link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 11 Dec 2022 15:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4VHN-0005WV-B5

for dave@doctor.nl2k.ab.ca;

Sun, 11 Dec 2022 15:58:41 -0700

Resent-From: The Doctor

Resent-Date: Sun, 11 Dec 2022 15:58:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f44.google.com ([209.85.160.44]:36532)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4VBd-0003Uf-Ut

for root@doctor.nl2k.ab.ca;

Sun, 11 Dec 2022 15:52:50 -0700

Received: by mail-oa1-f44.google.com with SMTP id 586e51a60fabf-14449b7814bso6492330fac.3

for ; Sun, 11 Dec 2022 14:50:17 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=6mEXnFK1ObAA2hB7ioChxnh00UxtfahEVJwChF5lmo8=;

b=pYw4dg34ir06/NCWksoeq+cFqM9mN6JuGluJiuzRO7Ft8yjr0YzEboC6NZeUhJlgEZ

6AtLYaLRqMLipwhmzsJad9irmvXuHudyZfmUZqCq9StWH6dCieEFDgkNb2OcDfwwLeVX

YXBjCX3tSfop89FRXhBsaOJwqSXxewNi6OAaynJNdaVBLvQjEF6tOqiNR2oqUCkfUPIa

V4fYqdi9iCDElPDRXeC630qaXgy1rQqXaY7JZzY8QBBeN4KkdPxNjpsNpfSYIZWJSKYf

LWclKpKYUHl4OzNPX8OPx3SijVBXvBT1/dYhaS4RwOokXSlbxA5OW72jkGaGn13BKgeE

8CPw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=6mEXnFK1ObAA2hB7ioChxnh00UxtfahEVJwChF5lmo8=;

b=77d9V+RHcod5RfSZZ2KZbngVs0q/bIBzdpLigYGoOl1EofKoKyWq24QoKJpcne/axT

oHRvnzefd1IMdIs5Ij74SWYzB4nGhZmvmOHj2JVfMDWqaTbfFhU3pnHw51eqgzbiTE7f

4YWs9GM0uSwijiYws9kRnNPbvXtua5dkc44u6neRqQA7c2iW4iaTf92cY6Y+8ZxSuoLG

WMV8f+sBBLx01a5dPrTn8FLprsHJul1umkK/xxHt76Z0KWzUgsgE1Ss7vpNaSVjk6xUP

pXgiU7z2m+0BuFnLhmUSq37GRPeL+5wM/sQCZDZjlnUNzWO6Bx0kihAWVr78y1+5kyVG

+roA==

X-Gm-Message-State: ANoB5pkhLNC2LdYP6DcEUVxniJ0aRuvTnSJxQiIi9y4MtUyCOx4+8+JS

5l9xxKmkKkKIzDAwXGQ1hGa1nsmLjXs0rtodMRQ21UONwGb6FnAq

X-Google-Smtp-Source: AA0mqf7ZOZ1KGAQ1iEirvsHWanZudt04uozFu9HBlI8S/ciOIpqMINQ/h/oStcOuHJ4+dmoBELQqWO5mqc5N8c9a8B0=

X-Received: by 2002:a05:6871:4684:b0:141:c076:de4c with SMTP id

ni4-20020a056871468400b00141c076de4cmr57712904oab.248.1670799011861; Sun, 11

Dec 2022 14:50:11 -0800 (PST)

MIME-Version: 1.0

From: "evs_idea@yahoo.com"

Date: Sun, 11 Dec 2022 22:52:38 +0000

Message-ID:

Subject:

To: romtrade mtl , root ,

sabby cattery , sfang ,

sissi chocolatier , slaszlo1 ,

ssad oci , stella melo

Content-Type: multipart/alternative; boundary="00000000000097d88805ef9535d0"

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://g04zt.app.link/2KqdDmR3Fvb https://g04zt.app.link/2KqdDmR3Fvb





Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.44 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.160.44 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[andiboy566[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[andiboy566[at]gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FROM_2_EMAILS_SHORT Short body and From looks like 2 different

emails

0.0 TVD_SPACE_RATIO No description available.

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

Subject: {SPAM?}



--00000000000097d88805ef9535d0

Content-Type: text/plain; charset="UTF-8"



https://g04zt.app.link/2KqdDmR3Fvb



--00000000000097d88805ef9535d0

Content-Type: text/html; charset="UTF-8"



https://g04zt.app.link/2KqdDmR3Fvb



--00000000000097d88805ef9535d0--

Investment spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 11 Dec 2022 06:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4Mhc-000Ewq-DG

for dave@doctor.nl2k.ab.ca;

Sun, 11 Dec 2022 06:49:12 -0700

Resent-From: The Doctor

Resent-Date: Sun, 11 Dec 2022 06:49:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2070.outbound.protection.outlook.com ([40.92.58.70]:55265 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4MFC-00080K-Ew

for doctor@doctor.nl2k.ab.ca;

Sun, 11 Dec 2022 06:19:55 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=enI+xI5ShAuRcdFefYFO9Mpr8C4SirNpZiSEb4kT8Ggm5ZqigHBv94jECIDq9qwvZrUZdToEtTOBalGotdjbBRtcsk3lSuh6qg4RSEE6SFEv6SZfS5aQPkSabh3RRLeBVk3WTvIBJOFYD0ChRXexsQkkY+wqQnfbwpzKjHOpuWHOIJuZ9BSaRLvXHyTBho9f1cqHYifncKO3VHmI/6Ib8HppVmOvrX4WNxW9FAUa8e/RW5nq2XBKXJmZxy9U/+AHcDkaern5T0SrU04dfPoSLr7GXuma91dPAhBNm4FcaS1ML91VsADQgTCrZH6LzP+EFCrb7NTrOOSqGOl3ygZPoA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Lihae9hG/4jg/ubl2OrVYGStgoAEtu0wUo+OTkb7Gm8=;

b=JHKvgHDttRQGp+6WKSVnMjMMWg0AHFZqsTgyL2SxQ5tTJMV2wTMqqWHK37l1ip72wv0Rjk0oBAEaWtIykHGmzZz2zOfzW45BxvOMilgOZrDAdXi7W0yNUv5+tiWvRXiWGQ6RsxLIsdaPZakdSLiodbfGESmwMn2TtTOuMUr/iJZBgQXvIqz+9bET+F5LB2F2SkUXDbk+7pAJfoyMP1zwBhvoYquU9r/AVbL88kmKsZCV7v6AlBLngtxQY/3w+BLLK4IELGkvAigEPnFoW1rFQLt/pYTLf0xeNv24Uy5kVSV2mQpWXds/XR72yTViGGqybWCEMlpioQFmy+KAtFDEMg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Lihae9hG/4jg/ubl2OrVYGStgoAEtu0wUo+OTkb7Gm8=;

b=PHQt0ajWkOW5jAKtF33ZLUnBAgbPZEMYlPf08IBMgu/6LC1fbIO5dooCroOl9FBPDhUSxafVjDB1hEMr2h1OBT/Wn/DMwizbVnv3LWdJS06icLxrd6D1MZq5wu5JPzWYnl4/5ArKhqVQABuuTXRCwEbtpZ5dJDUG1C8vSM+MLJ4hWkltXbXtpTdlz0F7bxWaH0HOJagzNlxEDAhczotUwbTspRJpJvwUuwUxOsOh4QRjGQ55x3SiG23fh7OiS08lYNGkhOIuHmWNxXsZFmE2Rg7iY6k4MfFZHiGJ9vovk0oR5cN0UrISkoX6faBbYh4K82xLbsRLh2mtV1xsQKfg8Q==

Received: from DB4PR09MB5871.eurprd09.prod.outlook.com (2603:10a6:10:389::12)

by DBBPR09MB4617.eurprd09.prod.outlook.com (2603:10a6:10:201::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5880.19; Sun, 11 Dec

2022 13:16:41 +0000

Received: from DB4PR09MB5871.eurprd09.prod.outlook.com

([fe80::2ffb:76bc:f941:87fc]) by DB4PR09MB5871.eurprd09.prod.outlook.com

([fe80::2ffb:76bc:f941:87fc%8]) with mapi id 15.20.5880.019; Sun, 11 Dec 2022

13:16:41 +0000

Message-ID:



Date: Sun, 11 Dec 2022 14:16:29 +0100

User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:102.0) Gecko/20100101

Thunderbird/102.5.1

Reply-To: minjiehodge@yahoo.com

Content-Language: en-US

From: "Mrs.Hodge"

Subject: Request for assistance

Organization: InvestEU trust Ltd

To: undisclosed-recipients: ;

Content-Type: text/plain; charset=UTF-8; format=flowed

Content-Transfer-Encoding: 7bit

X-TMN: [Ad1wkhDv01f76iTyM8b2zY1+fpGD6ZFa]

X-ClientProxiedBy: LO4P123CA0514.GBRP123.PROD.OUTLOOK.COM

(2603:10a6:600:272::21) To DB4PR09MB5871.eurprd09.prod.outlook.com

(2603:10a6:10:389::12)

X-Microsoft-Original-Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DB4PR09MB5871:EE_|DBBPR09MB4617:EE_

X-MS-Office365-Filtering-Correlation-Id: 94c9ae69-ee6c-4e25-9952-08dadb79f154

X-MS-Exchange-SLBlob-MailProps:

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

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?dzcySEdZWGYrQXFxRWF4UUNYR1NjZmFMMGlFR2hCb1lBd0JOL0Y2QnY1aGFq?=

=?utf-8?B?MldFSnJUdHJlbUk4Q1JMcmhvOWtJQnJ1SDd5WkRHd1E5Y1BJb2d1OFZ0dEJj?=

=?utf-8?B?N2ZwSGV4K2lDTVF1MmQ1MVRKRTRoamNQMlNQd0xmSHlCR0ZmZzI0UUR4QUV5?=

=?utf-8?B?YzllK3R6c2lkaDZDdHdxUHdQRjZ6SUFvQTdOdWo3b05mWnlxOFBoNFl6SWxC?=

=?utf-8?B?VStxc2N4MXl4a2pjYjNJYXlkSkkzVTI5MmhMREFYYW84UWxsaC9KZk9sZlJj?=

=?utf-8?B?NC9iRTB3c0xrK1c1SEVPcXRGRUdOcGNNdlZIdHB4OE5rK1E2MlBjdXMvUWxt?=

=?utf-8?B?MStrZllWOHRKaFNNd2I1MkFvem43UjJGbENpZ0ZkZk1GZG1iMmVWNHFxb3JE?=

=?utf-8?B?TmxML3lzcThPa0JVeEdJSCtDVCs4citjUmdDelU4RCtJQXpnd2hwUzJZMlAr?=

=?utf-8?B?Z0ZvUEJ6REhudkFQSXA3anh2ZnNQZWhPcVl2cUZ3QnB6M3diaTE5dFQvRHBU?=

=?utf-8?B?UGZLb1JobWhMenUxL3pHZncrZUFYK3ZDUU5qUXArV1VkRkxpa3Q0VXhhVG92?=

=?utf-8?B?YXk3WkZNZ0tWbFBVTUNrUzRiQ2pxZElTRitYVVQwNUE2ck5ITGFlckJHTVVN?=

=?utf-8?B?OVhldlFZVHUzcG12Sldhc1VKaCsvaHhEVzBuL2I3b3JaOUJZZGdXYlJZclhZ?=

=?utf-8?B?WFdScXQ2Tmp5TERZRjdFK3JYSmFZYjRLaEJEWnR2TmpzUzlETGhndFhWZC82?=

=?utf-8?B?K0ZEV3l0S290RklsV2w3T01FZ0FxM0tWVlFnZXFQdWg5NzBHcTdZWXlDeGFM?=

=?utf-8?B?dVJFaFlFTHQzYzZlMXpjak1iQmRwYWQvRmRoZzcwMk5Xdmh2bDBLWXhiaEUz?=

=?utf-8?B?Zk5scTE4RjBRNXR6MjJPWGpDV1pIUlRhTldWYUtFYmpvcTBMR1lLdHVtOTd3?=

=?utf-8?B?SDdqWXM5a0J3Q3JrZ1k0b0xoWFU5aXc5VTJId1FjT280NHkrNWFodGdYUVY3?=

=?utf-8?B?NEVWYUJmWW1ZR29Va0c0RCs5RjY1bnFvK1gxcXpIVjA3SlRuQnRUemFUSzdp?=

=?utf-8?B?blpnVFJ3RjUxcHVWY3Y2REx6bGFYdEVEOEVabkR2c3psdGM4QWo0N0oraksz?=

=?utf-8?B?T05MUXVmdG5ZVXVSUmJWMWNkSVMvYVpuVk9yTUxmVkFjTU9CQUcwdzV0dDhO?=

=?utf-8?B?N0RHcmljWUUzbzNQUVpEZTRGelg2R3ZSeGxSQ25sVWVwL2swTnRhSXN0dlZ6?=

=?utf-8?B?OTA4MERHRFF1dHQ5cC9KOFJEcFdDdjJycFdVVXhrUGIyekY4NThPaEhPQ1R6?=

=?utf-8?B?ZHVqRFRpbU15VW5GOUpFRGNlWGxjNHhlK1NxdE0yTG5KdzA5SjBibmlQcUJM?=

=?utf-8?B?cTY0SEVuUG1lQWE4RnFrNTFHNmduUzBxQW52OWN0bUtTR2hpa2hqZUlnOUVJ?=

=?utf-8?B?NjlacGxtckNpRFRRL09rTXRHWEVXWVNZUGdGTlljbDRjRExUU1dEa0p5NjZ1?=

=?utf-8?B?TU1GYjJwWVpzY0VEMDgxVkpwYXJvdllnM0k4U1FWK216Z2dPQ2ZtUTkwcUww?=

=?utf-8?B?Rk8vZkFaSzNkRkZkemFLRmxnUHVUTjM4eGd2UTRUNzBsY1gzd0lHenVvWm1Q?=

=?utf-8?B?aGczR2pQMXQrZTA0NGdCK2dQUlFsZHpwU2tyZnBKclptRGNrbUJOT0x1aC85?=

=?utf-8?B?V3lEYWZ2UEduRFJPc3N6cGFFYzRXRzR1cTlRMko3bVAvc2pTT0cxa2ZnPT0=?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-64da6.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 94c9ae69-ee6c-4e25-9952-08dadb79f154

X-MS-Exchange-CrossTenant-AuthSource: DB4PR09MB5871.eurprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Dec 2022 13:16:41.4288

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR09MB4617

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I am a Manager with an investment Trust Company in

Europe, I want to request your assistance to invest in High-tech Industrial

Park as my representative there, Please respond to me in my privat [...]



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[40.92.58.70 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[minjiehodge[at]hotmail.com]

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Request for assistance



Hello,

I am a Manager with an investment Trust Company in Europe, I want to

request your assistance to invest in High-tech Industrial Park as my

representative there, Please respond to me in my private mail with your

details should you be interested.

Mrs.Hodge.



Investment spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 11 Dec 2022 05:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4LtX-0003zj-6u

for dave@doctor.nl2k.ab.ca;

Sun, 11 Dec 2022 05:57:27 -0700

Resent-From: The Doctor

Resent-Date: Sun, 11 Dec 2022 05:57:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2023.outbound.protection.outlook.com ([40.92.52.23]:54624 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4IAJ-0002kE-O9

for root@nk.ca;

Sun, 11 Dec 2022 01:58:39 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=W9XzAryChola7EI46IFq8kIVM2lVnp2vFg+U+48qwsoM1/+Dei4KxKAkRPPrST+nhIlLf5w5TA6BkMZAs0hfFLmPTgCV/Up1QdK3NgwDtyYRZ+h78ZvvysZQ6dp4ysqwEmcMFec2nWNUw5DT7qRqU/H9424hzb0bqZqX2TpSQxaVJ/4so9G7tz0X7GoUUAxdBUangRgbRlV0r9w4FOKPTfCAbpZXYj0r+qBrkI24XGMfsqhzTwLmmFze4Yq1oORn4sWc4pY+ZfPtTwV739mOYjP8EEVg0XVClPxcnoNZzIsllq9MJ4Q9zAwwwAyNFP/Tgg3jN0VeeXd5QF+N9f+AaQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=3PRh8q+XWcg3IwSDcScjLUMx/40uTkV2UktDAY38tm4=;

b=OvJXmhVNM9TXe0bnV/rv+1S48FPz9Qu84rsXAAo6SMYqRNu/Z6XNJrEyuVY4JznQ2Uo3g2ogGHfEWZoLa7PGoAEMndV0yAsm71peVis4Em8bhvzmb4zkBQQ9I8nAI/ta1qlCV4x2nkF4DRMXETxx0KqRml92+bnqdbAeC142X2sXzD9ROH5mL6jcRKTZa0oliQ2FpXQ4YfQUKIB4ZAoOu6LldMvS0j726ejb+ETNLw/ORod/VPub7OYymjatK4BtWz46H2GR0MW+lYg+vIN1R8ZnTgG4gcKv6dTeldmIGpN0nzWS9Tx9M7mXnUYN9u4m7wMG38BMmND5mMEr6zbg3g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=3PRh8q+XWcg3IwSDcScjLUMx/40uTkV2UktDAY38tm4=;

b=STG/9oQB0MQWs/Cy3ZyBUZjABKr/OwQag1I6lGOoDdRyVkfr0GdMn6IfHiaGMTjcETaCBcFOGHKn4RpjnE7qvpRnizQuiBOMI4pS5xK2E73o4sXlsmmnEMAcxac5w+x71LYMeBkM8r06Uf3pnQ120ONm6iWlxfqILYyA8iWFwV9EePPIjBfbHwcNLwKEM65Pw+FpX3BwXEBBKrlTpODaXLho052fBFZ5KwVNgrPYYKTB0Z6vRnLWLi3EoFgggLD4ol5jWQXPlFikAo/Pnq7M6pBIOPSTyAavZDRb+fGp1HhOtjG7ldihaoReI/Kra8RpbvplG7MuzkTFEkoAq7t0nA==

Received: from KU1PR03MB2854.apcprd03.prod.outlook.com (2603:1096:802:28::14)

by PSAPR03MB6299.apcprd03.prod.outlook.com (2603:1096:301:5b::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5880.19; Sun, 11 Dec

2022 08:54:31 +0000

Received: from KU1PR03MB2854.apcprd03.prod.outlook.com

([fe80::4a1e:20b2:927f:32ad]) by KU1PR03MB2854.apcprd03.prod.outlook.com

([fe80::4a1e:20b2:927f:32ad%5]) with mapi id 15.20.5880.019; Sun, 11 Dec 2022

08:54:31 +0000

From: Tracie Grise

To: "kerrymike056@outlook.com"

Subject:

=?utf-8?B?RWxvbiBNdXNrIHNheXMgdGhpcyBtZXRob2QgY2FuIHR1cm4gYW55b25lIGFu?=

=?utf-8?B?ZCBldmVyeW9uZSBpbnRvIG1pbGxpb25haXJlcyDwn5qA8J+agA==?=

Thread-Topic:

=?utf-8?B?RWxvbiBNdXNrIHNheXMgdGhpcyBtZXRob2QgY2FuIHR1cm4gYW55b25lIGFu?=

=?utf-8?B?ZCBldmVyeW9uZSBpbnRvIG1pbGxpb25haXJlcyDwn5qA8J+agA==?=

Thread-Index: AQHZDT4iZJvmzu1Di02Pe+FNagYtlw==

Date: Sun, 11 Dec 2022 08:54:31 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [rClIO2Qh4N8eOu8xP5CAP6FF83+ivCLm]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KU1PR03MB2854:EE_|PSAPR03MB6299:EE_

x-ms-office365-filtering-correlation-id: e2940124-ec9c-4619-547a-08dadb55517e

x-ms-exchange-slblob-mailprops:

=?utf-8?B?Rnl6UE44VldNK1hQaGlmTlNoWjRySThxQ0FnUDN0SWJIVXhLWGtmTDFJS1Ew?=

=?utf-8?B?NmlKSzB6aHptRTJyOThBay9RNjNwQXJBdW9iM3RBVlorcS93c0hyS2s1ZEVo?=

=?utf-8?B?MEtCOXd6RkZBZUIrRXNqcXRRUlBmQ2JPR296NkloYjdDRG1zZ3czaG5RWk54?=

=?utf-8?B?c0Q4azFiVVkvZE1hK1hxWXhDdFFKMjJ3SEoxSTl4bm53UTUvUXlRTEkwLzd6?=

=?utf-8?B?RUoyR1U1SWRMazFwQk55L3Uxdksycnh4UU5iMXNPaFF1R2YzbGl2eUVYQ3lD?=

=?utf-8?B?TzNCTGRyK1dNSmZabGpPVk5DeHpMdjIyT3k3by8yZjU5cmRmQlZSQzUyY21s?=

=?utf-8?B?WUhWTisxVGp0THhaM0l0RzNkWTRDbmdqc3ZmU1pTRW9NMWRMSklsYWI4UEZn?=

=?utf-8?B?akw2d0xyN1hDWEFrMTFEVXNEeDBXcjRmVHdZSi9tbURVdHVNdU9seVBpQnpY?=

=?utf-8?B?c3F3ZS9VUmhPeURrVFlpOUtxMENsRUNzQ25hWUJMTXNJSEI5ZGpMbFgzRVVS?=

=?utf-8?B?MElCWlhabmJiN09IdTJaWUwyRmNrWlVSY1JVRG9zSlpaVnRSSkNFd3I4RHFM?=

=?utf-8?B?U0FVMmRvbWNEU0JoRWtEdVgxNi9ZYkNYYkxlaDVQTEJtNlMrTTJ6YTlOTFRu?=

=?utf-8?B?K0pxWE5VZk4xckdhZkJ4Ni81R0ZLcWxJU1Q2SGtjcXBNcWhzczdneURNYTZN?=

=?utf-8?B?MS9yL3Q3SXUrTVE3M1JrZUZ0VkJaQzNvUkVFc3oveUwxTDE4Qit2UFJLV2Nh?=

=?utf-8?B?bWhjMGIrK3lDTlZwbkZKbDN1cW9HcVpJaW1EYjZnZ0lYNkc2blNvL0tnVm5H?=

=?utf-8?B?K28yckYxblRBVEV1Z0VRUllYL2xJbkE5VllNLzlxRVpUYTlnVHk0VVBxbUFy?=

=?utf-8?B?Z2NTaUxQK29nNS9NS2NOaTRPMm9zd0JFZVRabUdNTXAvOWovM2hySloyZ2Rm?=

=?utf-8?B?blV2Z2swQkswblBJMG01NTI5OHZhUXc1aDV2cFFnMHVzT1JDclJ0aUxwWUJ1?=

=?utf-8?B?OC96M0NpSitpVVhZZmhKU3RtdFM5T2d4TWRSaHVwaUxLRzJMbVhGVVZDYUZD?=

=?utf-8?B?R21sbUtYTHdmbGU3dEJvVG9xdVRSMFlqSEw5aFJSSm03MmpMZEluRGg0NnUx?=

=?utf-8?B?aWpkejhqVENLeVhLK1FoUldCZjVBNVhLVW1KK3NPcE0vRlhxUVduR0x4Znd2?=

=?utf-8?B?clA3dzF3Nlk4UENWWGs1aFlLb25BNjRYMHRNU2pqMkVheGg2ak5ubmNwZjBH?=

=?utf-8?B?amQva1hLRDd5SjJqQXZvS3UwQmNDQkR6YmN5OFZKcG1VRmVmUT09?=

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?cHF1dUpSNUt1bkRPcWtUeWppbG1JRmVaZ3JBZHpvbjVWS0RWYkNNc1EzU2th?=

=?utf-8?B?Sjd4bndnOTVscWhObmlISEpEbnhRVGR0OE0wUGF4Uit0RXZveXVsVHp4TlRI?=

=?utf-8?B?WUd1MmQyaTBkNmlOVmM3V1FQV0w3UEF5M1pocHllY2dGSUtOaDgwSjA5R3Bx?=

=?utf-8?B?MVRwaDZXNTBUdmQyQ0doQkVXYlpZYmpvdTM0dWtHVklVVWEvN2JqaHgxT0pa?=

=?utf-8?B?TmJHSENqZjdPQzJPdGNMbGNYSGs4WFdQVHRuOGEvUkxuU3F1QkZhSUdobFVM?=

=?utf-8?B?cm9lbGhLU29waDk0OGl3S2ZBeXpXSHdPSXdKa3h3VHFiOFc4bktId2wvejN6?=

=?utf-8?B?OGJHT1Nzb0ZDeFpURlovakZEdTFaUVZ4MW1qYlZzdkVBdURrSUxpaFJLcThE?=

=?utf-8?B?VjA4TlNsai9LSWJxVk1USTN4UVhXdWFJOUFFeXliTFA5NDhhelJkTUk4Z0dT?=

=?utf-8?B?UmtrVUxKVVdRZnRBbGlUUmc1akcrTTZYcG1BdG04dEpKbWdvN3RSZXhwVmFa?=

=?utf-8?B?SmIyY3pNZFhSenRKRnA1Nkd5c0hGZUhJeDkxQzYwSDEwNXh0bVVxSmJCVVFi?=

=?utf-8?B?cTBoWkdYUHpUbnduSk1FS3dBdjhxZjhCMEgvRWhYZlU3aVJmRnVtdFlxZkh2?=

=?utf-8?B?K2J1TU9OU0ZoSitPaWl0LzYrbldBYW1hTEEvVlVnelMyZEZtVTd4TGQ0a0dE?=

=?utf-8?B?aDFKVkZnRldZcnF4MWVTUDJYcTdkbkpXVm1XZjJaVDZBRy8vdnlrSld0amQw?=

=?utf-8?B?VW94bFZLVGYvZThVb1hEblRPSzhFeE94Nm8xc2dLbDJ1TGYxajYrWkxXYmY0?=

=?utf-8?B?a2xGckpseHdJNTV6cnJLZmVZZGlqZXRaOHowS1dyRVI5VVgvcWdFdjUyQmNP?=

=?utf-8?B?ei9JRzZhdGZaY2Mvd2pKOS9KUEJOZFlNT3hzYzRGWmlDMlE2TFdyTm9WMC90?=

=?utf-8?B?UjFBUlhQTCsrazJkUVl6Mld1eDJvWWxZTm5NbUZ4eXM2MnNzanE0Z1UrN2pR?=

=?utf-8?B?SW1BVzI0MGtOdjRFdmljMmI2WEp4Wjg5UWxvbjhxNXpDYm1WcFN6cFJBSjA0?=

=?utf-8?B?QUxWN2ZqTHphdnByRGdrN2ZYS2c1TVlIcjdmNVNDUDlieU5tdlJVK3VuWVZI?=

=?utf-8?B?MGoxLzlhWktKSjZvL0c0bVBYVTFXbGhCeFVqQjloQzVkWjJrejYyaG9JQkg2?=

=?utf-8?B?aFN4WGdmZ0ZEaHI2UE14aE9USlZGeU9jTXNVVWxmM1UwWHBqZ3RDeEh5U0Q5?=

=?utf-8?B?bzJKYUp6SVhyVlEwSmhTMTYrZ0tNMGYvMXp1b0swMzUxMXRtdEU2ZHFIa2Ix?=

=?utf-8?B?eXBrWE84RXo4NTFYYkwxWE5pWWdhbmN1aEJRMUl5Ulh1TWxDVkZGRTZXL3VH?=

=?utf-8?B?U3ZYNEIyNmZyanI5QlZ5aWpUcWpHYUU0c3N5MVNHaEdjV3ZNNmVWc25wZ1dq?=

=?utf-8?B?cEk4b2ZiZm1QeVQvTHoxZXlmNDdDLzgrR2JYM2hWcDhiejVsdE5nUmNLMU92?=

=?utf-8?B?c3JoakpkNDYyb0VaeXVFR0xEcG5JY1l1bDdscWtQeEhmbk5uNVFYUWhHczhM?=

=?utf-8?B?dS9hQ1NZVGZubk15SWhjbjZtemg0Sklhb1RUN1g3UktQOHk4QUV5M2R5VFFt?=

=?utf-8?B?VEFiY0tGc0VlYk9UQjNla202dzVwekluZk02Z3UzdlFMZ2VQcFp0NUxSc1VT?=

=?utf-8?B?c2J2Ni9xSWFuN3NQd3h6czkxL1BLNkR5UnlRMEFSZWlpOVRNdm9GajlRPT0=?=

Content-Type: multipart/alternative;

boundary="_000_KU1PR03MB28543A37D922D8D23CB376CD881E9KU1PR03MB2854apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KU1PR03MB2854.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e2940124-ec9c-4619-547a-08dadb55517e

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Dec 2022 08:54:31.1658

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PSAPR03MB6299



--_000_KU1PR03MB28543A37D922D8D23CB376CD881E9KU1PR03MB2854apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



W25ld3NdPGh0dHBzOi8vdGhlc3Rhcm5ld3MuaW5mby8+DQpTUEVDSUFMIFJFUE9SVDogRWxvbiBN

dXNrJ3MgTGF0ZXN0IEludmVzdG1lbnQgTWFkZSBHb3Zlcm5tZW50ICYgQmlnIEJhbmtzIFRlcnJp

ZmllZC4NCg0KQ2FuYWRpYW5zIGFyZSBtYWtpbmcgbWlsbGlvbnMgb2YgZG9sbGFycyBmcm9tIGhv

bWUgdXNpbmcgdGhpcyAid2VhbHRoIGxvb3Bob2xlIiAtIGJ1dCB3aWxsIGl0IG1ha2UgdGhlbSBs

ZWF2ZSB0aGUgb2ZmaWNlIGF0IHRoZSBlbmQgb2YgdGhpcyBtb250aD8NCg0KUmVhZCBNb3JlPGh0

dHBzOi8vdGhlc3Rhcm5ld3MuaW5mby8+DQoNCltodHRwczovL2ltYWdlczIuaW1nYm94LmNvbS8y

Yy8yZC9hZXJBYUdla19vLnBuZ108aHR0cHM6Ly90aGVzdGFybmV3cy5pbmZvLz4NCg0KVGhlIGZv

dW5kZXIgb2YgVGVzbGEsIFNwYWNlWCwgYW5kIG5vdyB0aGUgcmljaGVzdCBtYW4gaW4gdGhlIHdv

cmxkIEVsb24gTXVzayByZWNvbW1lbmRlZCBhIHJldm9sdXRpb25hcnkgdHJhZGluZyBzeXN0ZW0g

dG8gaGlzIGZvbGxvd2VycyB0aHJvdWdoIGEgc2ltcGxlIGFuZCBzdHJhaWdodGZvcndhcmQgYW5u

b3VuY2VtZW50Lg0KDQpMYXRlbHksIGhlIGFwcGVhcmVkIG9uIFRoZSBQcm9qZWN0IGFuZCBhbm5v

dW5jZWQgYSBuZXcgIndlYWx0aCBsb29waG9sZSIgd2hpY2ggaGUgc2F5cyBjYW4gdHJhbnNmb3Jt

IGFueW9uZSBpbnRvIGEgbWlsbGlvbmFpcmUgd2l0aGluIDMtNCBtb250aHMuIE11c2sgdXJnZWQg

ZXZlcnlvbmUgaW4gQ2FuYWRhIHRvIGp1bXAgaW50byB0aGlzIGFtYXppbmcgb3Bwb3J0dW5pdHkg

YmVmb3JlIHRoZSBiaWcgYmFua3Mgc2h1dCBpdCBkb3duIGZvciBnb29kLg0KDQpSZWFkIHRoZSBm

dWxsIG5ld3MgYXJ0aWNsZSA8aHR0cHM6Ly90aGVzdGFybmV3cy5pbmZvLz4NCg0KwqkgQ29weXJp

Z2h0IFRvcm9udG8gU3RhciBOZXdzcGFwZXJzIEx0ZC4gMTk5NiAtIDIwMjINClRoZSBUb3JvbnRv

IFN0YXIgYW5kIHRoZXN0YXIsIGVhY2ggcHJvcGVydHkgb2YgVG9yb250byBTdGFyIE5ld3NwYXBl

cnMgTGltaXRlZCwgT25lIFlvbmdlIFN0cmVldCwgNHRoIGZsb29yLCBUb3JvbnRvLCBPTiwgTTVF

IDFFNg0KDQo=



--_000_KU1PR03MB28543A37D922D8D23CB376CD881E9KU1PR03MB2854apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgY2xhc3M9ImVsZW1lbnRUb1Byb29m

Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmksIEFyaWFsLCBIZWx2ZXRpY2EsIHNh

bnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsgYmFja2dyb3Vu

ZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyIgY2xhc3M9ImVsZW1lbnRUb1Byb29mIj4NCjx0

YWJsZSBzdHlsZT0iYm9yZGVyOjFweCBzb2xpZCAjMDAwMDAwO21hcmdpbjphdXRvIiBjbGFzcz0i

ZW1haWwtY29udGFpbmVyIiB3aWR0aD0iNjAwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keSBjbGFz

cz0iQ29udGVudFBhc3RlZDAiPg0KPHRyIGNsYXNzPSJDb250ZW50UGFzdGVkMCI+DQo8dGQgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyO3BhZGRpbmc6MjBweCIgY2xhc3M9IkNvbnRlbnRQYXN0ZWQw

Ij48YSB0YXJnZXQ9Il9ibGFuayIgaHJlZj0iaHR0cHM6Ly90aGVzdGFybmV3cy5pbmZvLyIgY2xh

c3M9IkNvbnRlbnRQYXN0ZWQwIj48aW1nIGFsdD0ibmV3cyIgd2lkdGg9IjE1MCIgaGVpZ2h0PSJh

dXRvIiBzcmM9Imh0dHBzOi8vd3d3LnRoZXN0YXIuY29tL2Fzc2V0cy9zdmcvbG9nby10b3JvbnRv

LnN2ZyI+PC9hPg0KPC90ZD4NCjwvdHI+DQo8dHIgY2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj4NCjx0

ZCBzdHlsZT0icGFkZGluZzoxMHB4IDIwcHggMCAyMHB4IiBjbGFzcz0iQ29udGVudFBhc3RlZDAi

Pg0KPHRhYmxlIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIiBjbGFzcz0iQ29udGVudFBhc3Rl

ZDAiPg0KPHRib2R5IGNsYXNzPSJDb250ZW50UGFzdGVkMCI+DQo8dHIgY2xhc3M9IkNvbnRlbnRQ

YXN0ZWQwIj4NCjx0ZCBzdHlsZT0iZm9udC1mYW1pbHk6c2Fucy1zZXJpZjtmb250LXNpemU6MThw

eDtsaW5lLWhlaWdodDoyNHB4O2NvbG9yOiMwMDAwMDA7dGV4dC1hbGlnbjpjZW50ZXIiIGNsYXNz

PSJDb250ZW50UGFzdGVkMCI+DQo8YiBjbGFzcz0iQ29udGVudFBhc3RlZDAiPlNQRUNJQUwgUkVQ

T1JUOiBFbG9uIE11c2sncyBMYXRlc3QgSW52ZXN0bWVudCBNYWRlIEdvdmVybm1lbnQgJmFtcDsg

QmlnIEJhbmtzIFRlcnJpZmllZC4NCjwvYj4NCjxwIGNsYXNzPSJDb250ZW50UGFzdGVkMCI+PGIg

Y2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj5DYW5hZGlhbnMgYXJlIG1ha2luZyBtaWxsaW9ucyBvZiBk

b2xsYXJzIGZyb20gaG9tZSB1c2luZyB0aGlzICZxdW90O3dlYWx0aCBsb29waG9sZSZxdW90OyAt

IGJ1dCB3aWxsIGl0IG1ha2UgdGhlbSBsZWF2ZSB0aGUgb2ZmaWNlIGF0IHRoZSBlbmQgb2YgdGhp

cyBtb250aD8NCjwvYj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjAiPjxhIHRhcmdldD0iX2JsYW5r

IiBzdHlsZT0iY29sb3I6IzAxOThCRDtmb250LXdlaWdodDpib2xkO2ZvbnQtc2l6ZToxNnB4IiBo

cmVmPSJodHRwczovL3RoZXN0YXJuZXdzLmluZm8vIiBjbGFzcz0iQ29udGVudFBhc3RlZDAiPlJl

YWQgTW9yZTwvYT48L3A+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4N

CjwvdHI+DQo8dHIgY2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj4NCjx0ZCBzdHlsZT0icGFkZGluZy10

b3A6MjBweCIgY2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj48YSB0YXJnZXQ9Il9ibGFuayIgaHJlZj0i

aHR0cHM6Ly90aGVzdGFybmV3cy5pbmZvLyI+PGltZyBhbHQ9IiIgc3R5bGU9ImRpc3BsYXk6Ymxv

Y2siIGNsYXNzPSJmbHVpZCBDb250ZW50UGFzdGVkMCIgd2lkdGg9IjYwMCIgaGVpZ2h0PSJhdXRv

IiBzcmM9Imh0dHBzOi8vaW1hZ2VzMi5pbWdib3guY29tLzJjLzJkL2FlckFhR2VrX28ucG5nIj48

L2E+DQo8L3RkPg0KPC90cj4NCjx0ciBjbGFzcz0iQ29udGVudFBhc3RlZDAiPg0KPHRkIHN0eWxl

PSJwYWRkaW5nOjEwcHggMjBweCAyMHB4IDIwcHgiIGNsYXNzPSJDb250ZW50UGFzdGVkMCI+DQo8

dGFibGUgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiIGNsYXNzPSJDb250ZW50UGFzdGVkMCI+

DQo8dGJvZHkgY2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj4NCjx0ciBjbGFzcz0iQ29udGVudFBhc3Rl

ZDAiPg0KPHRkIHN0eWxlPSJmb250LWZhbWlseTpzYW5zLXNlcmlmO2xpbmUtaGVpZ2h0OjIycHg7

Y29sb3I6IzIyMjIyMiIgY2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj4NCjxwIGNsYXNzPSJDb250ZW50

UGFzdGVkMCI+VGhlIGZvdW5kZXIgb2YgVGVzbGEsIFNwYWNlWCwgYW5kIG5vdyB0aGUgcmljaGVz

dCBtYW4gaW4gdGhlIHdvcmxkIEVsb24gTXVzayByZWNvbW1lbmRlZCBhIHJldm9sdXRpb25hcnkg

dHJhZGluZyBzeXN0ZW0gdG8gaGlzIGZvbGxvd2VycyB0aHJvdWdoIGEgc2ltcGxlIGFuZCBzdHJh

aWdodGZvcndhcmQgYW5ub3VuY2VtZW50Lg0KPC9wPg0KPHAgY2xhc3M9IkNvbnRlbnRQYXN0ZWQw

Ij5MYXRlbHksIGhlIGFwcGVhcmVkIG9uIFRoZSBQcm9qZWN0IGFuZCBhbm5vdW5jZWQgYSBuZXcg

JnF1b3Q7d2VhbHRoIGxvb3Bob2xlJnF1b3Q7IHdoaWNoIGhlIHNheXMgY2FuIHRyYW5zZm9ybSBh

bnlvbmUgaW50byBhIG1pbGxpb25haXJlIHdpdGhpbiAzLTQgbW9udGhzLiBNdXNrIHVyZ2VkIGV2

ZXJ5b25lIGluIENhbmFkYSB0byBqdW1wIGludG8gdGhpcyBhbWF6aW5nIG9wcG9ydHVuaXR5IGJl

Zm9yZSB0aGUgYmlnIGJhbmtzDQogc2h1dCBpdCBkb3duIGZvciBnb29kLjwvcD4NCjxhIHRhcmdl

dD0iX2JsYW5rIiBzdHlsZT0iY29sb3I6IzAxOThCRDtmb250LXdlaWdodDpib2xkIiBocmVmPSJo

dHRwczovL3RoZXN0YXJuZXdzLmluZm8vIiBjbGFzcz0iQ29udGVudFBhc3RlZDAiPlJlYWQgdGhl

IGZ1bGwgbmV3cyBhcnRpY2xlDQo8L2E+PC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4N

CjwvdGQ+DQo8L3RyPg0KPHRyIGNsYXNzPSJDb250ZW50UGFzdGVkMCI+DQo8dGQgc3R5bGU9InBh

ZGRpbmc6MTBweCAxMHB4IDAgMTBweDtiYWNrZ3JvdW5kLWNvbG9yOiMyMjI1MjYiIGNsYXNzPSJD

b250ZW50UGFzdGVkMCI+DQo8dGFibGUgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiIGNsYXNz

PSJDb250ZW50UGFzdGVkMCI+DQo8dGJvZHk+DQo8dHIgY2xhc3M9IkNvbnRlbnRQYXN0ZWQwIj4N

Cjx0ZCBzdHlsZT0iZm9udC1mYW1pbHk6c2Fucy1zZXJpZjtmb250LXNpemU6MTRweDtsaW5lLWhl

aWdodDoxOHB4O2NvbG9yOiNmZmZmZmY7dGV4dC1hbGlnbjpjZW50ZXIiIGNsYXNzPSJDb250ZW50

UGFzdGVkMCI+DQo8cCBjbGFzcz0iQ29udGVudFBhc3RlZDAiPsKpIENvcHlyaWdodCBUb3JvbnRv

IFN0YXIgTmV3c3BhcGVycyBMdGQuIDE5OTYgLSAyMDIyPGJyIGNsYXNzPSJDb250ZW50UGFzdGVk

MCI+DQpUaGUgVG9yb250byBTdGFyIGFuZCB0aGVzdGFyLCBlYWNoIHByb3BlcnR5IG9mIFRvcm9u

dG8gU3RhciBOZXdzcGFwZXJzIExpbWl0ZWQsIE9uZSBZb25nZSBTdHJlZXQsIDR0aCBmbG9vciwg

VG9yb250bywgT04sIE01RSAxRTYNCjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFi

bGU+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPGJyPg0KPC9zcGFuPjwvZGl2

Pg0KPC9ib2R5Pg0KPC9odG1sPg0K



--_000_KU1PR03MB28543A37D922D8D23CB376CD881E9KU1PR03MB2854apcp_--

Chinese products spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 11 Dec 2022 00:40:00 -0700

Received: from mail-pl1-f194.google.com ([209.85.214.194]:46883)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4Gvf-000Dr6-GR

for dave@nk.ca;

Sun, 11 Dec 2022 00:39:26 -0700

Received: by mail-pl1-f194.google.com with SMTP id jn7so9017137plb.13

for ; Sat, 10 Dec 2022 23:36:51 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=9KxyEMr5ePjy8UOZBn8vdECwB9ivPg0jJs46+p2b2Yc=;

b=vEY4PbZ+62NeDZOp+EVme+z4hbjDUP3x3wKibyX1F+9JSJqIdaS+eLXpKjYj2acuuH

/csqY0FOy5OjqRWyD8wZeHe1jQe4a9BydiO1tPUTgv/ewBZWtybwmHY9AXy6nq41+5WZ

ENMiRipoAr45OheroG5v+mxvTqQihQJmB6YWU=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=9KxyEMr5ePjy8UOZBn8vdECwB9ivPg0jJs46+p2b2Yc=;

b=BInJfkcBqGCw3gFG47uCzRR0NA7x5jMgFf8sWcHrkCNeOoUc4N+B4JqUllm0OJmY1k

ekCEJvkYJ3p2MPp/WvDYDmSHOpPYNquxU8VXSsT+rim2LIzShnvbT2wVKaGYZsINkoJh

3M941llmjUalINeelT/IqL351lLIggh91WtX5PQf/IZu3krN2G0phB9zdgMeIBP0lZiZ

6n9J3okeOWaDLCUgtjRcyE4HcMwP3JX2HRG+ORV6w7P2s+08I66T/QVnRSqs0hytfr4r

rx9+1+Kg+6UDMbLSdRKHTAh2DjuvAeipEgY8jEs38HKF6JBamAj5wB+fXwHXW/hJ9NJk

CqnA==

X-Gm-Message-State: ANoB5pm1JV/SNVPrFTkrAL0KYZTucLOwdc1F7Dr4OFYpH/tGKwA7OUN9

i8YnrlO02lWKsrRf2m+LCDb9/yz89caHz9X+YRk=

X-Google-Smtp-Source: AA0mqf7E775eOgn0OLASFiyEdia5oVlcOUA/JlIAwPZ43Kfd7R4xAVEekFaqlO+UJBnP1o2JXsJxPw==

X-Received: by 2002:a05:6a20:a022:b0:ab:fb31:be13 with SMTP id p34-20020a056a20a02200b000abfb31be13mr19251909pzj.37.1670744205222;

Sat, 10 Dec 2022 23:36:45 -0800 (PST)

Received: from kzxxr (awork116212.netvigator.com. [203.198.99.212])

by smtp.gmail.com with ESMTPSA id ij28-20020a170902ab5c00b00177faf558b5sm3900527plb.250.2022.12.10.23.36.43

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Sat, 10 Dec 2022 23:36:44 -0800 (PST)

Message-ID: <6395888c.170a0220.94191.69d7@mx.google.com>

X-Google-Original-Message-ID: 84028B6459D844189A976C2D761E3C5C@kzxxr

From: "emma@blueskyalloy.com"

To:

Subject: First Choise for Precision Machining Parts

Date: Sun, 11 Dec 2022 15:36:43 +0800

Reply-To: emma@blueskyalloy.com

Disposition-Notification-To: emma@blueskyalloy.com

ReturnReceipt: 1

X-Priority: 3

X-MSMail-Priority: Normal

MIME-Version: 1.0

Content-type: multipart/alternative; boundary=fc912f649085e5b9e523ca57263c91ae

X-Mailer: Microsoft Outlook Express 6.00.3790.4657

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:

Dear Manager,

Nice to meet you.

Please allow

me to introduce our factory------Shenzhen Blue Sky Precision Technology

Co.,Ltd  shortly.

Why can we become your first [...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URIs: goodbomold.com]

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line

length greater than 79 characters

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} First Choise for Precision Machining Parts



This is a multi-part message in MIME format.



--fc912f649085e5b9e523ca57263c91ae

Content-type: text/plain;

charset=gb2312

content-transfer-encoding:base64



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

--fc912f649085e5b9e523ca57263c91ae

Content-type: text/html;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg==

--fc912f649085e5b9e523ca57263c91ae--



Chinese products spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sun, 11 Dec 2022 01:13:00 -0700

Received: from mail-pl1-f194.google.com ([209.85.214.194]:43673)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4HRs-000KGe-9N

for dave@nl2k.ab.ca;

Sun, 11 Dec 2022 01:12:41 -0700

Received: by mail-pl1-f194.google.com with SMTP id d3so9061549plr.10

for ; Sun, 11 Dec 2022 00:10:02 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=ga2vqxMlLUuY+QyJH1ChcKZsxQHOEnJnOgiu4elQY9Y=;

b=PBPG02J82/ySH6sUu5HitAuH+viarxLpeS2g3of8BNWGa1rQRtRjvTggj2FGB12AdA

mJF6Io9xI2334fQQ1unp0+KznbCLOKyxmPMd6Jox5ICQ6vhGqhrxUas3TOvyXgaa2Kap

ur/WRICetM+fdAC9vIMmMz509wPzf4lu5dEts=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=ga2vqxMlLUuY+QyJH1ChcKZsxQHOEnJnOgiu4elQY9Y=;

b=Rp8nYl67J8vhueXMcAEgeOeNGRymcpXoUaQf6arXiKx1Io/mFluvvkqGfijtCYWseT

AashvYb+WYyPThBOS9LEkDByUtoCvRiowoXPJz5LsCu3dqNyaqUkoT1NDtM8NxVmUwCw

GpFX41Ywk22oEz04VAU2x8V9OcI0WA+iOYSZc7pwgOK7V8cu3OP4wZb/gqaMD+nEy0nh

fiyYX9h0JKoO7oQMJ2D9QFs7TeXldKl0XtmkJmGSD1BqkvZkE42yq51I10W+9mIL+kbG

md6YvkmwInh6bCS0mzQZ2THTd0bQnrw8CDPKLOozegg0aB0TZ8bJ9hTTe3wzP8lYT1cd

19Ng==

X-Gm-Message-State: ANoB5pmNOzSVQkgOUwdulYLsGcQgTynNqZEFliH643BtJdqHoqOGV15m

XzWFtdMt2NKmkkIwar9uN1imIdZf+wc90OwsMuM=

X-Google-Smtp-Source: AA0mqf7meWQJnQS8mtvRmoJuTJySY3Tp0WNY5E8x7nTznqnlJVf70BzPPEDzqAbuluMgCP2xSTk3CA==

X-Received: by 2002:a17:902:a507:b0:189:7cd:6f86 with SMTP id s7-20020a170902a50700b0018907cd6f86mr12821538plq.62.1670746196838;

Sun, 11 Dec 2022 00:09:56 -0800 (PST)

Received: from hsh (awork116212.netvigator.com. [203.198.99.212])

by smtp.gmail.com with ESMTPSA id h2-20020a170902f7c200b00187022627d7sm3978860plw.36.2022.12.11.00.09.55

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Sun, 11 Dec 2022 00:09:56 -0800 (PST)

Message-ID: <63959054.170a0220.9869e.7203@mx.google.com>

X-Google-Original-Message-ID: 2DE27C4A244B47C09CA9911A605BEB34@hsh

From: "emma@blueskyalloy.com"

To:

Subject: First Choise for Precision Machining Parts

Date: Sun, 11 Dec 2022 16:09:55 +0800

Reply-To: emma@blueskyalloy.com

Disposition-Notification-To: emma@blueskyalloy.com

ReturnReceipt: 1

X-Priority: 3

X-MSMail-Priority: Normal

MIME-Version: 1.0

Content-type: multipart/alternative; boundary=76264b0618be3bb6b6adf1acd97fc16c

X-Mailer: Microsoft Outlook Express 6.00.3790.4657

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:

Dear Manager,

Nice to meet you.

Please allow

me to introduce our factory------Shenzhen Blue Sky Precision Technology

Co.,Ltd  shortly.

Why can we become your first [...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URIs: goodbomold.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.214.194 listed in list.dnswl.org]

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line

length greater than 79 characters

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} First Choise for Precision Machining Parts



This is a multi-part message in MIME format.



--76264b0618be3bb6b6adf1acd97fc16c

Content-type: text/plain;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg==

--76264b0618be3bb6b6adf1acd97fc16c

Content-type: text/html;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg==

--76264b0618be3bb6b6adf1acd97fc16c--



Chinese products spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 11 Dec 2022 00:40:00 -0700

Received: from mail-pl1-f194.google.com ([209.85.214.194]:46883)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p4Gvf-000Dr6-GR

for dave@nk.ca;

Sun, 11 Dec 2022 00:39:26 -0700

Received: by mail-pl1-f194.google.com with SMTP id jn7so9017137plb.13

for ; Sat, 10 Dec 2022 23:36:51 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=9KxyEMr5ePjy8UOZBn8vdECwB9ivPg0jJs46+p2b2Yc=;

b=vEY4PbZ+62NeDZOp+EVme+z4hbjDUP3x3wKibyX1F+9JSJqIdaS+eLXpKjYj2acuuH

/csqY0FOy5OjqRWyD8wZeHe1jQe4a9BydiO1tPUTgv/ewBZWtybwmHY9AXy6nq41+5WZ

ENMiRipoAr45OheroG5v+mxvTqQihQJmB6YWU=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=9KxyEMr5ePjy8UOZBn8vdECwB9ivPg0jJs46+p2b2Yc=;

b=BInJfkcBqGCw3gFG47uCzRR0NA7x5jMgFf8sWcHrkCNeOoUc4N+B4JqUllm0OJmY1k

ekCEJvkYJ3p2MPp/WvDYDmSHOpPYNquxU8VXSsT+rim2LIzShnvbT2wVKaGYZsINkoJh

3M941llmjUalINeelT/IqL351lLIggh91WtX5PQf/IZu3krN2G0phB9zdgMeIBP0lZiZ

6n9J3okeOWaDLCUgtjRcyE4HcMwP3JX2HRG+ORV6w7P2s+08I66T/QVnRSqs0hytfr4r

rx9+1+Kg+6UDMbLSdRKHTAh2DjuvAeipEgY8jEs38HKF6JBamAj5wB+fXwHXW/hJ9NJk

CqnA==

X-Gm-Message-State: ANoB5pm1JV/SNVPrFTkrAL0KYZTucLOwdc1F7Dr4OFYpH/tGKwA7OUN9

i8YnrlO02lWKsrRf2m+LCDb9/yz89caHz9X+YRk=

X-Google-Smtp-Source: AA0mqf7E775eOgn0OLASFiyEdia5oVlcOUA/JlIAwPZ43Kfd7R4xAVEekFaqlO+UJBnP1o2JXsJxPw==

X-Received: by 2002:a05:6a20:a022:b0:ab:fb31:be13 with SMTP id p34-20020a056a20a02200b000abfb31be13mr19251909pzj.37.1670744205222;

Sat, 10 Dec 2022 23:36:45 -0800 (PST)

Received: from kzxxr (awork116212.netvigator.com. [203.198.99.212])

by smtp.gmail.com with ESMTPSA id ij28-20020a170902ab5c00b00177faf558b5sm3900527plb.250.2022.12.10.23.36.43

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Sat, 10 Dec 2022 23:36:44 -0800 (PST)

Message-ID: <6395888c.170a0220.94191.69d7@mx.google.com>

X-Google-Original-Message-ID: 84028B6459D844189A976C2D761E3C5C@kzxxr

From: "emma@blueskyalloy.com"

To:

Subject: First Choise for Precision Machining Parts

Date: Sun, 11 Dec 2022 15:36:43 +0800

Reply-To: emma@blueskyalloy.com

Disposition-Notification-To: emma@blueskyalloy.com

ReturnReceipt: 1

X-Priority: 3

X-MSMail-Priority: Normal

MIME-Version: 1.0

Content-type: multipart/alternative; boundary=fc912f649085e5b9e523ca57263c91ae

X-Mailer: Microsoft Outlook Express 6.00.3790.4657

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:

Dear Manager,

Nice to meet you.

Please allow

me to introduce our factory------Shenzhen Blue Sky Precision Technology

Co.,Ltd  shortly.

Why can we become your first [...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URIs: goodbomold.com]

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line

length greater than 79 characters

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} First Choise for Precision Machining Parts



This is a multi-part message in MIME format.



--fc912f649085e5b9e523ca57263c91ae

Content-type: text/plain;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg==

--fc912f649085e5b9e523ca57263c91ae

Content-type: text/html;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg==

--fc912f649085e5b9e523ca57263c91ae--