Amazon Phish from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 29 Dec 2023 16:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1rJMKm-000000006QA-2qSN
for dave@doctor.nl2k.ab.ca;
Fri, 29 Dec 2023 16:32:08 -0700
Resent-From: The Doctor
Resent-Date: Fri, 29 Dec 2023 16:32:08 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-db3eur04on2107.outbound.protection.outlook.com ([40.107.6.107]:24198 helo=EUR04-DB3-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1rJF5i-00000000287-2Wui
for root@nk.ca;
Fri, 29 Dec 2023 08:48:11 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=VqAKbg4Edgqfz4398X+4ARQv8OsB/k3cwO5etUkRfUroq3qugrRipk+CB89jPs3uj0Xe2ad0eE/zR4Uevw9Tpf4z0ZtmoI/jOVqFC3YMcLvo0C9cJKgdKsfuF3pfenwi0gSr52MluX6AQtqJx1EXKzfa6lT1Rq4qlWzg3jVo4ItNNN501DdVRjAB3wjiXApMZ4o5FqZPkwU4y8JaVbf9cjB9vxzEVMz0X97/WkYc90WNtB2LTdvtjMgk7XVuRj7GI6R8ivsIH1E3znrRBJgVVEBpyXKgrfWv4bvD0Kf9zna4/29n2W9nQRsrjA/4q9u3wSMy6PVmLz8MUzhvv+5POg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=uxuQfi2Du1oVktREnN4Sx+v9apwhdfgjrH+7sdPbkKk=;
b=HySym9aLGm4YuKFATeA1YjDKsV0TRnLKQYUeKUVCQ2SYP0tLd4pHSZBiGzRcwZq1OItlFNV9BupRIfx8XJRkkgCTA2FR5l3LFxp2kTP/AQKq3xN5d35KnCdP49uQkKdM9VEfCVVc+9VlJy8lrZ/lc/87y6gThdIH7SWYISaBdVx3NXdCITlQNpUGdIyZWPByn2zEpeIYWqyYjWFSJ1UJ6DVNj6Ev0qOB+11e9Ujai/CB8EZhRfO9FiB/KetThgIbvRxnE+fj8xrqA+vcMjdcU9b9OLpJPzGCL2w9ziUOT4EfUFtBwlweSZMa6dlZsi1X4Arn6Xtv7siMwS3KYWfLHg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=abonoorganicoaboplant.com; dmarc=pass action=none
header.from=abonoorganicoaboplant.com; dkim=pass
header.d=abonoorganicoaboplant.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=psp4radomsko.onmicrosoft.com; s=selector1-psp4radomsko-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=uxuQfi2Du1oVktREnN4Sx+v9apwhdfgjrH+7sdPbkKk=;
b=mCn/7XubVYeYZwVEf04qQCm612eHbgcXxTGm3YGp0//6cS7neJOExyNiymoMZ4IbiqC1eWobtdF0L0U5bJhDpF5TT36kLTNkL6bM8++QGRzQZ+dcKdVLEvbPOxAQJFdpj4UU9+kOIYUo9X8Hm1Lu3659LHgis1xd1Chs1DWgHQcZ+tUXZ3HsNxP9cwSR7Ewo2DDKqikY1+3EU1AE++EDEpXntZTyqtJAeUgdjIemQKEcvnBUrm+qEo4xttgDtpCc5ljgcNPuq0LPFQ3oGHqRPtgIaK4AfTCdPaCpUJ/QEIcpSS+1SneZJmJgduGMrrFVE+ZSHzS/C0b85SxUP00sqw==
Authentication-Results: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=abonoorganicoaboplant.com;
Received: from AM0PR08MB5140.eurprd08.prod.outlook.com (2603:10a6:208:162::17)
by AS2PR08MB9692.eurprd08.prod.outlook.com (2603:10a6:20b:604::20) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7135.19; Fri, 29 Dec
2023 15:45:58 +0000
Received: from AM0PR08MB5140.eurprd08.prod.outlook.com
([fe80::1930:63ed:4432:b007]) by AM0PR08MB5140.eurprd08.prod.outlook.com
([fe80::1930:63ed:4432:b007%7]) with mapi id 15.20.7135.019; Fri, 29 Dec 2023
15:45:58 +0000
Date: Fri, 29 Dec 2023 22:45:54 +0700
To: root@nk.ca
From: Tech Responsibilities
Subject: It seems like you just logged in in an unusual place recently - Fri, December 29, 2023 10:45 PM
Message-ID:
X-Mailer: WebService/1.1.18291 YMailNorrin Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-ClientProxiedBy: SJ0PR03CA0148.namprd03.prod.outlook.com
(2603:10b6:a03:33c::33) To AM0PR08MB5140.eurprd08.prod.outlook.com
(2603:10a6:208:162::17)
Importance: high
X-Priority: 1
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM0PR08MB5140:EE_|AS2PR08MB9692:EE_
X-MS-Office365-Filtering-Correlation-Id: c9d3ae87-4b7c-4ff7-fc00-08dc0885402c
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM0PR08MB5140.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(346002)(366004)(396003)(376002)(39860400002)(136003)(230922051799003)(186009)(64100799003)(451199024)(1690799017)(1800799012)(2906002)(66476007)(6916009)(66946007)(5660300002)(66556008)(4744005)(8676002)(8936002)(316002)(41320700001)(41300700001)(6506007)(86362001)(786003)(9686003)(6486002)(52116002)(55236004)(478600001)(26005)(76236004)(6512007)(38350700005)(83380400001)(38100700002)(6666004)(16799955002)(166002)(61276011);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?cmd1azBBaUdFczVlL0lZR1MvajJUaUNpWmRXN3FLd2JIVi83NHdHcjMyZXBU?=
=?utf-8?B?eDc2bEQyTUkrVGV2MlJxaXdvQVpPVFFnellhOWhic3lITVIySWloUEpDSFBC?=
=?utf-8?B?NC81UmZCRW5VR213c1dxZXNraENwVDA5VWE3L3pFUHZaaXdPTVRmdnlwT1ZD?=
=?utf-8?B?VHNyTE9PSFNnVWJvVk9hUStZcVdGeTFaTktRQmNsZWZXTk5Xai9uRm4wT252?=
=?utf-8?B?dWRLNTA3ZWRMaVJVYXZaQmI1S1RSUUh3Um0rODRKSlhjUm9qcnpqMlBNVzJT?=
=?utf-8?B?b2cydGgvMDkyQlI4dTVYNEViVHIzclpza2tuU0NxS3AydDFFYWFpa25ueSs3?=
=?utf-8?B?U0lpR0UySHdCdWhrWDdaREN2ejZsUVNESjB1YzNZRmh4bGhSanNSWkVkODhK?=
=?utf-8?B?TU52a2c0Q3ZMOUxvZTA4SUozQkRaNmhXeUF6VnhqNEs4bmwvL0czbUNXWEFP?=
=?utf-8?B?U0RIOE1ORFozK0h3L0RhL3FxSG1UalU3VmdZdWUyOEdZaWpKVm54QVMvQjFI?=
=?utf-8?B?b1kvQkw3eC9sd20ySlY5aStIVXN4TnR6OWhhM0lQQXlURzQ0K0o1cnFXZ1dM?=
=?utf-8?B?c3c4OE5OZjZzMEllMHJNaElQVFlsdjc4UzdYRkxWckd4WTJxQVdXaEorY1RL?=
=?utf-8?B?REI5NXdVenk0TXFvRTIzSXJkK1RZNG1jZDhrTXBUYzIrTlo5by9UWmZWZ2lS?=
=?utf-8?B?dnBFM1VZNWJMNkJSSnd3WEk3YzN1K0ZDSk14TmtGRXptM2VYRmZycHB1UmhC?=
=?utf-8?B?UVRFZTB1cnVRc2ZEYVQrU1hGNlpGV3RCc0U1aEVUUTZiTmlHOUVleHhCUlBL?=
=?utf-8?B?aHBHWE9EMXdITVY4WmJDdlF5b09oQlBhODQrUCtwalhuOHpwSTNJeVRNdzFq?=
=?utf-8?B?Q0h3ZGxrU3JoQWF3ODlKK3dJSW5jaTBWMTJyWDNWZE1lMjNRRXZRa1lGSWZw?=
=?utf-8?B?a0FWR050cjVhMFFJS3JZRjBST0xSR2lLYm5GM3ZVaDlXNGpPT1NGQ1IzNDNR?=
=?utf-8?B?a0lieFlMcE9vNU9Jb0ZPQ04wQklWa25DTUlNSkduSm11UkcybzN4OXNKWkth?=
=?utf-8?B?R2QxaVordlRIVGZzc2QvNWQ3eHdiOUVHZlZ0QVZGbXFhVkZxUFJtNmpsUW1T?=
=?utf-8?B?ZVZZVkJsa2x3SVZiNG9wUWtCYnB2dHUycUs3eEo1STFNdVhDLzRzRUxXR0M5?=
=?utf-8?B?ZS80KzBQSDQ4am1yUmVpaHNRb1dDdmtiZnBnNXMxdUZMVnFKaTllSU9tR3VX?=
=?utf-8?B?cUoxbHpEM0dIQ2QrV2g3SE5xVlR1Z2sxU1ZvalhCWElFQnl4QnYya1EwUEVj?=
=?utf-8?B?RDF1QUpMOWdGWitndXFYdUw3WDhQMXZQNFZXZ1hsbUZCZUZOVTdpQzlPMkRL?=
=?utf-8?B?REtiWU0xNURmWTdjT2lobU52Ynd3Q3U4em5WVGdDT0MxNGo3MGxqUXhqUHVL?=
=?utf-8?B?YUFJNFVMLzkzK2ZmK0pFUi9USElBTDRRMmJRTmRzb1FUTklZMXI3b09zN0lK?=
=?utf-8?B?SW12cmQ4RnZMNTMzK1RJcDEvRnZWaEtZMnhvNUdZVzZrb3JuRmJIUE5YOEEz?=
=?utf-8?B?aTArbWFVelMxUTNqdVl6cUhqK1JUbnYwdG9kSFY3NERNN0RkL1J0VzBmc21Y?=
=?utf-8?B?WkhoRDdQZXY0YVo0QWNTVWtFWStLay9PaDB3aXZCNHhQNGFIdFEvZEsra1RF?=
=?utf-8?B?US9VcVRmdldtMDc4Y05WMGNzSm1KOFhKRnp3Q1B3b0ZXbUpkSFF6MkVpTWh1?=
=?utf-8?B?Q2tobE51dS9seWUvY0l0L0F4N0RzNEtjVmdnemhHajdnU0xYNUEzTDhsMDMy?=
=?utf-8?B?NmgxcjNYa0Nwc0w3YTVrOVJ1ZXU2bytGaTNJRnFJVlFxaVNCNGhMNml1czB5?=
=?utf-8?B?YzFpZU5HOG5hVmVLQkxrMDJudWl6VGpEZlc1UmxDbGRIcmg3cFJLM1JzNUN4?=
=?utf-8?B?YnZxaUVvWEV5RmpQSHVZaVpPeGJwb2pMR0FnSHViTVVkejNTcktvK3laVDNI?=
=?utf-8?B?aVllekdndUlreXNZVlA3TWdJVU9IYVFaK0x1djVWeWxGVkpPa0hLaFFuUUhZ?=
=?utf-8?B?eisxSXhYb2NiaGNJTXZDNzcwNTNGUEFrMk8zZkt5aU1Vdkt5M0NPMVJHbmli?=
=?utf-8?B?R1ViZzM4Y1FDVmN6SmxBUmI1dEhOTGx3ZVEzSGhrek9pTFRSSGxvdTY1VGc5?=
=?utf-8?B?OEhxY2RiYzRvMUtHK28zUkR2KzNPL1pSUDBHYXdDMGlRVFBpNkhjODVEOFlu?=
=?utf-8?B?anZZcXAxTVpMRHo5UFBCYWd2alRBPT0=?=
X-OriginatorOrg: abonoorganicoaboplant.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c9d3ae87-4b7c-4ff7-fc00-08dc0885402c
X-MS-Exchange-CrossTenant-AuthSource: AM0PR08MB5140.eurprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 15:45:58.1451
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: c20ddd07-a923-4494-acfb-8c728f876222
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: v5DO94kN5UZEfkUNeP7gi4KfDQ1G4SuX976k5Dk3mm9m7xdGnj7vzABa/SZgDqP/UpzhGn/GOYAL3MRVRIeXU8RmvtCasg8z+5bXrsUFbvWKY19G3pawFSHubvw8pwSncRxTTErO/X/Xe8cchTwaOHjPFJpI2NuEuPbjyT8UBqg=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR08MB9692
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear root@nk.á´„a, Î¥oÏ…r Αmazon aá´„á´„oÏ…nt is temÏorarily
on holɗ beᴄaυse of an υnυsυal login. Αboυt this ᴄhange Ϝri, Deᴄember
29, 2023 10:45 ΡΜ ΑroÏ…nÉ— ÏœloriÉ—a, UniteÉ— Õta [...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.107.6.107 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.107.6.107 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_SIGNED Message has a ARC signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.5 FUZZY_AMAZON BODY: Obfuscated "amazon"
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 AMAZON_IMG_NOT_RCVD_AMZN Amazon hosted image but message not from
Amazon
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla
Subject: {SPAM?} It seems like you just logged in in an unusual place recently - Fri, December 29, 2023 10:45 PM
X-Antivirus: AVG (VPS 231229-4, 12/29/2023), Inbound message
X-Antivirus-Status: Clean
body>
g=3D"0" cellpadding=3D"0" align=3D"center" style=3D"border-collapse:collaps=
e">
30px;margin:0 auto" dir=3D"ltr" bgcolor=3D"#ffffff">
lspacing=3D"0" cellpadding=3D"0" align=3D"center" id=3D"m_-4190993533000013=
413email_table" style=3D"border-collapse:collapse;max-width:630px;margin:0 =
auto">
nt-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-=
serif;background:#ffffff">
"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
ght=3D"20" style=3D"line-height:20px" colspan=3D"3">
t=3D"1" colspan=3D"3" style=3D"line-height:1px">
15" style=3D"display:block;width:15px">
=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:coll=
apse">
>
eight:32;line-height:0px">
com/images/G/01/authportal/tiv/amazon_logo_RGB._CB424887820_.png" height=3D=
"32" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit">
"15" style=3D"display:block;width:15px">
=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial=
,sans-serif;font-size:19px;line-height:32px;color:#ffffff">
>
ine-height:15px" colspan=3D"3">
15" style=3D"display:block;width:15px">
=3D"display:block;width:15px">
ellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
y>
class=3D"m_-4190993533000013413mb_text" style=3D"font-family:Helvetica Neue=
,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;lin=
e-height:21px;color:#141823">Dear root@nk.=E1=B4=84a,<=
td height=3D"15" style=3D"line-height:15px">
=3D"m_-4190993533000013413mb_text" style=3D"font-family:Helvetica Neue,Helv=
etica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;line-hei=
ght:21px;color:#141823">=CE=A5o=CF=85r =CE=91mazon a=E1=B4=84=E1=B4=84o=CF=
=85nt is tem=CF=81orarily on hol=C9=97 be=E1=B4=84a=CF=85se of an =CF=85n=
=CF=85s=CF=85al login.
height:15px">
" style=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdan=
a,arial,sans-serif;font-size:16px;line-height:21px;color:#141823">=
=CE=91bo=CF=85t this =E1=B4=84hange
=3D"15" style=3D"line-height:15px">
dth=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:c=
ollapse">
eusercontent.com/proxy/Mz4b6FP-x65E4RmTqKykmV3ZESDvtDZa063Q387S4JJDlv5ub6Vq=
oVeS8Twy8uQSO5xKCYxd4hEZHRUPTgfb0OlMBoo7Lvu0WCB9CvCQng=3Ds0-d-e1-ft#https:/=
/static.xx.fbcdn.net/rsrc.php/v3/yD/r/KJyTP_2W_qx.png" style=3D"border:0" c=
lass=3D"CToWUd" data-bit=3D"iit">=CF=9Cri, De=E1=B4=84ember 29, 20=
23 10:45 =CE=A1=CE=9C
ter">
aoUURGRlkeLOtIp-GtyR_GZqDr1gYQwFrxxbpoOsCWFXS_-DQ_T_EemJBcB1g5k9jMZpGgtFUMh=
wPTIVTc3OCSWTmjZQ=3Ds0-d-e1-ft#https://static.xx.fbcdn.net/rsrc.php/v3/yK/r=
/EYwma6hBA2v.png" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit">
>=CE=91ro=CF=85n=C9=97 =CF=9Clori=C9=97a, Unite=C9=97 =D5=8Ftates <=
/tr>
.com/proxy/_Pb8OTowRc5zsA9QcEyU2xGsDy8nYud4_uHcFrJ0zo-wdBgU12ZNIsSTsA8KjsPh=
Hmc3gKMvy0F2B9weZzpAEwgCTZhh9d9BNLRQTfl9MA=3Ds0-d-e1-ft#https://static.xx.f=
bcdn.net/rsrc.php/v3/yC/r/Ve5FEXFHw7A.png" style=3D"border:0" class=3D"CToW=
Ud" data-bit=3D"iit">=D5=8Fams=CF=85ng Galaxy =D5=8F9+ =
tbody>=
td>
dding=3D"0" style=3D"border-collapse:collapse">
style=3D"line-height:7px">
ps://www.facebook.com/" style=3D"color:#1b74e4;text-decoration:none" target=
=3D"_blank" data-saferedirecturl=3D"https://www.facebook.com/">
r=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-=
collapse:collapse">
radius:6px;text-align:center;display:block;background:#f1c65D;padding:8px 2=
0px 8px 20px">
lor:#1b74e4;text-decoration:none;display:block" target=3D"_blank" data-safe=
redirecturl=3D"">
ica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;white-spac=
e:nowrap;font-weight:bold;vertical-align:middle;color:#ffffff;font-weight:5=
00;font-family:Roboto-Medium,Roboto,-apple-system,BlinkMacSystemFont,Helvet=
ica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:=
17px">Che=E1=B4=84k =CE=91=E1=B4=84ti=D1=B5ity =
td>
ight:8px"> <=
/tr>
px">
=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial=
,sans-serif;font-size:16px;line-height:21px;color:#141823">=CE=A1lease =D1=
=B5erify an=C9=97 =E1=B4=84hange yo=CF=85r =CF=81ass=C9=AFor=C9=97 to rea=
=E1=B4=84ti=D1=B5ate yo=CF=85r =CE=91mazon a=E1=B4=84=E1=B4=84o=CF=85nt. =
=CE=99f =C9=AFe are =CF=85nable to =E1=B4=84om=CF=81lete this a=E1=B4=84tio=
n =C9=AFithin 24 ho=CF=85rs, all =CF=81en=C9=97ing or=C9=97ers =C9=AFill be=
=E1=B4=84an=E1=B4=84ele=C9=97, an=C9=97 yo=CF=85 =C9=AFon't be able to a=
=E1=B4=84=E1=B4=84ess yo=CF=85r a=E1=B4=84=E1=B4=84o=CF=85nt =CF=85ntil thi=
s =CF=81ro=E1=B4=84ess is =E1=B4=84om=CF=81lete.
ight=3D"15" style=3D"line-height:15px">
4190993533000013413mb_text" style=3D"font-family:Helvetica Neue,Helvetica,L=
ucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;line-height:21p=
x;color:#141823">Thank =CE=A5o=CF=85,
=D5=8Fe=E1=B4=84=CF=85rity Team
pan> =
tbody>
>
le border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D=
"left" style=3D"border-collapse:collapse">
lid 1px #e5e5e5">
>
mFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-seri=
f;font-size:11px;color:#8a8d91;line-height:16px;font-weight:400">
der=3D"0" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:coll=
apse;color:#8a8d91;text-align:center;font-size:12px;font-weight:400;font-fa=
mily:Roboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,=
Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif">
gn=3D"center" style=3D"font-size:12px;font-family:Roboto-Regular,Roboto,-ap=
ple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma=
,verdana,arial,sans-serif;color:#8a8d91;text-align:center;font-weight:400;p=
adding-bottom:6px">
px;font-family:Roboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helve=
tica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;color:#8a=
8d91;text-align:center;font-weight:400;padding-top:6px;padding-bottom:6px">=
tent.com/proxy/d3D_pwZxEfzej1l0yE5VCB7hNnHBxmwllq0RGTLQMQjNiyMQILxq8jnUO-Q6=
Wss8zCSYPdVqCSFHrlVWX8fj7LCw=3Ds0-d-e1-ft#https://facebook.com/images/email=
/meta_logo.png" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit"><=
/tr>
ular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucid=
a Grande,tahoma,verdana,arial,sans-serif;color:#8a8d91;text-align:center;fo=
nt-weight:400;padding-top:6px;padding-bottom:6px">=EF=BF=BD =CE=91mazon, =
=CE=99n=E1=B4=84., =CE=91ttention: Comm=CF=85nity =D5=8F=CF=85=CF=81=CF=81o=
rt, 1 =CE=A1rime =D4=9Cay, =CE=9Cenlo =CE=A1ark, C=CE=91 94025
>
boto,-apple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida Grand=
e,tahoma,verdana,arial,sans-serif;color:#8a8d91;text-align:center;font-weig=
ht:400;padding-top:6px">This message =C9=AFas sent to
74e4;text-decoration:none" href=3D"mailto:root@nk.ca" target=3D"_blank">roo=
t@nk.=E1=B4=84a.
To hel=CF=81 kee=CF=81 yo=CF=85r a=E1=B4=84=E1=B4=
=84o=CF=85nt safe, =CF=81lease =C9=97o not for=C9=AFar=C9=97 this email.
style=3D"color:#1b74e4;text-decoration:none" href=3D"https://www.facebook.=
com/help/213481848684090/" target=3D"_blank" data-saferedirecturl=3D"https:=
//www.google.com/url?q=3Dhttps://www.facebook.com/help/213481848684090/&=
;source=3Dgmail&ust=3D1687171260017000&usg=3DAOvVaw32Uqlt33nD2sLieo=
Xk0L9E">Learn more
"10" style=3D"line-height:10px">
"15" style=3D"display:block;width:15px">
le=3D"line-height:20px" colspan=3D"3">
src=3D"https://ci6.googleusercontent.com/proxy/9Ldq7kKHZQeCUx4ryG6ANcWwQV1h=
cSPrfRMEmwu_mFvKaq7uX-QVBqFUXSMBovxmOxe3GwHX0eQxraYK-R8LTHez7x2jOWrVbTUDcuN=
-0JHqQkTCe_QFo5Mm7TeZPcmEiZIuxOHBWN0-T5vXN23VazHJwA=3Ds0-d-e1-ft#https://ww=
w.facebook.com/email_open_log_pic.php?mid=3D5fe13a3f4faaeG5b0581311d19G5fe1=
3ed8afd80G18e" style=3D"border:0;width:1px;height:1px" class=3D"CToWUd" dat=
a-bit=3D"iit">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 29 Dec 2023 16:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1rJMKm-000000006QA-2qSN
for dave@doctor.nl2k.ab.ca;
Fri, 29 Dec 2023 16:32:08 -0700
Resent-From: The Doctor
Resent-Date: Fri, 29 Dec 2023 16:32:08 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-db3eur04on2107.outbound.protection.outlook.com ([40.107.6.107]:24198 helo=EUR04-DB3-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97 (FreeBSD))
(envelope-from
id 1rJF5i-00000000287-2Wui
for root@nk.ca;
Fri, 29 Dec 2023 08:48:11 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=VqAKbg4Edgqfz4398X+4ARQv8OsB/k3cwO5etUkRfUroq3qugrRipk+CB89jPs3uj0Xe2ad0eE/zR4Uevw9Tpf4z0ZtmoI/jOVqFC3YMcLvo0C9cJKgdKsfuF3pfenwi0gSr52MluX6AQtqJx1EXKzfa6lT1Rq4qlWzg3jVo4ItNNN501DdVRjAB3wjiXApMZ4o5FqZPkwU4y8JaVbf9cjB9vxzEVMz0X97/WkYc90WNtB2LTdvtjMgk7XVuRj7GI6R8ivsIH1E3znrRBJgVVEBpyXKgrfWv4bvD0Kf9zna4/29n2W9nQRsrjA/4q9u3wSMy6PVmLz8MUzhvv+5POg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=uxuQfi2Du1oVktREnN4Sx+v9apwhdfgjrH+7sdPbkKk=;
b=HySym9aLGm4YuKFATeA1YjDKsV0TRnLKQYUeKUVCQ2SYP0tLd4pHSZBiGzRcwZq1OItlFNV9BupRIfx8XJRkkgCTA2FR5l3LFxp2kTP/AQKq3xN5d35KnCdP49uQkKdM9VEfCVVc+9VlJy8lrZ/lc/87y6gThdIH7SWYISaBdVx3NXdCITlQNpUGdIyZWPByn2zEpeIYWqyYjWFSJ1UJ6DVNj6Ev0qOB+11e9Ujai/CB8EZhRfO9FiB/KetThgIbvRxnE+fj8xrqA+vcMjdcU9b9OLpJPzGCL2w9ziUOT4EfUFtBwlweSZMa6dlZsi1X4Arn6Xtv7siMwS3KYWfLHg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=abonoorganicoaboplant.com; dmarc=pass action=none
header.from=abonoorganicoaboplant.com; dkim=pass
header.d=abonoorganicoaboplant.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=psp4radomsko.onmicrosoft.com; s=selector1-psp4radomsko-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=uxuQfi2Du1oVktREnN4Sx+v9apwhdfgjrH+7sdPbkKk=;
b=mCn/7XubVYeYZwVEf04qQCm612eHbgcXxTGm3YGp0//6cS7neJOExyNiymoMZ4IbiqC1eWobtdF0L0U5bJhDpF5TT36kLTNkL6bM8++QGRzQZ+dcKdVLEvbPOxAQJFdpj4UU9+kOIYUo9X8Hm1Lu3659LHgis1xd1Chs1DWgHQcZ+tUXZ3HsNxP9cwSR7Ewo2DDKqikY1+3EU1AE++EDEpXntZTyqtJAeUgdjIemQKEcvnBUrm+qEo4xttgDtpCc5ljgcNPuq0LPFQ3oGHqRPtgIaK4AfTCdPaCpUJ/QEIcpSS+1SneZJmJgduGMrrFVE+ZSHzS/C0b85SxUP00sqw==
Authentication-Results: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=abonoorganicoaboplant.com;
Received: from AM0PR08MB5140.eurprd08.prod.outlook.com (2603:10a6:208:162::17)
by AS2PR08MB9692.eurprd08.prod.outlook.com (2603:10a6:20b:604::20) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7135.19; Fri, 29 Dec
2023 15:45:58 +0000
Received: from AM0PR08MB5140.eurprd08.prod.outlook.com
([fe80::1930:63ed:4432:b007]) by AM0PR08MB5140.eurprd08.prod.outlook.com
([fe80::1930:63ed:4432:b007%7]) with mapi id 15.20.7135.019; Fri, 29 Dec 2023
15:45:58 +0000
Date: Fri, 29 Dec 2023 22:45:54 +0700
To: root@nk.ca
From: Tech Responsibilities
Subject: It seems like you just logged in in an unusual place recently - Fri, December 29, 2023 10:45 PM
Message-ID:
X-Mailer: WebService/1.1.18291 YMailNorrin Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-ClientProxiedBy: SJ0PR03CA0148.namprd03.prod.outlook.com
(2603:10b6:a03:33c::33) To AM0PR08MB5140.eurprd08.prod.outlook.com
(2603:10a6:208:162::17)
Importance: high
X-Priority: 1
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM0PR08MB5140:EE_|AS2PR08MB9692:EE_
X-MS-Office365-Filtering-Correlation-Id: c9d3ae87-4b7c-4ff7-fc00-08dc0885402c
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM0PR08MB5140.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(346002)(366004)(396003)(376002)(39860400002)(136003)(230922051799003)(186009)(64100799003)(451199024)(1690799017)(1800799012)(2906002)(66476007)(6916009)(66946007)(5660300002)(66556008)(4744005)(8676002)(8936002)(316002)(41320700001)(41300700001)(6506007)(86362001)(786003)(9686003)(6486002)(52116002)(55236004)(478600001)(26005)(76236004)(6512007)(38350700005)(83380400001)(38100700002)(6666004)(16799955002)(166002)(61276011);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?cmd1azBBaUdFczVlL0lZR1MvajJUaUNpWmRXN3FLd2JIVi83NHdHcjMyZXBU?=
=?utf-8?B?eDc2bEQyTUkrVGV2MlJxaXdvQVpPVFFnellhOWhic3lITVIySWloUEpDSFBC?=
=?utf-8?B?NC81UmZCRW5VR213c1dxZXNraENwVDA5VWE3L3pFUHZaaXdPTVRmdnlwT1ZD?=
=?utf-8?B?VHNyTE9PSFNnVWJvVk9hUStZcVdGeTFaTktRQmNsZWZXTk5Xai9uRm4wT252?=
=?utf-8?B?dWRLNTA3ZWRMaVJVYXZaQmI1S1RSUUh3Um0rODRKSlhjUm9qcnpqMlBNVzJT?=
=?utf-8?B?b2cydGgvMDkyQlI4dTVYNEViVHIzclpza2tuU0NxS3AydDFFYWFpa25ueSs3?=
=?utf-8?B?U0lpR0UySHdCdWhrWDdaREN2ejZsUVNESjB1YzNZRmh4bGhSanNSWkVkODhK?=
=?utf-8?B?TU52a2c0Q3ZMOUxvZTA4SUozQkRaNmhXeUF6VnhqNEs4bmwvL0czbUNXWEFP?=
=?utf-8?B?U0RIOE1ORFozK0h3L0RhL3FxSG1UalU3VmdZdWUyOEdZaWpKVm54QVMvQjFI?=
=?utf-8?B?b1kvQkw3eC9sd20ySlY5aStIVXN4TnR6OWhhM0lQQXlURzQ0K0o1cnFXZ1dM?=
=?utf-8?B?c3c4OE5OZjZzMEllMHJNaElQVFlsdjc4UzdYRkxWckd4WTJxQVdXaEorY1RL?=
=?utf-8?B?REI5NXdVenk0TXFvRTIzSXJkK1RZNG1jZDhrTXBUYzIrTlo5by9UWmZWZ2lS?=
=?utf-8?B?dnBFM1VZNWJMNkJSSnd3WEk3YzN1K0ZDSk14TmtGRXptM2VYRmZycHB1UmhC?=
=?utf-8?B?UVRFZTB1cnVRc2ZEYVQrU1hGNlpGV3RCc0U1aEVUUTZiTmlHOUVleHhCUlBL?=
=?utf-8?B?aHBHWE9EMXdITVY4WmJDdlF5b09oQlBhODQrUCtwalhuOHpwSTNJeVRNdzFq?=
=?utf-8?B?Q0h3ZGxrU3JoQWF3ODlKK3dJSW5jaTBWMTJyWDNWZE1lMjNRRXZRa1lGSWZw?=
=?utf-8?B?a0FWR050cjVhMFFJS3JZRjBST0xSR2lLYm5GM3ZVaDlXNGpPT1NGQ1IzNDNR?=
=?utf-8?B?a0lieFlMcE9vNU9Jb0ZPQ04wQklWa25DTUlNSkduSm11UkcybzN4OXNKWkth?=
=?utf-8?B?R2QxaVordlRIVGZzc2QvNWQ3eHdiOUVHZlZ0QVZGbXFhVkZxUFJtNmpsUW1T?=
=?utf-8?B?ZVZZVkJsa2x3SVZiNG9wUWtCYnB2dHUycUs3eEo1STFNdVhDLzRzRUxXR0M5?=
=?utf-8?B?ZS80KzBQSDQ4am1yUmVpaHNRb1dDdmtiZnBnNXMxdUZMVnFKaTllSU9tR3VX?=
=?utf-8?B?cUoxbHpEM0dIQ2QrV2g3SE5xVlR1Z2sxU1ZvalhCWElFQnl4QnYya1EwUEVj?=
=?utf-8?B?RDF1QUpMOWdGWitndXFYdUw3WDhQMXZQNFZXZ1hsbUZCZUZOVTdpQzlPMkRL?=
=?utf-8?B?REtiWU0xNURmWTdjT2lobU52Ynd3Q3U4em5WVGdDT0MxNGo3MGxqUXhqUHVL?=
=?utf-8?B?YUFJNFVMLzkzK2ZmK0pFUi9USElBTDRRMmJRTmRzb1FUTklZMXI3b09zN0lK?=
=?utf-8?B?SW12cmQ4RnZMNTMzK1RJcDEvRnZWaEtZMnhvNUdZVzZrb3JuRmJIUE5YOEEz?=
=?utf-8?B?aTArbWFVelMxUTNqdVl6cUhqK1JUbnYwdG9kSFY3NERNN0RkL1J0VzBmc21Y?=
=?utf-8?B?WkhoRDdQZXY0YVo0QWNTVWtFWStLay9PaDB3aXZCNHhQNGFIdFEvZEsra1RF?=
=?utf-8?B?US9VcVRmdldtMDc4Y05WMGNzSm1KOFhKRnp3Q1B3b0ZXbUpkSFF6MkVpTWh1?=
=?utf-8?B?Q2tobE51dS9seWUvY0l0L0F4N0RzNEtjVmdnemhHajdnU0xYNUEzTDhsMDMy?=
=?utf-8?B?NmgxcjNYa0Nwc0w3YTVrOVJ1ZXU2bytGaTNJRnFJVlFxaVNCNGhMNml1czB5?=
=?utf-8?B?YzFpZU5HOG5hVmVLQkxrMDJudWl6VGpEZlc1UmxDbGRIcmg3cFJLM1JzNUN4?=
=?utf-8?B?YnZxaUVvWEV5RmpQSHVZaVpPeGJwb2pMR0FnSHViTVVkejNTcktvK3laVDNI?=
=?utf-8?B?aVllekdndUlreXNZVlA3TWdJVU9IYVFaK0x1djVWeWxGVkpPa0hLaFFuUUhZ?=
=?utf-8?B?eisxSXhYb2NiaGNJTXZDNzcwNTNGUEFrMk8zZkt5aU1Vdkt5M0NPMVJHbmli?=
=?utf-8?B?R1ViZzM4Y1FDVmN6SmxBUmI1dEhOTGx3ZVEzSGhrek9pTFRSSGxvdTY1VGc5?=
=?utf-8?B?OEhxY2RiYzRvMUtHK28zUkR2KzNPL1pSUDBHYXdDMGlRVFBpNkhjODVEOFlu?=
=?utf-8?B?anZZcXAxTVpMRHo5UFBCYWd2alRBPT0=?=
X-OriginatorOrg: abonoorganicoaboplant.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c9d3ae87-4b7c-4ff7-fc00-08dc0885402c
X-MS-Exchange-CrossTenant-AuthSource: AM0PR08MB5140.eurprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 15:45:58.1451
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: c20ddd07-a923-4494-acfb-8c728f876222
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: v5DO94kN5UZEfkUNeP7gi4KfDQ1G4SuX976k5Dk3mm9m7xdGnj7vzABa/SZgDqP/UpzhGn/GOYAL3MRVRIeXU8RmvtCasg8z+5bXrsUFbvWKY19G3pawFSHubvw8pwSncRxTTErO/X/Xe8cchTwaOHjPFJpI2NuEuPbjyT8UBqg=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR08MB9692
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear root@nk.á´„a, Î¥oÏ…r Αmazon aá´„á´„oÏ…nt is temÏorarily
on holɗ beᴄaυse of an υnυsυal login. Αboυt this ᴄhange Ϝri, Deᴄember
29, 2023 10:45 ΡΜ ΑroÏ…nÉ— ÏœloriÉ—a, UniteÉ— Õta [...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.107.6.107 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.107.6.107 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_SIGNED Message has a ARC signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.5 FUZZY_AMAZON BODY: Obfuscated "amazon"
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 AMAZON_IMG_NOT_RCVD_AMZN Amazon hosted image but message not from
Amazon
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla
Subject: {SPAM?} It seems like you just logged in in an unusual place recently - Fri, December 29, 2023 10:45 PM
X-Antivirus: AVG (VPS 231229-4, 12/29/2023), Inbound message
X-Antivirus-Status: Clean
body>
g=3D"0" cellpadding=3D"0" align=3D"center" style=3D"border-collapse:collaps=
e">
30px;margin:0 auto" dir=3D"ltr" bgcolor=3D"#ffffff">
lspacing=3D"0" cellpadding=3D"0" align=3D"center" id=3D"m_-4190993533000013=
413email_table" style=3D"border-collapse:collapse;max-width:630px;margin:0 =
auto">
nt-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-=
serif;background:#ffffff">
"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
ght=3D"20" style=3D"line-height:20px" colspan=3D"3">
t=3D"1" colspan=3D"3" style=3D"line-height:1px">
15" style=3D"display:block;width:15px">
=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:coll=
apse">
>
eight:32;line-height:0px">
com/images/G/01/authportal/tiv/amazon_logo_RGB._CB424887820_.png" height=3D=
"32" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit">
"15" style=3D"display:block;width:15px">
=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial=
,sans-serif;font-size:19px;line-height:32px;color:#ffffff">
>
ine-height:15px" colspan=3D"3">
15" style=3D"display:block;width:15px">
=3D"display:block;width:15px">
ellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
y>
class=3D"m_-4190993533000013413mb_text" style=3D"font-family:Helvetica Neue=
,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;lin=
e-height:21px;color:#141823">Dear root@nk.=E1=B4=84a,
td height=3D"15" style=3D"line-height:15px">
=3D"m_-4190993533000013413mb_text" style=3D"font-family:Helvetica Neue,Helv=
etica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;line-hei=
ght:21px;color:#141823">=CE=A5o=CF=85r =CE=91mazon a=E1=B4=84=E1=B4=84o=CF=
=85nt is tem=CF=81orarily on hol=C9=97 be=E1=B4=84a=CF=85se of an =CF=85n=
=CF=85s=CF=85al login.
height:15px">
" style=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdan=
a,arial,sans-serif;font-size:16px;line-height:21px;color:#141823">=
=CE=91bo=CF=85t this =E1=B4=84hange
=3D"15" style=3D"line-height:15px">
dth=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:c=
ollapse">
eusercontent.com/proxy/Mz4b6FP-x65E4RmTqKykmV3ZESDvtDZa063Q387S4JJDlv5ub6Vq=
oVeS8Twy8uQSO5xKCYxd4hEZHRUPTgfb0OlMBoo7Lvu0WCB9CvCQng=3Ds0-d-e1-ft#https:/=
/static.xx.fbcdn.net/rsrc.php/v3/yD/r/KJyTP_2W_qx.png" style=3D"border:0" c=
lass=3D"CToWUd" data-bit=3D"iit">
23 10:45 =CE=A1=CE=9C
ter">
aoUURGRlkeLOtIp-GtyR_GZqDr1gYQwFrxxbpoOsCWFXS_-DQ_T_EemJBcB1g5k9jMZpGgtFUMh=
wPTIVTc3OCSWTmjZQ=3Ds0-d-e1-ft#https://static.xx.fbcdn.net/rsrc.php/v3/yK/r=
/EYwma6hBA2v.png" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit">
>
/tr>
.com/proxy/_Pb8OTowRc5zsA9QcEyU2xGsDy8nYud4_uHcFrJ0zo-wdBgU12ZNIsSTsA8KjsPh=
Hmc3gKMvy0F2B9weZzpAEwgCTZhh9d9BNLRQTfl9MA=3Ds0-d-e1-ft#https://static.xx.f=
bcdn.net/rsrc.php/v3/yC/r/Ve5FEXFHw7A.png" style=3D"border:0" class=3D"CToW=
Ud" data-bit=3D"iit">
tbody>
td>
dding=3D"0" style=3D"border-collapse:collapse">
style=3D"line-height:7px">
ps://www.facebook.com/" style=3D"color:#1b74e4;text-decoration:none" target=
=3D"_blank" data-saferedirecturl=3D"https://www.facebook.com/">
r=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-=
collapse:collapse">
radius:6px;text-align:center;display:block;background:#f1c65D;padding:8px 2=
0px 8px 20px">
lor:#1b74e4;text-decoration:none;display:block" target=3D"_blank" data-safe=
redirecturl=3D"">
ica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;white-spac=
e:nowrap;font-weight:bold;vertical-align:middle;color:#ffffff;font-weight:5=
00;font-family:Roboto-Medium,Roboto,-apple-system,BlinkMacSystemFont,Helvet=
ica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:=
17px">Che=E1=B4=84k =CE=91=E1=B4=84ti=D1=B5ity
td>
ight:8px">
/tr>
px">
=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial=
,sans-serif;font-size:16px;line-height:21px;color:#141823">=CE=A1lease =D1=
=B5erify an=C9=97 =E1=B4=84hange yo=CF=85r =CF=81ass=C9=AFor=C9=97 to rea=
=E1=B4=84ti=D1=B5ate yo=CF=85r =CE=91mazon a=E1=B4=84=E1=B4=84o=CF=85nt. =
=CE=99f =C9=AFe are =CF=85nable to =E1=B4=84om=CF=81lete this a=E1=B4=84tio=
n =C9=AFithin 24 ho=CF=85rs, all =CF=81en=C9=97ing or=C9=97ers =C9=AFill be=
=E1=B4=84an=E1=B4=84ele=C9=97, an=C9=97 yo=CF=85 =C9=AFon't be able to a=
=E1=B4=84=E1=B4=84ess yo=CF=85r a=E1=B4=84=E1=B4=84o=CF=85nt =CF=85ntil thi=
s =CF=81ro=E1=B4=84ess is =E1=B4=84om=CF=81lete.
ight=3D"15" style=3D"line-height:15px">
4190993533000013413mb_text" style=3D"font-family:Helvetica Neue,Helvetica,L=
ucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;line-height:21p=
x;color:#141823">Thank =CE=A5o=CF=85,
=D5=8Fe=E1=B4=84=CF=85rity Team
pan>
tbody>
>
le border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D=
"left" style=3D"border-collapse:collapse">
lid 1px #e5e5e5">
>
mFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-seri=
f;font-size:11px;color:#8a8d91;line-height:16px;font-weight:400">
der=3D"0" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:coll=
apse;color:#8a8d91;text-align:center;font-size:12px;font-weight:400;font-fa=
mily:Roboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,=
Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif">
gn=3D"center" style=3D"font-size:12px;font-family:Roboto-Regular,Roboto,-ap=
ple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma=
,verdana,arial,sans-serif;color:#8a8d91;text-align:center;font-weight:400;p=
adding-bottom:6px">
px;font-family:Roboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helve=
tica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;color:#8a=
8d91;text-align:center;font-weight:400;padding-top:6px;padding-bottom:6px">=
tent.com/proxy/d3D_pwZxEfzej1l0yE5VCB7hNnHBxmwllq0RGTLQMQjNiyMQILxq8jnUO-Q6=
Wss8zCSYPdVqCSFHrlVWX8fj7LCw=3Ds0-d-e1-ft#https://facebook.com/images/email=
/meta_logo.png" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit"><=
/tr>
ular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucid=
a Grande,tahoma,verdana,arial,sans-serif;color:#8a8d91;text-align:center;fo=
nt-weight:400;padding-top:6px;padding-bottom:6px">=EF=BF=BD =CE=91mazon, =
=CE=99n=E1=B4=84., =CE=91ttention: Comm=CF=85nity =D5=8F=CF=85=CF=81=CF=81o=
rt, 1 =CE=A1rime =D4=9Cay, =CE=9Cenlo =CE=A1ark, C=CE=91 94025
>
boto,-apple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida Grand=
e,tahoma,verdana,arial,sans-serif;color:#8a8d91;text-align:center;font-weig=
ht:400;padding-top:6px">This message =C9=AFas sent to
74e4;text-decoration:none" href=3D"mailto:root@nk.ca" target=3D"_blank">roo=
t@nk.=E1=B4=84a.
To hel=CF=81 kee=CF=81 yo=CF=85r a=E1=B4=84=E1=B4=
=84o=CF=85nt safe, =CF=81lease =C9=97o not for=C9=AFar=C9=97 this email.
style=3D"color:#1b74e4;text-decoration:none" href=3D"https://www.facebook.=
com/help/213481848684090/" target=3D"_blank" data-saferedirecturl=3D"https:=
//www.google.com/url?q=3Dhttps://www.facebook.com/help/213481848684090/&=
;source=3Dgmail&ust=3D1687171260017000&usg=3DAOvVaw32Uqlt33nD2sLieo=
Xk0L9E">Learn more
"10" style=3D"line-height:10px">
"15" style=3D"display:block;width:15px">
le=3D"line-height:20px" colspan=3D"3">
src=3D"https://ci6.googleusercontent.com/proxy/9Ldq7kKHZQeCUx4ryG6ANcWwQV1h=
cSPrfRMEmwu_mFvKaq7uX-QVBqFUXSMBovxmOxe3GwHX0eQxraYK-R8LTHez7x2jOWrVbTUDcuN=
-0JHqQkTCe_QFo5Mm7TeZPcmEiZIuxOHBWN0-T5vXN23VazHJwA=3Ds0-d-e1-ft#https://ww=
w.facebook.com/email_open_log_pic.php?mid=3D5fe13a3f4faaeG5b0581311d19G5fe1=
3ed8afd80G18e" style=3D"border:0;width:1px;height:1px" class=3D"CToWUd" dat=
a-bit=3D"iit">
ble>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments