Cookware phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 31 Mar 2024 05:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rqtGf-00000000JGh-2Nha

for dave@doctor.nl2k.ab.ca;

Sun, 31 Mar 2024 05:22:29 -0600

Resent-From: The Doctor

Resent-Date: Sun, 31 Mar 2024 05:22:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01hn2201.outbound.protection.outlook.com ([52.100.228.201]:60813 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rqklj-000000004W9-196v

for root@nk.ca;

Sat, 30 Mar 2024 20:18:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=noB2Itdt/GsrrBmubW44hhZgBv860J1V7VOjvPxyJmLGVW8F0nEXnNZta9JujGLbud1YoHAYTujzrE08YXjmXYaS2Im0wxX+S764+twC+J5DR+mvhFPpJsd6KNCMz8DmQdNzB7Prm3U+TwCwO/omHuZSwySjKfV4aXerLdU8JEXU7iHT1qigZGSDjZyt/38iTI5LPdh1CwOp2ecDf9MpU9mfchEH/bAsN9nNWNuMnsCBY/yYqBDMQhOYpnxEuN+u8G+y+t/UZYGytnLyk49NKLy55BrIxCersLK9SE4AtL9zuR5OAZMgqN7sGaIIu74q4l9OytJJcKhS3ceOTO1UOw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=teJV22+gWCVaKKxjxeOlM3x5agwLrBx25Gm4tNRlq5o=;

b=j5DO2Tp47z1zaeRDTZbLQbUojWDSPF+gxC/TMHcp2vqrcLJ/Q7Z/1wk67oh4rPFfYhmgn2mb+M7VRvWClJ5kSi5OuNBCDXLqDBQ2baRgTVa1OqC/Uw7hjkzGSXIuyUj+CcoDQswqfTgxa0jEL6ACZNIM0Z8a6ojzCrtm60xAyr9zfsLDyv204q8uC8l260CPAmiYzkmXLY0Al3zI1unjK1dB/gXD02yxVqBdTTwgHhOYk6JHqBcic3p6dSte+cKZ87QBbmWusPdKk3PL0cyQnKjt/DTjx/jeDbunbe7wRdT3pTcZudK7gCmTquFbPz9RKRAE8c93gOtkhDvedhjJJA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.11.93.53) smtp.rcpttodomain=nk.ca smtp.mailfrom=zmbhksu.onmicrosoft.com;

dmarc=none action=none header.from=zmbhksu.onmicrosoft.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wetherbyprepstudentscouk.onmicrosoft.com;

s=selector1-wetherbyprepstudentscouk-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=teJV22+gWCVaKKxjxeOlM3x5agwLrBx25Gm4tNRlq5o=;

b=XdjaNl7icLdwMo6exIUplqjn4l5rHBHTX9I9rhJs6KFXHcNYoSvMvvB2wm88NYftrw8ImwpNMsUwbEJ6a+QWbOcd+/3WAxPF14RAxaeR3h/kj7f3YaanWbwATco+x6mVcctwDa+UBHEVUkKwaJZLnULWe4kkngQj1tF0eLRtOLw=

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.11.93.53)

smtp.mailfrom=zmbhksu.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=zmbhksu.onmicrosoft.com;

To: root@aol.com

Msip_labels:

Cc: root@aol.com

Message-ID:

Thread-Topic: Experience Pure Sound Freedom with Bose Wireless Headphones cGXQgbWm

Content-Type: multipart/related; boundary="m3uIZEHSRyFNX3wOTf8pBBUVFk5P3UpH3Fmxy4pLOr"; type="multipart/alternative"

MIME-Version: 1.0

Accept-Language: en-GB, en-US

Thread-Index: m1tZqap3q4GeMshOrGvh7PGgDSQ2TW==

From: =?UTF-8?B?Q2FuYWRpYW4gVGlyZSBSZXdhcmRz?=

Date: Sun, 31 Mar 2024 02:15:54 +0000

X-MS-Has-Attach: yes

Content-Language: en-US

Subject: "Receive-a-FREE-Rachael.Ray.Cucina.Cookware.Set"

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CW2PEPF000056BE:EE_|LO0P123MB4188:EE_

X-MS-Office365-Filtering-Correlation-Id: b5b988b9-f0a4-44ee-23e0-08dc51287f29

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?yRzEcPomrf5qP4+tQIXnO/ACCPvwgz1nxPgybdqcSRameKehulSi2mV+Dg?=

=?iso-8859-1?Q?p01NkMu5OcP9+BQFRzMjhcNb31RXTNIntLz6O9+o1rn7QlS7qLSiTQ2v16?=

=?iso-8859-1?Q?HZJiwHIiyGJiEMU+tK6R74dYYQsiPwcveo0zv6nHU+Q7eSA8tFeN7zCdrB?=

=?iso-8859-1?Q?zmkN7cSYqxb8ag8uGGoo/mL4mS03J3+nvFXH57t4ZbVWysYkQ3o+4DdMJM?=

=?iso-8859-1?Q?vv7B0W1hWQLTuhTxencvUg8iKv2OASkfD97MsPL2Hr0Z1RadMHkO9iw3Qa?=

=?iso-8859-1?Q?CcwQKvPoWgGlWJF1V4eBDUYg+0eeNVfDUfSKtlWFN2jM49rVc3ClbP6n8n?=

=?iso-8859-1?Q?97ccHB3l5yI6XWhrEL4vk48+6oYZVyYd1LG6BMyp25zOchiFIIjO3T5x0A?=

=?iso-8859-1?Q?/468IPxFhy5fW5ca9p0PrFoIca9H1ewlio3bXWS/sgPv29NvfR4RijXAoK?=

=?iso-8859-1?Q?51L7MSAzOXU5MytMmLMRz+Oyq21rGjJIYS+txe71fGZl7Rdh5eh7RPgegv?=

=?iso-8859-1?Q?BHy+Oj8XBDlWGgTEZLWc4TdMhfZXK67SONreYiwjwng8WJ0YI3u1f8MB8G?=

=?iso-8859-1?Q?gG+8wPKDGjxk3SjPCiu5FJ2ScrO4Z7XsVaWdDaXrB2EiamKNYqOce5YjzH?=

=?iso-8859-1?Q?sO0PjuJDtLZLK28XRwYV3mYd5O1Hw7XPNDudCjTvLvCe7DAgYs7zQz99uh?=

=?iso-8859-1?Q?ZGdTBVC7lXrkx00Jcgcjme/5IcuJz2rW5CrnTlLKHNMTZWogByPu+VzXFn?=

=?iso-8859-1?Q?gfh5FTFAvIezu7uRZBDHLjSkWCRwCC00+Jz6I2DqcKmXIGgPjx8rzuM1pi?=

=?iso-8859-1?Q?WmEYDOR+D/LlQsBdzZJhsTpxUrWoPxDz7SVEt1gH9rrz2pT3wU4bim0kEj?=

=?iso-8859-1?Q?hpUVjgyIEdewjaR1ZRH8evOAsMtxO7hnszGOVUT+a4ip90Fcv9cniHjHfi?=

=?iso-8859-1?Q?zAWxmmUrJSs/Dt2rsXxkp3Wq6MFQFIafVBSWFi6GSibA3MTlloCW99d8+E?=

=?iso-8859-1?Q?7clYl5J6TF7M+HMQOyGTQ2PTKnYKFT2d+i/FMl+WIg9djZcTXDBeEQz4MG?=

=?iso-8859-1?Q?TqPFsOThGJYFbKCOoTuBAPStaQGKR9x+tFaCeeApc5mZe4PpQbyOa5paI6?=

=?iso-8859-1?Q?P+THwI3IK3FmZ4wx8zmQRd3hCsjVhGwba5mhy8kJdma1Qk5se6wfiReDW1?=

=?iso-8859-1?Q?XbbEjHRoedCfSsvKcdYHg0ACwVVGa2zEE2vzP0vqY43w7DLcRKhfGUg3Ox?=

=?iso-8859-1?Q?hN1IhoNT3fncgOfdf7dzL6kH0NKR6irEGCu2lzKB/rFdgMZtnBBJnDx3a4?=

=?iso-8859-1?Q?+VSSUFHj92czkR1XNLCU/TR2GJ2YpmF8a41e1HYMn+iRXqQ7htE2JwG7vh?=

=?iso-8859-1?Q?SjL1uEuXw/bQ0YQlKvP1L0XdirQ08UG4fsdjMMqS2Pm2IBthXbA+kytghC?=

=?iso-8859-1?Q?T+NlhnvcUnZPngrr?=

X-Forefront-Antispam-Report:

CIP:45.11.93.53;CTRY:US;LANG:en;SCL:8;SRV:;IPV:CAL;SFV:SPM;H:zmbhksu.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230031)(4093299003)(36860700004)(376005)(82310400014)(61400799018)(41320700004)(34020700007)(4143199003);DIR:OUT;SFP:1501;

X-OriginatorOrg: zmbhksu.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Mar 2024 02:15:54.8399

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: b5b988b9-f0a4-44ee-23e0-08dc51287f29

X-MS-Exchange-CrossTenant-Id: 758d6117-8a63-4a5d-8dd9-7339a955921a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=758d6117-8a63-4a5d-8dd9-7339a955921a;Ip=[45.11.93.53];Helo=[zmbhksu.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource: CW2PEPF000056BE.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB4188

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Exclusive-Survey-Reward: Get a Rachael Ray Cucina Cookware

Set ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf

ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn

Z3Vq1tr7oOMn QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI QTQ [...]



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.228.201 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.228.201 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pkonmlcwbam.i7wpm3vgiku33rldqrsctalvog(at)zmbhksu.onmicrosoft.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.9 SCC_BOGUS_CTE_1 Bogus Content-Transfer-Encoding header

0.9 STY_INVIS_DIRECT HTML hidden text + direct-to-MX

Subject: {SPAM?} "Receive-a-FREE-Rachael.Ray.Cucina.Cookware.Set"

X-Antivirus: AVG (VPS 240331-0, 3/30/2024), Inbound message

X-Antivirus-Status: Clean



--m3uIZEHSRyFNX3wOTf8pBBUVFk5P3UpH3Fmxy4pLOr

Content-Type: multipart/alternative; boundary="NseTd6P29hAO8VZ5MrP507GXZ1nODU5EvbftjO8CDfWTxKRxaj3U"



--NseTd6P29hAO8VZ5MrP507GXZ1nODU5EvbftjO8CDfWTxKRxaj3U

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

















Exclusive-Survey-Reward: Get a Rachael Ray Cucina Cookware Set





























--NseTd6P29hAO8VZ5MrP507GXZ1nODU5EvbftjO8CDfWTxKRxaj3U

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf

ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf

Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn

QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI

ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf





Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn

QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI

ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf ylY3PZxw98Lzf

Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn Z3Vq1tr7oOMn

QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI QTQIO1r9WI







--NseTd6P29hAO8VZ5MrP507GXZ1nODU5EvbftjO8CDfWTxKRxaj3U--



--m3uIZEHSRyFNX3wOTf8pBBUVFk5P3UpH3Fmxy4pLOr--

Cookware phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 30 Mar 2024 19:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rqjf3-00000000Kws-485x

for dave@doctor.nl2k.ab.ca;

Sat, 30 Mar 2024 19:07:01 -0600

Resent-From: The Doctor

Resent-Date: Sat, 30 Mar 2024 19:07:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazon11021007.outbound.protection.outlook.com ([52.101.128.7]:62747 helo=HK3PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rqjaN-00000000KAz-3MMR

for doctor@doctor.nl2k.ab.ca;

Sat, 30 Mar 2024 19:02:15 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=OtVOyn1K8w5jYYX26aLHR3ZCEY3WTq4d9M48cYYtqkNaEi2ezrUZ5DkvlyfwGsN9jwOYbTrIwx1+y6GlMZuhILPLfuiLwInlauRa90mFqCNc34G6wxeyEc1/JP21Wi73dUjmGuxWBDxVHfBTo5e9wfwD9NomBCwkcfwtZjtFSQAcVrbEUxvIBCXmH1M+ERk27ICbach2TErH+Q9JlwuLEkzyaOEOp4r8CHjg+xz8i9GA5IJApkgxChZGuwDdBt5pxndMrGP/iBWGgmCG3KrJ6MmMgvM+hkb3JF8GhEZfJtbitv6Nd8unAJM6a3zlJ6Kv4tKxZqf4H6TJbqAbYU8bAg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=sByRm/vJeQxYjQm6IKe0UWXJ5gA+CgRH42BKGUsjDn4=;

b=NRnF/6PANRftJKzo/ea8d9T97tfVBD5e6HPSoyBYocuYlKdvj2xaQxhvx0D23WJevpEqLlHesaCHCKrYJwF83uEXuSSyM1KUXw3KSOhcwfuhgK8AYIgwAleS1mP1q4fjsfmHYyHp03e9C4Jlpd9kQh5phVol+iFlH8Yq/6aWcAJxvrEvd9OERlq/XYS9w35bVqqRTJusrkqWDsdOW9iWu3rbK7SNr7sT3eES3c/vCHgiyzIS1J9rTcXApBqSH3XOQbUx2WRmByRaziY83K/Jdt4LY0A3WjZKh2aCJ8akcmKnosHFH6PKdv0aRG/CL1cC9qnWjGKjOPuF8YNhXHxtNw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.43) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=yambm.onmicrosoft.com; dmarc=none action=none

header.from=yambm.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yambm.onmicrosoft.com;

s=selector1-yambm-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=sByRm/vJeQxYjQm6IKe0UWXJ5gA+CgRH42BKGUsjDn4=;

b=vbblZ774iFtw5e41RlZh5NFimSFRCa4IFCTuDgH94REJKDE44edI2aU3yKhE9f4JAMgcg9JB5dv8q1rLXBAP1rLACXzB0Pe+tuX/nPY69dIhhEJhsF39G0o3irFRh+7R5z19333cQtwOHLbo20J3WWWHOoUQBwdrY1mJBu+Ng6A=

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.43)

smtp.mailfrom=yambm.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=yambm.onmicrosoft.com;

Message-ID:

Content-Language: en-US

MIME-Version: 1.0

X-MS-Has-Attach: yes

Content-Type: multipart/related; boundary="jSbD5c6gE4DlaxsZgFTeCdOZ47TtGw9gt4zqXeGzQs"; type="multipart/alternative"

Thread-Topic: Experience Pure Sound Freedom with Bose Wireless Headphones EeVHObFC

Thread-Index: m1tZqap3q4GeMshOrGvh7PGgDSQ2TW==

Date: Sun, 31 Mar 2024 01:00:04 +0000

From: =?UTF-8?B?Q2FuYWRpYW4gVGlyZSBSZXdhcmRz?=

Subject: "Receive-a-FREE-Rachael-Ray-Cucina-Cookware-Set"

To: doctor@aol.com

Accept-Language: en-GB, en-US

Cc: doctor@aol.com

Msip_labels:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK3PEPF00000220:EE_|KL1PR0601MB5750:EE_

X-MS-Office365-Filtering-Correlation-Id: 0b553cf5-88d2-4fcf-4111-08dc511de76e

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.40.43;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:yambm.onmicrosoft.com;PTR:172-233-40-43.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(61400799018)(34020700007)(41320700004)(36860700004)(82310400014)(376005)(4093299003)(4143199003);DIR:OUT;SFP:1102;

X-OriginatorOrg: yambm.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Mar 2024 01:00:05.4369

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 0b553cf5-88d2-4fcf-4111-08dc511de76e

X-MS-Exchange-CrossTenant-Id: 1e6d16c7-e5b1-4722-a672-f8b182ada1fc

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1e6d16c7-e5b1-4722-a672-f8b182ada1fc;Ip=[172.233.40.43];Helo=[yambm.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK3PEPF00000220.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR0601MB5750

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Exclusive Survey Reward: Get a Rachael Ray Cucina Cookware

Set dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9

dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6

xeZyZS2BPwG6 0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4 0yA [...]



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.128.7 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pkonmlmbmul.pkyhsd4gobg1nqtqb7vxuzfcbg(at)yambm.onmicrosoft.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.128.7 listed in wl.mailspike.net]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.9 SCC_BOGUS_CTE_1 Bogus Content-Transfer-Encoding header

0.9 STY_INVIS_DIRECT HTML hidden text + direct-to-MX

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} "Receive-a-FREE-Rachael-Ray-Cucina-Cookware-Set"

X-Antivirus: AVG (VPS 240331-0, 3/30/2024), Inbound message

X-Antivirus-Status: Clean



--jSbD5c6gE4DlaxsZgFTeCdOZ47TtGw9gt4zqXeGzQs

Content-Type: multipart/alternative; boundary="kOWLSsmU77WL746IhYIb57ihIKvkHA4eJEr0Jd1PaihATRj83Oqy"



--kOWLSsmU77WL746IhYIb57ihIKvkHA4eJEr0Jd1PaihATRj83Oqy

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

















Exclusive Survey Reward: Get a Rachael Ray Cucina Cookware Set





























--kOWLSsmU77WL746IhYIb57ihIKvkHA4eJEr0Jd1PaihATRj83Oqy

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9

dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9

xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6

0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4

dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9





xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6

0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4

dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9 dzGrBpQZFhJD9

xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6 xeZyZS2BPwG6

0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4 0yAhPlr6a4







--kOWLSsmU77WL746IhYIb57ihIKvkHA4eJEr0Jd1PaihATRj83Oqy--



--jSbD5c6gE4DlaxsZgFTeCdOZ47TtGw9gt4zqXeGzQs--

Bank card phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 30 Mar 2024 07:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rqYLx-000000002Dr-48b2

for dave@doctor.nl2k.ab.ca;

Sat, 30 Mar 2024 07:02:33 -0600

Resent-From: The Doctor

Resent-Date: Sat, 30 Mar 2024 07:02:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp-s06.vera.com.uy ([200.40.31.15]:2354 helo=mail.vera.com.uy)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rqXUm-00000000Nlc-0v2O

for root@nk.ca;

Sat, 30 Mar 2024 06:07:39 -0600

Received: from avas06.in.vera.com.uy (avas06.in.vera.com.uy [172.24.32.34])

by mta06.in.vera.com.uy (Postfix) with ESMTPS id 75E2330F4BF;

Sat, 30 Mar 2024 09:05:06 -0300 (UYT)

Received: from mail.vera.com.uy (unknown [172.24.31.1])

by avas06.in.vera.com.uy (Postfix) with ESMTPS;

Sat, 30 Mar 2024 09:04:58 -0300 (-03)

Received-SPF: softfail (freemail.hu: Sender is not authorized by default to use 'bidboard@freemail.hu' in 'mfrom' identity, however domain is not currently prepared for false failures (mechanism '~all' matched)) receiver=mta01.in.vera.com.uy; identity=mailfrom; envelope-from="bidboard@freemail.hu"; helo=mailhost.mis.net; client-ip=69.176.32.216

Received: from mailhost.mis.net (node5.mis.net [69.176.32.216])

by mta01.in.vera.com.uy (Postfix) with ESMTP id 1ADDA222164

for ; Sat, 30 Mar 2024 09:04:43 -0300 (UYT)

Received: from mikrotec.com (webmail.mis.net [172.17.1.30])

by mailhost.mis.net (Postfix) with SMTP id 348859819B;

Sat, 30 Mar 2024 08:04:41 -0400 (EDT)

Received: from 41.122.128.48

(SquirrelMail authenticated user lafferty4)

by webmail.mis.net with HTTP;

Sat, 30 Mar 2024 08:04:42 -0400 (EDT)

Message-ID: <12554.41.122.128.48.1711800282.squirrel@webmail.mis.net>

Date: Sat, 30 Mar 2024 08:04:42 -0400 (EDT)

Subject: Re: Your Bank Visa Card Delivery

From: "Josephine Baidoo"

To: <334353@10g.pl>

X-Priority: 3

Importance: Normal

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----=_20240330080442_28849"

X-Antivirus: AVG (VPS 240330-2, 3/30/2024), Inbound message

X-Antivirus-Status: Clean



------=_20240330080442_28849

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit





Hello Dear



I have sent you several messages regarding your unclaimed W-inning

amount of USD 2; 100, 000.00 Loaded to your ATM visa Card which we

discussed, We hereby duly interred Switched, Therefore you can make

withdrawal in any location of ATM Machines centre cashpoint of your

choice in any part of the World and the Maximum you can withdraw per day

is $2500.00 equivalent to any local currency, but i did not hear from

you since that time. Then i went to deposit your package (ATM CARD) with

FASTWAY DIPLOMATIC COURIER Company in Johannesburg, South Africa as i

travel out of the Country for a short course and will not be back till

the end of 4th quarter of the year 2025.



What you have to do now is to contact the Fastway Diplomatic Courier

Security Company as soon as possible to know when they will be

delivering your package to you because of the expiring date For your

information, I have paid for the Clearance Certificate fee neither the

Bank Visa Card showing that it is not a Drug Money nor to Sponsor

Terrorist attack in your state. The only money you will pay to the

Fastway Courier Company to deliver your Bank Visa Card direct to your

home address is $150 only being their Security Keeping Fees of the

Courier Company so far.



Again don’t be deceive by anybody to pay any other money except $150 and

I would have paid that but they said no , because they don’t know when

you will be contacting them and incase of Demurrage. You have to contact

the Fastway Express Courier Company Manager for the Delivery of your

Bank Visa Card with the information below immediately.



HERE IS THE FASTWAY COURIER COMPANY INFORMATION:

Courier Name: Fastway Diplomatic Courier Company LTD

Contact Person: James GoodMan

Position: Delivery Department Manager

fastwayexpressdeliveryza@freemail.hu

Tel: 0027 78 111 9204



Finally make sure that you reconfirm your Full Name, Residential Address

and your phone Nr, to them again to avoid any mistake on the Delivery

and ask them to give you the tracking Number to enable you track your

Package over for you to know when it gets to your address. Let me repeat

again, try and contact them as soon as you receive this massage to avoid

any further delays and remember you have to pay $150 before delivery.



As a matter you must contact them by indicating your Package Code (

2261458) so that they can find it and pick up immediately as they have

it in their Record.



Thanks for your understanding,



Dr. Josephine Baidoo

Acting Manager: First National Bank South Africa.











------=_20240330080442_28849

Content-Type: application/pdf; name="VISA CARD.pdf"

Content-Disposition: attachment; filename="VISA CARD.pdf"

Content-Transfer-Encoding: base64



JVBERi0xLjMKJcfsj6IKNSAwIG9iago8PC9MZW5ndGggNiAwIFIvRmlsdGVyIC9GbGF0ZURlY29k

ZT4+CnN0cmVhbQp4nL1cW68lRRWOIohHAjqDouDIARnYjUzTda/GKyTGxPgiOW+MTxh5woTx/ydW

7e7qtWrXt1fX3ufEzMOcdO+uy6pV3/rWpeq722nU9nbK/8ofX3978+mX4fab/94cH99++df1jxff

3Hx3Y0flvQ/HB/zvr7+9/eIufRhvlR5nf3v37xt1fKFulRuNvw1TGCd7e/ftzVeH7w1Km1E5d/j+

ENIffp4PLw0mDWFWjv31gyGqcXZxPrw86DBGZebDK4NS86iVYd/+cPDpkTeHVweTfuaPH/zz7m83

qes0lL/f3H38FWtieZef/WgwdvR25h08/88QwqjSCLd2/eHHg3Ojc86zXtdPrD68NoQkCzXxMT1/

sTSjwuH1Qc9jDOlj6uWNwflxjjaySf4kN+PDxEeDmkaDeTW3Z6LfhKG5IKm9nybxuTFM/Fvqg/6i

qT8agh+neXbwC2p5HUGw6XcuzcOlJaJvqT1ao8fb2zcHHcfgrMlic3F0s4ns40ZsupJaeqSctmUE

c2Af/GxICzTOaVQ/H5wZnU9a8uZx/XXI6nn3r6SPZa204X92D4rmVqTr4PhY20gl6JO3BjOn3/nI

3v4id+z9pA+/zBPxaa0Pbw9aj9HFeHhnMH7U2ujDr4aQFj2kadJf9Dv0lv56Iv6OxvLrNM38MI/Z

m9HayTIhPB5cGF1UTF8eA6mRCNA2f2MwcbTeBbg/SNfoi3ePg5qVPtzmfp2d/eG99EyP1dhp86xq

4NOS6KIJaAOkb33Mn+SfP3Pm+PtnC7Tkb94f1DSNythKycsA0dR/M8Q4aqc9BxtStw+OCzypCov4

12ryYwiqxSKDNxXNam06KSMJc3k7zQqCzbG9NMHAtKjdXgAXayhtkOqIE+XZ08HrtNppfxVc1HBK

tJcI29AX1dZt99zaceDrRLC0vA1awbX7cJjDqCer0josMGKyeVv1hzqm3kjmlTwKRlInlYDjaCbN

dXlXmKVBQg/aOkjorTHSO8aIZkKazgTMrUwSkopesR9+NHg3RotMaKXUXIRKjcalZ2zuJC5aMepk

2Vk2RPZsVRW/px8I0BnyV3rGAGFVAAYIiMAg0ZGK0HjWL2aNR1YatNBGvDvMejSz3YHA7RENBero

m0NGeeMiH4tMAqidlglVW1BWSCQt6o4N8flhQw6Sdbu6CZsvtLiJtvFdUaycbII+WC2KGXXcuAUN

Fo0QCew6PS2vER4yMa3fOD6Dy9kIfQFhCRkIBEYv5R0egoFIC3ehzCR2BgMU//mQcVPptACk7kTj

aL3pWT9uLtqQcGHThn0E5VQjLf5cIQtGSTD7BiUToHCUXJrBGrLav8lCHX/MKL2bxmCd2jHBCCcW

NpuUkMjsx3kAs0tmd6WcwV1BTWnZf8tYQ1kSGhTRQJoG4fYOePWS2FaDz/CVU4vhE4vlqlJgxW1E

Ffl2iNxxgtMiLpsdfUwDRIyPqBp1giRDopa5KdrQbFgkVtQJ3O+IhdMnhGb0ljrZ2+WtHUCuOoTt

o4DdHGYITe0u9hFShRVVbCKhRRcQj6CJUG9P+vll4ZLnsSlhZajcILTgyFWRdlSSsbSjuDfFGlyh

y/KFRIshxWEwhJeoisFIua6PDWz3EM2VQyjU4CeDNeOUKV+nC/t+HqlXzqwf2NTts2H2CQ9mHiAb

B69GFyqcbyxIwlvIs18eUiNzFtunuWmVG6Tujl5QMio2jXQNpox2s3Jk9GlGU5ZBUikOezRUCsSp

ISZg1sqzKIMe4pxNgyFprFTXBCYqaoRcci618oyaM6m55C+kJSL5USs2vU0zT3aI3qL2EHy0WrLP

0nbYnhvCnNDHcVVNC1aYEexmh7gjMCdYfIQ908r3OS47QwFyj9F+glyF9n5a1PTJ5GyL0h6T5rID

NbS6iHkgmEJuiRD7jQGa39V0T2rHMj4Qs0b6txNrpNkh9ZPjBuQX8chYwYjXVquUlN+fej7WwQaR

aGhh5agfClTtuEU4DtfSaZSHuIKZPD2h0/UInwJwQCYEqUXvULsVCZpmJC6iP6uqaK4+fkjAEG3I

+Y5FGTwzCTCSiSg6Ym9N5G7G/nczQH8KWDZZDW05YHWLibZMSzXxcIpvwxyV9VGy9eTuFFqmWWIK

JavIqsIUlcRuHNhP9DsLzEiappDz2vV8SH3Q2y03xq1E2Yz9TqQ8BIQlEBXRFpR9vR1NWQiTmlVj

iqbIWilZAMNiMgiXX9niCLoNMzOegcKOREi4ohS6hyzqnoFpwZhakXcnUQP6neyyIuqOJFRGqi+i

YjCw28Uh6Bn1B5Wst0EYxkRp2ZKzSkPf7OxToAEX7Ngqt2Wy/WboSKYIWj4yoMioMlQp4zlDbdeh

eYW3Floh2j29BnGVkw7n82bHPBeqSUCBI6TtMGQuJLJlv7PaPlCNsd95DGjpWPmdxaNfG/Syp50H

2KCOnBxCjAeFO08Tj+dY3APRZMZu1lCvr2RJK4twZ2cVeTC0tcOybRBI9lX60ZQrxMQy3hr0lHZg

VTCxfJxeYuOAclJHVXDZ+wQlEyhKWBXWVCHt/JgjzKXlNmwnWG5gaeeVRelzbe7peyHIpQoclKJk

OSk5+UOdIKThC1VmTtMUfOVdFaVW6C3/XfH5YGyBR5WYMGs7kHPrr65KZZhSXbESnSEzJAW5RgOm

G8nBQK7jTpkQnJPM3+XYpcyOu13VqtKlicyRlCi4gGa3Cl17JqQyhEqVYH7yxQYxlCuTAbKDzShz

UqlDDBQSLiaxIlAcumjD5wrsUQczDMjK0PLJ60NvZe8FBRB2gouX2xs5VgMz7yj+hJMSCf4no87Q

wYYj+MAntSWVuaYt6pUrVot6oVo9CGlIYQVxGUyGuyNMiOahIcj07QJnNb310+Shi8K91TITeVh7

XmMxiL1e49qe5tGd+4XZ1/BUUIjZntIVd1LbgxJQl7oJQVQkscjEOpj5gEkiVJV4UnobcWZ/nYbj

CIZI/eUZ8Xu5Pcg1RkCIthWlrtZpHotO1kJVVPvHve/FE1IJUlum8uC4Km+gK+L6PZUYua6Yaoib

UgyPatDmGnSlekzkG96PN6F2uoJOri6CrWvHk1O0F3NaQtuRGZKQFsyOzjvIl6Grec6trBPsHHfI

b0SdoIWlSsI+/1nhuMhDRwGb9kIEeO76Q3UoGIecGUT8V/JxRGQp9E7o8QiUP0kQkIbKY+GnzDgJ

PWa6MvmAz4k83Wob2sXB5RDIqZTtEtqnclAUWtinAKhpgJdTGFhosTuus6qiI6OLO5jCFXcB/7T6

D0IcYTjqdMmy/WGzR3pxOWx3Z0XRoShifwgFxDLOewR4KlbXBniAkVAKl0TIKVo5X1/pyqINNtdl

ruogrzc6UHKm+E3kndCbp27kSr1S0anEgKxpArK5BrTbDssnN9qtkpZKhr7Vi/XxytzDXjVbF0O7

jyvXsJ4g1Trkms8z+cmidNq2dcQoYHs/QoVqIMnY7YDH+dLHs+X82LGHmfwmOoVGjYtf20AsqspD

0Yi1cs2hJPrJaacSdidxLUCXi4IuT6KfyWAv2jDn07RNAehuLvsk26fjVbUQbYYb+2RboblQK55c

Wiq0wzka5IWi7ChZeoG16ocgrfeu9UNHEV4Aw/Xo6KOGGHdGuG4T7p3JUdNqhZeAyMwOQsqbrT/i

UbYdkoGc4bvcc75XZETKBeymXm0Yja5CY3LJb/dptysCehCB5do+flyvZH1nsby89WTaCnHrMkQx

eEFRAFS00lh2y93ysu8s+6s9rqoYX5QTXyhy8WSwozFz2CvJoosMUK0wPTsl1y7xdopMoHQCahnh

Ly/Jzhs4pLek/bwQu+yN1ZxZsTY6/fUwtdGgdJsqvGnwc5pu8mcUM7bIIVl+ppKHs0ogKbROfcXR

Jm05juQoR1Ym3qYHqTkaHDX82cIAvGPLfG0MJDNuBFTUG7o6gFTzM8DqzxeXnZrek+oyjX3wAu9V

1cNeUVl7uheBxP+jqKxpLzn3NL4ykWqoO5Z5OXYQkmbdArv4yrG/fJxuUY9n62t4H8DFhYfYESob

BoqirP2ZRCZSITpIIKhfDDCq+Ls0ufwx7w6Fe94bZrvEt1qCoz3bW4QGvYd3dg5LtzO2EofRqjNr

g4PrqOWidTpAhlGK3biidh84ZLwReGT0EPGPlY2FyMRPOI6qgZCn28jX8jKjpuJ1DsAfqJOIy00f

vK76fm7AQ+To+Gr/Ple2hyqE84chuET5FD5PeBqiT/NFmImkSw4oo3lrmmJSBXSmcZq80UkjOPCQ

iUPzRkjQnqX17ETuH/N2nYNxbCfRsz/lzTepuL1NjhzFItFf1O+fjxLN6Rbqjcbisxan2RWYwLNF

fIyMI2TBKEXYVAug25K4q3B6j0UdJCMtRFZt9+TniQOYbHbPocX6zBH9Ts7eQnuBSsi4o9B7CL7O

q9U2m1aJh5DzgsTZwEhaQ5jcXFmscpEPXcSCAqLEVBF+oKjsDiwjFwMnn8u5Nmqan9C/KLpxLuGB

HNfLfWiyZ3z96/T4fhGApGQsVN8QIMx/mOzRfQzcrWxvXLiydsyYE+f1qqBpiY09KpUG2011O2UD

VBAv3ytAJoxfLiIlSlaKYEUa7BSbkFyn1nvBz7mIwaXhjavDUcFX4ahyvdjastfYQ3i8Bd/pLBta

CBKNfHoP5iWQ8sih4UentTq7qd3eNEf3QsiHZlExYvfhCIL7vf1+Qtt0PcASUFutZHUcHEI7jf/0

UE0MDF1AlHRXvFV271jmCsGlV5Ztzyg9gWtiVpdLAwC+6gIDqlxbVdCCkvXIx9x11PgqpUWbpTrE

VMzlgyQSq7BrUe7GhCVsQQJ8fYOWAO4f7J3c5SaelvU+bOQJIFh0YwOfZWvQUaxLZq3N9UT1RS9y

2XRjfT02v4gzni+yC8d7RsthiNZ4eGx/paReGiZdHEbwdVFST+sHYy3njz5mr148+hjhQqAGe7c4

XcXSkFDDLV6vPYSSkUslUYQE350rRWG6NrbeXAqVJ5Joy2SKyHOhgHx/UsnieFaluFNFR4iMwOOC

cqmyIeQgDKohx55OZ90BAg0OMy3VEmjEVTaor87J1cguMZTukwB7tWBLFFvng3fEWypnJ45xL1HX

c6tomLhFbDXAdDH1+ua5y5NylFWSfWd5Y7dnbSQ9sa5bT1ChSuNYURTK7kVsHvwiA2QU5MJQaE23

6vres4hn6pfWVvY2ZIt4AvVVe+emeqkvyvUg5KMvPgGXci1BUDvx6xA/30Kk7wwq5BhkYFes0Pam

MCy67ksujr7iROKOJ4u043TV3axwDICyCGcUSio3a27Ic4rdRdRtR2C5/hkHrKrWD7ligmEoO7JB

TaKB03ZDtHg7zEwfNAtU5Y/g6bc+KibhQsSl1yVkbXFQSq5Pkc+0XhMmks+CoPgvAtemGCiYxfjY

SZfcWfrvo3N5GLlgEN1iRZk06RJJFWBx/3aQXa5pefvkmiE8dnTwF7l66DI6OjQLHDeDeTbzGM4f

77ZVCcEXW8GHXBxO50so9ohYwm4t7WmoisuhzXOjfGw4k49tdVSuiUP5LXKM5GPEJaimd4wvDNTK

+Q2+IgBnUdSKQgXo2mWEEQ0mBuyxfziEOPq4eVXZXeIF/uUwH9V0wHo70g+U4ZU5DXlBZO1p6Si6

SXIblztAfeGxf7m7+Uf69z8rpjSmZW5kc3RyZWFtCmVuZG9iago2IDAgb2JqCjQyMjgKZW5kb2Jq

CjQgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNjEyIDc5Ml0KL1JvdGF0ZSAwL1Bh

cmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDEw

IDAgUgovRm9udCAxMSAwIFIKPj4KL0NvbnRlbnRzIDUgMCBSCj4+CmVuZG9iagozIDAgb2JqCjw8

IC9UeXBlIC9QYWdlcyAvS2lkcyBbCjQgMCBSCl0gL0NvdW50IDEKPj4KZW5kb2JqCjEgMCBvYmoK

PDwvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgMyAwIFIKPj4KZW5kb2JqCjcgMCBvYmoKPDwvVHlwZS9F

eHRHU3RhdGUKL09QTSAxPj5lbmRvYmoKMTAgMCBvYmoKPDwvUjcKNyAwIFI+PgplbmRvYmoKMTEg

MCBvYmoKPDwvUjgKOCAwIFI+PgplbmRvYmoKMTMgMCBvYmoKPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl

L0xlbmd0aCA1NDQ+PnN0cmVhbQp4nF3UQW7bMBAF0L1PoRuYM0NLCRBwk26yaFG0vYAsU4EXkQ3H

WfT2/f9P00UX38BYFMU3lLh/fvnysp3vw/777bL87PdhPW+nW3+/fNyWPhz763nbmQ+n83L/W+l3

eZuvu/3z1/n66/e1DxjQ16y/zW99/8NC/1jes1xO/f06L/02b69991RKe1rXtuvb6b9LY807juvn

UGuZUh8aSm+ZMh5YRsuUcWFZW6aMK8tDyxQvLMeWKbWynFqmjMbyoWXK5CwfW6bUR5Zzy5RRyzi2

TJlGlkvLlClYnlqmjJ1lb5ky6blry5SJMxt6waCkyGA1eccTS1gtvRNLWC29nMpgtfRqKlhN3oMG

w2ryuqaC1dLLNRusJq9rKlhN3iDfYDV5nY01WE3eYK8MVpM32FiD1eR1eg1Wk7fqXlhN3sp7sRUK

FsnnOqye+8tFOqwub2UnHVaXd6IIK1VA0FVYXd6Ra3ZYXd6DrsLq6T2yhNVzf7lmh9XlnbihDqvL

G9wFh9Vzf7VmWF1e12BYXd6Dngury+vcBYfV08s+o0MKBvMq+qeg5DLQbAWD+cYGrCHvgcsIWEPe

qhLWkLfOLGENeYOdDFhD3kpvwMp4MT0X1sj3mXsUsEZ6NRWsIW9lnwPWyPdZV2ENeavWDGuVKDgY

u6qgpLdCU1Pk+sI/P2V+7Dw1Pg+JYfm43fp219Gio4NHxnnr/06f6+XKuwZk9wcUER6yCmVuZHN0

cmVhbQplbmRvYmoKOCAwIG9iago8PC9CYXNlRm9udC9FT1pTVEYrQmFobnNjaHJpZnRTZW1pQ29u

ZGVuc2VkL0ZvbnREZXNjcmlwdG9yIDkgMCBSL1RvVW5pY29kZSAxMyAwIFIvVHlwZS9Gb250Ci9G

aXJzdENoYXIgMS9MYXN0Q2hhciA2Ni9XaWR0aHNbIDY3OSA1MzYgMjkwIDU0NSAyNjkgNjU2IDUz

MiA0MjcgMjc1IDU1OSA1MDAgNTE5IDU1OSAzMjYgNDgzCjU1NiA4NTYgNTM5IDUzOSAyNTEgODQ3

IDQ3OSAzMTcgNTc3IDUxNyAyMjcgMzMzIDU1MiAyMjcgNTczIDY0Nwo0ODEgNzc5IDYxOSA3NzMg

NDk4IDU0NCA2MTYgNTI5IDU0NCA1MTcgNTQ0IDUzOSAzMzkgNjUyIDMzOSA1NTkKNTAzIDYyMyA2

NDYgNjU1IDU5OCA1MDUgNTY5IDY0MiAxNzggNzAwIDIyNyA2NDYgNDk1IDg5MCA1MDMgNTYzCjUx

MyA1MTMgNjQ2XQovRW5jb2RpbmcgMTQgMCBSL1N1YnR5cGUvVHJ1ZVR5cGU+PgplbmRvYmoKMTQg

MCBvYmoKPDwvVHlwZS9FbmNvZGluZy9CYXNlRW5jb2RpbmcvV2luQW5zaUVuY29kaW5nL0RpZmZl

cmVuY2VzWwoxL2c0Ni9nMTU1L2cxODgvZzIwMC9nMS9nMjEvZzEzMC9nMjE2L2c0OC9nMTczL2cy

NDMvZzIyMC9nMTk0L2cyMjcvZzI0Ni9nMjMxCi9nMTkzL2cxNjkvZzE0OS9nMTc1L2cxMTkvZzY3

NS9nMTY4L2c2OTYvZzYzMi9nNjUzL2c2MzEvZzYzMC9nNjU4L2c2MS9nMi9nMTAwCi9nNjYvZzE2

L2cyNDQvZzE0NC9nMTQyL2c5My9nMTg1L2cyMTMvZzI0NS9nNjM1L2cyMTUvZzY3MC9nODkvZzY3

MS9nNDAvZzEyMQovZzg2L2c3My9nMTA0L2cyNy9nNTcvZzYzNC9nNTgvZzY4NS9nNjcvZzY1Mi9n

NDIvZzI1MC9nNzQ3L2c2MzcvZzYzOC9nNjM5Ci9nNjM2L2cxNF0+PgplbmRvYmoKOSAwIG9iago8

PC9UeXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1lL0VPWlNURitCYWhuc2NocmlmdFNlbWlDb25k

ZW5zZWQvRm9udEJCb3hbLTE0IC0yMTEgODMyIDc5Nl0vRmxhZ3MgNAovQXNjZW50IDc5NgovQ2Fw

SGVpZ2h0IDc5NgovRGVzY2VudCAtMjExCi9JdGFsaWNBbmdsZSAwCi9TdGVtViAxMjQKL01pc3Np

bmdXaWR0aCA3MTYKL0ZvbnRGaWxlMiAxMiAwIFI+PgplbmRvYmoKMTIgMCBvYmoKPDwvRmlsdGVy

L0ZsYXRlRGVjb2RlCi9MZW5ndGgxIDE3NjU2L0xlbmd0aCA4NjUzPj5zdHJlYW0KeJzteglYFFe6

6DlV1QvdTS/s2Eh1W9CgrSIgIK4tCCokigJK49bNTimorQLqIEhce8Q4JhpjNmOSSTJG05jMBDMx

UWISNe2drN5kbnIzN3m5kztvlsxkJpModN//nKoGNDJJ7nvf+967L33qr6qz/effz38KEEYIhaNO

xKKShaVpGYj+phyB25LqJvc6qZ6ThBAurG7ZaMk9lOyChg8APq5bV9+09sLxu6HvHEKGTfVrNtdJ

4yPfQch8uaHWXWMon7kFoTnQj7IboEG9SvN7hExToJ7U0LSxTV7vc4S0vjVrq91SPe0YQqodTe62

dSqF8QkYvxwaLc3uplp5/Bq42det3bBRqs85RvrXeWrX1TtvM8P4HyHElCtOkYIMACZOjwwIBf8s

w58ClYFK0ifVkR9dQX1Q/Og8lGJ49qEzcPejR9G54NeoFp1Cl6H2MpTH4XkO9aKTyI9z0TH0U/QC

Oo1eR3moFHrehJ4+dBF6z6AX0avQ8jZgJHiehhaywgrUhA6hh6F+FnC+Bi3voOfh/WU64mX0T7BC

Lx15DD2FnoH3s1B7ja72AKx2ElbrBdyvwJrIUXTvkXsO7961c8cdXds7O7a1/2jrls1trS2bNm7w

rF+3trlpzWqxsaG+rramusrtWrVyxfJllc6KpUvKy0oXlSxccPttxUXz580tTOWNmrDxuEeryRfy

azUTxqMejRZetRPGY58y36eijb6FdovPsajCWry4omCO2Wp1mgWrz+HjkgsIuGu81aEOJ6CAWTAX

UBSXCsWLKissBV4X7YSWshtqUv+UwT75zcfkl1X4Cu1QG1afS+uD1Xk3dc8PdQsWHyrxemt6EJsM

7Q5zD6YvivwfO4ETp+CrsgtWoaIWxvaokc5a5sqHN13oDVvmAkZLrxFVAVQvFXqx/FZZ4bO46pzz

YDRikn30Ku1FWUKb9O7yWaotFp8yWagqqfBafdglmOX64gqQGHabvVbBanE6e4PnE8howQq4GJTX

I+A9i3oceE9pZcUZI9j0nrKK0wxm8l15zp4k6Ks4YwGl01aGtJJGUrGQCirGoJnTjJqON59xINRJ

eznaQOvVwAVtU4faMKruZaQ2o7SQjS7kQAz0cFKPIzSagza11NYpjU6VR6uhx0h6nkcMRBXaKf1A

SqAZh0bhUDvCHDomnAFdkKbT0PI8jA3D6BkdDsfmHsC5mDb34s6eMIf5DMW0WB7ZCSNJW+dgG1BO

hg1DBOtJjJcPcVBeWfGMDgF+eocReeQ3YXxBD7PALgyZ9aIK0F5BD15gd4FpkyqbXGABs/Y5SivI

WJcZbB6se86E8cS6LBVCrVlw9kRFedcVABqhx620uexeyciIaQnGqWCYbPL8aqHQRUaAo8A1H5qq

l1hcviqXHV4txkJvIbEDNxmNYnoYNrkHc8l4JpoJklLqfBqhNs+nFfIGe2ahWVKPkvSohDwfjpHk

XCAUWOIavdVCFdico6Si3lzndANun0Nw+zghz9zDoTzwkDgMTBT0oAV24KYYrG6hvWQZuCVh3+L1

zrH0ODibu9pN6nOs4OleuUuYM8c5bEaBxetzuKtdMKLASQeD70FjgeC21IBcgV2QVakAr5WVZE5Z

ZYVXVyPUCCBTh8PrBrbNlmqn2euspjKG+UAamjBeMRSP5HDEEC9Prq6DW68FVbmEKqmB+OPNbfU3

N9TBqOFtQhFZjj4xfXqLhIIaGEHAXeNjwcaslhqnZCSohEaKEQfhYYMsoFOK3GucFqphuQYVuLy+

+hurDYPVQgIukNpEyVZ8nI3YWoXVJ5p9a5z2wSFuX2eVxWsxClMFcqOT5xJw+RTw0lntJuFISWwP

GoqgwVJRBdYLCAtd3pDFwTTONriSr9l+A0oIorgMlmaSCTu+zhKLy2lxuaAV/MVqtvgU8LTUuYlx

kUBbIvFTAtEeHm5vKcxFxGXMPhXE/Dp3rWCF+OwjbipJn9DIAXWotMKHzF6v4PVhIDG5EAYDeptP

aZtPHnCtswvuWlAiWc/irqVzC4FcKh2CzVwgWJ0whEmmsgTBQXyoIrdqL1ijbwV4myLZ5I3wWnK9

EKdWQIjlbNVLXLARWIyWQgtVtRssmQhhPqk5AZE0MCyZDIT59LL5muw9K1TJQy30WmuXBqspVqBs

cYWvJDRERS94WW/3MbFToJMwjxfDfsJRRRHhKZLng3gdYFVmMtviY8oqZPXQ+fPJVHNIYdI0aKGB

lmyE1hC9WoleaVElvXT0Ckv2qZNB0T4OaJC6VYSdISOAdyBamsNSciUG4B2Wssg9lBGXXOGSaylP

0gZoIQETUgO3QMDcGzxXAjuwSyDgdJLl1XQhMoOi9kqIibiUpPNWopBXki4tueZTFoY3a+ilojST

PoklxY2Cl6V3JngOSZKzyj9iM4TL3bJXyn5Xa/Y1OO010iylHMEtEFEhclcvovnFMvAGwaqCOAbs

g1dZfKV22DYob7slqRZJ0YFYJS4UUCHYkPyCYpAPCfMwuSFwLWGej4Hq4JtwmkFYLUwhjzBhSg+D

VRDtSTAyhusg0HurXTXS1gxSRlPM00kypKSKDqO6bSGhqaxCYeac1GRsvla7bMXSvcU+2N9KfFIV

kqSa9HkHOxUUXatkGzb53mJX33KWV/3dFlPL2vSF0T4SjWzqf7wUKymoSFJXESNhLpLiBLTaqr1e

Etp6VuiJh+psJmiPANJygchcmUqQzY+AlBKytJq20Cq4m4qQI6ktWQsdRhh7XjJtLXQagZrzZmkU

XGeCQdRiD42WhAB0a5IlO5e75dmSdbbanfBWSMAFQwoJyJ6klb1Ud1PUl9FLOg27sVMYREY2emEQ

I6n1YB1kvZxZASvaLEYQ11QqTxuQCnXv1B6ssskDFGQAkzzV69WG4j8J/2cg5UQ0nURO780NvnbQ

B+g6/NY96ptbw2mzrOXwwSdplN1Bk+/T5pP8hexNYcQAJoJ+21+RYw5NJ4YJhjYRVxzeGkdkrwqF

hLX20NyQ3OqoS8tzb2otq2iHViKpV8hO4sPwVNisBMxEdHQ1YuNr7XJq206020XRddktlkbIs/Ix

ZFuwUTaSrcpCRqttNMh5IeFpdLtpHKIHlzjIpRaTfBhyfsFowdPRdOn4I8gnC9gDuOSK6eZcJ5wk

eoP/keCUQhUDmzxAmddiMZqgy2uJgKOFbycVr9wn0DbYxZU2eRThYCc4pzSOUK9jvMWlIARyBtNM

MWvIuS50pDpi/0fdFjIfopRvldBmJaLwLRE2Q7KQL/gsluUQEqFxboLT64Xt1CuQs9OSCulOuvD4

BJIZkCxGHmtOgFPZUFWXQMzN3Rt8JoEckAZX2xpazQOrkRdvaDlf9S1XI1aGl0m2BhclvycbCdL6

nE1e1LvcWwknQqtvNFlYpgOq+gQnxQCUHCGUkE8OcNhQ/TVQCWlB0d/3Be9Uf0Bahv+Y35MW9jyc

4sOQC05HDDKiNHQUenZCRGAR4wiuyw7ya7NP8M2Tg3zT5BP8mqwgvzrrCi9mBvnGjCDfkB7k6ycF

+bpJV/jaCUG+ZsIVvnpikK+aeIV3pwV51wQLv2p8kF85vp5fMX4yv9we5JeNW8lXjgvyTnhWjJvM

Lx0b5JeMPcGXj/XwZamdfGlqkF+ceoVflBLkS1IW8gttQX6BbSF/u20sf1tyJ18MUCSs5OcLQX5e

UpCfm1TPF44J8gXWID/HupLPt9zF51mC/GzLCd7BX+Fn8UF+Jr+En5F4gp+eGOSnJdbzU0df4XNH

B/kpCZ18ToKHz55cwGdNXsJnZpzgJ02o59MmruQnTqh37OVTbMm8zZzNJ5t1fNJdQrkwKsiPGZXE

W+ODvGVqXMxyPs7DJ8YG+dFTY2OWJ8SoefP0eNeyuOkxrmWjyFsseYuOnxUTrIwsiCg3FRjLI5xG

Z/gMXbliBleuc3JObYGmXFWgLNc7NU6lEzkNsIsWqMvZAqZc7WScrMOhwGfwAVRmL/ZlLC72hZUs

8+E9vuRScodDi0+5x4fKK5dV9GC837mzuxuNziv2HSitOM0ieIU8lslfVNHDsfudyI7sdvsG8pBe

h9/xDQXZQ4+hH7bTwcOq3+hGtx4a+sVR00PPIqRQK06BlamQ8TnEiVglgjWmpdntk9IzTVZTstVk

fZYr61/GfDmgUZy6tvhprgTmpcI8JcxTIg3iHUaNStRolByLWKXagxgPrJdhisiNyE0DNDgTCxgL

kdZoK+M4xcR9EGgKNH3wd2ZggCUIuUPXVzO4T6aGOwlYx6IJKMURMxaJYyfwGi3gHjdB7YmOEqPH

EdwZdjvBnGvKBOzJ1ozsrKzJNptgzSKv6ZOlt5iY6PQopVKVyERHw1OwspkmAY/H3vv2ZzYvCczB

L6zf0NkZcOFXul9cObW1oqJzTkPf9sC4ttdfP9uymi0Sc3vFhqY1Z12+LcV3rDCGV9+9hG15topQ

DP56OPhnbqfiLEpBZofBmpKSIKaEedSRol7NAoEXQMDGC5PSOZstyzQ5OzsTqIlNF9InMsIYpTLa

FBUTk5mRnZ2TnpmuZwT89afbtn16T/tb3fFvRjrbHM5dRUW7nLNbnZFvxu9/60eGXV8ex3ce/3L3

6gvb56yeuuS++sD6uvvLs8X52y+sDkntZyC1aBRPqIlGYnS8JkzUxDCeeDVVhX1IUqYh8ZiGxDIT

z3+4p+fhwHM4/+mvurq+fjrwotfv73v8CH7qyON9W373WKDmsd9tobxzdL1K2Wa0yEA0peJEFatV

i1oti3QGUQcmwIaWJqqi60fCSjlgBCYZnvX7q9n8/rPMuwN28iTo+/rYzD52BlgDS9eZO7jOaIeR

rKJCgFitFdVItgQTtTGCO3IIbw1zfmAWm9b/JsHJ2vrYoj4ka+0waG0ssjoiU8eKqakKfbwYpWc9

ijGiIowQDLqTrZZazZh/rMGsLGsWd3jbb48c/Y9OuLe/vT/+w4glG2dW7im67cfL4B54nzUEjv99

d8dn9+KTkg7nN+YQHZau7F6w6Kg462WZ0+cHOTU79FSUHKsCGXISnxkhXwJtybyyf/T7+1/1+zvY

lP73CaOU2QmUU8CIOylG3c8ZxoOpMialWwVTJu70+6EHo8Tgn9ml8GZEJkeYUSlqGY9RkgGx3JQc

ymKWKZPaCR7dN+PxBLGw9Q6/6D9gWFnelp599y72o37LPVfXydpS6Ad5GOXQh6kRy3Fa4AEP8hCb

CyxAPKBGlwNhoYzput5f2+X344MPMynXmG3spOsPclXAh/pQf3XIukPWFu3QUksbNK8b7Ar0Xsc6

+s9JdiRLQbEH5upRgsMYxinUepVSi3UwW6uWKDJRigCBKRaoyTER+XCXXnpNEzi6P3BU89pL+ASN

UbMd/ZdYoez6S4pT/Q6KGXP/Dpi1gNkQpmZYToVUgFQhmyVEP4I5MhOrTJRXk/DsGea1uMu/HJgW

d1lx6vr9o7ht10q50lHX7yJcEsu8GyzThATgUmcSRPUoEWKJSVKI/cZYIrnuTIZ4s23IIPHAZx0d

nx05Qu+Ve4uL91ZKd8POL47h+499sROegRp4Xlp0qAr/rOrQIngGlsAzJOn7gadYZIaYbopFYmys

OU6nFXVxjMc83J1BZFZi/emhsCsHWzmajMZv5tXk5NTkBdLw5a5Xm5pe7QpkN/r9zJczPUXFnll9

ay/v3Hmpmd0C4US2/vcUT0vrIsERmTCarh3Hw6Ly8tTVqQ/k5n7L6sSswvHnUyvT053TAkb82baX

GsWX2gNxTrCyT1/HG//Cjp1Sn59fP6Wv4aX29pca2HnXFjF3TxyYCXqtBD10gB5mIYsjQjdtlJ1L

nBUmKmaFJaaKSYksmnXBDhfVLSgkJT0nXfISsgGl2MakpExk4D0UL1TpVD2wAUFNukLbEYNeeGRu

R+nFTQ+eWthezapYw8HnujZ/9siCe+6au7H0sdJDj5V3rOdUnEKn2NHTuu1PTxpSS6bfP2/eptX4

Nqc9AmM2ftbjR/Hul2rG5GcenzGjtQkXLxkbg+HHYHPRY3cyO88S/wn+HkT8xyH/AbtViVzIfyRp

EqmB/+Ddfn+glmOuBxQ51y4pTvWBPI6BPB6E2ZFkrp6LDCNzIyWjNGXKVgkR4oZQMfBpm//Ywbse

9rf9+3FDxxcn2GP9zodOnXqIfbzfdeKLDuKZiQgpnwC8OhLtGJ2KDeOwhvEow2S/lENFJpaTBxIz

Ru/D4zB+J/DAG4G/Bj57I/DAOxiDJ+3jNkK4+KpfTd4Bd/BjsKckwK1GsQ6dErEsowaiGcmAJYcH

P6e4mUZ/oOAT2P5mfsIsHOhhFrKrBtYxB4g3NEN0fIobDdExBXa42DEpvBgfI8bHa4QUrceg8WhY

UaOSnJPapT0D8E4m6lalhLxU4GxgDJnWWCsYgSSjWNjwmd811cxsnXho2vmW7b2uvkDei6d8OEUf

8JcsbFy9aUO0eWHDbOZg3XrbmLq5C5ed3DJQa3jo+NGjj86dv/C2jKyD47LNQB9ohn0PuASPQcmO

GEHjsSAPy6tEhtd6IiNi9GIMJS8jg8gzFNOjBs2Vho0QpdQkiR0wxgNj9JOWza5du7Z29rJJ0WlH

VjQ/sLjs+PpAmt9vWFH+fv7KjK3r/s2zbdKK2ReXVVe/uOvjHS9UK84ST8aoC2j6JchMIHnIaEGI

FwWtRx0BWZHqpqzolj4ClOWkx9KU6OeXRPHS/kV3emx3jW9xtHRtb53dYr8rxXNniUG8fOeJ7ouN

KUVZOzKyd7Sd2Lpratb+yfNtIJOu4B9ZaR+lMrHwgplQYDTookSdysNoPBjJKiPhJEOy/WH0xKom

D6cG1EVcFfbZwN6HyxY/0Lz83rToIeno+e56sjtEVL+489NdL1a7lr6TtzJ9m+fj9VszXfn/cntD

SCZvgUySILJF6Q2iXq9OTEoyi0kgmShRLZuQ8YIUV4fLJjoagts3pEMUdca/uv6Ct6vXPTAHXwtb

v2pjx572mVsm7br9nNuw5s27Nx39tafry6fmPNrRfeTHO7Z7MybsKqIRvgRuS+muZUDxDgNkaqxS

1Ck9LPJoNRIhZD8Fk82MJquaBBbiwosdOw4fHJ3ob2ZUA19z93n39o0Xrldz+lNE4oFK9nnOgiJQ

BrI7RqVNzBgnZmjhJGYWRLPKE6EWuQiDJ1xJkF8YJnc0LHbKYYP5FjXg3WcyvalrZ2zq9Dde7N45

gj4ClUsXtudM397Chfeb7vSL+O4RlQM+BLHxY2ovkcRitRq9StQD1SwIA0n7HaWWZBiSb8seA5I5

BvtZi6e+pil60n0rnzzjJ4bAbGpua1h1cXnth5cHvBJ+vEaOvVEOjVLjUYAkWE6JZl29QkUNco7O

pMhIUuZ/5/pfyI4I87j0wVyKd0SwSA0BUqvSeDjkYZQeDBjsoWgWOSyh+oqJ+bz/D8Ww082/A7/y

r9jL7Oj3KmKAtKV7BqyIRvTrjJbaAGR9SghiyKPUyFkfBnETzZOYjtdYE11tGzv8WGcb23fgDu6Y

TJlyDo2KUSiZZP4JZj5OVClJNORVniRDlMZjUg7FnQzJy4bLjggP3yxQ0qho89Svahib/rB73UOl

/uupIOA1a6olATcdXeQn0t0oXqxfD1FnwMvpr/+FtIiuiyvraAsKaRTou5VGld9TozesIGuUePOv

Ab8J4i7J03hRHUec2KQdnqcNeTAx7OxQvKXmjB8/V1t7bvduel+9adNqAgbx9Tuf7L7U2Hip+6n9

l8S+XZuf2rxjB9x2EZ7Ax96jPNGoplIKWhLVYmNGRYijVB7WILM25F2EO/Qt0R64xetGCPac/tpt

+J6Roj0a5vcjRVoDmOg3Iy36X4m0lKhv82YXlZMJopteExauFMNBPpph8gnJZkjxsSqid8vibPfq

6ElHls/dYN9JFM/mjlm96uKK+rGp5CiFikHvfYB7BskL7aN0uVziDMgLZ2hpXqgaMS8kaeEYcgmQ

GH5jz6NpYUZsRgZJC+kW/MzD+6ZtLvvpos2b86qc6gg1p+Zq962oPL1r0V27Zm5dcM+8hoZplaXK

cBWrZJvubXCdP2hImpd9yOEoLs7IMKkg+1PbW5qbD85PnDbhUEbG3LnjxukV0Koa37V13V1FZA8A

/09STKd7QKwjHE6a5MAOewDdAdJkG5aTOggGNDOctMmfOLqqJXAc0q/xih/v4SZefwOiAhfZK2ci

H3L6kM/hCKVH8jst2XGRZAOyBWA5C6JHa1iEjXj99UDl2tqaZr3lQONTv6ROh+9pahWr3r+94cNL

TCuRfgZo9j1YQYkiSczCnJJqlQTAXPn7UmYky74b2HI0sOXdAMHB6QfMMLMQToB/hZk0z9QwChaF

6TQeFUctIiN0JI3MJDEUDmsCywqF7/Zidj9me98NnDs6MHCUYGI+JQDh4MpAJvA5nUYZPVKgMBSO

Eh0mjZINRyolh7kwjUdLTX/wDEhSWCCQnC9hBXw50PUJ5LF7Pw5cqAp89TF+45NPAgfwe0x2IG3g

ZWbGC4EO5kG8buAN4mUZgYXsJUq9EXSlNRqUOthKVUrwePsVwjxFD/mSkEWyA2yF4yZ7KVAYt8BT

OnZsbn487hzIfQPPIg4dnFuadGHiFO5Q/5YPaV4CPOwG3GEkjnEYgpioVno4TSiOYaL4LAwpCLsm

EM7o+68zKKBnPmCrBpad9TEPn5VOrew7inMgAzPBEm4WlVGiUuEJDx+KhuTQSuNrFI2EJikSEuPC

jW+/87ofYE19XVNTXf0aw69fZg5deP+9VwZWX3i/b73IHBLXrxcHVovryckMiP4b/eKo+7mC8yDd

4BcNVVZOJv6b/1e/8nNvdLzthbHNwNuzcIpLJHEg0Swm6jzaCMhFIhRkkvECmZiDB+OyKlrImsmE

QqOKMN6Jr49Pr1vpbNa9HbHWt6Gr1+XIDSxjbP3+HubRqe3ZzFJXowvj9p4Vzp+14dufWDBwgX7B

7AoGubGKk/S7KFicioMdVqlkwnQehiNrkyyPRiEwCuJY4BJd+LO3AknMpX4ns+G11/ABbvT1P51l

2vqfkL9Ysa8A18kke4xPMIoJCdHJEHiSwz3RcWI0N+yTlRx6sjKjh0d9lUA/t92Q5794YnWEXyuW

V61eXZVVlfw8WPdvbRBNn1nh6t1uWPLoBoxLnHe0bmm5Y3o2E+gLnOHHNFzs3gJJN3DYBhQ9AhSN

QqlotMOgDzdZRZNJOypVHBWu5dCsWfbQKV3eCXOywTIzcc4/2BK7f7HKlqTUq/D0DwLdON7lWH+8

bNVzne7G5rplNY0uQ/0rP8aLTi8xjNYzngF7Utrkupf34n0XGy60rcVbdu7agte2ylrfSc99cFZV

qsiXIs7DUDuxG68QiybBDOTB7gzseR+3Bfb72Vjuq+tq7vdv4rtIdrMbePsa7IZH6SifSFwVm5ov

pqYa+HSRD/cYpooGhWTZN/N406avCjE6k5G+TZPtl4T7zIjs7Jta8AsXm5qW3b6i7vmtW5+vW7Vg

+dqmizvmrpk2bc1c6T5j5eTJK2dId0PNc5vjms6lj3uoQvCcXLXqpEeofHBsxktNcZufq7kwpTZP

n187ZUpdviGvJof5SVaVQz9jZWbmypmGWe4sYp9twOYjwCHRHu8wYcSlihwXPkrnCbeK4RJzg19Z

VPIH0Bs4U4KDCOgG/TH34vjagoYHl4LOOn+xKjVZqVMFLn+A8xsbXe7GRjfzVtJEu3i+A3dfbBAv

78cLepaGm8MHfsIaulrwhm3bNuKW7cEgageDL+Xi0BjmIEJIRe5sHui1PfAsLkVXQT+a0yxmUNoV

UGZOpknVfvXq1cAL/0r8hM6lY3Q/Z5HIRkjRIQc2MDLqKv0aGHiNeUQ5H6JVxC+YMAWEUgVKy0zL

jKCKZEzGiJxYJezDEbEqXNvTc3rfPYcP37OvDX+ErVA+Ot/xRMB17VrA9eQ2gi0KsLEyNg2rQuFK

1RC22OyIrMlMSk5MhMnIqKIootOA8pdP4mPXruFjT3ScD1gDH0Gxnic5OX6CdTAi4fAZhhWBRfoB

2prFOgZcjNhHvsQUs/uwVfqi+yzDIiPZAujWZVIVX72qOEUEwaDK4EIuTbkKzUYFaJwjboJZN52z

FMyeHdaomB3uybNYxjXaLAp6GDdeobeRv2XB/bt+zaLHj9+cvCdv77yn6/fvm7OmjFWwCq1i109b

xLcfKty7K29rUXfBjh23bajh1ApFmKLlIbH5Xx4r9fsNaSsKf7p06dr1eF7ZOCP9ehU/85HD+OB5

9+hp45/MSG9qwsXlqTHQDteo4p/eyXT/coWy+avPQRKHA13KvYpjSA/7TzEa74hXRkO0tc0Qbey8

YnGefmKWONGk1ZtFPSJhN9NufNU+y/6qdNAmnNGNSTUsIEn2nAS52uSciIikzAwuwkR2LkhWcuSP

XJOZJGEMx6iUUTCWyyR/1fI9/drFi68ejDp0x+G6uobXa+uuB556EjM/w4sD1/CiEwf2/uQnb4yf

kGbvCqIXzgfRdgZ3YuZlPC5w1fCb3zz1bx999HHg7NTW1t6O7S91bAu8uL1j4P3HcNHXc/bMwXpc

d/qZwL2BvwYunnz0/geVRfPmFOPb3sLx3fsCn72Tv6fg7PX2Z6Q/JCdAmTtCuR/Kx6GCRw0rC0Ys

rVBelsvvoQRuLkwys4iWtYPlfubCUIEcdaSSR8seufx5eOGMcpn+D4sIpfsb5cNbF0UKlPrB0jOs

/H2korQoO+TyNJTXb1G+JkUVN1gaVEeGlbdGKuoEKHXqu+Xy9fASNkYupSOUdWH3hf0qbEAqGv6H

8kP5/7CUa1ZrnoDyhjZeW6fdrf1KVzhiWayrGSwtI5QHdC/L5d1blM9uVcJX/R8pn/5Q/l8p9D9q

pP/uioLshPyOw0lwP/0vsDw0Ed2HXkAX4T0aTt/voUnoJPoCfYD60CfoS/RbdB49iQ6hp1Er8wh6

gull2phuppVpgTx4BuCtAQxG9Fd0APCtQGfQu+hvzFb0z8yDyMk8BNn8ZrQEzUcNkAnlMlvQVOYk

ymf2oXHoGvM/mXZmG9PB/AjyJA49CtRwUIDOz/Mg60afY3KHOgf3/xtolP5rLgLwMfCmRPEI5bkb

mjdUN3ga6zZaSmubGvPXNtfUNm+oraH/X4cPIAWc+r7b76Zxn6PPgzc0yP+dp3gBPcvY4DkRpX4v

GIeeJcB9gQ7fDAoH9N0CuIv/BdgsgWI84B0OzdAGwEz+duC0KFExBsbLwB3+JiinQ9/REWAcrPc9

gbsOeGVQ5NwI3B9Q5UjA/jr4h+GgmImO/VdB+SpKJMApg598K+Sh5u8FlegYAbYfdd0MXMkIUPT9

gdmLSr6Bpw3WBmCY7wbctCFgFn0TlL+W8N0SlsN63xdk2RBaWRFkNAw4GyoeCZj7Uclw4DbA+O8D

CGUoJ6FCTkDT2Q9Rxg3wN6DlB/gBfoAf4Af4bw+ciA4zT0JOMQb2agLd0LYM8hIzauNUUO9Eu+n7

9wT8Bmr/3wHMc5CbPYeihgN7FfbI7wB4DSr+rsA9ADL4bwIqHh2Wz1sj/0hezxiW9/iefn6VYfrf

kFY6CFzd9uoB8nx/QcJ7f983cFX9gfp/kL8+0LMH/P4TUTjDPQplbmRzdHJlYW0KZW5kb2JqCjIg

MCBvYmoKPDwvUHJvZHVjZXIoR1BMIEdob3N0c2NyaXB0IDguNjQpCi9DcmVhdGlvbkRhdGUoRDoy

MDI0MDMyNjIyMjcyOSswMicwMCcpCi9Nb2REYXRlKEQ6MjAyNDAzMjYyMjI3MjkrMDInMDAnKQov

VGl0bGUoTWljcm9zb2Z0IFdvcmQgLSBEb2N1bWVudDEpCi9DcmVhdG9yKFBTY3JpcHQ1LmRsbCBW

ZXJzaW9uIDUuMi4yKQovQXV0aG9yKHVzZXIpPj5lbmRvYmoKeHJlZgowIDE1CjAwMDAwMDAwMDAg

NjU1MzUgZiAKMDAwMDAwNDU1MiAwMDAwMCBuIAowMDAwMDE1MTAzIDAwMDAwIG4gCjAwMDAwMDQ0

OTMgMDAwMDAgbiAKMDAwMDAwNDMzMyAwMDAwMCBuIAowMDAwMDAwMDE1IDAwMDAwIG4gCjAwMDAw

MDQzMTMgMDAwMDAgbiAKMDAwMDAwNDYwMCAwMDAwMCBuIAowMDAwMDA1MzEzIDAwMDAwIG4gCjAw

MDAwMDYxNDcgMDAwMDAgbiAKMDAwMDAwNDY0MSAwMDAwMCBuIAowMDAwMDA0NjcxIDAwMDAwIG4g

CjAwMDAwMDYzNjYgMDAwMDAgbiAKMDAwMDAwNDcwMSAwMDAwMCBuIAowMDAwMDA1NzU0IDAwMDAw

IG4gCnRyYWlsZXIKPDwgL1NpemUgMTUgL1Jvb3QgMSAwIFIgL0luZm8gMiAwIFIKL0lEIFs8ODU2

Q0YxNzY2QTJEQkRDRUZGMTdGNzlERjE1NzNFODE+PDg1NkNGMTc2NkEyREJEQ0VGRjE3Rjc5REYx

NTczRTgxPl0KPj4Kc3RhcnR4cmVmCjE1MzEyCiUlRU9GCg==



------=_20240330080442_28849--



Remittance Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 20:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpf8h-000000007Es-2P25

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 20:05:11 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 20:05:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ded4927.inmotionhosting.com ([192.249.121.37]:47143)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpdEb-00000000MxT-20pU

for www@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 18:03:17 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=wasender.my

; s=default; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:

Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=PCxFbp6om2WrjKNuDYm+4clIZeyl/UWI0CNDEGqXbMQ=; b=Bxx4rJ6WGsi3FsEheC41mCJuUb

CsZqiCM16ljVHjhDlk+XfE6peR02REERGmBDYTzBTkzcYL5vv68N+rlYcQN7080HrLZdY75dX55Sj

/vIsnny4Hv7b7Nmef8LG3/Ks8lgJSKm53QmenKA5KXi9rCeCma1BJYJbeaRWF4dA5E818SIYyGd48

t32f6X5nM6EHJaGr+aKU/OYgfK9FzqTx4LYwXYSb09VdMAcyY9Dk3lTAI7M6JUpgnfu+bichJ1V8K

Hr1kcTtWSEzn8F4gp2G/+A/21ms/XC9KzTp0YtVfa0GUepWq9gM1JirM/8ehJlqQWLAeTXgkRmN8R

j7IbD4Bw==;

Received: from [69.172.233.31] (port=53322 helo=wasender.my)

by ded4927.inmotionhosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96.2)

(envelope-from )

id 1rpdCf-0005oh-31

for www@doctor.nl2k.ab.ca;

Thu, 28 Mar 2024 08:01:09 +0800

From: www

To: www@doctor.nl2k.ab.ca

Subject: ** VIRUS ***=?UTF-8?B?RG9jdVNpZ24gUmVjZWl2ZWQ=?= 3/28/2024 12:58:02 a.m.

Date: 28 Mar 2024 00:58:02 +0100

Message-ID: <20240328005802.AB0D40673E06B21A@wasender.my>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_E7660089.3DF79FB1"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ded4927.inmotionhosting.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - wasender.my

X-Get-Message-Sender-Via: ded4927.inmotionhosting.com: authenticated_id: admin@wasender.my

X-Authenticated-Sender: ded4927.inmotionhosting.com: admin@wasender.my

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello www, See attached for remittance advice. This payment

will available in your account in 2-3 business days.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[192.249.121.37 listed in psbl.surriel.com]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

2.7 FROM_WSP_TRAIL Trailing whitespace before '>' in From header field

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_OBFU_HTML_ATTACH HTML attachment with non-text MIME type

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

Subject: ** VIRUS ***{SPAM?} =?UTF-8?B?RG9jdVNpZ24gUmVjZWl2ZWQ=?= 3/28/2024 12:58:02 a.m.

X-Antivirus: AVG (VPS 240327-4, 3/27/2024), Inbound message

X-Antivirus-Status: Infected

X-Attachment: STATEMENT.html#4234116485 Virus: Other:SNH-gen [Phish] Moved to chest



This is a multi-part message in MIME format.



------=_NextPart_000_0012_E7660089.3DF79FB1

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable


















ntColor; border-image: none; color: rgb(0, 0, 0); line-height: inherit; fon=

t-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetic=

a, sans-serif; font-size: 12pt; font-style: inherit; font-variant: inherit;=

font-weight: inherit; vertical-align: baseline; font-stretch: inherit; fon=

t-feature-settings: inherit; font-optical-sizing: inherit; font-kerning: in=

herit; font-variation-settings: inherit;">

Hello www,

tColor; border-image: none; color: rgb(0, 0, 0); line-height: inherit; font=

-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; font-style: inherit; font-variant: inherit; =

font-weight: inherit; vertical-align: baseline; font-stretch: inherit; font=

-feature-settings: inherit; font-optical-sizing: inherit; font-kerning: inh=

erit; font-variation-settings: inherit;">



rder-image: none; color: rgb(0, 0, 0); line-height: inherit; font-family: A=

ptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-ser=

if; font-size: 12pt; font-style: inherit; font-variant: inherit; font-weigh=

t: inherit; vertical-align: baseline; font-stretch: inherit; font-feature-s=

ettings: inherit; font-optical-sizing: inherit; font-kerning: inherit; font=

-variation-settings: inherit;">

See attached for remittance advice.



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;"> 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">

This payment will available in your account in 2-3 business days. 
v>


mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">Keep in touch 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">Thank you, 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">Jordon Duce



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">

Senior Office Accounting 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">





Sent from Mail for Windows

t>

 



------=_NextPart_000_0012_E7660089.3DF79FB1--



Dewalt Canadian Tire phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 07:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpThZ-00000000JGa-2iDe

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 07:52:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 07:52:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04on2103.outbound.protection.outlook.com ([40.107.100.103]:23489 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpRyH-00000000AhK-08oB

for root@nk.ca;

Wed, 27 Mar 2024 06:01:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=UWUszyb8qnQQcARf/G+WCu3zzjYW/pbGTWmf6dW4zXusMEcFCJ0unwSa6gmgltdB8em2ZhcdRsxv1bl3yA5DwoV/u17tMM/sSSi0i18HijyxHxUTyW/1a9YBbqtnlR5raC9NJZHZ9ypwOLrFTBTTS8ukDNDt8/uCDYAeBAj4DtQSM2EeycgvnSDeFXDbc7S2Toc0KYoGIhBuiDHynq+lt9YcKcM6fvdwnhwtiPF9g9ueZyCkxmrqewjd8JggyCanwRIRTMdqPxRg7nQ81HlOIXIDcQs4YBidWjWBHIBG9vJY+dtil/Y5dtS69DP+EVMVvRW3iYB9rKQd9ktr5C+xRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=QK4WPbXjmCK87NX4llDZ2wonTlvxr67DEfbAmliHhtA=;

b=EmgACm03vXNlmLhTZGpiQbN72qovwF1vKVLCDGEwUsNPIFG3Uy8H1XI/lyfSHYGPfT63wUJL5YfudQVruseyRQFSgO8AFUZDPM3T7wqxIi6UykQdBfCdWsW/X9vjT5vILTxPYRMg7TvinkbIPpYR24XsfdUi5xMGARMlVxSRhMl9ZArVrvZ+WF7iro1wV48ufqWN+Bk0uK97PKjME1KhDnlIHmpzPvnufLfKT5X5kjJ9Ucfzqsu6oYaapSJw6JJlMADQFpxWHvw5+Ssa2PNUjq6jV14FbYXbmzwnwAsw9PzeC844cz4cEX9xkjPNnVkW4B7sB9w4rk+ParW0x8dcUg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

212.87.212.62) smtp.rcpttodomain=nk.ca

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 212.87.212.62)

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com;

Subject: Get Rewarded for Your Opinion:Take Our Survey!

Date: Wed, 27 Mar 2024 11:59:28 +0000

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: root@nk.ca

From: "Dewalt-EXTREME-Drill-Unlocked"

MIME-Version: 1.0In-Reply-To:

To: root@nk.ca

Message-ID:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0001A107:EE_|MW4PR12MB6850:EE_

X-MS-Office365-Filtering-Correlation-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:212.87.212.62;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:gdfgdg78zrtgh.onmicrosoft.com;PTR:mailkhalilo194.infinitygroup.com.ar;CAT:NONE;SFS:(13230031)(82310400014)(36860700004)(376005)(61400799018)(34070700005)(41320700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: gdfgdg78zrtgh.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 11:59:28.3481

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-CrossTenant-Id: 4b10c5ae-a8a9-4671-9687-e36fa9732105

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4b10c5ae-a8a9-4671-9687-e36fa9732105;Ip=[212.87.212.62];Helo=[gdfgdg78zrtgh.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0001A107.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR12MB6850

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications























































ミ★ Canadian Tire Department ★彡







꧁ Order confirmation #064282 ꧂
























Elon Musk product spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 23:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rozeO-000000007gd-2Kf4

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 23:47:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 23:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southeastasiaazon11020003.outbound.protection.outlook.com ([52.101.133.3]:35735 helo=SG2PR03CU006.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rourH-00000000L4Z-0NYw

for root@nk.ca;

Mon, 25 Mar 2024 18:40:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MH7L8jDG6QCWmIiOvcZbd5zm5Aua1lQnve2p2nCkv488Fen4IgzKy7p5UcbYRkZkpPUkdsNbf7l4vWdKn9Q/YvShuLVkx0N5uQZ1abStqyght22MmLc1IJ6P0+xadpYC9jAG6AQQOBCwAbXq1nv6evkuQTrjEHjoWNOgSRbEnTGgR0X3pA8sXA8dnCaz5j16fv/UUWVr0dS3S8xnNEYhYdcdxtR23q37rhfj1PS0GpL4xKCCiaVYbcnIb5GW4TevorI7tnx0v8ii82zSt4IfwU0dmJs4w/rAlmbapRAxCEvpiUbgHPgO4hT+MTMFbSpN52uY3pQeraoswvOPrfgqUg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=F9D//TnS2J/C7bbeguyozc8dRv1H4bjwtmyBrv31tGA=;

b=UZ4cKZKoJnLYKyLZadtcKsk3OuBMQmdKInkDWa2TtvOWB3ZlENMIu/eISbHL0gRVxXL0uCxirIC3QoSYLAxrXMQMr5LHMj5M+CKDS0BCzA+h0LPBAil+vcpMVlJXOsmKT+inm3WPqnntniAdsfSWHkl0YIoDdGtZoG7GUVYOPu4kGLGa5099xy9w7oPH6jAvs/G2nKd8mlTducdTM32Y3Tcacxznzb9djybWKjGw2wxl9RFCC8V7WYcBUBKUWCfmUTSCkKtVndQwsGbw5/yc8BcZRwGsG+KyFyUGGjPLfJAZsD9rpidVn41ydc4FWHAo01IIyCZmBYKnv9XH3t6UHw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.156) smtp.rcpttodomain=nk.ca smtp.mailfrom=vehz.onmicrosoft.com;

dmarc=none action=none header.from=vehz.onmicrosoft.com; dkim=none (message

not signed); arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.156)

smtp.mailfrom=vehz.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vehz.onmicrosoft.com;

X-MS-Has-Attach: yes

msip_labels:

MIME-Version: 1.0

Thread-Index: BzsjXNhmZXbtzP3k7+6Tay5FcEI3Ty1KVR==

Content-Type: multipart/related; boundary="XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse"; type="multipart/alternative"

X-MS-TNEF-Correlator:

Content-Language: fr-FR

Subject: Get Ahead with Elon Musk's Seal of Approval!

Message-ID:

Date: Tue, 26 Mar 2024 00:38:00 +0000

To: "root@gmail.com"

From: Elon Power Bank

Accept-Language: fr-FR, en-US

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK2PEPF00006FB4:EE_|SEYPR01MB5979:EE_

X-MS-Office365-Filtering-Correlation-Id: 69c2e5ee-9b3e-443e-8129-08dc4d2cfdd5

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.40.156;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:vehz.onmicrosoft.com;PTR:172-233-40-156.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(34020700007)(41320700004)(61400799018)(82310400014)(376005)(36860700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: vehz.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 00:38:00.8232

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 69c2e5ee-9b3e-443e-8129-08dc4d2cfdd5

X-MS-Exchange-CrossTenant-Id: a54a1645-38a1-4581-86b4-4f9afe14d61a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54a1645-38a1-4581-86b4-4f9afe14d61a;Ip=[172.233.40.156];Helo=[vehz.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK2PEPF00006FB4.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5979



--XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse

Content-Type: multipart/alternative; boundary="EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy"



--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL





yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE





--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

















Stop Watt: Transform Your Energy Usage Today!





























--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy--



--XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse--

Product Phishing from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 23:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rozeU-000000007kB-2iRG

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 23:47:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 23:47:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01on2136.outbound.protection.outlook.com ([40.107.122.136]:43246 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1routC-00000000LCw-38J5

for root@nk.ca;

Mon, 25 Mar 2024 18:42:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=XsHgfhPEkCzRREOknGHB9ZDd+oUUOaicyqKkVOCHF53YMsRBDP+GMce2lv2O2PYYHZJoNcCIrTls0lGukc9ZLS3AFmrGd5ax/Pele8ZOFgtzA6td1agmGgXYoe1t9mSnEPV/VCkFQgUJ9MSj+4U2F8Oezv1n1z1GIy9hszRJu49dlF2J2Rvql82bMYhcaAvXk9XWAGALf0Gvo2RuRT5mksP83va9Qp/CIl8c0encnXYJ8TqE9zq1Ky+6Y6W5Ai1ZZzZ3BOz37tq9a8DZrBnx0XGr3Mx/3e1D1rrHIK4gmTi9LFRSieWO062mPhbLywF24rVnoh7EQkwkpDEiLPHkBQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=VwUlNQRWtM6yJRasGzAv7TSWHWe3IHRo4KEYsozOQS0=;

b=afeDcQ1XOmYWntyDHdJ+dswZQzVTk+UC2zqPoGdNUvtglMVbAK9rN5sr/zJxiyaJjf7F9DKyPd2gped582b/fRt8I3OiBHFvWgk5z7QdzsHlmJ8TqwqA7eLH7asmU6Whw9M/vix8rReuKT5MIpq8YahdMUMNIk5J+/nKISewLM3pG/8TY2WdBUku3ZKi+OhvFsSMkvAZknohwvnkxF3wbWyw6D0YXfEuQuRHnhzUIjzHR3Q2u5sZ8qG8hApXqXyIuc3FxrLBfcipF8yigjWBt8cjh23ZjUOdhm9px7aBj/hWgPW/sz3aycZuNkj8x1ojbs2m7Xv2muEAWjeGhr62/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.11.93.53) smtp.rcpttodomain=nk.ca smtp.mailfrom=zmbhksu.onmicrosoft.com;

dmarc=none action=none header.from=zmbhksu.onmicrosoft.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wetherbyprepstudentscouk.onmicrosoft.com;

s=selector1-wetherbyprepstudentscouk-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=VwUlNQRWtM6yJRasGzAv7TSWHWe3IHRo4KEYsozOQS0=;

b=S7r2GH67jx+4lF4/TzUVLWSCudjqKN3+94ODdl2G9FfPSS5qF9aGUbDi1Nnkv6HoiUJecGl9b1PHkl/R0shagQQUoe/6Q1cKQfm7Ent1xp3hCeVFwU7BobqJP/ny/T6+dktv4XecKdIT1Rkymih2LiKy1jASSJNMTQqRLbV6+zk=

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.11.93.53)

smtp.mailfrom=zmbhksu.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=zmbhksu.onmicrosoft.com;

Content-Type: multipart/related; boundary="HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT"; type="multipart/alternative"

Content-Language: fr-FR

Subject: Get Ahead with Elon Musk's Seal of Approval!

msip_labels:

X-MS-TNEF-Correlator:

Message-ID:

Thread-Index: 6Q3TGNyab3PMBZqOD+hG0DprtWzWV0LuSf==

Date: Tue, 26 Mar 2024 00:40:00 +0000

From: Elon Power Bank

To: "root@gmail.com"

Accept-Language: fr-FR, en-US

X-MS-Has-Attach: yes

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000028CC:EE_|LO2P123MB6245:EE_

X-MS-Office365-Filtering-Correlation-Id: 25601516-b06a-46e1-0aa9-08dc4d2d4677

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.11.93.53;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:zmbhksu.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230031)(34020700007)(36860700004)(41320700004)(82310400014)(61400799018)(376005);DIR:OUT;SFP:1102;

X-OriginatorOrg: zmbhksu.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 00:40:01.1622

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 25601516-b06a-46e1-0aa9-08dc4d2d4677

X-MS-Exchange-CrossTenant-Id: 758d6117-8a63-4a5d-8dd9-7339a955921a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=758d6117-8a63-4a5d-8dd9-7339a955921a;Ip=[45.11.93.53];Helo=[zmbhksu.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000028CC.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO2P123MB6245



--HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT

Content-Type: multipart/alternative; boundary="cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA"



--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa





EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF





--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

















Stop Watt: Transform Your Energy Usage Today!





























--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA--



--HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT--

Mcafee phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 13:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpCGk-00000000Mpn-00JA

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 13:15:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 13:15:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f177.google.com ([209.85.215.177]:38944)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpBqA-00000000J1S-2gyP

for doctor@nl2k.ab.ca;

Tue, 26 Mar 2024 12:48:11 -0600

Received: by mail-pg1-f177.google.com with SMTP id 41be03b00d2f7-55b5a37acb6so1075059a12.0

for ; Tue, 26 Mar 2024 11:46:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711478766; x=1712083566; darn=nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=ef2dfSfTWVqSke5chkzhbILiE9XZOPfWjWOdIWRiNvU=;

b=VBWSyfR6+L+UHN35m0hpgmdi/1sEHZD/5apXbpuEETTnn0XhDh9+kJgbXpPJb7yaXE

ghXyAP81LynKgVHxxyGFIJ37SZZ/I3Yss39kC/5X5QbsA8O5Dz++Hmx5WaZAUL4RzVDQ

qJuTJ6EOiJF9rgYx93SPLdgBA4yAd48FUlhawLgr9SyoPHla/tLdlBMWEOR5afJeR+pO

cayFepZiAwNvBz/OEWKwznFDY4Owdtq3XrXrHk1LC0S3HZX3wAjRv3hmPOpGFMMf66Ji

mUJx9De53rk58419yAGBlUPX2lMvTqMPfmDNJt8D0XLIXZAHu1SInXqKoV9cVHo4vQyd

cJ4A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711478766; x=1712083566;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=ef2dfSfTWVqSke5chkzhbILiE9XZOPfWjWOdIWRiNvU=;

b=DePxAvjZ463cdFA/SivUbhYhn6ENfxkGmxUMqXJOXZr0Z726lTa7Ocsp9E0cGH6dUd

hxlEQ4lCX+RB87Mx7WdeAe9t2UbVu5Tua4dsIbtarzws/kp5TcDHJK/UzuCFMCNlBQJ1

zWlpGv1qRUXvnk2X74FoeRYCuqRUN8tgnaqqJFVmVt49PLt/JY27Wx8cVVr6nhMJx/WQ

QWzf1YtnWmVXeaYEwQ/NP5TGMES4FZJnx229Z5fBvrl49d3ykDHR5SvTiEwy0wnYRdeF

uJ1sBERI0Gpn7qWVccvdWhcBcw8L2g0xpZIkVl7AiGOVAYrFgfdnI0edEl4HhCC3nEEt

/t9Q==

X-Gm-Message-State: AOJu0Yxk1sVBTCeMVttJLG6Jbh/UxQPyl0SS/v7h84cuwXjlZNnVnpqA

2VL/PyotgrmBpma1cZwa6XwSErjhRRcQamwhwK8FssNUhe25jPhfirXTzJLe

X-Google-Smtp-Source: AGHT+IF+YZu33m+qJrCzaLc8i4qABQxZCkn3IlLMq4TrWTw+8n/kAK3bfcrSsZe9lKtP3WH6jjo4cw==

X-Received: by 2002:a17:90a:9f8b:b0:29e:b9c:d062 with SMTP id o11-20020a17090a9f8b00b0029e0b9cd062mr9449799pjp.3.1711478766019;

Tue, 26 Mar 2024 11:46:06 -0700 (PDT)

Received: from [10.201.16.88] ([43.128.219.237])

by smtp.gmail.com with ESMTPSA id si13-20020a17090b528d00b0029fe0b8859fsm1443583pjb.1.2024.03.26.11.46.05

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 26 Mar 2024 11:46:05 -0700 (PDT)

Message-ID: <660317ed.170a0220.73e65.27d0@mx.google.com>

Date: Tue, 26 Mar 2024 11:46:05 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============7049831437320822620=="

MIME-Version: 1.0

Subject: Updated Delivery Schedule RH890100NH

From: Chung suo Chen

To: doctor@nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: QQMail 2.x

List-Unsubscribe:

List-Owner:

List-ID: autagrace45@gmail.com

List-Subscribe: autagrace45@gmail.com

List-Post:



--===============7049831437320822620==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAyNywgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7

JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv

Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg

QW50aVZpcnVzPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRp

b24gS2V5OiBaUTcyOTFDVzxicj4KPGJyPgo8YnI+CjxiPiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYj

MTAxOyYjMTAxOyBBbnRpVmlydXM8L2I+ICYjODA7JiM5NzsmIzEyMTsmIzEwOTsmIzEwMTsmIzEx

MDsmIzExNjsgdmVyaWZpZWQgc3VjY2Vzc2Z1bGx5LiBTdGF5IGd1YXJkZWQuPGJyPiBDb25maXJt

YXRpb24gaGFzIGJlZW4gcmVjZWl2ZWQgZm9yIHRoZSBzdWNjZXNzZnVsICYjODA7JiM5NzsmIzEy

MTsmIzEwOTsmIzEwMTsmIzExMDsmIzExNjsgb2YgPGI+JiMzNjs0NjkuNjk8L2I+IGZvciB0aGUg

YXV0by0mIzExNDsmIzEwMTsmIzExMDsmIzEwMTsmIzExOTsmIzk3OyYjMTA4OyBvZiA8Yj4mIzc3

OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgQW50aVZpcnVzPC9iPi48YnI+U2hvdWxkIHlv

dSBuZWVkIGZ1cnRoZXIgZGV0YWlscyBvciBoYXZlIGFueSBxdWVzdGlvbnMgYWJvdXQgdGhpcyAm

IzExNjsmIzExNDsmIzk3OyYjMTEwOyYjeDczOyYjOTc7JiM5OTsmIzExNjsmIzEwNTsmIzExMTsm

IzExMDssIHBsZWFzZSBkbyBub3QgaGVzaXRhdGUgdG8gY29udGFjdCB1cy48YnI+Rm9yIGFueSBo

ZWxwIG5lZWRlZCwgZmVlbCBmcmVlIHRvIHJlYWNoIG91dCB0byBvdXIgJiM5OTsmIzExNzsmIzEx

NTsmIzExNjsmIzExMTsmIzEwOTsmIzEwMTsmIzExNDsgc2VydmljZSB0ZWFtIGF0IDxiPiYjNDM7

JiM0OTsoODQ1KSA2JiM0OTsmIzU1Oy00JiM1NTs5MDwvYj4gd2l0aGluIHRoZSBuZXh0IHNpeCBo

b3Vycy4KPGJyPgo8YnI+Cjxicj4KV2UgaGlnaGx5IHZhbHVlIHlvdXIgcHJlZmVyZW5jZSBmb3Ig

PGI+JiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IEFudGlWaXJ1czwvYj4sIGFuZCB5

b3VyIGNob2ljZSBpcyBncmVhdGx5IGFwcHJlY2lhdGVkLjxicj4KPGJyPgo8YnI+Cldhcm0gcmVn

YXJkcyw8YnI+CiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAxOyBBbnRpVmlydXM8YnI+

CjQ4MDggTWF5bmFyZCBSZCBDYWxnYXJ5IFQyRSA2SjggQ2FuYWRhPGJyPgpGb3IgaW5xdWlyaWVz

LCBwbGVhc2Ugc3VwcG9ydCB1cyBhdCA8Yj4mIzQzOyYjNDk7KDg0NSkgNiYjNDk7JiM1NTstNCYj

NTU7OTA8L2I+Lg==



--===============7049831437320822620==--

Instragram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Mar 2024 07:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ro0yX-00000000EqJ-3jIZ

for dave@doctor.nl2k.ab.ca;

Sat, 23 Mar 2024 06:59:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Mar 2024 06:59:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:57792)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnrow-00000000FY3-0wrK

for sales@nk.ca;

Fri, 22 Mar 2024 21:13:26 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-29dfc072e95so1869774a91.3

for ; Fri, 22 Mar 2024 20:11:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711163478; x=1711768278; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=4njSd4cRUP+HuXIwTLLQfW0/5BfiqzTuhpOdBtgzWAw=;

b=brWuessm3szRK3wLA/0V7zb1ZAg4rKAj/Z33y56rOyPviiCtnREEiGJU2rEQeBTaHk

8DKR8VUau87zaB0W2yRNu7jQOgX4DbEVA9E2UwX6mJHXikNNIVi4wxmolK9KXzOIk+31

BKQ/apeu5j5MUS1spnHxLUi+eJc3/D53kRjNiearpNDlQQ+HFiRPhrohGjQEQTr+SvCW

BxxahsH+0nycKZCY5EKVFDa0VqfTxgZKfMGp1IhvJxB9FezyLHNP5/mLYLnqMNIZX8Or

I0kdvOctgX0PjzqiuZuQZ73Z+SLe9FLcPTVuqoAYMnjt6TPzHp3mF7YsTQmvUjISm5sO

GrzQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711163478; x=1711768278;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=4njSd4cRUP+HuXIwTLLQfW0/5BfiqzTuhpOdBtgzWAw=;

b=NBGkVmVi2TUx1c2hiHAARM1etyNPJV7wkB+t4CZsED861gBWvKHkoHRn3Q1QTBl/DC

3B7OhyRR/zoa6xPgZOkVLv9kHaP0GrsuBxeB6olrBdsuuaRSW3fY0lHVDCKAiEDuEmXD

Fdy8xaBO1iK66KWS5F8JzB4RknbOvgmYfABO6hEmvuXAwXjdfliKdSrjTwn7KBWq3EA6

UeKGCz35WRj7rZbGBYxydBJLtQodQhPLOjc5NJIxc4cW5ac5HGGYMGH+BnxARtYsiAOA

IjGcgye6Q//j9vTuOdmFGOEEK8Q3ompSXxJxqPKI2oCCyxZ9BIhQJx/cJaFjOVXKT4Yy

S8fw==

X-Gm-Message-State: AOJu0Yxq+ZI4ZvrMkmQNDhCMjKMFGpgftEvqyCKsIB47WKLaX2SMsTMj

Mhd9VQ3WUlwXD4OqrffNrltsVhYqjDYr+/Ru+z3KJ5bWTcXzqEaGFCJPqC+z66HVbLwH2WQVv1J

64A==

X-Google-Smtp-Source: AGHT+IG52o9jhEsTHjJpC3bMIyx8m+ZQ73qQfWsxstltGYxG/ywpj8nJKRug9p7RxaKlNPbFBlJjum1c/Q==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:820:b0:5a1:3e58:1396 with SMTP id

bg32-20020a056820082000b005a13e581396mr87303oob.1.1711160137310; Fri, 22 Mar

2024 19:15:37 -0700 (PDT)

Message-ID:

Date: Sat, 23 Mar 2024 02:15:37 +0000

Subject: netknowyeg,Gifts 15K IG Followers here

From: reganiaksin@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1csDQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoN

ClsgaHR0cHM6Ly9iaXQubHkvaW5zdGFtYXhzaG9wP25ldGtub3d5ZWcgXQ0KDQpEbyB5b3UgaGF2

ZSBhYm91dCBbIExlc3MgdGhhbiA0MEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEh

IE9mZiA0MCUgVG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFBy

aXZhY3kgUHJvdGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGln

aCBRdWFsaXR5IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVz

dGVkDQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywg

SW5zdGFncmFtLCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFu

ayB5b3UsDQpSZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlh

UHJvTUFYLiBBbGwgUmlnaHRzIFJlc2VydmVkLg0K

Canadian Tire Phish from MIcrosoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 19:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnqYh-000000003Dy-10jG

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 19:52:31 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 19:52:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01on2097.outbound.protection.outlook.com ([40.107.255.97]:39009 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnqJF-00000000Jur-3c7t

for doctor@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 19:36:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=LZ4J/YwnzSWk6sVOzEB/yGU81mAUOOWIjV1n+Ls7v1zH/KDHz3dF3AuCnEtn1o2s8c33pH0N4dgsoOBJuVkIg6DicW3avhZ9NLw8aU8VaPmQDEOY5v+jCQz2noOzBpTq2xMa9OqHFd281Fi3OKXUhIHuMKwXIRc0WmQDSL6e8n/naMZjQin9kX9ciiSLPlPjqY+fn6rdoMF/bLPYDJb5JSRLAbfw3pidyzrm7QGVtxDX+1PJN0JcT0GtGfQwUcpFMNzOjwxfHP3c4e2r0mw/UvL5OkICJ5ncgjfwUWrSVQq/jcAVB9qXC0twSXeVXXTYCQef2IrgPqncaaRHp2XQAA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=z5XccaY2L/Y0wMwfufBBRdn+FfAQKn13ver0hQ0lvJE=;

b=dPfTZ18xD6bX+ww4cNd3ZWwVKAjrESgsPGirS2mtM/meYPM6Jr29u1rWOxtOZJHMHcPrQf6bZJgMZtikJqwcO4i2tJnxWoEI2HThw+/ApUtuhFS+UxrZHhasudI4sgVYrZGRmGNXYr5KzXJKgkTlb95F9KWFpTUOCa6OTwW38JzQfB6VOFKFVQKZWEXnwJ7ptfv3rd4IOHKLt//XYBciGTqODPao0isKfABHQ7ecrx3kw9AiGUQp2t9a0HdAxpBc9uZUJOczAFciSHnklQYmrm1TS86hA6DhlrFB8knCdV2Fyfi+abb2Ecu9x4/UTDUEcZF5byf5y558MR+cbha2Fw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.156) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=vehz.onmicrosoft.com; dmarc=none action=none

header.from=vehz.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.156)

smtp.mailfrom=vehz.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vehz.onmicrosoft.com;

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

Date: Sat, 23 Mar 2024 01:34:21 +0000

Subject: Y0U'VE -RECEIVED- A -REWARDS

From: Canadian Tire Rewards

Thread-Index: 9vmSzcZ36N6DYklr9+h3UAUbxWkoPI6Qfo==

msip_labels:

Content-Type: multipart/related; boundary="NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm"; type="multipart/alternative"

Content-Language: fr-FR

Message-ID:

To: "doctor@gmail.com"

Accept-Language: fr-FR, en-US

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK2PEPF00006FB5:EE_|SEYPR01MB5661:EE_

X-MS-Office365-Filtering-Correlation-Id: 8d692d29-57ab-4bc2-77dc-08dc4ad95e04

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

I3qekstu/fGtpqRr9Tp3ttwn0SyjuY+0/kdg9dk6q6GmuncbFreLTGLHubwc5uf+QlyXrnXNRUeADgaEW4ypiVOzp8lzPwe2/Iuymt2aCBrdDIk9MacnnJYCWstQsNZrKkwEfvJlXFEJPLwnMKyxql5NMwfnpiAwfPla9XXYrNSA9m1IyOMgE+a3f1jEHiiFTwVy6l6WsYl5gxi5KDCgHTEsMoaXAmtvRN5nh/oGn1OrJIniU+a/Fv9gh6JMTgCpe9sA2YQ6uWfZS0Gi6oVk3u0ifOp0x6OdaDM4HKiNsHHKBXIkqHJ6vfsumOXF/peHFD5VL38t62nlbrNxr6yrCfWeL+G1IjXEID8U/mwDzdzHYvSkHxIBd9xnfV+Hc0m52ca37PfO9lJhTZQUvz76rJnwscyXlxM6EL/Ov3LwvhWY8HCn2kz00uuk+atBES3W/diS+hj9Olh7TYYNYgYmsC6mYEvMLS/M7h6BE8W9lcQoXxr0oJqFzuGZLvbrV8AqexY7vvy0fuzIIW+j2sBLC1IutV6CHNWw/3uxpcH8XQ9E1kFQbLxouAUPEVosAgno2jgt1chHJQ+o2Fs+pdxSVPSlSm1JMDlpDj6XErONu4v8huZ4ns/Tgb9YmoapNgrvW+7l2Z3LfQ8kG4rby3SjjfwjV3fEkk8OaeczLN98DciVf7YJdPsLSy0JPGq2wZSdFSwTLlP2cOwPHWDOIcp6hw==

X-Forefront-Antispam-Report:

CIP:172.233.40.156;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:vehz.onmicrosoft.com;PTR:172-233-40-156.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(82310400014)(376005)(41320700004)(34020700007)(36860700004)(61400799018);DIR:OUT;SFP:1102;

X-OriginatorOrg: vehz.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Mar 2024 01:34:22.1415

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 8d692d29-57ab-4bc2-77dc-08dc4ad95e04

X-MS-Exchange-CrossTenant-Id: a54a1645-38a1-4581-86b4-4f9afe14d61a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54a1645-38a1-4581-86b4-4f9afe14d61a;Ip=[172.233.40.156];Helo=[vehz.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK2PEPF00006FB5.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5661



--NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm

Content-Type: multipart/alternative; boundary="xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y"



--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd





M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE





--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

















Canadian Tire Rewards





























--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y--



--NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm--

Domain name selling phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnh4x-00000000FXR-3Cu2

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 09:45:11 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 09:45:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f45.google.com ([209.85.216.45]:54499)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rngxq-00000000Eoh-0IKV

for sales@nk.ca;

Fri, 22 Mar 2024 09:37:53 -0600

Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-2a02c4dffd2so1154108a91.0

for ; Fri, 22 Mar 2024 08:35:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711121749; x=1711726549; darn=nk.ca;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=ZT9svu59T+cWulwdKSX3IXBdBb7OhTXxGURC1vQoMVA=;

b=LdUAHAoVn5jEhLTg/TmB9lq7bxMur2jp4VZABWFS5NiUm5zshnySx0whWdcFjU6v+1

XKJxZYZqSU5e4ckv4GKrxDLktj2i6VSQgDVPLXlNpDqVI1+1eMdeygqGFLc5P2ACzBlV

60Yd80eZnj65RAk5WzcQwHystIZrwJ3cQuxyCvrmSmJy4/prq1FWONhGh+VQSDqx863p

SxjG+nggr/oRJTCKf0PmiMqSXci8GSfXLL6sge6sMILs9ZmAsQXq0EwkMvIC98tTW2vd

IIll6I93yaCWnEid77XCOYVfEZ18b8Fcssp78KESFYUnMqQknjfZ8zbBkeN24yaBbkPc

KdsQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711121749; x=1711726549;

h=to:subject:message-id:date:references:in-reply-to:from:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ZT9svu59T+cWulwdKSX3IXBdBb7OhTXxGURC1vQoMVA=;

b=IWld1uY7wc221sjfWDFm9f7jKnWQ/B4Bpsb2hIDP2dQGOOl0d5Lfo7IJGSXY7O7OA+

8FblC59B+WVjyrs8LGeflKnXO6qULRbnnAhLD+ec/RF8bnk4F3JZ0rcDMR3PkqBpRlrI

zgHXyaSv8SOtjf20JDDnNDxU3uTiJuQFThkgoJ2FTw6DKB0YxjuP9yXTGt4gq5Pc7ioN

4q43HYlgOhJSHJRtPDJcgh3zhXwmF2R2c2UPuj35v4rKW77IB98dD9ReuSgicY3eek4L

QnA9qbIoAywXx+peoFrzmO18QrR2ZNkh4EUT/5F24RXXu24J4jtnRZviI8cVy8dKVsFL

LS6w==

X-Gm-Message-State: AOJu0YwF3O0TZtiTGwyIPEDY9KlB/inOe0rBHQHREltd8L3JJNFqWWFy

XXUoYJia3UsnfeimiTMLtHUvtqjvKSf6Fz/a4FCds5l8PBsh41drI+JzqakVf5xUlV1AELNC7Jj

cYv0bukouQl1mlGldcwjNnuBtQUDdAVBkynQ=

X-Google-Smtp-Source: AGHT+IFKz/VpBVvEWL9PEIAxoTXs2sSX7ONKuXoOvmST6Od6Mxl8AKNUKj3qLhXdaVNABTgwIeFJH2tj3BK9juPAY+Y=

X-Received: by 2002:a17:90a:1597:b0:29f:6d8d:da34 with SMTP id

m23-20020a17090a159700b0029f6d8dda34mr2518818pja.24.1711121749058; Fri, 22

Mar 2024 08:35:49 -0700 (PDT)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Fri, 22 Mar 2024 08:35:48 -0700

MIME-Version: 1.0

From: George Pat

X-Streak-Sequence-Data: action-key=acn_B4Iua2ueXiSvJH8I5g; recipient-key=rcp_B4ItDP_0NOADwKu4hA

In-Reply-To:

References:



Date: Fri, 22 Mar 2024 08:35:48 -0700

Message-ID:

Subject: Alberta Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000052a0e0614419423"



--000000000000052a0e0614419423

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



We have decided to sell the domain name www.BroadbandAlberta.com for a

discounted price of $350 as against the previous price



Interested, do click on the check out option in the link above



Best Regards

On Mon, Mar 11, 2024 at 03:21 PM George Pat wrote:



> Hello

>

> Hope you're doing well

>

> We're listening to offers on the domain name www.BroadbandAlberta.com

>

> What is your best price of this domain?

>

> Looking forward to hearing from you

> On Wed, Mar 6, 2024 at 03:22 PM George Pat wrote:

>

>> Hello

>>

>> Leverage on the opportunity to purchase this web domain

>> www.BroadbandAlberta.com today to expand your online presence and let it

>> serve as an online marketing tool for you

>>

>> Purchase instantly for $550

>>

>> Let me know your thoughts on this

>>

> =E1=90=A7



--000000000000052a0e0614419423

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

We have decided to sell the domain name
ref=3D"http://www.BroadbandAlberta.com">www.BroadbandAlberta.com for a =

discounted price of $350 as against the previous price

Interested, =

do click on the check out option in the link above
=C2=A0
Best Regar=

ds


On Mon, Ma=

r 11, 2024 at 03:21 PM George Pat <
om">geogepat200@gmail.com> wrote:

l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=

4,204);padding-left:1ex">


Hello



Hope you're doing well



We're listening to offers on the domain name
adbandAlberta.com">www.BroadbandAlberta.com



What is your best price of this domain?



Looking forward to hearing from you








On Wed, Mar 6, 2024 at 03:22 PM George Pat <
200@gmail.com">geogepat200@gmail.com> wrote:





-left:1px solid rgb(204,204,204);padding-left:1ex">





Hello



Leverage on the opportunity to purchase this web domain
p://www.BroadbandAlberta.com">www.BroadbandAlberta.com today to expand =

your online presence and let it serve as an online marketing tool for you <=

br>


Purchase instantly for $550



Let me know your thoughts on this









height:1px">3D""
" src=3D"https://mailfoogae.appspot.com/t?sender=3DaZ2VvZ2VwYXQyMDBAZ21haWw=

uY29t&type=3Dzerocontent&guid=3D797ec705-7e9e-4186-8ac5-a5df1d9c17d=

f">=E1=90=A7




--000000000000052a0e0614419423--

Lowe's phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 09:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnguH-00000000EDl-3Tb0

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 09:34:09 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 09:34:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10on2091.outbound.protection.outlook.com ([40.107.92.91]:3584 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <2h2d7ysfcabv@bbcgfdhvbnghfa20.onmicrosoft.com>)

id 1rnfCH-00000000OIE-3ryE

for sales@nk.ca;

Fri, 22 Mar 2024 07:44:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mkrBkFUwGUtSiL9RuC8VK8hWjuoM8u1z78q230lhH9KpPS7Cs6p4h4U763RNUiuJg0cbhHWdOFCFbAd9+T9OHtTDtD+a3aqpqc6GXFtPcDgsVHZafNJT/XmRXG3BglfnDP08CuOxc+wG+WlRHrwj13d6pWYgbi2eCeNTjSrDCIYTqpinUmya0JW5SZso2/4Mn7Sv+/mXXFcYwg1bdLEcYBNtVqwN1v6OPecr5IPsddDX2ms/ZkOU5cK6sxvyP5tzU2ux9Gxy4XjNGYouKEP4O/O2txS8AvDlNHRz1B18K8naSoiEhgDq6FPX15A6GqnxZlq0oc0l8xEt7Dc6PCmNBw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=5xlULT5oNl5JBZT3ERt18ZWItbfmpMz1Fi2rKSV0jvE=;

b=nB2A2CWec6QZM9h0oaiNCeGqEykDrZwodHRYjANc6Q0wH7wDxpG4qTjH99V6d6vegFT7fTFURcLkG5udn7z8gVFK9jmYF9q/HAMdcD7rZo9AhH97QGq83mow2fwbTuU3Qj+bhAxhu2fv2DyVkTznZjGxRclU/wWdJQiGBgfyajG6SEqyYU3OyWGhpu5IL7XGK4H4dOdcq1wxlPD6ZY5BmRiT1dtI+TcgFFxn1xBy5dcTpvz4RuELia+lrPULFbRjWLR9WDVMGE8W5ibHKrDObBAY7m1nhydPHtxOHUyS0m44obaY04tSsdu50ugfFtQqZ1+3YyEIEEuS/kmkHZeiYA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

178.79.141.237) smtp.rcpttodomain=nk.ca

smtp.mailfrom=bbcgfdhvbnghfa20.onmicrosoft.com; dmarc=none action=none

header.from=bbcgfdhvbnghfa20.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 178.79.141.237)

smtp.mailfrom=bbcgfdhvbnghfa20.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=bbcgfdhvbnghfa20.onmicrosoft.com;

Subject: Thank you

Date: Fri, 22 Mar 2024 13:42:32 +0000

X-TOI-MSGID: <101741277697062.AC354F821938C.1705442930402@bbcgfdhvbnghfa20.onmicrosoft.com>

Content-Transfer-Encoding: 8bit

MIME-Version: 1.0In-Reply-To:

To: sales@nk.ca

Content-Type: text/html; charset="UTF-8"

CC: sales@nk.ca

From: "Lowes"

Message-ID:

<9d3d93c1-7051-41df-8841-9f232000ef29@BN2PEPF000044A8.namprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN2PEPF000044A8:EE_|BL3PR19MB6491:EE_

X-MS-Office365-Filtering-Correlation-Id: 013672e3-8f47-42bd-7673-08dc4a75ed33

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:178.79.141.237;CTRY:GB;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:bbcgfdhvbnghfa20.onmicrosoft.com;PTR:178-79-141-237.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(82310400014)(376005)(36860700004)(34070700005)(41320700004)(61400799018);DIR:OUT;SFP:1102;

X-OriginatorOrg: bbcgfdhvbnghfa20.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Mar 2024 13:42:32.8938

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 013672e3-8f47-42bd-7673-08dc4a75ed33

X-MS-Exchange-CrossTenant-Id: 4101a2b9-b79d-41dd-8e33-4851f7c67926

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4101a2b9-b79d-41dd-8e33-4851f7c67926;Ip=[178.79.141.237];Helo=[bbcgfdhvbnghfa20.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

BN2PEPF000044A8.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL3PR19MB6491

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications ミ★ Ninja Woodfire Grill ★彡 ꧁ Order

confirmation #103800 ꧂



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.92.91 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ninja-za5oy0o(at)bbcgfdhvbnghfa20.onmicrosoft.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.0 BOGUS_MIME_VERSION Mime version header is bogus

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FROM_MISSPACED From: missing whitespace

0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Thank you









(1) Notifications























































ミ★ Ninja Woodfire Grill ★彡







꧁ Order confirmation #103800 ꧂






















Mcafee phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Mar 2024 14:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnOch-00000000CRx-2kFn

for dave@doctor.nl2k.ab.ca;

Thu, 21 Mar 2024 14:02:47 -0600

Resent-From: The Doctor

Resent-Date: Thu, 21 Mar 2024 14:02:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:55753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnJqW-000000000m4-0XYw

for doctor@doctor.nl2k.ab.ca;

Thu, 21 Mar 2024 08:56:47 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-6e6afb754fcso959792b3a.3

for ; Thu, 21 Mar 2024 07:54:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711032883; x=1711637683; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;

b=M4QCb9OPSlqYGQQamGY/7tExkui2y9vV8Om9xcEEhOq1g3LR2Sa2Fpc16fJU+5bj5Q

RmfWA35POwXheuvwrQ00iBIqAZElzU35Nrumj3QXhCwZC0OQkf9ZfRVQ5TmD4d45nvZV

j5el3RiXV5nhyUm6vw7kTaqtl7CQZnMJybL9JMWZemCbkcsMNd8ixUfGliQM0PCCq80M

b3KuVdRXc7MtaLEPEe6XA1OiHv/tgwe2VaRo7JO0ejT/P3N5JhtR33BMpSAfycM4r/DH

5Vwt3FhKpjdJBI8gmgfoXdudA3+xvJHPyqx5pGZg2lFD9EcvJo7/HgZxRurpQkJYpCnt

bd6A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711032883; x=1711637683;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;

b=hVFnHhb/XJ5aKE2k6pfBOOHBtBFuQg3kj3TrWtp5CRzxRNQhy7zYScvW0lkMLTOjOP

k0s5PlDG4e+rvCqc0aE7QNqcVjtJ7+HsnfgkX8Kdrcb2Kfti7SdYpH51iaOf6juHOlhf

PDWmLWz+VmyIJ2K8DZ5puvdrY6osgrvyPYkGxU0th2xPhzrdQ4hzmkeNxEbxEn5cfVdP

7ALpFdBGvqsPIhqITBB1ms7XypizVD0aAyKoZfDH+OdZkl021PhdfdC2oKtB/p+tSHrG

cIb6ZMmp9ODwh2jmjXbtaVWhy6PwhqwXW3Uyl9zLeBSY3xYNejqz9CtUpqB5Wbx0WZc0

9xGQ==

X-Gm-Message-State: AOJu0Yx8SXo70w4+HXwsNG3EXwok3nht9uRXQcsUU3dsWX/W6OGpzrwF

2MFwIOKjLBr+R0QdocSh2qYKp21Hkdc/llxrTpZg/xjPqRMzfVL3N1ZMYkIVFA4/CQ==

X-Google-Smtp-Source: AGHT+IGFGdz1VWyKrJEK4R4FG6PnHxNssOghy6/TkJOipeBL0W+NAp1lYQ9V7r3cY6wndqwyDyTa0w==

X-Received: by 2002:a17:902:784c:b0:1dd:611d:3be3 with SMTP id e12-20020a170902784c00b001dd611d3be3mr5217045pln.17.1711032883159;

Thu, 21 Mar 2024 07:54:43 -0700 (PDT)

Received: from [172.31.0.39] ([124.156.45.65])

by smtp.gmail.com with ESMTPSA id u13-20020a170902e80d00b001def0c700e2sm13523888plg.119.2024.03.21.07.54.42

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 21 Mar 2024 07:54:42 -0700 (PDT)

Message-ID: <65fc4a32.170a0220.a982e.7241@mx.google.com>

Date: Thu, 21 Mar 2024 07:54:42 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============3070395982342246387=="

MIME-Version: 1.0

Subject: Paid Invoice for order no HF610611DA

From: Jeff Stuyt

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: Microsoft CDO for Windows 2000

List-Unsubscribe:

List-Owner:

List-ID: waillmakevin0856@gmail.com

List-Subscribe: waillmakevin0856@gmail.com

List-Post:



--===============3070395982342246387==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAyMSwgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7

JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv

Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg

U2VjdXJlPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24g

S2V5OiBaUTI0MTJDVzxicj4KPGJyPgo8YnI+CllvdXIgJiM4MDsmIzk3OyYjMTIxOyYjMTA5OyYj

MTAxOyYjMTEwOyYjMTE2OyAmIzczOyYjMTEwOyYjMTE4OyYjMTExOyYjMTA1OyYjOTk7JiMxMDE7

IGZvciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiBoYXMg

YmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5LCBhbmQgd2UgYXJlIHBsZWFzZWQgdG8gaW5mb3Jt

IHlvdS48YnI+IFRvZGF5J3MgcmVjZWlwdCBpbmNsdWRlcyBhIGNoYXJnZSBvZiA8Yj4mIzM2OzQ0

MC40MDwvYj4gZm9yIHRoZSAmIzExNDsmIzEwMTsmIzExMDsmIzEwMTsmIzExOTsmIzk3OyYjMTA4

OyBvZiA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPi48YnI+

SWYgdGhlcmUgYXJlIGFueSB1bmNlcnRhaW50aWVzIG9yIGlmIHlvdSByZXF1aXJlIGFkZGl0aW9u

YWwgY2xhcmlmaWNhdGlvbiBhYm91dCB0aGlzIHRyYW5zYWN0aW9uLCBmZWVsIGZyZWUgdG8gZ2V0

IGluIHRvdWNoIHdpdGggdXMuPGJyPklmIHN1cHBvcnQgaXMgbmVlZGVkLCBkb24ndCBoZXNpdGF0

ZSB0byByZWFjaCBvdXQgdG8gb3VyIGN1c3RvbWVyIHNlcnZpY2UgdGVhbSBhdCA8Yj4mIzQzOyYj

NDk7KCYjNTY7JiM1MTsmIzUwOykgNiYjNTc7OC0mIzU3OyYjNTY7NDM8L2I+IHdpdGhpbiB0aGUg

bmV4dCBzaXggaG91cnMuCjxicj4KPGJyPgo8YnI+CllvdXIgc2VsZWN0aW9uIG9mIEdlZWsgPGI+

JiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IFNlY3VyZTwvYj4gaXMgYWNrbm93bGVk

Z2VkIHdpdGggZ3JhdGl0dWRlLiBXZSBoaWdobHkgdmFsdWUgeW91ciB0cnVzdCBpbiBvdXIgc2Vy

dmljZXMuPGJyPgo8YnI+Cjxicj4KV2FybSByZWdhcmRzLDxicj4KJiM3NzsmIzk5OyYjOTc7JiMx

MDI7JiMxMDE7JiMxMDE7IFNlY3VyZTxicj4KMjQ1OCBTdC4gSm9obiBTdHJlZXQgQ2Fub3JhIFM0

UCAzWTIgQ2FuYWRhPGJyPgpGb3IgaW5xdWlyaWVzLCBwbGVhc2Ugc3VwcG9ydCB1cyBhdCA8Yj4m

IzQzOyYjNDk7KCYjNTY7JiM1MTsmIzUwOykgNiYjNTc7OC0mIzU3OyYjNTY7NDM8L2I+Lg==



--===============3070395982342246387==--

Mcafee phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Mar 2024 15:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn3AE-00000000NZr-3TBJ

for dave@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 15:07:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Mar 2024 15:07:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f44.google.com ([209.85.161.44]:58754)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn09w-000000003Es-2TZf

for doctor@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 11:55:31 -0600

Received: by mail-oo1-f44.google.com with SMTP id 006d021491bc7-5a14d7f0e66so46588eaf.1

for ; Wed, 20 Mar 2024 10:53:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1710957207; x=1711562007; darn=doctor.nl2k.ab.ca;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=0N2smsAbh+0Md58V9Fv4YtO50u9ouckpDU1KWsSmR7w=;

b=OTy3QBN1LfcyOXD1OlCwEhuj3jwpxI28sw8j1cWhM42rkcH7buh4F8hRYoeLXJPwgA

PGNZh7zR5ug/m7f+Mut1Iju4CVVD10seOfkep1+vzAkWhZZXqifTliMncWdqJ3jOZ57w

LoIah3JKTj8WtywHqYcrN6ojCDNWLxV1xkjauFTXddMh6HChB4iDUokSPiWingJS/DQg

aeGoj2sNmgJ6B/CfCGWBeAdidMcj6tzzY5FBVflYlPU7ENOtSv+CReKYhKlMCqqrQRd8

zpiaMwGnYOCQhH36R4VAPLFGs5vqfNehb3LYuCoNyOCehAYmvuEYXcSs8hCrJUo3hdnF

t/wg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1710957207; x=1711562007;

h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe

:x_mailer:priority:importance:content-class:to:from:subject

:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=0N2smsAbh+0Md58V9Fv4YtO50u9ouckpDU1KWsSmR7w=;

b=LCw0pT1b+gwGIy5/BoWMPvuAdjbNZQs5AJfKac4mN/kt+rmSFrit8XUKv4KZeM4rrg

vqRtdiLaWQZkiuOtK3dI1Q7EuNKVHeEeuz4QxVIQm3945xzuIjOkpvVUUMpo+DYgMdRt

QhwTXIM4c8gnENz9z0RDZmmJGa4fKao5zPWYA7jhmFpIU/0d2s7Ez9F1U1ttmqPn/ELO

Qof6Owx66JYhudEz3T66rG5SjtvrDd/+WPCHdAJVSgGDuTksYzlJXnRgcuLXtT/MkQP/

HkWjak+Gb6BcfPN6VpW0InXXMCgIkjbI0BJQbuml+tGtzty0v6NMEH2xWeDXoNrak3oy

HMOw==

X-Gm-Message-State: AOJu0YyQwncXETHguZiE7cCo07rFymFfk3yH2Emxg0R79xo1xoB3RZ8N

unQGOJEeHCxH/mZF26Y/5R+HWSj4E4HswSNXn/41OTb4dw4pXQZjocRQJmgmJEM=

X-Google-Smtp-Source: AGHT+IGGgAWFTQMp6k8HkkRz9D6xX7gx5NAZilCvFqkTt2cOGmiEde1EIliC/FAK6nLccsPTiE+RYQ==

X-Received: by 2002:a17:903:32d0:b0:1df:ffe3:f787 with SMTP id i16-20020a17090332d000b001dfffe3f787mr3677114plr.48.1710956861365;

Wed, 20 Mar 2024 10:47:41 -0700 (PDT)

Received: from [10.203.0.140] ([43.133.4.41])

by smtp.gmail.com with ESMTPSA id c8-20020a170903234800b001c407fac227sm13871421plh.41.2024.03.20.10.47.40

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 20 Mar 2024 10:47:40 -0700 (PDT)

Message-ID: <65fb213c.170a0220.524c.8e27@mx.google.com>

Date: Wed, 20 Mar 2024 10:47:40 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============3276794730956959006=="

MIME-Version: 1.0

Subject: Your order is on its way 33575404

From: Rosita Ayers

To: doctor@doctor.nl2k.ab.ca

Content-Class: urn:content-classes:message

Importance: normal

Priority: normal

X-Priority: 3

X-MimeOLE: Produced By Microsoft MimeOLE

x_mailer: QQMail 2.x

List-Unsubscribe:

List-Owner:

List-ID: manuelalouisychingang@gmail.com

List-Subscribe: manuelalouisychingang@gmail.com

List-Post:



--===============3276794730956959006==

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5

OyYjMTAxOyBEYXRlOiBNYXJjaCAyMSwgMjAyNDxicj4KPGJyPgpUcmFuc2FjdGlvbiBwcm9jZXNz

ZWQ6IDxiPiYjNzc7JiM5OTsmIzk3OyYjMTAyOyYjMTAxOyYjMTAxOyBTZWN1cmU8L2I+IGlzIG9m

ZmljaWFsbHkgY29uZmlybWVkLjxicj4gWW91ciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEw

MTsmIzEwMTsgU2VjdXJlPC9iPiAmIzgwOyYjOTc7JiMxMjE7JiMxMDk7JiMxMDE7JiMxMTA7JiMx

MTY7IG9mIDxiPiYjMzY7NDI3LjI3PC9iPiBoYXMgYmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5

Ljxicj5QbGVhc2UgZG9uJ3QgaGVzaXRhdGUgdG8gcmVhY2ggb3V0IGlmIHlvdSByZXF1aXJlIGFu

eSBmdXJ0aGVyIGNsYXJpZmljYXRpb24gb3IgYWRkaXRpb25hbCBkZXRhaWxzIHJlZ2FyZGluZyB0

aGlzIHRyYW5zYWN0aW9uLjxicj5Gb3IgYW55IHF1ZXN0aW9ucyBvciBjb25jZXJucywgY29udGFj

dCBvdXIgY3VzdG9tZXIgc2VydmljZSB0ZWFtIGF0IDxiPiYjNDM7JiM0OTsoJiM1NjsmIzU0OyYj

NTA7KSAyJiM1Mjs4LSYjNDk7JiM1MDs2MDwvYj4gd2l0aGluIHRoZSBuZXh0IHNpeCBob3Vycy4K

PGJyPgo8YnI+Cjxicj4KVGhhbmsgeW91IGZvciB5b3VyIGNob2ljZSBvZiA8Yj4mIzc3OyYjOTk7

JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiB5b3VyIHByZWZlcmVuY2UgaXMgc2lu

Y2VyZWx5IHZhbHVlZC48YnI+Cjxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7JiMxMTg7JiMx

MTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRvY3Rvcjxicj4K

T3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPGJy

PgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24gS2V5OiBaUTM5

MjlDVzxicj4KPGJyPgpXYXJtIHJlZ2FyZHMsPGJyPgomIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEw

MTsmIzEwMTsgU2VjdXJlPGJyPgoyNDU4IFN0LiBKb2huIFN0cmVldCBDYW5vcmEgUzRQIDNZMiBD

YW5hZGE8YnI+CkZvciBpbnF1aXJpZXMsIHBsZWFzZSBzdXBwb3J0IHVzIGF0IDxiPiYjNDM7JiM0

OTsoJiM1NjsmIzU0OyYjNTA7KSAyJiM1Mjs4LSYjNDk7JiM1MDs2MDwvYj4u



--===============3276794730956959006==--

Spotify Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 Mar 2024 15:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmhMX-00000000EtF-1zzx

for dave@doctor.nl2k.ab.ca;

Tue, 19 Mar 2024 15:51:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 Mar 2024 15:51:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vmi1724024.contaboserver.net ([62.171.184.184]:39015 helo=mta1.securereviewhub.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmekw-000000009MA-26qT

for doctor@nk.ca;

Tue, 19 Mar 2024 13:04:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1710430940.securereviewhub;

d=securereviewhub.com;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding;

i=abuse@securereviewhub.com;

bh=JumiTXYisC/8NKdYHtJ1fXQk9cMzlgic4oVth+GCQMI=;

b=UjIv0IEVBveeq0lNsXJfyhy+juxWHWlWpeNBvdYf8CXshMPvDZ2gnK2ZHv5Iu0AeqPc+CLj0ZzCH

QUD3ifSmE9/QFIynVwYfovxps1+47hCL9JVgNK8MSM9Z87KTL7HWS2XICcLHvjxlU2jbAJ2UhGiT

iV6oqB9TJX9CR7EVKng=

MIME-Version: 1.0

From: =?utf-8?Q?=D1=95=CF=81=CE=BFtify?=

To: doctor@nk.ca

Date: 19 Mar 2024 20:02:17 +0100

Subject: Update subscription now

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: |MC:SUBJECT| We recently detected an issue with the billing

information associated with your Account. Hello, We could not authorize your

payment for the next billing cycle of your subscription therefore we've sus

[...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: itsssl.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.9 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Update subscription now



=0A=0A =0A =0A =

=0A =0A =

=0A =

=0A *|MC:SUBJECT|*=0A =0A =0A =0A =

=0A
0px; overflow: hidden; font-size: 0px; display: none; visibility: hidden;=

max-height: 0px; max-width: 0px; opacity: 0; mso-hide: all;">=

=0A =0A
=0A
height=3D"100%" align=3D"center" id=3D"bodyTable" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =

=0A
=0A =

=0A =0A
border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A =

=0A =0A =

=0A =

=0A =0A =

=0A=

=0A

valign=3D"top">
100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A =0A =

=0A =0A

style=3D"padding: 9px;">=0A
class=3D"mcnImageContentContainer" style=3D"min-width: 100%;" border=3D"0"=

cellspacing=3D"0" cellpadding=3D"0">=0A =

=0A =0A =

=0A

style=3D"padding: 0px 9px;">=0A =0A =

=0A =


17%; padding-bottom: 0px; vertical-align: bottom; display: inline !important;=

max-width: 149px;" alt=3D"" src=3D"https://filestore.community.support.microsoft.com/api/images/26903364-3c84-48c2-afd4-749990c5ea86?upload=3Dtrue">=

=0A =0A =

=0A
=0A

style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

=0A =0A =0A =

=0A =0A =0A
=

=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A

style=3D"padding: 0px 18px 9px;">=0A =0A =

We recently detected an issue with the billing=

information associated with your Account.

=0A=0A =

=

=0A =0A =0A=

=0A =

class=3D"mcnTextBlock" style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =

=0A =0A

9px;">=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =

=0A

style=3D"padding: 0px 18px 9px;">=0A =0A =

Hello,
=0AWe could not authorize your payment for=

the next billing cycle of your subscription therefore we've suspended your=

membership. But your current subscription is active until it expires.
=

=0A
=0ASome information on your account appears to be missing or incorrect.
=

=0A
=0AObviously we'd love to have you back, simply click the button=

below to update your details and continue to enjoy all the best Music &=

Songs without interruption.=0A
=0A =0A =0A =0A

style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

=0A =0A =0A =

=

=0A =0A =0A

0px 18px 18px;">=0A
style=3D"border-radius: 42px; border-collapse: separate !important; background-color:=

rgb(30, 215, 96);" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=0A=

=0A =0A =

=0A =0A=

=0A

style=3D"padding: 18px; font-family: Arial; font-size: 14px;">=0A =


" style=3D"text-align: center; color: rgb(255, 255, 255); line-height:=

100%; letter-spacing: normal; font-weight: bold; text-decoration: none;"=

href=3D"https://itsssl.com/h7f7W" target=3D"_blank">UPDATE DETAILS=

=0A
=0A

style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

=0A =0A =0A =

=0A =0A =0A
=

=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A

style=3D"padding: 0px 18px 9px;">=0A =0A =

Regards,
=0AThe Spotify team=0A =

=

=0A =0A =0A=

=0A =


class=3D"mcnTextBlock" style=3D"min-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A =0A

9px;">=0A =0A =0A =0A =


style=3D"min-width: 100%; max-width: 100%;" border=3D"0" cellspacing=3D"0"=

cellpadding=3D"0">=0A =0A =

=0A =0A =0A

style=3D"padding: 0px 18px 9px;">=0A =0A =


0px; padding: 0px; border: currentColor; border-image: none; width: 100%;=

border-collapse: collapse; background-color: rgb(247, 247, 247);" bgcolor=3D"#f7f7f7"=

cellspacing=3D"0" cellpadding=3D"0">=0A
0px; padding: 0px; border: currentColor; border-image: none;">=0A
height=3D"25" class=3D"footer-bottom-padding" valign=3D"middle" style=3D"margin:=

0px; padding: 0px; border: currentColor; border-image: none; height: 25px;">=

=0A =0A =0A
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none;">=0A =

=0A =

=0A =

=0A =0A
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; height: 25px;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =0A =0A
class=3D"footer-top-padding" valign=3D"middle" style=3D"margin: 0px; padding:=

0px; border: currentColor; border-image: none; height: 12px;">=0A
height=3D"12" class=3D"footer-top-padding" valign=3D"middle" style=3D"margin:=

0px; padding: 0px; border: currentColor; border-image: none; height: 12px;"=

colspan=3D"3"> =0A =0A
0px; padding: 0px; border: currentColor; border-image: none;">=0A
width=3D"6.25%" valign=3D"middle" style=3D"margin: 0px; padding: 0px; border:=

currentColor; border-image: none; width: 6.25%;"> =0A =0A =0A =0A
valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 12px;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =0A =0A
class=3D"footer-bottom-padding" valign=3D"middle" style=3D"margin: 0px;=

padding: 0px; border: currentColor; border-image: none; height: 25px;">=

=0A =0A =0A
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none;">=0A =

=0A =0A =0A =0A
valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 33px;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =

=0A =0A
border: currentColor; border-image: none;">=0A =0A =

=0A
border-image: none;">=0A =

=0A =0A =0A =0A

style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; height: 25px;" colspan=3D"3"> 

padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 
currentColor; border-image: none;">
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; display: block; max-width: 100%;" alt=3D"" src=3D"http://aro.spotify.s3.amazonaws.com/newsletter/images/logo_footer.png">
0px; border: currentColor; border-image: none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 25px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 
currentColor; border-image: none;">=0A

0px; border: currentColor; border-image: none; height: 1px; background-color:=

rgb(209, 213, 217);" bgcolor=3D"#D1D5D9">
valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; width: 6.25%;"> 

class=3D"font" valign=3D"middle" style=3D'margin: 0px; padding: 0px; border:=

currentColor; border-image: none; text-align: left; color: rgb(136, 137,=

140); line-height: 1.65em; font-family: Circular, "Helvetica Neue", Helvetica,=

Arial, sans-serif; font-size: 11px; font-weight: 200; text-decoration:=

none;'>Get Spotify for:  
medium 1px medium medium; border-style: none solid none none; border-color:=

currentColor rgb(195, 195, 195) currentColor currentColor; margin: 0px;=

padding: 0px 7px 0px 0px; color: rgb(109, 109, 109); font-weight: bold;=

text-decoration: none; display: inline-block;" href=3D"" target=3D"_blank">iPhone
class=3D"footer-separated-text" style=3D"border-width: medium 1px; border-style:=

none solid; border-color: currentColor rgb(195, 195, 195) currentColor=

transparent; margin: 0px; padding: 0px 7px; color: rgb(109, 109, 109);=

font-weight: bold; text-decoration: none; display: inline-block;" href=3D"https://wl.spotify.com/ls/click?upn=3DJZiJIhGDPKi-2FAPlXLxJCWMWF-2B74m9QTCsaGkGYZJJvHlWVk4sERm8KtiDz3NlaDDcYHv4OAlW-2FvwGNkBE6Gttw-3D-3DrKm-_xu5RDHlEaGQfNLU5cwDJxr8y62F2IrSM-2FernfNGGDcP169Fh4NbvLH2-2Fjd4H54DwJMj5c4THlW9-2FlF8uSnKUt3KYP37EEeYT2Xjy3Z8B5fsBSelDJQWDYQxQPRWdR4p9CwTT2fXIb3HZklqPeU-2BBx3rR-2FfQBffEhK4fXnzitjyhgdJa-2F8po-2B7-2FRDgU7Pf3xITYDCYiBgnyJzacsmKT-2Fi4PM9WuRBHJ8d1ThCdHdDAXYzwn-2FEjZGmRXMZ6HLa-2BsM88BVifvu9NJsns6stOFFEFhYanqstnbbXAZ2OtipNskPHbKfKIotFtLNwxdIvtv2I"=

target=3D"_blank">iPad
medium 1px; border-style: none solid; border-color: currentColor rgb(195,=

195, 195) currentColor transparent; margin: 0px; padding: 0px 7px; color:=

rgb(109, 109, 109); font-weight: bold; text-decoration: none; display:=

inline-block;" href=3D"https://wl.spotify.com/ls/click?upn=3DJZiJIhGDPKi-2FAPlXLxJCWEiNXzAMk8tJPkWHiAldC4U3jkmTBZvPf-2BLaiWNXvTaVXbQoplNOmba4-2FpoXaVmTR3D9cPucKT-2FefDfKRjpd6vU-3DWpAB_xu5RDHlEaGQfNLU5cwDJxr8y62F2IrSM-2FernfNGGDcP169Fh4NbvLH2-2Fjd4H54DwpvMu0D-2BJcnZX7Ueyst5K0Hs5Gpo-2B-2F7T2RgQ2znWSS81cVdxdiq1pqufJadMW5F0i7nPx-2FPIVBRY3B8eUCv234rBvjm-2BMh-2BR0UtJ49IKzcYbypSb7IVz8wYztN3HHL805XBpxvUuSwO-2FWLsX2pSfTJyC4n6q5q0LEKco-2B55yM3p9eELTYC0qYNGN0HSVVdeLFskveWU4DTBXfXB4CgTi-2FNW5XVw3qb9-2FWKRd3ch59IoURVEq-2BvMwsEOm5QWeQSMqV"=

target=3D"_blank">Android
medium medium medium 1px; border-style: none none none solid; border-color:=

currentColor currentColor currentColor transparent; margin: 0px; padding:=

0px 0px 0px 7px; color: rgb(109, 109, 109); font-weight: bold; text-decoration:=

none; display: inline-block;" href=3D"https://wl.spotify.com/ls/click?upn=3DJZiJIhGDPKi-2FAPlXLxJCWE-2BAN3sa6HFIADThv-2BSHQtYNqtzlOww3i-2FegCjyhA57CDNxh_xu5RDHlEaGQfNLU5cwDJxr8y62F2IrSM-2FernfNGGDcP169Fh4NbvLH2-2Fjd4H54DwN49WYjgvqgdFsgGJhHbg3yQi2B5Dp83KN5EEBsTdjUfxKVHrxx8oY25BNq4l2SZ-2Fxo7ptXy9mup-2FUV5-2BwMrs07idZGlOVJWa26-2FEWbQAxU5GCicGVC5rtyo0aQ-2B8WXQJmWP4pgPNt3iRMhVW76OOTBXkpvw7fs534OHHU61dFjLxaBlsSME7SsBOsjSriuH3dc4hCtG0gKHmQNQTFfiZOQRWqaEb3gcLZV7tBpF5pt1lxFeAbLrkQ6B63EkB1jDP"=

target=3D"_blank">Other
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 12px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 
currentColor; border-image: none;">=0A

0px; border: currentColor; border-image: none; height: 1px; background-color:=

rgb(209, 213, 217);" bgcolor=3D"#D1D5D9">
valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; width: 6.25%;"> 

style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; height: 25px;" colspan=3D"3"> 

padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 
0px; padding: 0px; border: currentColor; border-image: none; text-align:=

left; color: rgb(136, 137, 140); line-height: 1.65em; font-family: Circular,=

"Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 11px; font-weight:=

200; text-decoration: none;'> If you have questions or complaints,=

please
currentColor; border-image: none; text-align: left; color: rgb(109, 109,=

109); font-family: Circular, "Helvetica Neue", Helvetica, Arial, sans-serif;=

font-weight: bold; text-decoration: none;' href=3D"" target=3D"_blank"=

align=3D"left">contact us.
style=3D"margin: 0px; padding: 0px; border: currentColor; border-image:=

none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 33px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 
0px; padding: 0px; border: currentColor; border-image: none; text-align:=

left; color: rgb(136, 137, 140); line-height: 1.65em; font-family: Circular,=

"Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 11px; font-weight:=

200; text-decoration: none;'>
medium 1px medium medium; border-style: none solid none none; border-color:=

currentColor rgb(195, 195, 195) currentColor currentColor; margin: 0px;=

padding: 0px 7px 0px 0px; color: rgb(109, 109, 109); font-weight: bold;=

text-decoration: none; display: inline-block;" href=3D"" target=3D"_blank">Terms=

of Use
1px; border-style: none solid; border-color: currentColor rgb(195, 195,=

195) currentColor transparent; margin: 0px; padding: 0px 7px; color: rgb(109,=

109, 109); font-weight: bold; text-decoration: none; display: inline-block;"=

href=3D"" target=3D"_blank">Privacy Policy
style=3D"border-width: medium medium medium 1px; border-style: none none=

none solid; border-color: currentColor currentColor currentColor transparent;=

margin: 0px; padding: 0px 0px 0px 7px; color: rgb(109, 109, 109); font-weight:=

bold; text-decoration: none; display: inline-block;" href=3D"" target=3D"_blank">Contact=

Us
0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 

valign=3D"middle" style=3D"margin: 0px; padding: 0px; border: currentColor;=

border-image: none; height: 12px;" colspan=3D"3"> 

0px; padding: 0px; border: currentColor; border-image: none; width: 6.25%;"> 
0px; padding: 0px; border: currentColor; border-image: none; text-align:=

left; color: rgb(136, 137, 140); line-height: 1.65em; font-family: Circular,=

"Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 11px; font-weight:=

200; text-decoration: none;'>Spotify AB, Regeringsgatan 19, 111 53, Stockholm,=

Sweden
=0A=0A =

=

=0A =0A =0A=

=0A =
=

=0A =0A =

=0A
=0A
=0A =0A=

=0A