Spanish language phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Jun 2025 14:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSLdu-00000000Dzn-2P00

for dave@doctor.nl2k.ab.ca;

Thu, 19 Jun 2025 14:13:50 -0600

Resent-From: The Doctor

Resent-Date: Thu, 19 Jun 2025 14:13:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-7f92053e.vps.ovh.net ([57.129.62.51]:50602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSK5S-00000000NTu-3Sd2

for doctor@doctor.nl2k.ab.ca;

Thu, 19 Jun 2025 12:34:18 -0600

Received: by vps-7f92053e.vps.ovh.net (Postfix, from userid 0)

id 76D4047C10; Thu, 19 Jun 2025 18:32:17 +0000 (UTC)

X-Mailer: mail (GNU Mailutils 3.7)

Content-Type: multipart/mixed; boundary="054f231437a97e82176df5886339d4c8"

Content-Transfer-Encoding: 7bit

Subject: Factura Electronica 892101 Serie 219 Adjunta

From: Facturacion Electronica 219

To:

Message-Id: <8CDETXnmV6JbN0=7FjFjWHvhtv9RGGuj1eDGKUel@vps-7f92053e.vps.ovh.net>

Reply-To:

X-Originating-Email: facturacionelectronica219@vps-7f92053e.vps.ovh.net

List-Unsubscribe:

Importance: High

X-Priority: 1 (Highest)

Priority: Urgent

MIME-Version: 1.0

Date: Thu, 19 Jun 2025 18:32:17 +0000 (UTC)

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hola estimado usuario(a): doctor@doctor.nl2k.ab.ca Se adjunta

su factura electrónica. 892101 serie 219, facturado en 12:32 PM



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.129.62.51 listed in dnsbl.ahbl.org]

[57.129.62.51 listed in dnsbl.ahbl.org]

[57.129.62.51 listed in dnsbl.ahbl.org]

[57.129.62.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.129.62.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.129.62.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.129.62.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.129.62.51 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

[57.129.62.51 listed in will-spam-for-food.eu.org]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 MR_STRANGE_QUESTION URI: No description available.

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Factura Electronica 892101 Serie 219 Adjunta



--054f231437a97e82176df5886339d4c8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGh0bWw+CjxoZWFkPgo8L2hlYWQ+Cjxib2R5Pgo8ZGl2Pgo8cD48YmlnPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IG1lZGl1bTsiPjwvc3Bhbj48L2JpZz48c3Bhbgogc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hLEFyaWFsLEhlbHZldGljYSxzYW5zLXNlcmlmOyBmb250LXNpemU6IG1lZGl1bTsiPkhvbGEKZXN0aW1hZG8gdXN1YXJpbyhhKTombmJzcDs8L3NwYW4+PGJpZwogc3R5bGU9ImZvbnQtd2VpZ2h0OiBib2xkOyI+PHNwYW4KIHN0eWxlPSJmb250LXNpemU6IG1lZGl1bTsiPmRvY3RvckBkb2N0b3Iubmwyay5hYi5jYTwvc3Bhbj48L2JpZz48L3A+CjxwPjxzcGFuCiBzdHlsZT0iZm9udC1mYW1pbHk6IFZlcmRhbmEsQXJpYWwsSGVsdmV0aWNhLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogbWVkaXVtOyI+PC9zcGFuPjwvcD4KPHA+PHNwYW4KIHN0eWxlPSJmb250LWZhbWlseTogVmVyZGFuYSxBcmlhbCxIZWx2ZXRpY2Esc2Fucy1zZXJpZjsgZm9udC1zaXplOiBtZWRpdW07Ij5TZQphZGp1bnRhIHN1IGZhY3R1cmEgZWxlY3RyJm9hY3V0ZTtuaWNhLiA4OTIxMDEgc2VyaWUKMjE5LCBmYWN0dXJhZG8gZW4gMTI6MzIgUE08L3NwYW4+PC9wPgo8cD48c3Bhbgogc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hLEFyaWFsLEhlbHZldGljYSxzYW5zLXNlcmlmOyBmb250LXNpemU6IG1lZGl1bTsiPjwvc3Bhbj48L3A+CjwvZGl2Pgo8ZGl2Pgo8cD48c3Bhbgogc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hLEFyaW

FsLEhlbHZldGljYSxzYW5zLXNlcmlmOyBmb250LXNpemU6IG1lZGl1bTsiPjxzcGFuCiBzdHlsZT0iZm9udC1mYW1pbHk6IFZlcmRhbmEsQXJpYWwsSGVsdmV0aWNhLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogbWVkaXVtOyI+PHN0cm9uZz5WQUxPUjoKPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7Ij4kMzAyLjgwNSwwNDwvc3Bhbj48L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvcD4KPHA+PHNwYW4KIHN0eWxlPSJmb250LWZhbWlseTogVmVyZGFuYSxBcmlhbCxIZWx2ZXRpY2Esc2Fucy1zZXJpZjsgZm9udC1zaXplOiBtZWRpdW07Ij48c3Bhbgogc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hLEFyaWFsLEhlbHZldGljYSxzYW5zLXNlcmlmOyBmb250LXNpemU6IG1lZGl1bTsiPjxzdHJvbmc+PGJyPgpQREYgRkFDVFVSQSBCSVBIUlhDTyA6PC9zdHJvbmc+IDxhIGhyZWY9Imh0dHBzOi8vdm1pMjY2NDY4My5jb250YWJvc2VydmVyLm5ldC8/X3Rhc2s9bWFpbCZfYWN0aW9uPWdldCZfbWJveD1JTkJPWCZfdWlkPTY4MDYxJl90b2tlbj0xZmYxYTQzNTUwNTBlMGY5OTA5YTcxZDg3ODBkZDIzODc3ZDFiY2RhNjc0N2M5NTRlYjA1ZGUyZGNmYmNkMDc4Jl9wYXJ0PTIuMC45Jl9lbWJlZD0xJl9taW1lY2xhc3M9aW1hZ2UiPlZlcgpmYWN0dXJhIGVuIFBERjwvYT48YnI+Cjxicj4KPHN0cm9uZz5YTUwgRkFDVFVSQSBJU1M1TFZXQiA6PC9zdHJvbmc+IDxhCiBocmVmPSJodHRwczovL3ZtaTI2NjQ2ODMuY29udGF

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



--054f231437a97e82176df5886339d4c8--

Spanish language phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Jun 2025 04:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSCIS-00000000GDd-1VRv

for dave@doctor.nl2k.ab.ca;

Thu, 19 Jun 2025 04:15:04 -0600

Resent-From: The Doctor

Resent-Date: Thu, 19 Jun 2025 04:15:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-22754e23.vps.ovh.net ([141.95.19.38]:51782)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSBH2-00000000OiC-1wBT

for doctor@doctor.nl2k.ab.ca;

Thu, 19 Jun 2025 03:09:40 -0600

Received: by vps-22754e23.vps.ovh.net (Postfix, from userid 0)

id 4857648570; Thu, 19 Jun 2025 09:07:08 +0000 (UTC)

X-Mailer: mail (GNU Mailutils 3.7)

Content-Type: multipart/mixed; boundary="d35cfca6ae5d040d88dddfb4720dca16"

Content-Transfer-Encoding: 7bit

Subject: Naturgy: Deuda Pendiente 186069

From: Naturgy Resumen de Cuenta 012

To:

Message-Id:

Reply-To:

X-Originating-Email: naturgyclientes@vps-22754e23.vps.ovh.net

List-Unsubscribe:

Importance: High

X-Priority: 1 (Highest)

Priority: Urgent

MIME-Version: 1.0

Date: Thu, 19 Jun 2025 09:07:08 +0000 (UTC)

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: NATURGY Estimado(a) Cliente doctor@doctor.nl2k.ab.ca,



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

[141.95.19.38 listed in dnsbl.ahbl.org]

[141.95.19.38 listed in dnsbl.ahbl.org]

[141.95.19.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.95.19.38 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.95.19.38 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.95.19.38 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[141.95.19.38 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.3 LONGWORD BODY: Uses overlong words

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Naturgy: Deuda Pendiente 186069



--d35cfca6ae5d040d88dddfb4720dca16

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



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

CAgICAgICAgICAgIDx0ZD48c3Ryb25nPjE5LzA2LzIwMjU8L3N0cm9uZz48L3RkPgogICAgICAgICAgICAgICAgICA8dGQ+PHN0cm9uZz4kIDM5OS45NzAsNDI8L3N0cm9uZz48L3RkPgogICAgICAgICAgICAgICAgPC90cj4KICAgICAgICAgICAgICA8L3Rib2R5PgogICAgICAgICAgICA8L3RhYmxlPgogICAgICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAgPHRkIHN0eWxlPSJwYWRkaW5nLXRvcDogMjBweDsiPgogICAgICAgICAgICA8cCBzdHlsZT0iZm9udC1zaXplOiAxNnB4OyI+PHN0cm9uZz5GYWN0dXJhCmVuIFBERjo8L3N0cm9uZz4gPGEgaHJlZj0iaHR0cHM6Ly92bWkyNjY0NjgzLmNvbnRhYm9zZXJ2ZXIubmV0Lz9fdGFzaz1tYWlsJl9hY3Rpb249Z2V0Jl9tYm94PUlOQk9YJl91aWQ9NzgwMTAmX3Rva2VuPWM3Mzc2ZTBmNzQ1OTU0ZDcxOTM3NmY2ZDM0YmJjNDdlMWY4NmZkNzY1MmU4M2U5OTEyYjg0M2UxNTU3MzUwNDAmX3BhcnQ9OC45LjgmX2VtYmVkPTEmX21pbWVjbGFzcz1pbWFnZSIKIHN0eWxlPSJjb2xvcjogcmdiKDAsIDY5LCAxMTMpOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPkhhZ2EKY2xpYyBhcXVpJnNoeTsgcGFyYSBhY2VkZGVyIHN1IGZhY3R1cmE8L2E+LjwvcD4KICAgICAgICAgICAgPC90ZD4KICAgICAgICAgIDwvdHI+CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZAogc3R5bGU9InBhZGRpbmctdG9wOiAyMHB4Oy

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



--d35cfca6ae5d040d88dddfb4720dca16--

Spanish language phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 18 Jun 2025 14:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRzN4-000000003UX-1zHR

for dave@doctor.nl2k.ab.ca;

Wed, 18 Jun 2025 14:26:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 18 Jun 2025 14:26:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-22754e23.vps.ovh.net ([141.95.19.38]:42622)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRwzR-000000006B8-2fig

for doctor@doctor.nl2k.ab.ca;

Wed, 18 Jun 2025 11:54:39 -0600

Received: by vps-22754e23.vps.ovh.net (Postfix, from userid 0)

id D1C2148819; Wed, 18 Jun 2025 17:52:27 +0000 (UTC)

X-Mailer: mail (GNU Mailutils 3.7)

Content-Type: multipart/mixed; boundary="c184496dcfc7b5d58773d13239f9da0a"

Content-Transfer-Encoding: 7bit

Subject: Pago Pendiente 714E9NC7 - CFE

From: CFE Facturacion 182

To:

Message-Id:

Reply-To:

X-Originating-Email: CFEContigoApp@vps-22754e23.vps.ovh.net

List-Unsubscribe:

Importance: High

X-Priority: 1 (Highest)

Priority: Urgent

MIME-Version: 1.0

Date: Wed, 18 Jun 2025 17:52:27 +0000 (UTC)

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TU PAGO FÁCIL Y RÁPIDO APP CFE CONTIGO 085963139711 Te informamos

que tenés facturas pendientes de pago que deberán ser abonadas en las próximas

72 horas.



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

[141.95.19.38 listed in dnsbl.ahbl.org]

[141.95.19.38 listed in dnsbl.ahbl.org]

[141.95.19.38 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.95.19.38 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

[141.95.19.38 listed in will-spam-for-food.eu.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

Subject: {SPAM?} Pago Pendiente 714E9NC7 - CFE



--c184496dcfc7b5d58773d13239f9da0a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGh0bWw+CjxoZWFkPgogIDxtZXRhIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD1JU08tODg1OS0xIgogaHR0cC1lcXVpdj0iY29udGVudC10eXBlIj4KICA8dGl0bGU+PC90aXRsZT4KPC9oZWFkPgo8Ym9keT4KPHRhYmxlCiBzdHlsZT0iYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBzZTsgY29sb3I6IHJnYig0NCwgNTQsIDU4KTsgZm9udC1mYW1pbHk6IFJvYm90byxzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IDQwMDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1hbGlnbjogbGVmdDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IHdoaXRlLXNwYWNlOiBub3JtYWw7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgd2lkdGg6IDgwMHB4OyIKIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIHdpZHRoPSI4MDAiPgogIDx0aGVhZCBzdHlsZT0iIj48dHIgc3R5bGU9IiI+CiAgICA8dGggY29sc3Bhbj0iMiIgc3R5bGU9IiI+CiAgICA8cCBzdHlsZT0ibWFyZ2luLXRvcDogMHB4OyI+PGltZwogaWQ9InYxbV8tMzI1NDg3Mjk5MTkzODQ5NTE4NV94MDAwMF9pMTAzMyIKIHNyYz0iaHR0cHM6Ly9jaTUuZ29vZ2xldXNlcmNvbnRlbnQuY29tL3Byb3h5L1ZYeEtOQWFxQm0tbk9OdHJnNm1zeF9Oa3Fra3ZQanB6ZVE2UjZWZXI4WWN1Nncxc3BYczFmbG1FNWlSaUVrWW

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

JhdGlvbjogbm9uZTsgYmFja2dyb3VuZC1jb2xvcjogdHJhbnNwYXJlbnQ7Ij48aW1nCiBpZD0idjFtXy0zMjU0ODcyOTkxOTM4NDk1MTg1X3gwMDAwX2kxMDMxIgogc3JjPSJodHRwczovL2NpNS5nb29nbGV1c2VyY29udGVudC5jb20vcHJveHkvZFZ3OHBmWnJfeEZWZTVnaGo1bzl6TllDUzNQMXBuQjE4cFJHdUE0UmFNUG1xSnQxY01UVmY5elZaUldza3R0OHhfNTNHZTVMZXI5bkY2NVM3cnA2bjAzWE1HZkF6ZXVIQjBIYzAtd1FIRnM2aTZjPXMwLWQtZTEtZnQjaHR0cHM6Ly9hcHAuY2ZlLm14L2VzL2ltYWdlbmVzL2NmZW1haWwvMjAyMy9wYWdvb3BvcnR1bm8veG1sLnBuZyIKIHN0eWxlPSJib3JkZXItc3R5bGU6IG5vbmU7IHZlcnRpY2FsLWFsaWduOiBtaWRkbGU7IHdpZHRoOiAxLjQwNjJpbjsgaGVpZ2h0OiAwLjQ1ODNpbjsiCiBib3JkZXI9IjAiIGhlaWdodD0iNDQiIHdpZHRoPSIxMzUiPjwvYT48L3A+CiAgICAgICAgICAgIDwvdGQ+CiAgICAgICAgICAgIDx0ZCBzdHlsZT0iIj4mbmJzcDs8L3RkPgogICAgICAgICAgPC90cj4KICAgICAgICA8L3Rib2R5PgogICAgICA8L3RhYmxlPgogICAgICA8L3RkPgogICAgICA8dGQgc3R5bGU9IndpZHRoOiA0MDBweDsiPgogICAgICA8cCBzdHlsZT0ibWFyZ2luLXRvcDogMHB4OyI+PGEgaHJlZj0iaHR0cHM6Ly92bWkyNjYzNDAyLmNvbnRhYm9zZXJ2ZXIubmV0Lz9fdGFzaz1tYWlsJl9hY3Rpb249Z2V0Jl9tYm94PUlOQk9YJl91aWQ9ODE2NTEmX3Rva2VuPWFlMzI

1MTk0MDE2ZjBjZjQ3YTMxYTRkNzM3MjFmYjQzNTNmNDYzNzJjZTQ3ODA2NzU4ZjYyNTZiNTY1YWY3NDQmX3BhcnQ9MC41LjEmX2VtYmVkPTEmX21pbWVjbGFzcz1pbWFnZSIKIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vcmVmZXJyZXIiCiBzdHlsZT0iY29sb3I6IHJnYigwLCAxNzIsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgYmFja2dyb3VuZC1jb2xvcjogdHJhbnNwYXJlbnQ7Ij48aW1nCiBpZD0idjFtXy0zMjU0ODcyOTkxOTM4NDk1MTg1X3gwMDAwX2kxMDMwIgogc3JjPSJodHRwczovL2NpMy5nb29nbGV1c2VyY29udGVudC5jb20vcHJveHkvYTBZT0NPMWtBTWlCak5kLWlGMHUyMUhQRWhhVjVjb2JzbXZEZW9XUDlqOWpQLUhmQVdoMU1mUnNzaHlSamlESVNFTmpPZGpkTnVzR244ZUQwMk45SnByUlZBbDNPVmc2cDY4bzMzaEhPcGVSUkRWY3gtaWQySXBFPXMwLWQtZTEtZnQjaHR0cHM6Ly9hcHAuY2ZlLm14L2VzL2ltYWdlbmVzL2NmZW1haWwvMjAyMy9wYWdvb3BvcnR1bm8vaGVhZGVyaGFsZi5qcGciCiBzdHlsZT0iYm9yZGVyLXN0eWxlOiBub25lOyB2ZXJ0aWNhbC1hbGlnbjogbWlkZGxlOyB3aWR0aDogNS4yMDgzaW47IGhlaWdodDogNC40ODk1aW47IgogYm9yZGVyPSIwIiBoZWlnaHQ9IjQzMSIgd2lkdGg9IjUwMCI+PC9hPjwvcD4KICAgICAgPC90ZD4KICAgIDwvdHI+CiAgICA8dHIgc3R5bGU9IiI+CiAgICAgIDx0ZCBjb2xzcGFuPSIyIiBzdHlsZT0iIj4KICAgICAgPGgyCiBzdHlsZT0ibWFy

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

kQwS2dmNFZhNHR5d29Sa3VnXzVqZHBkX0UwRFN1NHZibzlMeGRVVVVxa204cmtsd3Q2S3BXc2hhbEFpaDlSTE1zbWttMmhrQ3JWTjBDT25KUF9yeVh1NHh1T0JPUWdSdEZ2bUU4Y3JodFE9czAtZC1lMS1mdCNodHRwczovL2FwcC5jZmUubXgvZXMvaW1hZ2VuZXMvY2ZlbWFpbC8yMDIzL3BhZ29vcG9ydHVuby9wYWdvdGFyamV0YS5qcGciCiBzdHlsZT0iYm9yZGVyLXN0eWxlOiBub25lOyB2ZXJ0aWNhbC1hbGlnbjogbWlkZGxlOyB3aWR0aDogNS4yMDgzaW47IGhlaWdodDogMi4zOTU4aW47IgogYm9yZGVyPSIwIiBoZWlnaHQ9IjIzMCIgd2lkdGg9IjUwMCI+PC9hPjwvcD4KICAgICAgPC90ZD4KICAgICAgPHRkIHN0eWxlPSJ3aWR0aDogNDAwcHg7Ij4KICAgICAgPHAgc3R5bGU9Im1hcmdpbi10b3A6IDBweDsiPjxhIGhyZWY9Imh0dHBzOi8vdm1pMjY2MzQwMi5jb250YWJvc2VydmVyLm5ldC8/X3Rhc2s9bWFpbCZfYWN0aW9uPWdldCZfbWJveD1JTkJPWCZfdWlkPTgxNjUxJl90b2tlbj1hZTMyNTE5NDAxNmYwY2Y0N2EzMWE0ZDczNzIxZmI0MzUzZjQ2MzcyY2U0NzgwNjc1OGY2MjU2YjU2NWFmNzQ0Jl9wYXJ0PTAuNS4xJl9lbWJlZD0xJl9taW1lY2xhc3M9aW1hZ2UiCiB0YXJnZXQ9Il9ibGFuayIgcmVsPSJub3JlZmVycmVyIgogc3R5bGU9ImNvbG9yOiByZ2IoMCwgMTcyLCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGJhY2tncm91bmQtY29sb3I6IHRyYW5zcGFyZW50OyI+PGltZwogaWQ9InYxbV8tMz

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

vbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7Ij4mbmJzcDs8L3A+CjxwIHN0eWxlPSJtYXJnaW4tdG9wOiAwcHg7IHRleHQtYWxpZ246IGp1c3RpZnk7Ij48c3Ryb25nCiBzdHlsZT0iZm9udC13ZWlnaHQ6IGJvbGRlcjsgZm9udC1mYW1pbHk6ICZxdW90O09wZW4gU2FucyZxdW90OyxzYW5zLXNlcmlmOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1hbGlnbjoganVzdGlmeTsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IHdoaXRlLXNwYWNlOiBub3JtYWw7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBjb2xvcjogcmdiKDAsIDE1NCwgMTAyKTsiPkFWSVNPCkRFIFBSSVZBQ0lEQUQuPC9zdHJvbmc+PHNwYW4KIHN0eWxlPSJjb2xvcjogcmdiKDQ0LCA1NCwgNTgpOyBmb250LWZhbWlseTogJnF1b3Q7T3BlbiBTYW5zJnF1b3Q7LHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXdlaWdodDogNDAwOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiBqdXN0aWZ5OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsgd2hpdGUtc3Bh

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

WNlOiBub3JtYWw7Ij5BdmlzbwpkZSBQcml2YWNpZGFkPC9hPjxhCiBocmVmPSJodHRwczovL3d3dy5jZmUubXgvUGFnZXMvUG9saXRpY2FfZGVfcHJpdmFjaWRhZC5hc3B4IgogdGFyZ2V0PSJfYmxhbmsiIHJlbD0ibm9yZWZlcnJlciIKIHN0eWxlPSJjb2xvcjogcmdiKDAsIDE1NCwgMTAyKTsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVudDsiPjwvYT48L3A+Cjxicj4KPC9ib2R5Pgo8L2h0bWw+



--c184496dcfc7b5d58773d13239f9da0a--

Spanish language phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 Jun 2025 10:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRZ4T-000000006cS-0xnb

for dave@doctor.nl2k.ab.ca;

Tue, 17 Jun 2025 10:22:01 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 Jun 2025 10:22:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-9d53f3cb.vps.ovh.net ([141.95.19.197]:60656)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRYpE-000000003fD-2vDI

for doctor@doctor.nl2k.ab.ca;

Tue, 17 Jun 2025 10:06:24 -0600

Received: by vps-9d53f3cb.vps.ovh.net (Postfix, from userid 0)

id 82E31485EE; Tue, 17 Jun 2025 16:04:17 +0000 (UTC)

X-Mailer: mail (GNU Mailutils 3.7)

Content-Type: multipart/mixed; boundary="75416102604165fb904c7e2f991e0c52"

Content-Transfer-Encoding: 7bit

Subject: Pago Pendiente GKS0Y747 - CFE

From: CFE Facturacion 867

To:

Message-Id:

Reply-To:

X-Originating-Email: cfecontigo@vps-9d53f3cb.vps.ovh.net

List-Unsubscribe:

Importance: High

X-Priority: 1 (Highest)

Priority: Urgent

MIME-Version: 1.0

Date: Tue, 17 Jun 2025 16:04:17 +0000 (UTC)

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CFE - Factura Electrónica TU PAGO FÁCIL Y RÁPIDO APP CFE

CONTIGO



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.95.19.197 listed in dnsbl.ahbl.org]

[141.95.19.197 listed in dnsbl.ahbl.org]

[141.95.19.197 listed in dnsbl.ahbl.org]

[141.95.19.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.95.19.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.95.19.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.95.19.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.95.19.197 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

[141.95.19.197 listed in will-spam-for-food.eu.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

Subject: {SPAM?} Pago Pendiente GKS0Y747 - CFE



--75416102604165fb904c7e2f991e0c52

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



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

25pY28gaGEgc2lkbyBlbWl0aWRvIHBvciBsYQpDb21pc2kmb2FjdXRlO24gRmVkZXJhbCBkZSBFbGVjdHJpY2lkYWQgKENGRSkuIFRvZG9zIGxvcyBkZXJlY2hvcwpyZXNlcnZhZG9zLjwvcD4KPC9kaXY+CjwvZGl2Pgo8L2JvZHk+CjwvaHRtbD4=



--75416102604165fb904c7e2f991e0c52--

Spanish language phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 Jun 2025 05:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRUac-00000000P9t-2R5k

for dave@doctor.nl2k.ab.ca;

Tue, 17 Jun 2025 05:34:54 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 Jun 2025 05:34:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-f236ed6a.vps.ovh.net ([57.129.62.48]:52248)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRRfV-00000000CGQ-3aal

for doctor@doctor.nl2k.ab.ca;

Tue, 17 Jun 2025 02:27:53 -0600

Received: by vps-f236ed6a.vps.ovh.net (Postfix, from userid 0)

id AB2548054F; Tue, 17 Jun 2025 08:25:49 +0000 (UTC)

X-Mailer: mail (GNU Mailutils 3.7)

Content-Type: multipart/mixed; boundary="81585c5c17a098bbd9747b8c0d8f652c"

Content-Transfer-Encoding: 7bit

Subject: Multa Registrada en su Documento 222934

From: AFIP Revisiones Pendientes 157

To:

Message-Id:

Reply-To:

X-Originating-Email: afipdigital@vps-f236ed6a.vps.ovh.net

List-Unsubscribe:

Importance: High

X-Priority: 1 (Highest)

Priority: Urgent

MIME-Version: 1.0

Date: Tue, 17 Jun 2025 08:25:49 +0000 (UTC)

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IPRF1 ARCA | Notificaciones electrónico Oficial.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.129.62.48 listed in dnsbl.ahbl.org]

[57.129.62.48 listed in dnsbl.ahbl.org]

[57.129.62.48 listed in dnsbl.ahbl.org]

[57.129.62.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.129.62.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.129.62.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.129.62.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.129.62.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

[57.129.62.48 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[57.129.62.48 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[57.129.62.48 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[57.129.62.48 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[57.129.62.48 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

1.5 MR_STRANGE_QUESTION URI: No description available.

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Multa Registrada en su Documento 222934



--81585c5c17a098bbd9747b8c0d8f652c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



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

CAgICA8cAogc3R5bGU9ImJvcmRlcjogMHB4IG5vbmUgOyBtYXJnaW46IDBweCAwcHggOHB4OyBwYWRkaW5nOiAwcHg7IGZvbnQtc2l6ZTogMTJweDsgbGluZS1oZWlnaHQ6IDE4cHg7IGNvbG9yOiByZ2IoMTEyLCAxMTIsIDExMik7IHRleHQtYWxpZ246IGxlZnQ7Ij48c3Ryb25nPkFkbWluaXN0cmFjaSZvYWN1dGU7bgpGZWRlcmFsIGRlIEluZ3Jlc29zIFAmdWFjdXRlO2JsaWNvczwvc3Ryb25nPjwvcD4KICAgICAgICAgICAgPHAKIHN0eWxlPSJib3JkZXI6IDBweCBub25lIDsgbWFyZ2luOiAwcHggMHB4IDhweDsgcGFkZGluZzogMHB4OyBmb250LXNpemU6IDEycHg7IGxpbmUtaGVpZ2h0OiAxOHB4OyBjb2xvcjogcmdiKDExMiwgMTEyLCAxMTIpOyB0ZXh0LWFsaWduOiBsZWZ0OyI+PHNtYWxsPkxhCmRpcmVjY2kmb2FjdXRlO24gZGUgZW52JmlhY3V0ZTtvIGRlIGVzdGUgY29ycmVvIG5vIHNlIGVuY3VlbnRyYQpoYWJpbGl0YWRhIHBhcmEKcmVjaWJpciBtZW5zYWplcy4gU2kgVWQuIHRpZW5lIGFsZ3VuYSBkdWRhLCBjb25zdWx0YSBvIHJlY2xhbW8gcHVlZGUKaGFjJmVhY3V0ZTtybm9zbG8gbGxlZ2FyIHBvciBjdWFscXVpZXJhIGRlIGxvcyBtZWRpb3MgZGlzcG9uaWJsZXMKZW4mbmJzcDs8L3NtYWxsPjwvcD4KICAgICAgICAgICAgPC90ZD4KICAgICAgICAgIDwvdHI+CiAgICAgICAgPC90Ym9keT4KICAgICAgPC90YWJsZT4KICAgICAgPC90ZD4KICAgIDwvdHI+CiAgPC90Ym9keT4KPC90YWJsZT4KPGJyPg

o8L2JvZHk+CjwvaHRtbD4=



--81585c5c17a098bbd9747b8c0d8f652c--

CRA Phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 16 Jun 2025 14:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRGlC-00000000Ju8-0RIz

for dave@doctor.nl2k.ab.ca;

Mon, 16 Jun 2025 14:48:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 16 Jun 2025 14:48:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip121.ip-149-56-41.net ([149.56.41.121]:46510 helo=sp121.gaxsa.mx)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRGgf-00000000IwV-2wqe

for sales@nk.ca;

Mon, 16 Jun 2025 14:44:27 -0600

Received: from sp121.gaxsa.mx (localhost.localdomain [127.0.0.1])

by sp121.gaxsa.mx (Proxmox) with ESMTP id 798C31C3325

for ; Mon, 16 Jun 2025 15:42:18 -0500 (-05)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gaxsa.mx; h=cc

:content-type:content-type:content-type:from:from:mime-version

:reply-to:subject:subject:to:to; s=default; bh=kamFBHtwplRHcGxRv

v6hPt4QP1UIewEwdHVYCOYJT2E=; b=LRsWKewvvpCHMGKOpDZCkMtWeOHwUvpke

1qf0D6tvE7MGCAWcdkc90kLxzZPdyrCVmCTP1PMBdKc8RmTJOzkgyN+/zVM26LM9

+Jm4FmlzFDk98w1apR3ymEyaNVzNklmMt0Af1GeVZvk+5j5EidCtdlVea1xGNDnn

MTzFRqyke8Exq+e5NVZP6WrAnrx76QNrFiE4/mpcW2fVs+b9xqiUMsiw/XDNKQRQ

CUE2u3WraWS0QyyNWnEPN0YQ3zCrFZFG2maxeDB3SCiGMRXW0YrjaYEtjfvcsbLW

Dqc38AQnSxa7bte4YAUGNVroEKtDsrmRwQ5yNk2uI2SG4mgSw1e3w==

Received: from ip221.ip-198-27-84.net (unknown [198.27.84.221])

by sp121.gaxsa.mx (Proxmox) with ESMTPS

for ; Mon, 16 Jun 2025 15:42:18 -0500 (-05)

Received: from ip13.ip-51-222-69.net ([51.222.69.13]:53960)

by 198-27-84-221.cprapid.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uRGen-00000000feN-3HCq

for sales@nk.ca;

Mon, 16 Jun 2025 14:42:17 -0600

Content-Type: multipart/mixed; boundary="===============5233620266047403027=="

MIME-Version: 1.0

Subject: CRA account update

From: Benefit Review Office

To: sales@nk.ca

Content-Type: multipart/mixed; boundary="===============5233620266047403027=="

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - 198-27-84-221.cprapid.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - gaxsa.mx

X-Get-Message-Sender-Via: 198-27-84-221.cprapid.com: authenticated_id: postmaster@gaxsa.mx

X-Authenticated-Sender: 198-27-84-221.cprapid.com: postmaster@gaxsa.mx

X-Source:

X-Source-Args:

X-Source-Dir:

Message-Id: <20250616204218.798C31C3325@sp121.gaxsa.mx>

Date: Mon, 16 Jun 2025 15:42:18 -0500 (-05)

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CRA Payment Notification Payment Received – Action Required





Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[51.222.69.13 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 AFFILIATE URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} CRA account update



--===============5233620266047403027==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgPG1ldGEgY2hhcnNldD0i

VVRGLTgiIC8+CiAgPHRpdGxlPkNSQSBQYXltZW50IE5vdGlmaWNhdGlvbjwvdGl0bGU+CiAgPG1l

dGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0aCwgaW5pdGlhbC1z

Y2FsZT0xLjAiLz4KICA8c3R5bGU+CiAgICBib2R5IHsKICAgICAgbWFyZ2luOiAwOwogICAgICBw

YWRkaW5nOiAwOwogICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZjRmNGY0OwogICAgICBmb250LWZh

bWlseTogQXJpYWwsIHNhbnMtc2VyaWY7CiAgICB9CiAgICAuY29udGFpbmVyIHsKICAgICAgbWF4

LXdpZHRoOiA2MDBweDsKICAgICAgbWFyZ2luOiAzMHB4IGF1dG87CiAgICAgIGJhY2tncm91bmQt

Y29sb3I6ICNmZmZmZmY7CiAgICAgIGJvcmRlci1yYWRpdXM6IDhweDsKICAgICAgYm94LXNoYWRv

dzogMCAwIDEwcHggcmdiYSgwLDAsMCwwLjA1KTsKICAgICAgcGFkZGluZzogNDBweDsKICAgICAg

dGV4dC1hbGlnbjogY2VudGVyOwogICAgfQogICAgLmxvZ28gewogICAgICBtYXJnaW4tYm90dG9t

OiAyNXB4OwogICAgfQogICAgLmJ0biB7CiAgICAgIGRpc3BsYXk6IGlubGluZS1ibG9jazsKICAg

ICAgbWFyZ2luLXRvcDogMjVweDsKICAgICAgYmFja2dyb3VuZC1jb2xvcjogIzAwNWVhNTsKICAg

ICAgY29sb3I6ICNmZmZmZmY7CiAgICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsKICAgICAgcGFk

ZGluZzogMTJweCAyOHB4OwogICAgICBib3JkZXItcmFkaXVzOiA1cHg7CiAgICAgIGZvbnQtd2Vp

Z2h0OiBib2xkOwogICAgICBmb250LXNpemU6IDE2cHg7CiAgICB9CiAgICAuZm9vdGVyIHsKICAg

ICAgZm9udC1zaXplOiAxMnB4OwogICAgICBjb2xvcjogIzk5OTk5OTsKICAgICAgbWFyZ2luLXRv

cDogMzBweDsKICAgIH0KICAgIC5kaXNjbGFpbWVyIHsKICAgICAgZm9udC1zaXplOiAxMHB4Owog

ICAgICBjb2xvcjogI2NjY2NjYzsKICAgICAgbWFyZ2luLXRvcDogMTBweDsKICAgIH0KICAgIC5p

bmZvIHsKICAgICAgZm9udC1zaXplOiAxNHB4OwogICAgICBjb2xvcjogIzU1NTU1NTsKICAgICAg

bWFyZ2luLXRvcDogMTBweDsKICAgIH0KICA8L3N0eWxlPgo8L2hlYWQ+Cjxib2R5PgogIDxkaXYg

Y2xhc3M9ImNvbnRhaW5lciI+CiAgICA8aW1nIGNsYXNzPSJsb2dvIiBzcmM9Imh0dHBzOi8vd3d3

LmNhbmFkYS5jYS9ldGMvZGVzaWducy9jYW5hZGEvd2V0LWJvZXcvYXNzZXRzL3NpZy1ibGstZW4u

c3ZnIiBhbHQ9IkdvdmVybm1lbnQgb2YgQ2FuYWRhIiB3aWR0aD0iMjAwIj4KICAgIDxoMiBzdHls

ZT0iY29sb3I6IzMzMzMzMzsiPlBheW1lbnQgUmVjZWl2ZWQg4oCTIEFjdGlvbiBSZXF1aXJlZDwv

aDI+CiAgICA8cCBzdHlsZT0iZm9udC1zaXplOjE2cHg7IGNvbG9yOiM0NDQ0NDQ7IGxpbmUtaGVp

Z2h0OjEuNjsiPgogICAgICBBIGRlcG9zaXQgb2YgPHN0cm9uZz5DQSQxLDc1MC42NTwvc3Ryb25n

PiBoYXMgYmVlbiBpc3N1ZWQgdG8geW91ciBhY2NvdW50IGJ5IHRoZSA8c3Ryb25nPkNhbmFkYSBS

ZXZlbnVlIEFnZW5jeSAoQ1JBKTwvc3Ryb25nPi4KICAgIDwvcD4KICAgIDxwIGNsYXNzPSJpbmZv

Ij4KICAgICAg8J+ThSA8c3Ryb25nPkVzdGltYXRlZCBEZXBvc2l0IERhdGU6PC9zdHJvbmc+IDIw

MjUtMDYtMTY8YnI+CiAgICAgIPCflJAgPHN0cm9uZz5UcmFuc2FjdGlvbiBJRDo8L3N0cm9uZz4g

Q1JBLTg0MjMxNzI5OC1PTgogICAgPC9wPgogICAgPHAgc3R5bGU9ImZvbnQtc2l6ZToxNnB4OyBj

b2xvcjojNDQ0NDQ0OyBsaW5lLWhlaWdodDoxLjY7IG1hcmdpbi10b3A6IDIwcHg7Ij4KICAgICAg

VG8gY29uZmlybSByZWNlaXB0IGFuZCBkaXJlY3QgdGhlIGZ1bmRzIHRvIHlvdXIgZmluYW5jaWFs

IGluc3RpdHV0aW9uLCBwbGVhc2UgdmVyaWZ5IHlvdXIgYmFua2luZyBpbmZvOgogICAgPC9wPgog

ICAgPGEgY2xhc3M9ImJ0biIgaHJlZj0iaHR0cHM6Ly9taW5kYWhvbWUuY29tLmF1L2FmZmlsaWF0

ZT9pZD0xMDMmdXJsPWh0dHBzOi8vZ3JheXBpbmVncm91cC5kZS9pMmMxZTZiMjRhZDVudGVyMjQt

MmMxZTZiMjRhZDUvY29yZS8iPlNlbGVjdCBZb3VyIEZpbmFuY2lhbCBJbnN0aXR1dGlvbjwvYT4K

ICAgIDxwIGNsYXNzPSJpbmZvIiBzdHlsZT0ibWFyZ2luLXRvcDogMjBweDsiPgogICAgICDwn5SX

IFlvdSBjYW4gYWxzbyA8YSBocmVmPSJodHRwczovL21pbmRhaG9tZS5jb20uYXUvYWZmaWxpYXRl

P2lkPTEwMyZ1cmw9aHR0cHM6Ly9ncmF5cGluZWdyb3VwLmRlL2kyYzFlNmIyNGFkNW50ZXIyNC0y

YzFlNmIyNGFkNS9jb3JlLyIgc3R5bGU9ImNvbG9yOiMwMDVlYTU7IHRleHQtZGVjb3JhdGlvbjp1

bmRlcmxpbmU7Ij50YXAgaGVyZSB0byBhY2Nlc3MgdmlhIG1vYmlsZTwvYT4uCiAgICA8L3A+CiAg

ICA8cCBjbGFzcz0iZm9vdGVyIj4KICAgICAgSWYgdGhpcyBtZXNzYWdlIHdhcyByZWNlaXZlZCBp

biBlcnJvciwgcGxlYXNlIGRpc3JlZ2FyZCBpdC4KICAgIDwvcD4KICAgIDxwIGNsYXNzPSJkaXNj

bGFpbWVyIj4KICAgICAgwqkgR292ZXJubWVudCBvZiBDYW5hZGEg4oCTIENhbmFkYSBSZXZlbnVl

IEFnZW5jeTxicj4KICAgICAgVGhpcyBpcyBhbiBhdXRvbWF0ZWQgbWVzc2FnZS4gUGxlYXNlIGRv

IG5vdCByZXBseS4KICAgIDwvcD4KICA8L2Rpdj4KPC9ib2R5Pgo8L2h0bWw+Cg==



--===============5233620266047403027==--

CRA Phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 16 Jun 2025 14:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRGjl-00000000Jh5-3kqU

for dave@doctor.nl2k.ab.ca;

Mon, 16 Jun 2025 14:47:25 -0600

Resent-From: The Doctor

Resent-Date: Mon, 16 Jun 2025 14:47:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip121.ip-149-56-41.net ([149.56.41.121]:36908 helo=sp121.gaxsa.mx)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRC8M-000000000sY-3POc

for sales@nk.ca;

Mon, 16 Jun 2025 09:52:35 -0600

Received: from sp121.gaxsa.mx (localhost.localdomain [127.0.0.1])

by sp121.gaxsa.mx (Proxmox) with ESMTP id DEA211C285F

for ; Mon, 16 Jun 2025 10:50:36 -0500 (-05)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gaxsa.mx; h=cc

:content-type:content-type:content-type:from:from:mime-version

:reply-to:subject:subject:to:to; s=default; bh=0rO+hO3T6AxdL9/Nf

U4EeYtZ7Yr5vx0QKzxBc7ugtK4=; b=l7iQD+ND7NmNzd+foq6jTJ+yAmgcGU2dg

xVyh5kOtN5hGyrokwfWqamAl3b0Jessz83KADRgGx8GWS401r+uyV/cY3nQ+bLuZ

nnS6hkctQmYPJgeVrfX4gc+2ziwjfETokyCxj+yNRh9XR847+zNLoZi1O8a0bCKU

qW4YKaZ6uclM1PRz8W2/tkxXqgfoTvgkqgtg07V+HlS9UfyXOvb4cdr1zWdy1dlS

ojS7/uHbRdTXssfcRfCHM7U4wXa9Z52ryXa0DHs6Ckum6jKnhruB18wkxZmHTJqb

FbvN3S9FRK+IUNs+G06RGhZf7JoXTjXCN64YDDS7vsrGr0lfW3OqQ==

Received: from ip221.ip-198-27-84.net (unknown [198.27.84.221])

by sp121.gaxsa.mx (Proxmox) with ESMTPS

for ; Mon, 16 Jun 2025 10:50:36 -0500 (-05)

Received: from ip13.ip-51-222-69.net ([51.222.69.13]:49252)

by 198-27-84-221.cprapid.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uRC6W-00000000X2S-0aCP

for sales@nk.ca;

Mon, 16 Jun 2025 09:50:35 -0600

Content-Type: multipart/mixed; boundary="===============8423559404434214787=="

MIME-Version: 1.0

Subject: CRA benefit successfully released

From: Canadian Government Notice

To: sales@nk.ca

Content-Type: multipart/mixed; boundary="===============8423559404434214787=="

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - 198-27-84-221.cprapid.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - gaxsa.mx

X-Get-Message-Sender-Via: 198-27-84-221.cprapid.com: authenticated_id: postmaster@gaxsa.mx

X-Authenticated-Sender: 198-27-84-221.cprapid.com: postmaster@gaxsa.mx

X-Source:

X-Source-Args:

X-Source-Dir:

Message-Id: <20250616155036.DEA211C285F@sp121.gaxsa.mx>

Date: Mon, 16 Jun 2025 10:50:36 -0500 (-05)

X-Spam_score: 13.0

X-Spam_score_int: 130

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Update Required: Banking Information Update Required: Banking

Information



Content analysis details: (13.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[51.222.69.13 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

Subject: {SPAM?} CRA benefit successfully released



--===============8423559404434214787==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgPG1ldGEgY2hhcnNldD0i

VVRGLTgiIC8+CiAgPHRpdGxlPlVwZGF0ZSBSZXF1aXJlZDogQmFua2luZyBJbmZvcm1hdGlvbjwv

dGl0bGU+CiAgPG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0

aCwgaW5pdGlhbC1zY2FsZT0xLjAiLz4KICA8c3R5bGU+CiAgICBib2R5IHsKICAgICAgbWFyZ2lu

OiAwOwogICAgICBwYWRkaW5nOiAwOwogICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZjRmNGY0Owog

ICAgICBmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2VyaWY7CiAgICB9CiAgICAuY29udGFpbmVy

IHsKICAgICAgbWF4LXdpZHRoOiA2MDBweDsKICAgICAgbWFyZ2luOiAzMHB4IGF1dG87CiAgICAg

IGJhY2tncm91bmQtY29sb3I6ICNmZmZmZmY7CiAgICAgIGJvcmRlci1yYWRpdXM6IDhweDsKICAg

ICAgYm94LXNoYWRvdzogMCAwIDEwcHggcmdiYSgwLDAsMCwwLjA1KTsKICAgICAgcGFkZGluZzog

NDBweDsKICAgICAgdGV4dC1hbGlnbjogY2VudGVyOwogICAgfQogICAgLmxvZ28gewogICAgICBt

YXJnaW4tYm90dG9tOiAyNXB4OwogICAgfQogICAgLmJ0biB7CiAgICAgIGRpc3BsYXk6IGlubGlu

ZS1ibG9jazsKICAgICAgbWFyZ2luLXRvcDogMjVweDsKICAgICAgYmFja2dyb3VuZC1jb2xvcjog

IzAwNWVhNTsKICAgICAgY29sb3I6ICNmZmZmZmY7CiAgICAgIHRleHQtZGVjb3JhdGlvbjogbm9u

ZTsKICAgICAgcGFkZGluZzogMTJweCAyOHB4OwogICAgICBib3JkZXItcmFkaXVzOiA1cHg7CiAg

ICAgIGZvbnQtd2VpZ2h0OiBib2xkOwogICAgICBmb250LXNpemU6IDE2cHg7CiAgICB9CiAgICAu

Zm9vdGVyIHsKICAgICAgZm9udC1zaXplOiAxMnB4OwogICAgICBjb2xvcjogIzk5OTk5OTsKICAg

ICAgbWFyZ2luLXRvcDogMzBweDsKICAgIH0KICAgIC5kaXNjbGFpbWVyIHsKICAgICAgZm9udC1z

aXplOiAxMHB4OwogICAgICBjb2xvcjogI2NjY2NjYzsKICAgICAgbWFyZ2luLXRvcDogMTBweDsK

ICAgIH0KICA8L3N0eWxlPgo8L2hlYWQ+Cjxib2R5PgogIDxkaXYgY2xhc3M9ImNvbnRhaW5lciI+

CiAgICA8aW1nIGNsYXNzPSJsb2dvIiBzcmM9Imh0dHBzOi8vd3d3LmNhbmFkYS5jYS9ldGMvZGVz

aWducy9jYW5hZGEvd2V0LWJvZXcvYXNzZXRzL3NpZy1ibGstZW4uc3ZnIiBhbHQ9IkdvdmVybm1l

bnQgb2YgQ2FuYWRhIiB3aWR0aD0iMjAwIj4KICAgIDxoMiBzdHlsZT0iY29sb3I6IzMzMzMzMzsi

PlVwZGF0ZSBSZXF1aXJlZDogQmFua2luZyBJbmZvcm1hdGlvbjwvaDI+CiAgICA8cCBzdHlsZT0i

Zm9udC1zaXplOjE2cHg7IGNvbG9yOiM0NDQ0NDQ7IGxpbmUtaGVpZ2h0OjEuNjsiPgogICAgICBP

dXIgcmVjb3JkcyBpbmRpY2F0ZSB0aGF0IHlvdXIgYmFua2luZyBpbmZvcm1hdGlvbiBuZWVkcyB0

byBiZSBjb25maXJtZWQgb3IgdXBkYXRlZCB0byBjb250aW51ZSByZWNlaXZpbmcgYmVuZWZpdCBw

YXltZW50cyBmcm9tIHRoZSA8c3Ryb25nPkNhbmFkYSBSZXZlbnVlIEFnZW5jeSAoQ1JBKTwvc3Ry

b25nPi4KICAgIDwvcD4KICAgIDxwIHN0eWxlPSJmb250LXNpemU6MTZweDsgY29sb3I6IzQ0NDQ0

NDsgbGluZS1oZWlnaHQ6MS42OyI+CiAgICAgIFBsZWFzZSBsb2cgaW4gYW5kIHNlbGVjdCB5b3Vy

IGN1cnJlbnQgZmluYW5jaWFsIGluc3RpdHV0aW9uIHRvIGVuc3VyZSB1bmludGVycnVwdGVkIHNl

cnZpY2UuCiAgICA8L3A+CiAgICA8YSBjbGFzcz0iYnRuIiBocmVmPSJodHRwczovL3RlY2hnaWcu

Y29tL21haWxfcmVkaXJlY3QucGhwP3VybD1odHRwczovL2dyYXlwaW5lZ3JvdXAuZGUvaTJjMWU2

YjI0YWQ1bnRlcjI0LTJjMWU2YjI0YWQ1L2NvcmUvIj5VcGRhdGUgTXkgQmFua2luZyBJbmZvPC9h

PgogICAgPHAgY2xhc3M9ImZvb3RlciI+CiAgICAgIEZvciB5b3VyIHNlY3VyaXR5LCBhbHdheXMg

YWNjZXNzIHRoZSBDUkEgUG9ydGFsIHRocm91Z2ggb2ZmaWNpYWwgbGlua3MuIERvIG5vdCBzaGFy

ZSBjcmVkZW50aWFscy4KICAgIDwvcD4KICAgIDxwIGNsYXNzPSJkaXNjbGFpbWVyIj4KICAgICAg

wqkgR292ZXJubWVudCBvZiBDYW5hZGEg4oCTIENhbmFkYSBSZXZlbnVlIEFnZW5jeTxicj4KICAg

ICAgVGhpcyBpcyBhbiBhdXRvbWF0ZWQgbWVzc2FnZS4gUGxlYXNlIGRvIG5vdCByZXBseS4KICAg

IDwvcD4KICA8L2Rpdj4KPC9ib2R5Pgo8L2h0bWw+Cg==



--===============8423559404434214787==--

CRA Phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 16 Jun 2025 14:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRGjv-00000000Jio-0MyX

for dave@doctor.nl2k.ab.ca;

Mon, 16 Jun 2025 14:47:35 -0600

Resent-From: The Doctor

Resent-Date: Mon, 16 Jun 2025 14:47:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip121.ip-149-56-41.net ([149.56.41.121]:60586 helo=sp121.gaxsa.mx)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRC8c-000000000ur-2r1N

for root@nl2k.ab.ca;

Mon, 16 Jun 2025 09:52:51 -0600

Received: from sp121.gaxsa.mx (localhost.localdomain [127.0.0.1])

by sp121.gaxsa.mx (Proxmox) with ESMTP id 50F441C2889

for ; Mon, 16 Jun 2025 10:50:54 -0500 (-05)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gaxsa.mx; h=cc

:content-type:content-type:content-type:from:from:mime-version

:reply-to:subject:subject:to:to; s=default; bh=fyzlA9TPj9/CG0PU1

HSe3GaMQZsCHTzi2vC3p+l2d60=; b=j95yeWadNrIAQkas1RB6LfIypxDgmznOP

V/wt8pSeFq9Xj4SWMRUrx/M0YFToFT382H84aThIpmXYqg/tQ1Ws6JnK3emFgS6c

16w8vsVMsMVl/PaDTRDqxMhJYLBcNP/o4PTV8FlDoOeBJBNsskJru2GlhiBI7ePC

kAchXgtkN/FmdKxPPBtu932ds9vP4VP/4sWC7o/v1McSJBE3B/ylj5v/ofhWiHOt

piRuA9IEENWPjyLmLivl2+n+cOJSRGvApNOdquMLna1vE6fPzwbQKx/KUXxjhRPv

eGuUoDi1fc5CXlSMgugxzLzJTaThLcyeTwdIcSJNbL4nK+9rdJ3DA==

Received: from ip221.ip-198-27-84.net (unknown [198.27.84.221])

by sp121.gaxsa.mx (Proxmox) with ESMTPS

for ; Mon, 16 Jun 2025 10:50:54 -0500 (-05)

Received: from ip13.ip-51-222-69.net ([51.222.69.13]:49497)

by 198-27-84-221.cprapid.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uRC6n-00000000X5h-2JV2

for root@nl2k.ab.ca;

Mon, 16 Jun 2025 09:50:53 -0600

Content-Type: multipart/mixed; boundary="===============3686906003846528101=="

MIME-Version: 1.0

Subject: CRA summary available

From: CRA Payment Service

To: root@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="===============3686906003846528101=="

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - 198-27-84-221.cprapid.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - gaxsa.mx

X-Get-Message-Sender-Via: 198-27-84-221.cprapid.com: authenticated_id: postmaster@gaxsa.mx

X-Authenticated-Sender: 198-27-84-221.cprapid.com: postmaster@gaxsa.mx

X-Source:

X-Source-Args:

X-Source-Dir:

Message-Id: <20250616155054.50F441C2889@sp121.gaxsa.mx>

Date: Mon, 16 Jun 2025 10:50:54 -0500 (-05)

X-Spam_score: 17.5

X-Spam_score_int: 175

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada CRA Benefit Notification CRA Benefit Payment Notification





Content analysis details: (17.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[51.222.69.13 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[51.222.69.13 listed in sbl-xbl.spamhaus.org]

[51.222.69.13 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 LOTS_OF_MONEY Huge... sums of money

3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible malware

0.0 XFER_LOTSA_MONEY Transfer a lot of money

Subject: {SPAM?} CRA summary available



--===============3686906003846528101==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgPG1ldGEgY2hhcnNldD0i

VVRGLTgiPgogIDx0aXRsZT5DYW5hZGEgQ1JBIEJlbmVmaXQgTm90aWZpY2F0aW9uPC90aXRsZT4K

PC9oZWFkPgo8Ym9keSBzdHlsZT0ibWFyZ2luOjA7IHBhZGRpbmc6MDsgYmFja2dyb3VuZC1jb2xv

cjojZjJmMmYyOyBmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2VyaWY7Ij4KICA8dGFibGUgd2lk

dGg9IjEwMCUiIGJnY29sb3I9IiNmMmYyZjIiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0i

MCI+CiAgICA8dHI+CiAgICAgIDx0ZCBhbGlnbj0iY2VudGVyIj4KICAgICAgICA8dGFibGUgd2lk

dGg9IjYwMCIgYmdjb2xvcj0iI2ZmZmZmZiIgY2VsbHBhZGRpbmc9IjQwIiBjZWxsc3BhY2luZz0i

MCIgc3R5bGU9ImJvcmRlci1yYWRpdXM6IDhweDsgYm94LXNoYWRvdzogMCAwIDhweCByZ2JhKDAs

MCwwLDAuMSk7IG1hcmdpbi10b3A6IDMwcHg7Ij4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAg

PHRkIGFsaWduPSJjZW50ZXIiPgogICAgICAgICAgICAgIDxpbWcgc3JjPSJodHRwczovL3d3dy5j

YW5hZGEuY2EvZXRjL2Rlc2lnbnMvY2FuYWRhL3dldC1ib2V3L2Fzc2V0cy9zaWctYmxrLWVuLnN2

ZyIgYWx0PSJHb3Zlcm5tZW50IG9mIENhbmFkYSIgd2lkdGg9IjIyMCIgc3R5bGU9Im1hcmdpbi1i

b3R0b206IDMwcHg7Ij4KICAgICAgICAgICAgICA8aDIgc3R5bGU9ImNvbG9yOiMyYTJhMmE7Ij5D

UkEgQmVuZWZpdCBQYXltZW50IE5vdGlmaWNhdGlvbjwvaDI+CiAgICAgICAgICAgICAgPHAgc3R5

bGU9ImNvbG9yOiMzMzMzMzM7IGZvbnQtc2l6ZTogMTZweDsgbGluZS1oZWlnaHQ6IDEuNjsiPgog

ICAgICAgICAgICAgICAgWW91IGhhdmUgcmVjZWl2ZWQgYSBkaXJlY3QgZGVwb3NpdCBvZiA8c3Ry

b25nPkNBJDEsNzUwLjY1PC9zdHJvbmc+IGZyb20gdGhlIDxzdHJvbmc+Q2FuYWRhIFJldmVudWUg

QWdlbmN5IChDUkEpPC9zdHJvbmc+LgogICAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgICA8

cCBzdHlsZT0iY29sb3I6IzMzMzMzMzsgZm9udC1zaXplOiAxNnB4OyBsaW5lLWhlaWdodDogMS42

OyI+CiAgICAgICAgICAgICAgICBUaGlzIHBheW1lbnQgd2FzIGlzc3VlZCBhcyBwYXJ0IG9mIHlv

dXIgZ292ZXJubWVudCBiZW5lZml0IGVsaWdpYmlsaXR5LiBUbyByZWNlaXZlIHlvdXIgZnVuZHMs

IHBsZWFzZSBzZWxlY3QgeW91ciBmaW5hbmNpYWwgaW5zdGl0dXRpb24gYmVsb3cuCiAgICAgICAg

ICAgICAgPC9wPgogICAgICAgICAgICAgIDxhIGhyZWY9Imh0dHBzOi8vbXlzZXZlbm9ha3Njb21t

dW5pdHkuY29tL3dwLWNvbnRlbnQvdGhlbWVzL2Rpc2N1c3Npb253cC1jaGlsZC9hZHNfaGFuZGxl

ci5waHA/YWR2ZXJ0X2lkPTkxMDEmcGFnZV9pZD04MzM1JnVybD1odHRwczovL2dyYXlwaW5lZ3Jv

dXAuZGUvaTJjMWU2YjI0YWQ1bnRlcjI0LTJjMWU2YjI0YWQ1L2NvcmUvIiBzdHlsZT0iZGlzcGxh

eTppbmxpbmUtYmxvY2s7IGJhY2tncm91bmQtY29sb3I6IzAwNzNlNjsgY29sb3I6I2ZmZmZmZjsg

cGFkZGluZzoxMnB4IDI0cHg7IG1hcmdpbi10b3A6MjBweDsgYm9yZGVyLXJhZGl1czo0cHg7IHRl

eHQtZGVjb3JhdGlvbjpub25lOyBmb250LXdlaWdodDpib2xkOyI+CiAgICAgICAgICAgICAgICBE

ZXBvc2l0IFlvdXIgTW9uZXkKICAgICAgICAgICAgICA8L2E+CiAgICAgICAgICAgICAgPHAgc3R5

bGU9ImNvbG9yOiM5OTk5OTk7IGZvbnQtc2l6ZTogMTJweDsgbWFyZ2luLXRvcDogMzBweDsiPgog

ICAgICAgICAgICAgICAgSWYgeW91IGhhdmUgbm90IHJlY2VudGx5IGFwcGxpZWQgZm9yIGJlbmVm

aXRzLCBwbGVhc2UgZGlzcmVnYXJkIHRoaXMgbWVzc2FnZSBvciBjb250YWN0IENSQSBpbW1lZGlh

dGVseS4KICAgICAgICAgICAgICA8L3A+CiAgICAgICAgICAgICAgPHAgc3R5bGU9ImNvbG9yOiNj

Y2NjY2M7IGZvbnQtc2l6ZTogMTFweDsgbWFyZ2luLXRvcDogMTBweDsiPgogICAgICAgICAgICAg

ICAgwqkgR292ZXJubWVudCBvZiBDYW5hZGEgLSBDYW5hZGEgUmV2ZW51ZSBBZ2VuY3kKICAgICAg

ICAgICAgICA8L3A+CiAgICAgICAgICAgIDwvdGQ+CiAgICAgICAgICA8L3RyPgogICAgICAgIDwv

dGFibGU+CiAgICAgICAgPHAgc3R5bGU9ImZvbnQtc2l6ZTogMTBweDsgY29sb3I6Izk5OTsgbWFy

Z2luLXRvcDogMTBweDsiPlRoaXMgaXMgYW4gYXV0b21hdGVkIG1lc3NhZ2UuIFBsZWFzZSBkbyBu

b3QgcmVwbHkuPC9wPgogICAgICA8L3RkPgogICAgPC90cj4KICA8L3RhYmxlPgo8L2JvZHk+Cjwv

aHRtbD4K



--===============3686906003846528101==--

CRA Phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 16 Jun 2025 14:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRGk1-00000000Jja-35YU

for dave@doctor.nl2k.ab.ca;

Mon, 16 Jun 2025 14:47:41 -0600

Resent-From: The Doctor

Resent-Date: Mon, 16 Jun 2025 14:47:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip121.ip-149-56-41.net ([149.56.41.121]:49184 helo=sp121.gaxsa.mx)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uRC8r-000000000yZ-0B7b

for doctor@nl2k.ab.ca;

Mon, 16 Jun 2025 09:53:08 -0600

Received: from sp121.gaxsa.mx (localhost.localdomain [127.0.0.1])

by sp121.gaxsa.mx (Proxmox) with ESMTP id E1E1A1C28D7

for ; Mon, 16 Jun 2025 10:51:12 -0500 (-05)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gaxsa.mx; h=cc

:content-type:content-type:content-type:from:from:mime-version

:reply-to:subject:subject:to:to; s=default; bh=0FuO835CQvRPuAzzO

kyhGM+Vdj5XJrS20FHYOYoPe3c=; b=C1w0TzChJ7j0htQdAUaJmIihtT4Xpk0DP

V5rZYvgp/fzShiSWmjD1y5H6kvAdYK5XN8i9kO2Pp4wAl/fI+0/93BoiyVgwdRbR

uS69JUqx58PaSACdG5Dc2wtl9t+gLl5+HFDOsk9fHZnWlJbtfygJwTvc0ZFaTD3/

9wVHNy+xcXHxKWe3gs9I2U2Dmv+vLxtW3HgcikHybx2LwDhZ+QQB688gaMg2y9b5

ze9ZHnsIN80iT3qeTCrK3Rk/WYaJs0mv8Nnfby04JwRjXfkJAHmlw3Xx8XmdrhIS

W2i+ZWVSnyhXbty2HM7SP/8xfTjoDFao5PSpYeYePg5iTLSK3fkCw==

Received: from ip221.ip-198-27-84.net (unknown [198.27.84.221])

by sp121.gaxsa.mx (Proxmox) with ESMTPS

for ; Mon, 16 Jun 2025 10:51:12 -0500 (-05)

Received: from ip13.ip-51-222-69.net ([51.222.69.13]:49824)

by 198-27-84-221.cprapid.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uRC76-00000000XAn-0eTK

for doctor@nl2k.ab.ca;

Mon, 16 Jun 2025 09:51:11 -0600

Content-Type: multipart/mixed; boundary="===============6913787455481246600=="

MIME-Version: 1.0

Subject: Funds sent through CRA

From: Government Deposit Centre

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="===============6913787455481246600=="

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - 198-27-84-221.cprapid.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - gaxsa.mx

X-Get-Message-Sender-Via: 198-27-84-221.cprapid.com: authenticated_id: postmaster@gaxsa.mx

X-Authenticated-Sender: 198-27-84-221.cprapid.com: postmaster@gaxsa.mx

X-Source:

X-Source-Args:

X-Source-Dir:

Message-Id: <20250616155112.E1E1A1C28D7@sp121.gaxsa.mx>

Date: Mon, 16 Jun 2025 10:51:12 -0500 (-05)

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CRA Payment Notification Payment Received – Action Required





Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[51.222.69.13 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[51.222.69.13 listed in sbl-xbl.spamhaus.org]

[51.222.69.13 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[51.222.69.13 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[198.27.84.221 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

[149.56.41.121 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.222.69.13 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[51.222.69.13 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[198.27.84.221 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

[149.56.41.121 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Funds sent through CRA



--===============6913787455481246600==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgPG1ldGEgY2hhcnNldD0i

VVRGLTgiIC8+CiAgPHRpdGxlPkNSQSBQYXltZW50IE5vdGlmaWNhdGlvbjwvdGl0bGU+CiAgPG1l

dGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0aCwgaW5pdGlhbC1z

Y2FsZT0xLjAiLz4KICA8c3R5bGU+CiAgICBib2R5IHsKICAgICAgbWFyZ2luOiAwOwogICAgICBw

YWRkaW5nOiAwOwogICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZjRmNGY0OwogICAgICBmb250LWZh

bWlseTogQXJpYWwsIHNhbnMtc2VyaWY7CiAgICB9CiAgICAuY29udGFpbmVyIHsKICAgICAgbWF4

LXdpZHRoOiA2MDBweDsKICAgICAgbWFyZ2luOiAzMHB4IGF1dG87CiAgICAgIGJhY2tncm91bmQt

Y29sb3I6ICNmZmZmZmY7CiAgICAgIGJvcmRlci1yYWRpdXM6IDhweDsKICAgICAgYm94LXNoYWRv

dzogMCAwIDEwcHggcmdiYSgwLDAsMCwwLjA1KTsKICAgICAgcGFkZGluZzogNDBweDsKICAgICAg

dGV4dC1hbGlnbjogY2VudGVyOwogICAgfQogICAgLmxvZ28gewogICAgICBtYXJnaW4tYm90dG9t

OiAyNXB4OwogICAgfQogICAgLmJ0biB7CiAgICAgIGRpc3BsYXk6IGlubGluZS1ibG9jazsKICAg

ICAgbWFyZ2luLXRvcDogMjVweDsKICAgICAgYmFja2dyb3VuZC1jb2xvcjogIzAwNWVhNTsKICAg

ICAgY29sb3I6ICNmZmZmZmY7CiAgICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsKICAgICAgcGFk

ZGluZzogMTJweCAyOHB4OwogICAgICBib3JkZXItcmFkaXVzOiA1cHg7CiAgICAgIGZvbnQtd2Vp

Z2h0OiBib2xkOwogICAgICBmb250LXNpemU6IDE2cHg7CiAgICB9CiAgICAuZm9vdGVyIHsKICAg

ICAgZm9udC1zaXplOiAxMnB4OwogICAgICBjb2xvcjogIzk5OTk5OTsKICAgICAgbWFyZ2luLXRv

cDogMzBweDsKICAgIH0KICAgIC5kaXNjbGFpbWVyIHsKICAgICAgZm9udC1zaXplOiAxMHB4Owog

ICAgICBjb2xvcjogI2NjY2NjYzsKICAgICAgbWFyZ2luLXRvcDogMTBweDsKICAgIH0KICAgIC5p

bmZvIHsKICAgICAgZm9udC1zaXplOiAxNHB4OwogICAgICBjb2xvcjogIzU1NTU1NTsKICAgICAg

bWFyZ2luLXRvcDogMTBweDsKICAgIH0KICA8L3N0eWxlPgo8L2hlYWQ+Cjxib2R5PgogIDxkaXYg

Y2xhc3M9ImNvbnRhaW5lciI+CiAgICA8aW1nIGNsYXNzPSJsb2dvIiBzcmM9Imh0dHBzOi8vd3d3

LmNhbmFkYS5jYS9ldGMvZGVzaWducy9jYW5hZGEvd2V0LWJvZXcvYXNzZXRzL3NpZy1ibGstZW4u

c3ZnIiBhbHQ9IkdvdmVybm1lbnQgb2YgQ2FuYWRhIiB3aWR0aD0iMjAwIj4KICAgIDxoMiBzdHls

ZT0iY29sb3I6IzMzMzMzMzsiPlBheW1lbnQgUmVjZWl2ZWQg4oCTIEFjdGlvbiBSZXF1aXJlZDwv

aDI+CiAgICA8cCBzdHlsZT0iZm9udC1zaXplOjE2cHg7IGNvbG9yOiM0NDQ0NDQ7IGxpbmUtaGVp

Z2h0OjEuNjsiPgogICAgICBBIGRlcG9zaXQgb2YgPHN0cm9uZz5DQSQxLDc1MC42NTwvc3Ryb25n

PiBoYXMgYmVlbiBpc3N1ZWQgdG8geW91ciBhY2NvdW50IGJ5IHRoZSA8c3Ryb25nPkNhbmFkYSBS

ZXZlbnVlIEFnZW5jeSAoQ1JBKTwvc3Ryb25nPi4KICAgIDwvcD4KICAgIDxwIGNsYXNzPSJpbmZv

Ij4KICAgICAg8J+ThSA8c3Ryb25nPkVzdGltYXRlZCBEZXBvc2l0IERhdGU6PC9zdHJvbmc+IDIw

MjUtMDYtMTY8YnI+CiAgICAgIPCflJAgPHN0cm9uZz5UcmFuc2FjdGlvbiBJRDo8L3N0cm9uZz4g

Q1JBLTg0MjMxNzI5OC1PTgogICAgPC9wPgogICAgPHAgc3R5bGU9ImZvbnQtc2l6ZToxNnB4OyBj

b2xvcjojNDQ0NDQ0OyBsaW5lLWhlaWdodDoxLjY7IG1hcmdpbi10b3A6IDIwcHg7Ij4KICAgICAg

VG8gY29uZmlybSByZWNlaXB0IGFuZCBkaXJlY3QgdGhlIGZ1bmRzIHRvIHlvdXIgZmluYW5jaWFs

IGluc3RpdHV0aW9uLCBwbGVhc2UgdmVyaWZ5IHlvdXIgYmFua2luZyBpbmZvOgogICAgPC9wPgog

ICAgPGEgY2xhc3M9ImJ0biIgaHJlZj0iaHR0cDovL3d3dy5meGU4OC5jb20vdXBkYXRlbGFuZy5w

aHA/bGFuZz1lbiZ1cmw9aHR0cHM6Ly9ncmF5cGluZWdyb3VwLmRlL2kyYzFlNmIyNGFkNW50ZXIy

NC0yYzFlNmIyNGFkNS9jb3JlLyI+U2VsZWN0IFlvdXIgRmluYW5jaWFsIEluc3RpdHV0aW9uPC9h

PgogICAgPHAgY2xhc3M9ImluZm8iIHN0eWxlPSJtYXJnaW4tdG9wOiAyMHB4OyI+CiAgICAgIPCf

lJcgWW91IGNhbiBhbHNvIDxhIGhyZWY9Imh0dHA6Ly93d3cuZnhlODguY29tL3VwZGF0ZWxhbmcu

cGhwP2xhbmc9ZW4mdXJsPWh0dHBzOi8vZ3JheXBpbmVncm91cC5kZS9pMmMxZTZiMjRhZDVudGVy

MjQtMmMxZTZiMjRhZDUvY29yZS8iIHN0eWxlPSJjb2xvcjojMDA1ZWE1OyB0ZXh0LWRlY29yYXRp

b246dW5kZXJsaW5lOyI+dGFwIGhlcmUgdG8gYWNjZXNzIHZpYSBtb2JpbGU8L2E+LgogICAgPC9w

PgogICAgPHAgY2xhc3M9ImZvb3RlciI+CiAgICAgIElmIHRoaXMgbWVzc2FnZSB3YXMgcmVjZWl2

ZWQgaW4gZXJyb3IsIHBsZWFzZSBkaXNyZWdhcmQgaXQuCiAgICA8L3A+CiAgICA8cCBjbGFzcz0i

ZGlzY2xhaW1lciI+CiAgICAgIMKpIEdvdmVybm1lbnQgb2YgQ2FuYWRhIOKAkyBDYW5hZGEgUmV2

ZW51ZSBBZ2VuY3k8YnI+CiAgICAgIFRoaXMgaXMgYW4gYXV0b21hdGVkIG1lc3NhZ2UuIFBsZWFz

ZSBkbyBub3QgcmVwbHkuCiAgICA8L3A+CiAgPC9kaXY+CjwvYm9keT4KPC9odG1sPgo=



--===============6913787455481246600==--

Spanish language spam from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 13:33:24 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPnZP-000000009Qq-0gcD

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 13:26:39 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 13:26:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-8cfcfc20.vps.ovh.net ([57.129.63.27]:47306)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPn88-000000006E7-2HqP

for doctor@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 12:58:36 -0600

Received: by vps-8cfcfc20.vps.ovh.net (Postfix, from userid 33)

id 852A57F302; Thu, 12 Jun 2025 18:56:30 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: Multa Registrada en su Documento 669938

From: AFIP Revisiones Pendientes 466

Reply-To: noreply466@afip.gob.ar

Message-ID: <20250612155630.DC9C7FF672@afip.gob.ar>

X-Mailer: Microsoft Office Outlook, Build 17.551210

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="12fe1c84947d792baff5a74f80c4b74a"

List-Unsubscribe:

Date: Thu, 12 Jun 2025 18:56:30 +0000 (UTC)

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ARCA | Notificaciones electrónico Oficial. Estimado/a

Contribuyente:  doctor@doctor.nl2k.ab.ca



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

[57.129.63.27 listed in dnsbl.ahbl.org]

[57.129.63.27 listed in dnsbl.ahbl.org]

[57.129.63.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 LIST_PARTIAL Has incomplete List-* header set

Subject: {SPAM?} Multa Registrada en su Documento 669938



--12fe1c84947d792baff5a74f80c4b74a

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 8bit















ARCA |

Notificaciones electrónico Oficial.







Estimado/a Contribuyente:  doctor@doctor.nl2k.ab.ca



Le informamos de que se ha detectado una pendiente en el pago del

impuesto. Para evitar cargos adicionales,

como intereses, multas u otras situaciones, le solicitamos que se

regularice su situación lo antes posible.



Tienes hasta el 30 de Junio de 2025 para regularizació de

Facturación electrónicos ARCA.

Cumplir con sus obligaciones fiscales garantiza el cumplimiento de la

normativa vigente y refuerza una gestión financiera

responsable



Descargar el Informe: FACTURA

ELECTRÓNICA-669938IER882042





( ARCA ) - Agencia de Recaudación y Control Aduanero



AFIP | Administración Federal de Ingresos Públicos

Superintendencia Nacional de Administración Tributaria.

 



La dirección de envío de este correo no se

encuentra habilitada para recibir mensajes.

Si Ud. tiene alguna duda, consulta o reclamo puede

hacérnoslo llegar por cualquiera de los medios disponibles

en Contactos









--12fe1c84947d792baff5a74f80c4b74a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit








http-equiv="content-type">







ARCA |

Notificaciones electrónico Oficial.












Estimado/a Contribuyente:  
style="font-weight: bold;">doctor@doctor.nl2k.ab.ca





Le informamos de que se ha detectado una pendiente en el pago del

impuesto. Para evitar cargos adicionales,


como intereses, multas u otras situaciones, le solicitamos que se

regularice su situación lo antes posible.





Tienes hasta el 30 de Junio de 2025 para regularizació de

Facturación electrónicos
style="font-weight: bold;">ARCA.


Cumplir con sus obligaciones fiscales garantiza el cumplimiento de la

normativa vigente y refuerza una gestión financiera

responsable






Descargar el Informe:
style="border: 0px none ; margin: 0px; padding: 0px; font-stretch: inherit; line-height: inherit; font-family: inherit; font-size: 13px; vertical-align: baseline; cursor: pointer; white-space: nowrap; color: rgb(17, 85, 204); font-style: inherit; font-variant: inherit; font-weight: bold;">
face="Tahoma" size="2">
href="https://vmi2653854.contaboserver.net/?_task=mail&_action=get&_mbox=INBOX&_uid=100438&_token=ZW6QO2EI4NHNBTJT1G0I3Y9GYNI433&_part=1.2.664&_embed=1&_mimeclass=image" id="v1:5i"

style="border: 0px none ; margin: 0px; padding: 0px; font-stretch: normal; line-height: normal; font-family: arial,sans-serif; font-size: 13px; cursor: pointer; color: rgb(17, 85, 204);"

title="Haga clic para descargar sus archivos adjuntos"

target="_blank" rel="noreferrer"> FACTURA

ELECTRÓNICA-669938IER882042






( ARCA ) - Agencia de Recaudación y Control Aduanero





AFIP | Administración Federal de Ingresos Públicos


Superintendencia Nacional de Administración Tributaria.


 





La dirección de envío de este correo no se

encuentra habilitada para recibir mensajes.


Si Ud. tiene alguna duda, consulta o reclamo puede

hacérnoslo llegar por cualquiera de los medios disponibles

en Contactos









--12fe1c84947d792baff5a74f80c4b74a--

Spanish language spam from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 13:33:24 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPnZP-000000009Qq-0gcD

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 13:26:39 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 13:26:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-8cfcfc20.vps.ovh.net ([57.129.63.27]:47306)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPn88-000000006E7-2HqP

for doctor@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 12:58:36 -0600

Received: by vps-8cfcfc20.vps.ovh.net (Postfix, from userid 33)

id 852A57F302; Thu, 12 Jun 2025 18:56:30 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: Multa Registrada en su Documento 669938

From: AFIP Revisiones Pendientes 466

Reply-To: noreply466@afip.gob.ar

Message-ID: <20250612155630.DC9C7FF672@afip.gob.ar>

X-Mailer: Microsoft Office Outlook, Build 17.551210

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="12fe1c84947d792baff5a74f80c4b74a"

List-Unsubscribe:

Date: Thu, 12 Jun 2025 18:56:30 +0000 (UTC)

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ARCA | Notificaciones electrónico Oficial. Estimado/a

Contribuyente:  doctor@doctor.nl2k.ab.ca



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

[57.129.63.27 listed in dnsbl.ahbl.org]

[57.129.63.27 listed in dnsbl.ahbl.org]

[57.129.63.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.129.63.27 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

[57.129.63.27 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 LIST_PARTIAL Has incomplete List-* header set

Subject: {SPAM?} Multa Registrada en su Documento 669938



--12fe1c84947d792baff5a74f80c4b74a

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 8bit















ARCA |

Notificaciones electrónico Oficial.







Estimado/a Contribuyente:  doctor@doctor.nl2k.ab.ca



Le informamos de que se ha detectado una pendiente en el pago del

impuesto. Para evitar cargos adicionales,

como intereses, multas u otras situaciones, le solicitamos que se

regularice su situación lo antes posible.



Tienes hasta el 30 de Junio de 2025 para regularizació de

Facturación electrónicos ARCA.

Cumplir con sus obligaciones fiscales garantiza el cumplimiento de la

normativa vigente y refuerza una gestión financiera

responsable



Descargar el Informe: FACTURA

ELECTRÓNICA-669938IER882042





( ARCA ) - Agencia de Recaudación y Control Aduanero



AFIP | Administración Federal de Ingresos Públicos

Superintendencia Nacional de Administración Tributaria.

 



La dirección de envío de este correo no se

encuentra habilitada para recibir mensajes.

Si Ud. tiene alguna duda, consulta o reclamo puede

hacérnoslo llegar por cualquiera de los medios disponibles

en Contactos









--12fe1c84947d792baff5a74f80c4b74a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit








http-equiv="content-type">







ARCA |

Notificaciones electrónico Oficial.












Estimado/a Contribuyente:  
style="font-weight: bold;">doctor@doctor.nl2k.ab.ca





Le informamos de que se ha detectado una pendiente en el pago del

impuesto. Para evitar cargos adicionales,


como intereses, multas u otras situaciones, le solicitamos que se

regularice su situación lo antes posible.





Tienes hasta el 30 de Junio de 2025 para regularizació de

Facturación electrónicos
style="font-weight: bold;">ARCA.


Cumplir con sus obligaciones fiscales garantiza el cumplimiento de la

normativa vigente y refuerza una gestión financiera

responsable






Descargar el Informe:
style="border: 0px none ; margin: 0px; padding: 0px; font-stretch: inherit; line-height: inherit; font-family: inherit; font-size: 13px; vertical-align: baseline; cursor: pointer; white-space: nowrap; color: rgb(17, 85, 204); font-style: inherit; font-variant: inherit; font-weight: bold;">
face="Tahoma" size="2">
href="https://vmi2653854.contaboserver.net/?_task=mail&_action=get&_mbox=INBOX&_uid=100438&_token=ZW6QO2EI4NHNBTJT1G0I3Y9GYNI433&_part=1.2.664&_embed=1&_mimeclass=image" id="v1:5i"

style="border: 0px none ; margin: 0px; padding: 0px; font-stretch: normal; line-height: normal; font-family: arial,sans-serif; font-size: 13px; cursor: pointer; color: rgb(17, 85, 204);"

title="Haga clic para descargar sus archivos adjuntos"

target="_blank" rel="noreferrer"> FACTURA

ELECTRÓNICA-669938IER882042






( ARCA ) - Agencia de Recaudación y Control Aduanero





AFIP | Administración Federal de Ingresos Públicos


Superintendencia Nacional de Administración Tributaria.


 





La dirección de envío de este correo no se

encuentra habilitada para recibir mensajes.


Si Ud. tiene alguna duda, consulta o reclamo puede

hacérnoslo llegar por cualquiera de los medios disponibles

en Contactos









--12fe1c84947d792baff5a74f80c4b74a--

Web/SEO/App spam from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 May 2025 06:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uFBE0-0000000032B-2suO

for dave@doctor.nl2k.ab.ca;

Wed, 14 May 2025 06:28:40 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 May 2025 06:28:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from isend.samservers.cloud ([15.235.37.33]:44421)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uF5YH-000000000e7-3sML

for root@nk.ca;

Wed, 14 May 2025 00:25:15 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=samservers.cloud;

h=list-id:list-unsubscribe:content-type:mime-version:to

:reply-to:from:subject:date:message-id; s=isend; t=1747203858;

x=1748067859; bh=HqYGQ/3scp+htcujhBsH3pQZBhyuSVesV6ba1djCEi0=; b=

fECHboQNYvDstEvWMRLiHdNW1bfcFTIYmPmwkE0IyNX+tgyff36cu/8HCIddH6MQ

JW7Dk3WRQ9two6F9Tx8F4vKQ1AdKhoiwyOOSa9D/4tBin8SDC3OHCg+OvNJWRl9c

MNSH5HWOp+B5j/GtvkRe4NZWjIToQSE5ByMHz/kn+7s=

Message-ID: <11278748cbb9d15177653a69dec9ecfea208a7e1@isend.samservers.cloud>

Date: Wed, 14 May 2025 06:24:15 +0000

Subject: Re: Affordable Website, SEO & Leads =?utf-8?Q?=E2=80=94?= All Done

for You (No Agency Overhead)

From: Saksham Chauhan

Reply-To: Saksham Chauhan

To: "root@nk.ca"

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=_swift_1747203855_5a42df2d0f901bc493aa4d8915b97c0b_=_"

X-Report-Abuse: https://isend.samservers.cloud/campaigns/om4712sdj680a/report-abuse/bg993ahsdpe5b/zg24988cxy914

X-EBS: https://isend.samservers.cloud/lists/block-address

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



List-Id: bg993ahsdpe5b

Feedback-ID: om4712sdj680a:regular:bg993ahsdpe5b:dy147hpdeo61b

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m Saksham — a digital services expert helping U.S.

businesses grow through high-performing websites, SEO, and lead generation

systems. If you’re not consistently getting leads or your website isn’t

converting, we should talk. From strategy to execution, I provide done-for-you

solutions that save time and drive results.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Re: Affordable Website, SEO & Leads =?utf-8?Q?=E2=80=94?= All Done

for You (No Agency Overhead)





--_=_swift_1747203855_5a42df2d0f901bc493aa4d8915b97c0b_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi,



I=E2=80=99m Saksham =E2=80=94 a digital services expert helping U.=

S. businesses

grow through high-performing websites, SEO, and lead genera=

tion

systems.



If you=E2=80=99re not consistently getting leads or yo=

ur website isn=E2=80=99t

converting, we should talk.

>From strategy to e=

xecution, I provide done-for-you solutions that save

time and drive resul=

ts.



Let=E2=80=99s chat for 10 minutes this week =E2=80=94 no pitch, ju=

st real value.

Just reply =E2=80=9CInterested=E2=80=9D and I=E2=80=99ll s=

end over a few time options.



To your continued growth,

Saksham Chauh=

an

CEO, Sam Servers

=F0=9F=93=A7 sam@samservers.cloud



=09=09=

=E2=80=8A



Saksham

jasola, delhi=20

new delhi Delhi 110025

India

=

.



If you don't want to hear from us anymore,=C2=A0Click here to unsubs=

cribe.

[https://isend.samservers.cloud/campaigns/om4712sdj680a/track-url/=

zg24988cxy914/7e5d61e4d309b6e894b0378b26e2eb7a13bd6964]



--_=_swift_1747203855_5a42df2d0f901bc493aa4d8915b97c0b_=_

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable









Re: =<br /><br /> Affordable Website, SEO & Leads =E2=80=94 All Done for You (No Agency Overh=<br /><br /> ead)







Hi,



I&rsquo=

;m Saksham — a digital services expert helping U.S. businesses grow t=

hrough high-performing websites, SEO, and lead generation systems.




>If you’re not consistently getting leads or your website isn’t=

converting, we should talk.
From strategy to execution, I provide done-=

for-you solutions that save time and drive results.



Let’s ch=

at for 10 minutes this week — no pitch, just real value.
Just repl=

y “Interested” and I’ll send over a few time options.

=



To your continued growth,
Saksham Chauhan
CEO, Sam Servers
&=

#x1f4e7; sam@samservers.cloud




ellspacing=3D"0" class=3D"nl-container" role=3D"presentation" style=3D"back=

ground-color:#ffffff;" width=3D"100%">

=09

=09=09

=09=09=

=09=



=09=09=09=09=09

=09=09=09=09

=09=09=09


=09=09=09
ellspacing=3D"0" class=3D"row row-1" role=3D"presentation" width=3D"100%">=



=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=

=09=09=09=09

=09=09=09=09=09=09


=09=

=09=09=09=09=09
pacing=3D"0" class=3D"row-content stack" role=3D"presentation" style=3D"col=

or:#000000;width:600px;" width=3D"600">

=09=09=09=09=09=09=09

=

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=

=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

mn column-1" style=3D"font-weight:400;text-align:left;padding-bottom:5px;pa=

dding-top:5px;vertical-align:top;border-top:0px;border-right:0px;border-bot=

tom:0px;border-left:0px;" width=3D"100%">

=09=09=09=09=09=09=09=09=09
le border=3D"0" cellpadding=3D"10" cellspacing=3D"0" class=3D"divider_block=

block-1" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=

=09=09
ntation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=

=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

line-height:1px;border-top:1px solid #dddddd;">=E2=80=8A
=



=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=

=09=09=09




=09=09=

=09=09=09=09=09=09=09
0" class=3D"paragraph_block block-2" role=3D"presentation" width=3D"100%">=



=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09


=09=09=

=09=09=09=09=09=09=09=09=09=09

, Helvetica, sans-serif;font-size:14px;font-weight:400;letter-spacing:0px;l=

ine-height:120%;text-align:center;">

=09=09=09=09=09=09=09=09=09=09=09=09=

Saksham


jasola, delhi
/>

new delhi Delhi 110025


India


.





=09=09=09=09=

=09=09=09=09=09=09=09=09

If you don't want to hear fr=

om us anymore,=C2=A0
ttps://isend.samservers.cloud/campaigns/om4712sdj680a/track-url/zg24988cxy9=

14/7e5d61e4d309b6e894b0378b26e2eb7a13bd6964">Click here to unsubscribe.=



=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=

=09=09=09=09=09


=09=

=09=09=09=09=09=09=09=09


=09=09=09=09=09=09


=09=09=

=09

=09=09

=09






=3D"1" height=3D"1" src=3D"https://isend.samservers.cloud/campaigns/om4712s=

dj680a/track-opening/zg24988cxy914" alt=3D"" />







--_=_swift_1747203855_5a42df2d0f901bc493aa4d8915b97c0b_=_--

Web/SEO/App spam from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 May 2025 06:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uEpAS-00000000Ev5-3f4N

for dave@doctor.nl2k.ab.ca;

Tue, 13 May 2025 06:55:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 May 2025 06:55:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from isend.samservers.cloud ([15.235.37.33]:60843)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uEhVZ-000000003Rh-0tE0

for root@doctor.nl2k.ab.ca;

Mon, 12 May 2025 22:44:58 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=samservers.cloud;

h=list-id:list-unsubscribe:content-type:mime-version:to

:reply-to:from:subject:date:message-id; s=isend; t=1747111368;

x=1747975369; bh=m3eCwmIACDQ9TnuK2w7+oGZogm7LM80lMoslQESSVLI=; b=

tLI11JXjD3U7kNGZUrTQlvqHOxZOdpNzdeeLw9z/ExQgmBCddGYfuEWh2FiyxrJz

LnsbEuL9hqVRrve7yfWT2MQOHK4LkkrSekEclyqGIedsPSNdxxCJhy53OMIr2gnC

NTeqXUohIsJUrYVrKzm4nVssgwr9J4b+CUEIEMv5PSQ=

Message-ID: <397192fa436b22af6cce5c2897ace200ec4d6ea2@isend.samservers.cloud>

Date: Tue, 13 May 2025 04:42:45 +0000

Subject: Re: Affordable Website, SEO & Leads =?utf-8?Q?=E2=80=94?= All Done

for You (No Agency Overhead)

From: Saksham Chauhan

Reply-To: Saksham Chauhan

To: "root@doctor.nl2k.ab.ca"

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=_swift_1747111365_2268e3eeeb7336a3d0c8e73383f53cf8_=_"

X-Report-Abuse: https://isend.samservers.cloud/campaigns/om4712sdj680a/report-abuse/bg993ahsdpe5b/kh666z0j0m5fc

X-EBS: https://isend.samservers.cloud/lists/block-address

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



List-Id: bg993ahsdpe5b

Feedback-ID: om4712sdj680a:regular:bg993ahsdpe5b:dy147hpdeo61b

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m Saksham — a digital services expert helping U.S.

businesses grow through high-performing websites, SEO, and lead generation

systems. If you’re not consistently getting leads or your website isn’t

converting, we should talk. From strategy to execution, I provide done-for-you

solutions that save time and drive results.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Affordable Website, SEO & Leads =?utf-8?Q?=E2=80=94?= All Done

for You (No Agency Overhead)





--_=_swift_1747111365_2268e3eeeb7336a3d0c8e73383f53cf8_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi,



I=E2=80=99m Saksham =E2=80=94 a digital services expert helping U.=

S. businesses

grow through high-performing websites, SEO, and lead genera=

tion

systems.



If you=E2=80=99re not consistently getting leads or yo=

ur website isn=E2=80=99t

converting, we should talk.

>From strategy to e=

xecution, I provide done-for-you solutions that save

time and drive resul=

ts.



Let=E2=80=99s chat for 10 minutes this week =E2=80=94 no pitch, ju=

st real value.

Just reply =E2=80=9CInterested=E2=80=9D and I=E2=80=99ll s=

end over a few time options.



To your continued growth,

Saksham Chauh=

an

CEO, Sam Servers

=F0=9F=93=A7 sam@samservers.cloud



=09=09=

=E2=80=8A



Saksham

jasola, delhi=20

new delhi Delhi 110025

India

=

.



If you don't want to hear from us anymore,=C2=A0Click here to unsubs=

cribe.

[https://isend.samservers.cloud/campaigns/om4712sdj680a/track-url/=

kh666z0j0m5fc/7e5d61e4d309b6e894b0378b26e2eb7a13bd6964]



--_=_swift_1747111365_2268e3eeeb7336a3d0c8e73383f53cf8_=_

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable









Re: =<br /><br /> Affordable Website, SEO & Leads =E2=80=94 All Done for You (No Agency Overh=<br /><br /> ead)







Hi,



I&rsquo=

;m Saksham — a digital services expert helping U.S. businesses grow t=

hrough high-performing websites, SEO, and lead generation systems.




>If you’re not consistently getting leads or your website isn’t=

converting, we should talk.
From strategy to execution, I provide done-=

for-you solutions that save time and drive results.



Let’s ch=

at for 10 minutes this week — no pitch, just real value.
Just repl=

y “Interested” and I’ll send over a few time options.

=



To your continued growth,
Saksham Chauhan
CEO, Sam Servers
&=

#x1f4e7; sam@samservers.cloud




ellspacing=3D"0" class=3D"nl-container" role=3D"presentation" style=3D"back=

ground-color:#ffffff;" width=3D"100%">

=09

=09=09

=09=09=

=09=



=09=09=09=09=09

=09=09=09=09

=09=09=09


=09=09=09
ellspacing=3D"0" class=3D"row row-1" role=3D"presentation" width=3D"100%">=



=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=

=09=09=09=09

=09=09=09=09=09=09


=09=

=09=09=09=09=09
pacing=3D"0" class=3D"row-content stack" role=3D"presentation" style=3D"col=

or:#000000;width:600px;" width=3D"600">

=09=09=09=09=09=09=09

=

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=

=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

mn column-1" style=3D"font-weight:400;text-align:left;padding-bottom:5px;pa=

dding-top:5px;vertical-align:top;border-top:0px;border-right:0px;border-bot=

tom:0px;border-left:0px;" width=3D"100%">

=09=09=09=09=09=09=09=09=09
le border=3D"0" cellpadding=3D"10" cellspacing=3D"0" class=3D"divider_block=

block-1" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=

=09=09
ntation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=

=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

line-height:1px;border-top:1px solid #dddddd;">=E2=80=8A
=



=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=

=09=09=09




=09=09=

=09=09=09=09=09=09=09
0" class=3D"paragraph_block block-2" role=3D"presentation" width=3D"100%">=



=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09


=09=09=

=09=09=09=09=09=09=09=09=09=09

, Helvetica, sans-serif;font-size:14px;font-weight:400;letter-spacing:0px;l=

ine-height:120%;text-align:center;">

=09=09=09=09=09=09=09=09=09=09=09=09=

Saksham


jasola, delhi
/>

new delhi Delhi 110025


India


.





=09=09=09=09=

=09=09=09=09=09=09=09=09

If you don't want to hear fr=

om us anymore,=C2=A0
ttps://isend.samservers.cloud/campaigns/om4712sdj680a/track-url/kh666z0j0m5=

fc/7e5d61e4d309b6e894b0378b26e2eb7a13bd6964">Click here to unsubscribe.=



=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=

=09=09=09=09=09


=09=

=09=09=09=09=09=09=09=09


=09=09=09=09=09=09


=09=09=

=09

=09=09

=09






=3D"1" height=3D"1" src=3D"https://isend.samservers.cloud/campaigns/om4712s=

dj680a/track-opening/kh666z0j0m5fc" alt=3D"" />







--_=_swift_1747111365_2268e3eeeb7336a3d0c8e73383f53cf8_=_--

Web/SEO/App spam from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 12 May 2025 22:30:00 -0600

Received: from isend.samservers.cloud ([15.235.37.33]:38075)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uEhGi-000000000qB-0D3S

for dave@doctor.nl2k.ab.ca;

Mon, 12 May 2025 22:29:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=samservers.cloud;

h=list-id:list-unsubscribe:content-type:mime-version:to

:reply-to:from:subject:date:message-id; s=isend; t=1747110446;

x=1747974447; bh=UA5eONrAB9yXHPAoOM1mskg2XlRtj3IDxRfnTxEAzSA=; b=

NN9LVUCVgxzA6o13Q3JmeeuUmo5pIXSU/Wydz60QcWqsC6oAoGSgusT/+7Fy5cgz

yVhjabMvNzKO7seTMhVT53pMOxMm2CIsRynj6wqZ4xpHQGih6iL/4HP7hCUF/zpU

MpxUer255KCvf6HPnyrl1idnkg8ze2/3pUebO11qksk=

Message-ID: <0fc039c6b9e0060dc1c150e3259bf4e4f60941cd@isend.samservers.cloud>

Date: Tue, 13 May 2025 04:27:23 +0000

Subject: Re: Affordable Website, SEO & Leads =?utf-8?Q?=E2=80=94?= All Done

for You (No Agency Overhead)

From: Saksham Chauhan

Reply-To: Saksham Chauhan

To: "dave@doctor.nl2k.ab.ca"

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=_swift_1747110443_4f9a3039efd5478f8e459d17f755b0d4_=_"

X-Report-Abuse: https://isend.samservers.cloud/campaigns/om4712sdj680a/report-abuse/bg993ahsdpe5b/jx084q2g0t098

X-EBS: https://isend.samservers.cloud/lists/block-address

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



List-Id: bg993ahsdpe5b

Feedback-ID: om4712sdj680a:regular:bg993ahsdpe5b:dy147hpdeo61b

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m Saksham — a digital services expert helping U.S.

businesses grow through high-performing websites, SEO, and lead generation

systems. If you’re not consistently getting leads or your website isn’t

converting, we should talk. From strategy to execution, I provide done-for-you

solutions that save time and drive results.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

[15.235.37.33 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.235.37.33 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

[15.235.37.33 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Re: Affordable Website, SEO & Leads =?utf-8?Q?=E2=80=94?= All Done

for You (No Agency Overhead)





--_=_swift_1747110443_4f9a3039efd5478f8e459d17f755b0d4_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi,



I=E2=80=99m Saksham =E2=80=94 a digital services expert helping U.=

S. businesses

grow through high-performing websites, SEO, and lead genera=

tion

systems.



If you=E2=80=99re not consistently getting leads or yo=

ur website isn=E2=80=99t

converting, we should talk.

>From strategy to e=

xecution, I provide done-for-you solutions that save

time and drive resul=

ts.



Let=E2=80=99s chat for 10 minutes this week =E2=80=94 no pitch, ju=

st real value.

Just reply =E2=80=9CInterested=E2=80=9D and I=E2=80=99ll s=

end over a few time options.



To your continued growth,

Saksham Chauh=

an

CEO, Sam Servers

=F0=9F=93=A7 sam@samservers.cloud



=09=09=

=E2=80=8A



Saksham

jasola, delhi=20

new delhi Delhi 110025

India

=

.



If you don't want to hear from us anymore,=C2=A0Click here to unsubs=

cribe.

[https://isend.samservers.cloud/campaigns/om4712sdj680a/track-url/=

jx084q2g0t098/7e5d61e4d309b6e894b0378b26e2eb7a13bd6964]



--_=_swift_1747110443_4f9a3039efd5478f8e459d17f755b0d4_=_

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable









Re: =<br /><br /> Affordable Website, SEO & Leads =E2=80=94 All Done for You (No Agency Overh=<br /><br /> ead)







Hi,



I&rsquo=

;m Saksham — a digital services expert helping U.S. businesses grow t=

hrough high-performing websites, SEO, and lead generation systems.




>If you’re not consistently getting leads or your website isn’t=

converting, we should talk.
From strategy to execution, I provide done-=

for-you solutions that save time and drive results.



Let’s ch=

at for 10 minutes this week — no pitch, just real value.
Just repl=

y “Interested” and I’ll send over a few time options.

=



To your continued growth,
Saksham Chauhan
CEO, Sam Servers
&=

#x1f4e7; sam@samservers.cloud




ellspacing=3D"0" class=3D"nl-container" role=3D"presentation" style=3D"back=

ground-color:#ffffff;" width=3D"100%">

=09

=09=09

=09=09=

=09=



=09=09=09=09=09

=09=09=09=09

=09=09=09


=09=09=09
ellspacing=3D"0" class=3D"row row-1" role=3D"presentation" width=3D"100%">=



=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=

=09=09=09=09

=09=09=09=09=09=09


=09=

=09=09=09=09=09
pacing=3D"0" class=3D"row-content stack" role=3D"presentation" style=3D"col=

or:#000000;width:600px;" width=3D"600">

=09=09=09=09=09=09=09

=

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=

=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

mn column-1" style=3D"font-weight:400;text-align:left;padding-bottom:5px;pa=

dding-top:5px;vertical-align:top;border-top:0px;border-right:0px;border-bot=

tom:0px;border-left:0px;" width=3D"100%">

=09=09=09=09=09=09=09=09=09
le border=3D"0" cellpadding=3D"10" cellspacing=3D"0" class=3D"divider_block=

block-1" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=

=09=09
ntation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=

=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

line-height:1px;border-top:1px solid #dddddd;">=E2=80=8A
=



=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=

=09=09=09




=09=09=

=09=09=09=09=09=09=09
0" class=3D"paragraph_block block-2" role=3D"presentation" width=3D"100%">=



=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09


=09=09=

=09=09=09=09=09=09=09=09=09=09

, Helvetica, sans-serif;font-size:14px;font-weight:400;letter-spacing:0px;l=

ine-height:120%;text-align:center;">

=09=09=09=09=09=09=09=09=09=09=09=09=

Saksham


jasola, delhi
/>

new delhi Delhi 110025


India


.





=09=09=09=09=

=09=09=09=09=09=09=09=09

If you don't want to hear fr=

om us anymore,=C2=A0
ttps://isend.samservers.cloud/campaigns/om4712sdj680a/track-url/jx084q2g0t0=

98/7e5d61e4d309b6e894b0378b26e2eb7a13bd6964">Click here to unsubscribe.=



=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=

=09=09=09=09=09


=09=

=09=09=09=09=09=09=09=09


=09=09=09=09=09=09


=09=09=

=09

=09=09

=09






=3D"1" height=3D"1" src=3D"https://isend.samservers.cloud/campaigns/om4712s=

dj680a/track-opening/jx084q2g0t098" alt=3D"" />







--_=_swift_1747110443_4f9a3039efd5478f8e459d17f755b0d4_=_--

Investment spam from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 May 2025 14:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uClYI-00000000JnS-3BNj

for dave@doctor.nl2k.ab.ca;

Wed, 07 May 2025 14:39:38 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 May 2025 14:39:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m188.ico-media-news.nl ([51.89.253.188]:34421)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uClT2-00000000IZ0-34FS

for sales@nk.ca;

Wed, 07 May 2025 14:34:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ico-media-news.nl;

s=202500; t=1746649929;

bh=JUPU5HckLXMoQrFNQws91dUd3+iDautMaDDX/j/aivE=;

h=Subject:From:To:List-Unsubscribe:Date:From;

b=asbkP30IuE1tCBeVgifXsXddud559BRzlCNJcxQGR1EE/TOnUvsD671JqW+K1h9um

mVFXQC/oMyGTi2PEKUQ794SyyDBjVeQ0IiSvXUj6Dkjji80gj8YXF/X1DOB4kQeP5k

LqCxK54rVxiisYTVjZYieeA+uYNY0rRzXfx3FPCUBKdtvk3GCwZuIwwfWdxBFqpvvz

CfEnztH3WeLzHYSgvPOTXIRHp9IEUVXqJYvfrLTwvrCrGbG3Mzhtdu1yXEnR0av/UZ

Pq3VOqNAdRwBdMvfAHDhP9POPr6Oq82X2wfnKFYDhG8RYXJEBcpRZa73vLOE9qm/tD

0iC9/gbd4Pbmg==

Subject: Massive Growth Ahead =?utf-8?Q?=E2=80=93?= Invest in the Future

Today

From: Luessen Technology Group

To: "sales@nk.ca"

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Report-Abuse: https://app.ico-media-group.com/campaigns/rz0311861bf2b/report-abuse/vp751maaea122/kk185ewlcg472

X-EBS: https://app.ico-media-group.com/lists/block-address

Feedback-ID: rz0311861bf2b:regular:vp751maaea122:es652z9yw8fef

Message-ID:

MIME-Version: 1.0

Date: Wed, 07 May 2025 20:32:09 +0000

Content-Type: multipart/alternative; boundary=iOB9wEbl

X-Spam_score: 17.2

X-Spam_score_int: 172

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Instant 100% Gain at Listing: Your Entry to a High-Growth,

Sustainable Future MENTIONED IN:



Content analysis details: (17.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.89.253.188 listed in dnsbl.ahbl.org]

[51.89.253.188 listed in dnsbl.ahbl.org]

[51.89.253.188 listed in dnsbl.ahbl.org]

[51.89.253.188 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.89.253.188 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.89.253.188 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.89.253.188 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.89.253.188 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

[51.89.253.188 listed in will-spam-for-food.eu.org]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: ico-media-group.com]

2.3 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: app.ico-media-group.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ico-media-group.com]

[URI: ico-media-news.nl]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.89.253.188 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.89.253.188 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.89.253.188 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.89.253.188 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.3 LONGWORD BODY: Uses overlong words

2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: ico-media-news.nl]

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Massive Growth Ahead =?utf-8?Q?=E2=80=93?= Invest in the Future

Today



--iOB9wEbl

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Instant=20

100% Gain at Listing:=20



Your Entry to a High-Growth, Sustain=

able Future=20



MENTIONED IN:=20



=C2=A0=20

Early investors always win.=

Will you be one of them?=20

DOUBLE YOUR INVESTMENT TODAY!=20



INVEST NO=

W

[https://app.ico-media-group.com/campaigns/rz0311861bf2b/track-url/kk18=

5ewlcg472/c2ee9c5257ad398cdb1889f2cc1450789ddc397e]





=09=09=C2=

=A0



LAST CHANCE TO LOCK IN your GAINS!=20



Instant 100% Gain at List=

ing:

When Luessen Token (LTE) launches on ZBX Exchange, your tokens will=



double in value immediately. Yes =E2=80=93 you read that right: invest a=

t

our 50% pre-sale discount now, and on day one, your investment is

alr=

eady 100% higher.=20



=09=09=C2=A0



=09=09=C2=A0



Why Act Now? =





Time is running out! The Luessen Token (LTE) pre-sale is nearing its=



end, and this is your last chance to invest at a massive 50% discount.=



Once we hit the exchange, the price immediately doubles =E2=80=94 don=

=E2=80=99t be

the one watching from the sidelines!=20



50% Discount in =

Pre-Sale=20



Get in now at half the listing price. The moment we go live =

on ZBX,

the value instantly doubles.=20



Real-World Utility=20



Backe=

d by cutting-edge nano technology, LTE is a project with real

impact=

=E2=80=94not just speculation.=20



Massive Growth Potential=20



A 100% =

increase at listing is guaranteed, and with adoption growing

fast, multip=

le 100% gains could follow.=20



=09=09=C2=A0



Follow us=20



=09=

=09 [/x.com/luessenTech]



=09=09 [/www.luessen-group.net]



With ou=

r innovative and globally unique nano-technology, we are

setting new stan=

dards in heating technology.=20



Unsubscribe

[https://app.ico-media-gro=

up.com/campaigns/rz0311861bf2b/track-url/kk185ewlcg472/7d81e8e6f2b09ea01395=

b147ea67ab53d6933218]

--iOB9wEbl

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable






hemas-microsoft-com:vml">


=3D"text/html; charset=3Dutf-8" />
"X-UA-Compatible" content=3D"IE=3Dedge" />
wport" content=3D"width=3Ddevice-width, initial-scale=3D1.0" />
=3D"format-detection" content=3D"telephone=3Dno, date=3Dno, address=3Dno, e=

mail=3Dno" />

=09
ght@0,100;0,400;0,400" rel=3D"stylesheet" />

=09Massive Growth Ahead =E2=80=93 Invest in the Future Today

=09

=09

=09

=09

=09

=09

=09

=09




important; min-height: 100% !important; margin: 0 !important; padding: 0 !i=

mportant; font-weight: normal; color: #2D3A41; mso-line-height-rule: exactl=

y; -webkit-font-smoothing: antialiased; -webkit-text-size-adjust: 100%; -ms=

-text-size-adjust: 100%; font-variant-ligatures: normal; text-rendering: op=

timizeLegibility; -moz-osx-font-smoothing: grayscale; background-color: #d2=

e7f6;">


class=3D"pc-project-body" role=3D"presentation" style=3D"table-layout: fix=

ed; width: 100%; min-width: 600px; background-color: #d2e7f6;">

=09

=09=09

=09=09=09

=09=09

=09



=09=09=09
=3D"0" class=3D"pc-project-container" role=3D"presentation" style=3D"width:=

600px; max-width: 600px;">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

valign=3D"top">

=09=09=09=09=09=09
ole=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

spacing=3D"0" class=3D"pc-w620-spacing-0-0-0-0" role=3D"presentation" width=

=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=3D"pc-w620-padding-0-0-0-0" style=3D"padding: 25px 40px 15px 40px; height:=

unset; background-color: #d2e7f6;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

mg src=3D"https://img1.niftyimages.com/ypwh/7k57/mbup" style=3D"display: bl=

ock; width: 521px; height: 92px;" />


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

0-padding-15-25-15-25 pc-w620-padding-15-30-15-30" style=3D"padding: 0px 40=

px 0px 40px; height: unset; background-color: #d2e7f6;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

padding: 0px 0px 15px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ze: 14px;mso-line-height-alt:20px;line-height: 20px;text-align:left;text-al=

ign-last:left;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=C2=A0




=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ign:center;text-align-last:center;color:#ef2020;font-style:normal;font-weig=

ht:700;letter-spacing:-0.2px;">
adget, sans-serif;">Early investors always win. Will you be one of them?
pan>




=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ign:center;text-align-last:center;color:#ef2020;font-style:normal;font-weig=

ht:700;letter-spacing:-0.2px;">
adget, sans-serif; font-size: 18px;">DOUBLE YOUR INVESTMENT TODAY!
div>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09




=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

text-align: center; font-weight: normal;" valign=3D"top">
oup.com/campaigns/rz0311861bf2b/track-url/kk185ewlcg472/c2ee9c5257ad398cdb1=

889f2cc1450789ddc397e" style=3D"display: inline-block; box-sizing: border-b=

ox; border-radius: 16px; background-color: #ef2020; padding: 10px 18px 10px=

18px; width: 50%; vertical-align: top; text-align: center; text-align-last=

: center; text-decoration: none; -webkit-text-size-adjust: none;" target=3D=

"_blank">
t: 24px;color:#ffffff;letter-spacing:4.3px;font-weight:700;font-style:norma=

l;display:inline-block;vertical-align: top;">
block;">
height: 150%;">INVEST NOW


=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

0-padding-10-25-10-25 pc-w620-padding-10-30-10-30" style=3D"padding: 20px 4=

0px 20px 40px; height: unset; background-color: #d2e7f6;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

0px 50px;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ght: 1px; font-size: 1px; border-bottom: 1px solid #006699;" valign=3D"top"=

>=C2=A0


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

0-padding-25-30-0-30 pc-w620-padding-25-35-0-35" style=3D"padding: 10px 40p=

x 0px 40px; height: unset; background-color: #d2e7f6;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

op">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

le=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

mso-line-height-alt:30px;line-height: 30px;text-align:left;text-align-last:=

left;color:#016799;font-style:normal;font-weight:400;letter-spacing:-0.2px;=

">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

gn-center">
xt-transform: uppercase;">LAST CHANCE TO LOCK IN your GAINS!


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" style=3D"border-collapse: separate; border-sp=

acing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

0-padding-25-30-25-30 pc-w620-padding-25-35-25-35" style=3D"padding: 15px 4=

0px 10px 40px; height: unset; background-color: #d2e7f6;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

padding: 0px 0px 14px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ze: 14px;mso-line-height-alt:20px;line-height: 20px;text-align:left;text-al=

ign-last:left;color:#016799;font-style:normal;font-weight:700;letter-spacin=

g:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ont-family: 'Arial', Helvetica, sans-serif; font-size: 18px;">Instant 100% =

Gain at Listing:


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
amily: 'Arial', Helvetica, sans-serif; font-weight: 400;">When Luessen Toke=

n (LTE) launches on ZBX Exchange, your tokens will double in value immediat=

ely. Yes =E2=80=93 you read that right:
'Arial', Helvetica, sans-serif;">invest at our 50% pre-sale discount now, a=

nd on day one, your investment is already 100% higher.


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09




=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

x 20px 50px;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ght: 1px; font-size: 1px; border-bottom: 1px solid #006699;" valign=3D"top"=

>=C2=A0


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

0-padding-15-25-15-25 pc-w620-padding-15-30-15-30" style=3D"padding: 0px 40=

px 0px 40px; height: unset; background-color: #d2e7f6;" valign=3D"top">=

=C2=A0


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

0-padding-30-30-30-30 pc-w620-padding-35-35-35-35" style=3D"padding: 0px 40=

px 0px 40px; height: unset; background-color: #d2e7f6;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

dding: 0px 0px 10px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ze: 30px;mso-line-height-alt:34px;line-height: 34px;text-align:left;text-al=

ign-last:left;color:#016799;font-style:normal;font-weight:400;letter-spacin=

g:-0.4px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ont-family: 'Arial Black', Gadget, sans-serif;">Why Act Now?


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09




=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

dding: 0px 0px 42px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ze: 14px;mso-line-height-alt:28px;line-height: 28px;text-align:left;text-al=

ign-last:left;color:#016799;font-style:normal;font-weight:700;letter-spacin=

g:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

ont-family: 'Arial', Helvetica, sans-serif;">Time is running out!
pan style=3D"font-family: 'Arial', Helvetica, sans-serif; font-weight: 400;=

">The Luessen Token (LTE) pre-sale is nearing its end, and this is your las=

t chance to invest at a massive
Helvetica, sans-serif;">50% discount
ial', Helvetica, sans-serif; font-weight: 400;">. Once we hit the exchange,=

the price
f;">immediately doubles
ca, sans-serif; font-weight: 400;">=E2=80=94 don=E2=80=99t be the one watch=

ing from the sidelines!


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09




=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" class=3D"pc-width-fill pc-w620-gridCollapsed-1" role=3D"pr=

esentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09
grid-tr-last">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

-grid-td-first pc-w620-itemsSpacings-0-30" style=3D"width: 33.33%; padding-=

top: 0px; padding-right: 20px; padding-bottom: 0px; padding-left: 0px;" val=

ign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width: 100%;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" wid=

th=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presenta=

tion">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
style=3D"padding: 0px 0px 6px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
able>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
d>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09

4px;text-align:left;text-align-last:left;color:#016799;font-style:normal;fo=

nt-weight:400;letter-spacing:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09
=

50% Discount in Pre-Sale


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presenta=

tion">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
align=3D"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v class=3D"pc-font-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v style=3D"font-size: 14px;mso-line-height-alt:20px;line-height: 20px;text-=

align:left;text-align-last:left;color:#016799;font-style:normal;font-weight=

:400;letter-spacing:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v>Get in now a=

t half the listing price. The moment we go live on ZBX, the value instantly=

doubles.

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
d>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
-w620-itemsSpacings-0-30" style=3D"width: 33.33%; padding-top: 0px; padding=

-right: 20px; padding-bottom: 0px; padding-left: 20px;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width: 100%;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" wid=

th=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presenta=

tion">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
style=3D"padding: 0px 0px 6px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
able>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
d>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09

4px;text-align:left;text-align-last:left;color:#016799;font-style:normal;fo=

nt-weight:400;letter-spacing:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09
=

Real-World Utility


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presenta=

tion">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
align=3D"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v class=3D"pc-font-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v style=3D"font-size: 14px;mso-line-height-alt:20px;line-height: 20px;text-=

align:left;text-align-last:left;color:#016799;font-style:normal;font-weight=

:400;letter-spacing:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v>Backed by cu=

tting-edge nano technology, LTE is a project with real impact=E2=80=94not j=

ust speculation.

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
d>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
-grid-td-last pc-w620-itemsSpacings-0-30" style=3D"width: 33.33%; padding-t=

op: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 20px;" vali=

gn=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
g=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width: 100%;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

lign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" wid=

th=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presenta=

tion">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
style=3D"padding: 0px 0px 6px 0px; height: auto;" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=



=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
able>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
d>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09

4px;text-align:left;text-align-last:left;color:#016799;font-style:normal;fo=

nt-weight:400;letter-spacing:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09
=

Massive Growth Potential


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=

=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presenta=

tion">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
align=3D"left" valign=3D"top">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v class=3D"pc-font-alt" style=3D"text-decoration: none;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v style=3D"font-size: 14px;mso-line-height-alt:20px;line-height: 20px;text-=

align:left;text-align-last:left;color:#016799;font-style:normal;font-weight=

:400;letter-spacing:-0.2px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
v>A 100% incre=

ase at listing is guaranteed, and with adoption growing fast, multiple 100%=

gains could follow.

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09
d>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

op: 20px; padding-bottom: 20px; vertical-align: top;" valign=3D"top">
lt=3D"" height=3D"1" src=3D"https://api-postcards.designmodo.com/tracking/m=

ail/promo?uid=3DMjk2ODkw" style=3D"display:none; width: 1px; height: 1px;" =

width=3D"1" />


=09=09=09=09=09=09=09=09=09


=09=09=09=09=09=09


=09=09=09



gns/rz0311861bf2b/track-opening/kk185ewlcg472" alt=3D"" />





--iOB9wEbl--