Norton Phish from Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 Mar 2024 14:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1riKyk-00000000FcI-0BHu

for dave@doctor.nl2k.ab.ca;

Thu, 07 Mar 2024 14:08:38 -0700

Resent-From: The Doctor

Resent-Date: Thu, 7 Mar 2024 14:08:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur04on2111.outbound.protection.outlook.com ([40.107.8.111]:48217 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1riEmR-00000000IZc-0iQD

for doctor@doctor.nl2k.ab.ca;

Thu, 07 Mar 2024 07:31:36 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=f8vtqQUR3Rau235k1tAK+jsKlyex4ZU9x8iGaOwHQQbUfBye11OVmKSjaOngsMRbzztTTXUt0Qxfes13LwWsBXB+nf06eBvb/71HbI1EVCBU809p95PJZAyEaGpEvVkFDIHaw/WIjjcBdXk93WrmtfOeZlP/+Xu0T0Xp7ikIL93agOegZs5NYH472N0xT2nS28hMSjDKw47DfxLsGf88VSoHtxqDEaMQlMf62C+9BDyeYkgsD9YtdsD/Cz10paWMJlaj9XvUQNMJwMjeA920SVd0InOt+5RcBHM1p9zVCrySDUa9kqfiyVLiYkb5oHOsCzATgtjIQviY5MZCI7aqjA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ipTs0z23405NXtv+9pmDWu75orkYo1doQ57rdrOMvGo=;

b=ExMYCe6VAsxPU3sXf93XyfWxFC7J6OoeV1W6UD/hwLgD5YLPs6sgOmbXx7ekRS2yJ+vVOFQGrRciPVAasmxyiYU9kl7lP4ApbFwrrRrMDWXtfrY2i2iA7pZvmriuvsdJBx0N9/KcLfdCJTKKjwUergPHLlzO3xUY4yLSkFCIfNEOhpi8DSzqIXwotRjDpmqBwGd3a8fZ8qPXmuXz2YMsuRudTnfrzq1Vek/788H9/h7OnRIVxdJXzoAXExf3enFcy27c4jlrncK3QqdqPrxMreJNxkBfV2y8eER4k6YnpH8i8O7hSEKbu7QwIlYOn3++pAbI7F3PE2ElMvIjiY7ilw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

192.46.210.97) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=qrw.onmicrosoft.com; dmarc=none action=none

header.from=qrw.onmicrosoft.com; dkim=none (message not signed); arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 192.46.210.97)

smtp.mailfrom=qrw.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=qrw.onmicrosoft.com;

From: Norton.LifeLock.25213

To: "doctor@"

Subject: Limited.Time.Offer_70%_Discount_on_Norton_Antivirus_77070

Date: Thu, 07 Mar 2024 14:29:21 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-GB, fr-FR, en-US

Content-Language: en-US

msip_labels: OTI2LTEyMzA0Ng==

Authentication-Results-Original: dkim=pass (message signed)

header.d=pass;dmarc=pass action=pass header.from=qrw.onmicrosoft.com;

x-ms-traffictypediagnostic:

AM0PRT02C9JID:EE_|DB9PR0YBOQRVH:EE_|CW2PEPF000056C0:EE_|AM9PR09MB4578:EE_

X-MS-Office365-Filtering-Correlation-Id: b35a840d-30d6-4f0c-bfbc-08dc3eb2fc0c

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam-Untrusted: BCL:0;

X-Forefront-Antispam-Report-Untrusted:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM0PRT02C9JID.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(376005)(41320700004)(38070700009);DIR:OUT;SFP:1102;

Content-Type: multipart/alternative; boundary="_000_AM0PRT02C9JIDOT4C052JE2BTQLBMO0JP1OHZO5OQO3T02C9JIDeurp_"

MIME-Version: 1.0rd04.prod.outlook.com

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR0YBOQRVH

X-EOPAttributedMessage: 0

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

CW2PEPF000056C0.GBRP265.PROD.OUTLOOK.COM

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id-Prvs:

y9x34f06-5201-46b7-18bc-0wxuakpvvs08

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:192.46.210.97;CTRY:IN;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:keebler.com;PTR:192-46-210-97.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(36860700004)(376005)(61400799018)(82310400014)(4523499018);DIR:OUT;SFP:1102;

X-OriginatorOrg: qrw.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Mar 2024 14:29:22.9499

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: b35a840d-30d6-4f0c-bfbc-08dc3eb2fc0c

X-MS-Exchange-CrossTenant-Id: de7bad21-aafc-4c9c-aaac-8856bf76b9fd

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=de7bad21-aafc-4c9c-aaac-8856bf76b9fd;Ip=[192.46.210.97];Helo=[keebler.com]

X-MS-Exchange-CrossTenant-AuthSource: CW2PEPF000056C0.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR09MB4578

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T

CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T 4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE

4frt4yOFkpmE OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT OTd [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.8.111 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

1.2 TO_MALFORMED To: has a malformed address

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bricka-429yaidpm6e(at)qrw.onmicrosoft.com]

0.1 TW_KP BODY: Odd Letter Triples with KP

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.0 BOGUS_MIME_VERSION Mime version header is bogus

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 URI_IMG_CWINDOWSNET Non-MSFT image hosted by Microsoft Azure infra,

possible phishing

3.5 HOSTED_IMG_DIRECT_MX Image hosted at large ecomm, CDN or hosting

site, message direct-to-mx

Subject: {SPAM?} Limited.Time.Offer_70%_Discount_on_Norton_Antivirus_77070



--_000_AM0PRT02C9JIDOT4C052JE2BTQLBMO0JP1OHZO5OQO3T02C9JIDeurp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T

CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T

4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE

OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT

CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T





4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE

OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT

CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T CjZqLHk7Uxo1T

4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE 4frt4yOFkpmE

OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT OTd2VKp9FT



--_000_AM0PRT02C9JIDOT4C052JE2BTQLBMO0JP1OHZO5OQO3T02C9JIDeurp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">








.0,user-scalable=3D1">









=20


0%; margin: 0px auto;"> =20


0px auto;">=20


" style=3D"font-size: 0px; width: 100%; background: rgb(255, 255, 255);">












;">=20


-block; width: 100%; vertical-align: top;">=20


00%">












word; word-break: break-word; font-size: 0px; padding: 0px; text-align: cen=

ter;">
5/urD.html#9/113-4848/926-123046-11443" target=3D"_blank" style=3D"margin-l=

eft: auto; margin-right: auto;">
e.windows.net/nortonsadsdws5/11.jpg" alt=3D"image" width=3D"540" style=3D"f=

ont-family: Helvetica, Arial, 'sans-serif'; font-size: 20px; width: 90%;"><=

/a>
=20
=20

=20


0px auto;">=20


" style=3D"font-size: 0px; width: 100%; background: rgb(255, 255, 255);">












;">=20


-block; width: 100%; vertical-align: top;">=20


00%">












word; word-break: break-word; font-size: 0px; padding: 0px; text-align: cen=

ter;">
5/unsD.html#9/73-0382-ELF/649-694485-94023" target=3D"_blank" style=3D"marg=

in-left: auto; margin-right: auto;">
.core.windows.net/nortonsadsdws5/22.jpg" alt=3D"image" width=3D"600" style=

=3D"font-family: Helvetica, Arial, 'sans-serif'; font-size: 20px; width: 10=

0%;">
=20
=20

=20


0px auto;">=20


" style=3D"font-size: 0px; width: 100%; background: rgb(255, 255, 255);">












;">=20


-block; width: 100%; vertical-align: top;">=20


00%">












word; word-break: break-word; font-size: 0px; padding: 15px; text-align: ce=

nter;">=20

=20


g: 0px; margin: 0px 0px 13px; line-height: 1.6; color: rgb(153, 153, 153); =

font-size: 11px;">
ortonsadsdws5/unsD.html#9/83-8545-ELF/602-625069-26430" target=3D"_blank" s=

tyle=3D"text-decoration: underline; padding: 0px; line-height: 1.6; color: =

rgb(153, 153, 153);">Unsubscribe

=20


g: 0px; margin: 13px 0px 0px; line-height: 1.6; color: rgb(153, 153, 153); =

font-size: 11px;">Jobs Delivered 1510 Castle Hill Ave #1045 Bronx, New York=

10462 United States

=20
=20
=20

=20

=20







--_000_AM0PRT02C9JIDOT4C052JE2BTQLBMO0JP1OHZO5OQO3T02C9JIDeurp_--

Hays REcruitment phish from Ukraine

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Mar 2024 18:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ri2My-000000009lt-2Di1

for dave@doctor.nl2k.ab.ca;

Wed, 06 Mar 2024 18:16:24 -0700

Resent-From: The Doctor

Resent-Date: Wed, 6 Mar 2024 18:16:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from oblrada-pl.gov.ua ([80.91.164.55]:51551)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ri2Hy-000000005z7-3asR

for doctor@nk.ca;

Wed, 06 Mar 2024 18:11:19 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=oblrada-pl.gov.ua; s=dkim; h=Message-ID:Content-Type:Date:Subject:From:To:

MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=vCpI6Hh0NgdwmaAi1J2tCDzti/6Aj9m1Baqbv+w/Q7c=; b=KDm2FuAsygayKNGcnpgqtNWfyQ

2jb9SZxU6+HoJxFoKQNfveaEVqth9FJdzRS8W1ASMYVdvU8YKm/CtbcOGMWPhmrAvaYvHXWOAUC/Q

VcclIYs9hiI3e3fSqWEmLVpMF++oZoskiJg607mTOHALkotUfVVxR5lEKujbvLZhMsK0=;

Received: from [77.242.238.247] (helo=[127.0.0.1])

by oblrada-pl.gov.ua with esmtpsa (TLS1) tls TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.96)

(envelope-from )

id 1ri1Hf-00035l-08

for doctor@nk.ca;

Thu, 07 Mar 2024 02:06:51 +0200

MIME-Version: 1.0

To: doctor@nk.ca

From: "Hays Recruitment"

Subject: Alert: Important Documents in your System Inbox

Date: Wed, 6 Mar 2024 16:06:45 -0800

Importance: normal

X-Priority: 3

Content-Type: multipart/alternative;

boundary="_5FDA63EB-B96D-7DD1-328F-8D6951BF91C8_"

Message-ID:

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hays Recruitment sent you a document to review and sign. https://blocodaskaxorras.com.br/upland/virtue/?a=tjIYbroXi11Z

Hays RecruitmentTo: doctor@nk.caPlease review and sign your documents



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[77.242.238.247 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[77.242.238.247 listed in ix.dnsbl.manitu.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Alert: Important Documents in your System Inbox



This is a multi-part message in MIME format



--_5FDA63EB-B96D-7DD1-328F-8D6951BF91C8_

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20







Hays Recruitment sent you a document to review and sign.



https://blocodaskaxorras.com.br/upland/virtue/?a=3DtjIYbroXi11Z



Hays RecruitmentTo: doctor@nk.caPlease review and sign your documents

=20



Powered by=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

=20

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.



Stop receiving this email

https://protect.docusign.net/report-abuse&lang=3Denor read more abouth=

ttps://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signe=

r-Guideandhttps://support.docusign.com/en/articles/How-do-I-manage-my-=

email-notifications.



If you are having trouble signing the document, please visit thehttps:=

//support.docusign.com/articles/How-do-I-sign-a-DocuSign-document-Basi=

c-Signingpage on ourhttps://www.docusign.com/support.

=20

https://www.docusign.com/features-and-benefits/mobile

This message was sent to you by Hays Recruitment who is using the Docu=

Sign Electronic Signature Service. If you would rather not receive ema=

il from this sender you may contact the sender with your request.=20



--_5FDA63EB-B96D-7DD1-328F-8D6951BF91C8_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable










pe" />








ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">



































3D""
cucdn-a.akamaihd.net/olive/images/2.47.0/header-logos/docusign.svg" st=

yle=3D"border:none;" width=3D"" />



ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#ffffff;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#ffffff;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://eu.docusign.net/member/Image=

s/email/docInvite-white.png" style=3D"width:75px;height:75px;" width=3D=

"75" />


"presentation" width=3D"100%">












6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#ffffff">Hays Recruitment sent you a document to review and s=

ign.





"presentation" width=3D"100%">





16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays Recruitm=

ent





ght:18px;font-size:15px;color:#666666;">To: doctor@nk.ca



a,Arial,Sans Serif;line-height:20px;">Please review and sign your docu=

ments


 

;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=

>
















ze: 11px; color: #666666; vertical-align: top;" valign=3D"top">


ze:11px; color:#666666; padding: 2px 5px 0 0;">Powered by 


 3D"DocuSign"
usign.net/Signing/Images/email/Email_PowerByLogo.png" style=3D"border:=

none;" />



A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email


This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;"> 






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign


Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?


If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.





Stop receiving this email
b>



en" style=3D"color:#2463d1;">Report this email or read more about =


cuSign-Signer-Guide" style=3D"color:#2463d1;">Declining to sign an=

d
my-email-notifications" style=3D"color:#2463d1;">Managing notification=

s.





If you are having trouble signing the document, please visit the=


Sign-document-Basic-Signing" style=3D"color:#2463d1;">Help with Signin=

g page on our
"color:#2463d1;">Support Center.


 






erif;font-size:13px;color:#666666;line-height:18px;">
//www.docusign.com/features-and-benefits/mobile" style=3D"color:#2463d=

1;">3D""
Images/email/icon-DownloadApp-18x18@2x.png" style=3D"margin-right:7px;=

border:none;vertical-align:middle;" width=3D"18" />Download the DocuSi=

gn App






erif;font-size:13px;color:#666666;line-height:18px;font-size:10px;line=

-height:14px;">This message was sent to you by Hays Recruitment who is=

using the DocuSign Electronic Signature Service. If you would rather =

not receive email from this sender you may contact the sender with you=

r request.


 





gn." itemprop=3D"text" />


rop=3D"url" />





--_5FDA63EB-B96D-7DD1-328F-8D6951BF91C8_--

Hays REcruitment phish from Japan

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Mar 2024 17:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ri25I-000000005ZJ-0t1M

for dave@doctor.nl2k.ab.ca;

Wed, 06 Mar 2024 17:58:08 -0700

Resent-From: The Doctor

Resent-Date: Wed, 6 Mar 2024 17:58:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from nishio-co-ltd.co.jp ([157.65.163.201]:45173)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ri0FF-000000000Xe-3PNi

for doctor@nk.ca;

Wed, 06 Mar 2024 16:00:23 -0700

Received: (qmail 33860 invoked by VF by uid 0); 7 Mar 2024 07:58:18 +0900

X-Vade-Tracker: score=300, verdict=spam:medium, state=1

spamcause=gggruggvucftvghtrhhoucdtuddrgedvledriedvgddtgecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfpvffvrfevnecuuegrihhlohhuthemuceftddtnecunfhutghivgculdeftddtmdenucfjughrpefvhffukffffgggtgesrgdtgfgrtdefnecuhfhrohhmpedfjfgrhihsfdcuoehinhhfohesnhhishhhihhoqdgtohdqlhhtugdrtghordhjpheqnecukfhppeeghedrudegledrvdeirdejvdenucevlhhushhtvghrufhiiigvpeeftdenucfrrghrrghmpehinhgvthepgeehrddugeelrddviedrjedvpdhhvghloheplgduvdejrddtrddtrddungdpmhgrihhlfhhrohhmpehinhhfohesnhhishhhihhoqdgtohdqlhhtugdrtghordhjphdpnhgspghrtghpthhtohepuddprhgtphhtthhopeguohgtthhorhesnhhkrdgtrgdpmhhouggvpehsmhhtphhouhht

Received: from unknown (HELO ?127.0.0.1?) (info@nishio-co-ltd.co.jp@45.149.26.72)

by dc63.etius.jp (157.65.163.201) with ESMTPA; 7 Mar 2024 07:58:18 +0900

To: doctor@nk.ca

From: "Hays"

Subject: Notification: Important Documents in your Internal Inbox

Message-ID:

Date: Wed, 6 Mar 2024 14:58:19 -0800

User-Agent: Mozilla/5.0 (Windows NT 5.1; WOW64; rv:38.0) Gecko/20100101

Thunderbird/38.1.0

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="------------307728991786690518420571"



This is a multi-part message in MIME format



--------------307728991786690518420571

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20







Hays Recruitment sent you a document to review and sign.



https://maskotasmedicalcenter.com/dehydrating/micropositioning/?a=3Dtj=

IYbroXi11Z



Hays RecruitmentTo: doctor@nk.caPlease review and sign your documents

=20



Powered by=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

=20

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.



Stop receiving this email

https://protect.docusign.net/report-abuse&lang=3Denor read more abouth=

ttps://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signe=

r-Guideandhttps://support.docusign.com/en/articles/How-do-I-manage-my-=

email-notifications.



If you are having trouble signing the document, please visit thehttps:=

//support.docusign.com/articles/How-do-I-sign-a-DocuSign-document-Basi=

c-Signingpage on ourhttps://www.docusign.com/support.

=20

https://www.docusign.com/features-and-benefits/mobile

This message was sent to you by Hays Recruitment who is using the Docu=

Sign Electronic Signature Service. If you would rather not receive ema=

il from this sender you may contact the sender with your request.=20



--------------307728991786690518420571

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable










pe" />








ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">



































3D""
cucdn-a.akamaihd.net/olive/images/2.47.0/header-logos/docusign.svg" st=

yle=3D"border:none;" width=3D"" />



ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#ffffff;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#ffffff;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://eu.docusign.net/member/Image=

s/email/docInvite-white.png" style=3D"width:75px;height:75px;" width=3D=

"75" />


"presentation" width=3D"100%">












6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#ffffff">Hays Recruitment sent you a document to review and s=

ign.





"presentation" width=3D"100%">





16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays Recruitm=

ent





ght:18px;font-size:15px;color:#666666;">To: doctor@nk.ca



a,Arial,Sans Serif;line-height:20px;">Please review and sign your docu=

ments


 

;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=

>
















ze: 11px; color: #666666; vertical-align: top;" valign=3D"top">


ze:11px; color:#666666; padding: 2px 5px 0 0;">Powered by 


 3D"DocuSign"
usign.net/Signing/Images/email/Email_PowerByLogo.png" style=3D"border:=

none;" />



A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email


This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;"> 






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign


Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?


If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.





Stop receiving this email
b>



en" style=3D"color:#2463d1;">Report this email or read more about =


cuSign-Signer-Guide" style=3D"color:#2463d1;">Declining to sign an=

d
my-email-notifications" style=3D"color:#2463d1;">Managing notification=

s.





If you are having trouble signing the document, please visit the=


Sign-document-Basic-Signing" style=3D"color:#2463d1;">Help with Signin=

g page on our
"color:#2463d1;">Support Center.


 






erif;font-size:13px;color:#666666;line-height:18px;">
//www.docusign.com/features-and-benefits/mobile" style=3D"color:#2463d=

1;">3D""
Images/email/icon-DownloadApp-18x18@2x.png" style=3D"margin-right:7px;=

border:none;vertical-align:middle;" width=3D"18" />Download the DocuSi=

gn App






erif;font-size:13px;color:#666666;line-height:18px;font-size:10px;line=

-height:14px;">This message was sent to you by Hays Recruitment who is=

using the DocuSign Electronic Signature Service. If you would rather =

not receive email from this sender you may contact the sender with you=

r request.


 





gn." itemprop=3D"text" />


rop=3D"url" />





--------------307728991786690518420571--

Hays REcruitment phish from Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Mar 2024 15:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rhzZb-00000000PDo-1R7n

for dave@doctor.nl2k.ab.ca;

Wed, 06 Mar 2024 15:17:15 -0700

Resent-From: The Doctor

Resent-Date: Wed, 6 Mar 2024 15:17:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s3.dawd.de ([89.58.44.57]:46029)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rhzGu-00000000OXd-1WIt

for doctor@nk.ca;

Wed, 06 Mar 2024 14:58:00 -0700

Received: from [127.0.0.1] (116.red-83-58-56.dynamicip.rima-tde.net [83.58.56.116])

by s3.dawd.de (Postfix) with ESMTPSA id EDBA2652F3

for ; Wed, 6 Mar 2024 22:55:58 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=club-stuttgart.de;

s=default; t=1709762159;

bh=WI9kx+Dk/KQoL+BC8UAcMLqHw/MPAghRKav/3+717Nc=;

h=From:Subject:Date:To:From;

b=FVXxwcHb8kosyCAp9HhVZiwJMccCU/a5k+btcZYSnv+avqo6Z4pr7JJlI9/2pp4N/

wJWOrHAdHRnkfLFp8rmGr9OjW8aFti1lHzIYIdUm1bEs6BwcQNjUWkaB31N8Qbogj7

/qk7fajdMx+//9QpCfK1ntASfMn9+JaT9tAjJOZT0r3BggyWP2+p8Lbp3oa+28nPIj

WDrYWnRZoFzWpkJ75KzhE67WfT3T9An/G4fdG6sCZpPVnOmfyP8HQewEtgWIe0mQlh

3ogYzgh2X9ZcOB8Ifm6BzSBdCg3+VS9lNVIJrvonwIkTQxwCbw8Ok0D+hvatxsUB+x

reWK0QVtwVpWA==

From: "Hays File Service"

Content-Type: multipart/alternative;

boundary="Apple-Mail-8A0A23C4-14B4-40B2-C4CE-550626EE0BD1"

Mime-Version: 1.0 (1.0)

Subject: Notification: Important Documents in your System Inbox

Message-Id: <73CAA149-D327-EC68-7015-7B3AF01CC210@club-stuttgart.de>

Date: Wed, 6 Mar 2024 13:55:59 -0800

To: doctor@nk.ca

X-Mailer: iPad Mail (13E238)

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hays Recruitment sent you a document to review and sign. https://wilanglobal.website/waterfront/racehourse/?a=tjIYbroXi11Z

Hays RecruitmentTo: doctor@nk.caPlease review and sign your documents



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[83.58.56.116 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[83.58.56.116 listed in ix.dnsbl.manitu.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Notification: Important Documents in your System Inbox



This is a multi-part message in MIME format



--Apple-Mail-8A0A23C4-14B4-40B2-C4CE-550626EE0BD1

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20







Hays Recruitment sent you a document to review and sign.



https://wilanglobal.website/waterfront/racehourse/?a=3DtjIYbroXi11Z



Hays RecruitmentTo: doctor@nk.caPlease review and sign your documents

=20



Powered by=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

=20

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.



Stop receiving this email

https://protect.docusign.net/report-abuse&lang=3Denor read more abouth=

ttps://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signe=

r-Guideandhttps://support.docusign.com/en/articles/How-do-I-manage-my-=

email-notifications.



If you are having trouble signing the document, please visit thehttps:=

//support.docusign.com/articles/How-do-I-sign-a-DocuSign-document-Basi=

c-Signingpage on ourhttps://www.docusign.com/support.

=20

https://www.docusign.com/features-and-benefits/mobile

This message was sent to you by Hays Recruitment who is using the Docu=

Sign Electronic Signature Service. If you would rather not receive ema=

il from this sender you may contact the sender with your request.=20



--Apple-Mail-8A0A23C4-14B4-40B2-C4CE-550626EE0BD1

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable










pe" />








ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">



































3D""
cucdn-a.akamaihd.net/olive/images/2.47.0/header-logos/docusign.svg" st=

yle=3D"border:none;" width=3D"" />



ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#ffffff;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#ffffff;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://eu.docusign.net/member/Image=

s/email/docInvite-white.png" style=3D"width:75px;height:75px;" width=3D=

"75" />


"presentation" width=3D"100%">












6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#ffffff">Hays Recruitment sent you a document to review and s=

ign.





"presentation" width=3D"100%">





16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays Recruitm=

ent





ght:18px;font-size:15px;color:#666666;">To: doctor@nk.ca



a,Arial,Sans Serif;line-height:20px;">Please review and sign your docu=

ments


 

;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=

>
















ze: 11px; color: #666666; vertical-align: top;" valign=3D"top">


ze:11px; color:#666666; padding: 2px 5px 0 0;">Powered by 


 3D"DocuSign"
usign.net/Signing/Images/email/Email_PowerByLogo.png" style=3D"border:=

none;" />



A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email


This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;"> 






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign


Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?


If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.





Stop receiving this email
b>



en" style=3D"color:#2463d1;">Report this email or read more about =


cuSign-Signer-Guide" style=3D"color:#2463d1;">Declining to sign an=

d
my-email-notifications" style=3D"color:#2463d1;">Managing notification=

s.





If you are having trouble signing the document, please visit the=


Sign-document-Basic-Signing" style=3D"color:#2463d1;">Help with Signin=

g page on our
"color:#2463d1;">Support Center.


 






erif;font-size:13px;color:#666666;line-height:18px;">
//www.docusign.com/features-and-benefits/mobile" style=3D"color:#2463d=

1;">3D""
Images/email/icon-DownloadApp-18x18@2x.png" style=3D"margin-right:7px;=

border:none;vertical-align:middle;" width=3D"18" />Download the DocuSi=

gn App






erif;font-size:13px;color:#666666;line-height:18px;font-size:10px;line=

-height:14px;">This message was sent to you by Hays Recruitment who is=

using the DocuSign Electronic Signature Service. If you would rather =

not receive email from this sender you may contact the sender with you=

r request.


 





gn." itemprop=3D"text" />


rop=3D"url" />





--Apple-Mail-8A0A23C4-14B4-40B2-C4CE-550626EE0BD1--

Hays REcruitment phish from Switzerland

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Mar 2024 15:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rhzZO-00000000PDL-3UTK

for dave@doctor.nl2k.ab.ca;

Wed, 06 Mar 2024 15:17:02 -0700

Resent-From: The Doctor

Resent-Date: Wed, 6 Mar 2024 15:17:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from quintus2.metanet.ch ([80.74.130.252]:57000)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rhyeA-00000000Mk5-0D3Z

for doctor@nk.ca;

Wed, 06 Mar 2024 14:18:01 -0700

Received: from [127.0.0.1] (localhost [127.0.0.1]) by quintus2.metanet.ch (Postfix) with ESMTPSA id D98B8941A66

for ; Wed, 6 Mar 2024 22:15:51 +0100 (CET)

Authentication-Results: quintus.metanet.ch;

spf=pass (sender IP is 188.191.42.25) smtp.mailfrom=info@limmat-taxi.ch smtp.helo=[127.0.0.1]

Received-SPF: pass (quintus.metanet.ch: connection is authenticated)

Content-Type: multipart/alternative;

boundary="Apple-Mail=_DECCD01AC6-6AA5-CC0D-539A-E17BDFCE5D6"

Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))

Subject: Alert: Important Documents in your File Transfer Tool Inbox

From: "Hays Recruitment"

Date: Wed, 6 Mar 2024 13:15:52 -0800

Message-Id: <0FE3A0E4-BE8D-1E65-65EA-48CF64170923@limmat-taxi.ch>

To: doctor@nk.ca

X-Mailer: Apple Mail (2.2104)



This is a multi-part message in MIME format



--Apple-Mail=_DECCD01AC6-6AA5-CC0D-539A-E17BDFCE5D6

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





=20







Hays Recruitment sent you a document to review and sign.



https://senecontabil.com.br/demolish/adriatic/?a=3DtjIYbroXi11Z



Hays RecruitmentTo: doctor@nk.caPlease review and sign your documents

=20



Powered by=20



Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share thi=

s email, link, or access code with others.

=20

About DocuSign

Sign documents electronically in just minutes. It's safe, secure, and =

legally binding. Whether you're in an office, at home, on-the-go -- or=

even across the globe -- DocuSign provides a professional trusted sol=

ution for Digital Transaction Management=E2=84=A2.

Questions about the Document?

If you need to modify the document or have questions about the details=

in the document, please reach out to the sender by emailing them dire=

ctly.



Stop receiving this email

https://protect.docusign.net/report-abuse&lang=3Denor read more abouth=

ttps://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signe=

r-Guideandhttps://support.docusign.com/en/articles/How-do-I-manage-my-=

email-notifications.



If you are having trouble signing the document, please visit thehttps:=

//support.docusign.com/articles/How-do-I-sign-a-DocuSign-document-Basi=

c-Signingpage on ourhttps://www.docusign.com/support.

=20

https://www.docusign.com/features-and-benefits/mobile

This message was sent to you by Hays Recruitment who is using the Docu=

Sign Electronic Signature Service. If you would rather not receive ema=

il from this sender you may contact the sender with your request.=20



--Apple-Mail=_DECCD01AC6-6AA5-CC0D-539A-E17BDFCE5D6

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable










pe" />








ca,Arial,Sans Serif;">


0" dir=3D"" role=3D"presentation" width=3D"100%">















 


llapse:collapse;background-color:#ffffff;max-width:640px;">



































3D""
cucdn-a.akamaihd.net/olive/images/2.47.0/header-logos/docusign.svg" st=

yle=3D"border:none;" width=3D"" />



ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=

:#ffffff;" width=3D"100%">












der-radius:2px;background-color:#1e4ca1;color:#ffffff;font-size:16px;f=

ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=

img alt=3D"" height=3D"75" src=3D"https://eu.docusign.net/member/Image=

s/email/docInvite-white.png" style=3D"width:75px;height:75px;" width=3D=

"75" />


"presentation" width=3D"100%">












6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=

er;color:#ffffff">Hays Recruitment sent you a document to review and s=

ign.





"presentation" width=3D"100%">





16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">


presentation">














ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays Recruitm=

ent





ght:18px;font-size:15px;color:#666666;">To: doctor@nk.ca



a,Arial,Sans Serif;line-height:20px;">Please review and sign your docu=

ments


 

;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=

>
















ze: 11px; color: #666666; vertical-align: top;" valign=3D"top">


ze:11px; color:#666666; padding: 2px 5px 0 0;">Powered by 


 3D"DocuSign"
usign.net/Signing/Images/email/Email_PowerByLogo.png" style=3D"border:=

none;" />



A;">


erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email


This email contains a secure link to DocuSign. Please do not sha=

re this email, link, or access code with others.






erif;font-size:13px;color:#666666;line-height:18px;"> 






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign


Sign documents electronically in just minutes. It's safe, se=

cure, and legally binding. Whether you're in an office, at home, o=

n-the-go -- or even across the globe -- DocuSign provides a profession=

al trusted solution for Digital Transaction Management™.






erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?


If you need to modify the document or have questions about the d=

etails in the document, please reach out to the sender by emailing the=

m directly.





Stop receiving this email
b>



en" style=3D"color:#2463d1;">Report this email or read more about =


cuSign-Signer-Guide" style=3D"color:#2463d1;">Declining to sign an=

d
my-email-notifications" style=3D"color:#2463d1;">Managing notification=

s.





If you are having trouble signing the document, please visit the=


Sign-document-Basic-Signing" style=3D"color:#2463d1;">Help with Signin=

g page on our
"color:#2463d1;">Support Center.


 






erif;font-size:13px;color:#666666;line-height:18px;">
//www.docusign.com/features-and-benefits/mobile" style=3D"color:#2463d=

1;">3D""
Images/email/icon-DownloadApp-18x18@2x.png" style=3D"margin-right:7px;=

border:none;vertical-align:middle;" width=3D"18" />Download the DocuSi=

gn App






erif;font-size:13px;color:#666666;line-height:18px;font-size:10px;line=

-height:14px;">This message was sent to you by Hays Recruitment who is=

using the DocuSign Electronic Signature Service. If you would rather =

not receive email from this sender you may contact the sender with you=

r request.


 





gn." itemprop=3D"text" />


rop=3D"url" />





--Apple-Mail=_DECCD01AC6-6AA5-CC0D-539A-E17BDFCE5D6--