Apple Device Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 06:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryA3G-00000000Glh-1m52

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 06:42:42 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 06:42:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [109.71.254.134] (port=59905 helo=emeraldhost.de)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ry8lK-000000006hq-1bJ2

for root@nl2k.ca;

Sat, 20 Apr 2024 05:20:11 -0600

From: Apple Pay

To: root@nl2k.ca

Subject: Apple Pay was suspended on your Device

Date: 20 Apr 2024 13:18:06 +0200

Message-ID: <20240420131805.4A2FFC9F97FD1AC3@apple-pay.network>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Apple Pay was suspended on your Device. Apple Pay was suspended

on your Device at 10:07 AM on April 19, 2024

Content analysis details: (12.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[109.71.254.134 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

[109.71.254.134 listed in dnsbl.ahbl.org]

[109.71.254.134 listed in dnsbl.ahbl.org]

[109.71.254.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Apple Pay was suspended on your Device

' xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns=3D"http://www.w=

3.org/1999/xhtml">=20

=20

>=20

=20

=20

=

=20

=20=20=20=20=20=20

=20

"helvetica neue", helvetica, sans-serif; -ms-text-size-adjust: 100%; -webki=

t-text-size-adjust: 100%;'>

0);">=20

p; margin: 0px; padding: 0px; width: 100%; height: 100%; border-collapse: c=

ollapse; border-spacing: 0px; background-repeat: repeat; background-color: =

rgb(250, 250, 250); mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspac=

ing=3D"0" cellpadding=3D"0">

ion: top; width: 100%; border-collapse: collapse; table-layout: fixed !impo=

rtant; border-spacing: 0px; background-repeat: repeat; background-color: tr=

ansparent; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0"=

cellpadding=3D"0">

dy>

: 600px; border-collapse: collapse; border-spacing: 0px; background-color: =

transparent; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" bgcolor=3D"#fff=

fff" cellspacing=3D"0" cellpadding=3D"0">

;">

border-spacing: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellsp=

acing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; padding: 0px; width: 560px;">

=3D"border-collapse: collapse; border-spacing: 0px; mso-table-lspace: 0pt; =

mso-table-rspace: 0pt;" cellspacing=3D"0" cellpadding=3D"0">

=

ing: 0px 0px 20px; font-size: 0px;"> 3D"Logo"
=3D"border: 0px currentColor; border-image: none; font-size: 12px; text-dec=

oration: none; display: block; -ms-interpolation-mode: bicubic;" alt=3D"Log=

o" src=3D"https://upload.wikimedia.org/wikipedia/commons/thumb/b/b0/Apple_P=

ay_logo.svg/1280px-Apple_Pay_logo.svg.png" height=3D"45">

rder-collapse: collapse; table-layout: fixed !important; border-spacing: 0p=

x; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0" cellpad=

ding=3D"0">

tr>

h: 600px; border-collapse: collapse; border-spacing: 0px; background-color:=

rgb(255, 255, 255); mso-table-lspace: 0pt; mso-table-rspace: 0pt;" bgcolor=

=3D"#ffffff" cellspacing=3D"0" cellpadding=3D"0">

10px;">
acing: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0=

" cellpadding=3D"0">

ble>

0px; padding: 0px; width: 560px;">

=3D"border-collapse: collapse; border-spacing: 0px; mso-table-lspace: 0pt; =

mso-table-rspace: 0pt;" cellspacing=3D"0" cellpadding=3D"0">

=3D"margin: 0px; padding: 0px 0px 10px;">

, 105); line-height: 30px; font-family: arial, "helvetica neue", helvetica,=

sans-serif; font-size: 30px; font-style: normal; font-weight: bold; mso-li=

ne-height-rule: exactly;'>Apple=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Pay was suspended on=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

your=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

Device.

ing: 5px 0px;">

1); line-height: 21px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 14px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>
Apple=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Pay was suspended on=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

your Device at =

10:07=20

AM
on=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

April 19,=20=

=20=20=20=20=20=20=20=20

2024

ing: 5px 0px;">

1); line-height: 21px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 14px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>
Your=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Apple ID cannot be=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

used=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

to make paym=

ents=20

with=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Appl=

e=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Pay
u=

ntil=20

you re-active y=

our=20

Apple=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

ID.

ing: 5px 0px;">

1); line-height: 21px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 14px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>

href=3D"https://pagead2.googlesyndication.com/pcs/click?xai=3DAKAOjstqODA3D=

CQ0k8HQXHR6ciJkvK710X76nKoJHiIRNl-HFrcPtL4tWgqVsIgccf9l4jyOmCpWD4F2-RfHmkYr=

MCASQBNNpJKF-raCi0QY6sl7LXWez8Dj8Xw-basrFw6CSDLqoanRUgNq4YiXf6AgQNISmE3-r73=

XVf9CJw0StPZh3tqT5LM0Gs8MV6RK126Y46UxqqtR2N_8VOYbIwVS1u5pI6_07jTCkWofvd9wFt=

n04jDDubOlgzEMhEzdfiIm39-T3j4G_uvE7_9IXRc_D70dmV6bofQAhONWobKJgjS6PBbUkwKwu=

Q-GpUN0GuQ_OIVCqs58I164rRH9oAENFtJo4vKxFfSE_hasQEaNz99klRkBNhOhm67GBQ5UkfpJ=

DVPytLmPISbQqPjZjGPP1ygcguGHJL3ROHbReQ&sig=3DCg0ArKJ

SzHWTcu9tyQwr&fbs_aeid=3D%5Bgw_fbsaeid%5D&adurl=3Dhttps://factory.g=

lamouride.org/longitudal">Re-activate=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

your Apple=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

ID=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

>=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

ing: 0px; font-size: 0px;">

: 640px; border-collapse: collapse; border-spacing: 0px; background-color: =

transparent; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"=

0" cellpadding=3D"0">

border-spacing: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellsp=

acing=3D"0" cellpadding=3D"0">

=

; width: 600px;">

=3D"border-collapse: collapse; border-spacing: 0px; mso-table-lspace: 0pt; =

mso-table-rspace: 0pt;" cellspacing=3D"0" cellpadding=3D"0">

tr>

=3D"presentation" style=3D"border-collapse: collapse; border-spacing: 0px; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0" cellpaddin=

g=3D"0">

ing: 0px 0px 35px;">

1); line-height: 18px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 12px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>
Copyright .=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

2024 Apple Inc. All=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20

Rights=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

Reserved.

2FA Metamask Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryA1D-00000000GYn-2X1P

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 06:40:35 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 06:40:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-2840114.us-west-1.nxcli.net ([173.249.147.141]:59340)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ry3of-00000000N1d-49XC

for sales@nk.ca;

Sat, 20 Apr 2024 00:03:18 -0600

Received: (qmail 17884 invoked by uid 10128); 20 Apr 2024 05:59:55 +0000

Date: Sat, 20 Apr 2024 05:57:27 +0000

To: sales@nk.ca

From: =?UTF-8?B?TdC1dGFN0LBzaw==?=

Reply-To: metamask@2fa.eth

Subject: Last Reminder: Urgent Two-Factor Authentication Activation

Message-ID: <7e22369f798fe91852511aa5214948a9@2fa.eth>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f911cb55121551547d7cb505d3ef3887"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.9

X-Spam_score_int: 169

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Urgent Two-Factor Authentication Activation body { font-family:

Arial, sans-serif; background-color: #f5f5f5; margin: 0; padding: 0; }

Content analysis details: (16.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[173.249.147.141 listed in dnsbl.ahbl.org]

[173.249.147.141 listed in dnsbl.ahbl.org]

[173.249.147.141 listed in dnsbl.ahbl.org]

[173.249.147.141 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[173.249.147.141 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[173.249.147.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[173.249.147.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[173.249.147.141 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

[173.249.147.141 listed in will-spam-for-food.eu.org]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: dt2.za.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 UNICODE_OBFU_ASC Obfuscating text with unicode

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: dt2.za.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: dt2.za.com]

Subject: {SPAM?} Last Reminder: Urgent Two-Factor Authentication Activation

This is a multi-part message in MIME format.

--1f911cb55121551547d7cb505d3ef3887

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Urgent Two-Factor Authentication Activation

body {

font-family: Arial, sans-serif;

background-color: #f5f5f5;

margin: 0;

padding: 0;

}

.container {

max-width: 600px;

margin: 20px auto;

padding: 20px;

background-color: #ffffff;

box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);

border-radius: 10px;

}

h1 {

color: #007BFF;

text-align: center;

margin-bottom: 20px;

}

p {

color: #333333;

line-height: 1.6;

margin-bottom: 15px;

}

.cta-button {

display: inline-block;

padding: 12px 24px;

font-size: 16px;

font-weight: bold;

text-align: center;

text-decoration: none;

background-color: #007BFF;

color: #ffffff;

border-radius: 5px;

}

.footer-text {

color: #808080;

font-size: 12px;

text-align: center;

margin-top: 20px;

}

Urgent Two-Factor Authentication Activation

Your account security is at risk! We've detected suspicious activity on your account.

To secure your account immediately, please activate Two-Factor Authentication (2FA) by clicking the button below:

Activate 2FA Now

If you need any assistance or have questions, please contact our support team immediately.

Thank you for your prompt attention to this matter.

Â© 2024 MÐµtaMÐ°sk. All rights reserved. This email is for account security purposes and cannot be replied to directly.

--1f911cb55121551547d7cb505d3ef3887

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

Urgent Two-Factor Authentication Activation

Urgent Two-Factor Authentication Activation

Your account security is at risk! We've detected suspicious activity on your account.

To secure your account immediately, please activate Two-Factor Authentication (2FA) by clicking the button below:

Activate 2FA Now

If you need any assistance or have questions, please contact our support team immediately.

Thank you for your prompt attention to this matter.

--1f911cb55121551547d7cb505d3ef3887--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

Canada Post Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 18:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxyXW-000000009SS-3RFS

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 18:25:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 18:25:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=41200 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxy0o-000000005Ji-2aQb

for doctor@nk.ca;

Fri, 19 Apr 2024 17:51:29 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id 8142676ED71; Fri, 19 Apr 2024 17:52:49 +0200 (SAST)

To: doctor@nk.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Fri, 19 Apr 2024 17:52:49 +0200

From: Intelcom | Package delivery across Canada

Reply-To: dask1337@abv.bg

Message-ID: <30d59fef665081bb46c641c63b452d4c@41.61.20.138>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_30d59fef665081bb46c641c63b452d4c"

Content-Transfer-Encoding: 8bit

X-Spam_score: 17.8

X-Spam_score_int: 178

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear doctor@nk.ca, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in

order to receive your package as soon as possible before it is returned to

sender [...]

Content analysis details: (17.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[41.61.20.138 listed in ix.dnsbl.manitu.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[dask1337(at)abv.bg]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_30d59fef665081bb46c641c63b452d4c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear doctor@nk.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ doctor@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) doctor@nk.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã doctor@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_30d59fef665081bb46c641c63b452d4c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

, Arial; font-size: 16px; word-spacing: normal;">

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">=C2=A0

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">

id=3D"m_6847154231841864878x_x_ENGLISH_VERSION" style=3D"border-width: 0px=

; margin: 0px auto; padding: 0px; color: rgb(85, 85, 85); font-family: helv=

etica, arial, verdana, sans-serif; font-size: 14px; vertical-align: baselin=

e; border-collapse: collapse; border-spacing: 0px; background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
adding: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

border-width: 2px 0px 1px; padding: 24px; line-height: 24px; letter-spacin=

g: 0.03em; vertical-align: baseline; border-top-color: rgb(202, 38, 26); bo=

rder-bottom-color: rgb(203, 203, 203); border-top-style: solid; border-bott=

om-style: solid; float: none; box-sizing: border-box;"> 3D"Canada<br

Post" class=3D"CToWUd" data-bit=3D"iit" height=

=3D"37" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyY=

iivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn=

6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra6=

9nfg=3Ds0-d-e1-ft#https://upload.wikimedia.org/wikipedia/commons/thumb/6/66=

/Intelcom_logo.svg/2560px-Intelcom_logo.svg.png" style=3D"border-width: 0px=

; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100%; box-s=

izing: border-box;" width=3D"136" />
google.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5=

/r/?id=3Dh8bf38d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960748000&usg=

=3DAOvVaw0hM8r4CJ57F291S0m9gesk" href=3D"https://t.notifications.canadapost=

-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"color: rg=

b(4, 103, 198); background-image: initial; background-position: 0px 0px; ba=

ckground-size: initial; background-repeat: initial; background-attachment: =

initial; background-origin: initial; background-clip: initial; border-width=

: 0px; margin: 0px; padding: 0px; box-sizing: border-box; text-decoration-l=

ine: none;" target=3D"_blank" title=3D"https://t.notifications.canadapost-p=

ostescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553"> 3D"Canada<br

Post" class=3D"CToWUd" data-bit=3D"iit" src=

=3D"https://ci3.googleusercontent.com/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iML=

L7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKvY9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nq=

OzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emails=

/cpc/images/mobile_cpc_logo.png" style=3D"border-width: 0px; margin: 0px; p=

adding: 0px; vertical-align: bottom; max-width: 100%; box-sizing: border-bo=

x;" width=3D"0" />

(255, 255, 255); border-width: 2px 0px 1px; padding: 24px; line-height: 24p=

x; letter-spacing: 0.03em; vertical-align: baseline; border-top-color: rgb(=

202, 38, 26); border-bottom-color: rgb(203, 203, 203); border-top-style: so=

lid; border-bottom-style: solid; float: none; box-sizing: border-box;">=

=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Dear doctor@nk.ca
ont-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

A parcel belonging to=

you has been declared by customs. We kindly ask you to pay the taxes and d=

uties of=C2=A05.86=

=C2=A0
n>CAD=C2=A0in order to rece=

ive your package as soon as possible before it is returned to sender in acc=

ordance with our terms and conditions.

=09=09=09=09=09=09

q=3Dhttps://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&source=

=3Dgmail&ust=3D1711917960748000&usg=3DAOvVaw2DyArZA8YbF40_kvowD5vA" href=3D=

"https://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D1=83=D0=AB=D0=AA=D0=B0" style=3D=

"color: rgb(255, 87, 51); background: rgb(255, 87, 51); border-width: 15px =

60px; border-style: solid; border-color: rgb(255, 87, 51); border-radius: 3=

0px; width: auto; text-align: center; line-height: 19px; letter-spacing: 0p=

x; font-family: InterRegular, Helvetica, Arial, sans-serif; font-weight: bo=

ld; display: block; text-decoration-line: none;" target=3D"_blank">
yle=3D"color: rgb(255, 255, 255);">Receive my delivery
ng>

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive a payment confirmation by e=

-mail and we will call you on your phone number to deliver your parcel acco=

rding to your availability.

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.

=09=09=09=09=09=09=09=09=09=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
This email h=

as been sent to=C2=A0doctor@nk.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=

=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
n>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

id=3D"m_6847154231841864878x_x_ENGLISH_VERSION" style=3D"border-width: 0px=

; margin: 0px auto; padding: 0px; color: rgb(85, 85, 85); font-family: helv=

etica, arial, verdana, sans-serif; font-size: 14px; vertical-align: baselin=

e; border-collapse: collapse; border-spacing: 0px; background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

padding: 24px; line-height: 24px; letter-spacing: 0.03em; vertical-align: =

baseline; border-top: 2px solid rgb(202, 38, 26); border-bottom-color: rgb(=

203, 203, 203); border-right-width: 0px; border-left-width: 0px; border-bot=

tom-style: solid; float: none; box-sizing: border-box;"> 3D"Canada

Post" class=3D"CToWUd" data-bit=3D"iit" height=3D"37" src=3D"https://ci3.go=

ogleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbq=

fdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-=

jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upl=

oad.wikimedia.org/wikipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Int=

elcom_logo.svg.png" style=3D"border-width: 0px; margin: 0px; padding: 0px; =

vertical-align: bottom; max-width: 100%; box-sizing: border-box;" width=3D"=

136" />
notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,450=

0553&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw0BIJtZBrO9SUJHNhb547=

nm" href=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500553" style=3D"color: rgb(4, 103, 198); background-i=

mage: initial; background-position: 0px 0px; background-size: initial; back=

ground-repeat: initial; background-attachment: initial; background-origin: =

initial; background-clip: initial; border-width: 0px; margin: 0px; padding:=

0px; box-sizing: border-box; text-decoration-line: none;" target=3D"_blank=

" title=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500553">=C2=A0 3D"Canada<br

(255, 255, 255); padding: 24px; line-height: 24px; letter-spacing: 0.03em; =

vertical-align: baseline; border-top: 2px solid rgb(202, 38, 26); border-bo=

ttom-color: rgb(203, 203, 203); border-right-width: 0px; border-left-width:=

0px; border-bottom-style: solid; float: none; box-sizing: border-box;">=

=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Cher(e) doctor@nk.ca
=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

Un colis vous apparte=

nant a =C3=A9t=C3=A9 d=C3=A9clar=C3=A9 par les douanes. Nous vous demandons=

de bien vouloir acquitter les taxes et droits de
border-box;">=C2=A05.86
tahoma, geneva, sans-serif;">=C2=A0
0px;">CAD=C2=A0afin de recevoir votre colis dans les meilleurs d=

=C3=A9lais avant qu'il ne soit renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur confor=

m=C3=A9ment =C3=A0 nos conditions d'utilisation.

=09=09=09=09=09=09

q=3Dhttps://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&source=

=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw3D4GIL24u38-K3kyUeU9o8" href=3D=

"https://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D1=83=D0=AB=D0=AA=D0=B0" style=3D=

"color: rgb(255, 87, 51); background: rgb(255, 87, 51); border-width: 15px =

60px; border-style: solid; border-color: rgb(255, 87, 51); border-radius: 3=

0px; width: auto; text-align: center; line-height: 19px; letter-spacing: 0p=

x; font-family: InterRegular, Helvetica, Arial, sans-serif; font-weight: bo=

ld; display: block; text-decoration-line: none;" target=3D"_blank">
yle=3D"color: rgb(255, 255, 255);">Recevoir ma livraison
rong>

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectu=C3=A9, vous recevrez une confirmation de paie=

ment par e-mail et nous vous appellerons sur votre num=C3=A9ro de t=C3=

=A9l=C3=A9phone pour livrer votre colis selon vos disponibilit=C3=A9s.
n>

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destin=C3=A9 uniquement au destinataire. Il peut cont=

enir des informations exclusives ou confidentielles. Toute diffusion, distr=

ibution ou copie non autoris=C3=A9e de ce message est strictement interdite=

. Si vous avez re=C3=A7u ce message par erreur, veuillez nous en informer i=

mm=C3=A9diatement et supprimer le message original.

=09=09=09=09=09=09=09=09=09=C2=A0=C2=A0=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne po=

uvons ni recevoir ni r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si=

vous avez des questions ou des commentaires, contactez-nous en ligne ou ap=

pelez le=C2=A0
n style=3D"border-width: 0px; margin: 0px; padding: 0px; box-sizing: border=

-box;">
: inline-block; box-sizing: border-box;">1-514-807-6086.
n>

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
Ce courriel =

a =C3=A9t=C3=A9 envoy=C3=A9 =C3=A0 doctor@nk.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilit=C3=A9=C2=

=A0|=C2=A0Juridique=C2=A0|=C2=A0Vie priv=C3=A9e

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

--b1_30d59fef665081bb46c641c63b452d4c--

Canada Post Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 17:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxxbc-000000002uD-3SPU

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 17:25:20 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 17:25:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=51522 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxxL4-000000000pk-40kg

for www@nl2k.ab.ca;

Fri, 19 Apr 2024 17:08:22 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id E49BA734BF5; Fri, 19 Apr 2024 14:30:19 +0200 (SAST)

To: www@nl2k.ab.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Fri, 19 Apr 2024 14:30:19 +0200

From: Intelcom | Package delivery across Canada

Reply-To: dask1337@abv.bg

Message-ID: <94985b4d6669033e96ba7df76d96728c@41.61.20.138>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_94985b4d6669033e96ba7df76d96728c"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear www@nl2k.ab.ca, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in

order to receive your package as soon as possible before it is returned to

sender [...]

Content analysis details: (16.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[dask1337(at)abv.bg]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_94985b4d6669033e96ba7df76d96728c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear www@nl2k.ab.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ www@nl2k.ab.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) www@nl2k.ab.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã www@nl2k.ab.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_94985b4d6669033e96ba7df76d96728c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

, Arial; font-size: 16px; word-spacing: normal;">

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Dear www@nl2k.ab.ca
"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive a payment confirmation by e=

-mail and we will call you on your phone number to deliver your parcel acco=

rding to your availability.

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.

=09=09=09=09=09=09=09=09=09=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
This email h=

as been sent to=C2=A0www@nl2k.ab.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=

=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
n>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Cher(e) www@nl2k.ab.ca
=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectu=C3=A9, vous recevrez une confirmation de paie=

ment par e-mail et nous vous appellerons sur votre num=C3=A9ro de t=C3=

=A9l=C3=A9phone pour livrer votre colis selon vos disponibilit=C3=A9s.
n>

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destin=C3=A9 uniquement au destinataire. Il peut cont=

enir des informations exclusives ou confidentielles. Toute diffusion, distr=

ibution ou copie non autoris=C3=A9e de ce message est strictement interdite=

. Si vous avez re=C3=A7u ce message par erreur, veuillez nous en informer i=

mm=C3=A9diatement et supprimer le message original.

=09=09=09=09=09=09=09=09=09=C2=A0=C2=A0=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne po=

uvons ni recevoir ni r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si=

vous avez des questions ou des commentaires, contactez-nous en ligne ou ap=

pelez le=C2=A0
n style=3D"border-width: 0px; margin: 0px; padding: 0px; box-sizing: border=

-box;">
: inline-block; box-sizing: border-box;">1-514-807-6086.
n>

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
Ce courriel =

a =C3=A9t=C3=A9 envoy=C3=A9 =C3=A0 www@nl2k.ab.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilit=C3=A9=C2=

=A0|=C2=A0Juridique=C2=A0|=C2=A0Vie priv=C3=A9e

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

--b1_94985b4d6669033e96ba7df76d96728c--

Canada Post Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 12:23:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryFF3-00000000H35-2Y5h

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 12:15:13 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 12:15:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=56102 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryBw1-000000003OR-065C

for root@nk.ca;

Sat, 20 Apr 2024 08:43:28 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id 3E88B723859; Sat, 20 Apr 2024 15:58:46 +0200 (SAST)

To: root@nk.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Sat, 20 Apr 2024 15:58:46 +0200

From: Intelcom | Package delivery across Canada

Reply-To: vr4393810@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_aac6032477229f04f61b13e5cfcba36b"

Content-Transfer-Encoding: 8bit

X-Spam_score: 15.2

X-Spam_score_int: 152

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear root@nk.ca, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in

order to receive your package as soon as possible before it is ret [...]

Content analysis details: (15.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[vr4393810(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_aac6032477229f04f61b13e5cfcba36b

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear root@nk.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ root@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) root@nk.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã root@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_aac6032477229f04f61b13e5cfcba36b

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=C2=A0

elvetica, Arial; font-size: 16px; word-spacing: normal;">

=3D"border-width: 0px; margin: 0px auto; padding: 0px; color: rgb(85, 85, 8=

5); font-family: helvetica, arial, verdana, sans-serif; font-size: 14px; ve=

rtical-align: baseline; border-collapse: collapse; border-spacing: 0px; bac=

kground-color: rgb(240, 240, 240);" bgcolor=3D"#f0f0f0" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

n: baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em; font-fa=

mily: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical-align=

: middle; box-sizing: border-box;">

: 0px; vertical-align: baseline; border-collapse: collapse; max-width: 600p=

x; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

n: baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

gin: 0px; padding: 24px; line-height: 24px; letter-spacing: 0.03em; vertica=

l-align: baseline; border-top-color: rgb(202, 38, 26); border-bottom-color:=

rgb(203, 203, 203); border-top-style: solid; border-bottom-style: solid; f=

loat: none; box-sizing: border-box;">
=3D"CToWUd" style=3D"border-width: 0px; margin: 0px; padding: 0px; vertical=

-align: bottom; max-width: 100%; box-sizing: border-box;" alt=3D"Canada

Post" src=3D"https://ci3.googleusercontent.com/=

meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTjKtLAPK7crB-xi6=

HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrgiRSIBn7Bbi4zT7=

ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upload.wikimedia.org/wi=

kipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Intelcom_logo.svg.png" =

data-bit=3D"iit">
a.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"background-position: =

0px 0px; border-width: 0px; margin: 0px; padding: 0px; color: rgb(4, 103, 1=

98); box-sizing: border-box; text-decoration-line: none;" href=3D"https://t=

.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,45=

00553" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url=

?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf3=

8d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960748000&usg=3DAOvVaw0hM8r=

4CJ57F291S0m9gesk">
0px; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100%; b=

ox-sizing: border-box;" alt=3D"Canada

Post" src=3D"https://ci3.googleusercontent.co=

m/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iMLL7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKv=

Y9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nqOzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#=

https://www.canadapost.ca/cpo/mc/emails/cpc/images/mobile_cpc_logo.png" dat=

a-bit=3D"iit">

2px 0px 1px; margin: 0px; padding: 24px; line-height: 24px; letter-spacing:=

0.03em; vertical-align: baseline; border-top-color: rgb(202, 38, 26); bord=

er-bottom-color: rgb(203, 203, 203); border-top-style: solid; border-bottom=

-style: solid; float: none; box-sizing: border-box;">=C2=A0

color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em; font-fa=

mily: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical-align=

: middle; box-sizing: border-box;">=C2=A0

height: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: b=

order-box;" bgcolor=3D"#ffffff">

eva, sans-serif;">Dear root@nk.ca
geneva, sans-serif;">,

A parcel belonging to you has been decl=

ared by customs. We kindly ask you to pay the taxes and duties of
e=3D"box-sizing: border-box;">=C2=A05.86
=3D"font-family: tahoma, geneva, sans-serif;">=C2=A0
"letter-spacing: 0px;">CAD=C2=A0in order to receive your package a=

s soon as possible before it is returned to sender in accordance with our t=

erms and conditions.

eva, sans-serif;">Once your payment ha=

s been made, you will receive a payment confirmation by e-mail and we will =

call you on your phone number to deliver your parcel according to your avai=

lability.

: 0px; letter-spacing: 0px; vertical-align: baseline; border-collapse: coll=

apse; max-width: 600px; border-spacing: 0px;" bgcolor=3D"#666666" border=3D=

"0" cellspacing=3D"0" cellpadding=3D"0">

n: baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

); line-height: 24px; letter-spacing: 0.03em; vertical-align: middle; borde=

r-bottom-color: rgb(203, 203, 203); border-top-width: 0px; border-right-wid=

th: 0px; border-left-width: 0px; border-bottom-style: solid; box-sizing: bo=

rder-box;" bgcolor=3D"#666666">

inline-block; box-sizing: border-box;">Th=

is message is intended for the addressee only. It may contain proprietary o=

r confidential information. Any unauthorized dissemination, distribution or=

copying of this message is strictly prohibited. If you have received this =

message in error, please inform us immediately and delete the original mess=

age.

=C2=A0

inline-block; box-sizing: border-box;">Do=

not reply to this e-mail. We cannot receive or respond to replies to this =

e-mail. If you have any questions or comments, please contact us online or =

call 1-514-807-6086.

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">

This email has been sent to=C2=A0
>root@nk.ca

style=3D"font-family: tahoma, geneva, sans-serif;">
17, 85, 204);" href=3D"http://intelcom.ca/" target=3D"_blank" data-saferedi=

recturl=3D"https://www.google.com/url?q=3Dhttp://intelcom.ca&source=3Dgmail=

&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_7KG">intelcom.ca=

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">
nt-size: 14px;">1380 William St, Montreal, Quebec H3C 1R5, Canada
d>

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">
nt-size: 14px;">
>Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Legal=C2=A0=C2=

=A0|=C2=A0=C2=A0=C2=A0Privacy

24px 48px; color: rgb(240, 240, 240); line-height: 24px; letter-spacing: 0=

.03em; vertical-align: middle; box-sizing: border-box;" bgcolor=3D"#666666"=

>
a, sans-serif;">
; display: inline-block; box-sizing: border-box;">=C2=A9 Intelcom=

=C2=A0
r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"background-position: 0px 0px; bo=

rder-width: 0px; margin: 0px; padding: 0px; color: rgb(240, 240, 240); disp=

lay: inline-block; box-sizing: border-box;" href=3D"https://t.notifications=

.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" target=

=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://=

t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4=

500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw3Mc_Q_L0njln9ok13_=

tmxp">
: 0px; padding: 0px; vertical-align: bottom; float: right; max-width: 100%;=

box-sizing: border-box;" alt=3D"Canada" src=3D"https://ci3.googleuserconte=

nt.com/meips/ADKq_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEX=

px35h5qAG9wVVKl7aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3D=

s0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canad=

a_logo.png" data-bit=3D"iit">

ne-height: 24px; letter-spacing: 0.03em; vertical-align: baseline; border-t=

op-color: rgb(202, 38, 26); border-bottom-color: rgb(203, 203, 203); border=

-top-width: 2px; border-right-width: 0px; border-left-width: 0px; border-to=

p-style: solid; border-bottom-style: solid; float: none; box-sizing: border=

-box;">
dth: 0px; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100=

%; box-sizing: border-box;" alt=3D"Canada Post" src=3D"https://ci3.googleus=

ercontent.com/meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTj=

KtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrg=

iRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upload.wi=

kimedia.org/wikipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Intelcom_=

logo.svg.png" data-bit=3D"iit">
st-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"backgro=

und-position: 0px 0px; border-width: 0px; margin: 0px; padding: 0px; color:=

rgb(4, 103, 198); box-sizing: border-box; text-decoration-line: none;" hre=

f=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf3=

8d8,8ded733,4500553" target=3D"_blank" data-saferedirecturl=3D"https://www.=

google.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5=

/r/?id=3Dh8bf38d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960749000&usg=

=3DAOvVaw0BIJtZBrO9SUJHNhb547nm">=C2=A0
yle=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom=

; max-width: 100%; box-sizing: border-box;" alt=3D"Canada

Post" src=3D"https://ci3.googleusercontent.co=

m/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iMLL7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKv=

Y9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nqOzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#=

https://www.canadapost.ca/cpo/mc/emails/cpc/images/mobile_cpc_logo.png" dat=

a-bit=3D"iit">

adding: 24px; line-height: 24px; letter-spacing: 0.03em; vertical-align: ba=

seline; border-top-color: rgb(202, 38, 26); border-bottom-color: rgb(203, 2=

03, 203); border-top-width: 2px; border-right-width: 0px; border-left-width=

: 0px; border-top-style: solid; border-bottom-style: solid; float: none; bo=

x-sizing: border-box;">=C2=A0

color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em; font-fa=

mily: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical-align=

: middle; box-sizing: border-box;">=C2=A0

height: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: b=

order-box;" bgcolor=3D"#ffffff">

eva, sans-serif;">Cher(e) root@nk.ca
ma, geneva, sans-serif;">,

Un colis vous appartenant a =C3=A9t=

=C3=A9 d=C3=A9clar=C3=A9 par les douanes. Nous vous demandons de bien voulo=

ir acquitter les taxes et droits de=

=C2=A05.86
a, sans-serif;">=C2=A0CAD=

=C2=A0afin de recevoir votre colis dans les meilleurs d=C3=A9lais =

avant qu'il ne soit renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur conform=C3=A9ment=

=C3=A0 nos conditions d'utilisation.

r-style: solid; border-color: rgb(255, 87, 51); border-radius: 30px; width:=

auto; text-align: center; color: rgb(255, 87, 51); line-height: 19px; lett=

er-spacing: 0px; font-family: InterRegular, Helvetica, Arial, sans-serif; f=

ont-weight: bold; display: block; text-decoration-line: none;" href=3D"http=

s://xn--z1aac.xn--p1ai/=D1=8C=D1=8B=D0=A3=D0=AB" target=3D"_blank" data-saf=

eredirecturl=3D"https://www.google.com/url?q=3Dhttps://=D1=8A=D1=8B=D1=

=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&source=3Dgmail&ust=3D171191796074=

9000&usg=3DAOvVaw3D4GIL24u38-K3kyUeU9o8">
, 255);">Recevoir ma livraison

eva, sans-serif;">Une fois votre paiem=

ent effectu=C3=A9, vous recevrez une confirmation de paiement par e-mail et=

nous vous appellerons sur votre num=C3=A9ro de t=C3=A9l=C3=A9phone pour li=

vrer votre colis selon vos disponibilit=C3=A9s.

inline-block; box-sizing: border-box;">
geneva, sans-serif;">Ce message est desti=

n=C3=A9 uniquement au destinataire. Il peut contenir des informations exclu=

sives ou confidentielles. Toute diffusion, distribution ou copie non autori=

s=C3=A9e de ce message est strictement interdite. Si vous avez re=C3=A7u ce=

message par erreur, veuillez nous en informer imm=C3=A9diatement et suppri=

mer le message original.

=C2=A0=C2=A0=C2=A0

inline-block; box-sizing: border-box;">Ne=

r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne pouvons ni recevoir ni r=

=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si vous avez des questio=

ns ou des commentaires, contactez-nous en ligne ou appelez le
"font-family: tahoma, geneva, sans-serif;">=C2=A0
h: 0px; margin: 0px; padding: 0px; box-sizing: border-box;">
border-width: 0px; margin: 0px; padding: 0px; display: inline-block; box-si=

zing: border-box;">1-514-807-6086.

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">

Ce courriel a =C3=A9t=C3=A9 envoy=C3=

=A9 =C3=A0 root@nk.ca

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">
nt-size: 14px;">Accessibilit=C3=A9=C2=A0|=C2=A0Juridique=

=C2=A0|=C2=A0Vie priv=C3=A9e

--b1_aac6032477229f04f61b13e5cfcba36b--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a