UN Phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Feb 2024 06:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rcmos-00000000He7-1VkT

for dave@doctor.nl2k.ab.ca;

Wed, 21 Feb 2024 06:39:30 -0700

Resent-From: The Doctor

Resent-Date: Wed, 21 Feb 2024 06:39:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur02olkn2032.outbound.protection.outlook.com ([40.92.48.32]:40129 helo=EUR02-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rck56-00000000Icy-1oPw

for doctor@doctor.nl2k.ab.ca;

Wed, 21 Feb 2024 03:44:10 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GC47I+/1u/NVwVg9wARVAa8TTFi2jgAphQwYEB72v+Uz5P2+0JmkyJ5aCVqVU1vW9H7BgROoDcjD725/Q0k6XrXG/w+jZf7C7gK3vRUn54gc1JmrcmLYb3/aixLjWMhv09MRHsMZGaP+vadaPnJi2cwLbTQXxg7UmwUlqvXFHliJ4pTfPGiI3ZJi+CPMdqW7BRcNlSMGf00uo23lJPhvbuR2RjBXyczzXCuXlGRfMh77SjYFP+5J36pcrWALam8VK6gW3aYWpIV8ge6eAFmTcA0Kfe3Ud9cPXMXhJU20C8e51XONWXGtCP5hTuv+WN8f9vprIBsuN+cLORlCtXp1bg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ml3YRA/Z97re0OALNshx8Ff2CG+9SDuSbvK9a2QkMFQ=;

b=lFMVJZWRGjVxYVKHGZZC2qlbR8VWBHEWUaYwrFYbV8+IWrX7U7XJYQNABaJEBAIx8Zwuy+Wn8T3YBfSMxfU5uomR7Iu9JKd44D8yWfqpn6k00VikGRHkqfsZZro6ePks4Ss8pQrksXH2cAYkXs6TR2bzHVggIrrdknwCSI8S95RwrW1AqJziK2aqwJcrYAWMEaAb4qcO7LLqGXMlyE2PiKmPkNUPpVbvz4rssrCu96zNop4ySoHzX9lZy7flX0U1G5lIYFVQ2FVZ1xkmdGxHg3Rh8teA9zIrbHdGy6K1E6BEMI4JtUWmaGZkeTybG/Agl921q+EJsywqc9iT+OYr4g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=live.com; s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ml3YRA/Z97re0OALNshx8Ff2CG+9SDuSbvK9a2QkMFQ=;

b=un7c+dGTsML7/3ZCWEelpEBGOXHa8gqtQbZ4lH1UnMSbwfWrpTvs9LEML9GRl0t3CEADTFmcozbtHVJPjuTASbNDdWEmbX5Q62mSzBEPpKMedD0zhi+luk0ou+1H+2D/o2dlqER1zvddzeYiSX72KwdRBAO28MQh/Ly5UmvlDX2yuMtgnbmOQZunuVYooqRjcvOhH25BRXFfVhQzZv6YEmrPEPvTKnXvyZYxrtM0RCLi0S2Cvj2P9SSoHNcZl1ZZnh5LfpokJ5oimbGWaC9OnqXp3ngj7h526pUVuhzemK2p1NDdcbA/YOzZWH4MK3mS/+w9+xTLosYImKJzsxjxFA==

Received: from AS4P251MB0709.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:4c0::11)

by GV1P251MB0857.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:8f::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.22; Wed, 21 Feb

2024 10:41:59 +0000

Received: from AS4P251MB0709.EURP251.PROD.OUTLOOK.COM

([fe80::7057:8513:3d0f:fd87]) by AS4P251MB0709.EURP251.PROD.OUTLOOK.COM

([fe80::7057:8513:3d0f:fd87%6]) with mapi id 15.20.7292.029; Wed, 21 Feb 2024

10:41:59 +0000

From: United Nation European Uniom

Subject: (Reference Number: UN/24/CC720511)

Thread-Topic: (Reference Number: UN/24/CC720511)

Thread-Index: AQHaZLKYfktKhYRAyUyoiqrt73Zqlw==

Date: Wed, 21 Feb 2024 10:41:59 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-tmn: [M6tdRPwx/j2YArhAtWpLhc63HWYqUq7l]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: AS4P251MB0709:EE_|GV1P251MB0857:EE_

x-ms-office365-filtering-correlation-id: f834494d-4b01-4158-ba54-08dc32c9bb46

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?xLxyxT+1I4FRu5ZWn/uuyYabeobM/9uHnAkAMg2TI5rhe5/rVLoFBjeK+s?=

=?iso-8859-1?Q?7stp5OaxsfoxSI++1ggfGG64hpbXSCF7SuvTE80PfRIcAd6I5oYD5XMc10?=

=?iso-8859-1?Q?DnGAJS9OREMe/agWVfUJbLIN5//gqM9LIIq10MC2CN6C+eDLbWzobRMkZV?=

=?iso-8859-1?Q?rs99laxIF0gmlDcdhzYfXafBhRMHAt8yumc3bXVBQ5116s5PHTaN+PSH0L?=

=?iso-8859-1?Q?gLyevizhDrWm4MsxRIEO53Jb/MS/xWwC3bMvExtdezUkFYawq5xSZbipEq?=

=?iso-8859-1?Q?SPYVIk2p3XdA2ualRY8Lmx/PZkko7+IzIpDifYM5INMaTD69D+zv0fKNrX?=

=?iso-8859-1?Q?xnETZqk5hUtb6gmfGNOhZIRA5mxyaqso5LawNOFsS5uC5SXS2hF9Vu05ew?=

=?iso-8859-1?Q?e/UwAiydstRHyUNPdutVe+ZByHAeAl4delrPWW49iDb8eHx+eUnviio7HN?=

=?iso-8859-1?Q?FEu+2MF7Hj/BUu3f12w19r76jPTlhuYNg+cOhitg2tIxFjd6YTcs/9VzcK?=

=?iso-8859-1?Q?L1TfkWnsuJ6TddHT/puRqGXzqz3+NN5AxJjILyuTaSX0Qv8BoDGUN7br8f?=

=?iso-8859-1?Q?Qi0NFIRjnsamftLETCl9s63aSHU0rZ5L3z1a4BmgvkSoYqdKSgDOcN2byI?=

=?iso-8859-1?Q?EhfZIDA7TgMS/+S+3m0EbSEhrDzfnJWZD8Um0g5pQX8lFTorpg8qfPphKj?=

=?iso-8859-1?Q?UBE6wyaQj49IUkb20xCcjTi9+u8p3+pib+NqFMmWEzAFUQYSMaUIOmfu8B?=

=?iso-8859-1?Q?A9J1qOnUBSeT9tg9zBKxO4Qv+B1R4fzjNMEjnqOov6l1R6tmhYWU5W4Xvb?=

=?iso-8859-1?Q?Ftdk9UrWmh035hFDFV5NV6APIvyMfjUk7TGa5RIZ+cJjMzAbJQNglw4dSY?=

=?iso-8859-1?Q?UeoorucC/+Lkm5UBbdza2GSY2uYjc+vqPQefKUQkcZKYm4NXloUuxdIM3f?=

=?iso-8859-1?Q?0MnmrU8USDssEQPhRhenQNrGSCasPvDQJzN94Lps2xeyMxVfgwvCzLj9kn?=

=?iso-8859-1?Q?4Il8JcYtGCPaAripdyELJtZm+7rr/7TTttgjWBMa7CHaR9MlYHn30gjOSm?=

=?iso-8859-1?Q?pa+x7mLVE/mbB6CCFCpGHp5nAGL3FgDBibH549bd1Kx/ziBBsbFO3DezgX?=

=?iso-8859-1?Q?ZxVPHXISYmXdHkpvbK5+e7pK96vqLmd+tgJsdDVcmVnrDyxmpvfVTTW7y/?=

=?iso-8859-1?Q?iSyqusWqIMkSM6Q3Efa4J9lxzgBPZiBOOLK1U/iOwiiQ476585XmTwpIHY?=

=?iso-8859-1?Q?MWElAoC2NYXvnuHZ9R+g=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_AS4P251MB0709A809320CF070567213C880572AS4P251MB0709EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-00b75.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: AS4P251MB0709.EURP251.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f834494d-4b01-4158-ba54-08dc32c9bb46

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Feb 2024 10:41:59.0457

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1P251MB0857

X-Spam_score: 22.8

X-Spam_score_int: 228

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From: Compensation Settlement Center Subject: United Nations

Compensation Commission (UNCC) Treasury, Reference: UN/24/CC720511 Email

address; (signalglobal@gmx.com) Attention: Dear Foreign Beneficiary



Content analysis details: (22.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.48.32 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.48.32 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[un923(at)live.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[un923(at)live.com]

1.5 HK_SCAM_N8 BODY: No description available.

2.7 GUARANTEED_100_PERCENT BODY: One hundred percent guaranteed

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 LOTTO_DEPT Claims Department

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} (Reference Number: UN/24/CC720511)

X-Antivirus: AVG (VPS 240221-0, 2/20/2024), Inbound message

X-Antivirus-Status: Clean



--_000_AS4P251MB0709A809320CF070567213C880572AS4P251MB0709EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



From: Compensation Settlement Center

Subject: United Nations Compensation Commission (UNCC) Treasury, Reference:=

UN/24/CC720511

Email address; (signalglobal@gmx.com)





Attention: Dear Foreign Beneficiary



We are delighted to inform you that the contract/Inheritance panel of th=

e (UNCC) Compensation funds Payment, which just concluded it's seating in G=

eneva office in Switzerland just officially released your (E-mail Id & Name=

) among the currently approved beneficiaries who are to benefit from this v=

ery diplomatic 2nd quarter payment of the year. On behalf of the United Nat=

ions Compensation Commission (UNCC) Treasury and World Bank Directorate in =

collaboration with the Internal Revenue Service (IRS). To announce to you t=

hat you have been shortlisted among other beneficiaries by the United Natio=

ns Compensation Commission [ UNCC ] Be informed that we have been authorize=

d by the United Nations Compensation Commission (UNCC) to release your comp=

ensation funds of US$2,000,000.00 of (Two Million United State Dollars Only=

) to you via bank transfer. Meanwhile this Compensation department has been=

mandated by the United Nations to transfer your compensation funds to you=

through Online Transfer Payment which is 100% Guaranteed for payment to yo=

u.



(Reference Number: UN/24/CC720511)



You are hereby advised to contact the UNCC head office to receive your Co=

mpensation without further delay on this email address; ( globalib@financie=

r.com / signalglobal@gmx.com )



Anticipating your urgent cooperation response to this email so that we can =

monitor the transaction effectively. Wish you Best regards



Thank You.



sign

Compensation Settlement Center

Manual Philip Hillered

Senior Vice President

European Union Commission

Director International Remittance Department

Contact Via Email: signalglobal@gmx.com



=A92004-2024 worldwide All Rights Reserved



--_000_AS4P251MB0709A809320CF070567213C880572AS4P251MB0709EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








sans-serif, serif, EmojiFont; font-size: 12pt; color: rgb(0, 0, 0);">From:=

Compensation Settlement Center



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Subject: United Nations Compensatio=

n Commission (UNCC) Treasury, Reference: UN/24/CC720511



, 255, 255); margin: 0px;" class=3D"elementToProof">


font-size: 12pt; color: rgb(0, 0, 0);">Email address; (signalglobal@g=

mx.com)



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Attention: Dear Foreign Beneficiary=




, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">   We are delighted to in=

form you that the contract/Inheritance panel of the (UNCC) Compensation fun=

ds Payment, which just concluded it's seating

in Geneva office in Switzerland just officially released your (E-mail Id &=

amp; Name) among the currently approved beneficiaries who are to benefit fr=

om this very diplomatic 2nd quarter payment of the year. On behalf of =

the United Nations Compensation Commission

(UNCC) Treasury and World Bank Directorate in collaboration with the Inter=

nal Revenue Service (IRS). To announce to you that you have been short=

listed among other beneficiaries by the United Nations Compensation Commiss=

ion [ UNCC ] Be informed that we have

been authorized by the United Nations Compensation Commission (UNCC) to re=

lease your compensation funds of US$2,000,000.00 of (Two Million United Sta=

te Dollars Only) to you via bank transfer. Meanwhile this Compensation=

department has been mandated by  the

United Nations to transfer your compensation funds to you through Online T=

ransfer Payment which is 100% Guaranteed for payment to you.



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





d-color: rgb(255, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">          =

     (Reference Number: UN/24/CC720511)



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">  You are hereby advised to co=

ntact the UNCC head office to receive your Compensation without further del=

ay on this email address; ( globalib@financier.com

  /  signalglobal@gmx.com )



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Anticipating your urgent cooperatio=

n response to this email so that we can monitor the transaction effectively=

. Wish you Best regards



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Thank You.



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">





, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">sign



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Compensation Settlement Center
n>



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Manual Philip Hillered



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Senior Vice President



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">European Union Commission

iv>


, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Director International Remittance D=

epartment



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);">Contact Via Email: signalglobal@gmx=

.com



, 255, 255); margin: 0px;">


font-size: 12pt; color: rgb(0, 0, 0);"> 



, 255, 255); margin: 0px;" class=3D"elementToProof">


font-size: 12pt; color: rgb(0, 0, 0);">=A92004-2024 worldwide All Rights R=

eserved








--_000_AS4P251MB0709A809320CF070567213C880572AS4P251MB0709EURP_--

order phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Feb 2024 06:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rcmkW-00000000DRi-27qj

for dave@doctor.nl2k.ab.ca;

Wed, 21 Feb 2024 06:35:00 -0700

Resent-From: The Doctor

Resent-Date: Wed, 21 Feb 2024 06:35:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zzs4kids.com ([87.251.86.117]:55526)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rcgE1-0000000082S-0P7z

for root@nk.ca;

Tue, 20 Feb 2024 23:37:07 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=zzs4; d=zzs4kids.com;

h=Content-Type:From:To:Subject:Message-ID:Date:MIME-Version;

i=Jeremy_dCrmCjpn@zzs4kids.com;

bh=poLBRFJUm3vsiFeEC3n8XTTYOwP4SWvWBGOE3PQ9Spo=;

b=QYgXHdpf5Olkgs8hZyuRQLoO3w+l698Ew0bbVwYoLGu50mjxxoRjh71uRXFqX/tQMXG41KrvmBI5

4yZGLTQk0Q7GhHiE/pY2d0HD3RdikqL4PfpGNWZOaP0Q0fyz+YEPgem8+/WZbWYki8ZwNJcs6GUI

buTNk/CMZzwaczgjeopSyVOu3YWKp1nD9vjP7rrd243pXGJ0XZB8ZfbL/hkzogjufA9JJAtW+OIN

C6HoX5FrTHm6ryu8BryDj7edBv5aZfTa1ZD+veMjYyvPz2DgvDvEFoWJj9kEly7BUI8XBi6APrF3

RGxr2je432bCC+MfvnxgjkOocTY9tXLbZV8liA==

Content-Type: multipart/mixed; boundary="--_NmP-4cb021f32ad82898-Part_1"

X-Ms-Exchange-Organization-Messagedirectionality: Originating

X-Ms-Exchange-Organization-Authas: Internal

X-Ms-Exchange-Organization-Authmechanism: 02

X-Ms-Exchange-Organization-Authsource:

MWHPR22MB0014.namprd22.prod.outlook.com

X-Ms-Exchange-Organization-Network-Message-ID:

ffe8bf42-c85a-42c8-a084-08d75b722819

X-Ma4-Node: false

X-Priority: 1

X-Msmail-Priority: High

Importance: high

From: Jeremy

To: root@nk.ca

Subject: *** VIRUS ***new order _PO#cVEpX

Message-ID:

Date: Wed, 21 Feb 2024 06:35:03 +0000

MIME-Version: 1.0

X-Antivirus: AVG (VPS 240221-0, 2/20/2024), Inbound message

X-Antivirus-Status: Infected

X-Attachment: order_XLS.htm#3446217359 Virus: HTML:Phishing-CUY [Phish] Moved to chest



----_NmP-4cb021f32ad82898-Part_1

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable






charset=3Dunicode">










none; text-indent: 0px; letter-spacing: normal; font-family: Times; =

font-size: medium; font-style: normal; font-weight: 400; word-spacing: 0px;=

white-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255=

, 255); text-decoration-style: initial; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-color: initial;">


font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; =

vertical-align: baseline; font-stretch: inherit; font-feature-settings: =

inherit; font-kerning: inherit; font-optical-sizing: inherit; =

font-variation-settings: inherit;">Dear root




rgb(0, 0, 0) !important; text-transform: none; text-indent: 0px; =

letter-spacing: normal; font-family: Calibri, Arial, Helvetica, sans-serif;=

font-size: 16px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-feature-settings: inherit; background-color: =

rgb(255, 255, 255); text-decoration-style: initial;=20

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-kerning: inherit; =

font-optical-sizing: inherit; font-variation-settings: inherit; =

font-variant-alternates: inherit;">



5px;">Please find the attached Purchase Order , Confirm if it will be ready=

for delivery within 40 days?

Kindly provide =

us the Proforma Invoice, Payment terms and estimated shipping date in =

return, treat urgently.




padding: 0px; border: 0px currentColor; color: rgb(0, 32, 96) !important; =

font-family: Arial, sans-serif; font-size: 8pt; vertical-align: baseline; =

font-stretch: inherit; font-feature-settings: inherit; font-kerning: =

inherit; font-optical-sizing: inherit; font-variation-settings: =

inherit;">


 




padding: 0px; border: 0px currentColor; color: rgb(0, 32, 96) !important; =

font-family: Arial, sans-serif; font-size: 8pt; vertical-align: baseline; =

font-stretch: inherit; font-feature-settings: inherit; font-kerning: =

inherit; font-optical-sizing: inherit; font-variation-settings: =

inherit;">Jeremy Kim




sans-serif; font-size: 14px;">해외송금과

aria-hidden=3D"true">



currentColor; font-family: inherit; font-size: 10pt; vertical-align: =

baseline; font-stretch: inherit; font-feature-settings: inherit; =

font-kerning: inherit; font-optical-sizing: inherit; =

font-variation-settings: inherit;">


currentColor; color: rgb(0, 32, 96) !important; font-family: Arial, =

sans-serif; font-size: 8pt; vertical-align: baseline; font-stretch: =

inherit; font-feature-settings: inherit; font-kerning: inherit; =

font-optical-sizing: inherit; font-variation-settings: inherit;">

C-307, Research Center, EtechHive, 410 Jeongseojin-Ro, Seo-Gu, Incheon, =

Korea.



currentColor; font-family: inherit; font-size: 8pt; vertical-align: =

baseline; font-stretch: inherit; font-feature-settings: inherit; =

font-kerning: inherit; font-optical-sizing: inherit; =

font-variation-settings: inherit;">

Tel 
currentColor; vertical-align: baseline;">+82-32-424-1776
  =

 Fax 
currentColor; vertical-align: baseline;">+82-

505-720-1785
    Cell 
style=3D"margin: 0px; padding: 0px; border: 0px currentColor; =

vertical-align: baseline;">+82-10-4070-1776

>



----_NmP-4cb021f32ad82898-Part_1--