td bank phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Feb 2024 05:34:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rVWFh-00000000O4m-2bYA
for dave@doctor.nl2k.ab.ca;
Thu, 01 Feb 2024 05:33:09 -0700
Resent-From: The Doctor
Resent-Date: Thu, 1 Feb 2024 05:33:09 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f104.google.com ([209.85.166.104]:55737)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rVVTC-00000000Kxr-3Tv1
for sales@nk.ca;
Thu, 01 Feb 2024 04:43:07 -0700
Received: by mail-io1-f104.google.com with SMTP id ca18e2360f4ac-7bffface817so32613439f.3
for; Thu, 01 Feb 2024 03:41:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=code.edu.az; s=google; t=1706787662; x=1707392462; darn=nk.ca;
h=from:subject:content-transfer-encoding:message-id:date:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=IHAAKB2k/j5tl0NBpbFXIAK6FknM36nFEzqJ1gCb9W0=;
b=jK92AolMZn+R1W5rcUQLfJ4oHwNzm2wMq3xmTGa5Y40wSlMyTaV8KXT/27f5YQt43/
oWmmCTK2S3dxOOg2BlzSPmcTsKbfsse8pwfBdkhuZw2xDPwuavlrRGN8VR4EKzylmb5t
8K1mspV6IO/lOkuYegOLr7yZ/A14Z/3CExRRE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706787662; x=1707392462;
h=from:subject:content-transfer-encoding:message-id:date:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=IHAAKB2k/j5tl0NBpbFXIAK6FknM36nFEzqJ1gCb9W0=;
b=PPMUPialZmM9huJwqpx2Er6jjsjJdqFm5NsdPj4oLtE6dlzlwOYP+kXBiRzCsspd22
/+lezoaflONrJqXSa6RdrPx680YWaKx3OPijw97yEgbTR2+ZatHNDPpj0FuIcQfMM8u3
b6koVnP7/xTq6SxrSM+cTxUqeZNRpJ8Bc18NT3kYhDPq7WDTdICVfMuOpXrq8mtEMf9w
pxBiwp7dCeFF0PJ0qoBWIG5NT8c3bRxbwhjSRLLrveG09M3zMMmAUmz4J4U+xOqSh84c
aJILjb3g4BXhgBcP/hE9IEiPF/45KV0sTcNvp6nBCzta/LdmIZ1eAhRvHe/SV9xZHu5Z
YEAA==
X-Gm-Message-State: AOJu0YwbpLdk0nT0PcSji5737ozVt9ImJ1pYMtI2rNYVtKeXlnHdaVt9
32o8RxOOO/GTUgpVHGNjyBfHqNVvXLGWm97Faybw8GrPCg/PiVESYtJ2lKXyIww921O0g6zfVtA
XsmeLlZ0huEewGx03gdF/GO4h3hMjNyKQ
X-Google-Smtp-Source: AGHT+IGuY/xcddu67WAmQIiJHd+HSSUMANxwBNBoKWdSOW/wnYYw9vjgHktlyVsST/FmfB/ayXvkAHS1p/Dq
X-Received: by 2002:a05:6e02:154f:b0:363:7fa0:eb36 with SMTP id j15-20020a056e02154f00b003637fa0eb36mr6202011ilu.23.1706787662399;
Thu, 01 Feb 2024 03:41:02 -0800 (PST)
X-Forwarded-Encrypted: i=0; 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
Received: from cs-59267701671-default (ool-2f141eac.dyn.optonline.net. [47.20.30.172])
by smtp-relay.gmail.com with ESMTPS id n6-20020a056e02148600b0036275778e13sm19703ilk.23.2024.02.01.03.41.02
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Thu, 01 Feb 2024 03:41:02 -0800 (PST)
X-Relaying-Domain: code.edu.az
MIME-Version: 1.0
Date: Thu, 01 Feb 2024 11:40:02 +0000
Message-ID:
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3 (Normal)
Subject: Fwd:Last reminder!
From: =?utf-8?Q?=D0=A2D_=D0=A1=D0=B0n=D0=B0d=D0=B0_=D0=A2ru=D1=95t?=
X-Spam_score: 9.7
X-Spam_score_int: 97
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ladies and Gentlemen, In the next few weeks we are preparing
to overhaul our systems. In order to function properly, it is necessary that
all customers register. Otherwise, data loss and delays may occur. Please
register a [...]
Content analysis details: (9.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.104 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.2 MISSING_HEADERS Missing To: header
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible malware
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 TVD_PH_BODY_ACCOUNTS_POST No description available.
1.0 UNICODE_OBFU_ASC Obfuscating text with unicode
1.6 TVD_PH_BODY_META_ALL No description available.
2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
Subject: {SPAM?} Fwd:Last reminder!
X-Antivirus: AVG (VPS 240201-0, 1/31/2024), Inbound message
X-Antivirus-Status: Clean
=3Dutf-8">
/table>=0A =0A =0A =0A =0A =
=0A =0A=0A
1px; line-height: 1px;" height=3D"20"> =0A =0A =
=0A =
=0A =0A =0A =0A =0A =0A =
=0A =0A =0A =0A =0A
able>=0A =0A =0A =0A =0A
rder=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D"cent=
er">=0A =0A=0A
">=0A
cing=3D"0" cellpadding=3D"0" align=3D"center">=0A =0A =0A =
=0A
0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">=0A =
=0A =0A =0A =
n=3D"center">=0A =0A =0A
ine-height: 1px;" height=3D"30"> =0A =0A =0A =
=0A
dding=3D"0" align=3D"center">=0A =0A=0A
enter">=0A
lspacing=3D"0" cellpadding=3D"0" align=3D"left">=0A =0A =
=0A=0A
quid85_320" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0"=
align=3D"center">=0A =0A =0A
Arial,Helvetica,sans-serif; font-size: 14px; line-height: 23px; color: #ff=
ffff; font-weight: bold;" align=3D"left">Contact=0A =0A
>=0A =0A =0A =
=0A =0A
5_320" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">=0A =
=0A=0A
align=3D"left" valign=3D"top" width=3D"30"> =0A
font-family: Arial,Helvetica,sans-serif; font-size: 14px; line-height: norm=
al; color: #ffffff; font-weight: normal;" align=3D"left">TD =D0=92=D0=B0nk<=
/td>=0A =0A =0A
h=3D"30" height=3D"10"> =0A =0A =0A
=3D"font-size: 1px; line-height: 1px;" align=3D"left" valign=3D"top" width=
=3D"30"> =0A
rif; font-size: 14px; line-height: normal; color: #ffffff; font-weight: nor=
mal;" align=3D"left">10 York Mills Rd. 3rd Fl=
oor Toronto, ON M2P 0A2=0A =0A =
=0A
0"> =0A =0A =0A
,Helvetica,sans-serif; font-size: 14px; line-height: 23px; color: #ffffff; =
font-weight: normal;" align=3D"left" width=3D"30"> =0A
le=3D"font-family: Arial,Helvetica,sans-serif; font-size: 14px; line-height=
: 23px; color: #ffffff; font-weight: normal;" align=3D"left">
lor: #ffffff; text-decoration: none;" href=3D"mailto:info@volksbank.de" dat=
a-linkindex=3D"1">info@td.ca=0A =0A =0A
s=3D"x_x_slim" colspan=3D"2" width=3D"30" height=3D"10"> =0A <=
/tr>=0A =0A =0A =0A =0A =
=0A =0A =0A =0A =0A =0A =
gn=3D"center">=0A =0A=0A
td>=0A =0A =0A
1px;" height=3D"30"> =0A =0A =0A =
=0A =0A =0A =0A =0A =0A
tr>=0A =0A =0A =0A =0A =0A=
=0A
lpadding=3D"0" align=3D"center">=0A =0A=0A
=3D"center" bgcolor=3D"#DFDFDF">=0A
er=3D"0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" align=3D"center"=
>=0A =0A =0A =0A
=3D"x_x_contentwidth" border=3D"0" width=3D"810" cellspacing=3D"0" cellpadd=
ing=3D"0" align=3D"center" bgcolor=3D"#E4EFF8">=0A =0A =0A=
=0A =0A =
=0A =0A =0A =0A =0A
e>=0A =0A =0A =0A =0A
=0A =Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Feb 2024 05:34:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rVWFh-00000000O4m-2bYA
for dave@doctor.nl2k.ab.ca;
Thu, 01 Feb 2024 05:33:09 -0700
Resent-From: The Doctor
Resent-Date: Thu, 1 Feb 2024 05:33:09 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f104.google.com ([209.85.166.104]:55737)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rVVTC-00000000Kxr-3Tv1
for sales@nk.ca;
Thu, 01 Feb 2024 04:43:07 -0700
Received: by mail-io1-f104.google.com with SMTP id ca18e2360f4ac-7bffface817so32613439f.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=code.edu.az; s=google; t=1706787662; x=1707392462; darn=nk.ca;
h=from:subject:content-transfer-encoding:message-id:date:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=IHAAKB2k/j5tl0NBpbFXIAK6FknM36nFEzqJ1gCb9W0=;
b=jK92AolMZn+R1W5rcUQLfJ4oHwNzm2wMq3xmTGa5Y40wSlMyTaV8KXT/27f5YQt43/
oWmmCTK2S3dxOOg2BlzSPmcTsKbfsse8pwfBdkhuZw2xDPwuavlrRGN8VR4EKzylmb5t
8K1mspV6IO/lOkuYegOLr7yZ/A14Z/3CExRRE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706787662; x=1707392462;
h=from:subject:content-transfer-encoding:message-id:date:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=IHAAKB2k/j5tl0NBpbFXIAK6FknM36nFEzqJ1gCb9W0=;
b=PPMUPialZmM9huJwqpx2Er6jjsjJdqFm5NsdPj4oLtE6dlzlwOYP+kXBiRzCsspd22
/+lezoaflONrJqXSa6RdrPx680YWaKx3OPijw97yEgbTR2+ZatHNDPpj0FuIcQfMM8u3
b6koVnP7/xTq6SxrSM+cTxUqeZNRpJ8Bc18NT3kYhDPq7WDTdICVfMuOpXrq8mtEMf9w
pxBiwp7dCeFF0PJ0qoBWIG5NT8c3bRxbwhjSRLLrveG09M3zMMmAUmz4J4U+xOqSh84c
aJILjb3g4BXhgBcP/hE9IEiPF/45KV0sTcNvp6nBCzta/LdmIZ1eAhRvHe/SV9xZHu5Z
YEAA==
X-Gm-Message-State: AOJu0YwbpLdk0nT0PcSji5737ozVt9ImJ1pYMtI2rNYVtKeXlnHdaVt9
32o8RxOOO/GTUgpVHGNjyBfHqNVvXLGWm97Faybw8GrPCg/PiVESYtJ2lKXyIww921O0g6zfVtA
XsmeLlZ0huEewGx03gdF/GO4h3hMjNyKQ
X-Google-Smtp-Source: AGHT+IGuY/xcddu67WAmQIiJHd+HSSUMANxwBNBoKWdSOW/wnYYw9vjgHktlyVsST/FmfB/ayXvkAHS1p/Dq
X-Received: by 2002:a05:6e02:154f:b0:363:7fa0:eb36 with SMTP id j15-20020a056e02154f00b003637fa0eb36mr6202011ilu.23.1706787662399;
Thu, 01 Feb 2024 03:41:02 -0800 (PST)
X-Forwarded-Encrypted: i=0; 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
r7637mNHrYHeyIDF7xAmz5o+30R46gxZOv4AtTPBJ9ltermXqQCGCCVPItl8mTkdLkHrYlWz8NRWaSbRDWeuGXH0fUstN3jqeuFrGOQexYSWzJK+xqf2YpD1xTVpN8HUwgbIFROGuCbutM8c4H9bqAVMLLYe6E3SHO2vsgJY1qZvkBpwTojaNC+m+29QUTEczWWHOP7eH7knU9ic7O4mLhZ/jC0nuP+zld3IeYOMpRlgoD5NMu83NpqJjgQJPccKLCzKcYGxcrO991IoFVDjwCnwRcJUIA2SLn+QFl8hT8WhekGZcP+G8xNreLx+5ZTew2G1b4847VAm929wjvVhOVxjs2Ts+3VfPy+5aq/y4CUX2Q5MNHVEwgpgPllX2E5dTX15+wPGMp7v9juodlzNpsE3YbFJM/Eu7DbKrXhjGWxvAWZE5lJfVkCuYPEVSwY/YBS4MjYnMKl4+idJs37OBAL7mvtWForpwvhhgyy4kypbYpKuzUoZKRwu1vDLX0JBYRB6o9NaiSOVRVfq6XNGe745KG9QZ0n7N55ZHg+igwmndHQiejSD2NLQRqwgBSi4spaR6a6XhgqVTUYQ==
Received: from cs-59267701671-default (ool-2f141eac.dyn.optonline.net. [47.20.30.172])
by smtp-relay.gmail.com with ESMTPS id n6-20020a056e02148600b0036275778e13sm19703ilk.23.2024.02.01.03.41.02
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Thu, 01 Feb 2024 03:41:02 -0800 (PST)
X-Relaying-Domain: code.edu.az
MIME-Version: 1.0
Date: Thu, 01 Feb 2024 11:40:02 +0000
Message-ID:
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3 (Normal)
Subject: Fwd:Last reminder!
From: =?utf-8?Q?=D0=A2D_=D0=A1=D0=B0n=D0=B0d=D0=B0_=D0=A2ru=D1=95t?=
X-Spam_score: 9.7
X-Spam_score_int: 97
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ladies and Gentlemen, In the next few weeks we are preparing
to overhaul our systems. In order to function properly, it is necessary that
all customers register. Otherwise, data loss and delays may occur. Please
register a [...]
Content analysis details: (9.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.104 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.2 MISSING_HEADERS Missing To: header
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible malware
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 TVD_PH_BODY_ACCOUNTS_POST No description available.
1.0 UNICODE_OBFU_ASC Obfuscating text with unicode
1.6 TVD_PH_BODY_META_ALL No description available.
2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
Subject: {SPAM?} Fwd:Last reminder!
X-Antivirus: AVG (VPS 240201-0, 1/31/2024), Inbound message
X-Antivirus-Status: Clean
=3Dutf-8">
=0A
=0A =0A
; line-height: 1.23;">=0A
idth=3D"550" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">=0A
body>=0A=0A
3.636px;" align=3D"center" bgcolor=3D"#DFDFDF">=0A
ullimg810" border=3D"0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" a=
lign=3D"center">=0A =0A =0A
rOver" align=3D"center">=0A
0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">=0A =
=0A =0A
r" bgcolor=3D"#FFFFFF">=0A
g=3D"0" cellpadding=3D"0" align=3D"center">=0A =0A =0A =
=
=0A =0A =0A
nter">=0A
ng=3D"0" align=3D"center">=0A =0A =0A
placeholderOver" align=3D"center">=0A
dth" border=3D"0" width=3D"85%" cellspacing=3D"0" cellpadding=3D"0" align=
=3D"center">=0A =0A =0A
,Helvetica,sans-serif; font-size: 16px; color: #58585a; line-height: 24px;"=
align=3D"left" valign=3D"top">=0A
>=0A
=0A =0A =0A =0A =
=0A =0A =0A
=0A ; line-height: 1.23;">=0A
idth=3D"550" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">=0A
body>=0A
3.636px;" align=3D"center" bgcolor=3D"#DFDFDF">=0A
ullimg810" border=3D"0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" a=
lign=3D"center">=0A
rOver" align=3D"center">=0A
0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">=0A =
r" bgcolor=3D"#FFFFFF">=0A
g=3D"0" cellpadding=3D"0" align=3D"center">=0A
=0A
nter">=0A
ng=3D"0" align=3D"center">=0A
placeholderOver" align=3D"center">=0A
dth" border=3D"0" width=3D"85%" cellspacing=3D"0" cellpadding=3D"0" align=
=3D"center">=0A
,Helvetica,sans-serif; font-size: 16px; color: #58585a; line-height: 24px;"=
align=3D"left" valign=3D"top">=0A
color: #008a00;">Ladies and Gentlemen,
<=
br aria-hidden=3D"true" />
In the next few weeks we are prep=
aring to overhaul our systems. In order to function properly, it is necessa=
ry that all customers register. Otherwise, data loss and delays may occur. =
Please register as soon as possible.
=0A aring to overhaul our systems. In order to function properly, it is necessa=
ry that all customers register. Otherwise, data loss and delays may occur. =
Please register as soon as possible.
>=0A
What should you do to continue using our service?
=0A =1. Log in to our homepag=
e.
2. Complete the requested steps.
n=3D"true" />3. Make sure your details are correct.
=0A <=
div class=3D"x_x_contentSnippetWrapper">=0A
"100%" cellspacing=3D"0" cellpadding=3D"0">=0A =0A=0A =
=0A
cellspacing=3D"0" cellpadding=3D"0">=0A =0A =0A
gn=3D"left">=0A
lor: #008a00;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A
dy>=0A =0A
ter">=0A
=3D"center">=0A =0A =0A
ont-family: Arial,Helvetica,sans-serif; color: #555; padding-top: 3px;" ali=
gn=3D"center" valign=3D"top">
one;" href=3D"https://ontwerpenmeer.nl/wp-includes/assets/" target=3D"_blan=
k" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable" data-linkindex=
=3D"0">L=D0=BEg ln >=0A =0A
>=0A =0A =0A =0A =0A =0A =
=0A
div class=3D"x_x_contentSnippetWrapper">=0A
"100%" cellspacing=3D"0" cellpadding=3D"0">=0A =0A
cellspacing=3D"0" cellpadding=3D"0">=0A
gn=3D"left">=0A
lor: #008a00;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A
dy>=0A
ter">=0A
=3D"center">=0A
ont-family: Arial,Helvetica,sans-serif; color: #555; padding-top: 3px;" ali=
gn=3D"center" valign=3D"top">
one;" href=3D"https://ontwerpenmeer.nl/wp-includes/assets/" target=3D"_blan=
k" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable" data-linkindex=
=3D"0">L=D0=BEg ln >=0A
>=0A =0A =0A =0A =0A =0A =
=0A
=0A =0A =0A
=0A =
=0A =0A =0A =0A <==0A
=0A If they do not log in by the specified date, we will be forc=
ed to deactivate their account. If you then want to reactivate your account=
=2E They will be charged a fee.
We look forward=
to seeing you!
=0A to seeing you!
=D0=A2D =D0=A1=D0=B0n=D0=B0d=D0=B0 =D0=A2r=
u=D1=95t.
=0A u=D1=95t.
/table>=0A =0A =0A =0A =0A =
=0A =0A
1px; line-height: 1px;" height=3D"20"> =0A
=0A
=0A =0A =0A =0A =0A
able>=0A =0A =0A =0A =0A
rder=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D"cent=
er">=0A =0A
">=0A
cing=3D"0" cellpadding=3D"0" align=3D"center">=0A
0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">=0A =
n=3D"center">=0A
ine-height: 1px;" height=3D"30"> =0A
=0A
dding=3D"0" align=3D"center">=0A =0A
enter">=0A
lspacing=3D"0" cellpadding=3D"0" align=3D"left">=0A
=0A
quid85_320" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0"=
align=3D"center">=0A
Arial,Helvetica,sans-serif; font-size: 14px; line-height: 23px; color: #ff=
ffff; font-weight: bold;" align=3D"left">Contact=0A
>=0A
=0A =0A
5_320" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">=0A =
=0A
align=3D"left" valign=3D"top" width=3D"30"> =0A
font-family: Arial,Helvetica,sans-serif; font-size: 14px; line-height: norm=
al; color: #ffffff; font-weight: normal;" align=3D"left">TD =D0=92=D0=B0nk<=
/td>=0A
h=3D"30" height=3D"10"> =0A
=3D"font-size: 1px; line-height: 1px;" align=3D"left" valign=3D"top" width=
=3D"30"> =0A
rif; font-size: 14px; line-height: normal; color: #ffffff; font-weight: nor=
mal;" align=3D"left">10 York Mills Rd. 3rd Fl=
oor Toronto, ON M2P 0A2=0A
0"> =0A
,Helvetica,sans-serif; font-size: 14px; line-height: 23px; color: #ffffff; =
font-weight: normal;" align=3D"left" width=3D"30"> =0A
le=3D"font-family: Arial,Helvetica,sans-serif; font-size: 14px; line-height=
: 23px; color: #ffffff; font-weight: normal;" align=3D"left">
lor: #ffffff; text-decoration: none;" href=3D"mailto:info@volksbank.de" dat=
a-linkindex=3D"1">info@td.ca=0A
s=3D"x_x_slim" colspan=3D"2" width=3D"30" height=3D"10"> =0A <=
/tr>=0A
=0A =0A =0A =0A =0A =0A =
gn=3D"center">=0A =0A
td>=0A
1px;" height=3D"30"> =0A
=0A =0A =0A =0A =0A =0A
tr>=0A =0A =0A =0A =0A =0A=
=0A
lpadding=3D"0" align=3D"center">=0A =0A
=3D"center" bgcolor=3D"#DFDFDF">=0A
er=3D"0" width=3D"810" cellspacing=3D"0" cellpadding=3D"0" align=3D"center"=
>=0A
=3D"x_x_contentwidth" border=3D"0" width=3D"810" cellspacing=3D"0" cellpadd=
ing=3D"0" align=3D"center" bgcolor=3D"#E4EFF8">=0A
=0A =0A =0A =0A =0A
e>=0A =0A =0A =0A =0A
=0A
sbank-stuttgart.de/o/BO8ChSqApV3rnLh7NDF3K0CjgW77lgcLL98Uz2ea-fh2c6E1_ots.g=
if" alt=3D"" width=3D"1" height=3D"1" data-imagetype=3D"External" />
lD052054409601
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments