MC-User: e6a11f6e800e39b4814219c1e

Feedback-ID: 1.us-east-1.KU3pPWs9eUplOWjHkyP6yBBPRRQGF3qsYY3YGP5j8cs=:AmazonSES

List-ID: e6a11f6e800e39b4814219c1emc list

X-Accounttype: pr

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Content-Type: multipart/alternative; boundary="_----------=_MCPart_1888620651"

X-SES-Outgoing: 2024.01.17-54.240.48.39

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: --

--




Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.48.39 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.48.39 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

2.5 HDRS_MISSP Misspaced headers

Subject: {SPAM?} SPECIAL OFFER: Extend your membership for free







--_----------=_MCPart_1888620651

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



--
PousLWZdg1>=0A--
yiImddh0elSpqr0kxEpoYFF7>=0A-
aNlnilQ2E>-=0A-
XrjrNJraWAk8OUZwtljNtmV>-=0A
6oNaODcT>--=0A
xnPnoDikDbdnCpHUi3vnQx>--
UCFWy>=0A--
NSMdYpwyg7gnPuIKJkz>=0A-
6IOW>-=0A-
3Veola7cfRh0CQUhIQ>-=0A
i38>--=0A
6cOmtHH4N6R9VfHmF>--
>=0A--
PsgcnrqYaBOQVX>



--_----------=_MCPart_1888620651

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit





"SPECIAL OFFER: Extend your membership for free"


--

--

--

--

--

--

--

--

--

--

--

--





--_----------=_MCPart_1888620651--

I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

McAfee Phish from Amazon

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jan 2024 17:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rPt8j-00000000IsO-0wBX

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jan 2024 16:46:41 -0700

Resent-From: The Doctor

Resent-Date: Tue, 16 Jan 2024 16:46:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a48-39.smtp-out.amazonses.com ([54.240.48.39]:40891)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0100018d14441d65-c16d5c6f-fa8f-4ead-a4aa-6b4b75faca79-000000@amazonses.com>)

id 1rPrPR-00000000BxZ-3f5n

for root@nk.ca;

Tue, 16 Jan 2024 14:55:54 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=4oaq3egxkedcnjl7l2xu4fdatwhzsnfu; d=kouchea.com; t=1705442025;

h=From:To:Subject:MIME-Version:Content-Type:Date:Message-ID;

bh=STrLklyCjvwSQJ6MBh2C1Pep2F1nsIYMVhNWkSuQiGI=;

b=d/R8WieXt13Z32qL5DjxdOJv12Ci8yxUxtQfQsCBbZnhlJliTPXJynRcdwblF5ZS

zU35Od1sOUSALprLoBLmLxVumwYG4tI7UgWdj7HySxV6EoNA4QM8Pr7Xu9cJCVjQpFM

SUqUKFwQkAZqSi1zIbTeXGCFCVYIt9AOwwBPx9A4=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1705442025;

h=From:To:Subject:MIME-Version:Content-Type:Date:Message-ID:Feedback-ID;

bh=STrLklyCjvwSQJ6MBh2C1Pep2F1nsIYMVhNWkSuQiGI=;

b=Beic8VY4/NJYraESh3Kgd2WcxAAFBtMRdTvBoVRJAdI1GYGFaYVFboVJNKvcYApq

LqsttJ+uEKpMfVv4zROYPPbdw5Ya3SIwfPTkkNuACiud2LGMz8klIWv1e3LxI+1NEhJ

a3MOWW7TrlVXmi8iaGWVVByfyRiIdEVfaLjR0JpM=

From: "Mcafee.Warning"

To: root@nk.ca

Subject: 03 viruses have been detected on your computer 83.

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Date: Tue, 16 Jan 2024 21:53:44 +0000

Unsubscribe:726f6f74406e6b2e6361

Message-ID: <0100018d14441d65-c16d5c6f-fa8f-4ead-a4aa-6b4b75faca79-000000@email.amazonses.com>

Feedback-ID: 1.us-east-1.KU3pPWs9eUplOWjHkyP6yBBPRRQGF3qsYY3YGP5j8cs=:AmazonSES

X-SES-Outgoing: 2024.01.16-54.240.48.39

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:






Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.48.39 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.48.39 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} 03 viruses have been detected on your computer 83.



--_----------=_MCPart_512623887

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




tE7u>=0A
C56VHKdLAdwl>=0A
d2VwKenJxBuhNYnI5gB2>=0A
Gu Llb3LssCBcOLk89pRHEkrXjLT>=0A
uFGNKEIYCB h2s6Lf55LM89If4tBxXNStkw3>=0A
1Mvg0PrQeyBfileBb8 rqCmqkrNWb3h3FCawircmQDsZ>=0A
vY5lDsBjOUhqFskBUQkogaMbt uUQOxcDtn6MOgqzoH5GRwryHG>=0A
bmjpUfWB dZ9JuHS0z2QbSlbKjuQepAfCK mPhOhlDhUXPDOfvugdGhOPCuU>=0A
kEEros7R6cdrihXq CSgmA1cKoo7qH7AbCSpUP7QRb 0iVh3oZaAq1D1fRYwpWWqoEG9>=0A
Q2EOSNzZHNPHe6yIXEpM0EzN NirNsVtkq733wSAay7evwMi02 RxkuiYCABVlV5BSYvfHVf6Tk=

r>=0A
twYGr9wZx>=0A
MfPLUP820RvWmlKLH>



--_----------=_MCPart_512623887

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 7bit





Â






To view this email as a web page, click here


МcΑfee©






Your Subscription has Closed Today.

Â


We have tried many times to warn you, Renew immediately.

Â


Make your device more secure by renewing your subscription to protect your family from ever-evolving threats.

Â


If you have not renewed your membership, your account will be closed within 48 hours.

Â














Account ID:27178446
User:root
Secure Status:Suspended
Today Discount:90Â %
Limited Time:Tue,16 Jan-2024


Â


Â








































--_----------=_MCPart_512623887--

I1.18KL0LD35.4KI2.16KwhoissourceRank10.8MPIN0Summary reportDiagnosisDensity00n/a