Fedex Phish from France

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 11:29:00 -0600

Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:53564)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVwpH-000000005Cv-3mmU

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 11:28:48 -0600

Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])

by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id 7ABE6619D4;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])

by mta2.ac-mayotte.fr (Postfix) with ESMTP id 5E4D873B37;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr 5E4D873B37

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;

s=default; t=1721669132;

bh=0+FwZWsQDUuZfMaR8f7oEcYOUpmczg1BeDSmln4HFGs=;

h=From:Date:Subject:Message-ID:To:From;

b=PQysEI48CxAmB9ttSqjySJE2WNJnJukhAG+i4iJO5rrdHCHYnr1yNNAIoPaZS62AB

EOSNRRrPfbtdft8loI4QbOySY/E1+tVCs86AA/8JiQPee636hOVVS/7Ga9zZZDPAsy

VhInAS+SoawWMGTm1WS//xFFSeG2akXWM5LO21M8=

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id B6BEA2A07D;

Mon, 22 Jul 2024 20:25:31 +0300 (EAT)

X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id CB3362A081;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])

by imsva2.ac-mayotte.fr (Postfix) with ESMTP;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])

by mta.ac-mayotte.fr (Postfix) with ESMTP id B326CA95;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id A856C1FF93;

Mon, 22 Jul 2024 20:24:50 +0300 (EAT)

From: "Kennel-Kamardine Florence"

User-Agent: SOGoMail 5.5.1

MIME-Version: 1.0

Date: Mon, 22 Jul 2024 20:24:50 +0300

Subject: Action =?utf-8?q?Required=3A?= Reschedule Your Package Delivery

Message-ID: <5d88-669e9600-2b-40ea1f00@26834783>

X-Forward: 138.199.26.69, 193.55.5.88

Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15------"

To: undisclosed-recipients:;

X-TM-AS-GCONF: 00

X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1002-28546.001

X-TM-AS-User-Blocked-Sender: No

X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1002-28546.001

X-TMASE-Result: 10-7.102000-10.000000

X-TMASE-MatchedRID: zRq+SEqfCYr2qfT+71kiasDSXNqUn2gQihaVLlzDjtUM1uAoS31c898j

pw2ubxBm94K/U9yoT96z8d6zvo5NkMO+wkQncuC8bsHtQ0J95tRR7ICSj3pZJwTcgpiKKJNHDHy

53Gz9GZbmEVp5St5EyklyMZ48GKwUfMYfI9HGb6qysPB8dBBorUt74jQGCXFZEqDF0Gw3p2GTfQ

sCWRU4SDujhx+Xr3WAxjmDsee4erK0iI+wT19SJ9abOufQzTgwkOULbjlubMhlFSORUVE4Xo2vS

QWzRZoTqXBKZ8lojyvOj/hxK35Y1cSSYvOBTYp6Ik2vj5lWfcVm8m+0mUIqu1vCSEocHOzkHWm5

UoWAU16EbZFeOJ6AEp4CIKY/Hg3AaZGo0EeYG95lgn288nW9IE1j0vwmQbGYtfAeP8CayYYkPzS

nXRhxeRAdRtDHVTk1GkD3PO4z7u9ITuBOdZ5ew/oLR4+zsDTthUfR2rvBju5TPivRykGajiRrbY

K4e9FfomrmkT49zxoI1nM6bYyB0eppcByQXFvs

X-IMSS-DKIM-White-List: No

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0



------=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15------

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 534





FedEx

=C2=A0

Hello,

=C2=A0

Delivery Attempt Failed

Package Type: Standard Package

Delivery Date: July 22, 2024

We attempted to deliver your package at 11:20 AM on Monday, July 22, 20=

24, but no one was available to receive it.

Your package has been returned to our distribution center. To receive y=

our package, you need to reschedule a new delivery.

Please reschedule your delivery by clicking on "Reschedule Delivery" an=

d one of our couriers will deliver your package.

Reschedule Delivery

=C2=A0

Thank you,

FedEx Team

=C2=A0



------=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15------

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 1082



<=

font size=3D"6">Fed
"#e2341b">Ex

 


lor=3D"#ff0000">Hello,

 

Deliv=

ery Attempt Failed

Package Type: Standard Packag=

e

Delivery Date: July 22, 2024

We attempted to del=

iver your package at 11:20 AM on Monday, July 22, 2024, but no one was =

available to receive it.

Your package has been returned to our di=

stribution center. To receive your package, you need to reschedule a ne=

w delivery.

Please reschedule your delivery by clicking on "Resch=

edule Delivery" and one of our couriers will deliver your package.

<=

p>
dbhbvhbhvbhh.html">Reschedule Delivery<=

/strong>

 

Thank you,


g>FedEx Team

 





------=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15--------

Fedex Phish from France

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 11:29:00 -0600

Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:54184)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVwpH-000000005Dm-3mmo

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 11:28:48 -0600

Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])

by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id 07CF361861;

Mon, 22 Jul 2024 20:25:33 +0300 (EAT)

Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])

by mta2.ac-mayotte.fr (Postfix) with ESMTP id D4F9073B54;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr D4F9073B54

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;

s=default; t=1721669132;

bh=KuwSJq/Lamjz65UFeU0xBRjycA9CZCzUcWeHIjOjxjo=;

h=From:Date:Subject:Message-ID:To:From;

b=TtwbTBF2iT+vyFWZcBHxKH54TOI/Et3H+yZZAY5CNaAkt2u1BnMOPkuZJZERLnP4g

KEbO1urS8eQDCCvEqU4b0kgn3U+w5h1ga7lpa8flnVwyVgrZDDbnv7OO+87zhpNlbv

Oscs/GfgV5VaqHloJSyec0YksyyD8KTf6CVpP7gs=

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 001342A078;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 296EF2A08B;

Mon, 22 Jul 2024 20:25:31 +0300 (EAT)

Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])

by imsva2.ac-mayotte.fr (Postfix) with ESMTP;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])

by mta.ac-mayotte.fr (Postfix) with ESMTP id EF98AA79;

Mon, 22 Jul 2024 20:25:29 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id EAD921FF92;

Mon, 22 Jul 2024 20:24:49 +0300 (EAT)

From: "Kennel-Kamardine Florence"

User-Agent: SOGoMail 5.5.1

MIME-Version: 1.0

Date: Mon, 22 Jul 2024 20:24:49 +0300

Subject: Action =?utf-8?q?Required=3A?= Reschedule Your Package Delivery

Message-ID: <5d8c-669e9600-73-30064240@257674936>

X-Forward: 138.199.26.69, 193.55.5.88

Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36------"

To: undisclosed-recipients:;

X-TM-AS-GCONF: 00

X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1002-28546.001

X-TM-AS-User-Blocked-Sender: No

X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1002-28546.001

X-TMASE-Result: 10-7.102000-10.000000

X-TMASE-MatchedRID: zRq+SEqfCYr2qfT+71kiasDSXNqUn2gQihaVLlzDjtUM1uAoS31c898j

pw2ubxBm94K/U9yoT96z8d6zvo5NkMO+wkQncuC8bsHtQ0J95tRR7ICSj3pZJwTcgpiKKJNHDHy

53Gz9GZbmEVp5St5EyklyMZ48GKwUfMYfI9HGb6qysPB8dBBorUt74jQGCXFZEqDF0Gw3p2GTfQ

sCWRU4SDujhx+Xr3WAxjmDsee4erK0iI+wT19SJ9abOufQzTgwkOULbjlubMhlFSORUVE4Xo2vS

QWzRZoTqXBKZ8lojyvOj/hxK35Y1cSSYvOBTYp6Ik2vj5lWfcVm8m+0mUIqu1vCSEocHOzkHWm5

UoWAU16EbZFeOJ6AEp4CIKY/Hg3AaZGo0EeYG95lgn288nW9IE1j0vwmQbGYtfAeP8CayYYkPzS

nXRhxeRAdRtDHVTk1GkD3PO4z7u9ITuBOdZ5ew/oLR4+zsDTthUfR2rvBju5TPivRykGajiRrbY

K4e9FfomrmkT49zxoI1nM6bYyB0eppcByQXFvs

X-IMSS-DKIM-White-List: No

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0



------=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36------

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 534





FedEx

=C2=A0

Hello,

=C2=A0

Delivery Attempt Failed

Package Type: Standard Package

Delivery Date: July 22, 2024

We attempted to deliver your package at 11:20 AM on Monday, July 22, 20=

24, but no one was available to receive it.

Your package has been returned to our distribution center. To receive y=

our package, you need to reschedule a new delivery.

Please reschedule your delivery by clicking on "Reschedule Delivery" an=

d one of our couriers will deliver your package.

Reschedule Delivery

=C2=A0

Thank you,

FedEx Team

=C2=A0



------=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36------

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 1082



<=

font size=3D"6">Fed
"#e2341b">Ex

 


lor=3D"#ff0000">Hello,

 

Deliv=

ery Attempt Failed

Package Type: Standard Packag=

e

Delivery Date: July 22, 2024

We attempted to del=

iver your package at 11:20 AM on Monday, July 22, 2024, but no one was =

available to receive it.

Your package has been returned to our di=

stribution center. To receive your package, you need to reschedule a ne=

w delivery.

Please reschedule your delivery by clicking on "Resch=

edule Delivery" and one of our couriers will deliver your package.

<=

p>
dbhbvhbhvbhh.html">Reschedule Delivery<=

/strong>

 

Thank you,


g>FedEx Team

 





------=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36--------

Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 09:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVufO-00000000Che-3R7q

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 09:09:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jul 2024 09:09:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2100.outbound.protection.outlook.com ([40.92.107.100]:63807 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVtIM-000000003cz-1NL7

for root@nk.ca;

Mon, 22 Jul 2024 07:41:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Bh7B4su2ntkf+pU/9C6j6+jq4TduHwOX5ThFsDc1j+oE7N0wYGiAh83bV97Ng3FE2jIMhKrVN+WWtUXK60SFlUDMayMo7yy5BEkzadbVZrmajQ6kYGqFcNh2wMrWYmCC011Q1IwQshyl8G5f1pbFViI1+NZJle6Vi/fEB6expwD1MtQzJB1hcOeM9WWSiEcRQDUxBy3qLNKlK/dhnwyUxGMmFalkOiHKM/3WbTFW2v11jBBYAcZaPgLjmYH+bfSNIttd78CqMkQIED7IngBIFtwxKlKJKA9gnXoWQwt6N1ikMHJSfFOYlee6PccA7SeES2dshFboFW5iz5crrx7yLA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=8SNX04K86bDmewWwnAOI99TGpljHJvNTykKRuonx10g=;

b=v39dFa4PQfY0iG55CpizACyt9hBUaGwhsON6JSf2pIZS6OHHY0sXHJvtLKRoEUngPZZhd0ITdnE+3syzE3rwZHYq98iQuC5LcdHCEdv/M1sigiXvH/+M2sae9UZm0dbIcM1Zr7AJXWbkHTgDQuQpup/VojDaZvMojEcp6ixKvn+U0nCKQrSELPFm/JF6l/gZWNxPTdxrdukyYRtIafPhqh6u5qPzbSLWD5D/fArupwj6kzrKMYtAOZEb2I0prLqdoiGA033/CfEwqFTcZuKlOKRQQFfx1fvJlbI19C2Vn5x0whuMbIF6puzBkuvKWqNRrkagGrVSh3DFZTJwVdz7IQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=8SNX04K86bDmewWwnAOI99TGpljHJvNTykKRuonx10g=;

b=jMbekxvt1e60lw6ykHxUEUEyD7TIlnLjeJ0XaHinNoskhgLoyWhyy9Y243RGIgvdL9Bryvu28MIfGmSVecfYGdShAsOBvBnj3z0VngOJ3Xi1V2pjT64Q27GmjezD9ZOFd/mMoAG0OLqfwdKn39hxHK306QxbT5Gj5WwfH1YIJVWZL37srNZthXyI68rKSNWGqqz1OuypCbvlJ6aey8lmbJgWQFQUXIe3zFLRr7WoMh1P9kEKPCewPAaOugPAXvEVTI8AIuXC2xKff9xcsajQwtEb9hPEM/6omD6kdXW0P2z/FQ3dj1kedLeStQBpfrxs1lpm0GnfMFp9CKlwdP+WzQ==

Received: from KL1PR02MB6260.apcprd02.prod.outlook.com (2603:1096:820:dd::5)

by TY0PR02MB6740.apcprd02.prod.outlook.com (2603:1096:405:18::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.20; Mon, 22 Jul

2024 13:38:42 +0000

Received: from KL1PR02MB6260.apcprd02.prod.outlook.com

([fe80::117d:a790:7f1c:effc]) by KL1PR02MB6260.apcprd02.prod.outlook.com

([fe80::117d:a790:7f1c:effc%4]) with mapi id 15.20.7762.027; Mon, 22 Jul 2024

13:38:42 +0000

From: "somya"

To: "somya"

Subject: Google's 1st page ..?

Date: Mon, 22 Jul 2024 19:07:58 +0530

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0060_01DADC6A.93A32E40"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrcO+qJF7MVGRoURIGh+D4ACIxx3g==

Content-Language: en-us

X-TMN: [e6H5er16AwM3GfeCq0E+0FGNBnXCNpzV]

X-ClientProxiedBy: BMXPR01CA0088.INDPRD01.PROD.OUTLOOK.COM

(2603:1096:b00:54::28) To KL1PR02MB6260.apcprd02.prod.outlook.com

(2603:1096:820:dd::5)

X-Microsoft-Original-Message-ID: <005f01dadc3c$79eaf240$6dc0d6c0$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: KL1PR02MB6260:EE_|TY0PR02MB6740:EE_

X-MS-Office365-Filtering-Correlation-Id: c38a5b58-8ddb-464a-6951-08dcaa5399ac

X-Microsoft-Antispam:

BCL:0;ARA:14566002|19110799003|461199028|8060799006|3412199025|440099028|1710799026;

X-Microsoft-Antispam-Message-Info:

UUyMwhs6CiNaBMZub0XMSBfoMfDgFY08qkX5dIdbbj4VvbdVDlwjVKVaZn/4ggTS7qgItSSrOUGcO5qBVwWwlx4kUaVzqXJTqV16BzR3beItHVR8/5+f6loPwYC0SRUQpRduZfAOtKsUDkok8jhDQxgsiAOacpjK9UkLM++P2cRmqhYuxd14zAkY02EECq05JJBTDxzsDJ+l3xZrdPRYOXH3tybgR3N5/rSW/2fcH227PcqTdUokHP61urETHU4IXssMHOJFd4MQ2b0F0UCvuJmQkz3CSKU9EYilwEhEats7A1rK+VRfGWcr3JeUP9MLYUmV9Fcd6RTkn+cV2f4gIYUmhmbcZj8K8PhydV3h8TF7J11WyDfN9lAf8py3Le2j9cPZhsC/EMQbXkEK+uqtdNek/3Ik3LcUNhvGfGcUIzf4k37MxT0+kyOYeqZr2hjAwQttamKKR4tzfyAwVQXI4Hi3/NiQ0OEHuoAhpRFgvZmuM1o4cFaWgjGktpxeJGEQuEOAbg0JpirS5TFMPLQiXDusCkDexjRW13xJFANOc/WM5+yG3g6gvdWYpSfLkhGDECmTEHMrmphE2GjJzgdYc0HPpPGL92jdKx/9U0XkOLthhhYqWUGuUesLJQomp0+Ckkaqlv3+QJ4IFAR+udjJmdw4UZwxyLePiJ4+sLFPRG2QCfTyHqxc5etb51xPSOgV

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?FwXCBUj0cmwDeR7DLFwPWlWICczk/kfA83OzZU/f/K3LMMUiZHGFb2rYAihB?=

=?us-ascii?Q?bOCRRP/7v0nx7L4F4x13coLWaSlRlkj/8ba235VcNMwTMqOvXAqSyUJ/HVfY?=

=?us-ascii?Q?s9POz9qzVBDjQZ6oZuVbpy0kFFI/2InvsShYMnpgVshEqw+PoXbEDOMSbzLb?=

=?us-ascii?Q?FJ6PbX/n1K8yV9B+BRH1QYjdAsgci69YbgDbERUJoWGZFqpWgp6LpCkqDT4Y?=

=?us-ascii?Q?yUyb7PNUsLlE0t0nJSWcy+0yJqc2ReSLLlpMuxEJqXlcTi11zeK9mbH7K7JQ?=

=?us-ascii?Q?jCd/qGCen/LP6xyo+GzmXjQOmYonfdLp9GoMH79SoSj3ZrbKKoFc1M/Jru2K?=

=?us-ascii?Q?i6Z0RHmlYX4ciJJtdUTCwV/Vq0nOEGDTtO5mWsssaTWk+ctZCG1FZdaF+QTP?=

=?us-ascii?Q?+0ytNB8zPt8AZsgxEGcJVJyRiTQzymmrK1nhDRwVDT1vgIjZp0ZIVvMLL9/Y?=

=?us-ascii?Q?5ohWfPf0fSq/QUUTYGemftdqLpEExYerp+9WTqFhjCUxRJ4EyobITW4S+fmT?=

=?us-ascii?Q?Xjk9daYlT+GSDdUJAmmwVYOgFA2Uwp/9kXzSKxqgbh26nAhZN8omJHl80HFK?=

=?us-ascii?Q?fGjTiFfMJAoHqDjtHk3JxllxK/gZmz3QAp5VqMdK2TXF5d6efc3495gFQOAk?=

=?us-ascii?Q?+PBlKrBcX/zhzAJ4RQZa+Awkq5vivxa4uKeBInizbINGOu9cGPaCYXiCC6X6?=

=?us-ascii?Q?+dApzx2/aQxrPWmyOpXwIZmP7o8AyBkrW/uYJcO8K8qIIljKcudrNVKWfdib?=

=?us-ascii?Q?Fhc+RRAHhM15ES1uWDDyKdhDakxOE7t5RrIWCT7bDRnvi/o9y3KODGGG5CKR?=

=?us-ascii?Q?K+4E2zDmuWEVn0tb5QvSfNhs0DaL3Ee9wkeLrCz6ndqTrHcxqEj97D70n2Sm?=

=?us-ascii?Q?jqXUF6tOPp6uJ86PxVSb0eFu37SGQFpwCRr1zr1ooChbDgZx0+qswzQGUhuN?=

=?us-ascii?Q?RmdnFZmwmYSlnQ7bFAe2PATOjUplaVck6BzaxvSwKgM9f1pAvPiIJEvE+IZE?=

=?us-ascii?Q?76vKLRvG4Y0j9CaEXsRvWBr9r4dzGGkqAQhuPpTsppQpVo1DXmG9+PFCOzgC?=

=?us-ascii?Q?F8aw96qykP2LCRxVoGZanyOzw6JVAvZzFlBBRegczcxHs4ci5EyuZaxBgEZ/?=

=?us-ascii?Q?SnWUdpURjfpqy6fBr4fHQ+F16C8v8x+b2R/zjtWuZs4RBhhP915xs+L4BepI?=

=?us-ascii?Q?JhOLbJzyNVC5j/A2XKr17IWUhP7wN7m8PT2e/vQmyCz+uIeksP29430q6POg?=

=?us-ascii?Q?AvLq0DpQeYCvkl6uX/PNhX88W8WWfM3ibY2Kc4BWhw=3D=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: c38a5b58-8ddb-464a-6951-08dcaa5399ac

X-MS-Exchange-CrossTenant-AuthSource: KL1PR02MB6260.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jul 2024 13:38:41.9783

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR02MB6740



------=_NextPart_000_0060_01DADC6A.93A32E40

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,

I found your detail on Google.com and I have looked at your website and

realize your website is great design but your website ranking not good all

search engine Google, AOL, Yahoo, and Bing.

Do you want more targeted visitors on your website?

We can place your website on Google's 1st page. Yahoo, etc.).

May I send you quote? If interested.

Regards,

somya



------=_NextPart_000_0060_01DADC6A.93A32E40

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable






>


00">

Google's 1st page ..?










=3D"#26282A" face=3D"Helvetica">Hi, 

>






=3D"#201F1E" face=3D"Helvetica">I found your detail on

ang=3D"en-us">

face=3D"Helvetica"> 

pan>G
ont>
<=

font color=3D"#FF0000" face=3D"Helvetica">o

en-us">

=3D"Helvetica">o

lang=3D"en-us">g
span>
=3D"#00B050" face=3D"Helvetica">l
=


a">e

s">.

ang=3D"en-us">

elvetica">com and I have looked at your website and realize your website is=

great design but your website ranking not good all search engine

pan>
=3D"#201F1E" face=3D"Helvetica"> 

">

vetica">G

"en-us">o

pan lang=3D"en-us">

C000" face=3D"Helvetica">o

pan>g
ont>
<=

font color=3D"#00B050" face=3D"Helvetica">l

en-us">

=3D"Helvetica">e

"en-us">,

g=3D"en-us">

ace=3D"Helvetica"> AOL

pan lang=3D"en-us">,
n>
"#201F1E" face=3D"Helvetica"> 
<=

b>

ica">Yahoo,

s"> and

lang=3D"en-us">

" face=3D"Helvetica"> Bing

n>
font>






=3D"#201F1E" face=3D"Helvetica">Do you want more targeted visitors on your =

website? 

">






=3D"#201F1E" face=3D"Helvetica">We can place your website on
<=

span lang=3D"en-us">
01F1E" face=3D"Helvetica"> 
<=

/b>

">G

">o

ng=3D"en-us">

face=3D"Helvetica">o

pan lang=3D"en-us">g
b>
olor=3D"#00B050" face=3D"Helvetica">l

>

etica">e
=

's 1st page. Yahoo,  etc.).=

 

>






=3D"#201F1E" face=3D"Helvetica">May I send you quote? If interested. <=

/font>






=3D"#201F1E" face=3D"Helvetica">Regards, 

n-us">





<=

font color=3D"#002060" face=3D"Helvetica">somya

=3D"en-us">







=



------=_NextPart_000_0060_01DADC6A.93A32E40--

Amazon Prime membership phish from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 06:36:57 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVsHA-00000000LTt-0Adj

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 06:36:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jul 2024 06:36:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn1nam02hn2233.outbound.protection.outlook.com ([52.100.160.233]:48006 helo=NAM02-BN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVqaZ-000000006Pc-0laM

for sales@nk.ca;

Mon, 22 Jul 2024 04:48:31 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=U+FWPa5pQJ50z/DxRRkEjCgFapl+bCWedBTEsyAVSZALwQz7cmxXzRRwIKgAgNikf1j6GOyLHUZtxnvv+Clchrr5Mjo0uh3j6mGKXXzhEKlLuS2sWUSRPpQINZanR5U4EKUEZV+VJqdj3yQNvjh3G3+ro9xHV/pMRRKMY0J8nugRmNM8SbvI1X3vixnyp4zHmOh/LylpYbPH7XOK+qOU0Aw3vqYqbtT2snSB8cRkdzOzlCLo06l2S4BHmH2In43Eus3BKnTMFZJNF5esflcX9btNvx4Kxr9dqC6Y5HZ7lOUALQGDB+tzs+VWVCqiT81S9c9lNCicu7/5TOgJKX17Sg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pMkoXmIOxrpG1wCFw0KYyrocgbchQubJUlwA7BxEWK0=;

b=kIadvelKQYeqOJi+hZq9SSBzuH1xq8popQRBSvNHlQBXtVOglgcmMArxeilfrNXWGkb7rUUzyB6m4mntTmn4HO50vRXPnNW2CzA+FLIGv/nqp6VIfSMU5qVipeSxlSyBV/cRS1yFRCwp/mgQ0u7fvyzbT4Kt1PNPWRZcTB5wpzj+qygEn6cv3mQ24Wpby6tyvlj0v/WDaovRg5+PDDexvR01/pBquWY75HRJKDX61PfW2QMOhXEDBKiUAJikwghVqlcIeTEXl1b0TkiabNFDImWJb7RN1/x/HL4FiccmXS/5OaYsHRqVaU9sgp8zNkIoaqnRc2Fger3EB2lqzIlZjA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=newscap-dispenserufr2.villaricaconstrucao.com.br; dmarc=pass

action=none header.from=newscap-dispenserufr2.villaricaconstrucao.com.br;

dkim=pass header.d=newscap-dispenserufr2.villaricaconstrucao.com.br; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ufrr.onmicrosoft.com;

s=selector2-ufrr-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pMkoXmIOxrpG1wCFw0KYyrocgbchQubJUlwA7BxEWK0=;

b=2xUsOHkILD46pJPKZYctOZPYBEfPgYs6vFqaQ38RS0oI4iZMymkQyAkTfFabA/5GH4qsPNgzFRVycLcFyZI9X2DHAbrdGRNE+YUznVZxLJmHyeHeYddW6C0P9q0LmWW+lJ3/mLAI0xtwz8xYkebOSFyzZRwLo/dzUgbgKwf4NY99H+57l4aVofYYenodUPTRNc/ugpuX+lbSntP0EZYGzyzXkvFoWYH+o10HI8Wiwbt1p8lCrhNftfN2WrFvCaPDE/hDA/5p9I6rUO26rbMDedlhy1eUEgAn+kWsUnZOwzdc5YozTeGYciigOH83GSiTqXLDGJBOJf3WJqB12eEhYg==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=newscap-dispenserufr2.villaricaconstrucao.com.br;

Received: from CPUPR80MB8376.lamprd80.prod.outlook.com (2603:10d6:103:2c0::6)

by CPWPR80MB6732.lamprd80.prod.outlook.com (2603:10d6:103:17b::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7807.6; Mon, 22 Jul

2024 10:46:15 +0000

Received: from CPUPR80MB8376.lamprd80.prod.outlook.com

([fe80::f6c4:c163:15e8:2427]) by CPUPR80MB8376.lamprd80.prod.outlook.com

([fe80::f6c4:c163:15e8:2427%4]) with mapi id 15.20.7807.005; Mon, 22 Jul 2024

10:46:14 +0000

Content-Type: multipart/alternative;

boundary="--_NmP-aa60d2874966556d-Part_1"

From: =?UTF-8?Q?Am=F3=A0=84=82=F3=A0=84=82az=F3=A0=84=82?=

=?UTF-8?Q?on=F3=A0=84=82=F3=A0=84=82_Pr?=

=?UTF-8?Q?=F3=A0=84=82i=F3=A0=84=82me?=



To: sales@nk.ca

Subject: =?UTF-8?Q?Y=E2=80=8Cour_Pr=E2=80=8Cime_Me=E2=80=8C?=

=?UTF-8?Q?mb=E2=80=8Cer=E2=80=8Cship_st=E2=80=8Cat?=

=?UTF-8?Q?em=E2=80=8Cent_wa=E2=80=8Cs_en=E2=80=8Cd?=

=?UTF-8?Q?=E2=80=8Ced_-_Y=E2=80=8Cour_re=E2=80=8Cn?=

=?UTF-8?Q?e=E2=80=8Cwal_sch=E2=80=8Ced=E2=80=8Cul?=

=?UTF-8?Q?=E2=80=8Ced_on_July_22=2C_2024=2E_=23AJP?=

=?UTF-8?Q?X-8601662=2E?=

Message-ID:



Date: Mon, 22 Jul 2024 10:46:09 +0000

X-ClientProxiedBy: FR3P281CA0113.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a3::12) To CPUPR80MB8376.lamprd80.prod.outlook.com

(2603:10d6:103:2c0::6)

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CPUPR80MB8376:EE_|CPWPR80MB6732:EE_

X-MS-Office365-Filtering-Correlation-Id: fb164c53-e3e9-43d1-4303-08dcaa3b8162

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1800799024|52116014|366016|69100299015|376014|41320700013|38350700014|95630200002;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?YmhCZTJyYVNZa2pwWTVjaXRxWmIzb0pMVlhwTE1BUWVHSUd0NmtIaWZFY3V6?=

=?utf-8?B?NDcwU0swV3R1a2E3QlVMN0JtN2Y4dDNxSHdEVnk4ZVZpZzNoTDMyZTdSQW5y?=

=?utf-8?B?V3VKTWRBMWpwVTRyZlVXSHBOR3g1RmZ5WGVZQ1E0RWhiQS9LOXZlVDJIU1hr?=

=?utf-8?B?YjRrczNCTGE3TTlIVkNTNVgwWmNRcVNSVm9UVC9rWFA2NnZ0aGRqc01Xd1JP?=

=?utf-8?B?RlEzTDhNVU1UbVpod0lVcGhnNjEyYkU5NTdpbnpIT0UrbUI4ZXFTcEh1UHJO?=

=?utf-8?B?NVExVm1hc1E1T25mZXl4b2hmUm9McWNGYWMrekRhSGxKdHhlQk83YmwvNFI4?=

=?utf-8?B?SEQwZDhTMW9IZC9FY0JCLys0N3h2WTIxOGJQNmkzMExqMVNBckJscjZ5WW94?=

=?utf-8?B?M3BuOFFhNU1MMDdzaHBOL3FCSmwzeTVPcDExbDgrK05WWGV3dEZUQkhXTkJP?=

=?utf-8?B?WGZMVmpyUUd2UHJhT3A3WnVzV3RYNGxpT0M5blhpMWJTaFdOZlZ4eS8yaDRO?=

=?utf-8?B?dHNUUEhnYnZSbEEyR3JwdU95QnVPUTFIaHFTd0VDNHFzeEMyc3Q4dGZra3Jz?=

=?utf-8?B?TVJ5TlZUY1FpMFlsODdta0wrMzVSNjVOVHkrdXlOVGc4NTQ1UmRoUzlYZlBv?=

=?utf-8?B?RTFtdk42b1RDdGxHamN1Ny9SanZwelBQNkZ5SWFMWXQrbW0vZnl5U1o4cmdM?=

=?utf-8?B?VkhTejVNWVBlZTJNWXMzSmlaVFpMUFFrRUY5UUR5TlR6ZUxSajhsTmVtRzFu?=

=?utf-8?B?SEFESjFEQk5HakcxVXNOQ2tUSmU5V2dTdHFaRGh4ZmJEZEo4OFRvb3RHR2xu?=

=?utf-8?B?V0tEMjZwcmtKTXB5SG10d3IydEtZeGhUVkFETHZSMDU3Q2VtVjc0ckdvWVF5?=

=?utf-8?B?V0VpaTRBblIxSkkyYmVySkp5b1Z2Zk5NZXZ6YU5oR2c1UjQwSU9zRDR2MFhG?=

=?utf-8?B?d3FTK0JDYzY5dXl3aUdFTEt5bzVBVDVhVFNSRGVSZ1RqclNhQWJuRHI1YXpP?=

=?utf-8?B?c01QSG5jZGl3eVBHdktpa3JXUlNOaytpeHlVVU5Kem5lUXBUQ2tSUzZHak1I?=

=?utf-8?B?K2hqOFJLcW1EYzN3eTRqWkJRdTh1by9wMWcyNUNDZGlIRFYyL3BkNkdsRjF1?=

=?utf-8?B?dGRWczNtNzVpclRZUUs2bFdrY1c0a3M5N1VIWDNlektxSmFmODRGYlVSVEZG?=

=?utf-8?B?eno4TzRoVlZmaG1QaGNYbjlmMW4zL0hwUHVRSjlVdlBhTWdEUXJVYWtyM2F6?=

=?utf-8?B?c1EzVVJtakdIWURPWXJVTHJpb2cxVDJPcmxRK2VHRXNYY3VEOEJSQWNqakJx?=

=?utf-8?B?N3VPTXI4OGp6aGhSWHJydDluOUhmc2ZrUjFsM2dTbGw3WkNJVWp6UDg0aUV1?=

=?utf-8?B?MHVNK2xLdkxFR0t4VFVETSt1blh1bTBYbnhvY1E5bnhkK3F3a3Ziek9CdHZU?=

=?utf-8?B?NEtKNkZodlZlQjhhb2g4Y2dESlZ5KzloRGpEWWhJV090dnBYbmltOWcxdUc0?=

=?utf-8?B?UWlLYlVnOGwwMjNCMGhMcDQzUWFqVjlPZm9yQ1lYNGMvRDlCQTlCNG9ITUpm?=

=?utf-8?B?MHBJckZ0TjZCWDJYaUF5M0lZRGhmWlNSK0ZBMlVvTkZ4Smc3UFMvTXhlaG9k?=

=?utf-8?B?aG1lODRxV1N2RWlENDdhT21MSDlVSlY4dHhpKzAxU0JrWTVSMTV0UDdFTFNj?=

=?utf-8?B?NmduTnpQOVl1ZVJSN0JKbERUcitrN1NURlFnOGRWb25PbjV6cDBtRWNubm95?=

=?utf-8?B?MDVlOG1jNC9YVXdHbUhiRUpEamNCbTN2ZzZCTStLZ2IvRmoyMStuR3UxZjkv?=

=?utf-8?B?cUpuUGtlU1RaakUwUmhoVmpSL0RNUXk4M0VWcDlJZWFVcFJrYURaRW5LRnFr?=

=?utf-8?B?Vjhua2M3Vnc5enhjNS9kR3A0dC9nZnIzNm1uMkxrbENsSzhpNEVvNW1HTEpI?=

=?utf-8?B?UGJkUGxlYjc5anlHNXdDSk5obFFEZ0VGZkxIaEpXM0lFdk81WThiRU1NVGY3?=

=?utf-8?B?RFc1REtsOWxlTVVmYWxlOGZuWFhZUEo1QUlmVFdLOVNoMDJtZXUzcUNLOTU5?=

=?utf-8?B?NktYeVhzZHBkWWJQK2crRm5CNVdPYzFmbWNscHU1MDRxTnkwSlBDYi94SFNq?=

=?utf-8?B?OFB5a2JBZCtPdEhHSlFLWndtTW1MM2dwb2VNRWw3Q2NJem5oSTNiUjRSckxo?=

=?utf-8?B?cGkzM01GOWNjekhzbXkrYnV5WDFNVW5kRU1uQ2g1NkNrUTV6TkFxUHoyTjg3?=

=?utf-8?B?ZzVhdmVGSnE4TkZUMWVJNi9La0Z5OHFIK2RCWmFDOVZLZDVIRVJGK3MyeUs4?=

=?utf-8?B?dytNMkJzT2t0eW5QcFV3c01ob1I5aXZYY0tyVzhwOTlYdHBybHRXenRQcjQy?=

=?utf-8?B?V0d3MXZPYnRwNGpheGtrOXpLS09KUnpIOTNsY3UrWERSNVliQTZaYVAvUW0w?=

=?utf-8?B?Qjc1OHB1QkJ6K3o4WHliV1kxRWdzQ0lwU1ZRNTQxS1NpR2hJUjJHSUxkK3hl?=

=?utf-8?B?STMrL00rU3FyNnAvZWF6NFpQNklnbkxPbkNqT0FnQ05GLzJyZEZRSENTUUJv?=

=?utf-8?B?QWx6dlJRdFVEMDNzMGVsZXNFN25rTGNwQWJvcmx0RnljNHFsMWR3aGNTck9o?=

=?utf-8?B?ZFcvSENiM2NHck9DUWRiNHc5eFZuck1ORGxDY0Zkc3lQK0c5am5XajZRWnFq?=

=?utf-8?B?bUdFMkFFQ3RBYWxCZUVHNjd0OFJFYWt4YUFBNTMxSmduVkluMkRLeUoxcEtn?=

=?utf-8?B?TDd2RFBEZDdDeHFONVRDT1E1UERVdFYyRy9JbVRpYVA2YVlOcEhBVzNnbHVV?=

=?utf-8?B?L0NZcDI5anAxUU1OUk1KanhxU201aFhaam45OHVFRDREdGhaVFRQOEJHRURn?=

=?utf-8?B?Vkt6UHZsSmZWTWpNQUVHVjZ2TlplOGs5VmF4cU9VUXVFT1EwaUl1OFF3TGRP?=

=?utf-8?B?MTk0TEkvYXV1N1dGd3lRQWpxa1NoTEpjdWhHbW4zNVNhWURHclNCTTZJWDV1?=

=?utf-8?B?Q0xFaHEra0NvUnZoczJncUdHb01VbkE4cm5ONC9Db1kxeWJ1ci9zNzZ1cEtG?=

=?utf-8?B?TjNJdUc5Y1l0SlhrbG9HY1kvVkpITGFKTVVYU3p1ZC9uR1hUOUE0YUxUZGhw?=

=?utf-8?B?V0ZQLyt1UklBRXlCaFRtdXowYlB1WHBmMEJqTVpqaGZ5bzVJdUxnUEhvZlho?=

=?utf-8?B?cytxTWp6RWhyQXVsRWd0Z2VrczJkMkxlazJUNHJkQ1NobnovR20zOWZqRlBX?=

=?utf-8?B?WFViYkdNd3ROVk5RL1FZcEVGSXJjV1lxM0xRcXIzNmdoU2ZMUVhvekFSb2tU?=

=?utf-8?B?U21yWFpwNU1oUTJQTzNCeWdtV2VLdUVnPT0=?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:CPUPR80MB8376.lamprd80.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230040)(1800799024)(52116014)(366016)(69100299015)(376014)(41320700013)(38350700014)(95630200002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?S3M4cEo5YUMxc2MxZXg2VmwrK0JGRGFzSUcrbzIwZ2UwQ0RuUHA1Yll5bE92?=

=?utf-8?B?SFBCL3pyZ0o4aHc4anVmT082bm5hc3BNV1NmRlkweFQ2VXIwVG1sdWVZbXND?=

=?utf-8?B?T2h2dnNwcWxlT1NVclRCaWliSGpiWUxXOFB4RGNzc1JRT1ZHSzd0MDlwT2hY?=

=?utf-8?B?MThsR0xGRHd5YjVEMEUrQkZnVlJmN0NpaFFiOGJ1cmlPTVRrd1luVXRJODFw?=

=?utf-8?B?eHUrd0ZJa01NbDBnQVk4RlFCb2hjUlRzWDdvSzIrQVAvaUVIWVRLSGRhVkhD?=

=?utf-8?B?WFhVOFI0bDhIQlhSVnlsYm1NS2dJREpwV3VjQk1xYzhOWHJWWTZ3clpSeWdJ?=

=?utf-8?B?Qm1ZeTJpbzBxQklBaEpsTXA0R3RzbTBCWkRBS0hsUWF3bytXeVRLRTRPaTUy?=

=?utf-8?B?VTM0dDEvSnRXVnA2by9IMXFBSFIrS25KRUt4OUUwbFVZSWpGYjh3NGNKYWQ5?=

=?utf-8?B?YWJianJVa1JMbTJaeSswNTViL3hqQ2ZhMXZjN0Z4Y0ZPU3pxcXplNGZpRUxo?=

=?utf-8?B?MTdlYTZHUFVNcU5RQWdwSWVhNXhvWTQ5cFVLVHBrR2gvSGhhNFJ6NGhGdEtp?=

=?utf-8?B?NTVsdWo1aFd0U0FuVVRzYzJCRVhDeWlIWmZWOVZLcDhKb1d0VzMyRG5TejQ3?=

=?utf-8?B?ZkZ3WU9iTlJGQmYrZWhVSjFFZENkMHVRMCtVMHA2MnJiQTJtYlZCSndpM1RG?=

=?utf-8?B?NHNOVCtyY281cXh3R3dVdEZDZFFSMkdCZFBpVHhCWk1UYzFOUkVlRHozcHlQ?=

=?utf-8?B?aENLcUwyYi85a0NYQ3N1YmovNVE1SmRFMklvOEJpN2d5blc0STdVOEd0MzhL?=

=?utf-8?B?aDdUM1pPdUdOMCtqamphc0IwVDJ4RHI3UzUrcGI2VVFnREptM0hEK3FwTnht?=

=?utf-8?B?SUt2UDdqUEFrYjdxRW5KVGVLQ1R6YVdhY254cjNmZ0xiODhvdUg5YlBTNlJv?=

=?utf-8?B?WU5YZjNzNmhScVpvVC9BQ2FxbUVibEFqLzMvdG4vYVRmUlhheG9xdkxiKzNw?=

=?utf-8?B?Mm1JNDViNHF0eVMzV1FHZjc3V1FhbGZGRkRTekpCVzZLdWh4WGxUWXhZWjlR?=

=?utf-8?B?U2NYdEdWb3lxNEQvdlM5TkJ4WnBQK0kyUmRkdis3bmk0UzhyelZ5ak8wejFu?=

=?utf-8?B?QnVWWG8zZ3pGWThzc1pjL2xLVG5PODhwbllmbkltYnpIQ3JFYzZIbjlQeEdx?=

=?utf-8?B?bW1weE5nZjllZ2k5Yk5mYnhmYm5JUk44c3RkUFQzVzZjWjdvenF1c21JdUV5?=

=?utf-8?B?Q1lzVTFLaXBYbXB2ZmlneWVYSitQRHRTV2JHeXoyazgyU3J0M0MraC9mNmM0?=

=?utf-8?B?OXlZeVJKZUo0T0NpVGRKVXlOdllvRjlrWlIzZkUzVnA5blFNMVJ1QjlyZUg0?=

=?utf-8?B?YkMxUHFFdzI3OEhvQ0h5TjVGVm5HZ3l1QTlpaW5LQnR5Tm1YUGdsZEJjWlF0?=

=?utf-8?B?UUQxbUZSRURwdGtxZVJaK0wvZDZERzdjRmhUditNL2NTaGI5RmtuaTVUZ1RO?=

=?utf-8?B?WG5rYzhlZTRxM1RjWDZabzV1SFUveGVZWVVKckR1OGxNOGE5akszM3ZlWWFC?=

=?utf-8?B?aXRWRGFTekNkblliMFdNb2lZUDFTbDEyWlFuTDdNd1FHSERvUmJsb0lCZWd3?=

=?utf-8?B?bmU1bG1iVEtyZS9sL01aM1pRd29tdXI2UFlTTGJadEczUkp3QVBvSStBRVh5?=

=?utf-8?B?WDJ1VjBmbjJVb2YvRjRzV2lSd2F3dDZwK0w2M1pzdjM2OFpjL21MUHN1M2tN?=

=?utf-8?B?U1ltNWRVZjVZS2FoM3IzdmRBYk9zZkJBRkVvT1FoZzVZaC85ZFRBbndNSnU2?=

=?utf-8?B?OTY2TW0vYnZZenB2amJ0a1g4Vm1UdGlDUk5mUyszNVBaMjBRL2JiZUo3cUV6?=

=?utf-8?B?Nk93a0pvQlAxU3ltcGtlMmJQU0ViUGR5UlNWNHlSTGhKOFEzZFFReTlQczgy?=

=?utf-8?B?T3I0NmtBa2pYN2FERzRSU3lpYmhKTGdLNThScmU1WTVWSXF1MlpsL2ZLeDFa?=

=?utf-8?B?OXVRelJ0RzdZSFJSYlRoNURJYWFkbC8yZlh0OUVydGxuQkN0WjVSdGNIMWQ2?=

=?utf-8?B?Q09FazhPVTVvTGg3OGdDMFZxZ2tVaG9udEhtRERINEltZmZaRTJvNnpCZnY4?=

=?utf-8?B?dWY5NGlXdjlkTEZ0ZXg4aU4vNlY5a0V4UU9KRzV2bXhGMEx4a1ROL1JUdDhk?=

=?utf-8?B?bUttQUtJdTNtdkpjZHRWZ3lyb1dXcGZQakljcy9mT3dQQ3I1VDFzR1dYQW1x?=

=?utf-8?B?V09HdytBQ1BNaWlRT29HV1ZSbldPYk41Uk1yWGdUMStXTDRmZlcvQURBVDdS?=

=?utf-8?B?T0hOOWpFK1JHZm05ck10WFNtSk1QRCsvUkJ1c20zMGtIelkzNHlXcTVyZnNv?=

=?utf-8?Q?1Idht6UoRmj7KbRk=3D?=

X-OriginatorOrg: newscap-dispenserufr2.villaricaconstrucao.com.br

X-MS-Exchange-CrossTenant-Network-Message-Id: fb164c53-e3e9-43d1-4303-08dcaa3b8162

X-MS-Exchange-CrossTenant-AuthSource: CPUPR80MB8376.lamprd80.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jul 2024 10:46:13.3064

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: f3cf7a8a-f412-47a1-9ee9-3f27c6cf9872

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: 3mFrtn2JIlta+SLkJTNZnTiqNEBjsNG8bizqB1v8Xj8QICcSCPzCq7urOOPvTwa7KdP99RNBsuiLmNhXK16CmwjXKX+LlE3VlN4x6EY2tQvhScvDoBtNqZVf7mHCUfcj3ZXnBUif89qzCTN3c/mTOS04kmnQ2Aaisxn9wR00J5dduDCiXp4jI2ZZCL7Lr7CzHHs3O9D2X72Ss/3C4hPE9AvViHxmgBR6s6YoBWcKGpaoX+RJTN6Jbt09beF3cGBn

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPWPR80MB6732

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: normal Hi Customer, Your Amazon Prime Membership is set to

renew on July 22, 2024. However, we've noticed that the payment method associated

with your Prime membership is no longer valid. To prevent interruption of

your benefits, we will try charging other active cards associated with your

Amazon account if we can't charge your default card. If we are still unable

to process the charge [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

[52.100.160.233 listed in dnsbl.ahbl.org]

[52.100.160.233 listed in dnsbl.ahbl.org]

[52.100.160.233 listed in dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.160.233 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.3 MANGLED_YOUR BODY: mangled your

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.5 AMAZON_IMG_NOT_RCVD_AMZN Amazon hosted image but message not from

Amazon

Subject: {SPAM?} =?UTF-8?Q?Y=E2=80=8Cour_Pr=E2=80=8Cime_Me=E2=80=8C?=

=?UTF-8?Q?mb=E2=80=8Cer=E2=80=8Cship_st=E2=80=8Cat?=

=?UTF-8?Q?em=E2=80=8Cent_wa=E2=80=8Cs_en=E2=80=8Cd?=

=?UTF-8?Q?=E2=80=8Ced_-_Y=E2=80=8Cour_re=E2=80=8Cn?=

=?UTF-8?Q?e=E2=80=8Cwal_sch=E2=80=8Ced=E2=80=8Cul?=

=?UTF-8?Q?=E2=80=8Ced_on_July_22=2C_2024=2E_=23AJP?=

=?UTF-8?Q?X-8601662=2E?=



----_NmP-aa60d2874966556d-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit



normal

----_NmP-aa60d2874966556d-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




iv>


















=3D"100%" class=3D"x_main-container" style=3D"width:100%; max-width:578px; =

min-width:343px">


; , helvetica , sans-serif;padding: 0;font-size: 12.0px;">
src=3D"https://www.amazon.com/gp/r.html?C=3D22OZ1BEB03QU3&K=3D3AOGK6FW=

83WY&M=3Durn:rtn:msg:202305112313078945fe3526264cb392d42c60efb0p0na&=

;R=3D2TYJQXXU3SPJM&T=3DO&U=3Dhttps%3A%2F%2Fimages-na.ssl-images-ama=

zon.com%2Fimages%2FG%2F01%2Fnav%2Ftransp.gif&H=3DHCCAVLQJETEG009VAJNSWW=

MC3YAA&ref_=3Dpe_5453880_722419830_opens" width=3D"1">


6);">


=3D"border-collapse: collapse;border-spacing: 0.0px;padding: 0;Margin: 0;wi=

dth: 100.0%;height: 100.0%;background-repeat: repeat;background-position: c=

enter top;background-color: rgb(246,246,246);" width=3D"100%">








=3D"0" cellspacing=3D"0" class=3D"es-content-body" style=3D"border-collapse=

: collapse;border-spacing: 0.0px;background-color: rgb(255,255,255);width: =

600.0px;">






padding-top: 20.0px;padding-left: 20.0px;padding-right: 20.0px;">


e=3D"border-collapse: collapse;border-spacing: 0.0px;" width=3D"100%">












Margin: 0;width: 560.0px;" valign=3D"top">


"0" style=3D"border-collapse: collapse;border-spacing: 0.0px;" width=3D"100=

%">












ding: 20;Margin: 0;font-size: 0.0px;">3D""
=3D"https://m.media-amazon.com/images/G/46/e-mail/logos/amzn_logo_primev2_1=

10x48._CB663794352_.png" style=3D"display: block;border: 0;outline: none;te=

xt-decoration: none;" width=3D"124">



"background-color:#ffffff; text-align:center; padding-bottom:52px">


32" width=3D"100%" style=3D"padding-top:7px; width:100%; border-top:1px sol=

id #e5e5e5">



>








=3D"100%">


















ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


" width=3D"100%" style=3D"padding-bottom:32px; font-size:18px; color:#00405=

D">
















b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,=

Arial; font-size:15px; font-weight:bold; line-height:1.67; letter-spacing:0=

.38px; color:#13126c; text-align:left; margin:0">Hi Customer,




raph" style=3D"margin-bottom:24px">Your Amazon Prime Membership is set to r=

enew on July 22, 2024. However, we've noticed that the payment method assoc=

iated with your Prime membership is no longer valid.



ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


raph" style=3D"margin-bottom:24px">To prevent interruption of your benefits=

, we will try charging other active cards associated with your Amazon accou=

nt if we can't charge your default card. If we are still unable to process =

the charge for your membership fee, your Amazon Prime benefits will be paus=

ed.













<=

img height=3D"0" style=3D"visibility: hidden;overflow: hidden;border: 0;" w=

idth=3D"0">





















"top" width=3D"480">














.0px;">
r: 0;" width=3D"1">





llspacing=3D"0" width=3D"280">












style=3D"color: rgb(48,57,66);display: block;">
ncia.regioncusco.gob.pe/attach" style=3D"color: rgb(48,57,66);font-size: 14=

.0px;font-weight: bold;font-family: Arial , sans-serif;text-decoration: non=

e;line-height: 40.0px;width: 100.0%;display: inline-block;" target=3D"_blan=

k">Update payment information




















<=

img height=3D"0" src=3D"https://images-na.ssl-images-amazon.com/images/G/01=

/e-mail/img14/shards/img/bfd/sp.gif" style=3D"visibility: hidden;overflow: =

hidden;border: 0;" width=3D"1">





th330" width=3D"500">












op" width=3D"493">


ly: Arial , Helvetica , sans-serif;font-size: 12.0px;line-height: 16.0px;co=

lor: rgb(51,51,51);">














idth330" width=3D"500">












llstripe" width=3D"500">






















e-height: 30.0px;">
hidden;border: 0;" width=3D"1">















=3D"3" style=3D"line-height: 3.0px;" width=3D"500">
=3D"visibility: hidden;overflow: hidden;border: 0;" width=3D"1">














=


width=3D"1">





















op" width=3D"480">


sans-serif;font-size: 10.0px;line-height: 12.0px;color: rgb(102,102,102);fo=

nt-weight: normal;">=C2=A9 Amazon.com, Inc. or its affiliates. All rights r=

eserved. Amazon, Amazon.com, Prime, the Amazon.com logo and 1-Click are reg=

istered trademarks of Amazon.com, Inc. or its affiliates.





Amazon.com, 410 Terry Avenue N., Seattle, WA =

98109-5210.





















=3D"line-height: 1.0px;">
flow: hidden;border: 0;" width=3D"1">


=



----_NmP-aa60d2874966556d-Part_1--