CRA PHish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 10 Aug 2024 16:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scur5-00000000EPm-491D

for dave@doctor.nl2k.ab.ca;

Sat, 10 Aug 2024 16:46:35 -0600

Resent-From: The Doctor

Resent-Date: Sat, 10 Aug 2024 16:46:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.mistck.shop ([103.159.2.116]:51087)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scqx7-00000000M74-3xS4

for sales@nk.ca;

Sat, 10 Aug 2024 12:36:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s2; d=mistck.shop;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=admin@mistck.shop;

bh=KDfSM2NrtqQrSyz6L+WOH0jpzNrC1ipmOU5ykgDEHBc=;

b=nzfRktoQTwWu0mfOlC4Bv3E9E1+lPJw/Cugo7zpGP+W2Uqp5SZhawebw524L3hDQrEGhsKsnmBNd

gH2qT2fyaozkXmyyNGHEbBMdjPRlvxYW30gNXoXubJEa5WYiHQXyV8H/dGxLgmU0fMjbevQx9wzv

kQR0xkcTpPnLmDbcKMV1mDvwsIHSEis1J3EOkl+ppdNUH7F+2JH69CFQ8wIE4q9btBWeFz5aFFZ9

yMXf6kB9QNn6tCNLei6lB7KPFKmzPouNb27X8LoXgysyNP3lEziRLOB1lEne20huMinMTXkckwnG

yO++pgP1cTeAU+3IDSGmGnUAtNipk8xD0n79vQ==

MIME-Version: 1.0

From: "Carbon Rebate"

To: sales@nk.ca

Date: 10 Aug 2024 14:34:33 -0400

Subject: OTP PAYMENT!

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

Message-ID: <0.0.6.8E4.1DAEB53F25582D8.0@mail1.mistck.shop>

X-Spam_score: 15.4

X-Spam_score_int: 154

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The Revenue Agency sent you new mail online called: OTB notice





Content analysis details: (15.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

[103.159.2.116 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.159.2.116 listed in dnsbl.ahbl.org]

[103.159.2.116 listed in dnsbl.ahbl.org]

[103.159.2.116 listed in dnsbl.ahbl.org]

[103.159.2.116 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.159.2.116 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.159.2.116 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.159.2.116 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.159.2.116 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: joyous-magnificent-anteater.glitch.me]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.6 MIXED_HREF_CASE Has href in mixed case

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} OTP PAYMENT!




"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system,=

BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; WHITE-SPACE:=

normal; WORD-SPACING: 0px; MARGIN-TOP: 12px; TEXT-TRANSFORM: none; COLOR:=

blue !important; FONT-STYLE: normal; TEXT-ALIGN: center; ORPHANS: 2; WIDOWS:=

2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT:=

0px; -webkit-text-stroke-width: 0px; font-variant-caps: normal; font-variant-ligatures:=

normal; text-decoration-color: initial; text-decoration-style: initial;=

text-decoration-thickness: initial'> 

=0D=0A


15px; FONT-FAMILY: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI",=

-apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;=

WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT:=

400; COLOR: rgb(36,36,36); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING:=

normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width:=

0px; font-variant-caps: normal; font-variant-ligatures: normal; text-decoration-color:=

initial; text-decoration-style: initial; text-decoration-thickness: initial'>


style=3D"COLOR: ">
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">The Revenue Agency sent you new mail online called:



style=3D"FONT-FAMILY: inherit; COLOR: ">
0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH:=

0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN:=

0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-feature-settings:=

inherit; font-kerning: inherit; font-optical-sizing: inherit; font-stretch:=

inherit; font-variation-settings: inherit">OTB notice



style=3D"COLOR: ">
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">This mail may require your attention.


style=3D"COLOR: ">
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">If you are expecting a payment, you don't need to=

take any further action. If you have signed up for direct deposit, the=

payment should be deposited into your bank account within the next 10 business=

days. If you don't have direct deposit, a cheque will be mailed to you.

=

=0D=0A


UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont,=

Roboto, "Helvetica Neue", sans-serif; WHITE-SPACE: normal; WORD-SPACING:=

0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(36,36,36); FONT-STYLE:=

normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR:=

rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px; font-variant-caps:=

normal; font-variant-ligatures: normal; text-decoration-color: initial;=

text-decoration-style: initial; text-decoration-thickness: initial'>
href=3D"https://joyous-magnificent-anteater.glitch.me/" rel=3D"noopener=

noreferrer" target=3D_blank>
0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH:=

0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN:=

0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">View Deposit Slip


style=3D"COLOR: ">
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">You can sign-in to My Account and click on "Mail"=

to read your mail. If you don't have My Account.


style=3D"COLOR: ">
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">This is an automated email message. Please do not=

reply.

=0D=0A


5px; FONT-FAMILY: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI",=

-apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;=

WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 12px; TEXT-TRANSFORM:=

none; COLOR: blue !important; FONT-STYLE: normal; TEXT-ALIGN: center; ORPHANS:=

2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255);=

TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px; font-variant-caps: normal;=

font-variant-ligatures: normal; text-decoration-color: initial; text-decoration-style:=

initial; text-decoration-thickness: initial'> 

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 22:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sceAa-00000000CP2-04uO

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 22:57:36 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 22:57:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f179.google.com ([209.85.208.179]:61831)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scdls-00000000MWv-1zYX

for sales@nk.ca;

Fri, 09 Aug 2024 22:32:08 -0600

Received: by mail-lj1-f179.google.com with SMTP id 38308e7fff4ca-2f032cb782dso29188531fa.3

for ; Fri, 09 Aug 2024 21:30:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1723264201; x=1723869001; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=Rxol7ZCXxwSjwUJes69ciSWn7wrKB/S/FC3RFSGnzyE=;

b=T7uZ6Ss/fNU3kpMxzRUP7QPvDvsFrHaoOD6GtoA1yD7Wq0y0nkWTi/OQddhxzBHVBD

CvhKdNtY0GjbMvi8ZfxNjaRW+lBUJi+ZO0n3ezimw/TpT8ir0HypXRVDutif5Ugfd9cy

1veAUOXLd8V+Z0akqb5l36hIFKLUEBD8JC6BQgtBfwBRWpVpBSlvbdEZjWQ79NAH6/2J

JTvzD+G9Z4dwJLTRRhS2YditB30u4QxAytMpYKe+vO9uYROMu+7sbSITSfHTtZV4iKbD

ptIp2/opzlVnza23dE/kkhMALZ7aRj6zw6rkVGsT/7DMhpIJ2gR7D+ADM3Izl+9wWyfK

cbZw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1723264201; x=1723869001;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Rxol7ZCXxwSjwUJes69ciSWn7wrKB/S/FC3RFSGnzyE=;

b=tFAfzd0hetCw9FLEu+M46EFlYNwwl8AGtHHRJB/OwXXRTt08XrFLACmbnWmeR7+bj6

8YeuxAHs8QTAC6oLkPKetDLrfMol3P7rVd+UUB9tuP2JW0b9NalY9ZC8FcfgUJK/FcFy

7wXDXbMzjvSZHTFWzN7pE0eqcZpDL0sbNZRaodj7bKbhWueDStqLDF62nj8yMFcboiN1

NulM9QPGdz9S0qj6bDFLRCburO4YMXg40Yhm1pOGwxHEn3v40EYtW3mSVhikGv2KxYFM

kQs6M5k1E+8VbaYRuiVM8A5p6dZBmN+f24dEsOZgvf094GDJ04uoyPklzk9kJL/HwtaN

WBjQ==

X-Gm-Message-State: AOJu0YwtXvJ7SMAL7BE/40jyqTmyKBetaRyXAjMfPta+aqXLVBHPgjLp

H88vrO5r9o2CIGaegsG0PLK3P+Fwz8qsnr92CmpnA3qOHmvVKolU4ZmnjutBDoYUZZya8lf8xZN

skrsMzfdIEO+Oc7PcD2eUJV843q9L5fnf

X-Google-Smtp-Source: AGHT+IFyEXqgzuOmd/v4EYuci8Ub3Fk6u6uorUdkQlvZoQS6NOLyebGRl1Aw3Wbl1G21HoMENdmGjn/E02Li7lmFwsE=

X-Received: by 2002:a05:6512:e88:b0:52f:c10d:21f0 with SMTP id

2adb3069b0e04-530eea59af7mr2505877e87.54.1723264201210; Fri, 09 Aug 2024

21:30:01 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: George Shertiverer

Date: Sat, 10 Aug 2024 09:59:21 +0530

Message-ID:

Subject: Re: SEO - Complete Digital Marketing Services..

To: Sales

Content-Type: multipart/alternative; boundary="000000000000914486061f4cb624"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there! Just following up on our previous conversation.

If you’re interested, I can send full SEO proposal and price list.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

[209.85.208.179 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.179 listed in dnsbl.ahbl.org]

[209.85.208.179 listed in dnsbl.ahbl.org]

[209.85.208.179 listed in dnsbl.ahbl.org]

[209.85.208.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.179 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.179 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.179 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.179 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[georgeshertiverer80(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[georgeshertiverer80(at)gmail.com]

0.6 J_CHICKENPOX_102 BODY: 10alpha-pock-2alpha

0.3 OFFER BODY: Offers you Something

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: SEO - Complete Digital Marketing Services..



--000000000000914486061f4cb624

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi there!



Just following up on our previous conversation.



If you=E2=80=99re interested, I can send full SEO proposal and price list.=





Thanks!





On Thu, Jul 25, 2024 at 10:48=E2=80=AFPM George Shertiverer <

georgeshertiverer80@gmail.com> wrote:



> Hello,

>

>

>

> If you are looking to outsource your SEO projects offshore, I have

> something really cool for you today.

>

>

>

> A NEW 15 day=E2=80=99s trial offer on any of your projects!

>

>

>

> If this hasn=E2=80=99t enticed you yet, let me give you the top highlight=

s of our

> Outsource Program:

>

>

>

> - Free Site Audit Reports and SEO Proposals for your clients

>

> - Regular Keyword Rankings Reports (Weekly) and Performance

> Reports (Monthly)

>

> - Creation of rich backlink profile by acquiring links for

> contextual sites with high DA and TF

>

> - Paid access to all the SEO tools such as SEMrush, MOZ, Raven

> SEO, Ahrefs, Majestic, Serpbook, Seoreports.me (our proprietary tool) and

> more.

>

> - Discounts on bulk offers

>

>

>

> We also assure you that all our reports will be 100% white labelled under

> your brand name and logo.

>

>

>

> If you are interested, I would be happy to share our Methodologies, past

> work details and client Testimonials and Prices.


>

>

>

> I look forward to it. Please let me know.

>

>

>

> Thanks Regards,

>

> George Shertiverer

>

> Business Development Executive

>

>

> [image: beacon]



--000000000000914486061f4cb624

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">


=3D"georgia, serif">Hi

there!

=C2=A0

e=3D"font-size:10pt">Just

following up on our previous conversation.


ze:10pt">=C2=A0

If you=E2=80=99=

re interested,

I can send full SEO proposal and price list.


ont-size:10pt">=C2=A0

Thanks!
n>




























class=3D"gmail_attr">On Thu, Jul 25, 2024 at 10:48=E2=80=AFPM George Shert=

iverer <georgeshertiver=

er80@gmail.com
> wrote:

yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd=

ing-left:1ex">


e:11pt;font-family:Calibri,sans-serif">
amily:Verdana,sans-serif">Hello,






-serif">=C2=

=A0






-serif">If

you are looking to outsource your SEO projects offshore, I have something

really cool for you today.






-serif">=C2=

=A0






-serif">A

NEW 15 day=E2=80=99s trial offer on any of your projects!






-serif">=C2=

=A0






-serif">If

this hasn=E2=80=99t enticed you yet, let me give you the top highlights of =

our

Outsource Program:






-serif">=C2=

=A0






-serif">-=C2=

=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Free Site Audit Reports=

and SEO

Proposals for your clients






-serif">-=C2=

=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Regular Keyword Ranking=

s Reports

(Weekly) and Performance Reports (Monthly)






-serif">-=C2=

=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Creation of rich backli=

nk profile by

acquiring links for contextual sites with high DA and TF






-serif">-=C2=

=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Paid access to all the =

SEO tools such

as SEMrush, MOZ, Raven SEO, Ahrefs, Majestic, Serpbook, Seoreports.me (our

proprietary tool) and more.






-serif">-=C2=

=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Discounts on bulk offer=

s






-serif">=C2=

=A0






-serif">We

also assure you that all our reports will be 100% white labelled under your

brand name and logo.






-serif">=C2=

=A0





=

If

you are interested, I would be happy to share our Methodologies, past work

details and client Testimonials and Prices.






-serif">=C2=

=A0






-serif">I

look forward to it. Please let me know.






-serif">=C2=

=A0






-serif">Thank=

s

Regards,






-serif">
ll">George Shertiverer


;font-size:11pt;font-family:Calibri,sans-serif">
Verdana,sans-serif;font-size:10pt">Business

Development Executive






-serif">=C2=

=A0




s9aZXlhs74RTKCLOketwfbjBYnbRlhsfWHwZX5ObqkAG5cEYMzzt7uV7vC-OOl9uTXlGdLPcp6N=

OMPL4grWTLzTbpNRZzXCjwJqYbcp_8cYscPNX0EHAUhsTeaKbrODWE6xesnqu5vybVrirK0tD97=

Ig" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display: none;">
kquote>




--000000000000914486061f4cb624--

Chinese products spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 22:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sceA5-00000000C2C-42ZY

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 22:57:06 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 22:57:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sh0chn02hn2233.outbound.protection.partner.outlook.cn ([139.219.146.233]:56160 helo=CHN02-SH0-obe.outbound.protection.partner.outlook.cn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sccoz-00000000EAh-2DVp

for root@nk.ca;

Fri, 09 Aug 2024 21:31:19 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=P21sSA+XUjMsNIhuoIdZRwxUwEpwDchO6JUzo1Jud61oiZ3I8eQoiRVhCV+0O75BcnXP4HaCO5Mg5hE7yVcq/qh6azhm2r6uRXxzGUkVOnO1HkNfPG5gX1HKl3uE4K5EBDiz41+WqNJHCTR0inKR41jhj3QnvYv1Gr2IVQz+o9is1xHcItokmNT0nyIvh2uPIv5ulNnrIpzA5UEAw8W/AOS3ZIkAUmjNQUwuF8gF8LafW/JePsqlr5gEbaIAHuGsgGp1Yv8ZgxitOfpkpsrvaXPrNhigsnXQIioqq+sdqiHINQAD9eOybca8olevch2Fh9MxZq4+Cj2orfYrGdkrbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=U0RWJA3r2GKBN+LmDMYPAIgZfQpZBDm/qSefVd1tR3I=;

b=m716W7BwpiJIT84jgtLN/trb/VNiUg2qURtIrRoPn8aWGIObwJRJSXyKIOOnRBjDiX+Pe/7M0aGZANpGvyH/mEoKivxnNYT+mulsBa2duBitPO6Gp5UvgwAGouisbFZje/mE7dZ7oxsw8CjcwMOUMlxaVyLVGKYBC43zmb+L+jOTdKurewCmyz3kNX3oxtK4fdrGkAtQfyvKjFdyzGfqVMHxGb4G1GMtXMhexrMv9XcQ/ino0oIM/Ko1JLakEZlUgFUQLAwII3imqwOQXnavyI+6+/9dVM09eVLsPTHHM+7e6s+fJ68WMummb+2Axe7Ltri+BTdFZu+NXSpl3FnM3A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=sop.sammyslogistics.net; dmarc=pass action=none

header.from=sop.sammyslogistics.net; dkim=pass

header.d=sop.sammyslogistics.net; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=sop.sammyslogistics.net;

Received: from ZQ0PR01MB1304.CHNPR01.prod.partner.outlook.cn

(2406:e500:c550:19::10) by ZQ0PR01MB1221.CHNPR01.prod.partner.outlook.cn

(2406:e500:c550:1a::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7828.32; Sat, 10 Aug

2024 03:29:05 +0000

Received: from ZQ0PR01MB1304.CHNPR01.prod.partner.outlook.cn

([fe80::1167:cc38:a751:5e41]) by

ZQ0PR01MB1304.CHNPR01.prod.partner.outlook.cn ([fe80::1167:cc38:a751:5e41%3])

with mapi id 15.20.7828.031; Sat, 10 Aug 2024 03:29:05 +0000

Message-ID:

From: Dillys Di

To:

Subject: Logistics from China

Date: Sat, 10 Aug 2024 11:43:28 +0800

Content-Type: multipart/alternative;

boundary="----=_001_aaa4bba5d8b95607_=----"

X-Mailer: Supmailer 39.2.1

X-ClientProxiedBy: ZQ0PR01CA0002.CHNPR01.prod.partner.outlook.cn

(2406:e500:c550:5::20) To ZQ0PR01MB1304.CHNPR01.prod.partner.outlook.cn

(2406:e500:c550:19::10)

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: ZQ0PR01MB1304:EE_|ZQ0PR01MB1221:EE_

X-MS-Office365-Filtering-Correlation-Id: b811b5ae-6bf8-41bb-be53-08dcb8ec958b

X-MS-Exchange-SenderADCheck: 1

X-Microsoft-Antispam:

BCL:0;ARA:13230040|366016|41320700013|1800799024|7416014|52116014|27032699015|41110700001|38350700014|41090700025|41080700001;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:ZQ0PR01MB1304.CHNPR01.prod.partner.outlook.cn;PTR:;CAT:NONE;SFS:(13230040)(366016)(41320700013)(1800799024)(7416014)(52116014)(27032699015)(41110700001)(38350700014)(41090700025)(41080700001);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?b2tOT0p1M0lsQmF3NzEzTDBRQ3lRdENJUVRZdm5qTWU5R3BRRy9RNmpZb1FH?=

=?utf-8?B?Y1cxdDM5RHpXRFNvb0NCalVCeTdsdlpGR3N4UkVhZnh6bUlVYUovdkc1VEla?=

=?utf-8?B?blFyU3hDWW9LMVdxL2ZhUlNjeUJiSkd5Z0cwdWR1cHEwblRhSFJNRnpZNDdw?=

=?utf-8?B?THlRY0lnaFNWQk42QmFFdlJJeTM4SEg0dERzQzRiSVBiSzVzTnk1b3gxNGM2?=

=?utf-8?B?RlRvQm1IcGI3eHNYYVQySzVoRkFodnhHdEhLaE5ReW1XR0tUYURkOXdDRmtM?=

=?utf-8?B?aWpnTEgvRjNYOFBobThRVnJaWHNjYW1pUmRpY2RESmFmVkIxR1JxZXA0S05L?=

=?utf-8?B?Q3JhTjUxZ2RZcnYxbnBxa2pwUyt2NXZBZDBMUDlWMS9aU2kyMkpHUFRpWkZw?=

=?utf-8?B?OUtHdkhqOUFESWZIZ1NUWDZiekgzRXdVVjVSbGxVZzkxVlk0ZDBoZGo0bUVy?=

=?utf-8?B?MmFsZk91M1VNUitCeFZ5VzcrbWJRRFA5Ly9sNlZ3VzFTNGpXOVJiTURtQTRQ?=

=?utf-8?B?WURYTE5yN0ZiUjFjNzV0Rk1QM294d0M4bU9RVDFScU1XZDQ1KzVialBUakxD?=

=?utf-8?B?SkdkeU9xWndjdHNZU3FxaXVVN1NkM3JZTlI0SGxTb1g2UmsxNUd4T1NCR3pl?=

=?utf-8?B?SjRFaXlHaTc3WXhSRXY0Nm1obnJNcit2akVzWVRzK09jYjN2TVUrWFhLbFdH?=

=?utf-8?B?L2tIMW5YdzNwRGYweWJXd2Z2RnhrVnNSZG5PL2huNHowVTI4dGQ0bStwVFF1?=

=?utf-8?B?RWRJeThZaXgyRktMeFN4KzNneDNDc0hSU3BYckhGM1h1T2xLYjhGUUhpd0NY?=

=?utf-8?B?UXFKcnFZR09xMnpoMEh6TWhYb0dmeUtCNm44aXc0QXpPTVpJNXh1ekVSOFRt?=

=?utf-8?B?dnB6ejRpbHdFQ2Q3RlRGZERGUmVnTGVBZE9nWnRXVHIySlhNSmJzL0pIVjZa?=

=?utf-8?B?YTg1R0E4Q1RSVWlaRzhWclVHMFNja3dmNEtqNVpDS01vQXFLakhoVjlNT0Ft?=

=?utf-8?B?UHh5a1JyZTN5S25HY3pBL0licnlMSlF1MlNzZzNCY1BoSWluNlArdGYyUmtT?=

=?utf-8?B?MVcwa2ZIenNvdVN2TS9GbUhINERQdnRzZW5iVUo5aGxXeVZ6Mk9ZVHVCR014?=

=?utf-8?B?c1BMQmtJV0pjS1NraGZwT3BCTUwvVCtRRXhkakFGYTloVGhCcC9DMTRNM2o5?=

=?utf-8?B?TmVEcW9ncGtXc3BpaCtVVmZlY0pwMTVRWlhiZVl3U0xMcGE3WlJSYTV5MHM0?=

=?utf-8?B?ZG40MlUzNHJyVGc4VnZWc0VKT3pmR0Faa3lRM25KK0dCYzBVNFY1ODhRSHdI?=

=?utf-8?B?bnhOeEhvQXF1RThMdGNHT2Z2dDQ3cE84S2RiUk5pK3l5bndxSTYrMjBoYmcw?=

=?utf-8?B?TjNZRE92ZDk0bnJQS1phTTZRcURzbHBJODhnT0NJNnlpNUtOS2VTU1Z1VDd3?=

=?utf-8?B?OEtCcUN3UWxQQ0xoUDdRWWdwN0pBeWdCTUlkTVdmalk5a0xyS1VtWVovek5x?=

=?utf-8?B?TmNERHd6bS9BanMwUzlQa0YzUWQyc05mZko3a2FNTWJVNFc2YmEvc1VMRVpZ?=

=?utf-8?B?cHdLRzVsSW9MM2dIQmlETGYyTXRUb3dUT25WN3lZeFc1MzBKdVQvb1JhYWdi?=

=?utf-8?B?b0FkTzZudWh1WUhQbmtscGxwWHdnSWdrNHdiU1VFOGIxbDhNTEZtUE11MUVv?=

=?utf-8?B?Qmw0UkxCVzlvTWtmNmw5QUhTZHkrU0hkK2tJdlBiekdWUFZrV2hUaFFZeVda?=

=?utf-8?B?ZlpOK3Vod3pFQmhNM0dsMkRjc0ZiZzNXbEt4TXFKSUFIUUE0UWN6MHgyYk13?=

=?utf-8?B?aklic0ZOMDdJSWRTUTdwRHBrb1hBSjNITnJuRzk3aDJDNWhDWFBFNTY0U1Ar?=

=?utf-8?B?bDRhZlJHSmVEcUNxc3FYd05OSVpBNzRvbVBrUXNVSVZlV3ZETXZZVEhFTGRD?=

=?utf-8?B?VlNVZDZQWkt1a0hrcFlvTHQ5U1FjNXZTZDRhMzNBd2NSSXpqK0ZWbVVYQUZ1?=

=?utf-8?B?aTAzR3I4ZFVhSzdZNTVjdGlHV0x0ZzlCVUtNUWU0VFdJckVkdW9BTlJGUEdT?=

=?utf-8?B?Wk9lb3RaOXF1dDhxTXlBS2NPdmIrd2tLZHFBdzJUeHBOY05NamRhd3Y3Q20y?=

=?utf-8?B?cEJxY0xEVUYyTHRrMFRNWVpJT05FV21HNGRTenMxYzh6ZHNKRWFoVkp1ODh5?=

=?utf-8?Q?WopqlpRmZ3k5Nr3TLQhya84=3D?=

X-OriginatorOrg: sop.sammyslogistics.net

X-MS-Exchange-CrossTenant-Network-Message-Id: b811b5ae-6bf8-41bb-be53-08dcb8ec958b

X-MS-Exchange-CrossTenant-AuthSource: ZQ0PR01MB1304.CHNPR01.prod.partner.outlook.cn

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Aug 2024 03:29:04.2850

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: d28aab73-dfb5-4378-86cd-810045d9a05a

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: ZHLHpgstak5Y/bXvHqkTuOviv2buhRULYnPHxXRncbc6MgjL/n3HNlFc3WuRGfcGl48NNj2eJAai+jLQJ/iVe4dvr5OmJQ3JeY5UoVPWNSll9ddFO1Nvyvy9ZPmYdyZ2

X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZQ0PR01MB1221

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Have a good day! Do you have any goods that need to be shipped

from China at this time? the logistics cost has been greatly reduced, please

tell me any details. Good prices will be sent to you soon.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

[139.219.146.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2406:e500:c550:19:0:0:0:10 listed in]

[dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 VISTA_COST Old MSFT msgid format + "cost"

Subject: {SPAM?} Logistics from China



------=_001_aaa4bba5d8b95607_=----

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: base64



DQpIYXZlIGEgZ29vZCBkYXkhDQoNCkRvIHlvdSBoYXZlIGFueSBnb29kcyB0aGF0IG5lZWQgdG8g

YmUgc2hpcHBlZCBmcm9tIENoaW5hIGF0IHRoaXMgdGltZT8gdGhlIGxvZ2lzdGljcyBjb3N0IGhh

cyBiZWVuIGdyZWF0bHkgcmVkdWNlZCwgcGxlYXNlIHRlbGwgbWUgYW55IGRldGFpbHMuIEdvb2Qg

cHJpY2VzIHdpbGwgYmUgc2VudCB0byB5b3Ugc29vbi4NCg0KIA0KDQpXZSBoYXZlIGJlZW4gYSBm

cmVpZ2h0IGZvcndhcmRlciB3b3JsZCBmb3IgbW9yZSB0aGFuIDEwIHllYXJzIGFuZCBvdmVyIDIw

MCBzdGFmZiB3b3JraW5nIHRvZ2V0aGVyLiBXZSBhcmUgbWVtYmVycyBvZiBOT1ZDQyBhbmQgV0NB

LCBJIGFtIGNvbmZpZGVudCB0aGF0IHdlIGFyZSBhYmxlIHRvIG1lZXQgeW91ciBxdWFsaXR5IHN0

YW5kYXJkIHdoaWxlIHJlZHVjaW5nIHlvdXIgY29zdCBhbmQgdGltZSBieSBhdCBsZWFzdCAyMCUu

IFBsZWFzZSBiZSBhc3N1cmVkIHRoYXQgd2UgYXJlIGFsc28gdmVyeSBjYXBhYmxlIHRvIGhhbmRs

ZSBpbnN1cmFuY2UsIGN1c3RvbXMgY2xlYXJhbmNlLCB3YXJlaG91c2luZyBhbmQgc3RvY2sgY29u

dHJvbCB3aXRoIHlvdXIgZHJhd2luZ3MuDQoNCk91ciBhZHZhbnRhZ2VzOg0KLSBTaGlwcGluZyBM

aW5lIFN1cHBvcnQNCiAgIFdlIGhhdmUgZXN0YWJsaXNoZWQgbG9uZyB0ZXJtIGFuZCByZWxpYWJs

ZSByZWxhdGlvbnNoaXBzIHdpdGggbWFueSBmaXJzdCBjbGFzcyBjYXJyaWVycy4gV2UgaGF2ZSBv

dXIgb3duIGNvbnRyYWN0IHJhdGVzIHdpdGggTUFFUlNLLCBaSU0sIEVNQywgWU1MLCBTTUwsIE1T

QywgSE1NLCBPTkUsIEhQTCwgQ09TQ08gTElORSBhbmQgc28gb24sIGNvdmVyaW5nIGFsbCBvdmVy

IHRoZSB3b3JsZCwgZXNwZWNpYWxseSBmcm9tIENoaW5hLCB3ZSBhcmUgdGhlIGV4cGVydCBmb3Ig

dGhpcyBsaW5lLg0KLSBQZXJmZWN0IHNlcnZpY2UgbmV0d29yaw0KICAgV2UgaGF2ZSBlc3RhYmxp

c2hlZCBzZXJ2aWNlIG5ldHdvcmsgY292ZXJpbmcgdGhlIHdob2xlIHdvcmxkLiBXaXRoIHRoZSBz

a2lsbGZ1bCBvcGVyYXRpb24sIHBhdGllbnQgY3VzdG9tZXIgc2VydmljZSBtYWtlIHRoZSBzaGlw

bWVudHMgc2FmZXR5Lg0KLSBUcmFja2luZyBTeXN0ZW0NCiAgIEJlc2lkZXMgYWR2YW5jZWQgMjRo

IGNhcmdvIHRyYWNraW5nLCBpdCBhbHNvIGhhcyB0aGUgbWFpbiBwZXJzb24gaGVyZSB3aG8gaXMg

aW4gY2hhcmdlIG9mIHRyYWNraW5nIHlvdXIgZWFjaCBzaGlwbWVudCBjbG9zZWx5IGFuZCByZXBv

cnQgeW91IGFueSB1cGRhdGUgaW5mb3JtYXRpb24gaW4gZHVlIHRpbWUuDQoNCi0gRXhjZWxsZW50

IFNlcnZpY2UNCjEuQWlyICYgc2VhIGZyZWlnaHQgZnJvbSBDaGluYS4gRXNwZWNpYWxseSwgY29u

c29saWRhdGUgZ29vZHMgZnJvbSBkaWZmZXJlbnQgZmFjdG9yeS9zdG9yZS4NCjIuQ3VzdG9tcyBC

cm9rZXIsIENvbW1vZGl0eSBJbnNwZWN0aW9uLCBNYXJpbmUgSW5zdXJhbmNlDQozLkN1c3RvbXMg

RGVjbGFyYXRpb24gJiBDbGVhcmFuY2UNCjQuUGFja2luZywgU3RvcmFnZSAmIERpc3RyaWJ1dGlv

bg0KNS5Qcm9mZXNzaW9uYWwgVHJhbnNwb3J0YXRpb24gb2YgRGFuZ2Vyb3VzIEdvb2RzLCBDaGVt

aWNhbHMsIEZsYXQgQm90dG9tIENvbnRhaW5lcnMsIE9wZW4gVG9wIENvbnRhaW5lcnMsIEhlYXZ5

IE1hY2hpbmVyeSwgRmlyZXdvcmtz77yMU3BlY2lhbCBDb250YWluZXJz77yMQnVsayBDYXJnbw0K

Ni5BaXIgZnJlaWdodCAocGFja2luZywgUUMsIGZ1bWlnYXRpb24sIGdvb2RzIGluc3BlY3Rpb24s

IHBhbGxldCBhbmQgc28gb24pDQo3Lklzc3VlIEIvTCBmb3Igc2VhIGZyZWlnaHQvYWlyIGZyZWln

aHQNCjguUXVvdGUgeW91IHVuZGVyIEZPQiwgRVhXLCBERFUsIEREUCwgREFQDQoNCg0KT3VyIHNh

dGlzZmllZCBjdXN0b21lcnMgaW5jbHVkZSBIYWllciwgTGliYWkgR3JvdXAsIFNhbmR5IEhlYXZ5

IEluZHVzdHJ5LCBNaWRlYSwgQ2hpZ28sIEdhbGFueiwgTmV3IFpob25nIFl1YW4sIEppYWxpbmcs

IEhhaWxlYSBNb3Rvci4gSSBhbSB2ZXJ5IGNvbmZpZGVudCB0aGF0IHdoZW4geW91IHdvcmsgd2l0

aCB1cywgeW91IHdpbGwgaGF2ZSB0aGUgc2FtZSBzYXRpc2ZhY3Rpb24uDQoNCklmIHlvdSBhcmUg

aW4gQ2hpbmEgb3IgaGF2ZSBwbGFuIHRvIENoaW5hLCB3ZWxjb21lIHRvIHZpc2l0IG91ciBjb21w

YW55IHRvIHRhbGsgbW9yZSBkZXRhaWxzLiBwbGVhc2UgbGV0IG1lIGhhdmUgeW91ciB3ZWNoYXQg

L3doYXRzYXBwIG51bWJlciwgSSB3aWxsIGFkZCB0byB5b3Ugc29vbi4NCg0KDQpZb3VycyBzaW5j

ZXJlbHkuDQoNCg0KRGlsbHlzIERpIC0gc2VuaW9yIGFjY291bnQgbWFuYWdlcg0KDQpFbWFpbDog

anVkeWxpdTY4QGdiLnNhbW15c2xvZ2lzdGljcy5uZXQNClNIRU5aSEVOIFNBTU1ZUyBMT0dJU1RJ

Q1MgQ08uLCBMVEQuDQpXaGF0c0FwcC9XZUNoYXQvTW9iaWxlIHBob25lIDEzNTQ0MTkxMTk1IA0K

QWRkcmVzczogMTJGLCBIdWFsZSBCdWlsZGluZywgTm8uIDIwMTcsIFNoZW5uYW4gRWFzdCBSb2Fk

LCBMdW9odSBEaXN0cmljdCwgU2hlbnpoZW4sIENoaW5hLiB6aXA6NTE4MDAxDQo=



------=_001_aaa4bba5d8b95607_=----

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj48aHRtbD48aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVu

dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdFTkVSQVRPUiIgY29u

dGVudD0iTVNIVE1MIDExLjAwLjEwNTcwLjEwMDEiPjwvaGVhZD4NCjxib2R5Pg0KPHA+SGF2ZSBh

IGdvb2QgZGF5ITwvcD4NCjxwIHN0eWxlPSJGT05ULVNJWkU6IDE0cHg7IEZPTlQtRkFNSUxZOiAm

cXVvdDtsdWNpZGEgR3JhbmRlJnF1b3Q7LCBWZXJkYW5hLCAmcXVvdDtNaWNyb3NvZnQgWWFIZWkm

cXVvdDs7IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBURVhULVRSQU5T

Rk9STTogbm9uZTsgRk9OVC1XRUlHSFQ6IDQwMDsgQ09MT1I6IHJnYigwLDAsMCk7IEZPTlQtU1RZ

TEU6IG5vcm1hbDsgT1JQSEFOUzogMjsgV0lET1dTOiAyOyBMRVRURVItU1BBQ0lORzogbm9ybWFs

OyBMSU5FLUhFSUdIVDogMjNweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsg

VEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZh

cmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt

ZGVjb3JhdGlvbi10aGlja25lc3M6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5p

dGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsIj48c3Ryb25nPkRvIA0KeW91IGhh

dmUgYW55IGdvb2RzIHRoYXQgbmVlZCB0byBiZSBzaGlwcGVkIGZyb20gQ2hpbmEgYXQgdGhpcyB0

aW1lPyB0aGUgDQpsb2dpc3RpY3MgY29zdCBoYXMgYmVlbiBncmVhdGx5IHJlZHVjZWQsIHBsZWFz

ZSB0ZWxsIG1lIGFueSBkZXRhaWxzLiBHb29kIHByaWNlcyANCndpbGwgYmUgc2VudCB0byB5b3Ug

c29vbi48L3N0cm9uZz48L3A+DQo8cCBzdHlsZT0iRk9OVC1TSVpFOiAxNHB4OyBGT05ULUZBTUlM

WTogJnF1b3Q7bHVjaWRhIEdyYW5kZSZxdW90OywgVmVyZGFuYSwgJnF1b3Q7TWljcm9zb2Z0IFlh

SGVpJnF1b3Q7OyBXSElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1U

UkFOU0ZPUk06IG5vbmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMCwwLDApOyBGT05U

LVNUWUxFOiBub3JtYWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5v

cm1hbDsgTElORS1IRUlHSFQ6IDIzcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1LDI1

NSk7IFRFWFQtSU5ERU5UOiAwcHg7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9u

dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0

ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tc3R5bGU6

IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbCI+Jm5ic3A7PC9wPg0KPHAg

c3R5bGU9IkZPTlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6ICZxdW90O2x1Y2lkYSBHcmFuZGUm

cXVvdDssIFZlcmRhbmEsICZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OzsgV0hJVEUtU1BBQ0U6

IG5vcm1hbDsgV09SRC1TUEFDSU5HOiAwcHg7IFRFWFQtVFJBTlNGT1JNOiBub25lOyBGT05ULVdF

SUdIVDogNDAwOyBDT0xPUjogcmdiKDAsMCwwKTsgRk9OVC1TVFlMRTogbm9ybWFsOyBPUlBIQU5T

OiAyOyBXSURPV1M6IDI7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IExJTkUtSEVJR0hUOiAyM3B4

OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpOyBURVhULUlOREVOVDogMHB4OyBm

b250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7

IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVz

czogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRp

b24tY29sb3I6IGluaXRpYWwiPldlIA0KaGF2ZSBiZWVuIGEgZnJlaWdodCBmb3J3YXJkZXIgd29y

bGQgZm9yIG1vcmUgdGhhbiAxMCB5ZWFycyBhbmQgb3ZlciAyMDAgc3RhZmYgDQp3b3JraW5nIHRv

Z2V0aGVyLiBXZSBhcmUgbWVtYmVycyBvZiBOT1ZDQyBhbmQgV0NBLCBJIGFtIGNvbmZpZGVudCB0

aGF0IHdlIGFyZSANCmFibGUgdG8gbWVldCB5b3VyIHF1YWxpdHkgc3RhbmRhcmQgd2hpbGUgcmVk

dWNpbmcgeW91ciBjb3N0IGFuZCB0aW1lIGJ5IGF0IGxlYXN0IA0KMjAlLiBQbGVhc2UgYmUgYXNz

dXJlZCB0aGF0IHdlIGFyZSBhbHNvIHZlcnkgY2FwYWJsZSB0byBoYW5kbGUgaW5zdXJhbmNlLCAN

CmN1c3RvbXMgY2xlYXJhbmNlLCB3YXJlaG91c2luZyBhbmQgc3RvY2sgY29udHJvbCB3aXRoIHlv

dXIgZHJhd2luZ3MuPC9wPg0KPHAgc3R5bGU9IkZPTlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6

ICZxdW90O2x1Y2lkYSBHcmFuZGUmcXVvdDssIFZlcmRhbmEsICZxdW90O01pY3Jvc29mdCBZYUhl

aSZxdW90OzsgV0hJVEUtU1BBQ0U6IG5vcm1hbDsgV09SRC1TUEFDSU5HOiAwcHg7IFRFWFQtVFJB

TlNGT1JNOiBub25lOyBGT05ULVdFSUdIVDogNDAwOyBDT0xPUjogcmdiKDAsMCwwKTsgRk9OVC1T

VFlMRTogbm9ybWFsOyBPUlBIQU5TOiAyOyBXSURPV1M6IDI7IExFVFRFUi1TUEFDSU5HOiBub3Jt

YWw7IExJTkUtSEVJR0hUOiAyM3B4OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUp

OyBURVhULUlOREVOVDogMHB4OyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQt

dmFyaWFudC1jYXBzOiBub3JtYWw7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4

dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBp

bml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWwiPk91ciANCmFkdmFudGFnZXM6

PGJyPi0gU2hpcHBpbmcgTGluZSBTdXBwb3J0PGJyPiZuYnNwOyZuYnNwOyBXZSBoYXZlIGVzdGFi

bGlzaGVkIGxvbmcgDQp0ZXJtIGFuZCByZWxpYWJsZSByZWxhdGlvbnNoaXBzIHdpdGggbWFueSBm

aXJzdCBjbGFzcyBjYXJyaWVycy4gV2UgaGF2ZSBvdXIgb3duIA0KY29udHJhY3QgcmF0ZXMgd2l0

aCBNQUVSU0ssIFpJTSwgRU1DLCBZTUwsIFNNTCwgTVNDLCBITU0sIE9ORSwgSFBMLCBDT1NDTyBM

SU5FIA0KYW5kIHNvIG9uLCBjb3ZlcmluZyBhbGwgb3ZlciB0aGUgd29ybGQsIGVzcGVjaWFsbHkg

ZnJvbSBDaGluYSwgd2UgYXJlIHRoZSBleHBlcnQgDQpmb3IgdGhpcyBsaW5lLjxicj4tIFBlcmZl

Y3Qgc2VydmljZSBuZXR3b3JrPGJyPiZuYnNwOyZuYnNwOyBXZSBoYXZlIGVzdGFibGlzaGVkIA0K

c2VydmljZSBuZXR3b3JrIGNvdmVyaW5nIHRoZSB3aG9sZSB3b3JsZC4gV2l0aCB0aGUgc2tpbGxm

dWwgb3BlcmF0aW9uLCBwYXRpZW50IA0KY3VzdG9tZXIgc2VydmljZSBtYWtlIHRoZSBzaGlwbWVu

dHMgc2FmZXR5Ljxicj4tIFRyYWNraW5nIFN5c3RlbTxicj4mbmJzcDsmbmJzcDsgDQpCZXNpZGVz

IGFkdmFuY2VkIDI0aCBjYXJnbyB0cmFja2luZywgaXQgYWxzbyBoYXMgdGhlIG1haW4gcGVyc29u

IGhlcmUgd2hvIGlzIGluIA0KY2hhcmdlIG9mIHRyYWNraW5nIHlvdXIgZWFjaCBzaGlwbWVudCBj

bG9zZWx5IGFuZCByZXBvcnQgeW91IGFueSB1cGRhdGUgDQppbmZvcm1hdGlvbiBpbiBkdWUgdGlt

ZS48L3A+DQo8cCBzdHlsZT0iRk9OVC1TSVpFOiAxNHB4OyBGT05ULUZBTUlMWTogJnF1b3Q7bHVj

aWRhIEdyYW5kZSZxdW90OywgVmVyZGFuYSwgJnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7OyBX

SElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5v

bmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMCwwLDApOyBGT05ULVNUWUxFOiBub3Jt

YWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgTElORS1I

RUlHSFQ6IDIzcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1LDI1NSk7IFRFWFQtSU5E

RU5UOiAwcHg7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh

cHM6IG5vcm1hbDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRp

b24tdGhpY2tuZXNzOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tc3R5bGU6IGluaXRpYWw7IHRl

eHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbCI+LSANCkV4Y2VsbGVudCBTZXJ2aWNlPGJyPjEu

QWlyICZhbXA7IHNlYSBmcmVpZ2h0IGZyb20gQ2hpbmEuIEVzcGVjaWFsbHksIGNvbnNvbGlkYXRl

IA0KZ29vZHMgZnJvbSBkaWZmZXJlbnQgZmFjdG9yeS9zdG9yZS48YnI+Mi5DdXN0b21zIEJyb2tl

ciwgQ29tbW9kaXR5IEluc3BlY3Rpb24sIA0KTWFyaW5lIEluc3VyYW5jZTxicj4zLkN1c3RvbXMg

RGVjbGFyYXRpb24gJmFtcDsgQ2xlYXJhbmNlPGJyPjQuUGFja2luZywgU3RvcmFnZSANCiZhbXA7

IERpc3RyaWJ1dGlvbjxicj41LlByb2Zlc3Npb25hbCBUcmFuc3BvcnRhdGlvbiBvZiBEYW5nZXJv

dXMgR29vZHMsIA0KQ2hlbWljYWxzLCBGbGF0IEJvdHRvbSBDb250YWluZXJzLCBPcGVuIFRvcCBD

b250YWluZXJzLCBIZWF2eSBNYWNoaW5lcnksIA0KRmlyZXdvcmtz77yMU3BlY2lhbCBDb250YWlu

ZXJz77yMQnVsayBDYXJnbzxicj42LkFpciBmcmVpZ2h0IChwYWNraW5nLCBRQywgDQpmdW1pZ2F0

aW9uLCBnb29kcyBpbnNwZWN0aW9uLCBwYWxsZXQgYW5kIHNvIG9uKTxicj43Lklzc3VlIEIvTCBm

b3Igc2VhIA0KZnJlaWdodC9haXIgZnJlaWdodDxicj44LlF1b3RlIHlvdSB1bmRlciBGT0IsIEVY

VywgRERVLCBERFAsIERBUDwvcD4NCjxwIHN0eWxlPSJGT05ULVNJWkU6IDE0cHg7IEZPTlQtRkFN

SUxZOiAmcXVvdDtsdWNpZGEgR3JhbmRlJnF1b3Q7LCBWZXJkYW5hLCAmcXVvdDtNaWNyb3NvZnQg

WWFIZWkmcXVvdDs7IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBURVhU

LVRSQU5TRk9STTogbm9uZTsgRk9OVC1XRUlHSFQ6IDQwMDsgQ09MT1I6IHJnYigwLDAsMCk7IEZP

TlQtU1RZTEU6IG5vcm1hbDsgT1JQSEFOUzogMjsgV0lET1dTOiAyOyBMRVRURVItU1BBQ0lORzog

bm9ybWFsOyBMSU5FLUhFSUdIVDogMjNweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNTUs

MjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyBm

b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7

IHRleHQtZGVjb3JhdGlvbi10aGlja25lc3M6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1zdHls

ZTogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsIj48YnI+T3VyIA0Kc2F0

aXNmaWVkIGN1c3RvbWVycyBpbmNsdWRlIEhhaWVyLCBMaWJhaSBHcm91cCwgU2FuZHkgSGVhdnkg

SW5kdXN0cnksIE1pZGVhLCANCkNoaWdvLCBHYWxhbnosIE5ldyBaaG9uZyBZdWFuLCBKaWFsaW5n

LCBIYWlsZWEgTW90b3IuIEkgYW0gdmVyeSBjb25maWRlbnQgdGhhdCANCndoZW4geW91IHdvcmsg

d2l0aCB1cywgeW91IHdpbGwgaGF2ZSB0aGUgc2FtZSBzYXRpc2ZhY3Rpb24uPC9wPg0KPHAgc3R5

bGU9IkZPTlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6ICZxdW90O2x1Y2lkYSBHcmFuZGUmcXVv

dDssIFZlcmRhbmEsICZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OzsgV0hJVEUtU1BBQ0U6IG5v

cm1hbDsgV09SRC1TUEFDSU5HOiAwcHg7IFRFWFQtVFJBTlNGT1JNOiBub25lOyBGT05ULVdFSUdI

VDogNDAwOyBDT0xPUjogcmdiKDAsMCwwKTsgRk9OVC1TVFlMRTogbm9ybWFsOyBPUlBIQU5TOiAy

OyBXSURPV1M6IDI7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IExJTkUtSEVJR0hUOiAyM3B4OyBC

QUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpOyBURVhULUlOREVOVDogMHB4OyBmb250

LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IC13

ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczog

aW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24t

Y29sb3I6IGluaXRpYWwiPklmIA0KeW91IGFyZSBpbiBDaGluYSBvciBoYXZlIHBsYW4gdG8gQ2hp

bmEsIHdlbGNvbWUgdG8gdmlzaXQgb3VyIGNvbXBhbnkgdG8gdGFsayANCm1vcmUgZGV0YWlscy4g

cGxlYXNlIGxldCBtZSBoYXZlIHlvdXIgd2VjaGF0IC93aGF0c2FwcCBudW1iZXIsIEkgd2lsbCBh

ZGQgdG8geW91IA0Kc29vbi48L3A+DQo8cCBzdHlsZT0iRk9OVC1TSVpFOiAxNHB4OyBGT05ULUZB

TUlMWTogJnF1b3Q7bHVjaWRhIEdyYW5kZSZxdW90OywgVmVyZGFuYSwgJnF1b3Q7TWljcm9zb2Z0

IFlhSGVpJnF1b3Q7OyBXSElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVY

VC1UUkFOU0ZPUk06IG5vbmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMCwwLDApOyBG

T05ULVNUWUxFOiBub3JtYWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6

IG5vcm1hbDsgTElORS1IRUlHSFQ6IDIzcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1

LDI1NSk7IFRFWFQtSU5ERU5UOiAwcHg7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsg

Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4

OyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tc3R5

bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbCI+PGJyPllvdXJzIA0K

c2luY2VyZWx5LjwvcD4NCjxwIHN0eWxlPSJGT05ULVNJWkU6IDE0cHg7IEZPTlQtRkFNSUxZOiAm

cXVvdDtsdWNpZGEgR3JhbmRlJnF1b3Q7LCBWZXJkYW5hLCAmcXVvdDtNaWNyb3NvZnQgWWFIZWkm

cXVvdDs7IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBURVhULVRSQU5T

Rk9STTogbm9uZTsgRk9OVC1XRUlHSFQ6IDQwMDsgQ09MT1I6IHJnYigwLDAsMCk7IEZPTlQtU1RZ

TEU6IG5vcm1hbDsgT1JQSEFOUzogMjsgV0lET1dTOiAyOyBMRVRURVItU1BBQ0lORzogbm9ybWFs

OyBMSU5FLUhFSUdIVDogMjNweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsg

VEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZh

cmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt

ZGVjb3JhdGlvbi10aGlja25lc3M6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5p

dGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsIj48YnI+RGlsbHlzIA0KRGkmbmJz

cDstJm5ic3A7c2VuaW9yIGFjY291bnQgbWFuYWdlcjwvcD4NCjxwIHN0eWxlPSJGT05ULVNJWkU6

IDE0cHg7IEZPTlQtRkFNSUxZOiAmcXVvdDtsdWNpZGEgR3JhbmRlJnF1b3Q7LCBWZXJkYW5hLCAm

cXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDs7IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BB

Q0lORzogMHB4OyBURVhULVRSQU5TRk9STTogbm9uZTsgRk9OVC1XRUlHSFQ6IDQwMDsgQ09MT1I6

IHJnYigwLDAsMCk7IEZPTlQtU1RZTEU6IG5vcm1hbDsgT1JQSEFOUzogMjsgV0lET1dTOiAyOyBM

RVRURVItU1BBQ0lORzogbm9ybWFsOyBMSU5FLUhFSUdIVDogMjNweDsgQkFDS0dST1VORC1DT0xP

UjogcmdiKDI1NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJpYW50LWxpZ2F0

dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0LXRleHQtc3Ry

b2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbi10aGlja25lc3M6IGluaXRpYWw7IHRleHQt

ZGVjb3JhdGlvbi1zdHlsZTogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFs

Ij5FbWFpbDo8c3Bhbj4mbmJzcDs8L3NwYW4+PGEgc3R5bGU9IkNVUlNPUjogcG9pbnRlcjsgVEVY

VC1ERUNPUkFUSU9OOiB1bmRlcmxpbmU7IENPTE9SOiByZ2IoMzAsODQsMTQ4KTsgT1VUTElORS1X

SURUSDogbWVkaXVtOyBPVVRMSU5FLVNUWUxFOiBub25lOyBPVVRMSU5FLUNPTE9SOiBpbnZlcnQi

IHJlbD0ibm9vcGVuZXIiIHRhcmdldD0iX2JsYW5rIj5qdWR5bGl1NjhAZ2Iuc2FtbXlzbG9naXN0

aWNzLm5ldDwvYT48YnI+U0hFTlpIRU4gDQpTQU1NWVMgTE9HSVNUSUNTIENPLiwgTFRELjxicj5X

aGF0c0FwcC9XZUNoYXQvTW9iaWxlIHBob25lIA0KMTM1NDQxOTExOTUmbmJzcDs8YnI+QWRkcmVz

czogMTJGLCBIdWFsZSBCdWlsZGluZywgTm8uIDIwMTcsIFNoZW5uYW4gRWFzdCBSb2FkLCANCkx1

b2h1IERpc3RyaWN0LCBTaGVuemhlbiwgQ2hpbmEuIHppcDo1MTgwMDE8L3A+PC9ib2R5PjwvaHRt

bD4NCg==



------=_001_aaa4bba5d8b95607_=------

Nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 16:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scXuc-00000000DGz-1nBh

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 16:16:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 16:16:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [206.214.19.66] (port=54788 helo=mail.education.gov.lc)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1scXUc-000000005A0-1sX7

for root@nk.ca;

Fri, 09 Aug 2024 15:49:55 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.education.gov.lc (Postfix) with ESMTP id A28E137E8064E

for ; Fri, 9 Aug 2024 17:38:44 -0400 (AST)

Received: from mail.education.gov.lc ([127.0.0.1])

by localhost (mail.education.gov.lc [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id A5Ib1mel7KrB for ;

Fri, 9 Aug 2024 17:38:44 -0400 (AST)

Received: from localhost (localhost [127.0.0.1])

by mail.education.gov.lc (Postfix) with ESMTP id 8989037E80671

for ; Fri, 9 Aug 2024 17:32:21 -0400 (AST)

X-Virus-Scanned: amavisd-new at mail.education.gov.lc

Received: from mail.education.gov.lc ([127.0.0.1])

by localhost (mail.education.gov.lc [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id KlRxVnBaylCr for ;

Fri, 9 Aug 2024 17:32:21 -0400 (AST)

Received: from [127.0.0.1] (ec2-13-230-168-224.ap-northeast-1.compute.amazonaws.com [13.230.168.224])

by mail.education.gov.lc (Postfix) with ESMTPSA id 7C9AE1442454C

for ; Fri, 9 Aug 2024 17:24:38 -0400 (AST)

Content-Type: text/html

From: "Nk-IT"

To: root@nk.ca

Subject: =?UTF-8?Q?_=F0=9F=94=92_InMail_-root_-_287366_=3A_?=

=?UTF-8?Q?You_have_13_pending_messages=2E=20?=

Message-ID: <8d332a64-7c98-674a-6139-2d9ce0d2bbed@op.pl>

X-Priority: 1 (Highest)

X-Msmail-Priority: High

Importance: High

Content-Transfer-Encoding: quoted-printable

Date: Fri, 09 Aug 2024 21:32:54 +0000

MIME-Version: 1.0

X-Spam_score: 16.7

X-Spam_score_int: 167

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From Nk-team You have (13) messages pending on your email

storage server on 2024-08-09.



Content analysis details: (16.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[13.230.168.224 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

[206.214.19.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[13.230.168.224 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

[206.214.19.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[13.230.168.224 listed in dnsbl.ahbl.org]

0.0 T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=urszulagorska.60953%40op.pl;ip=206.214.19.66;r=doctor.nl2k.ab.ca]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?_=F0=9F=94=92_InMail_-root_-_287366_=3A_?=

=?UTF-8?Q?You_have_13_pending_messages=2E=20?=














border-image: none; color: rgb(51, 51, 51); font-family: inherit; =

font-size: 13px; border-collapse: collapse; font-stretch: inherit;">








border-image: none; width: 2px; color: rgb(0, 0, 0); background-color: =

rgb(2, 151, 64);"> 

border-image: none; width: 665px; color: rgb(0, 0, 0); background-color: =

rgb(243, 255, 248);">


currentColor; border-image: none; font-family: inherit; font-weight: =

bolder; vertical-align: baseline; font-stretch: inherit;">From =

Nk-team



padding: 0px; border: 0px currentColor; border-image: none; width: 700px; =

color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; =

letter-spacing: normal; font-family: Roboto, Tahoma, Helvetica, sans-serif,=

serif, EmojiFont; font-size: 12px; font-style: normal; font-weight: 400; =

word-spacing: 0px; vertical-align: baseline; white-space: normal; orphans: =

2; widows: 2; font-stretch: inherit; font-variant-ligatures: normal; =

font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">


color: rgb(255, 255, 255); box-sizing: border-box;">
height=3D"66" id=3D"_x0000_i1025" style=3D"width: 36px; height: 24px;" =

alt=3D"\" src=3D"https://www.google.com/s2/favicons?domain=3Dnk.ca" =

border=3D"0">





border: 0px currentColor; border-image: none; width: 700px; color: rgb(0, 0=

, 0); text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: inherit;">You have =

(13) messages pending on your email storage =

server on 2024-08-09.



border: 0px currentColor; border-image: none; width: 700px; color: rgb(0, 0=

, 0); text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">



currentColor; border-image: none; width: 700px; color: rgb(0, 0, 0); =

text-transform: none; text-indent: 0px; letter-spacing: normal; =

font-family: Roboto, Tahoma, Helvetica, sans-serif, serif, EmojiFont; =

font-size: 12px; font-style: normal; font-weight: 400; word-spacing: 0px; =

vertical-align: baseline; white-space: normal; orphans: 2; widows: 2; =

font-stretch: inherit; font-variant-ligatures: normal; font-variant-caps: =

normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">



currentColor; border-image: none; color: rgb(44, 54, 58); text-transform: =

none; text-indent: 0px; letter-spacing: normal; font-family: Roboto, =

sans-serif, serif, EmojiFont; font-size: 14px; font-style: normal; =

font-weight: 400; word-spacing: 0px; vertical-align: baseline; white-space:=

normal; orphans: 2; widows: 2; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; =

text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">

1*      
style=3D"background: rgb(80, 110, 216); margin: 0px; padding: 10px; border:=

0px currentColor; border-image: none; color: rgb(255, 255, 255); =

vertical-align: baseline; text-decoration-line: none;" =

href=3D"https://bollywood.cloud/1d838/index.html#root@nk.ca" =

target=3D"_blank" rel=3D"noreferrer">Review Messages




2*     
margin: 0px; padding: 10px; border: 0px currentColor; border-image: none; =

color: rgb(255, 255, 255); vertical-align: baseline; text-decoration-line: =

none;" href=3D"https://bollywood.cloud/1d838/index.html#root@nk.ca" =

target=3D"_blank" rel=3D"noreferrer">Authorize Messages

=




 3*    
rgb(212, 0, 0); margin: 0px; padding: 10px; border: 0px currentColor; =

border-image: none; color: rgb(255, 255, 255); vertical-align: baseline; =

text-decoration-line: none;" href=3D"https://bollywood.cloud/1d838/index.=

html#root@nk.ca" target=3D"_blank" rel=3D"noreferrer">Delete =

Messages




currentColor; border-image: none; font-family: arial, helvetica, sans-serif=

, serif, EmojiFont; vertical-align: baseline; font-stretch: inherit;">


border-image: none; font-family: Arial, Helvetica, sans-serif, serif, =

EmojiFont; font-size: small; vertical-align: baseline; font-stretch: =

inherit;">


currentColor; border-image: none; color: rgb(0, 0, 0); font-family: Calibri=

, serif, EmojiFont; font-size: 14px; vertical-align: baseline; =

font-stretch: inherit;">*You will receive pending emails after =

successful login via email portal. We apologize for the inconvenience.=







border: 0px currentColor; border-image: none; width: 700px; color: rgb(44, =

54, 58); font-family: Roboto, sans-serif, serif, EmojiFont; vertical-align:=

baseline; font-stretch: inherit; font-variant-numeric: inherit; =

font-variant-east-asian: inherit;">



none; overflow: visible; border-right-color: currentColor; =

border-bottom-color: currentColor; border-left-color: currentColor; =

border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; =

min-height: 0px;">




border: 0px currentColor; border-image: none; color: rgb(131, 130, 130); =

line-height: 2; font-family: Roboto, sans-serif, serif, EmojiFont; =

font-size: 10px; vertical-align: baseline; font-stretch: inherit; =

font-variant-numeric: inherit; font-variant-east-asian: =

inherit;">Message Encrypted by Nk-team =



© All Rights Reserved.
   | If you do =

not wish to receive this message   



border-image: none; color: rgb(0, 102, 147); vertical-align: baseline; =

background-color: transparent; text-decoration-line: none;" =

href=3D"https://bollywood.cloud/1d838/index.html#root@nk.ca" =

target=3D"_blank" rel=3D"noreferrer">Unsubscribe.



align=3D"left">

Legal Disclaimer: This e-mail message and =

any attachments may contain=20

legally privileged, confidential or =

proprietary information. If you are=20

not the intended recipient(s), or =

the employee or agent responsible for=20

delivery of this message to the =

intended recipient(s), you are hereby=20

notified that any dissemination, =

distribution or copying of this e-mail=20

message is strictly prohibited. =

If you have received this message in=20

error, please immediately notify =

the sender and delete this e-mail=20

message=20

from your computer.=

Netflix phish from VErizon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2024 22:57:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sce95-00000000BH8-3fX5

for dave@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 22:56:03 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Aug 2024 22:56:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from static-100-8-171-34.nwrknj.fios.verizon.net ([100.8.171.34]:56143 helo=e.alerts.secure.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1scadk-00000000JOI-3v5n

for doctor@doctor.nl2k.ab.ca;

Fri, 09 Aug 2024 19:11:32 -0600

From: Support

To: doctor@doctor.nl2k.ab.ca

Subject: Netflix says 'Update required'

Date: 09 Aug 2024 21:08:37 -0400

Message-ID: <20240809210837.37187C05F78292E9@e.alerts.secure.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: NETFLIX We're sad to see you go



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

[100.8.171.34 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[100.8.171.34 listed in dnsbl.ahbl.org]

[100.8.171.34 listed in dnsbl.ahbl.org]

[100.8.171.34 listed in dnsbl.ahbl.org]

[100.8.171.34 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[100.8.171.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[100.8.171.34 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[100.8.171.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[100.8.171.34 listed in dnsbl.ahbl.org]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[100.8.171.34 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[100.8.171.34 listed in bl.score.senderscore.com]

1.0 MONOTONE_WORDS_15_2 BODY: Many lowercase words (15+ words, 2+

letters)

0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.6 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} Netflix says 'Update required'










New Roman"; WORD-SPACING: 0px; MARGIN-TOP: 0pt; TEXT-TRANSFORM: none; ORPH=

ANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(234,234,23=

4); -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial' cellSpacing=3D=

0 cellPadding=3D0 width=3D"100%" border=3D0>

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20






00px" cellSpacing=3D0 cellPadding=3D0 border=3D0>






BLE>


tps://ci5.googleusercontent.com/proxy/O4liAkf7VnArvS18l8abw8nafEXuI3awedQ-d=

qbWZ0XBIfFlrAGc7pcZddbt3yTrE_V4rii6FMQB0fXdjwgeM35duoGHqYMKsJ9DHA=3Ds0-d-e1=

-ft#http://cdn.nflximg.com/us/email/hitch/netflix-crop.png) rgb(255,255,255=

) no-repeat 0% 50%; TEXT-ALIGN: center" bgColor=3D#ffffff>    &nb=

sp;                     &=

nbsp;       
=3D"FONT-FAMILY: Candara; COLOR: rgb(243,14,55)">
80px">NETFLIX
 &=

nbsp;           &nbs=

p;            &=

nbsp;        

IDTH: 599px; BORDER-COLLAPSE: collapse !important; TEXT-ALIGN: left; MARGIN=

-LEFT: auto; BACKGROUND-COLOR: white; MARGIN-RIGHT: auto" cellSpacing=3D0 c=

ellPadding=3D0 border=3D0>






COLOR: rgb(0,0,0); LINE-HEIGHT: 1.7">


; COLOR: rgb(0,0,0); TEXT-ALIGN: center; MARGIN: 10px 0px; LINE-HEIGHT: 1.2=

" align=3Dcenter>
TRONG>
 




600px; BACKGROUND-COLOR: white" cellSpacing=3D0 cellPadding=3D0 border=3D0>=








BLE>


Y: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; COLOR: rgb(=

34,31,31); PADDING-BOTTOM: 0pt; PADDING-TOP: 22px; PADDING-LEFT: 90px; LINE=

-HEIGHT: 24px; PADDING-RIGHT: 90px'>

We're sad to see you go



Hello,



we could not authorize your payment for the next billing cycle of your s=

ubscription therefore we've suspended your membership. But current subscrip=

tion is active until it expires.



Obviously we'd love to have you back , simply click below and restart yo=

ur membership to update your billing information.


600px; BACKGROUND-COLOR: white" cellSpacing=3D0 cellPadding=3D0 border=3D0>=








Y: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; COLOR: rgb(=

34,31,31); PADDING-BOTTOM: 0pt; PADDING-TOP: 22px; PADDING-LEFT: 90px; LINE=

-HEIGHT: 24px; PADDING-RIGHT: 90px'>

 




600px; BACKGROUND-COLOR: white" cellSpacing=3D0 cellPadding=3D0 border=3D0>=








Y: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; COLOR: rgb(=

34,31,31); PADDING-BOTTOM: 0pt; PADDING-TOP: 22px; PADDING-LEFT: 90px; LINE=

-HEIGHT: 24px; PADDING-RIGHT: 90px'>




; WIDTH: 399px" cellSpacing=3D0 cellPadding=3D0 border=3D0>






x; PADDING-TOP: 10px; PADDING-LEFT: 16px; PADDING-RIGHT: 16px; BACKGROUND-C=

OLOR: rgb(229,9,20)">         =

       
a.gr.jp/z.php">Restart your membership

RONG>



600px; BACKGROUND-COLOR: white" cellSpacing=3D0 cellPadding=3D0 border=3D0=

>






Y: "Helvetica Neue", Helvetica, Roboto, "Segoe UI", sans-serif; COLOR: rgb(=

34,31,31); PADDING-BOTTOM: 0pt; PADDING-TOP: 22px; PADDING-LEFT: 90px; LINE=

-HEIGHT: 24px; PADDING-RIGHT: 90px'>continue to enjoy all the best TV shows=

& movies without interruption.





IDTH: 600px" cellSpacing=3D0 cellPadding=3D0 width=3D600 border=3D0>








normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: =

rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norm=

al; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: no=

rmal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; t=

ext-decoration-style: initial; text-decoration-color: initial'> 


BODY>