CRA INTERAC phish from strato in Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Feb 2023 05:23:35 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pRBNt-0000Gu-1V

for dave@doctor.nl2k.ab.ca;

Sun, 12 Feb 2023 05:23:09 -0700

Resent-From: The Doctor

Resent-Date: Sun, 12 Feb 2023 05:23:09 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns2.nl2k.ab.ca ([204.209.81.3]:55356 helo=gallifrey.nk.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pR4dz-0007po-1L

for root@nk.ca;

Sat, 11 Feb 2023 22:11:10 -0700

Received: from h2886325.stratoserver.net ([85.214.185.42]:59341 helo=gki.com)

by gallifrey.nk.ca with esmtp (Exim 4.96)

(envelope-from )

id 1pR4bq-0000RV-27

for news@gallifrey.nk.ca;

Sat, 11 Feb 2023 22:09:08 -0700

Reply-To:

From: Canada Revenue Agency - Agence du revenu du Canada

To: news@gallifrey.nk.ca

Subject: FINAL NOTICE: Deposit $2,860.58 CAD that was sent to you.

Date: 12 Feb 2023 06:08:25 +0100

Message-ID: <20230212060825.F1BD3E79A5028C0B@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERAC E-TRANSFER REFUND: #8697BN87 news@gallifrey.nk.ca,

You have received a refund of $2,860.58 CAD



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: createsend1.com]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[85.214.185.42 listed in zen.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[85.214.185.42 listed in bb.barracudacentral.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mahogany-frequent-capybara.glitch.me]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERAC E-TRANSFER REFUND: #8697BN87 news@gallifrey.nk.ca,

You have received a refund of $2,860.58 CAD



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[85.214.185.42 listed in bb.barracudacentral.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[85.214.185.42 listed in zen.spamhaus.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mahogany-frequent-capybara.glitch.me]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: createsend1.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} FINAL NOTICE: Deposit $2,860.58 CAD that was sent to you.






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">








" />




=3Dedge" />








0,700,400italic,700italic|Ubuntu:400,700,400italic,700italic" rel=3D"styles=

heet" type=3D"text/css">






padding: 0; margin: 0;

padding: 0;

-webkit-text-size-adjust: 100%; background-color:#ededf1" class=3D"full-p=

adding full-padding">




table-layout: fixed; border-collapse: collapse;

table-layout: fixed; min-width: 320px;

width: 100%; background-color:#ededf1" class=3D"wrapper" cellpadding=3D"0=

" cellspacing=3D"0" role=3D"presentation">





ease-in-out; max-width: 360px !important;

-fallback-width: 90% !important;

width: calc(100% - 60px) !important; Margin: 0 auto;

max-width: 560px;

min-width: 280px;

-fallback-width: 280px;

width: calc(28000% - 167440px)" class=3D"preheader">


display: table;

width: 100%" class=3D"preheader__inner--inline">




splay: table-cell;

Float: left;

font-size: 12px;

line-height: 19px;

max-width: 280px;

min-width: 140px;

-fallback-width: 140px;

width: calc(14000% - 78120px);

padding: 10px 0 5px 0; color:#7c7e7f; font-family:Ubuntu,sans-serif" clas=

s=3D"snippet">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20






splay: table-cell;

Float: left;

font-size: 12px;

line-height: 19px;

max-width: 280px;

min-width: 139px;

-fallback-width: 139px;

width: calc(14100% - 78680px);

padding: 10px 0 5px 0; text-align: right; color:#7c7e7f; font-family:Ubun=

tu,sans-serif" class=3D"webversion">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20










-container">
















ine">


display: table;

width: 100%" class=3D"layout__inner" emb-background-style=3D"">




s ease-in-out; max-width: 400px !important;

width: 100% !important" class=3D"column">

=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">

 




=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


mso-text-raise: 4px" class=3D"text--inline">

INTERAC E-TRANSFER REFUND: #8697B=

N87

news@gallifrey.nk.ca,


"text-align: left;">You have received a refund of $2,860.58 CAD 







=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


font-size: 2px;

line-height: 2px;

Margin-left: auto;

Margin-right: auto;

width: 40px; background-color:#b4b4c4" class=3D"divider"> 




=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">

 




=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


mso-text-raise: 4px" class=3D"text--inline">

Select your financial institution to deposit your money, this re=

fund expires on 12th February, 2023.







=20=20=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


mso-text-raise: 4px" class=3D"text--inline">

Kind Regards,
Jacinta McIntyre, Canada Revenue Agency







=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


font-style: normal;

font-weight: normal;

line-height: 19px" class=3D"image--inline" align=3D"left">


height: auto;

width: 100%; max-width:160px" alt=3D"" width=3D"160" src=3D"https://i1.cr=

eatesend1.com/resize/ti/t/78/34E/B40/eblogo/signature4cropped.png">





=20=20=20=20=20=20=20=20









=20=20


nt-size:20px;"> 


=20=20

=20=20=20=20=20=20






display: table;

width: 100%" class=3D"layout__inner">






Margin-right: 20px" class=3D"column__padding--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


line-height: 19px" class=3D"email-footer__address--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




line-height: 19px" class=3D"email-footer__permission--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20














Margin-right: 20px" class=3D"column__padding--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20














display: table;

width: 100%" class=3D"layout__inner">




25s ease-in-out; max-width: 400px !important;

width: 100% !important" class=3D"column">


Margin-right: 20px" class=3D"column__padding--inline">


line-height: 19px" class=3D"email-footer__subscription--inline">


lang=3D"en">Preferences  |  
scribe style=3D"text-decoration: underline;">Unsubscribe















 










CRA INTERAC phish from strato in Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Feb 2023 05:23:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pRBNM-000Pzt-0H

for dave@doctor.nl2k.ab.ca;

Sun, 12 Feb 2023 05:22:36 -0700

Resent-From: The Doctor

Resent-Date: Sun, 12 Feb 2023 05:22:36 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gallifrey.nk.ca ([204.209.81.3]:36907)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pR2NE-00022E-0w

for doctor@nk.ca;

Sat, 11 Feb 2023 19:45:43 -0700

Received: from h2886325.stratoserver.net ([85.214.185.42]:65387 helo=gki.com)

by gallifrey.nk.ca with esmtp (Exim 4.96)

(envelope-from )

id 1pR2L5-000Oa7-1q

for root@gallifrey.nk.ca;

Sat, 11 Feb 2023 19:43:41 -0700

Reply-To:

From: Canada Revenue Agency - Agence du revenu du Canada

To: root@gallifrey.nk.ca

Subject: FINAL NOTICE: Deposit $2,860.58 CAD that was sent to you.

Date: 12 Feb 2023 03:42:58 +0100

Message-ID: <20230212034258.3831CBC44FB3F197@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERAC E-TRANSFER REFUND: #8697BN87 root@gallifrey.nk.ca,

You have received a refund of $2,860.58 CAD



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[85.214.185.42 listed in zen.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[85.214.185.42 listed in bb.barracudacentral.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: createsend1.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mahogany-frequent-capybara.glitch.me]

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INTERAC E-TRANSFER REFUND: #8697BN87 root@gallifrey.nk.ca,

You have received a refund of $2,860.58 CAD



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[85.214.185.42 listed in bb.barracudacentral.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mahogany-frequent-capybara.glitch.me]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[85.214.185.42 listed in zen.spamhaus.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: createsend1.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} FINAL NOTICE: Deposit $2,860.58 CAD that was sent to you.






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">








" />




=3Dedge" />








0,700,400italic,700italic|Ubuntu:400,700,400italic,700italic" rel=3D"styles=

heet" type=3D"text/css">






padding: 0; margin: 0;

padding: 0;

-webkit-text-size-adjust: 100%; background-color:#ededf1" class=3D"full-p=

adding full-padding">




table-layout: fixed; border-collapse: collapse;

table-layout: fixed; min-width: 320px;

width: 100%; background-color:#ededf1" class=3D"wrapper" cellpadding=3D"0=

" cellspacing=3D"0" role=3D"presentation">





ease-in-out; max-width: 360px !important;

-fallback-width: 90% !important;

width: calc(100% - 60px) !important; Margin: 0 auto;

max-width: 560px;

min-width: 280px;

-fallback-width: 280px;

width: calc(28000% - 167440px)" class=3D"preheader">


display: table;

width: 100%" class=3D"preheader__inner--inline">




splay: table-cell;

Float: left;

font-size: 12px;

line-height: 19px;

max-width: 280px;

min-width: 140px;

-fallback-width: 140px;

width: calc(14000% - 78120px);

padding: 10px 0 5px 0; color:#7c7e7f; font-family:Ubuntu,sans-serif" clas=

s=3D"snippet">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20






splay: table-cell;

Float: left;

font-size: 12px;

line-height: 19px;

max-width: 280px;

min-width: 139px;

-fallback-width: 139px;

width: calc(14100% - 78680px);

padding: 10px 0 5px 0; text-align: right; color:#7c7e7f; font-family:Ubun=

tu,sans-serif" class=3D"webversion">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20










-container">
















ine">


display: table;

width: 100%" class=3D"layout__inner" emb-background-style=3D"">




s ease-in-out; max-width: 400px !important;

width: 100% !important" class=3D"column">

=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">

 




=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


mso-text-raise: 4px" class=3D"text--inline">

INTERAC E-TRANSFER REFUND: #8697B=

N87

root@gallifrey.nk.ca,


"text-align: left;">You have received a refund of $2,860.58 CAD 







=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


font-size: 2px;

line-height: 2px;

Margin-left: auto;

Margin-right: auto;

width: 40px; background-color:#b4b4c4" class=3D"divider"> 




=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">

 




=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


mso-text-raise: 4px" class=3D"text--inline">

Select your financial institution to deposit your money, this re=

fund expires on 12th February, 2023.







=20=20=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


mso-text-raise: 4px" class=3D"text--inline">

Kind Regards,
Jacinta McIntyre, Canada Revenue Agency







=20=20=20=20=20=20=20=20


Margin-right: 20px" class=3D"column__padding--inline">


font-style: normal;

font-weight: normal;

line-height: 19px" class=3D"image--inline" align=3D"left">


height: auto;

width: 100%; max-width:160px" alt=3D"" width=3D"160" src=3D"https://i1.cr=

eatesend1.com/resize/ti/t/78/34E/B40/eblogo/signature4cropped.png">





=20=20=20=20=20=20=20=20









=20=20


nt-size:20px;"> 


=20=20

=20=20=20=20=20=20






display: table;

width: 100%" class=3D"layout__inner">






Margin-right: 20px" class=3D"column__padding--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


line-height: 19px" class=3D"email-footer__address--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




line-height: 19px" class=3D"email-footer__permission--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20














Margin-right: 20px" class=3D"column__padding--inline">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20














display: table;

width: 100%" class=3D"layout__inner">




25s ease-in-out; max-width: 400px !important;

width: 100% !important" class=3D"column">


Margin-right: 20px" class=3D"column__padding--inline">


line-height: 19px" class=3D"email-footer__subscription--inline">


lang=3D"en">Preferences  |  
scribe style=3D"text-decoration: underline;">Unsubscribe















 










UPS phish from Japan

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Feb 2023 17:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pR0Zm-000Ne9-01

for dave@doctor.nl2k.ab.ca;

Sat, 11 Feb 2023 17:50:42 -0700

Resent-From: The Doctor

Resent-Date: Sat, 11 Feb 2023 17:50:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [163.43.106.129] (port=40114 helo=belicoun.co.jp)

by doctor.nl2k.ab.ca with smtp (Exim 4.96)

(envelope-from )

id 1pQz8H-000JPU-1j

for root@nk.ca;

Sat, 11 Feb 2023 16:18:10 -0700

Received: (qmail 31238 invoked by uid 509); 12 Feb 2023 08:16:00 +0900

Received: from unknown (HELO EC2AMAZ-0VK8KQ2) (yamamoto@belicoun.co.jp@13.208.142.172)

by 0 with SMTP; 12 Feb 2023 08:16:00 +0900

MIME-Version: 1.0

From: =?utf-8?Q?=C2=BACustomer_Service?=

To: root@nk.ca

Date: 11 Feb 2023 23:16:00 +0000

Subject: =?utf-8?B?wq5VUFMgU2hpcG1lbnQgTm90aWZpY2F0aW9uIC8gTm90aWZp?=

=?utf-8?B?Y2F0aW9uIGTigJlleHBlZGl0aW9uIFVQUw==?=

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64



PFA+DQo8VEFCTEUgc3R5bGU9IkJPUkRFUi1UT1A6IHJnYigyMDQsMjA0LDIwNCkgMXB4

IHNvbGlkOyBCT1JERVItUklHSFQ6IHJnYigyMDQsMjA0LDIwNCkgMXB4IHNvbGlkOyBX

SURUSDogMTAwJTsgQk9SREVSLUNPTExBUFNFOiBjb2xsYXBzZTsgQk9SREVSLUJPVFRP

TTogcmdiKDIwNCwyMDQsMjA0KSAxcHggc29saWQ7IEJPUkRFUi1MRUZUOiByZ2IoMjA0

LDIwNCwyMDQpIDFweCBzb2xpZCIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdp

ZHRoPSIxMDAlIiBib3JkZXI9MD4NCjxUSEVBRD4NCjxUUj4NCjxUSCBzdHlsZT0nRk9O

VC1TSVpFOiAxNnB4OyBGT05ULUZBTUlMWTogImFyaWFsIiwgc2Fucy1zZXJpZjsgRk9O

VC1XRUlHSFQ6IGJvbGQ7IENPTE9SOiByZ2IoMTAyLDEwMiwxMDIpOyBQQURESU5HLUJP

VFRPTTogMTVweDsgVEVYVC1BTElHTjogbGVmdDsgUEFERElORy1UT1A6IDE1cHg7IFBB

RERJTkctTEVGVDogMjBweDsgTElORS1IRUlHSFQ6IDE4cHg7IFBBRERJTkctUklHSFQ6

IDIwcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyMDQsMjA0LDIwNCknPjxTUEFOIGlk

PXhfeF9oZWFkbGluZSB0aXRsZT1IZWFkbGluZSBzdHlsZT0iTElORS1IRUlHSFQ6IG5v

cm1hbCI+WW91ciBwYWNrYWdlIGlzIGluIHRyYW5zaXQqPC9TUEFOPjwvVEg+PC9UUj48

L1RIRUFEPg0KPFRCT0RZPg0KPFRSPg0KPFREIHN0eWxlPSdGT05ULVNJWkU6IDE2cHg7

IEZPTlQtRkFNSUxZOiAiYXJpYWwiLCBzYW5zLXNlcmlmOyBQQURESU5HLUJPVFRPTTog

MTBweDsgVEVYVC1BTElHTjogbGVmdDsgUEFERElORy1UT1A6IDEwcHg7IFBBRERJTkct

TEVGVDogMjBweDsgUEFERElORy1SSUdIVDogMjBweDsgQkFDS0dST1VORC1DT0xPUjog

cmdiKDI1NSwyNTUsMjU1KSc+DQo8UCBzdHlsZT0iTUFSR0lOOiA1cHggMHB4Ij48U1BB

TiByb2xlPWxpbmsgaWQ9T0JKX1BSRUZJWF9EV1Q1MjRfY29tX3ppbWJyYV91cmwgY2xh

c3M9T2JqZWN0PjxTUEFOIHJvbGU9bGluayBpZD1PQkpfUFJFRklYX0RXVDUzM19jb21f

emltYnJhX3VybCBjbGFzcz1PYmplY3Q+PFNQQU4gaWQ9eF94X3NoaXBwZXJBbmRBcnJp

dmFsIHRpdGxlPSJTaGlwcGVyIEFuZCBBcnJpdmFsIiBzdHlsZT0iTElORS1IRUlHSFQ6

IDEiPjxJTUcgc3R5bGU9IkZPTlQtU0laRTogMTZweDsgRk9OVC1GQU1JTFk6IFJvYm90

byAsVGFob21hICxBcmlhbCAsSGVsdmV0aWNhICxzYW5zLXNlcmlmOyBDT0xPUjogcmdi

KDYsOTgsMTg3KTsgRElTUExBWTogYmxvY2siIGJvcmRlcj0wIGFsdD1VUFMgc3JjPSJo

dHRwczovL3d3dy51cHMuY29tL2Fzc2V0cy9yZXNvdXJjZXMvaW1hZ2VzL1VQU19sb2dv

LnBuZyIgd2lkdGg9NzEgaGVpZ2h0PTcxIGRhdGEtaW1hZ2V0eXBlPSJFeHRlcm5hbCI+

PC9TUEFOPjwvU1BBTj48L1NQQU4+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogNXB4IDBw

eCI+PFNQQU4gcm9sZT1saW5rIGNsYXNzPU9iamVjdD48U1BBTiByb2xlPWxpbmsgY2xh

c3M9T2JqZWN0PjxTUEFOIHRpdGxlPSJTaGlwcGVyIEFuZCBBcnJpdmFsIiBzdHlsZT0i

TElORS1IRUlHSFQ6IDEiPjwvU1BBTj48L1NQQU4+PC9TUEFOPiZuYnNwOzwvUD4NCjxQ

IHN0eWxlPSJNQVJHSU46IDVweCAwcHgiPjxTUEFOIHJvbGU9bGluayBjbGFzcz1PYmpl

Y3Q+PFNQQU4gcm9sZT1saW5rIGNsYXNzPU9iamVjdD48U1BBTiB0aXRsZT0iU2hpcHBl

ciBBbmQgQXJyaXZhbCIgc3R5bGU9IkxJTkUtSEVJR0hUOiAxIj5Gcm9tOjxTVFJPTkc+

Jm5ic3A7VVBTIFBPSU5UJm5ic3A7Q0VOVEVSPC9TVFJPTkc+Jm5ic3A7PC9TUEFOPjwv

U1BBTj48L1NQQU4+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogNXB4IDBweCI+PFNQQU4g

cm9sZT1saW5rIGNsYXNzPU9iamVjdD48U1BBTiByb2xlPWxpbmsgY2xhc3M9T2JqZWN0

PjxTUEFOIHRpdGxlPSJTaGlwcGVyIEFuZCBBcnJpdmFsIiBzdHlsZT0iTElORS1IRUlH

SFQ6IDEiPjxTUEFOIGlkPXhfeF9kZWxpdmVyeURhdGVUaW1lTGFiZWwgdGl0bGU9IkRl

bGl2ZXJ5IE1lc3NhZ2UiIHN0eWxlPSJMSU5FLUhFSUdIVDogMSI+TWlzc2VkJm5ic3A7

ZGVsaXZlcnk6IFNBVFVSREFZIDExLzAyLzIwMjM8L1NQQU4+PC9TUEFOPjwvU1BBTj48

L1NQQU4+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogNXB4IDBweCI+PFNQQU4gcm9sZT1s

aW5rIGNsYXNzPU9iamVjdD48U1BBTiByb2xlPWxpbmsgY2xhc3M9T2JqZWN0PjxTUEFO

IHRpdGxlPSJTaGlwcGVyIEFuZCBBcnJpdmFsIiBzdHlsZT0iTElORS1IRUlHSFQ6IDEi

PjxTUEFOIHRpdGxlPSJEZWxpdmVyeSBNZXNzYWdlIiBzdHlsZT0iTElORS1IRUlHSFQ6

IDEiPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj4mbmJzcDs8L1A+PFNQQU4gcm9s

ZT1saW5rIGNsYXNzPU9iamVjdD48U1BBTiByb2xlPWxpbmsgY2xhc3M9T2JqZWN0PjxT

UEFOIHRpdGxlPSJTaGlwcGVyIEFuZCBBcnJpdmFsIiBzdHlsZT0iTElORS1IRUlHSFQ6

IDEiPjxTUEFOIHRpdGxlPSJEZWxpdmVyeSBNZXNzYWdlIiBzdHlsZT0iTElORS1IRUlH

SFQ6IDEiPg0KPFAgc3R5bGU9Ik1BUkdJTjogNXB4IDBweCI+DQo8VEFCTEUgcm9sZT1w

cmVzZW50YXRpb24gY2xhc3M9eF94X3lpdjA4Njk0NzMwNDhwY3RhLWJ0biBjZWxsU3Bh

Y2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9MjQwIGJvcmRlcj0wPg0KPFRCT0RZPg0K

PFRSIGhlaWdodD00MT4NCjxURCBzdHlsZT0iTUFYLVdJRFRIOiAyNDBweDsgQk9SREVS

LVRPUDogdHJhbnNwYXJlbnQgMXB4IHNvbGlkOyBCT1JERVItUklHSFQ6IHRyYW5zcGFy

ZW50IDFweCBzb2xpZDsgTUlOLVdJRFRIOiAyNDBweDsgQk9SREVSLUJPVFRPTTogdHJh

bnNwYXJlbnQgMXB4IHNvbGlkOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRP

UDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IHRyYW5zcGFyZW50

IDFweCBzb2xpZDsgUEFERElORy1SSUdIVDogMHB4OyBib3JkZXItcmFkaXVzOiAzMHB4

IiBiZ0NvbG9yPSNmZmM0MDAgd2lkdGg9MjM2IGFsaWduPWNlbnRlcj4NCjxESVYgaWQ9

eF94X3lpdjA4Njk0NzMwNDhjdGEgdGl0bGU9QnV0dG9uIGNsYXNzPSJ4X3hfeWl2MDg2

OTQ3MzA0OG1rdG9UZXh0IHhfeF95aXYwODY5NDczMDQ4cGN0YS1idG4iIHN0eWxlPSJC

T1JERVItVE9QOiAjZmZjNDAwIDFweCBzb2xpZDsgRk9OVC1GQU1JTFk6ICdSb2JvdG8n

LFRhaG9tYSxBcmlhbCxIZWx2ZXRpY2Esc2Fucy1zZXJpZiAhaW1wb3J0YW50OyBCT1JE

RVItUklHSFQ6ICNmZmM0MDAgMXB4IHNvbGlkOyBCT1JERVItQk9UVE9NOiAjZmZjNDAw

IDFweCBzb2xpZDsgRk9OVC1XRUlHSFQ6IGJvbGQ7IFBBRERJTkctQk9UVE9NOiA1cHg7

IFRFWFQtQUxJR046IGNlbnRlcjsgUEFERElORy1UT1A6IDVweDsgUEFERElORy1MRUZU

OiAwcHg7IEJPUkRFUi1MRUZUOiAjZmZjNDAwIDFweCBzb2xpZDsgTUFSR0lOOiAwcHgg

YXV0bzsgUEFERElORy1SSUdIVDogMHB4OyBCQUNLR1JPVU5ELUNPTE9SOiAjZmZjNDAw

OyBib3JkZXItcmFkaXVzOiAzMHB4Ij48QSBjbGFzcz14X3hfeWl2MDg2OTQ3MzA0OG1v

YmlsZS1idXR0b24gc3R5bGU9IlRFWFQtREVDT1JBVElPTjogbm9uZTsgQ09MT1I6ICMx

MjEyMTI7IFBBRERJTkctQk9UVE9NOiA1cHg7IFBBRERJTkctVE9QOiA1cHg7IFBBRERJ

TkctTEVGVDogMHB4OyBESVNQTEFZOiBibG9jazsgUEFERElORy1SSUdIVDogMHB4IiBo

cmVmPSJodHRwOi8vaHlha29tLml0bWFya2V0ZHViYWkuY29tL3dwLWNvbnRlbnQvY2xp

ZW50LzQ/bG9jPWVuX0NBJmFtcDtSZXF1ZXN0ZXI9U0JOJmFtcDt0cmFja251bT0xWjc0

RjIwRTY4MDkxMTY1NzYmYW1wO0FncmVlVG9UZXJtc0FuZENvbmRpdGlvbnM9eWVzJmFt

cDtXVC56X2VDVEFpZD1jdDFfZW1sX1RyYWNraW5nX19jdDFfZW1sX3RyYV9lbWxfYXV0

b2RlbCZhbXA7V1Quel9lZGF0ZXNlbnQ9MTIxNDIwMjIiIHJlbD0ibm9mb2xsb3cgbm9v

cGVuZXIgbm9yZWZlcnJlciIgdGFyZ2V0PV9ibGFuayBkYXRhLWF1dGg9Ik5vdEFwcGxp

Y2FibGUiIGRhdGEtbGlua2luZGV4PSIwIj5UcmFjayBUaGlzIE9yZGVyJm5ic3A74oC6

4oC6PC9BPiA8L0RJVj48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvUD4NCjxQIHN0

eWxlPSJNQVJHSU46IDVweCAwcHgiPiZuYnNwOzwvUD4NCjxQIHN0eWxlPSJNQVJHSU46

IDVweCAwcHgiPjxTUEFOIGlkPXhfeF9zZXJ2aWNlTmFtZSB0aXRsZT0iU2VydmljZSBO

YW1lIiBzdHlsZT0iTElORS1IRUlHSFQ6IDEiPlVQUyBCdXNzaW5lcyBQYXJjZWw6IDxT

UEFOIGlkPXhfeF90cmFja2luZ051bWJlciB0aXRsZT0iVHJhY2tpbmcgTnVtYmVyIiBz

dHlsZT0iTElORS1IRUlHSFQ6IDEiPjFaNjFWMEU0NTQzNDE0OTA8L1NQQU4+PC9TUEFO

PjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDVweCAwcHgiPjxTUEFOIHRpdGxlPSJTZXJ2

aWNlIE5hbWUiIHN0eWxlPSJMSU5FLUhFSUdIVDogMSI+PFNQQU4gdGl0bGU9IlRyYWNr

aW5nIE51bWJlciIgc3R5bGU9IkxJTkUtSEVJR0hUOiAxIj5yZWdpc3RlcmVkIGN1c3Rv

bWVyOiByb290QG5rLmNhPC9TUEFOPjwvU1BBTj48L1A+DQo8UCBzdHlsZT0iTUFSR0lO

OiA1cHggMHB4Ij48U1BBTiB0aXRsZT0iU2VydmljZSBOYW1lIiBzdHlsZT0iTElORS1I

RUlHSFQ6IDEiPjxTUEFOIHRpdGxlPSJUcmFja2luZyBOdW1iZXIiIHN0eWxlPSJMSU5F

LUhFSUdIVDogMSI+PC9TUEFOPjwvU1BBTj4mbmJzcDs8L1A+DQo8UCBzdHlsZT0iTUFS

R0lOOiA1cHggMHB4Ij48U1BBTiB0aXRsZT0iU2VydmljZSBOYW1lIiBzdHlsZT0iTElO

RS1IRUlHSFQ6IDEiPjxTUEFOIHRpdGxlPSJUcmFja2luZyBOdW1iZXIiIHN0eWxlPSJM

SU5FLUhFSUdIVDogMSI+PFNUUk9ORz5XZSBhdHRlbXB0ZWQgdG8mbmJzcDtkZWxpdmVy

IHlvdXIgcGFyY2VsIHRvZGF5LCBidXQgeW91ciZuYnNwO3JlZ2lzdGVyZWQgZnJvbSBh

ZGRyZXNzIGlzIGluY29tcGxldGUhPC9TVFJPTkc+PC9TUEFOPjwvU1BBTj48L1A+PC9T

UEFOPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+

DQo8VEFCTEUgc3R5bGU9IldJRFRIOiAxMDAlOyBCT1JERVItQ09MTEFQU0U6IGNvbGxh

cHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGJvcmRl

cj0wPg0KPFRCT0RZPg0KPFRSPg0KPFREIHN0eWxlPSdGT05ULVNJWkU6IDEycHg7IEZP

TlQtRkFNSUxZOiAiYXJpYWwiLCBzYW5zLXNlcmlmOyBDT0xPUjogcmdiKDEwMiwxMDIs

MTAyKTsgUEFERElORy1CT1RUT006IDEwcHg7IFRFWFQtQUxJR046IGxlZnQ7IFBBRERJ

TkctVE9QOiAxMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgUEFERElORy1SSUdIVDogMHB4

OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpJz4NCjxQPlBsZWFzZSBk

byBub3QgcmVwbHkgdG8gdGhpcyBtZXNzYWdlLjwvUD48QlI+DQo8UCBzdHlsZT0iRk9O

VC1TSVpFOiAxMnB4Ij7CqSAyMDIzIFNoYXcgQ29tbXVuaWNhdGlvbnMgSW5jLiBBbGwg

UmlnaHRzIFJlc2VydmVkLjwvUD48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvUD4=