McAfee phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Jul 2023 16:14:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJLcL-0007Np-33

for dave@doctor.nl2k.ab.ca;

Tue, 11 Jul 2023 16:13:57 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Jul 2023 16:13:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f174.google.com ([209.85.160.174]:54509)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJH2l-000IOq-2Y

for doctor@nk.ca;

Tue, 11 Jul 2023 11:20:58 -0600

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-401e23045beso48298551cf.0

for ; Tue, 11 Jul 2023 10:19:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1689095944; x=1691687944;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=c+NEQLFdVCNzP/fEQ3y6mzWHGF4orclozEQRuZye0yg=;

b=lHyMcq7+aw94cf0Jq49xO3bkjL7B7HxEX95eT+L5lZ9cLa8fYA3sVPqp60YtfLa3Sx

IxMJ11IdUJqBdHL0/CKZPNPNXt7GBYf+Qrp+M09GJ6mdxh1aqOBy/q8Dkqghng86F2pv

U9Ld618YCBqUixAP8HYC1Ru/NXK8f9uNYeErieB+2BsPeDpgzujcOeE7IcuJ8YXnvq0D

AB1RU99UdIPpksAaeXgd537xBBY+SALZd91QNKK1uWcgC0ZvX4jqJLOdhLREfpkwAO87

a/jbU42QWd7SgYGwXy4neuHqrgk9VXFtjHpEwcdlxb+Jj1JIRKa09t/ZAhnCgP9P9L85

vykA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1689095944; x=1691687944;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=c+NEQLFdVCNzP/fEQ3y6mzWHGF4orclozEQRuZye0yg=;

b=hYPLmzlVXliH62upJHBg/sGNPlfG3RZOYACK4Oq+jiN7XRhxmRECX51tcY3hVG5/lw

M63Lz8cc895PNufQW1TFmGxWwPk1arZ37fb4aZjAQD4BCJjIyETZGQ2cKhyxAE/998x8

7Qz2JUjSRNWedsvkoUBdX/vNSIei6UGAqRnOpLGmRrYfB3OVUx1Y83j+eVx/HoaR/O26

bWau+DVtg3zzxBnE3Mg0TyJq1Fkk3yM1uGmd/WY7Sg2sgk3ilxx2SzeeXyoEkxdpU6uI

Zma6752/PyK7pENMBzDZIaMFVKWWY1FIDYuG9HxbR+Xfy+rovcosevy4M/KJeDPs5Q5E

eW2Q==

X-Gm-Message-State: ABy/qLZGXj25c+zsS2tN4ByGHdCWHAlAzCW74huG9ZHfdPj10sMlc9g1

8Zwkp0Nb2Lp4Pt/hVKa8uQcQdDZvifG0/DXrk7ElHw==

X-Google-Smtp-Source: APBJJlE7ihfPI92azeEWuagZCEGUX3J4X4CUjIpestjffbps4FrAl8Hau5SPLb5uCji7fDr3yno2fw==

X-Received: by 2002:a05:622a:1191:b0:403:a91f:7984 with SMTP id m17-20020a05622a119100b00403a91f7984mr11264853qtk.11.1689095943835;

Tue, 11 Jul 2023 10:19:03 -0700 (PDT)

Received: from 45.88.220.127 ([45.88.220.127])

by smtp.gmail.com with ESMTPSA id f34-20020a05622a1a2200b003f872332a9asm1286126qtb.64.2023.07.11.10.19.02

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 11 Jul 2023 10:19:03 -0700 (PDT)

Message-ID: <64ad8f07.050a0220.a6a2c.47e6@mx.google.com>

From: "Valerie W. Redman"

Subject: Device Code*30937402

To: "doctor"

Content-Type: multipart/alternative; boundary="oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df"

MIME-Version: 1.0

Date: Tue, 11 Jul 2023 22:49:03 +0530

X-Antivirus: AVG (VPS 230711-4, 7/11/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline





Hello there, doctor@nk.ca



Thank you again for your =CE=BFrder!



We are glad to see you registering with us and ch=CE=BF=CE=BFsing us a=

s your preferred PC Care and Network Security provider.



This year's subscription plan renewed on July 11, 2023, and it will be=

valid until July 10, 2024, unless you choose to unsubscribe or drop t=

he charges.



The annual fee of $ 379.99 has been automatically withdrawn from the s=

ame payment source updated in our records, which will reflect on the s=

tatement shortly.



=CE=91nnual Subscription and =CE=9Frder =CE=99nformation:



Customer Unique ID: 94737-88744

Seller's name: MCAfee Total Corp.

Devices covered: 5 devices only.

=CE=A1ayment mode: Auto debit

Order Total: $ 379.99



=CE=A1lease be noted that the annual recurring charge will be automati=

cally debited every year until you decide to cancel, as you opted for =

auto-debit payments last year.



For Cancellation or Refund, please feel free to contact us toll-free a=

t +1 (888) 681-8319.



=20



We hope to see you again soon



Courtney Josselyn

Customer Support Dept. (=CE=9Canager)

Toll-free Number: +1 (888) 681-8319.





--oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">
r: rgb(235, 235, 235);">


form: none; text-indent: 0px; letter-spacing: normal; font-family: "Ti=

mes New Roman"; font-size: medium; font-style: normal; font-weight: 40=

0; margin-bottom: 10px !important; word-spacing: 0px; white-space: nor=

mal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial; text-decoration-color: =

initial;'>Hello there,  doctor@nk.ca


, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: nor=

mal; font-family: "Times New Roman"; font-size: medium; font-style: no=

rmal; font-weight: 400; margin-bottom: 10px !important; word-spacing: =

0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; te=

xt-decoration-color: initial;'>Thank you again for your =CE=BFrder!
>


: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-si=

ze: medium; font-style: normal; font-weight: 400; margin-bottom: 10px =

!important; word-spacing: 0px; white-space: normal; orphans: 2; widows=

: 2; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial;'>We are glad t=

o see you registering with us and ch=CE=BF=CE=BFsing us as your prefer=

red PC Care and Network Security provider.


7, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: no=

rmal; font-family: "Times New Roman"; font-size: medium; font-style: n=

ormal; font-weight: 400; margin-bottom: 10px !important; word-spacing:=

0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatur=

es: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial;'>This year's subscription plan renewed =

on July 11, 2023, and it will be valid until July 10, 2024, unless you=

choose to unsubscribe or drop the charges.


37, 37, 37); text-transform: none; text-indent: 0px; letter-spacing: n=

ormal; font-family: "Times New Roman"; font-size: medium; font-style: =

normal; font-weight: 400; margin-bottom: 10px !important; word-spacing=

: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial;'>The annual fee of $ 379.99 has been a=

utomatically withdrawn from the same payment source updated in our rec=

ords, which will reflect on the statement shortly.


r: rgb(37, 37, 37); text-transform: none; text-indent: 0px; letter-spa=

cing: normal; font-family: "Times New Roman"; font-size: medium; font-=

style: normal; font-weight: 400; margin-bottom: 10px !important; word-=

spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: in=

itial; text-decoration-color: initial;'>
700;">=CE=91

ght: 700;">nnual Subscription and =CE=9Frder =CE=99nformation:
>


dent: 0px; letter-spacing: normal; font-family: "Times New Roman"; fon=

t-size: medium; font-style: normal; font-weight: 400; margin-bottom: 1=

0px !important; word-spacing: 0px; white-space: normal; orphans: 2; wi=

dows: 2; font-variant-ligatures: normal; font-variant-caps: normal; -w=

ebkit-text-stroke-width: 0px; text-decoration-thickness: initial; text=

-decoration-style: initial; text-decoration-color: initial;'>Customer =

Unique ID: 94737-02333
Seller's n=

ame: MCAfee Total Corp.
Devices c=

overed: 5 devices only.
=CE=A1aym=

ent mode: Auto debit
Order Total:=

$ 379.99


text-indent: 0px; letter-spacing: normal; font-family: "Times New Rom=

an"; font-size: medium; font-style: normal; font-weight: 400; margin-b=

ottom: 10px !important; word-spacing: 0px; white-space: normal; orphan=

s: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps: no=

rmal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initi=

al; text-decoration-style: initial; text-decoration-color: initial;'>=CE=

=A1lease be noted that the annual recurring charge will be automatical=

ly debited every year until you decide to cancel, as you opted for aut=

o-debit payments last year.


t-transform: none; text-indent: 0px; letter-spacing: normal; font-fami=

ly: "Times New Roman"; font-size: medium; font-style: normal; font-wei=

ght: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'>For Cancellation or Refund, please feel free to conta=

ct us toll-free at 
7, 37); font-weight: 700;">+1 =

(888) 681-8319.


text-transform: none; text-indent: 0px; letter-spacing: normal; font-=

family: "Times New Roman"; font-size: medium; font-style: normal; font=

-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; white=

-space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decor=

ation-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;'> 


t-transform: none; text-indent: 0px; letter-spacing: normal; font-fami=

ly: "Times New Roman"; font-size: medium; font-style: normal; font-wei=

ght: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;'>Best regards,


text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: "Times New Roman"; font-size: medium; font-style: normal; font-=

weight: 400; margin-bottom: 10px !important; word-spacing: 0px; white-=

space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decora=

tion-thickness: initial; text-decoration-style: initial; text-decorati=

on-color: initial;'>reshad james
=

Customer Support Dept. (=CE=9Canager)

7);">Toll-free Number: 
7, 37, 37); font-weight: 700;">
>+1 (888) 681-8319.



>





--oMiCUXwmYRZMEh7i=_Lg3qUhyfsjbjc0Df--



UPS Phish from pphosted.com Atlanta Georgia

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Jul 2023 10:39:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJGNN-000INi-1N

for dave@doctor.nl2k.ab.ca;

Tue, 11 Jul 2023 10:38:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Jul 2023 10:38:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx0a-002b8002.pphosted.com ([148.163.135.227]:12912)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJGLh-000FWc-2s

for root@nk.ca;

Tue, 11 Jul 2023 10:36:30 -0600

Received: from pps.filterd (m0157144.ppops.net [127.0.0.1])

by mx0a-002b8002.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 36BFlUtX038914

for ; Tue, 11 Jul 2023 12:34:41 -0400

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ups.com; h=from : to : subject :

mime-version : content-type : date : message-id; s=nespps1;

bh=ETSZzk9JQVXKO8PqKTvvHuEMP8cPhfg8FBaUtTYo1ww=;

b=vtuzBFP7sTc3LRXPJHMYsfQ/tE5tnBb963BY3IeLuSX2QG63sN1AZQ9dTe7lrm0UtneT

++00ZyG96ZqZcHqxnqdlcaMyuQ3XdJ2nRhftkzfYoNktdMiYY6YkQ6qHZbLtN9q9g0Pn

ui1WADjAU9bOvCI4za3d4hx7vOvoo30uJsMMhmAQJE/gqfoDQqYv16I1hi8td9fgmscS

6UGJ7GZTr0HbWNScPYbXZvrOquAzr1N+6oUr0jNA0S16mygyLC0ycXiuRG10lr6tWfZL

cDlRan/HU6ueO+GO1+z9LVHg0WDAmNnUoJ7+T+I3UDbkPqFlfSNVcu64Wh4Oo+mGmur1 fg==

Received: from njppsappsagent10.ups.com (njppsappsagent10.ups.com [153.2.233.31])

by mx0a-002b8002.pphosted.com (PPS) with ESMTPS id 3rq4d640ey-1

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)

for ; Tue, 11 Jul 2023 12:34:40 -0400

Received: from pps.filterd (njppsappsagent10.ups.com [127.0.0.1])

by njppsappsagent10.ups.com (8.17.1.19/8.17.1.19) with ESMTP id 36BG6pch030265

for ; Tue, 11 Jul 2023 12:34:36 -0400

Received: from njrarlpapp001cd.linux.us.ups.com (njrarlpapp001cd.ups.com [153.2.242.195])

by njppsappsagent10.ups.com (PPS) with ESMTPS id 3rq34r2bhm-1

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)

for ; Tue, 11 Jul 2023 12:34:36 -0400

From: "UPS"

To: root@nk.ca

Subject: UPS Update: Package Scheduled for Delivery Today

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary=----NextPart_1689093275831.0000362190

Date: Tue, 11 Jul 2023 12:34:35 -0400 (EDT)

Message-ID: <979090479.493959.1689093275848.JavaMail.beawl@mahsmtpappspp.ups.com>

X-Proofpoint-Virus-Version: vendor=nai engine=6500 definitions=10768 signatures=596816

X-Antivirus: AVG (VPS 230711-2, 7/11/2023), Inbound message

X-Antivirus-Status: Clean



------NextPart_1689093275831.0000362190

Content-Type: text/html; charset=UTF-8











UPS















































































































































------NextPart_1689093275831.0000362190--

phish from yourbestnetwork.net Warsaw

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 11 Jul 2023 09:00:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJEpx-000CpE-0r

for dave@doctor.nl2k.ab.ca;

Tue, 11 Jul 2023 08:59:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 11 Jul 2023 08:59:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.83.196.100] (port=47213 helo=inbox0.zyz46.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qJ8O1-00079v-2Y

for doctor@nl2k.ab.ca;

Tue, 11 Jul 2023 02:06:21 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=zyz46.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:List-Unsubscribe:Content-Type:

Content-Transfer-Encoding; i=admin03655@zyz46.com;

bh=zyqsjPhpCT6RzhneR+xlBeWfpCG5Udj5xBivWBbgEW4=;

b=BpJkyHKnxtOsdLVQK215dxu54+RkhFSqYpQgzRbmj8wZUqh5HU5e20hUNDZd5U6HJp4JPtC23dY/

bv0on/atSY9mn6asB58J6pKj0+a0Y1okGo78uF+RB9qZpWQuFcaDFPDrlpTWJnKC4ZUPfeV1dDXZ

Q8z2Wv7p1pVDcTmBkF4=

From: Nl2K ServiceDesk

To: doctor@nl2k.ab.ca

Subject: Verify your identity

Date: 11 Jul 2023 10:55:48 +0300

Message-ID: <20230711105548.0ED955FD50E1D52B@zyz46.com>

MIME-Version: 1.0

List-Unsubscribe:

Content-Type: text/html

Content-Transfer-Encoding: base64

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: System upgrade notification for “doctor@nl2k.ab.ca”.

Hello doctor@nl2k.ab.ca We are upgrading our system to provide the best experience

and keep you protected.



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[77.83.196.100 listed in ix.dnsbl.manitu.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: adlbi0pharma.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.4 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

1.3 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -

probable phishing

Subject: {SPAM?} Verify your identity

X-Antivirus: AVG (VPS 230711-0, 7/10/2023), Inbound message

X-Antivirus-Status: Clean



PEhUTUw+PEhFQUQ+DQo8TUVUQSBuYW1lPUdFTkVSQVRPUiBjb250ZW50PSJNU0hUTUwgMTEu

MDAuMTA1NzAuMTAwMSI+PC9IRUFEPg0KPEJPRFk+DQo8VEFCTEUgc3R5bGU9Ik1BWC1XSURU

SDogNjgwcHg7IEJPUkRFUi1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IEJPUkRFUi1C

T1RUT006IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI0

NCwyNDQsMjQ0KSIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdpZHRoPTY4MCBib3Jk

ZXI9MD4NCjxUQk9EWT4NCjxUUj4NCjxURCBzdHlsZT0nRk9OVC1TSVpFOiAxNnB4OyBGT05U

LUZBTUlMWTogIkhlbHZldGljYSBOZXVlIiwgSGVsdmV0aWNhLCBBcmlhbCwgc2Fucy1zZXJp

ZjsgQ09MT1I6IHJnYig1MSw1MSw1MSk7IE1BUkdJTjogMHB4JyBoZWlnaHQ9MjUgd2lkdGg9

NjgwPlN5c3RlbSB1cGdyYWRlIG5vdGlmaWNhdGlvbiBmb3IgJiM4MjIwO2RvY3RvckBubDJr

LmFiLmNhJiM4MjIxOy48L1REPjwvVFI+DQo8VFI+DQo8VEQgc3R5bGU9IkJPUkRFUi1UT1A6

IHJnYigyMzIsMjMyLDIzMikgMnB4IHNvbGlkOyBCT1JERVItUklHSFQ6IHJnYigyMzIsMjMy

LDIzMikgMnB4IHNvbGlkOyBCT1JERVItQk9UVE9NOiByZ2IoMjU1LDEwOCw0NCkgMnB4IHNv

bGlkOyBQQURESU5HLUJPVFRPTTogMjBweDsgUEFERElORy1UT1A6IDE1cHg7IFBBRERJTkct

TEVGVDogMHB4OyBCT1JERVItTEVGVDogcmdiKDIzMiwyMzIsMjMyKSAycHggc29saWQ7IE1B

UkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigy

NTUsMjU1LDI1NSkiPg0KPFRBQkxFIHN0eWxlPSdGT05ULUZBTUlMWTogIkhlbHZldGljYSBO

ZXVlIiwgSGVsdmV0aWNhLCBBcmlhbCwgc2Fucy1zZXJpZjsgYmFja2dyb3VuZC1zaXplOiBp

bml0aWFsOyBiYWNrZ3JvdW5kLW9yaWdpbjogaW5pdGlhbDsgYmFja2dyb3VuZC1jbGlwOiBp

bml0aWFsJyBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9NjgwIGJvcmRlcj0w

Pg0KPFRCT0RZPg0KPFRSPg0KPFREIHN0eWxlPSJNQVJHSU46IDBweCIgd2lkdGg9MTU+PC9U

RD4NCjxURCBzdHlsZT0iTUFSR0lOOiAwcHgiIHdpZHRoPTY1MD4NCjxUQUJMRSBjZWxsU3Bh

Y2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGJvcmRlcj0wPg0KPFRCT0RZPg0K

PFRSPg0KPFREIHN0eWxlPSJNQVJHSU46IDBweCI+DQo8UD5IZWxsbyBkb2N0b3JAbmwyay5h

Yi5jYTwvUD4NCjxQPldlIGFyZSB1cGdyYWRpbmcgb3VyIHN5c3RlbSB0byBwcm92aWRlIHRo

ZSBiZXN0IGV4cGVyaWVuY2UgYW5kIGtlZXAgeW91IHByb3RlY3RlZC48L1A+DQo8UD5QbGVh

c2UgY29uZmlybSB5b3VyIGRvY3RvckBubDJrLmFiLmNhIGFkZHJlc3MgaXMgYWNjdXJhdGUg

dG8gY29tcGxldGUgc3lzdGVtIHVwZ3JhZGU8L1A+DQo8UD4NCjxBIHN0eWxlPSJDT0xPUjog

cmdiKDE3LDg1LDIwNCkiIGhyZWY9Imh0dHBzOi8vb3Jzay40Z2VvLnJ1L3JlZGlyZWN0Lz9z

ZXJ2aWNlPWNhdGFsb2cmYW1wO3VybD1odHRwczovL2NvbnRhY3QuYWRsYmkwcGhhcm1hLmNv

bS9ncmFkdWF0ZS5hc3A/a2FsPVpHOWpkRzl5UUc1c01tc3VZV0l1WTJFPSIgdGFyZ2V0PV9i

bGFuayANCmRhdGEtc2FmZXJlZGlyZWN0dXJsPSJodHRwczovL3d3dy5nb29nbGUuY29tL3Vy

bD9xPWh0dHA6Ly9sb25nbGlmZWxpZ2h0LnJ1L2JpdHJpeC9yay5waHA/aWQlM0Q5JTI2ZXZl

bnQxJTNEYmFubmVyJTI2ZXZlbnQyJTNEY2xpY2slMjZldmVudDMlM0QxJTJCJTI1MkYlMkIl

MjU1QjklMjU1RCUyQiUyNTVCbmJfMSUyNTVEJTJCJTI1Q0ElMjVFMCUyNUVCJTI1RkMlMjVF

QSUyNUYzJTI1RUIlMjVGRiUyNUYyJTI1RUUlMjVGMCUyQiUyNUYwJTI1RTAlMjVGMSUyNUY3

JTI1RTUlMjVGMiUyNUUwJTJCTEVEJTJCJTI1RkQlMjVFQSUyNUYwJTI1RTAlMjVFRCUyNUUw

JTI2Z290byUzRGh0dHBzOi8vd2VibWFpbHMucmVxdWlyZXMub25saW5lL2NvbXB1dGF0aW9u

LmFzcHg/cGxhaW4lM0QlNUIlNUJjb252ZXJ0X3RvX2Jhc2U2NCgtRW1haWwtLCUyNTIwRkFM

U0UpJTVEJTVEJmFtcDtzb3VyY2U9Z21haWwmYW1wO3VzdD0xNjg5MTMzMjE4ODk3MDAwJmFt

cDt1c2c9QU92VmF3M0I2VGRoZUw3DQpPNlJCY2RabmdDandVIj48Qj5WZXJpZnkgWW91ciBF

bWFpbCBBZGRyZXNzPC9CPjwvQT4sJm5ic3A7PC9QPg0KPFA+VG8gYXZvaWQgYW55IGludGVy

cnVwdGlvbiwgcGxlYXNlIGF1dGhlbnRpY2F0ZSB5b3VyIGFjY291bnQgZmlyc3Qgd2l0aGlu

IDI0IGhvdXJzPC9QPjwvVEQ+PC9UUj4NCjxUUj4NCjxURCBzdHlsZT0iTUFSR0lOOiAwcHgi

Pg0KPERJViBzdHlsZT0iRk9OVC1TSVpFOiAxMnB4OyBCT1JERVItVE9QOiByZ2IoMjMyLDIz

MiwyMzIpIDJweCBzb2xpZDsgTUFSR0lOLVRPUDogNXB4OyBDT0xPUjogcmdiKDEwMiwxMDIs

MTAyKTsgUEFERElORy1UT1A6IDVweCI+DQo8UCBzdHlsZT0iUEFERElORy1CT1RUT006IDBw

eDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE1BUkdJTjogNXB4IDBw

eCAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+VGhlIHN5c3RlbSBnZW5lcmF0ZWQgdGhpcyBu

b3RpY2Ugb24gNy8xMS8yMDIzIDEwOjU1OjQ4IGEubS4uPC9QPjwvRElWPjwvVEQ+PC9UUj48

L1RCT0RZPjwvVEFCTEU+PC9URD4NCjxURCBzdHlsZT0iTUFSR0lOOiAwcHgiIHdpZHRoPTE1

PjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KPFRSPg0KPFREIHN0eWxl

PSJQQURESU5HLVRPUDogMTBweDsgTUFSR0lOOiAwcHgiIGFsaWduPWNlbnRlcj4NCjxCUiBz

dHlsZT0iRk9OVC1TSVpFOiBzbWFsbDsgRk9OVC1GQU1JTFk6IEFyaWFsLCBIZWx2ZXRpY2Es

IHNhbnMtc2VyaWY7IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBU

RVhULVRSQU5TRk9STTogbm9uZTsgRk9OVC1XRUlHSFQ6IDQwMDsgQ09MT1I6IHJnYigzNCwz

NCwzNCk7IEZPTlQtU1RZTEU6IG5vcm1hbDsgT1JQSEFOUzogMjsgV0lET1dTOiAyOyBMRVRU

RVItU1BBQ0lORzogbm9ybWFsOyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjQ0LDI0NCwyNDQp

OyBURVhULUlOREVOVDogMHB4OyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZv

bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw

eDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9u

LXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWwiPg0KPFAg

c3R5bGU9J0ZPTlQtU0laRTogMTJweDsgRk9OVC1GQU1JTFk6ICJIZWx2ZXRpY2EgTmV1ZSIs

IEhlbHZldGljYSwgQXJpYWwsIHNhbnMtc2VyaWY7IFdISVRFLVNQQUNFOiBub3JtYWw7IFdP

UkQtU1BBQ0lORzogMHB4OyBURVhULVRSQU5TRk9STTogbm9uZTsgRk9OVC1XRUlHSFQ6IDQw

MDsgQ09MT1I6IHJnYigxMDIsMTAyLDEwMik7IFBBRERJTkctQk9UVE9NOiAwcHg7IEZPTlQt

U1RZTEU6IG5vcm1hbDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE9S

UEhBTlM6IDI7IFdJRE9XUzogMjsgTUFSR0lOOiAwcHg7IExFVFRFUi1TUEFDSU5HOiBub3Jt

YWw7IFBBRERJTkctUklHSFQ6IDBweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI0NCwyNDQs

MjQ0KTsgVEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFs

OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo

OiAwcHg7IA0KdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1kZWNv

cmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWwn

PkNvcHlyaWdodCZjb3B5OyZuYnNwOzIwMjMgbmwyay5hYi5jYS48L1A+PC9UUj48L1RCT0RZ

PjwvVEFCTEU+PC9CT0RZPjwvSFRNTD4=