Backpack promotion phish from Microsoft Outlook and OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtx9-000000009T6-4B9G

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 15:00:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 15:00:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip239.ip-15-204-31.us ([15.204.31.239]:50607 helo=isis.org)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYsh1-00000000KhN-2Eks

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 13:39:42 -0600

Received: from NAM04-MW2-obe.outbound.protection.outlook.com (mail-mw2nam04on20717.outbound.protection.outlook.com. [2a01:111:f403:240a::510])

by mx.google.com with ESMTPS id d{n,4}c01a{n,4}-1fac157b494si19763565ad.411.2024.06.28.06.38.{n,2}

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES510-GCM-SHA256 bits=129/129);

[email_date]

Received: from CH2PEPF00000148.namprd02.prod.outlook.com

(2603:10b6:610:32:cafe::5d) by CH0PR07CA0027.outlook.office365.com

(2603:10b6:610:32::32) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.29 via Frontend

Transport; [email_date]

Authentication-Results: spf=pass (sender IP is 172.82.239.10)

smtp.mailfrom=ecom1.logitech.com; dkim=pass (signature was verified)

header.d=ecom1.logitech.com;dmarc=pass action=none

header.from=ecom1.logitech.com;compauth=pass reason=100

Received-SPF: Pass (protection.outlook.com: domain of ecom1.logitech.com

designates 172.82.239.10 as permitted sender)

receiver=protection.outlook.com; client-ip=172.82.239.10;

helo=r10.email.circle.logi.com; pr=C

Received: from r10.email.circle.logi.com (172.82.239.10) by

CH2PEPF00000148.mail.protection.outlook.com (10.167.244.105) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7784.11 via Frontend Transport; [email_date]

X-IncomingTopHeaderMarker:

OriginalChecksum:6358AF3B258C1BDB0F3ED64FE856BAC9662515C74626328B54DCEBF92274B956;UpperCasedChecksum:5327CC64E06FE43FD5101DD8A956F60F04F8DF58045B850976A73B640D0165AC;SizeAsReceived:1877;Count:14

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ecom1.logitech.com;

s=logitech; t=1721117047;

bh=0B/6bTXPHYx3e3G5RVajiPcww6i9oJf3Jdw234zprSg=;

h=From:Date:Subject:To:MIME-Version:Message-ID:Content-Type;

b=doeP62K0azYfUo2gfef4ZVGID5uyW5ForKu+hXm0eVvczRdBoT9hNHe0m5AZPyavM

wrq5qf8gZ/UIwqdT8+Y/j5RDFhn/M7NyVxhMCMqJ1Ou3HllLEk91bbrwMDfN/7CkGh

fBIjUbwImC5HZimeUB5KkB6vKxWhaunKz2/hNO26CrN2Y1zkPdEPcy4YaD73BNblSL

VywV87fIqKXadpAR1ESIxYiUzyK0CatJpIEbcYtKuUcWQ1lpvn382SGYtnSTjf+mwo

zQA1PQsgo4yJr8o0qNV2KyheGErYV/Samb4z2k3e5TsSBu+fsDVHNTEoPhRV/sn9aN

2DBv+4tC5GeDw==

X-MSFBL: fhH0F7QIWB8j5+dy6gCsnqngGOs32SZvXX0SXEeVBRc=|eyJnIjoiZGVmYXVsdF9

jNGUyYzBhNy1kNmEyLTQ5NmQtYjY2Ni0xNjEzZDc0YjUzMDUiLCJyIjoicW94dWJ

la0BvdXRsb29rLmNvbSIsImIiOiJhd3NfbG9naXRlY2hfcHJvZDFfZGVmYXVsdF9

tb21lbnR1bTEyX210YTAwNF8xNzIuODIuMjM5LjEwIiwicmNwdF9tZXRhIjp7ICJ

pbiI6ICJsb2dpdGVjX21rdF9wcm9kMSIsICJyIjogInFveHViZWtAb3V0bG9vay5

jb20iLCAibSI6ICIxMDA4MzA4OTA4IiwgImQiOiAiNDM2NDI2MTMzIiwgImkiOiA

iOTcwRkFBNjM1N0Y1MzNCQjBBNDk1Q0M4QEFkb2JlT3JnIiB9fQ==

Received: from aws1-mta-relay7.sailthru.cloud (10.55.90.61) by condenast-b.sailthru.com id hia50g3791sc for ; Sat, 13 Jul 2024 09:06:56 -0500 (envelope-from )

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.1721141065958"

Date: [email_date]

From: "'Yeti Crossroads Backpack Department"'

Mime-Version: 1.0

Message-ID:

Subject:Re: 2nd attempt for doctor...

X-Feedback-ID: 20189669:SG

X-SG-EID: u001.VRuSiAmiSZrdM+ch8/ewZCE5g8d2mJyorx7s3jZ5rqnyXmzyFkS20YO/O71zaWyuG5n01ntHHvHDQO7WWsZ0yglAgtUtWe2Nsjr8QAomYVNDlZqGB1kKSx5YK8+/GrvM//Al7+JDZ78jIiAHdRR3NaEh/9K8tO3O9LWa4PnrXdZdgdMDTPL/KhvxYw9Mv5xof9DQOiB98h5oItpgW9Pv1CHUFKExtRJQm0atm4BMaG1hLD9He43C26ZLesH5O18K

X-SG-ID: u001.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

To:

X-Entity-ID: u001.2JUHSSBYWGJCVVYGT3NTNT==

X-Spam_score: 30.1

X-Spam_score_int: 301

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time.



Content analysis details: (30.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[15.204.31.239 listed in bb.barracudacentral.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

15 GR_DOMAIN_SAILTH1 Received contains spammer id (sailth)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 J_CHICKENPOX_66 BODY: 6alpha-pock-6alpha

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

1.4 HDRS_MISSP Misspaced headers

Subject: {SPAM?} Re: 2nd attempt for doctor...



------=_Part_9006_1222595691.1721141065958

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.



Thank you for your confirmation and have fun with our content. Â



Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.1721141065958

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































doctor,Please verify











X-rated Google Groups spam "Rosa J. Mireles" <poojkgtyuyrfh987659uhsh@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtxE-000000009UU-155y

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 15:00:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 15:00:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f56.google.com ([209.85.161.56]:47258)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYslf-00000000LEy-0Fg8

for root@mail.nl2k.ab.ca;

Tue, 30 Jul 2024 13:44:23 -0600

Received: by mail-oo1-f56.google.com with SMTP id 006d021491bc7-5d5c7bfd8aasf4517053eaf.2

for ; Tue, 30 Jul 2024 12:42:24 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1722368539; cv=pass;

d=google.com; s=arc-20160816;

b=1DqMqaDK9jq+mXjFs6gG4v9VOVqZ4v7ssKQKjgF8c0SqfcIuhFP1D9Lf48zn2flXOw

pgh0rRIJK48vji99YSBmr3jXQEmPsCLbiYhRLFrcr+p8aHgpICNy8+YIWkhacRwTUJ3P

naAlTf/2Q+75iudBMjoVGQo3MZ8acQQexPsDKOfzomK6BFY3T0zu9wVI3TwvqLJRrHF9

EeLNAl7+xeCLqAiqYtGMcwBC3h25pab/bBCdLpH75dowaZiGxkf7v0YGOLkJ+6KYN4yo

mKhayiBukEObA0MOViqBTHopA1+/Hca8dn7oMVB/gZr//wtg+hFzVQGTMkFwQqUAz+C4

aeAw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

fh=TaLuB1ycqaN56xlPa9N1fhcCflwPyJkX3OVnVNh8ZYI=;

b=TnCP1EEvCo3tJ+8v1S31GATMrKB441WTu0+8LlxK7ZJH2EobTkvcvloQ5jrxBfGInN

OOPAZOb5YyIeETfDeDXYxdSBgTlJ1SLJmoTAtM2WytiWmDzSjaCUY3BwyYoAx1iaPV8Z

IU2cczEWiqa0ZveVD9sVW7pVK08dgWTs5BhUcj+ZKfPW9frOhAsgstFHJZfbDaYiq1lt

GrrZ58zyg8MTWMjIhKE1WMGf4xM/SGyUkulgrBlQwj+Lw1olLjev0QSRIjbZCvsek9Br

1PtGZCwTLjUVfCF4OL5DAohX1qRgU05Y+2ZEiCLTnDphcIsNPY7p2aF94JyUFfO/WmSI

z19Q==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=GmtFu8RK;

spf=pass (google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates 2607:f8b0:4864:20::22d as permitted sender) smtp.mailfrom=poojkgtyuyrfh987659uhsh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1722368539; x=1722973339; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

b=V3HZApr5P8cn2BPGdbNuXPRNK5s8ej7DJlJhwFwymd3xbta1nLMzzPTS8SwFjciP/U

KT81QQQ8hL7Ms5NX6aTqEV9J2K0tftXveFcFZyn3c2qZZ6lho/endy7JzbTEzq1eDAnw

an1fqrW16hN3MMZ+8uY+Q3f/jstcfAMI9yt8LApaiVQO+GBP21SMzUsfgz2M+RDc4s/q

0INQ8v4TJVDYHupe9TpNsZDDALaPxfQdNo5mET/f9n9eS1HLgwyQlX+qf8HA+9VXTdKr

P6ybNmolP0XF4CcLzWXTP9IIvLIp4OyKfy7Rj30lzI2c+AZWpSMV5jBgNHARFYd8DoaP

j4rw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722368539; x=1722973339; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

b=YBXzanVzwzARkYk7D0KwUukP3DMEbvmulBpxCxIl3NrG/o18633yXkksAfu+Cp3Ilv

RcV6gtaUl9RfNknkMFhgKwe0fE+sl2vIY+NizaSX9fNnNxa688gJWjqw2w9FZubBXR3n

apxp2ZrLPjcUejsrMOJxpnFZTwZNX05VulWcorWeWWUffTKqJchNBALVMj80XadZOENB

YPdgC+m7ainQZPgt9L2I+qDbZTNjO04vuFMQZGeV7f+bIGnGtVPJyPElhs9iKJBkXktY

7yEfNSodO604i99nPivXmxAu3xuQrvlde1KX2ACtNnxCDM938Gv0Vp5zch0ap+R2bp6C

78lw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722368539; x=1722973339;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

b=tHzpnlgrRVXrRyqpCJIl2Ki0qk+DXWgjPiHbVu5nT50EicJBO1lcncHeYdP37g+VpW

3pK64CCfEUw9H2zpV9IBShHabOjVbXSxcEsKGjnXYNQiHqpiK5d3DfF90jAz96G/zrO0

m1gc043L69tMX9pwXaWSXtbwq7nUwbBeibL1dcfBWhIlTIFwsIOfazaK73x2mUYD4ko4

DtdyrS+pj5Jmn7aHtsuwkcU7dFfZoNsPUd7WS2TvGWxLOEt5S8r0sW5zFJ/g7WUfd4YK

KiSgvj5ImCCYkacgI4psrACMGQPlsoFEUIu/1kzmuSzLz0Yw5I1zfmg5QblWf4w0rzLJ

xAjA==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCVb6WV19RNpLSurLFJudnei916rKaO+V4BJQgPPSR7AN0JlADWfV9XJ4TtLptD0zzRMSmFwhC4DtY2Rf5oilIoFZyPYUQ==

X-Gm-Message-State: AOJu0YwpDAh8Y6wK1SaIVejPU/+E9QBLnyyBEzOnZ31F9MPt2s0JGS+O

qD/bdzpz+Rk3oWpPaTGeDzY3YLQeh/7U5tDunIhqdFgKxyVmyl3t

X-Google-Smtp-Source: AGHT+IHKSLuHZWxl78G8fFiHkYeDZ3uUSArFQo9ZrzMdnlk0F69xdTzivjZ8NhSpePGYD509dzpfbg==

X-Received: by 2002:a05:6820:555:b0:5d5:d718:1b7f with SMTP id 006d021491bc7-5d5d7182410mr13703816eaf.1.1722368537782;

Tue, 30 Jul 2024 12:42:17 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a4a:db8b:0:b0:5d5:b99a:b26e with SMTP id 006d021491bc7-5d5b99ab641ls4807266eaf.0.-pod-prod-02-us;

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCVSgh5YNVj8Y1X9AhUmsOpZpjg0UKBHys6bEptBT2gRtmZFy0HHoy7WaWRULtVMiLzDk9GTx7NCmVhoc+1Jni6IXRer26R5+/N/Uk4S5n7FR8Y=

X-Received: by 2002:a05:6820:61a:b0:5d5:dca7:b6d5 with SMTP id 006d021491bc7-5d5dca7bc33mr11189743eaf.8.1722368534056;

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1722368534; cv=none;

d=google.com; s=arc-20160816;

b=cide/eLB5Ot1eLp99Z/KiGUZtYALj8QMAksFH6LivPio9py7Z2IeGKTsE+ow19vXNk

d5bWSFacJTafOxuWgNm8vSTTijN7b2L8M400m7cXOI09ci+B4BWtDbq72CxXcW0G3a7G

LgkKs4RgsXHSMI3Rsjmvmrha6j5nJhRxEE+QEDfghg4C7MqzUidW4Fs+pzbMdTxzFCh2

2MS9WeZi6LIslgC9Vex+cbJhbQ/dr4RP922OXLJX8xImkiLOx4TogdlnByHyDEm1HwGY

9KHKkkRpxjmRgjR/q8ZgqFyntxwDdA4GCa4Ahy33RTdohuD+CQ7Q1Cr0RQSWGF/fESQs

f6Xg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=q9L3SosZjJYPiHc+2rAnkxdHFwiAgQWMoKSa4IiXv7A=;

fh=AG7cOk+dQDNLodY0afF5EIzDAezPMDbFN0kwzeVwGbE=;

b=ThxsNR2PJDind1n2rtePW2niymvQPO+QMjz+VMvEvVUhybsPiJ/gr7ESfRpPO6pbzC

TS1h5YJ6mHuN7UVxJlPaOuCRPQvlLjkyEyiEE6bKX2avSrn4VKMI2s8vGaTW6yz6wFy2

cfnUtSZsGSsVCnV3jWp+TmvXUeYf3t2pBYnvmaELe2jml9FaOTGTw7u55BXoAl9pfQag

XDdxIJaaIF1xXQ+PgHHIRd8z6h1ssf89EEcqqq7Uc6LJJGItwbtO7oeI/RV6L9SFoCWX

Cgi3B/b9PsEqVqgtkyUiMXQB/6cjO0u11yTMqqeoWlAZnop8JnvO4PxiCJjyprHpMB08

CPuA==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=GmtFu8RK;

spf=pass (google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates 2607:f8b0:4864:20::22d as permitted sender) smtp.mailfrom=poojkgtyuyrfh987659uhsh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com. [2607:f8b0:4864:20::22d])

by gmr-mx.google.com with ESMTPS id 006d021491bc7-5d608d911e2si119608eaf.1.2024.07.30.12.42.14

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

Received-SPF: pass (google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates 2607:f8b0:4864:20::22d as permitted sender) client-ip=2607:f8b0:4864:20::22d;

Received: by mail-oi1-x22d.google.com with SMTP id 5614622812f47-3db23a60850so2571398b6e.0;

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCVGNOK7w1LzH+YN5GQjAWzwJQv9q5JK+exTsP9QpBTlbK4ldDw6vpHOIAAsY1aDOucGd/TzVYpBPku3b5MZtAS8O+4pITmnTmIAQ8YeBlXdgRsHjPw2S5VBwZm298oGf04e+gWw3qt8eZuGOnWsJoPPNr189zQ2JwkoEg4cpuGNYvSukRmyDYtzgSqrf9v1rVE4Mf7ptG6saTP3D8Zem2Wr6IpmlVKsYpW1ZAotYEFgoo55Kww8zz7tAKUDhlg/aQTj/l5d14KeLHGzFjdMQfvBflfrEQWqvliPOAbDFQqIKVTzFztSddeR0VYR3u8IfqraHrhuyFOx+H4INJLA4BTQEiBLqYBrH4eOMTDahFV3sxaGfdA2ueBfQtSw8zs4UYzj5RMxgZTjnKXQXP/FmflwmlqEfJJvzoe2MV/t9bygC6hYTOr3mIT9ARlTXK6P42g9BY3uiKjC7uDpta8zug5LIDIVFCU69tEc

X-Received: by 2002:a05:6808:2122:b0:3d9:2aa5:4077 with SMTP id

5614622812f47-3db23a58d84mr14697895b6e.5.1722368533377; Tue, 30 Jul 2024

12:42:13 -0700 (PDT)

MIME-Version: 1.0

From: "Rosa J. Mireles"

Date: Wed, 31 Jul 2024 01:42:08 +0600

Message-ID:

Subject: Looking for older fit male

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000009abad0061e7c2ce8"

X-Original-Sender: poojkgtyuyrfh987659uhsh@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=GmtFu8RK; spf=pass

(google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates

2607:f8b0:4864:20::22d as permitted sender) smtp.mailfrom=poojkgtyuyrfh987659uhsh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, I'm a 22F white lady. I'm looking to have naughty fun

with someone. I would love to pleasure you. see map > sites.google.com/view/mnrk25

Don't worry . No need CC ////////////////////



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.56 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.56 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[poojkgtyuyrfh987659uhsh(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Looking for older fit male



--0000000000009abad0061e7c2ce8

Content-Type: text/plain; charset="UTF-8"



Hey,

I'm a 22F white lady. I'm looking to have naughty fun with someone. I would

love to pleasure you.

see map > sites.google.com/view/mnrk25



Don't worry . No need CC











































////////////////////



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAD2-xvc_e7xU_XN4CkrRC-5riBfHrzPpEGj%2B%2BM1%2BxfD_L9GB9Q%40mail.gmail.com.



--0000000000009abad0061e7c2ce8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey,
I'm a 22F white lady. I'm looking to have =

naughty fun with someone. I would love to pleasure you.
see map > =C2=

=A0 =C2=A0sites.google.com/=

view/mnrk25

Don't worry . No need CC





=

















///////////=

/////////








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAD2-xvc_e7xU_XN4CkrRC-5riBfHrzPpEGj%2B%2BM1%2=

BxfD_L9GB9Q%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https:=

//groups.google.com/d/msgid/dece15-912025586/CAD2-xvc_e7xU_XN4CkrRC-5riBfHr=

zPpEGj%2B%2BM1%2BxfD_L9GB9Q%40mail.gmail.com.




--0000000000009abad0061e7c2ce8--

SiriusXM phish from OVH and Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtxS-000000009Wl-1BKb

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 15:00:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 15:00:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip220.ip-15-204-30.us ([15.204.30.220]:55795 helo=mailanyone.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYskR-00000000LF1-1AcH

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 13:43:09 -0600

Received: from NAM04-MW2-obe.outbound.protection.outlook.com (mail-mw2nam04on20717.outbound.protection.outlook.com. [2a01:111:f403:240a::948])

by mx.google.com with ESMTPS id d{n,4}c01a{n,4}-1fac157b494si19763565ad.411.2024.06.28.06.38.{n,2}

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES948-GCM-SHA256 bits=124/124);

[email_date]

Received: from CH2PEPF00000148.namprd02.prod.outlook.com

(2603:10b6:610:32:cafe::5d) by CH0PR07CA0027.outlook.office365.com

(2603:10b6:610:32::32) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.29 via Frontend

Transport; [email_date]

Authentication-Results: spf=pass (sender IP is 172.82.239.10)

smtp.mailfrom=ecom1.logitech.com; dkim=pass (signature was verified)

header.d=ecom1.logitech.com;dmarc=pass action=none

header.from=ecom1.logitech.com;compauth=pass reason=100

Received-SPF: Pass (protection.outlook.com: domain of ecom1.logitech.com

designates 172.82.239.10 as permitted sender)

receiver=protection.outlook.com; client-ip=172.82.239.10;

helo=r10.email.circle.logi.com; pr=C

Received: from r10.email.circle.logi.com (172.82.239.10) by

CH2PEPF00000148.mail.protection.outlook.com (10.167.244.105) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7784.11 via Frontend Transport; [email_date]

X-IncomingTopHeaderMarker:

OriginalChecksum:6358AF3B258C1BDB0F3ED64FE856BAC9662515C74626328B54DCEBF92274B956;UpperCasedChecksum:5327CC64E06FE43FD5101DD8A956F60F04F8DF58045B850976A73B640D0165AC;SizeAsReceived:1877;Count:14

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ecom1.logitech.com;

s=logitech; t=1721117047;

bh=0B/6bTXPHYx3e3G5RVajiPcww6i9oJf3Jdw234zprSg=;

h=From:Date:Subject:To:MIME-Version:Message-ID:Content-Type;

b=doeP62K0azYfUo2gfef4ZVGID5uyW5ForKu+hXm0eVvczRdBoT9hNHe0m5AZPyavM

wrq5qf8gZ/UIwqdT8+Y/j5RDFhn/M7NyVxhMCMqJ1Ou3HllLEk91bbrwMDfN/7CkGh

fBIjUbwImC5HZimeUB5KkB6vKxWhaunKz2/hNO26CrN2Y1zkPdEPcy4YaD73BNblSL

VywV87fIqKXadpAR1ESIxYiUzyK0CatJpIEbcYtKuUcWQ1lpvn382SGYtnSTjf+mwo

zQA1PQsgo4yJr8o0qNV2KyheGErYV/Samb4z2k3e5TsSBu+fsDVHNTEoPhRV/sn9aN

2DBv+4tC5GeDw==

X-MSFBL: fhH0F7QIWB8j5+dy6gCsnqngGOs32SZvXX0SXEeVBRc=|eyJnIjoiZGVmYXVsdF9

jNGUyYzBhNy1kNmEyLTQ5NmQtYjY2Ni0xNjEzZDc0YjUzMDUiLCJyIjoicW94dWJ

la0BvdXRsb29rLmNvbSIsImIiOiJhd3NfbG9naXRlY2hfcHJvZDFfZGVmYXVsdF9

tb21lbnR1bTEyX210YTAwNF8xNzIuODIuMjM5LjEwIiwicmNwdF9tZXRhIjp7ICJ

pbiI6ICJsb2dpdGVjX21rdF9wcm9kMSIsICJyIjogInFveHViZWtAb3V0bG9vay5

jb20iLCAibSI6ICIxMDA4MzA4OTA4IiwgImQiOiAiNDM2NDI2MTMzIiwgImkiOiA

iOTcwRkFBNjM1N0Y1MzNCQjBBNDk1Q0M4QEFkb2JlT3JnIiB9fQ==

Received: from aws1-mta-relay7.sailthru.cloud (10.55.90.61) by condenast-b.sailthru.com id hia50g3791sc for ; Sat, 13 Jul 2024 09:06:56 -0500 (envelope-from )

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.1721141065958"

Date: [email_date]

From: "'SiriusXM Membership"'

Mime-Version: 1.0

Message-ID:

Subject: Your membership has expired!

X-Feedback-ID: 92395105:SG

X-SG-EID: u001.VRuSiAmiSZrdM+ch8/ewZCE5g8d2mJyorx7s3jZ5rqnyXmzyFkS20YO/O71zaWyuG5n01ntHHvHDQO7WWsZ0yglAgtUtWe2Nsjr8QAomYVNDlZqGB1kKSx5YK8+/GrvM//Al7+JDZ78jIiAHdRR3NaEh/9K8tO3O9LWa4PnrXdZdgdMDTPL/KhvxYw9Mv5xof9DQOiB98h5oItpgW9Pv1CHUFKExtRJQm0atm4BMaG1hLD9He43C26ZLesH5O18K

X-SG-ID: u001.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

To:

X-Entity-ID: u001.EMGTN5JSDCTZWFZM2IIG9V==

X-Spam_score: 32.3

X-Spam_score_int: 323

X-Spam_bar: ++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time.



Content analysis details: (32.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[15.204.30.220 listed in bb.barracudacentral.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.0 HK_RANDOM_FROM From username looks random

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

15 GR_DOMAIN_SAILTH1 Received contains spammer id (sailth)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 J_CHICKENPOX_66 BODY: 6alpha-pock-6alpha

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.8 A_HREF_NOWHERE A link tag with empty href

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Your membership has expired!



------=_Part_9006_1222595691.1721141065958

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.



Thank you for your confirmation and have fun with our content. Â



Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.1721141065958

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































doctor,Extend your membership for free











Desperation spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtvp-000000009Ac-1el7

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 14:58:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 14:58:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f194.google.com ([209.85.215.194]:61793)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYr91-000000004SC-29rh

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 12:00:23 -0600

Received: by mail-pg1-f194.google.com with SMTP id 41be03b00d2f7-7ab09739287so2854179a12.3

for ; Tue, 30 Jul 2024 10:58:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722362292; x=1722967092; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=yU7C8WYXyTxy02mbKsP3d1qBB82G2OeABupr4Xg7qWA=;

b=iooDzI1lQGdyB9y5tn9NsUg/elZyyR/M+ysHprHIB43gJC2cCLvFm2+uY4H2fAtYFs

MLr98feru2BBhwv0p5t//tQBu5/5mcwJ6piF+zDd6yPedN56cKXrBffTW4MxPOhHISUi

1PWrQnUYhWa5yiKLZaV/XWnqdL4asO7iYkHfmTPGU3ZhVh5RKeSfR6ozuww2y2QVbUQb

Y737lAzWEAQC0ibdNVq8mR5/LQeqtg1tswSLHPOx5nwAXMssENYFw9KpV4p5H6PbPXTu

xqphO5XYVLKUQBxpjeufSmOJIMETuuijQR4I8dkOdrdxxFt9C1eN4SsmzUzSk1NLYUcO

pRxA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722362292; x=1722967092;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=yU7C8WYXyTxy02mbKsP3d1qBB82G2OeABupr4Xg7qWA=;

b=LxtiOQtZ0AEDpjeX2n5rhFsJKYJMwi7beeqa2wtRfLamanINBQTRtBVYv/eOm/afbt

SnJNXnW3jBM/pLBZpe0ZOXiilRiLSFWAfC55pH7QcPK8QM7r4e5WWgB2HL0qnjuP4M5A

ZukcqfhvgSpuhPUjLYZfI0nwZgthtbFAQPaNOtW2ZF0CiZZV0LQ3TBZieIjxVJWvH8Jy

VlhgJVJd+SiNUXeFXzCPyEv5B4c3sJ6L3r76Q4REVZZfLhyFKdf/AqewEHUacNq2IGja

XfWYppgpdpDiv6+PZjke+UwzgbJzl8yA2rtRQfLOYnTb6xqeHSsAaGsb8EYYrCgulQ8V

Lvcw==

X-Forwarded-Encrypted: i=1; AJvYcCU/0vixm6DCxPi/kIylDFtsV8Yu1ULIjxJxBBhldC49zXl259o8JUU6h+nzyF8GARYMUqrpE1YgfZeSOhQaIKkVn1toriKTN/8=

X-Gm-Message-State: AOJu0Yz5YFduBLveM7BVJbAbWsKjo7ogOkugsBc+/hhmLfCyh5zJ7heL

u2ZyyrJMHVnvf9LexR27m1N2cx0ac+xY8ngT6gef2xe/e3KGP2OXgjbVUwE9InrNuI/eHK7CRdZ

7SU0/Xeg5k92nOyI4l1ATb+YoxTU=

X-Google-Smtp-Source: AGHT+IFf7HGXOIgSGs/lYfmRaexQPYbCPyebzvlglmqGXlvb9CcVGOA9TTWRANk+MxmL6+/ZmxASlD6Ul/V+swkAyys=

X-Received: by 2002:a17:90a:5601:b0:2c9:57a4:a8c4 with SMTP id

98e67ed59e1d1-2cf7e730999mr9790783a91.42.1722362292145; Tue, 30 Jul 2024

10:58:12 -0700 (PDT)

MIME-Version: 1.0

From: Stella Michael Esq

Date: Tue, 30 Jul 2024 10:57:42 -0700

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009919b8061e7ab864"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Greetings. Did you receive my first message? Warm Regards.

Stella Michael Esq. --



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

[209.85.215.194 listed in dnsbl.ahbl.org]

[209.85.215.194 listed in dnsbl.ahbl.org]

[209.85.215.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.194 listed in wl.mailspike.net]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.215.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.194 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[stellamichael7009(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[peterjamea125(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?}



--0000000000009919b8061e7ab864

Content-Type: text/plain; charset="UTF-8"



--

Greetings.

Did you receive my first message?



Warm Regards.

Stella Michael Esq.



--0000000000009919b8061e7ab864

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--

-smartmail=3D"gmail_signature">

">

34,34)">

rif;font-size:large">Greetings.

=3D"ltr">

v dir=3D"ltr">

=3D"ltr">

height:224px">

mily:verdana,sans-serif;font-size:large">Did you receive my first message?<=

/span>

=3D"ltr">

verdana,sans-serif;font-size:large">

nt-family:verdana,sans-serif;font-size:large">Warm Regards.

v>Stella Mic=

hael Esq.

4">


v>
<=

/div>




--0000000000009919b8061e7ab864--

NetFlix Phish from Lansing Michigan

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtv0-0000000090n-0yes

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 14:58:02 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 14:58:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10356436.uk-south-2.nxcli.net ([87.76.28.82]:25922)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYrqU-00000000CFE-2f9y

for sales@nk.ca;

Tue, 30 Jul 2024 12:45:19 -0600

Received: (qmail 13453 invoked by uid 10037); 30 Jul 2024 17:15:24 +0100

Date: Tue, 30 Jul 2024 16:11:05 +0000

To: sales@nk.ca

From: Netflix Support Team

Reply-To: notifications@netflix-support.com

Subject: Important Notice Regarding Your Netflix Account

Message-ID:

List-Unsubscribe: mailto:bounce307-gNCvxbsqk9PXi7o@netflix.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1cf7f266b6d9ac81ee52024d83c7a5f06"

Content-Transfer-Encoding: 8bit

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Account Notification body { font-family: 'Arial', sans-serif;

background-color: #fff; margin: 0; padding: 20px; color: #333; } .container

{ background-color: #f8f8f8; border: 1px solid #e0e0e0; padding: 20px; max-width:

[...]



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

[87.76.28.82 listed in dnsbl.ahbl.org]

[87.76.28.82 listed in dnsbl.ahbl.org]

[87.76.28.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[87.76.28.82 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[87.76.28.82 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[87.76.28.82 listed in wl.mailspike.net]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[87.76.28.82 listed in ix.dnsbl.manitu.net]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

2.0 US_8BIT US-ASCII isn't an eight bit charset

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.9 URI_PHISH Phishing using web form

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Important Notice Regarding Your Netflix Account



This is a multi-part message in MIME format.



--1cf7f266b6d9ac81ee52024d83c7a5f06

Content-Type: text/plain; charset=us-ascii













Account Notification



body {

font-family: 'Arial', sans-serif;

background-color: #fff;

margin: 0;

padding: 20px;

color: #333;

}

.container {

background-color: #f8f8f8;

border: 1px solid #e0e0e0;

padding: 20px;

max-width: 600px;

margin: 20px auto;

box-shadow: 0 2px 4px rgba(0,0,0,0.1);

}

h1 {

color: #E50914;

}

p {

font-size: 16px;

line-height: 1.5;

}

a {

display: block;

width: max-content;

background-color: #E50914;

color: white;

padding: 10px 20px;

text-align: center;

text-decoration: none;

margin-top: 20px;

border-radius: 4px;

}

.footer {

font-size: 12px;

text-align: center;

color: #777;

margin-top: 20px;

}

.logo {

text-align: center;

margin-bottom: 20px;

}

.logo img {

width: 50px; / Adjust the size as needed /

}















Important Account Notice

Dear Subscriber,

We've noticed that your latest subscription payment has not been received. To continue enjoying your service without interruption, please update your payment details promptly.

If we do not receive payment by the due date, your account will be temporarily suspended.

Update Payment Details

If you have any questions or need assistance, please contact our customer support.



Thank you for choosing our service,



The Support Team











--1cf7f266b6d9ac81ee52024d83c7a5f06

Content-Type: text/html; charset=us-ascii













Account Notification











Important Account Notice



Dear Subscriber,



We've noticed that your latest subscription payment has not been received. To continue enjoying your service without interruption, please update your payment details promptly.



If we do not receive payment by the due date, your account will be temporarily suspended.



Update Payment Details

If you have any questions or need assistance, please contact our customer support.





Thank you for choosing our service,




The Support Team















--1cf7f266b6d9ac81ee52024d83c7a5f06--

Intelcom phish from South Africa

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 10:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYpGe-00000000CPB-3p7B

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 10:00:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 10:00:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [102.130.124.163] (port=52656 helo=farmersofcanada.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYngX-000000008af-0zMm

for sales@nk.ca;

Tue, 30 Jul 2024 08:18:49 -0600

Received: by farmersofcanada.ca (Postfix, from userid 33)

id 9042DFF963; Tue, 30 Jul 2024 16:15:17 +0200 (SAST)

Date: Tue, 30 Jul 2024 16:13:58 +0200

To: sales@nk.ca

From: Intelcom International

Reply-To: noreplyweb@intelcom.ca

Subject: =?UTF-8?Q?Warning:_Your_package(s)_will_be_returned_to_sender_for_non-pay?=

=?UTF-8?Q?ment_of_customs_fees._Please_act_now!_/_Attention:_Vos_colis_vo?=

=?UTF-8?Q?nt_=C3=AAtre_renvoy=C3=A9s_vers_son_exp=C3=A9diteur_pour_non_pa?=

=?UTF-8?Q?iement_des_frais_de_douanes._Veuillez_agir_maintenant!?=

Message-ID: <50e241996cedabc51e51362608f3f7e5@intelcom.ca>

List-Unsubscribe: mailto:bounce805-4DxmeYa5m2SG8dT@intelcom.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1fe2236934dafb554bd21dfa882542bef"

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 2.18 CAD in

order to receive your package as soon as possible before it is returned to

sender [...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[102.130.124.163 listed in dnsbl.ahbl.org]

[102.130.124.163 listed in dnsbl.ahbl.org]

[102.130.124.163 listed in dnsbl.ahbl.org]

[102.130.124.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[102.130.124.163 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[102.130.124.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[102.130.124.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[102.130.124.163 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

[102.130.124.163 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[102.130.124.163 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[102.130.124.163 listed in sbl-xbl.spamhaus.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?Q?Warning:_Your_package(s)_will_be_returned_to_sender_for_non-pay?=

=?UTF-8?Q?ment_of_customs_fees._Please_act_now!_/_Attention:_Vos_colis_vo?=

=?UTF-8?Q?nt_=C3=AAtre_renvoy=C3=A9s_vers_son_exp=C3=A9diteur_pour_non_pa?=

=?UTF-8?Q?iement_des_frais_de_douanes._Veuillez_agir_maintenant!?=



This is a multi-part message in MIME format.



--1fe2236934dafb554bd21dfa882542bef

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit















Â





















Â













Â















Dear customer,



A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties of 2.18 CAD in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.



Receive my delivery



Once your payment has been made, you will receive your delivery the same day if payment done before 12 PM.











This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â



Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.









intelcom.ca







1380 William St, Montreal, Quebec H3C 1R5, Canada





Accessibility  |   Legal  |   Privacy





© IntelcomÂ







































Â

Â













Â















Cher(e) client(e),



Un colis vous appartenant a été déclaré par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits de 2.18 CAD afin de recevoir votre colis dans les meilleurs délais avant qu'il ne soit renvoyé à l'expéditeur conformément à nos conditions d'utilisation.



Recevoir ma livraison



Une fois votre paiement effectué, vous recevrez votre colis le même jour si celui-ci est effectué avant 12h.











Ce message est destiné uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisée de ce message est strictement interdite. Si vous avez reçu ce message par erreur, veuillez nous en informer immédiatement et supprimer le message original.

  Â



Ne répondez pas à cet e-mail. Nous ne pouvons ni recevoir ni répondre aux réponses à ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez le 1-514-807-6086.









intelcom.ca







1380 William St, Montreal, Quebec H3C 1R5, Canada





Accessibilité | Juridique | Vie privée





© IntelcomÂ

































--1fe2236934dafb554bd21dfa882542bef

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







=09






, Arial; font-size: 16px; word-spacing: normal;">


und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">=C2=A0





und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">


id=3D"m_6847154231841864878x_x_ENGLISH_VERSION" style=3D"border-width: 0px=

; margin: 0px auto; padding: 0px; color: rgb(85, 85, 85); font-family: helv=

etica, arial, verdana, sans-serif; font-size: 14px; vertical-align: baselin=

e; border-collapse: collapse; border-spacing: 0px; background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09


ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
adding: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

border-width: 2px 0px 1px; padding: 24px; line-height: 24px; letter-spacin=

g: 0.03em; vertical-align: baseline; border-top-color: rgb(202, 38, 26); bo=

rder-bottom-color: rgb(203, 203, 203); border-top-style: solid; border-bott=

om-style: solid; float: none; box-sizing: border-box;">3D"Canada<br
Post" class=3D"CToWUd" data-bit=3D"iit" height=

=3D"37" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyY=

iivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn=

6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra6=

9nfg=3Ds0-d-e1-ft#https://upload.wikimedia.org/wikipedia/commons/thumb/6/66=

/Intelcom_logo.svg/2560px-Intelcom_logo.svg.png" style=3D"border-width: 0px=

; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100%; box-s=

izing: border-box;" width=3D"136" />
google.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5=

/r/?id%3Dh8bf38d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960748000&usg=

=3DAOvVaw0hM8r4CJ57F291S0m9gesk" href=3D"https://t.notifications.canadapost=

-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"color: rg=

b(4, 103, 198); background-image: initial; background-position: 0px 0px; ba=

ckground-size: initial; background-repeat: initial; background-attachment: =

initial; background-origin: initial; background-clip: initial; border-width=

: 0px; margin: 0px; padding: 0px; box-sizing: border-box; text-decoration-l=

ine: none;" target=3D"_blank" title=3D"https://t.notifications.canadapost-p=

ostescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553">3D"Canada<br
Post" class=3D"CToWUd" data-bit=3D"iit" src=

=3D"https://ci3.googleusercontent.com/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iML=

L7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKvY9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nq=

OzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emails=

/cpc/images/mobile_cpc_logo.png" style=3D"border-width: 0px; margin: 0px; p=

adding: 0px; vertical-align: bottom; max-width: 100%; box-sizing: border-bo=

x;" width=3D"0" />
(255, 255, 255); border-width: 2px 0px 1px; padding: 24px; line-height: 24p=

x; letter-spacing: 0.03em; vertical-align: baseline; border-top-color: rgb(=

202, 38, 26); border-bottom-color: rgb(203, 203, 203); border-top-style: so=

lid; border-bottom-style: solid; float: none; box-sizing: border-box;">=

=C2=A0


=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">=C2=A0

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09


mily: tahoma, geneva, sans-serif;">Dear customer
family: tahoma, geneva, sans-serif;">,





=09=09=09=09=09=09

A parcel belonging to=

you has been declared by customs. We kindly ask you to pay the taxes and d=

uties of=C2=A02.18=

=C2=A0
n>CAD=C2=A0in order to rece=

ive your package as soon as possible before it is returned to sender in acc=

ordance with our terms and conditions.





=09=09=09=09=09=09


q=3Dhttps://%D1%8A%D1%8B%D1%8A.%D1%80%D1%84/%D0%B0%D0%A3%D0%AA%D0%95&source=

=3Dgmail&ust=3D1711917960748000&usg=3DAOvVaw2DyArZA8YbF40_kvowD5vA" href=3D=

"https://itlcalm-king-74d7.contact-efd.workers.dev" style=3D"color: rgb(255=

, 87, 51); background: rgb(255, 87, 51); border-width: 15px 60px; border-st=

yle: solid; border-color: rgb(255, 87, 51); border-radius: 30px; width: aut=

o; text-align: center; line-height: 19px; letter-spacing: 0px; font-family:=

InterRegular, Helvetica, Arial, sans-serif; font-weight: bold; display: bl=

ock; text-decoration-line: none;" target=3D"_blank">
gb(255, 255, 255);">Receive my delivery<=

/p>



=09=09=09=09=09=09


amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive your delivery the same day =

if payment done before 12 PM.





=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.



=09=09=09=09=09=09=09=09=09=C2=A0



=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.



=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09


=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca



=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=

=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
n>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

%3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">3D"Canada"
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=



=09=09=09=09=09=09


=09=09=09





id=3D"m_6847154231841864878x_x_ENGLISH_VERSION" style=3D"border-width: 0px=

; margin: 0px auto; padding: 0px; color: rgb(85, 85, 85); font-family: helv=

etica, arial, verdana, sans-serif; font-size: 14px; vertical-align: baselin=

e; border-collapse: collapse; border-spacing: 0px; background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09


ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

padding: 24px; line-height: 24px; letter-spacing: 0.03em; vertical-align: =

baseline; border-top: 2px solid rgb(202, 38, 26); border-bottom-color: rgb(=

203, 203, 203); border-right-width: 0px; border-left-width: 0px; border-bot=

tom-style: solid; float: none; box-sizing: border-box;">3D"Canada
Post" class=3D"CToWUd" data-bit=3D"iit" height=3D"37" src=3D"https://ci3.go=

ogleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbq=

fdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-=

jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upl=

oad.wikimedia.org/wikipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Int=

elcom_logo.svg.png" style=3D"border-width: 0px; margin: 0px; padding: 0px; =

vertical-align: bottom; max-width: 100%; box-sizing: border-box;" width=3D"=

136" />
notifications.canadapost-postescanada.ca/info5/r/?id%3Dh8bf38d8,8ded733,450=

0553&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw0BIJtZBrO9SUJHNhb547=

nm" href=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500553" style=3D"color: rgb(4, 103, 198); background-i=

mage: initial; background-position: 0px 0px; background-size: initial; back=

ground-repeat: initial; background-attachment: initial; background-origin: =

initial; background-clip: initial; border-width: 0px; margin: 0px; padding:=

0px; box-sizing: border-box; text-decoration-line: none;" target=3D"_blank=

" title=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500553">=C2=A03D"Canada<br
Post" class=3D"CToWUd" data-bit=3D"iit" src=

=3D"https://ci3.googleusercontent.com/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iML=

L7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKvY9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nq=

OzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emails=

/cpc/images/mobile_cpc_logo.png" style=3D"border-width: 0px; margin: 0px; p=

adding: 0px; vertical-align: bottom; max-width: 100%; box-sizing: border-bo=

x;" width=3D"0" />
(255, 255, 255); padding: 24px; line-height: 24px; letter-spacing: 0.03em; =

vertical-align: baseline; border-top: 2px solid rgb(202, 38, 26); border-bo=

ttom-color: rgb(203, 203, 203); border-right-width: 0px; border-left-width:=

0px; border-bottom-style: solid; float: none; box-sizing: border-box;">=

=C2=A0


=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">=C2=A0

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09


mily: tahoma, geneva, sans-serif;">Cher(e) client(e)
ont-family: tahoma, geneva, sans-serif;">,





=09=09=09=09=09=09

Un colis vous apparte=

nant a =C3=A9t=C3=A9 d=C3=A9clar=C3=A9 par les douanes. Nous vous demandons=

de bien vouloir acquitter les taxes et droits de
border-box;">=C2=A02.18
tahoma, geneva, sans-serif;">=C2=A0
0px;">CAD=C2=A0afin de recevoir votre colis dans les meilleurs d=

=C3=A9lais avant qu'il ne soit renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur confor=

m=C3=A9ment =C3=A0 nos conditions d'utilisation.





=09=09=09=09=09=09


q=3Dhttps://%D1%8A%D1%8B%D1%8A.%D1%80%D1%84/%D0%B0%D0%A3%D0%AA%D0%95&source=

=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw3D4GIL24u38-K3kyUeU9o8" href=3D=

"https://itlcoolstums-7145.contact-efd.workers.dev" style=3D"color: rgb(255=

, 87, 51); background: rgb(255, 87, 51); border-width: 15px 60px; border-st=

yle: solid; border-color: rgb(255, 87, 51); border-radius: 30px; width: aut=

o; text-align: center; line-height: 19px; letter-spacing: 0px; font-family:=

InterRegular, Helvetica, Arial, sans-serif; font-weight: bold; display: bl=

ock; text-decoration-line: none;" target=3D"_blank">
gb(255, 255, 255);">Recevoir ma livraison
>





=09=09=09=09=09=09


amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectu=C3=A9, vous recevrez votre colis le m=C3=

=AAme jour si celui-ci est effectu=C3=A9 avant 12h.
>



=09=09=09=09=09=09


cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destin=C3=A9 uniquement au destinataire. Il peut cont=

enir des informations exclusives ou confidentielles. Toute diffusion, distr=

ibution ou copie non autoris=C3=A9e de ce message est strictement interdite=

. Si vous avez re=C3=A7u ce message par erreur, veuillez nous en informer i=

mm=C3=A9diatement et supprimer le message original.



=09=09=09=09=09=09=09=09=09=C2=A0=C2=A0=C2=A0



=09=09=09=09=09=09=09=09=09


4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne po=

uvons ni recevoir ni r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si=

vous avez des questions ou des commentaires, contactez-nous en ligne ou ap=

pelez le=C2=A0
n style=3D"border-width: 0px; margin: 0px; padding: 0px; box-sizing: border=

-box;">
: inline-block; box-sizing: border-box;">1-514-807-6086.
n>



=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09


=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca



=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilit=C3=A9=C2=

=A0|=C2=A0Juridique=C2=A0|=C2=A0Vie priv=C3=A9e

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

%3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">3D"Canada"
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=



=09=09=09=09=09=09


=09=09=09














--1fe2236934dafb554bd21dfa882542bef--