Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 08:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scQBH-00000000JT0-1fNJ

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 08:01:23 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 08:01:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f173.google.com ([209.85.208.173]:45442)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scOlW-0000000011F-2vG5

for sales@nk.ca;

Fri, 09 Aug 2024 06:30:47 -0600

Received: by mail-lj1-f173.google.com with SMTP id 38308e7fff4ca-2ef7fef3ccfso20963791fa.3

for ; Fri, 09 Aug 2024 05:28:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1723206521; x=1723811321; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=//J7ASUyndcYa5cRXNxmK1HBBFUg1Whtsv//pXkfGWQ=;

b=V+JR9aQzsymMQ4kwtDkn8AMDqbLDe+Ul/eRXXy09mHMn2rg/LNmtHEaZ4lyOq4TnoV

OoppqOSgcpwnHoyRVwyMgpOY5Ybtbaq6ceKTtgTo3DVbj/ZYq/buN1ICVT3OZR5uCJyF

slnZgdHAjuXTIrEJNSpqKo81vjMWXg2j2EP8ZaJNv0zZ5w/BRD1KytE7lbld+87nJaRP

QNDtaoGC4+jDI770JJ/1WU1mVBQhcpSl8aQnSu216diXc7LHV622r4QxqjPe6u313MLM

8ZaWTe2oJi6Rlkt4u04lLC5IzDEZP0RhWJt4NKpLjbVuIs4HVIJpIna8UgVRHGRoepOn

HIeQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1723206521; x=1723811321;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=//J7ASUyndcYa5cRXNxmK1HBBFUg1Whtsv//pXkfGWQ=;

b=FLRnjy8Zi3XA2bliVhWSjFQ+vNNEI7RFKDXPPVDBVg/bdbHXAiWv8z7JlEfRBNBYzg

wXOUxHerZc/OTrj5iG39yf6URJXW87LCUrRmAOqw1NyEkn3VlwKEmbGXMaUlG8xPM0N/

IX3i19zF4w8aXg1hGhXKrp7ONNdUIPQ/ytG8kiR+uUAexvs85rfnwExIh3EPYC+BHdGf

whzPbHGv8AOhdUBX2m++XTrIC4XdSiGJp0JZBysRrjLLKBEzKhEUsp+Cu/T7Cbwu0MaE

sSd1oivtqIyf8xM/+HY9o2sJl1tNfN3haHdTQY+VuB4+HuDrWfNif5mXQBWHgb4u0qoB

1UcQ==

X-Gm-Message-State: AOJu0Yw4gRkshT0w3Yyhz0B70ORy8RUPNE6p6Kt80E6zJIWGjz91SorG

Oop0GpxRWewcLdFk+1SUAvzhXYCC7R+IAxmv1nXHyw0HZ9n8s5xcQCQ7UdX3rmQ1b+1KaEfcuDQ

AxZH9qr9MFVCxL4KNLA3jmtVt+EOKcw==

X-Google-Smtp-Source: AGHT+IH6uM6eF1TK8iXy8VG1JJeArPw9tqwg8AIEgG5Wm61d3sCBkFT6BaIzWSjSllnPFMGnQqBfmiScomvSPYP4Q/g=

X-Received: by 2002:a2e:611:0:b0:2ec:1810:e50a with SMTP id

38308e7fff4ca-2f1a6d3201amr10102921fa.32.1723206520272; Fri, 09 Aug 2024

05:28:40 -0700 (PDT)

MIME-Version: 1.0

References: <0ddf01dae3fc$6aecd2a0$40c677e0$@gmail.com>

In-Reply-To: <0ddf01dae3fc$6aecd2a0$40c677e0$@gmail.com>

From: Lucus Parker

Date: Fri, 9 Aug 2024 17:58:28 +0530

Message-ID:

Subject: =?UTF-8?Q?Re=3A_Promote_Your_Website=3F_=E2=9A=A1?=

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000083ff17061f3f48ae"



--00000000000083ff17061f3f48ae

Content-Type: text/plain; charset="UTF-8"



Hello,



I Hope you are doing great.



Any update if you're interested?





Best Regards, Lucus Parker





On Thu, 1 Aug 2024 at 15:50, Lucus Parker wrote:



> Hi,

>

> Could you please let me know if you want your website on the 1st pages of

> Google.

>

> We are a digital marketing company that deals in SEO/SMO And PPC.

>

> We can bring your website to the first page of Google.

>

> Let me know if you are interested, I will send you our SEO Packages and

> cost list!


>

> I Am waiting for your reply.

>

> Best Regards,

> Lucus

> Business Development Executive

>

>

>



--00000000000083ff17061f3f48ae

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">

Hello,





I Hope you are doing great.





Any update if you're interested?





Best Regards,


Lucus Parker



e-mail searching spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 06:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scOge-000000000b8-0L8p

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 06:25:40 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 06:25:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f194.google.com ([209.85.219.194]:48224)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scOau-00000000PVm-2seZ

for doctor@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 06:19:48 -0600

Received: by mail-yb1-f194.google.com with SMTP id 3f1490d57ef6-dfe43dca3bfso1944023276.0

for ; Fri, 09 Aug 2024 05:17:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1723205864; x=1723810664; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=oJGaCv+etMYfojPbXEUOMdVeZUTyL7HTm+Ywp2L8bY8=;

b=hOTpkwmWD/T3S0ncCTt6mxIjTLbq0b/Bb3xWgBrGX7T++lPV74zqbvGdnn9vPETh4s

z0Z3C1mBOQzvxihxhETVFeNUm+soCEo46FjimWAEUGWruMyd3SgnwI6HRXswEKJITUyG

cHZJqwVsXnBDCwpnWbIwXvBHdeOui4BDqwFMN4mhVLdUFJ1OzZTcONRNACHIsAUrSZPq

xN6SaUKuFK+Ixbgonp566OZX/BaROBuEmgacJ48DHkL0JLYbR4AhKGr4HJlugkq/9xRC

q9juXo8eneu4buR3aCFPw/IOzr+tbiUANLj7qmQCM+jnRjqNCX0PipgRZ+qeYERKve2B

ttdw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1723205864; x=1723810664;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=oJGaCv+etMYfojPbXEUOMdVeZUTyL7HTm+Ywp2L8bY8=;

b=cIqiXIglpw0+4FG/AabHPwfb9q+jZPbFkS0EYYqDc9tf1m0VOSTMkava08uS6TwFch

7FKpDfzgjNQHZcfrwNbIGjPRg1QJpGecQaSPAksXPgSl/nUi/jG3m1llr0I46+iiQoCR

7PfH+GI9e7NNwSr9fvyoEqdldIsDt4FpB6Bqyy17fG4Nimgr+aaa3hCm/cVMiKpvCDHi

RmcmJG32+TOPo0pVYBwPY58SeMZoHLxezdBP5iVJT/TfnjoamZOo3tflo8kfPUw8DCm+

zRFF1dMSNLM/SI9kvpCWK9vRvATqAa0OxR+Elcr3ztg0S0dV2Dz18CZXK8j7S3IF8Wj+

N6AQ==

X-Forwarded-Encrypted: i=1; AJvYcCWWhKeL3bQxd4WGLTUhCj2NxcvXVT3H5Hi9ORWLEIzrzW7LL47Xg2X+CA+h6iYsO6WG4tAnf4JEvJuS5AVXAjjc25vK3LIyVKs=

X-Gm-Message-State: AOJu0YwsbIMK7snXf+S0PUuJEt9xvKHdSC+3nkJdEAp2vLvt6fYFWOlI

sOpU84FbxrXl82L6J/Y5x//5tRBANbp98bxCwn4BdcnUffMIkQslGSI/HEQB7PPjxKAo1aOc/vT

uvJD+HDIvAPIGR6Wp6u3/IMBeh9U=

X-Google-Smtp-Source: AGHT+IEyN0ktQPiWCyrp8cGHnN5tHGSxsCluuVyG+UsXc1+sB6yRIMPNw0paccX39gxU/0IKsozdARihGzE98P9fO4s=

X-Received: by 2002:a05:6902:2582:b0:e0b:fa4f:c106 with SMTP id

3f1490d57ef6-e0eb9a720ffmr1219304276.39.1723205864089; Fri, 09 Aug 2024

05:17:44 -0700 (PDT)

MIME-Version: 1.0

Reply-To: fiduciarclaimgent@gmail.com

From: Inter Global

Date: Fri, 9 Aug 2024 14:17:21 +0200

Message-ID:

Subject: Hello Dear

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000676f18061f3f2156"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Is this email active? Is this email active?



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

[209.85.219.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.194 listed in dnsbl.ahbl.org]

[209.85.219.194 listed in dnsbl.ahbl.org]

[209.85.219.194 listed in dnsbl.ahbl.org]

[209.85.219.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.194 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.219.194 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.194 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[interglobalgreek(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.3 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Hello Dear



--000000000000676f18061f3f2156

Content-Type: text/plain; charset="UTF-8"



Is this email active?



--000000000000676f18061f3f2156

Content-Type: text/html; charset="UTF-8"



Is this email active?




--000000000000676f18061f3f2156--

Nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 06:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scOf7-000000000OJ-15Hh

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 06:24:05 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 06:24:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [206.214.19.66] (port=48556 helo=mail.education.gov.lc)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scJYT-000000005tt-3Vkt

for doctor@netknow.ca;

Fri, 09 Aug 2024 00:57:03 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.education.gov.lc (Postfix) with ESMTP id 325D91CF666C8

for ; Fri, 9 Aug 2024 02:46:32 -0400 (AST)

Received: from mail.education.gov.lc ([127.0.0.1])

by localhost (mail.education.gov.lc [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id DupcgpY9bA6c for ;

Fri, 9 Aug 2024 02:46:31 -0400 (AST)

Received: from localhost (localhost [127.0.0.1])

by mail.education.gov.lc (Postfix) with ESMTP id 8B3941CF49502

for ; Fri, 9 Aug 2024 02:46:31 -0400 (AST)

X-Virus-Scanned: amavisd-new at mail.education.gov.lc

Received: from mail.education.gov.lc ([127.0.0.1])

by localhost (mail.education.gov.lc [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id fZwX5xfiIi25 for ;

Fri, 9 Aug 2024 02:46:31 -0400 (AST)

Received: from [127.0.0.1] (ec2-13-230-168-224.ap-northeast-1.compute.amazonaws.com [13.230.168.224])

by mail.education.gov.lc (Postfix) with ESMTPSA id F1D921CF51E9D

for ; Fri, 9 Aug 2024 02:46:28 -0400 (AST)

Content-Type: text/html

From: "Netknow-IT"

To: doctor@netknow.ca

Subject: =?UTF-8?Q?_=F0=9F=94=92_InMail_-doctor_-_646772_?=

=?UTF-8?Q?=3A_You_have_13_pending_messages=2E=20?=

Message-ID: <8e561790-9543-7882-0a71-54429a6e449c@op.pl>

X-Priority: 1 (Highest)

X-Msmail-Priority: High

Importance: High

Content-Transfer-Encoding: quoted-printable

Date: Fri, 09 Aug 2024 06:54:46 +0000

MIME-Version: 1.0

X-Spam_score: 16.7

X-Spam_score_int: 167

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From Netknow-team You have (13) messages pending on your

email storage server on 2024-08-09.



Content analysis details: (16.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

0.0 T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=urszulagorska.60953%40op.pl;ip=206.214.19.66;r=doctor.nl2k.ab.ca]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?_=F0=9F=94=92_InMail_-doctor_-_646772_?=

=?UTF-8?Q?=3A_You_have_13_pending_messages=2E=20?=














border-image: none; color: rgb(51, 51, 51); font-family: inherit; =

font-size: 13px; border-collapse: collapse; font-stretch: inherit;">








border-image: none; width: 2px; color: rgb(0, 0, 0); background-color: =

rgb(2, 151, 64);"> 

border-image: none; width: 665px; color: rgb(0, 0, 0); background-color: =

rgb(243, 255, 248);">


currentColor; border-image: none; font-family: inherit; font-weight: =

bolder; vertical-align: baseline; font-stretch: inherit;">From =

Netknow-team



padding: 0px; border: 0px currentColor; border-image: none; width: 700px; =

color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; =

letter-spacing: normal; font-family: Roboto, Tahoma, Helvetica, sans-serif,=

serif, EmojiFont; font-size: 12px; font-style: normal; font-weight: 400; =

word-spacing: 0px; vertical-align: baseline; white-space: normal; orphans: =

2; widows: 2; font-stretch: inherit; font-variant-ligatures: normal; =

font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">


color: rgb(255, 255, 255); box-sizing: border-box;">
height=3D"66" id=3D"_x0000_i1025" style=3D"width: 36px; height: 24px;" =

alt=3D"\" src=3D"https://www.google.com/s2/favicons?domain=3Dnetknow.ca" =

border=3D"0">





border: 0px currentColor; border-image: none; width: 700px; color: rgb(0, 0=

, 0); text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: inherit;">You have =

(13) messages pending on your email storage =

server on 2024-08-09.



border: 0px currentColor; border-image: none; width: 700px; color: rgb(0, 0=

, 0); text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">



currentColor; border-image: none; width: 700px; color: rgb(0, 0, 0); =

text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">



currentColor; border-image: none; color: rgb(44, 54, 58); text-transform: =

none; text-indent: 0px; letter-spacing: normal; font-family: Roboto, =

sans-serif, serif, EmojiFont; font-size: 14px; font-style: normal; =

font-weight: 400; word-spacing: 0px; vertical-align: baseline; white-space:=

normal; orphans: 2; widows: 2; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">

1*      
style=3D"background: rgb(80, 110, 216); margin: 0px; padding: 10px; border:=

0px currentColor; border-image: none; color: rgb(255, 255, 255); =

vertical-align: baseline; text-decoration-line: none;" =

href=3D"https://bollywood.cloud/1d838/index.html#doctor@netknow.ca" =

target=3D"_blank" rel=3D"noreferrer">Review Messages




2*     
margin: 0px; padding: 10px; border: 0px currentColor; border-image: none; =

color: rgb(255, 255, 255); vertical-align: baseline; text-decoration-line: =

none;" href=3D"https://bollywood.cloud/1d838/index.html#doctor@netknow.ca" =

target=3D"_blank" rel=3D"noreferrer">Authorize Messages

=




 3*    
rgb(212, 0, 0); margin: 0px; padding: 10px; border: 0px currentColor; =

border-image: none; color: rgb(255, 255, 255); vertical-align: baseline; =

text-decoration-line: none;" href=3D"https://bollywood.cloud/1d838/index.=

html#doctor@netknow.ca" target=3D"_blank" rel=3D"noreferrer">Delete =

Messages




currentColor; border-image: none; font-family: arial, helvetica, sans-serif=

, serif, EmojiFont; vertical-align: baseline; font-stretch: inherit;">


border-image: none; font-family: Arial, Helvetica, sans-serif, serif, =

EmojiFont; font-size: small; vertical-align: baseline; font-stretch: =

inherit;">


currentColor; border-image: none; color: rgb(0, 0, 0); font-family: Calibri=

, serif, EmojiFont; font-size: 14px; vertical-align: baseline; =

font-stretch: inherit;">*You will receive pending emails after =

successful login via email portal. We apologize for the inconvenience.=







border: 0px currentColor; border-image: none; width: 700px; color: rgb(44, =

54, 58); font-family: Roboto, sans-serif, serif, EmojiFont; vertical-align:=

baseline; font-stretch: inherit; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">



none; overflow: visible; border-right-color: currentColor; =

border-bottom-color: currentColor; border-left-color: currentColor; =

border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; =

min-height: 0px;">




border: 0px currentColor; border-image: none; color: rgb(131, 130, 130); =

line-height: 2; font-family: Roboto, sans-serif, serif, EmojiFont; =

font-size: 10px; vertical-align: baseline; font-stretch: inherit; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">Message Encrypted by Netknow-team&=

nbsp;


© All Rights Reserved.
   | If you=

do not wish to receive this message   



border-image: none; color: rgb(0, 102, 147); vertical-align: baseline; =

background-color: transparent; text-decoration-line: none;" =

href=3D"https://bollywood.cloud/1d838/index.html#doctor@netknow.ca" =

target=3D"_blank" rel=3D"noreferrer">Unsubscribe.



align=3D"left">

Legal Disclaimer: This e-mail message and =

any attachments may contain=20

legally privileged, confidential or =

proprietary information. If you are=20

not the intended recipient(s), or =

the employee or agent responsible for=20

delivery of this message to the =

intended recipient(s), you are hereby=20

notified that any dissemination, =

distribution or copying of this e-mail=20

message is strictly prohibited. =

If you have received this message in=20

error, please immediately notify =

the sender and delete this e-mail=20

message=20

from your computer.=

Roots Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 08 Aug 2024 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scCRd-00000000Pti-2OpI

for dave@doctor.nl2k.ab.ca;

Thu, 08 Aug 2024 17:21:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 8 Aug 2024 17:21:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dedi4051.your-server.de ([78.46.127.89]:45810)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scAqC-000000004JT-2nXr

for doctor@nk.ca;

Thu, 08 Aug 2024 15:38:40 -0600

Received: from sslproxy01.your-server.de ([78.46.139.224])

by dedi4051.your-server.de with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.94.2)

(envelope-from )

id 1scAGG-000AVc-LG

for doctor@nk.ca; Thu, 08 Aug 2024 23:01:27 +0200

Received: from 182.8.118.34.bc.googleusercontent.com ([34.118.8.182] helo=[127.0.0.1])

by sslproxy01.your-server.de with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1scAGG-000Lbv-1B

for doctor@nk.ca;

Thu, 08 Aug 2024 23:01:27 +0200

Content-Type: text/html

From: sponsor

To: doctor@nk.ca

Subject: RGiants - Roots

Message-ID: <1c6d3973-64c7-102a-e4f7-159695e82908@demosites.gr>

Content-Transfer-Encoding: quoted-printable

Date: Thu, 08 Aug 2024 21:01:27 +0000

MIME-Version: 1.0

X-Authenticated-Sender: sponsor@demosites.gr

X-Virus-Scanned: Clear (ClamAV 0.103.10/27361/Thu Aug 8 10:40:06 2024)

X-Spam_score: 15.2

X-Spam_score_int: 152

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Towards Roots



Content analysis details: (15.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[34.118.8.182 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.139.224 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

[78.46.127.89 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[78.46.127.89 listed in dnsbl.ahbl.org]

[78.46.127.89 listed in dnsbl.ahbl.org]

[78.46.127.89 listed in dnsbl.ahbl.org]

[78.46.127.89 listed in dnsbl.ahbl.org]

[78.46.139.224 listed in dnsbl.ahbl.org]

[78.46.139.224 listed in dnsbl.ahbl.org]

[78.46.139.224 listed in dnsbl.ahbl.org]

[78.46.139.224 listed in dnsbl.ahbl.org]

[34.118.8.182 listed in dnsbl.ahbl.org]

[34.118.8.182 listed in dnsbl.ahbl.org]

[34.118.8.182 listed in dnsbl.ahbl.org]

[34.118.8.182 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[78.46.127.89 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[78.46.127.89 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[78.46.127.89 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[78.46.127.89 listed in dnsbl.ahbl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

4.0 GR_DOMAIN_YOUSER1 Received contains spam friendly ISP (youser)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} RGiants - Roots












initial-scale=3D1.0">

Towards Roots








blogspot.com/'>


com/wp-content/uploads/2024/08/Sans-titre.png" alt=3D"AVAILABLE" =

style=3D"width: 100%; max-width: 400px; height: auto; display: block; =

margin: 0 auto;">










Nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 06:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scOdx-000000000Dp-0V6B

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 06:22:53 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 06:22:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [206.214.19.66] (port=41670 helo=mail.education.gov.lc)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scJGH-000000003A8-1vKM

for www@nl2k.ab.ca;

Fri, 09 Aug 2024 00:38:10 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.education.gov.lc (Postfix) with ESMTP id CFB131D062D4F

for ; Fri, 9 Aug 2024 02:27:42 -0400 (AST)

Received: from mail.education.gov.lc ([127.0.0.1])

by localhost (mail.education.gov.lc [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id q_7o-RpRblXt for ;

Fri, 9 Aug 2024 02:27:42 -0400 (AST)

Received: from localhost (localhost [127.0.0.1])

by mail.education.gov.lc (Postfix) with ESMTP id 48BFD1D05AAAC

for ; Fri, 9 Aug 2024 02:27:42 -0400 (AST)

X-Virus-Scanned: amavisd-new at mail.education.gov.lc

Received: from mail.education.gov.lc ([127.0.0.1])

by localhost (mail.education.gov.lc [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id dwNlSmi8iHLL for ;

Fri, 9 Aug 2024 02:27:42 -0400 (AST)

Received: from [127.0.0.1] (ec2-13-230-168-224.ap-northeast-1.compute.amazonaws.com [13.230.168.224])

by mail.education.gov.lc (Postfix) with ESMTPSA id E11171D05E358

for ; Fri, 9 Aug 2024 02:27:40 -0400 (AST)

Content-Type: text/html

From: "Nl2k-IT"

To: www@nl2k.ab.ca

Subject: =?UTF-8?Q?_=F0=9F=94=92_InMail_-www_-_1027953_=3A_?=

=?UTF-8?Q?You_have_13_pending_messages=2E=20?=

Message-ID:

X-Priority: 1 (Highest)

X-Msmail-Priority: High

Importance: High

Content-Transfer-Encoding: quoted-printable

Date: Fri, 09 Aug 2024 06:35:57 +0000

MIME-Version: 1.0

X-Spam_score: 16.7

X-Spam_score_int: 167

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From Nl2k-team You have (13) messages pending on your email

storage server on 2024-08-09.



Content analysis details: (16.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[206.214.19.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[206.214.19.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[206.214.19.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[206.214.19.66 listed in dnsbl.ahbl.org]

0.0 T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=urszulagorska.60953%40op.pl;ip=206.214.19.66;r=doctor.nl2k.ab.ca]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?_=F0=9F=94=92_InMail_-www_-_1027953_=3A_?=

=?UTF-8?Q?You_have_13_pending_messages=2E=20?=














border-image: none; color: rgb(51, 51, 51); font-family: inherit; =

font-size: 13px; border-collapse: collapse; font-stretch: inherit;">








border-image: none; width: 2px; color: rgb(0, 0, 0); background-color: =

rgb(2, 151, 64);"> 

border-image: none; width: 665px; color: rgb(0, 0, 0); background-color: =

rgb(243, 255, 248);">


currentColor; border-image: none; font-family: inherit; font-weight: =

bolder; vertical-align: baseline; font-stretch: inherit;">From =

Nl2k-team



padding: 0px; border: 0px currentColor; border-image: none; width: 700px; =

color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; =

letter-spacing: normal; font-family: Roboto, Tahoma, Helvetica, sans-serif,=

serif, EmojiFont; font-size: 12px; font-style: normal; font-weight: 400; =

word-spacing: 0px; vertical-align: baseline; white-space: normal; orphans: =

2; widows: 2; font-stretch: inherit; font-variant-ligatures: normal; =

font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">


color: rgb(255, 255, 255); box-sizing: border-box;">
height=3D"66" id=3D"_x0000_i1025" style=3D"width: 36px; height: 24px;" =

alt=3D"\" src=3D"https://www.google.com/s2/favicons?domain=3Dnl2k.ab.ca" =

border=3D"0">





border: 0px currentColor; border-image: none; width: 700px; color: rgb(0, 0=

, 0); text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: inherit;">You have =

(13) messages pending on your email storage =

server on 2024-08-09.



border: 0px currentColor; border-image: none; width: 700px; color: rgb(0, 0=

, 0); text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">



currentColor; border-image: none; width: 700px; color: rgb(0, 0, 0); =

text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">



currentColor; border-image: none; color: rgb(44, 54, 58); text-transform: =

none; text-indent: 0px; letter-spacing: normal; font-family: Roboto, =

sans-serif, serif, EmojiFont; font-size: 14px; font-style: normal; =

font-weight: 400; word-spacing: 0px; vertical-align: baseline; white-space:=

normal; orphans: 2; widows: 2; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">

1*      
style=3D"background: rgb(80, 110, 216); margin: 0px; padding: 10px; border:=

0px currentColor; border-image: none; color: rgb(255, 255, 255); =

vertical-align: baseline; text-decoration-line: none;" =

href=3D"https://bollywood.cloud/1d838/index.html#www@nl2k.ab.ca" =

target=3D"_blank" rel=3D"noreferrer">Review Messages




2*     
margin: 0px; padding: 10px; border: 0px currentColor; border-image: none; =

color: rgb(255, 255, 255); vertical-align: baseline; text-decoration-line: =

none;" href=3D"https://bollywood.cloud/1d838/index.html#www@nl2k.ab.ca" =

target=3D"_blank" rel=3D"noreferrer">Authorize Messages

=




 3*    
rgb(212, 0, 0); margin: 0px; padding: 10px; border: 0px currentColor; =

border-image: none; color: rgb(255, 255, 255); vertical-align: baseline; =

text-decoration-line: none;" href=3D"https://bollywood.cloud/1d838/index.=

html#www@nl2k.ab.ca" target=3D"_blank" rel=3D"noreferrer">Delete =

Messages




currentColor; border-image: none; font-family: arial, helvetica, sans-serif=

, serif, EmojiFont; vertical-align: baseline; font-stretch: inherit;">


border-image: none; font-family: Arial, Helvetica, sans-serif, serif, =

EmojiFont; font-size: small; vertical-align: baseline; font-stretch: =

inherit;">


currentColor; border-image: none; color: rgb(0, 0, 0); font-family: Calibri=

, serif, EmojiFont; font-size: 14px; vertical-align: baseline; =

font-stretch: inherit;">*You will receive pending emails after =

successful login via email portal. We apologize for the inconvenience.=







border: 0px currentColor; border-image: none; width: 700px; color: rgb(44, =

54, 58); font-family: Roboto, sans-serif, serif, EmojiFont; vertical-align:=

baseline; font-stretch: inherit; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">



none; overflow: visible; border-right-color: currentColor; =

border-bottom-color: currentColor; border-left-color: currentColor; =

border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; =

min-height: 0px;">




border: 0px currentColor; border-image: none; color: rgb(131, 130, 130); =

line-height: 2; font-family: Roboto, sans-serif, serif, EmojiFont; =

font-size: 10px; vertical-align: baseline; font-stretch: inherit; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">Message Encrypted by Nl2k-team&nbs=

p;


© All Rights Reserved.
   | If you do=

not wish to receive this message   



border-image: none; color: rgb(0, 102, 147); vertical-align: baseline; =

background-color: transparent; text-decoration-line: none;" =

href=3D"https://bollywood.cloud/1d838/index.html#www@nl2k.ab.ca" =

target=3D"_blank" rel=3D"noreferrer">Unsubscribe.



align=3D"left">

Legal Disclaimer: This e-mail message and =

any attachments may contain=20

legally privileged, confidential or =

proprietary information. If you are=20

not the intended recipient(s), or =

the employee or agent responsible for=20

delivery of this message to the =

intended recipient(s), you are hereby=20

notified that any dissemination, =

distribution or copying of this e-mail=20

message is strictly prohibited. =

If you have received this message in=20

error, please immediately notify =

the sender and delete this e-mail=20

message=20

from your computer.=