Norton Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 13 Mar 2024 12:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkThS-00000000COe-1xWL

for dave@doctor.nl2k.ab.ca;

Wed, 13 Mar 2024 12:51:38 -0600

Resent-From: The Doctor

Resent-Date: Wed, 13 Mar 2024 12:51:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f178.google.com ([209.85.214.178]:49244)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkSEv-00000000PP8-3edQ

for doctor@doctor.nl2k.ab.ca;

Wed, 13 Mar 2024 11:18:08 -0600

Received: by mail-pl1-f178.google.com with SMTP id d9443c01a7336-1dd916ad172so341385ad.2

for ; Wed, 13 Mar 2024 10:16:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710350165; x=1710954965; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=enhFQbrB/rUJ7uZUDmFI3szCUmju1P0vg5P1jvVHt7g=;

b=Cd2jZYGEYjnYBoYZJIgI2j6+dMU9wXRG1FNhclVgXv7QZbjzaruBqr6KM+bce6s39I

l0tkugwTXQ1N+j5klWlo4Bf1sEZWOf6O/G3FBVf6cbs65SMeLoDaIKUmsFDLL/vxc4nj

9qktT5N7WSLQfXfRuHf77Kew+LXjaEzNfXENSmhvVjBcYgjlmMZruhBWIcKw7rbTH/Wz

KqlkaZbpK+mUabAT46g33NZOF3bvHzvr8ZIi6su15W+z/sVdifA5zXoAnInpDMXkZgsq

aYF5l84XT1CADNZhB8yQfS4XlxCnomnFIb4XztiGB27SwXb0pT93sM4gVe0bu+oDM5E+

9rEg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710350165; x=1710954965;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=enhFQbrB/rUJ7uZUDmFI3szCUmju1P0vg5P1jvVHt7g=;

b=D6PLkhhbbpazd5yK8maJktwGJ9/pHG8u0kJFATCnU1dbn/MPb4zKYYlnRBy+9iY1Zt

hPRUYlFAN9FvPGZb+sYk8KJeB35jFkCWxWJ0YqvdYmlVlHM3J92Ho9ivcTlvPf4wmvfN

szmes72NV6Yob5D35KY4TWhuzEOLro3QoyGK0ojFEy7wXtvxs0S3o4sBLJde1Q5U8c5m

bHiZ9OzLXiwDCgnvUlj2kqI9ANCTyZghYbOTMUtYHsJc+h9yzJuqp8xKiKTPaCM6D4yv

jXtreirM7ApILNaOmZjd7L81OKf3f/uOSFqwu9p8MUGuwXoD0aFxKErgBW4lrMfzPADO

IMjw==

X-Gm-Message-State: AOJu0Yzgzju0wWbEBCTXmxTbvbn4WLjUWrVKwitI5yPXdGZNrsobtunG

baL52pAtii9uc1COh47zSbclQlyaqrNwUyNMPkZf3Jw3hL9uaAu6bMCNH0MDKNE=

X-Google-Smtp-Source: AGHT+IE+ZqgREG3UEld/8ZteKEkDeLUz0R/dTqIxJlcgVV+kHmynb5+i1YWegktHX8C4btTM/tgzPg==

X-Received: by 2002:a17:902:e80d:b0:1dd:c93c:58f0 with SMTP id u13-20020a170902e80d00b001ddc93c58f0mr4059259plg.5.1710350165307;

Wed, 13 Mar 2024 10:16:05 -0700 (PDT)

Received: from [172.31.16.42] ([43.158.203.83])

by smtp.gmail.com with ESMTPSA id p2-20020a170902e74200b001dc05535632sm3639953plf.170.2024.03.13.10.16.03

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 13 Mar 2024 10:16:04 -0700 (PDT)

Message-ID: <65f1df54.170a0220.70319.d132@mx.google.com>

Date: Wed, 13 Mar 2024 10:16:04 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============8252732598739106471=="

MIME-Version: 1.0

Subject: Your recently paid Order no is 22715140 will be processed shortly

From: Robert Lavallee

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: Microsoft CDO for Windows 2000

List-Unsubscribe:

List-Owner:

List-ID: dognimonjules1@gmail.com

List-Subscribe: dognimonjules1@gmail.com

List-Post:



--===============8252732598739106471==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAxNCwgMjAyNDxicj4KPGJyPgpZb3VyIHRyYW5zYWN0aW9uIGZv

ciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgVG90YWwgUHJvdGVjdGlvbjwv

Yj4gaXMgbm93IGNvbmZpcm1lZCBhZnRlciBwcm9jZXNzaW5nLjxicj4gWW91ciAmIzgwOyYjOTc7

JiMxMjE7JiMxMDk7JiMxMDE7JiMxMTA7JiMxMTY7IGZvciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEw

MjsmIzEwMTsmIzEwMTsgVG90YWwgUHJvdGVjdGlvbjwvYj4sIDxiPiYjMzY7NDYzLjYzPC9iPiwg

aGFzIGJlZW4gcHJvY2Vzc2VkIHN1Y2Nlc3NmdWxseS48YnI+RmVlbCBmcmVlIHRvIGdldCBpbiB0

b3VjaCB3aXRoIHVzIGlmIHlvdSBuZWVkIGFueSBmdXJ0aGVyIGNsYXJpZmljYXRpb24gb3IgYWRk

aXRpb25hbCBkZXRhaWxzIHJlZ2FyZGluZyB0aGlzIHRyYW5zYWN0aW9uLjxicj5OZWVkIGFzc2lz

dGFuY2U/IENvbnRhY3Qgb3VyIGN1c3RvbWVyIHNlcnZpY2UgdGVhbSBhdCA8Yj4rMSgmIzU2OyYj

NTQ7JiM1MTspIDUmIzU1OzYtJiM1NTsmIzU2OzM4PC9iPiB3aXRoaW4gdGhlIG5leHQgc2l4IGhv

dXJzLgo8YnI+Cjxicj4KPGJyPgpZb3VyIHByZWZlcmVuY2UgZm9yIDxiPiYjNzc7JiM5OTsmIzk3

OyYjMTAyOyYjMTAxOyYjMTAxOyBUb3RhbCBQcm90ZWN0aW9uPC9iPiBpcyBoaWdobHkgdmFsdWVk

LCBhbmQgd2UgYXBwcmVjaWF0ZSB5b3VyIHRydXN0Ljxicj4KPGJyPgo8YnI+CjxiPllvdXIgJiM3

MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5OyYjMTAxOyBEZXRhaWxzPC9iPgo8YnI+CkNs

aWVudDogZG9jdG9yPGJyPgpPcmRlcmVkIEl0ZW06ICYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAx

OyYjMTAxOyBUb3RhbCBQcm90ZWN0aW9uPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJy

Pgo8YnI+CkFjdGl2YXRpb24gS2V5OiBaUTQ3MTlDVzxicj4KPGJyPgpXYXJtIHJlZ2FyZHMsPGJy

PgomIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgVG90YWwgUHJvdGVjdGlvbjxicj4K

MTE5MyBSZXNlcnZlIFN0IENpdHkgQmFuY3JvZnQgSzBMIDFDMCBDYW5hZGE8YnI+CkZvciBpbnF1

aXJpZXMsIHBsZWFzZSBzdXBwb3J0IHVzIGF0IDxiPisxKCYjNTY7JiM1NDsmIzUxOykgNSYjNTU7

Ni0mIzU1OyYjNTY7Mzg8L2I+Lg==



--===============8252732598739106471==--

Norton Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 13 Mar 2024 08:10:00 -0600

Received: from mail-pg1-f181.google.com ([209.85.215.181]:53514)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkPHw-000000001D2-3QBP

for dave@doctor.nl2k.ab.ca;

Wed, 13 Mar 2024 08:09:04 -0600

Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-5cdbc4334edso3496461a12.3

for ; Wed, 13 Mar 2024 07:07:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710338819; x=1710943619; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:priority:importance:content-class:to:from:subject:mime-version:date

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=ffsWEbBzaXo78JKUYrv7mUYNDKq5Fb0egUb2R7d4JxA=;

b=ao5Zru0P6nauDmE7HCQVapce9LiQii1iKkYD18P8NWNKdAF057zc+1IjT8uQzJLNiL

t3LZ49bXHOTnGG+ltOfNc3ADDXgI32fQmyNjWRFdWAxTXx5qYlWlU7+qZ/deb+bc5kBZ

0MbSm5VxoMj2gNJcSXzHHh2gH6Mc6ibPGhE9QbTakQxrQInzSNwFH+actFNIKfAk+2ta

CgZ48eNKU38MbICiOAaM5Ky8BKDYwYR0FJ5nNcKkVge1lvRoetWZdGpgeBaER1dz81e9

gSEK6Q64AZboI8l5eHUhPYyLFiE95g8lmD8cDLaKAqSY6+AX/TgSNgfSYjsVcXO8hx34

DBEg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710338819; x=1710943619;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:priority:importance:content-class:to:from:subject:mime-version:date

:message-id:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ffsWEbBzaXo78JKUYrv7mUYNDKq5Fb0egUb2R7d4JxA=;

b=PVHiLQxmqPZ/2wDNRbxV6lK0IYL4Z7eZ0khXOc90bL++Fv8L87xcGPq1Np2iGo6UOP

PSYMTkEdhl7TuqB+6JD+Gx7h1l/lHl8S0NXcqSz/CnRRsh8ap2Z26n6pw6N4aCIhhFYj

itktVGDe2x+5oIQgSQu9lg440iV0C9lX3FcVie8sc2zkSF7SWwIGcdFbtY5y0rY+n84W

8Ujf9sgwDJ7J3oAuQJTj1RQgZN+scKQnw3AXVFWJbE8Aq4OEKZdVbXXLXPfeIYuPD3bb

4PujTtNLA5tG/aa/Rm0DMEAIGbIxkLThxcZLZKlMzCnVMNLZPCkMy5QhIEJCyKRbeQHZ

oTMg==

X-Gm-Message-State: AOJu0YweguK7DStFr2oo2ls65XyXSDhQZFfh5p+sMFI3J/raHloFspmN

8Z9AEcJqJQPUnRbpcAWdGDN5IDp1if1GcoMtfGkPVc7QBFij11VzxcUv3YFHC29QWtzr/L8=

X-Google-Smtp-Source: AGHT+IHmxJ4RmGh1z2l91E/39k6xL4uAbVfLFwA84qUPzLM1jMxwid6+UMCArHaSM4x2CnoWKsf3Aw==

X-Received: by 2002:a17:903:22d0:b0:1dd:a12e:15ae with SMTP id y16-20020a17090322d000b001dda12e15aemr9074062plg.10.1710338818895;

Wed, 13 Mar 2024 07:06:58 -0700 (PDT)

Received: from [172.22.0.2] ([43.156.165.156])

by smtp.gmail.com with ESMTPSA id u13-20020a170902e80d00b001dcfc6c3116sm8632900plg.65.2024.03.13.07.06.57

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 13 Mar 2024 07:06:57 -0700 (PDT)

Message-ID: <65f1b301.170a0220.39174.9cf9@mx.google.com>

Date: Wed, 13 Mar 2024 07:06:57 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============7064367051830732832=="

MIME-Version: 1.0

Subject: Dear your order# 937916 is placed successfully

From: Naomi Gipson

To: dave@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

List-Unsubscribe:

List-Owner:

List-ID: auduigohe102@gmail.com

List-Subscribe: auduigohe102@gmail.com

List-Post:



--===============7064367051830732832==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgICA8bWV0YSBjaGFyc2V0

PSJVVEYtOCI+CiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNl

LXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+CiAgICA8c3R5bGU+CiAgICAgICAgYm9keSB7CiAg

ICAgICAgICAgIGZvbnQtZmFtaWx5OiAnQXJpYWwnLCBzYW5zLXNlcmlmOwogICAgICAgICAgICBi

YWNrZ3JvdW5kLWNvbG9yOiAjZjRmNGY0OwogICAgICAgICAgICBtYXJnaW46IDA7CiAgICAgICAg

ICAgIHBhZGRpbmc6IDA7CiAgICAgICAgICAgIGNvbG9yOiAjMzMzMzMzOwogICAgICAgIH0KCiAg

ICAgICAgLmVtYWlsLWNvbnRhaW5lciB7CiAgICAgICAgICAgIG1heC13aWR0aDogNjAwcHg7CiAg

ICAgICAgICAgIG1hcmdpbjogMCBhdXRvOwogICAgICAgICAgICBwYWRkaW5nOiAyMHB4OwogICAg

ICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmZmZmOwogICAgICAgICAgICBib3JkZXI6IDFw

eCBzb2xpZCAjZGRkZGRkOwogICAgICAgICAgICBib3JkZXItcmFkaXVzOiAxMHB4OwogICAgICAg

ICAgICBib3gtc2hhZG93OiAwIDAgMTBweCByZ2JhKDAsIDAsIDAsIDAuMSk7CiAgICAgICAgfQoK

ICAgICAgICBoMSB7CiAgICAgICAgICAgIGNvbG9yOiAjMDA5Njg4OwogICAgICAgIH0KCiAgICAg

ICAgcCB7CiAgICAgICAgICAgIG1hcmdpbjogMTVweCAwOwogICAgICAgIH0KCiAgICAgICAgaHIg

ewogICAgICAgICAgICBib3JkZXI6IDA7CiAgICAgICAgICAgIGJvcmRlci10b3A6IDFweCBzb2xp

ZCAjZGRkZGRkOwogICAgICAgIH0KCiAgICAgICAgLnNpZ25hdHVyZSB7CiAgICAgICAgICAgIGZv

bnQtc3R5bGU6IGl0YWxpYzsKICAgICAgICAgICAgY29sb3I6ICM3Nzc3Nzc7CiAgICAgICAgfQog

ICAgPC9zdHlsZT4KPC9oZWFkPgo8Ym9keT4KCjxkaXYgY2xhc3M9ImVtYWlsLWNvbnRhaW5lciI+

CiAgICA8aW1nIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0iMCIgc3JjPSJodHRwczovL21jdXNlcmNv

bnRlbnQuY29tLzI0N2M0MGU1ZjBjNDEyNDMyYjNjM2U2MGIvaW1hZ2VzL2Q0NzRiOTRhLTAyZjMt

OTkxYy1jMGRhLWQ5NTEzMzdhMDBlNS5wbmciIGFsdD0iIiB0aXRsZT0iIiB3aWR0aD0iNDAlIi8+

CiAgICA8aDE+WW91IGFyZSBvbmUgc3RlcCBjbG9zZXIgdG8gJiN4NEU7JiN4NkY7JiN4NzI7JiN4

NzQ7JiN4NkY7JiN4NkU7IEFudGlWaXJ1cyE8L2gxPgoKICAgIDxwPkRlYXIgVXNlciwgdGhhbmsg

eW91IHZlcnkgbXVjaDwvcD4KCiAgICA8cD5QYXltZW50IGVzdGltYXRlIG9mICQ0OTkuOTkgZm9y

ICYjeDRFOyYjeDZGOyYjeDcyOyYjeDc0OyYjeDZGOyYjeDZFOyBBbnRpVmlydXMgU3RhbmRhcmQg

aGFzIGJlZW4gcHJvY2Vzc2VkIHN1Y2Nlc3NmdWxseS48L3A+CgogICAgPHA+WW91IGNhbiBnZXQg

aW4gdG91Y2ggd2l0aCBvdXIgY3VzdG9tZXIgc2VydmljZSB0ZWFtIGFueXRpbWUuPC9wPgoKICAg

IDxocj4KCiAgICA8cD48c3Ryb25nPkRhdGUgb2YgSXNzdWU6PC9zdHJvbmc+IE1hcmNoIDEzLCAy

MDI0PGJyPgogICAgPHN0cm9uZz5Db21wYW55Ojwvc3Ryb25nPiAmI3g0RTsmI3g2RjsmI3g3Mjsm

I3g3NDsmI3g2RjsmI3g2RTsgQW50aVZpcnVzIFN0YW5kYXJkPGJyPgogICAgPHN0cm9uZz5TZXJ2

aWNlOjwvc3Ryb25nPiBXZWJyb290PGJyPgogICAgPHN0cm9uZz5TdXBwb3J0IER1cmF0aW9uOjwv

c3Ryb25nPiA1IFllYXJzPGJyPgogICAgPHN0cm9uZz5Ub3RhbCBDaGFyZ2U6PC9zdHJvbmc+ICQ0

OTkuOTk8L3A+CgogICAgPGhyPgoKICAgIDxwPjxzdHJvbmc+TmFtZSBvZiBjbGllbnQ6PC9zdHJv

bmc+IERlYXIgVXNlcjxicj4KICAgIDxzdHJvbmc+TWFpbCBBZGRyZXNzOjwvc3Ryb25nPiBkYXZl

QGRvY3Rvci5ubDJrLmFiLmNhPGJyPgogICAgPHN0cm9uZz5BY3RpdmF0aW9uIEtleTo8L3N0cm9u

Zz4gZmViZGY0MDItZTMxNi00ZTYwLTkzOTAtMTY2ODcyMzRkNDBiPC9wPgoKICAgIDxwPkZvciBh

bnkgbW9kaWZpY2F0aW9uLCBjYW5jZWxsYXRpb24sIG9yIGFueSBzcGVjaWFsIHJlcXVlc3QsIHBs

ZWFzZSBjb250YWN0IFN1cHBvcnQgQ2VudGVyIGF0IC0gKzEoODg4KSA1MDgtNjk4MS48L3A+Cgog

ICAgPHAgY2xhc3M9InNpZ25hdHVyZSI+UmVnYXJkcyw8YnI+CiAgICBOYW9taSBHaXBzb248YnI+

CiAgICAmI3g0RTsmI3g2RjsmI3g3MjsmI3g3NDsmI3g2RjsmI3g2RTsgQW50aVZpcnVzIFN0YW5k

YXJkPGJyPgogICAgUGhvbmU6ICsxKDg4OCkgNTA4LTY5ODE8YnI+CiAgICBBZGRyZXNzOiAyMDky

IE5lbHNvbiBTdHJlZXQsIFBhc3MgTGFrZSBPTiBQMFQgMk0wPC9wPgo8L2Rpdj4KCjwvYm9keT4K

PC9odG1sPgo=



--===============7064367051830732832==--

Aeroplan Phish from MailGun

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 12 Mar 2024 21:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkFgE-0000000075i-0rWJ

for dave@doctor.nl2k.ab.ca;

Tue, 12 Mar 2024 21:53:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 12 Mar 2024 21:53:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m140-82.mailgun.net ([159.135.140.82]:64651)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkEJW-000000003Zq-3pJr

for doctor@nl2k.ab.ca;

Tue, 12 Mar 2024 20:25:58 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mg.barquesnet.co.uk; q=dns/txt; s=k1; t=1710296628; x=1710303828;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Message-ID: Date: Subject: Subject: To: To: From: From: Sender: Sender;

bh=nobN2GVYhIYGHXGRZ0xPo0W0DQbE8yESI5EvUYvICVw=;

b=f/TJBKFidzl0CgZyo4w1AUPWl85ps3u6SZqfY2tVeE/koDBYjOJbBqYHCOsmSdCveqmBs2gWtfwQcnZY7NFIe2pNwbngodPiIPzKFTDpeYiiBMDWltaHWg6xonSwhtsRUsLMttYO9R5HihHko4Hy1tjNtikE4MfEY4AXJ9t1CKM=

X-Mailgun-Sending-Ip: 159.135.140.82

X-Mailgun-Sid: WyI1MDA4OSIsImRvY3RvckBubDJrLmFiLmNhIiwiMzQ5YiJd

Received: from mg.barquesnet.co.uk ( [195.135.93.147]) by e9bce57015ca with

SMTP id 65f10e34aab4ebdd503b2cbe; Wed, 13 Mar 2024 02:23:48 GMT

Sender: sauron@mg.barquesnet.co.uk

From: "Aeroplan"

To: doctor@nl2k.ab.ca

Subject: Aeroplan/Aircanada Security Information On Your Profile

Date: 13 Mar 2024 03:23:48 +0100

Message-ID: <20240313032348.1590446B30E8BAAE@mg.barquesnet.co.uk>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.8

X-Spam_score_int: 158

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (15.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[159.135.140.82 listed in list.dnswl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[195.135.93.147 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.135.140.82 listed in wl.mailspike.net]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.0 TVD_SPACE_RATIO No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

2.0 MIXED_HREF_CASE Has href in mixed case

2.7 TVD_SPACE_RATIO_MINFP Space ratio (vertical text obfuscation?)

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Aeroplan/Aircanada Security Information On Your Profile










=2Ein/rxda.png">



Aeroplan Phish from Rackspace Frankfurt Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 12 Mar 2024 21:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkFgA-0000000075W-1EL3

for dave@doctor.nl2k.ab.ca;

Tue, 12 Mar 2024 21:53:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 12 Mar 2024 21:53:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m140-82.mailgun.net ([159.135.140.82]:38842)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkEFq-000000003O2-434w

for doctor@netknow.ca;

Tue, 12 Mar 2024 20:22:10 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mg.barquesnet.co.uk; q=dns/txt; s=k1; t=1710296407; x=1710303607;

h=Content-Transfer-Encoding: Content-Type: MIME-Version: Message-ID: Date: Subject: Subject: To: To: From: From: Sender: Sender;

bh=nobN2GVYhIYGHXGRZ0xPo0W0DQbE8yESI5EvUYvICVw=;

b=Q/m6a8trlAjoMZA/7NDyPfPQHU8YMJAwswniMmuC002h5JnaLtuwA6gaArnPSgHQ8pn6yrhge9Z0jh+fP8rycXHV0yzYTfbZ+IRI2T/pHUwXu9Tfge8DfAtaQghAj16rqD3SjL39xCyDCi3wo4FSkw3kituwXdxNHVtRQQcW5S0=

X-Mailgun-Sending-Ip: 159.135.140.82

X-Mailgun-Sid: WyIzNzUyZCIsImRvY3RvckBuZXRrbm93LmNhIiwiMzQ5YiJd

Received: from mg.barquesnet.co.uk ( [195.135.93.147]) by 64cc150f5df8 with

SMTP id 65f10d57b8468c729597757c; Wed, 13 Mar 2024 02:20:07 GMT

Sender: sauron@mg.barquesnet.co.uk

From: "Aeroplan"

To: doctor@netknow.ca

Subject: Aeroplan/Aircanada Security Information On Your Profile

Date: 13 Mar 2024 03:20:06 +0100

Message-ID: <20240313032006.09F62C924608E7B1@mg.barquesnet.co.uk>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.8

X-Spam_score_int: 158

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (15.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[195.135.93.147 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.135.140.82 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[159.135.140.82 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 MIXED_HREF_CASE Has href in mixed case

0.0 TVD_SPACE_RATIO No description available.

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.0 T_REMOTE_IMAGE Message contains an external image

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

2.7 TVD_SPACE_RATIO_MINFP Space ratio (vertical text obfuscation?)

Subject: {SPAM?} Aeroplan/Aircanada Security Information On Your Profile










=2Ein/rxda.png">



netease phish from romania

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 13 Mar 2024 08:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkPXm-00000000GVm-2DSu

for dave@doctor.nl2k.ab.ca;

Wed, 13 Mar 2024 08:25:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 13 Mar 2024 08:25:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns.tomis.ro ([89.35.128.115]:57154)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rkNUF-00000000N7N-37B8

for www@doctor.nl2k.ab.ca;

Wed, 13 Mar 2024 06:13:41 -0600

Received: from service.netease.com (unknown [45.14.244.74])

(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

by ns.tomis.ro (Postfix) with ESMTPSA id 8E35F3E68479

for ; Wed, 13 Mar 2024 14:11:21 +0200 (EET)

Reply-To: admin@iapp.co.in

From: J.Springer

To: www@doctor.nl2k.ab.ca

Subject: Purchase Order Request

Date: 13 Mar 2024 12:11:21 -0700

Message-ID: <20240313121121.11F1E08A60ADB491@service.netease.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable












f; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,45,46); DIRECTION: ltr; FONT-STYLE: normal; ORPHANS: =

2; WIDOWS: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial;=20

text-decoration-color: initial" align=3Dleft>
TH: 0px; FONT-FAMILY: Arial, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VER=

TICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDI=

NG-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP=

-WIDTH: 0px">Good day Sir/Madam,




f; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,45,46); DIRECTION: ltr; FONT-STYLE: normal; ORPHANS: =

2; WIDOWS: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial;=20

text-decoration-color: initial" align=3Dleft>
TH: 0px; FONT-FAMILY: Arial, serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VER=

TICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDI=

NG-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP=

-WIDTH: 0px">We are sending you our purchase order below as reque=

sted by our purchase team




f; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,45,46); DIRECTION: ltr; FONT-STYLE: normal; ORPHANS: =

2; WIDOWS: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial;=20

text-decoration-color: initial" align=3Dleft>
TH: 0px; FONT-FAMILY: Arial, Tahoma, Verdana, sans-serif, serif, EmojiFont;=

BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0p=

x; COLOR: rgb(51,112,255); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-L=

EFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">


0px; TEXT-DECORATION: none; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: basel=

ine; BORDER-BOTTOM: 1pt dashed; COLOR: rgb(51,112,255); PADDING-BOTTOM: 0px=

; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BOR=

DER-TOP-WIDTH: 0px" href=3D"https://cloudflare-ipfs.com/ipfs/bafybeiekx55p4=

ekqeab3zlacnxqtczgnohhwicbe2syzripecbwswtvxdi/mmmyscr691966.html#www@doctor=

=2Enl2k.ab.ca" rel=3D"noopener noreferrer" target=3D_blank>




man"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WE=

IGHT: 400; COLOR: rgb(0,0,0); DIRECTION: ltr; FONT-STYLE: normal; ORPHANS: =

2; WIDOWS: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; BACKGROUND-COLOR: rg=

b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>


0px; TEXT-DECORATION: none; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: basel=

ine; BORDER-BOTTOM: 1pt dashed; COLOR: rgb(51,112,255); PADDING-BOTTOM: 0px=

; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BOR=

DER-TOP-WIDTH: 0px" href=3D"https://cloudflare-ipfs.com/ipfs/bafybeiekx55p4=

ekqeab3zlacnxqtczgnohhwicbe2syzripecbwswtvxdi/mmmyscr691966.html#www@doctor=

=2Enl2k.ab.ca" rel=3D"noopener noreferrer" target=3D_blank>




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPAC=

ING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-var=

iant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-widt=

h: 0px; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial">


2-dev.translate.goog/myscr927977.htm?_x_tr_sl=3Dauto&_x_tr_tl=3Den&=

_x_tr_hl=3Den&_x_tr_pto=3Dwapp#mfbolbin8@mail.com style=3D'BORDER-LEFT-=

WIDTH: 0px; FONT-SIZE: 12px; FONT-FAMILY: "Times New Roman"; BORDER-RIGHT-W=

IDTH: 0px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-WID=

TH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; PADDING=

-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px;=20

PADDING-LEFT: 0px; MARGIN: 0px; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norm=

al; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; TEXT-INDENT: 0px' href=3D"ht=

tps://cloudflare-ipfs.com/ipfs/bafybeiekx55p4ekqeab3zlacnxqtczgnohhwicbe2sy=

zripecbwswtvxdi/mmmyscr691966.html#www@doctor.nl2k.ab.ca" rel=3D"noopener n=

oreferrer" target=3D_blank> Open Purchase Order




SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; C=

OLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPAC=

ING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-var=

iant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-widt=

h: 0px; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial">



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; TEXT-INDENT: 0px'>

Roman"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-=

WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; TEXT-INDENT: 0px'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; TEXT-INDENT=

: 0px'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>Kindly confirm the PO enclosed above and re=

vert with proforma invoice to enable us process payment.


TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FON=

T-WEIGHT: 400; COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS=

: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial;=20

text-decoration-color: initial">



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>Regards,


TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FON=

T-WEIGHT: 400; COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS=

: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial;=20

text-decoration-color: initial">



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>J.Springer


TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FON=

T-WEIGHT: 400; COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS=

: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial;=20

text-decoration-color: initial">



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>Procurement Manager



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>ExxonMobil


TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FON=

T-WEIGHT: 400; COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS=

: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial;=20

text-decoration-color: initial">



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>Houston, TX, USA



normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: r=

gb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial'>


iFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT:=

none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2;=

WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial'>Website: 


TE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FON=

T-WEIGHT: 400; COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS=

: 2; DISPLAY: inline !important; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial;=20

text-decoration-color: initial"> 


New Roman", serif, EmojiFont; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: bas=

eline; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TE=

XT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,172,255); PADDING-BOTTOM=

: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px=

; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BORDER=

-TOP-WIDTH: 0px; BACKGROUND-COLOR:=20

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial; text-decoration-color: initial=

'>


0px; TEXT-DECORATION: none; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: basel=

ine; BORDER-BOTTOM: 1pt dashed; COLOR: rgb(0,172,255); PADDING-BOTTOM: 0px;=

PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORD=

ER-TOP-WIDTH: 0px" href=3D"https://deref-mail.com/mail/client/4R28zWKjW9M/d=

ereferrer/?redirectUrl=3Dhttp%3A%2F%2Fwww.exxonmobil.com%2F&sp" rel=3D"=

noopener noreferrer" target=3D_blank>www.exxonmobil.com



WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT:=

400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-=

SPACING: normal; TEXT-INDENT: 0px'>